Job Search

We are seeking an experienced Cybersecurity Engineering Manager to lead a high-performing team responsible for designing, implementing and operating secure technology solutions across the UK and Ireland. This role will combine people leadership, technical direction and strategic delivery, helping to strengthen security capabilities while enabling the organisation to meet its business and technology objectives. You will work closely with engineering, architecture, infrastructure, product and risk teams to ensure security is embedded throughout the technology lifecycle.

Your responsibilities will include setting the team’s technical roadmap, prioritising initiatives, managing delivery and ensuring effective operational support. You will provide guidance on security architecture, cloud and application security, identity and access management, vulnerability management, detection and response, secure development practices and security automation. You will establish appropriate engineering standards, controls and metrics, oversee risk remediation, and support audits and regulatory requirements. The role will also involve incident leadership, stakeholder communication, budget and resource planning, supplier management, and continuous improvement of processes and tooling. You will translate complex security issues into clear recommendations for both technical and non-technical audiences.

The successful candidate will bring significant experience managing cybersecurity or security engineering teams, together with a strong background in enterprise security technologies and modern cloud environments. You should be comfortable balancing strategic planning with hands-on technical decision-making and have experience delivering complex programmes in a regulated or highly controlled environment. Knowledge of recognised security frameworks, secure architecture principles, DevSecOps, threat modelling and incident management is highly desirable. Excellent communication, influencing and coaching skills are essential, as is the ability to build effective relationships across multiple locations and functions. Relevant professional certifications or equivalent practical experience will be valued. This role offers the opportunity to shape security engineering strategy, develop talented professionals and make a measurable contribution to organisational resilience.

We are seeking a skilled Penetration Tester to identify, assess, and help remediate security weaknesses across applications, infrastructure, networks, cloud environments, and connected devices. You will plan and deliver authorised security assessments using a combination of manual testing, automated tools, threat modelling, and industry-standard methodologies. The role will involve working with technical and business stakeholders to understand systems, define testing objectives, and provide clear, evidence-based findings that support informed risk decisions.

Key responsibilities include conducting web application, API, mobile, internal network, external network, wireless, cloud, and social engineering assessments where appropriate. You will validate vulnerabilities, assess exploitability and business impact, document attack paths, and produce high-quality reports for both technical and non-technical audiences. You will also present results to stakeholders, support remediation activities, perform follow-up testing, and contribute to improving security testing processes, tooling, and internal knowledge bases. Maintaining accurate records and protecting sensitive information throughout each engagement will be essential.

The successful candidate will have demonstrable experience in penetration testing or an closely related cyber security role, with strong knowledge of common vulnerabilities, authentication and authorisation weaknesses, secure development principles, and network security concepts. Practical experience with tools such as Burp Suite, Nmap, Metasploit, and relevant scripting or programming languages is expected. Familiarity with OWASP Testing Guide, OWASP Top 10, NIST, CREST, or comparable frameworks is desirable. Professional certifications such as OSCP, CREST, GPEN, or equivalent practical experience will be valued. Strong analytical, written, and verbal communication skills are essential, along with curiosity, sound judgement, attention to detail, and the ability to manage multiple assessments responsibly.

We are seeking an experienced Associate Director, Identity Governance and Administration to lead the development and delivery of a mature, risk-based identity governance capability in Manchester. This senior role will provide strategic direction across identity lifecycle management, access governance, privileged access oversight, role-based access control and segregation of duties. You will work closely with technology, information security, risk, compliance and business stakeholders to ensure that access to systems and data is appropriate, auditable and aligned with organisational policies.

You will define and maintain the identity governance roadmap, establish effective operating models and drive continuous improvement across joiner, mover and leaver processes, access requests, approvals, certifications and remediation activity. Responsibilities will include overseeing governance controls, metrics and reporting; strengthening policy and standards; managing control testing and audit responses; and ensuring that risks and exceptions are identified, documented and resolved. You will also provide leadership for complex transformation initiatives, including the optimisation of identity platforms, automation of manual processes and integration with human resources, directory, cloud and business-critical applications. The role will involve managing senior stakeholders, influencing decision-making and developing strong relationships with delivery partners and suppliers.

