Job Search

We are seeking a skilled Security Engineer to help protect critical systems, applications and data across a complex technology environment. This role will suit someone who combines strong technical expertise with a practical, risk-aware approach and enjoys working collaboratively with engineering, infrastructure and operations teams.

You will design, implement and maintain security controls across cloud and on-premises environments, supporting secure infrastructure, applications and development practices. Your responsibilities will include monitoring and investigating security alerts, contributing to incident response, identifying vulnerabilities and helping teams remediate risks effectively. You will also support threat modelling, security testing and the continuous improvement of defensive capabilities.

The role will involve developing and maintaining security standards, policies and technical documentation, as well as advising on secure architecture and system design. You will work with colleagues to embed security throughout the software development lifecycle, including code review, dependency management, secrets handling and automated security testing. Where appropriate, you will help improve security tooling, detection rules, dashboards and operational processes.

Applicants should have professional experience in security engineering, cyber security, infrastructure security or a related discipline. You will need a sound understanding of networking, identity and access management, operating systems, cloud platforms and common security technologies. Experience with vulnerability management, security monitoring, incident response and scripting or automation would be highly advantageous.

We are looking for someone who can analyse complex issues, communicate clearly with both technical and non-technical stakeholders, and make sound decisions under pressure. You should be organised, curious and committed to continuous learning, with the ability to balance secure practices against operational and delivery requirements. Relevant professional certifications or equivalent practical experience are welcomed.

This is an opportunity to play a key role in strengthening security maturity, reducing risk and enabling teams to deliver reliable technology with confidence.

We are seeking a Cyber Security Senior Consultant to lead and influence the delivery of secure-by-design practices across complex technology, product and transformation programmes. This is an opportunity to help embed security from the earliest stages of planning, ensuring that new services and changes are resilient, compliant and aligned with organisational risk appetite.

You will work closely with architects, engineers, delivery teams, product owners and senior stakeholders to identify security requirements, assess risks and develop practical security solutions. You will provide expert guidance throughout the delivery lifecycle, from initial concept and design through implementation, testing and operational handover.

Your responsibilities will include reviewing architectures and designs, carrying out threat modelling and security risk assessments, defining appropriate controls, and challenging proposed solutions where necessary. You will contribute to security patterns, standards and principles, while supporting teams to interpret and apply them consistently. You will also help assess third-party and cloud-based solutions, review technical documentation, and ensure that security decisions are clearly recorded and traceable.

The role will involve influencing without direct authority, helping to build a strong security culture and improving the adoption of secure development and engineering practices. You may also support security assurance activities, regulatory and audit requirements, incident learning, and the continuous improvement of governance, processes and tooling.

We are looking for significant experience in cyber security consultancy, security architecture, risk management or a related discipline, ideally within a large, complex or highly regulated environment. You should have a strong understanding of secure-by-design principles, threat modelling, identity and access management, network security, cloud technologies, application security and data protection.

Excellent communication and stakeholder management skills are essential, together with the ability to translate technical risks into clear business implications and actionable recommendations. Relevant professional certifications, such as CISSP, CISM, SABSA, CCSP or equivalent experience, would be advantageous. You will be analytical, pragmatic and confident working across multiple priorities while maintaining a strong focus on customer outcomes and security assurance.

We are seeking a Security Engineer to help protect a growing technology environment from evolving cyber threats. You will work across infrastructure, applications and cloud services, applying practical security controls and supporting the continuous improvement of our security posture. This is an excellent opportunity for someone who enjoys solving complex problems, investigating incidents and working collaboratively with technical teams.

Your responsibilities will include monitoring and responding to security alerts, investigating suspected incidents and supporting post-incident reviews. You will conduct vulnerability assessments, help prioritise remediation activity and advise on secure configuration across systems, networks and cloud platforms. You will also contribute to threat modelling, security testing and the development of automation that improves detection, response and compliance.

You will partner with software engineers, platform teams and other stakeholders to embed security throughout the development and operational lifecycle. This will include reviewing architecture and technical changes, promoting secure coding practices, maintaining security documentation and contributing to policies, standards and risk assessments. You may also support security audits and help ensure that appropriate controls are implemented and evidenced.

We are looking for experience in a security engineering, infrastructure security or related role, with a sound understanding of network security, identity and access management, vulnerability management and incident response. Familiarity with cloud environments, security monitoring platforms, endpoint protection and scripting or automation is highly desirable. Knowledge of common security frameworks and standards, such as ISO 27001, NIST or CIS Controls, would be beneficial.

You should be analytical, curious and comfortable communicating technical risks to both technical and non-technical audiences. The ability to prioritise effectively, work independently and collaborate across teams is essential. Relevant professional certifications or demonstrable equivalent experience are welcome, alongside a commitment to continuous learning and responsible security practice.

