Job Search

We are seeking a proactive Vulnerability Officer to support the identification, assessment and management of security vulnerabilities across a complex technology environment. This is a hybrid working opportunity, combining remote work with regular on-site collaboration. The successful candidate will help strengthen cyber resilience by ensuring vulnerabilities are discovered promptly, prioritised appropriately and addressed within agreed timescales.

Key responsibilities will include coordinating vulnerability scanning and assessment activities across infrastructure, applications, endpoints and cloud services; reviewing scan results and validating findings; assessing risk based on technical severity, business impact and exposure; and maintaining accurate vulnerability records. You will work closely with infrastructure, development, operations and service teams to agree remediation plans, monitor progress and escalate overdue or high-risk issues. The role will also involve producing management information, dashboards and reports, contributing to risk assessments, supporting audits, and helping to improve vulnerability management processes, standards and procedures.

Applicants should have practical experience in vulnerability management, cyber security operations, information security or a related technical discipline. You will need a sound understanding of common vulnerabilities, security controls, remediation approaches and risk management principles, together with experience using vulnerability scanning, ticketing or security monitoring tools. Strong analytical and problem-solving skills are essential, as is the ability to interpret technical information and communicate clear, actionable advice to both technical and non-technical audiences. The successful candidate will be organised, detail-focused and confident managing competing priorities while building effective working relationships. Relevant professional qualifications or certifications in cyber security, such as Security+, CySA+, CISSP or equivalent experience, would be advantageous.

We are seeking a Senior Infrastructure & Cybersecurity Engineer to design, maintain and secure a complex technology environment. This role will combine hands-on infrastructure engineering with proactive cybersecurity leadership, ensuring that systems, networks, cloud services and data remain resilient, compliant and fit for purpose. You will work closely with technical and business stakeholders to deliver reliable services, strengthen security controls and support the ongoing improvement of enterprise technology.

Key responsibilities will include designing and managing secure hybrid infrastructure across on-premises and cloud platforms; administering servers, networks, storage, virtualisation and identity services; and implementing robust monitoring, backup, disaster recovery and business continuity solutions. You will lead vulnerability management, security hardening, patching, endpoint protection, access governance and incident response activities. The role will also involve investigating security events, coordinating remediation, maintaining technical documentation and contributing to risk assessments, audits and security policies. You will help develop automation and operational standards that improve efficiency, availability and control across the environment.

Applicants should have substantial experience in infrastructure engineering and cybersecurity, with strong knowledge of networking, firewalls, Windows and/or Linux administration, cloud technologies, Active Directory or equivalent identity platforms, and security monitoring tools. Experience with SIEM, endpoint detection and response, vulnerability scanners, configuration management, scripting and infrastructure-as-code will be highly valued. Relevant professional certifications in areas such as cloud, networking, cybersecurity or information security are desirable. You will bring a methodical approach to problem-solving, excellent communication skills and the ability to manage priorities in a changing environment. A strong understanding of security frameworks, data protection principles and industry best practice is essential, together with the confidence to mentor colleagues and influence secure technology decisions.