Job Search

We are seeking a Lead Threat Response Operations Analyst to provide senior-level expertise in the identification, investigation, and containment of cyber threats. The role will lead day-to-day threat response activities, coordinate the analysis of security events, and ensure incidents are managed efficiently from initial detection through to remediation and post-incident review. You will work closely with security operations, infrastructure, application, risk, and business teams to assess potential impact, prioritise action, and reduce the likelihood of recurrence.

Key responsibilities include directing the investigation of complex and high-severity incidents; validating alerts and correlating intelligence from endpoint, network, identity, cloud, and application sources; developing and refining detection and response procedures; and providing clear updates to technical and senior stakeholders. You will contribute to threat hunting, forensic analysis, vulnerability-driven response, and the continuous improvement of playbooks, monitoring rules, automation, and operational metrics. The role will also involve mentoring analysts, supporting capability development, participating in an on-call or escalation rota where required, and ensuring that incident records, lessons learned, and control improvements are documented to a high standard.

Applicants should have substantial experience in security operations, incident response, threat hunting, or a related discipline, with proven experience leading investigations in a complex technology environment. Strong knowledge of security information and event management, endpoint detection and response, network analysis, identity security, cloud platforms, and common attack techniques is expected. Experience with scripting or automation, threat intelligence frameworks, digital forensics, and recognised incident response methodologies would be advantageous. You will need excellent analytical and communication skills, sound judgement under pressure, and the ability to translate technical findings into practical business risks and recommendations. Relevant professional certifications or equivalent practical experience are desirable.

We are seeking an experienced Security Architect (Contractor) Cyber Security Consultant to provide specialist expertise across a range of security architecture, design and advisory activities. The successful candidate will assess existing technology environments, identify security risks and develop practical, proportionate controls that support business and operational objectives. You will work with technical and business stakeholders to embed secure-by-design principles across infrastructure, applications, cloud services, networks and data platforms.

Key responsibilities will include producing and reviewing security architecture principles, standards, patterns and design documentation; contributing to security reviews and risk assessments; and advising on the design and implementation of appropriate preventative, detective and corrective controls. You will support solution design assurance, threat modelling, vulnerability management and security improvement initiatives, while ensuring alignment with relevant regulatory, legal and industry requirements. The role will also involve documenting risks and recommendations, supporting governance and approval processes, and communicating complex security matters clearly to both technical and non-technical audiences.

Applicants should have substantial experience in security architecture, cyber security consulting or a closely related discipline, together with a strong understanding of enterprise security frameworks, risk management and secure technology design. Experience across cloud security, identity and access management, network security, application security, data protection and incident response will be highly valued. Relevant professional certifications, such as CISSP, SABSA, CISM, CCSP or equivalent, are desirable. You must be able to operate independently in a contract environment, manage competing priorities, build effective stakeholder relationships and deliver high-quality outputs to agreed deadlines. Strong analytical, written and verbal communication skills are essential.

We are seeking an experienced Cyber Security Controls Tester to support the assessment, validation and continuous improvement of security controls across a complex technology environment. Working on a contract basis, you will help determine whether controls are appropriately designed, consistently implemented and operating effectively in line with internal policies, recognised security frameworks and applicable regulatory requirements. You will work closely with control owners, technology teams, risk specialists and internal stakeholders to gather evidence, clarify processes and communicate findings.

Your responsibilities will include planning and executing control testing activities across areas such as access management, vulnerability management, change management, incident response, security monitoring, data protection, third-party risk and infrastructure security. You will review policies, procedures, system configurations, tickets, reports and other supporting evidence; conduct interviews and walkthroughs; document test procedures and results; and identify control gaps, exceptions and opportunities for improvement. You will produce clear, accurate testing workpapers and reports, assess the potential impact of identified issues, agree practical remediation actions and track outstanding findings through to resolution. You may also support control design reviews, risk assessments, audit preparation and the development of repeatable testing methodologies.

The successful candidate will have proven experience in cyber security controls testing, IT audit, technology risk, governance or a closely related discipline. A strong understanding of frameworks and standards such as ISO 27001, NIST, COBIT, CIS Controls or SOC 2 is required, together with the ability to interpret technical information and translate it into clear risk-based conclusions. Experience using governance, risk and compliance tools, testing access controls and reviewing cloud or infrastructure environments would be advantageous. You should be analytical, organised and comfortable challenging evidence constructively while building effective relationships with stakeholders. Excellent written and verbal communication skills, strong attention to detail and the ability to manage multiple deadlines are essential. Relevant certifications such as CISA, CRISC, CISSP or ISO 27001 credentials are desirable but not mandatory.