Job Search

We are seeking an Application Security Engineer to help strengthen the security of applications and services throughout their development lifecycle. Working closely with software engineers, architects, DevOps specialists and product teams, you will identify security risks early, provide practical remediation guidance and promote secure-by-design principles across a varied technology environment. This is an opportunity to influence engineering practices, improve security maturity and support the delivery of resilient digital products.

Your responsibilities will include conducting application security reviews, threat modelling, vulnerability assessments and penetration testing, as well as analysing findings from automated security tools. You will help integrate security checks into CI/CD pipelines, improve software composition analysis and static and dynamic testing capabilities, and support teams in prioritising and resolving vulnerabilities. You will also contribute to secure coding guidance, developer training, security standards and architectural reviews. Where incidents or emerging threats affect applications, you may assist with investigation, containment and lessons-learned activities.

The successful candidate will have professional experience in application security, software development, cybersecurity engineering or a related discipline, with a solid understanding of secure development lifecycles and common vulnerability classes such as those identified by OWASP. Experience with tools for SAST, DAST, dependency scanning, secrets detection, code review or penetration testing is highly desirable. You should be comfortable working with modern web applications, APIs, cloud environments and version-control systems, and be able to interpret technical findings in a business-focused way. Strong communication, analytical and collaboration skills are essential, along with the ability to explain complex security issues clearly to both technical and non-technical audiences. Relevant certifications or demonstrable equivalent experience are welcome.

We are seeking a Senior InfoSec Engineer to help strengthen and evolve information security across a complex technology environment. This role will be responsible for designing, implementing and maintaining effective security controls that protect systems, applications, data and services from evolving threats. You will work closely with infrastructure, software engineering, cloud, risk and compliance teams to embed security throughout the technology lifecycle and support a strong culture of secure delivery.

Your responsibilities will include leading security assessments, identifying vulnerabilities and recommending practical remediation plans; monitoring and responding to security incidents; and improving detection, investigation and response capabilities. You will contribute to threat modelling, penetration testing, security architecture reviews and the development of policies, standards and technical guidance. The role will also involve managing security tooling, supporting identity and access management, reviewing cloud and network configurations, and helping prepare evidence for audits and regulatory requirements. You will be expected to translate complex technical risks into clear advice for both technical and non-technical stakeholders.

We are looking for substantial experience in information security engineering, with strong knowledge of network security, endpoint protection, vulnerability management, secure software development and cloud security principles. Experience with security monitoring and SIEM platforms, incident response, automation or scripting, and identity technologies will be highly beneficial. Relevant professional certifications or equivalent practical experience are welcome. You should be analytical, proactive and comfortable working independently while influencing teams across an organisation. Excellent communication skills, sound judgement and a continuous-improvement mindset are essential, along with the ability to prioritise effectively in a changing environment.

We are seeking a Data Protection Specialist (0619) to support the effective management, implementation and continuous improvement of data protection and privacy practices. The successful candidate will provide practical advice on the collection, use, storage, sharing and retention of personal data, helping teams meet applicable legal, regulatory and organisational requirements. This role will work with stakeholders across the organisation to promote responsible information handling and strengthen a culture of privacy and accountability.

Key responsibilities will include maintaining records of processing activities, supporting data protection impact assessments, reviewing privacy notices, and advising on data sharing arrangements, contracts and information governance procedures. You will monitor compliance with policies and relevant legislation, assist with the management of individual rights requests, and support the investigation, recording and reporting of personal data breaches. The role will also contribute to staff training and awareness activities, prepare reports and management information, and help identify and address privacy risks through audits, reviews and improvement plans.

Applicants should have experience in data protection, information governance, privacy, compliance or a closely related field, with a sound understanding of data protection principles and their practical application. Knowledge of relevant legislation and regulatory guidance is essential, alongside the ability to interpret requirements and provide clear, proportionate advice to non-specialists. Strong analytical, organisational and written communication skills are required, together with discretion when handling sensitive information. You should be confident working independently and collaboratively, managing competing priorities, maintaining accurate records and building effective relationships with colleagues and external partners. A relevant professional qualification or recognised privacy certification would be advantageous, as would experience using case management, governance or records management systems.

We are seeking a Lead Game Security Engineer to define and advance security strategy across game development, live operations, online services, and supporting infrastructure. You will lead efforts to protect players, platforms, intellectual property, and competitive integrity against evolving threats, including cheating, fraud, account compromise, abuse of APIs, exploitation of game logic, and unauthorised access. Working closely with engineering, product, infrastructure, trust and safety, legal, and operations teams, you will translate security risks into practical, prioritised solutions that support a high-quality player experience.

