Job Search

We are seeking an experienced Global Information Security Manager to lead and strengthen information security practices across a complex, internationally operating environment. This role will be responsible for developing, implementing and maintaining a comprehensive security strategy aligned with business objectives, recognised industry standards and applicable regulatory requirements. You will work closely with senior stakeholders, technology teams and regional leaders to promote a consistent, risk-based approach to protecting information, systems and services.

Key responsibilities will include managing the global information security framework, policies, standards and procedures; overseeing security risk assessments, control reviews and remediation plans; and monitoring compliance with relevant data protection and cybersecurity regulations. You will coordinate incident response activities, support investigations and ensure lessons learned are incorporated into preventative measures. The role will also contribute to business continuity and disaster recovery planning, third-party security assessments, vulnerability management, identity and access governance, security awareness programmes and regular reporting to senior management. You will help define meaningful security metrics and provide clear recommendations on emerging threats, control gaps and investment priorities.

The successful candidate will bring substantial experience in information security, cybersecurity, risk management or a related discipline, ideally gained within a global or highly regulated organisation. Strong knowledge of security frameworks such as ISO 27001, NIST or CIS Controls is expected, together with experience conducting audits, managing security incidents and delivering enterprise-wide improvement programmes. Relevant professional certifications, such as CISSP, CISM, CRISC or equivalent, would be advantageous. Excellent communication, influencing and stakeholder-management skills are essential, as is the ability to translate technical risks into practical business decisions. A proactive, collaborative and commercially aware approach will be highly valued.

We are seeking a Vulnerability Researcher to identify, analyse, and responsibly disclose security weaknesses across software, hardware, embedded systems, and networked environments. You will conduct independent and collaborative research into emerging attack techniques, develop proof-of-concept exploits, and assess the practical impact of vulnerabilities. The role will involve reverse engineering binaries, analysing source code, debugging applications, fuzzing interfaces and protocols, and investigating vulnerabilities in complex technical systems.

You will be responsible for creating reliable, reproducible demonstrations of security issues and documenting your findings for both technical and non-technical audiences. Working with engineering, security, and product teams, you will help validate remediation strategies, support coordinated disclosure activities, and contribute to improving secure development practices. You may also monitor current threat research, participate in technical reviews, present findings at internal or external events, and contribute to tools, methodologies, and automated capabilities that improve vulnerability discovery.

Applicants should have substantial experience in vulnerability research, exploit development, penetration testing, reverse engineering, or a closely related discipline. Strong programming skills in languages such as C, C++, Python, Rust, or assembly are expected, along with practical knowledge of operating systems, memory management, debugging tools, and common vulnerability classes including memory corruption, privilege escalation, authentication flaws, and injection attacks. Experience with fuzzing frameworks, disassemblers, debuggers, virtualisation, or embedded platforms is highly desirable. You should be analytical, curious, and comfortable working on complex problems with limited initial information. Clear written and verbal communication, sound judgement, discretion, and a responsible approach to handling sensitive research are essential.

We are seeking a Cybersecurity Tester/Researcher to assess the security of applications, infrastructure, networks, and emerging technologies. The successful candidate will plan and conduct penetration tests, vulnerability assessments, security reviews, and controlled attack simulations across web, mobile, cloud, API, and enterprise environments. You will identify weaknesses, validate their impact, and provide clear, evidence-based recommendations that help strengthen security controls and reduce operational risk.

Responsibilities include defining test scope and methodologies, performing manual and automated security testing, researching new vulnerabilities and attack techniques, developing proof-of-concept exploits where appropriate, and analysing security events or suspected compromises. You will document findings in detailed technical reports, prioritise issues according to likelihood and business impact, and present results to both technical and non-technical stakeholders. The role also involves maintaining testing tools and scripts, contributing to threat modelling and security standards, supporting remediation activities, and staying informed about developments in offensive security, vulnerability research, cloud technologies, and regulatory expectations.

Applicants should have practical experience in penetration testing, vulnerability research, application security, or a closely related cybersecurity discipline. Strong knowledge of common attack methods, network protocols, operating systems, authentication mechanisms, secure coding principles, and security testing frameworks is required. Experience with tools such as Burp Suite, Nmap, Metasploit, Wireshark, or equivalent technologies is desirable, as is proficiency in scripting or programming languages such as Python, PowerShell, Bash, or JavaScript. Professional certifications including OSCP, CREST, GPEN, GWAPT, or comparable qualifications are advantageous. You should demonstrate sound analytical judgement, careful attention to detail, strong written and verbal communication skills, and the ability to work independently while collaborating effectively with wider technical teams. All testing must be conducted responsibly, ethically, and in accordance with agreed authorisation and data-handling requirements.