Applicants should have substantial experience in identity and access management, identity governance or a closely related information security discipline, together with a strong understanding of access control principles, regulatory expectations and technology risk. Experience leading enterprise-scale programmes, implementing or enhancing IGA solutions, and operating within complex, regulated environments is highly desirable. You will be an accomplished people and programme leader, able to translate technical issues into clear business outcomes and communicate confidently at executive level. Strong analytical, organisational and problem-solving skills are essential, as is a pragmatic approach to balancing security, compliance and user experience. Relevant professional qualifications in information security, risk, audit or technology management would be advantageous.

We are seeking a Delivery Consultant to join a global security professional services team and help customers design, implement, and improve secure technology environments. In this role, you will work closely with security, infrastructure, development, and business stakeholders to understand their objectives, assess risks, and deliver practical solutions aligned with industry standards and organisational priorities. You will contribute across the full engagement lifecycle, from discovery and planning through implementation, knowledge transfer, and post-delivery support.

Key responsibilities include leading or supporting security consulting engagements, developing technical designs and implementation plans, configuring and integrating security services, and producing clear project documentation. You may work on areas such as cloud security, identity and access management, network protection, security monitoring, vulnerability management, incident readiness, data protection, and compliance. You will be expected to communicate effectively with both technical and non-technical audiences, manage delivery risks and dependencies, provide regular status updates, and ensure that solutions are delivered to a high standard. The role may also involve creating reusable guidance, presenting recommendations, mentoring colleagues, and contributing to continuous improvement across the professional services practice.

The successful candidate will have experience delivering security or technology projects in a consulting, managed services, or enterprise environment, together with a strong understanding of security principles, architecture, and risk management. Experience with public cloud platforms, automation, infrastructure as code, security tooling, or relevant regulatory frameworks would be advantageous. You should be comfortable working independently and collaboratively, managing competing priorities, and adapting to changing customer requirements. Strong analytical, problem-solving, documentation, and presentation skills are essential. Relevant professional certifications in cloud, cybersecurity, architecture, or project delivery are desirable. The position may require occasional travel and the ability to work with geographically distributed teams and customers.

We are seeking an experienced OT Cyber Security Senior Manager to lead the development and delivery of cybersecurity strategy across operational technology environments. This role will be responsible for protecting critical industrial systems, connected assets, control networks and supporting infrastructure while enabling safe, reliable and compliant operations. You will provide strategic direction, technical leadership and expert advice to senior stakeholders, engineering teams, site leaders and technology functions.

Key responsibilities will include defining and maintaining the OT cybersecurity roadmap, governance framework, policies, standards and secure architecture principles. You will oversee risk assessments, threat modelling, vulnerability management, incident response readiness, security monitoring and resilience planning across geographically dispersed environments. The role will lead the implementation of controls aligned with recognised standards and regulations, such as IEC 62443, NIST, ISO 27001 and relevant critical infrastructure requirements. You will also manage security improvement programmes, support investment planning, review third-party and supply-chain risks, and ensure that cybersecurity requirements are embedded throughout the lifecycle of OT systems, from design and procurement through to operation and decommissioning.

The successful candidate will have significant experience leading OT, industrial control systems or critical infrastructure cybersecurity programmes, together with a strong understanding of network segmentation, secure remote access, asset discovery, vulnerability management, identity and access controls, and incident response in operational environments. Experience working with engineering, manufacturing, utilities, energy or other industrial sectors is highly desirable. You will be an effective people leader with a track record of building high-performing teams, influencing senior stakeholders and managing complex, cross-functional initiatives. Strong communication, decision-making and risk-management skills are essential, as is the ability to balance security requirements with safety, availability and operational performance. Relevant professional certifications and qualifications in cybersecurity, industrial control systems or risk management would be advantageous.

