Job Search

We are seeking a Red Team Operator (Cyber Resilience) to challenge and strengthen the organisation’s ability to prevent, detect, respond to and recover from sophisticated cyber attacks. You will plan and deliver authorised red team, adversary simulation and purple team engagements across people, processes, applications, infrastructure and cloud environments.

Working with security operations, technology, risk and resilience teams, you will emulate realistic threat actors using intelligence-led techniques. Your responsibilities will include defining engagement objectives and rules of engagement, developing attack scenarios, conducting reconnaissance, identifying and exploiting weaknesses, and safely demonstrating potential business impact. You will maintain a strong focus on controlled execution, clear communication and protection of operational services.

You will document activity accurately, preserve appropriate evidence and produce high-quality reports for both technical and senior stakeholders. This will include explaining attack paths, assessing the effectiveness of preventative and detective controls, identifying gaps in cyber resilience, and providing practical, prioritised recommendations. You will also support purple team exercises, replay attack techniques with defenders, validate remediation and track improvements through to completion.

The successful candidate will have demonstrable experience in red teaming, penetration testing, adversary simulation or a closely related security role. You should be confident working across networks, endpoints, identity platforms, web applications and cloud technologies, with practical knowledge of common attack frameworks such as MITRE ATT&CK. Experience with scripting or programming, security tooling, operational technology or incident response would be advantageous.

You will need strong analytical and problem-solving skills, sound judgement and a responsible approach to handling sensitive information. The ability to explain complex technical findings clearly, collaborate with varied stakeholders and operate effectively within defined legal, ethical and safety boundaries is essential. Relevant professional certifications or equivalent practical experience are welcomed. This role may involve occasional travel, out-of-hours exercises and participation in resilience or incident response activities.

We are seeking a Data Protection Specialist to support the effective management, implementation and continuous improvement of data protection practices across the organisation. This role will provide practical advice on privacy matters, help ensure compliance with applicable legislation and regulatory requirements, and promote a strong culture of information governance.

The successful candidate will monitor developments in data protection law and guidance, assess their potential impact, and help update policies, procedures and internal controls accordingly. You will advise colleagues on the lawful and transparent use of personal data, including data sharing, direct marketing, retention, records management and the completion of data protection impact assessments.

Key responsibilities will include maintaining records of processing activities, supporting the management of individual rights requests, assisting with data breach investigations and coordinating responses within required timescales. You will also contribute to privacy reviews of new projects, systems and suppliers, ensuring that appropriate safeguards are considered from the outset. Where necessary, you will help prepare reports, risk assessments and recommendations for senior stakeholders.

You will work collaboratively with teams across the organisation, building effective working relationships and delivering clear, proportionate guidance to both technical and non-technical audiences. The role may also involve developing and delivering training, awareness materials and communications to improve understanding of data protection responsibilities.

Applicants should have experience in a data protection, privacy, information governance or related compliance role, together with a sound understanding of UK data protection legislation, including the UK GDPR and Data Protection Act 2018. Experience of handling data subject rights requests, data breaches, audits and privacy impact assessments is desirable. A relevant professional qualification or membership of a recognised privacy or information governance body would be advantageous.

You will need excellent analytical, organisational and communication skills, strong attention to detail and the ability to manage competing priorities. A practical, approachable and solutions-focused attitude is essential, as is the confidence to challenge constructively and maintain confidentiality when handling sensitive information.

We are seeking a Principal Product Security Engineer to provide strategic leadership and hands-on technical expertise across the product development lifecycle. You will help define and deliver a forward-looking product security strategy, ensuring that security is embedded from early design through to deployment and ongoing operation. Working closely with engineering, architecture, product and technology teams, you will identify risks, influence decision-making and promote secure-by-design principles across a diverse product portfolio.