We are seeking an experienced Vulnerability Manager to lead the development and delivery of a comprehensive vulnerability management capability across a complex technology environment. This role will be responsible for identifying, assessing and reducing cyber security risk across infrastructure, applications, cloud services, endpoints and network assets.

You will own the vulnerability management lifecycle, from discovery and scanning through to prioritisation, remediation and verification. Working closely with infrastructure, engineering, application, cloud and security teams, you will ensure vulnerabilities are assessed according to business impact, exploitability and asset criticality. You will establish clear remediation expectations, monitor progress against service levels and provide constructive challenge where risks remain unresolved.

Key responsibilities will include managing vulnerability scanning and assessment tools, improving asset coverage and data quality, validating findings, supporting risk-based remediation and coordinating responses to critical or actively exploited vulnerabilities. You will produce regular management information and dashboards, highlighting trends, overdue actions, emerging threats and areas requiring senior attention. You will also contribute to vulnerability-related policies, standards, procedures and governance forums.

The successful candidate will have substantial experience in vulnerability management, cyber security operations or a related discipline, with a strong understanding of common vulnerability scoring, threat intelligence, security controls and remediation practices. Experience with enterprise-scale scanning platforms, cloud environments, operating systems, databases and web applications is highly desirable. You should be comfortable interpreting technical findings and translating them into clear business risks and practical actions.

Excellent communication and stakeholder management skills are essential, as you will work with both technical and non-technical audiences. You will be organised, analytical and confident managing competing priorities in a fast-moving environment. Relevant professional qualifications or certifications in cyber security, vulnerability management or risk, such as CISSP, CISM, CREST or equivalent experience, would be advantageous.

This is an opportunity to shape a mature, risk-led vulnerability management function and make a measurable contribution to the protection and resilience of critical services.

We are seeking an experienced Vulnerability Manager to lead the development and delivery of a robust vulnerability management capability across a complex, technology-led organisation. This role will be responsible for identifying, assessing, prioritising and overseeing the remediation of vulnerabilities across infrastructure, applications, cloud services, networks, endpoints and third-party environments. You will work closely with cyber security, technology, engineering, risk and compliance teams to reduce exposure to threats and strengthen the organisation’s overall security posture.

Key responsibilities will include owning vulnerability management policies, standards, processes and performance measures; managing regular vulnerability scanning and assessment activities; validating findings and applying risk-based prioritisation; and monitoring remediation plans through to completion. You will investigate trends, produce clear management information and provide regular reporting on risk, progress, exceptions and overdue actions. The role will also involve supporting incident response, threat-led assessments, penetration testing and remediation verification, as well as contributing to security improvement programmes. You will help define service-level expectations, develop dashboards and metrics, and promote consistent vulnerability management practices across technical teams and suppliers.

The successful candidate will have substantial experience in vulnerability management, cyber security or a closely related discipline, ideally within a large, complex or highly regulated environment. You will have a strong understanding of vulnerability assessment methodologies, risk frameworks, CVSS, threat intelligence, remediation processes and security controls. Experience with vulnerability management platforms, scanning tools, asset discovery and reporting technologies is essential, alongside the ability to interpret technical findings and communicate their business impact to senior stakeholders. Relevant professional qualifications, such as CISSP, CISM, CRISC or recognised vulnerability management certifications, would be advantageous. Excellent communication, organisation and influencing skills are required, together with a practical, collaborative approach and the confidence to challenge constructively while maintaining strong working relationships.

We are seeking an experienced Security Assurance Lead to strengthen the organisation’s approach to information and cyber security assurance across a complex technology and business environment. The successful candidate will lead assurance activities that provide confidence in the effectiveness of security controls, risk management processes and compliance obligations. This role will work closely with technology, architecture, engineering, operational risk, audit and business teams to identify weaknesses, support remediation and promote a strong security culture.

Key responsibilities will include developing and delivering a risk-based security assurance plan; coordinating control assessments, compliance reviews and internal or external audits; and monitoring the timely resolution of findings and agreed remediation actions. You will assess security controls across infrastructure, applications, cloud services, suppliers and change initiatives, ensuring that risks are documented, prioritised and managed appropriately. The role will also contribute to security governance, policy development, risk reporting and management information, presenting clear insights and recommendations to senior stakeholders. Where required, you will support regulatory, customer and third-party assurance activities, including responses to evidence requests and security questionnaires.

Applicants should have substantial experience in information security, cyber assurance, technology risk, audit or a related discipline, together with a strong understanding of recognised security frameworks and control standards. Experience of working with frameworks such as ISO 27001, NIST, CIS Controls or similar would be valuable, as would relevant professional qualifications in security, audit, risk or governance. You will be confident interpreting technical information, challenging constructively and communicating complex issues clearly to both technical and non-technical audiences. Strong organisation, analytical thinking, attention to detail and the ability to influence stakeholders at all levels are essential. Experience in a large, regulated or highly complex environment, along with knowledge of cloud, third-party and operational resilience risks, would be advantageous.