We are seeking a Security Data Engineer to design, build and maintain reliable data solutions that support cyber security monitoring, threat detection and risk management. You will work with security analysts, engineers and wider technology teams to ensure that security data is collected, processed and made available in a consistent, timely and actionable way. The role involves developing data pipelines, integrating information from cloud platforms, applications, endpoints, identity systems and network technologies, and improving the quality, accessibility and governance of security data.

Your responsibilities will include designing scalable ingestion and transformation processes; developing and maintaining data models, schemas and security-focused datasets; and supporting dashboards, alerts, reports and analytical tools used to identify suspicious activity. You will help establish standards for data classification, retention, lineage, access control and validation, while monitoring pipeline performance and resolving data quality or availability issues. You will also contribute to the automation of operational tasks, the implementation of secure engineering practices and the continuous improvement of detection and response capabilities. Clear documentation and constructive collaboration will be essential, including translating complex technical information for both specialist and non-specialist stakeholders.

We are looking for experience in data engineering, security engineering, analytics engineering or a related technical discipline. You should be confident working with SQL and a programming language such as Python, and have practical experience with data pipelines, APIs, distributed processing or cloud-based data platforms. Familiarity with security information and event management, endpoint telemetry, identity data, threat intelligence or common security frameworks would be advantageous. Experience with infrastructure as code, version control, testing, CI/CD and observability tools is also desirable. You will need strong problem-solving skills, attention to detail and a proactive approach to working in a changing environment. Relevant professional certifications or equivalent hands-on experience are welcome.

We are seeking an experienced Data Protection Architect to design and oversee secure, resilient data protection solutions across cloud, hybrid and on-premises environments. You will define architectural standards for data backup, recovery, retention, archiving, replication and cyber recovery, ensuring that critical information remains available, protected and compliant with regulatory requirements. The role will work closely with security, infrastructure, application, compliance and business teams to translate operational needs into practical, scalable and cost-effective designs.

Key responsibilities include assessing current data protection capabilities, identifying risks and resilience gaps, and developing target-state architectures and roadmaps. You will establish policies and technical patterns for backup immutability, encryption, access control, segregation of duties, disaster recovery and ransomware resilience. You will lead the evaluation of platforms and services, produce high-quality architecture documentation, and provide technical assurance throughout solution delivery. The role will also support recovery testing, audit activity, incident response and continuous improvement, using metrics and reporting to demonstrate service performance and compliance.

Applicants should have substantial experience in data protection, backup and recovery architecture, with a strong understanding of enterprise infrastructure, cloud services, storage, networking and identity management. Experience designing solutions across hybrid environments and familiarity with regulatory frameworks, information governance and business continuity principles are essential. Knowledge of automated deployment, monitoring, scripting and infrastructure-as-code would be advantageous, as would relevant professional certifications in cloud, security, architecture or data protection. You will be a confident communicator who can explain complex technical concepts to varied audiences, influence stakeholders, manage competing priorities and make sound decisions in a changing environment.

We are seeking an Information Security (GRC) Analyst to support the development, operation and continuous improvement of information security governance, risk and compliance activities. Working with teams across the business, you will help ensure that security controls, policies and processes are appropriately designed, implemented, documented and monitored. This is an opportunity to contribute to a maturing security function and help strengthen the organisation’s ability to manage information and technology risks effectively.

Your responsibilities will include maintaining information security policies, standards, procedures and control frameworks; supporting risk assessments, control testing and remediation tracking; and preparing clear reports on security risks, control effectiveness and compliance status. You will coordinate evidence collection for internal and external audits, certifications and customer assessments, while monitoring progress against agreed actions. The role will also involve maintaining risk and compliance registers, supporting third-party and supplier security reviews, assisting with security awareness initiatives, and providing guidance to stakeholders on governance and control requirements. You may also contribute to incident reviews, business continuity activities, data protection assessments and the implementation of regulatory or industry changes.

