Job Search

We are seeking an experienced Application Security Leader to establish and advance a comprehensive security programme across the software development lifecycle. This role will provide strategic direction and practical leadership, helping engineering and product teams build secure, resilient applications while enabling efficient delivery. You will define the application security roadmap, establish measurable objectives, and promote security as a shared responsibility across technology and business functions.

Key responsibilities include developing secure coding standards, threat modelling practices, vulnerability management processes, and security testing strategies covering web, mobile, cloud, and API-based applications. You will lead the implementation and optimisation of tools such as static and dynamic application security testing, software composition analysis, secrets detection, and runtime protection. The role will involve reviewing architecture and design decisions, prioritising remediation based on risk, supporting incident investigations, and providing clear reporting to senior stakeholders. You will also manage relationships with external security partners and contribute to security policies, compliance activities, and audit requirements.

The successful candidate will bring substantial experience in application security, product security, software engineering, or a closely related discipline, together with a strong understanding of modern development methodologies and cloud-native technologies. Experience leading security initiatives across distributed engineering teams is essential, as is the ability to influence without relying solely on formal authority. You should be comfortable translating complex technical risks into clear business recommendations and be able to balance robust security controls with developer experience and delivery objectives. Familiarity with common security frameworks and standards, such as OWASP, NIST, ISO 27001, or relevant regulatory requirements, is expected. Relevant professional certifications are advantageous. This is an opportunity to shape security strategy, mentor specialists, and embed practical, scalable security practices throughout the development organisation.

We are seeking an experienced Application Security Leader to define and advance a comprehensive security strategy across the software development lifecycle. In this influential role, you will lead application security initiatives, establish secure development practices, and partner with engineering, product, infrastructure, and risk teams to embed security into the design, development, testing, and deployment of digital products. You will provide clear guidance on security risks, support informed decision-making, and help build a culture in which secure engineering is a shared responsibility.

Your responsibilities will include developing and maintaining application security policies, standards, and roadmaps; overseeing threat modelling, secure architecture reviews, code analysis, penetration testing, vulnerability management, and remediation activities; and defining appropriate security controls for applications, APIs, cloud services, and third-party integrations. You will lead the assessment of security findings, prioritise remediation according to business risk, and report meaningful metrics and trends to senior stakeholders. The role will also involve coordinating incident response for application-related vulnerabilities, supporting investigations, and ensuring lessons learned are incorporated into future development practices.

Applicants should bring substantial experience in application security, software engineering, security architecture, or a closely related discipline, together with a strong understanding of modern development methodologies and cloud environments. You will be confident working with technologies such as CI/CD pipelines, source-code management, containerisation, APIs, and automated security testing tools. Relevant professional certifications are advantageous. We are looking for an influential and collaborative leader who can communicate complex technical issues clearly, engage effectively with both technical and non-technical audiences, and balance robust security controls with delivery objectives. Experience building or mentoring security teams, influencing secure-by-design programmes, and working within a regulated or complex technology environment would be highly valued.

We are seeking a SOC Analyst to join a security operations team responsible for monitoring, investigating, and responding to cyber threats across a diverse technology environment. In this role, you will analyse alerts from security information and event management (SIEM) platforms, endpoint detection and response tools, firewalls, intrusion detection systems, and other security technologies. You will assess potential incidents, distinguish genuine threats from false positives, and take appropriate action in line with documented procedures and service-level requirements.

Key responsibilities include conducting triage and investigation of security alerts, identifying indicators of compromise, supporting containment and remediation activities, and escalating significant incidents to senior analysts or incident response specialists. You will maintain accurate case records, produce clear investigation reports, and contribute to post-incident reviews. The role will also involve threat hunting, reviewing log and network activity, improving detection rules, maintaining operational playbooks, and helping identify opportunities to strengthen monitoring and response capabilities. You may participate in shift-based coverage, including evenings, nights, weekends, or on-call support, depending on operational needs.

The successful candidate will have practical experience in a security operations, incident response, threat monitoring, or related cybersecurity role. You should understand common attack techniques, network protocols, operating systems, authentication technologies, malware behaviours, and the principles of vulnerability management. Experience with SIEM, EDR, ticketing, case management, and threat intelligence platforms is highly desirable, as is the ability to analyse logs and use scripting or query languages to investigate events. Relevant professional certifications or formal training in cybersecurity would be advantageous. We are looking for a methodical and curious individual with strong analytical, written, and verbal communication skills, who can remain calm under pressure, work effectively within a team, and demonstrate a commitment to continuous learning and secure working practices.

We are seeking an experienced Data Protection Manager to lead and coordinate data protection and privacy activities across the UK, Germany, the Middle East, South Africa and India. This is a regional role requiring strong knowledge of international privacy regulations, the ability to interpret complex legal requirements, and confidence working with stakeholders across multiple jurisdictions and cultures. You will provide practical, commercially focused advice while promoting a strong culture of privacy, accountability and responsible data use.

Key responsibilities will include maintaining and improving the regional data protection framework; advising on compliance with applicable laws, including the UK GDPR, EU GDPR and relevant local requirements; monitoring regulatory developments; and supporting the implementation of appropriate policies, procedures and controls. You will manage data protection impact assessments, records of processing activities, data subject rights requests, data breaches, privacy notices, data retention requirements and third-party due diligence. The role will also involve reviewing contracts and proposed business initiatives, assessing international data transfers, supporting audits, and delivering effective privacy training and awareness programmes.

The successful candidate will have substantial experience in a data protection, privacy or information governance role, ideally gained within a complex, multinational environment. A strong working knowledge of UK and European data protection law is essential, together with an understanding of privacy requirements in the Middle East, South Africa and India. You should be comfortable influencing senior leaders, managing competing priorities and translating legal or regulatory requirements into clear operational guidance. Excellent communication, stakeholder management, organisation and problem-solving skills are required. A recognised privacy qualification, such as CIPP/E, CIPM, FIP, or an equivalent professional accreditation, would be advantageous. The ability to work independently while collaborating effectively with legal, compliance, security, technology, HR and business teams is essential.