Your responsibilities will include establishing secure development standards, reviewing game and service architectures, conducting threat modelling, and guiding security assessments throughout the software development lifecycle. You will design and improve anti-cheat, detection, prevention, and response capabilities, using telemetry, behavioural analysis, automation, and threat intelligence to identify suspicious activity. You will lead investigations into security incidents and abuse patterns, coordinate containment and remediation, and create clear reporting for technical and senior stakeholders. You will also mentor engineers, promote security awareness, evaluate external tools and partners, and help shape long-term security roadmaps and operational processes.

The ideal candidate has substantial experience in game security, application security, platform security, anti-cheat engineering, or a closely related field, including experience leading technical initiatives or teams. You should have strong knowledge of client-server architectures, multiplayer systems, APIs, authentication, encryption, operating systems, cloud environments, and common attack techniques. Experience with reverse engineering, exploit analysis, malware or bot detection, fraud prevention, security monitoring, and programming in languages such as C++, C#, Python, or Go is highly desirable. Excellent communication, analytical, and leadership skills are essential, along with the ability to balance robust protection, performance, privacy, and player accessibility in a fast-moving development environment.

We are seeking a Cyber Security Delivery Partner to lead the successful delivery of security initiatives across a complex and evolving technology environment. Working closely with technology, risk, compliance and business stakeholders, you will translate cyber security strategy into practical delivery plans, ensuring that projects meet agreed objectives, timelines, quality standards and regulatory expectations. You will act as a trusted partner to delivery teams, providing constructive challenge and helping to embed security throughout the project lifecycle.

Your responsibilities will include managing a portfolio of cyber security and technology-enabled change initiatives, coordinating dependencies, monitoring risks, issues, budgets and milestones, and providing clear progress reporting to senior stakeholders. You will support the delivery of programmes covering areas such as identity and access management, cloud security, vulnerability management, security operations, resilience, data protection and regulatory compliance. You will also help define delivery standards, improve governance and assurance processes, and ensure that security requirements, controls and acceptance criteria are clearly documented and evidenced.

The successful candidate will have demonstrable experience delivering cyber security, information security or technology risk programmes within a complex organisation. You will be confident managing multiple workstreams, influencing stakeholders at all levels and working collaboratively with technical and non-technical teams. Strong knowledge of cyber security principles, delivery methodologies, risk management and security governance is essential, alongside excellent communication, organisation and problem-solving skills. Experience of Agile, waterfall or hybrid delivery environments, relevant professional certifications, and familiarity with industry frameworks such as NIST, ISO 27001 or CIS Controls would be advantageous. This role offers the opportunity to make a meaningful contribution to security maturity while supporting the delivery of strategic business change.

We are seeking a Cyber Security Delivery Support professional to help coordinate and deliver a range of security projects, operational activities and improvement initiatives. Working closely with cyber security specialists, technology teams, suppliers and business stakeholders, you will help ensure that work is planned, tracked and completed to a high standard. This is an excellent opportunity for an organised and proactive individual who is interested in developing a career in cyber security and technology delivery.

Responsibilities will include maintaining delivery plans, action logs, risk and issue registers, schedules and project documentation; arranging meetings, preparing agendas and recording clear decisions and actions; monitoring progress against milestones; and producing accurate status updates for relevant stakeholders. You will support governance and reporting processes, help coordinate security assessments and remediation activity, and assist with the implementation of policies, controls, tooling and other cyber security improvements. The role will also involve managing information securely, following established processes, escalating concerns appropriately and helping ensure that deliverables meet agreed quality, risk and compliance standards.

Applicants should have experience in an administrative, project support, service delivery or technology-related role, ideally within a cyber security, information technology or regulated environment. You will need strong organisational and time-management skills, excellent written and verbal communication, and the ability to build effective working relationships with people at different levels. Attention to detail, confidence working with spreadsheets and collaboration tools, and the ability to manage competing priorities are essential. A practical understanding of cyber security concepts, risk management, data protection or project delivery frameworks would be advantageous. You should be dependable, adaptable and comfortable working independently while contributing positively to a wider team.

We are seeking a Security Engineer III to design, implement, and maintain robust security controls across enterprise systems, applications, networks, and cloud environments. This role will help protect critical information assets by identifying risks, strengthening defensive capabilities, and supporting the continuous improvement of security operations. The successful candidate will work closely with infrastructure, software development, engineering, and compliance teams to embed security throughout the technology lifecycle.

Responsibilities include developing and tuning security controls, monitoring systems for suspicious activity, investigating and responding to security incidents, and conducting vulnerability assessments and risk reviews. You will contribute to security architecture and threat modelling, recommend practical remediation strategies, and support secure configuration standards for operating systems, networks, endpoints, applications, and cloud services. The role will also involve automating repetitive security processes, maintaining technical documentation, participating in security testing, and helping ensure alignment with relevant policies, standards, and regulatory requirements. You may be asked to mentor less experienced engineers and provide technical guidance on complex security issues.