The successful candidate will have experience in information security governance, risk management, compliance, audit or a closely related discipline. You should be comfortable interpreting policies and regulatory requirements, assessing control maturity, analysing evidence and communicating findings to both technical and non-technical audiences. Familiarity with frameworks such as ISO 27001, NIST, CIS Controls, COBIT or SOC 2 is desirable, as is experience with third-party risk management, privacy principles and security assurance processes. Strong organisational skills, attention to detail and the ability to manage multiple priorities are essential. Relevant qualifications such as CISA, CRISC, ISO 27001, CISSP or equivalent experience would be advantageous. A proactive, collaborative approach and a commitment to continuous improvement are key to success in this role.

We are seeking an AI Security Architect to define and advance security strategies for artificial intelligence, machine learning, and data-driven technologies. In this role, you will establish secure-by-design principles across the AI lifecycle, from data collection and model development through deployment, monitoring, and retirement. You will assess emerging AI technologies, identify security and privacy risks, and translate complex technical findings into practical controls, standards, and implementation guidance.

Your responsibilities will include designing reference architectures for secure AI platforms; conducting threat modelling, risk assessments, and architecture reviews; and developing controls to address prompt injection, data poisoning, model theft, adversarial attacks, insecure integrations, unauthorised access, and sensitive data exposure. You will collaborate with engineering, data science, cloud, privacy, compliance, and enterprise architecture teams to embed security into delivery processes. You will also support incident response, vulnerability management, security testing, third-party assessments, and the continuous improvement of AI governance frameworks. Where appropriate, you will help define security metrics, assurance processes, and monitoring capabilities for models and AI-enabled applications.

The successful candidate will have significant experience in cybersecurity architecture, application security, cloud security, or a related discipline, with practical knowledge of AI and machine learning systems. You should understand identity and access management, encryption, secure software development, data protection, network security, and risk management. Experience with AI threat frameworks, model evaluation, red teaming, large language models, MLOps, or responsible AI practices is highly desirable. Strong communication and stakeholder-management skills are essential, as is the ability to explain complex risks clearly to both technical and non-technical audiences. Relevant professional certifications in security, cloud, architecture, privacy, or risk are advantageous. A curious, pragmatic, and collaborative approach will help you succeed in this role.

We are seeking a Senior Splunk and DLP Security Engineer to design, implement, and maintain security monitoring and data protection capabilities across a complex enterprise environment. This role will lead the development of Splunk dashboards, reports, alerts, and correlation searches to identify suspicious activity, support threat detection, and improve incident response. You will also administer and optimise Data Loss Prevention (DLP) technologies, helping to protect sensitive information across endpoints, networks, cloud services, email, and other business platforms.

Key responsibilities include onboarding and normalising security data sources, developing detection use cases, tuning alerts to reduce false positives, and investigating complex security events. You will collaborate with security operations, infrastructure, application, compliance, and risk teams to define monitoring requirements and ensure effective control coverage. The role will involve analysing DLP incidents, refining policies, supporting investigations, documenting procedures, and recommending improvements to prevent data leakage. You will contribute to threat hunting, security automation, incident response, audit preparation, and the continuous improvement of security operations processes.

The successful candidate will have substantial experience with Splunk Enterprise and/or Splunk Enterprise Security, including SPL, data onboarding, parsing, dashboards, alerting, and performance optimisation. Strong hands-on knowledge of DLP solutions, policy development, endpoint controls, incident triage, and sensitive data classification is required. Experience with SIEM technologies, threat intelligence, network and endpoint security, cloud environments, and security frameworks will be advantageous. You should be comfortable working with large and complex datasets, translating technical findings for varied audiences, and managing priorities in a fast-paced environment. Relevant security certifications such as Splunk certifications, CISSP, GIAC, or equivalent professional experience are desirable.