We are seeking a Senior Infrastructure Security Consultant – Server Hardening to strengthen the security and resilience of enterprise server environments. In this role, you will provide expert guidance on secure server configuration, vulnerability reduction and compliance across physical, virtual and cloud-based infrastructure. You will work closely with infrastructure, operations, architecture and risk teams to assess current environments, define security standards and deliver practical improvements across the technology estate.

Your responsibilities will include developing, maintaining and implementing server hardening standards aligned with recognised frameworks and industry best practice. You will conduct security assessments, configuration reviews and vulnerability analysis across Windows and Linux platforms, identify gaps and recommend appropriate remediation. The role will involve creating secure build guides, configuration baselines, technical procedures and exception processes, as well as supporting patching, system lifecycle management and remediation tracking. You will also contribute to security architecture reviews, control testing, audit preparation and the continuous improvement of infrastructure security processes.

The successful candidate will have significant experience in infrastructure security, server hardening or a closely related consulting role, with strong knowledge of Windows Server and Linux operating systems. Experience with cloud platforms, virtualisation technologies, configuration management, vulnerability scanners and security information and event management tools would be highly beneficial. You should be familiar with standards and frameworks such as CIS Benchmarks, NIST, ISO 27001 and secure configuration principles. Strong analytical, documentation and stakeholder-management skills are essential, along with the ability to communicate complex technical issues clearly to both technical and non-technical audiences. Relevant professional certifications in information security, systems administration or cloud security are desirable.

We are seeking an IT Security and Infrastructure Analyst to support the secure, reliable and efficient operation of a modern technology environment. This role will combine infrastructure administration, cybersecurity monitoring, technical investigation and continuous improvement. You will work closely with colleagues across technology and the wider business to protect systems and data, maintain service availability and help ensure that technology platforms meet operational and regulatory requirements.

Key responsibilities will include monitoring security alerts, investigating incidents and vulnerabilities, and supporting the implementation of appropriate remediation activities. You will administer and maintain infrastructure services such as servers, networks, cloud platforms, identity and access management, endpoint technologies, backups and security tools. The role will also involve reviewing logs, assisting with security assessments, maintaining technical documentation, contributing to disaster recovery and business continuity planning, and supporting the development of policies, standards and operating procedures. You will participate in technology projects, provide technical advice, and help identify opportunities to improve resilience, automation and overall security maturity.

Applicants should have experience in IT infrastructure, systems administration or information security, with a sound understanding of networking, operating systems, cloud technologies, access controls, vulnerability management and incident response. Familiarity with security monitoring tools, Microsoft environments, firewalls, endpoint protection, backup solutions and recognised security frameworks would be advantageous. Relevant professional qualifications or certifications are welcome, alongside a commitment to ongoing learning. You will be analytical, organised and able to communicate clearly with both technical and non-technical audiences. The successful candidate will demonstrate sound judgement, strong problem-solving skills, attention to detail and the ability to manage competing priorities while handling sensitive information responsibly.

We are seeking an experienced Security & Networks Portfolio Director to lead the strategic direction, governance and delivery of a complex portfolio spanning cyber security, network infrastructure and associated technology services. This senior role will be responsible for ensuring that security and network capabilities support organisational priorities, enable operational resilience and provide a secure foundation for future growth. You will define portfolio strategy, manage investment priorities and oversee the development of effective roadmaps aligned with business and technology objectives.

You will lead a diverse portfolio of programmes, projects and operational improvements, ensuring delivery is well governed, financially controlled and aligned with agreed outcomes. Responsibilities will include setting standards and target architectures, managing risks and dependencies, monitoring performance, and ensuring compliance with relevant legislation, regulatory obligations and industry frameworks. You will work closely with senior stakeholders to understand business requirements, communicate complex technical matters clearly and provide informed recommendations on investment, risk and prioritisation. The role will also involve oversight of third-party suppliers, contract performance, service quality and continuous improvement across the portfolio.

The successful candidate will bring substantial leadership experience in cyber security, network services, technology transformation or a related environment, together with a proven record of managing large-scale portfolios and delivering change in complex organisations. You will have strong knowledge of security principles, network architecture, infrastructure operations, identity and access management, resilience and risk management. Excellent commercial, financial and governance skills are essential, as is the ability to influence at executive level and build effective relationships across technical and non-technical teams. A collaborative, pragmatic and outcome-focused approach is required, supported by strong communication, negotiation and decision-making skills. Relevant professional qualifications in security, networking, project or portfolio management would be advantageous.