Applicants should have substantial experience in information security engineering, with a strong understanding of network security, identity and access management, encryption, vulnerability management, incident response, and security monitoring. Experience with cloud platforms, SIEM technologies, endpoint protection, infrastructure-as-code, scripting, and security automation is highly desirable. Familiarity with frameworks such as NIST, ISO 27001, CIS Controls, or similar standards will be advantageous. Strong analytical, communication, and problem-solving skills are essential, together with the ability to manage competing priorities and explain technical risks to both technical and non-technical audiences. Relevant professional certifications or equivalent practical experience are welcomed.

We are seeking an experienced Lead Cyber Security Consultant to deliver high-quality penetration testing and security consultancy services for a diverse range of clients across the UK. Working as a technical lead, you will plan and manage engagements from scoping through to reporting, ensuring that assessments are delivered to a consistently high standard and in line with relevant CHECK requirements, industry good practice and client expectations. The role will involve testing infrastructure, applications, networks, cloud environments and other technologies, identifying vulnerabilities, validating their business impact and providing clear, practical remediation advice.

You will act as a trusted advisor to clients, presenting findings to both technical and senior stakeholders and supporting them in prioritising risk reduction. Responsibilities will include reviewing statements of work, producing engagement plans and test strategies, quality-assuring technical reports, contributing to proposals and supporting business development activities. You will also provide technical leadership to consultants, coach less experienced team members, review their work and help develop internal methodologies, tools and service offerings. The role may include coordinating multiple concurrent engagements and maintaining strong relationships throughout the delivery lifecycle.

The successful candidate will have substantial professional experience in penetration testing or broader offensive security, together with a strong understanding of vulnerability assessment, security architecture, risk management and common attack techniques. Experience delivering CHECK-aligned services and leading client engagements is highly desirable. Relevant certifications such as CHECK Team Leader or Consultant, CREST, OSCP, OSCE, CRT or equivalent would be advantageous. You should be confident communicating complex technical issues clearly, able to write precise and commercially focused reports, and comfortable working independently while collaborating with wider consulting teams. A commitment to continuous learning, high-quality delivery and professional integrity is essential. This position is based in the UK and may require occasional travel to client sites.

We are seeking an experienced Security Engineer III to design, implement, and improve security solutions across a complex technology environment. In this role, you will help protect infrastructure, applications, networks, and sensitive data by identifying risks, strengthening controls, and responding to emerging threats. You will work closely with engineering, operations, compliance, and product teams to embed security throughout the development and delivery lifecycle.

Key responsibilities include monitoring and investigating security events, conducting vulnerability assessments, supporting incident response, and developing practical remediation plans. You will design and maintain security controls across cloud and on-premises environments, contribute to threat modelling and security architecture reviews, and support identity, access management, encryption, endpoint, and network security initiatives. You will also automate recurring security processes, improve detection and response capabilities, maintain clear technical documentation, and provide guidance on secure coding, configuration, and operational practices. The role may include mentoring less experienced engineers and leading security projects from planning through implementation.

The successful candidate will have substantial experience in security engineering, infrastructure security, application security, or a related discipline, along with strong knowledge of common security principles, frameworks, and industry standards. Experience with cloud platforms, security information and event management tools, vulnerability management, automation, and scripting languages such as Python, PowerShell, or Bash is highly desirable. You should be comfortable analysing complex issues, prioritising risks, and communicating technical recommendations to both technical and non-technical audiences. Relevant professional certifications or equivalent practical experience are advantageous. A proactive, collaborative approach and a commitment to continuous learning are essential.

We are seeking an experienced Lead Cyber Security Consultant to deliver high-quality security assessments and provide trusted technical advice to clients across the UK. The role will focus on CHECK-aligned penetration testing and consultancy engagements, helping organisations identify vulnerabilities, understand their exposure to risk and improve the resilience of their systems. You will lead projects from scoping and planning through to technical delivery, reporting and client presentation, while maintaining a consistently high standard of professionalism and quality.

Responsibilities will include performing and overseeing infrastructure, web application, wireless, cloud and internal network penetration tests; reviewing findings and producing clear, accurate reports for both technical and senior audiences; presenting results and recommendations to clients; and supporting remediation activities where required. You will contribute to engagement planning, estimation and quality assurance, mentor junior consultants and help develop testing methodologies, tools and internal processes. The role may also involve supporting security reviews, risk assessments and related advisory work, as well as building strong, long-term client relationships.

Applicants should have substantial experience in penetration testing or cyber security consultancy, with a proven ability to lead complex engagements and communicate effectively with a wide range of stakeholders. A current CHECK Team Leader or equivalent qualification and demonstrable experience delivering CHECK work are highly desirable. Strong practical knowledge of common attack techniques, vulnerability assessment, network and application security, Windows and Linux environments, and recognised security testing frameworks is expected. Relevant certifications such as CREST, OSCP, CRT, CSTM or equivalent would be advantageous. You should be analytical, commercially aware and confident working independently while collaborating with colleagues. Excellent written and verbal communication skills, strong attention to detail and a willingness to travel occasionally within the UK are also required.