Your responsibilities will include establishing security requirements, threat modelling complex systems, reviewing architectures and guiding secure coding practices. You will lead security assessments, vulnerability management and product assurance activities, while supporting teams to investigate and remediate weaknesses effectively. You will also contribute to security standards, patterns, tooling and automation, helping to improve the consistency and efficiency of security controls within development and delivery pipelines. The role will involve mentoring engineers and security specialists, communicating technical risks to senior stakeholders, and representing product security in governance and design forums.

You will bring substantial experience in product or application security, with a strong understanding of secure software development, cloud technologies, modern application architectures and DevSecOps practices. Experience with threat modelling methodologies, security testing, software supply-chain security, identity and access management, and common web and API vulnerabilities is essential. You should be confident working across complex, multi-disciplinary environments and able to balance robust security with usability, delivery priorities and commercial needs. Strong communication, influencing and problem-solving skills are required, alongside the ability to operate strategically while remaining comfortable diving into technical detail. Relevant professional certifications or demonstrable equivalent experience would be advantageous.

We are seeking a motivated Junior Penetration Tester to join a collaborative cybersecurity team. This is an excellent opportunity for an early-career security professional to develop practical experience across a range of penetration testing and vulnerability assessment activities. You will work alongside experienced testers to identify, validate, and clearly communicate security weaknesses affecting applications, infrastructure, networks, cloud environments, and endpoints.

Your responsibilities will include supporting the planning and delivery of authorised penetration tests, performing reconnaissance and vulnerability identification, reviewing test results, and assisting with the safe exploitation of vulnerabilities under controlled conditions. You will help document evidence, assess risk, and contribute to clear, accurate client-facing reports. You may also assist with remediation validation, security research, tooling improvements, and internal knowledge-sharing sessions. All work must be conducted ethically, within agreed scopes, and in accordance with relevant laws, policies, and testing standards.

Applicants should have a foundational understanding of information security, networking, operating systems, web technologies, and common attack techniques. Familiarity with tools such as Burp Suite, Nmap, Metasploit, Wireshark, or similar security-testing platforms is desirable, as is some practical experience gained through laboratories, personal projects, coursework, or recognised certifications. Strong analytical, written, and verbal communication skills are essential, along with attention to detail, a methodical approach, and a willingness to learn. An understanding of testing frameworks such as OWASP, PTES, or OSSTMM would be advantageous. The successful candidate will demonstrate integrity, curiosity, professionalism, and the ability to work both independently and as part of a team. Relevant qualifications or certifications are welcome but are not essential where practical capability can be demonstrated.

We are seeking an Information Security Analyst – Operations to help protect critical systems, applications and data across a dynamic technology environment. This role will support the day-to-day operation of security controls, monitor for potential threats and contribute to the continuous improvement of information security processes. You will work closely with technology, infrastructure and business teams to identify risks, investigate suspicious activity and help maintain a strong security posture.

Key responsibilities include monitoring security alerts and events using SIEM, endpoint protection and other security tools; triaging, investigating and documenting suspected incidents; supporting incident response activities and escalating issues in line with defined procedures; and assisting with vulnerability management, security assessments and remediation tracking. You will also help administer and review security controls, analyse logs, prepare operational reports and contribute to security metrics. The role may involve supporting access reviews, change assessments, audit requests, policy implementation and the development of operating procedures and knowledge articles.

The successful candidate will have experience in a security operations, cyber security or infrastructure support environment, with a practical understanding of security monitoring, incident management, vulnerability assessment and common attack techniques. Familiarity with SIEM platforms, endpoint detection and response tools, firewalls, identity and access management, cloud environments and ticketing systems is highly desirable. Relevant professional certifications or formal training in information security will be advantageous. You should be analytical, methodical and confident working with technical and non-technical stakeholders. Strong written and verbal communication skills, sound judgement, attention to detail and the ability to prioritise effectively in a fast-paced environment are essential. A proactive approach to learning and a commitment to maintaining confidentiality and professional standards are also expected.

We are seeking an Electrotechnical & Cybersecurity Specialist to support the secure, reliable operation of electrical, control, automation and connected technology systems. This role combines practical electrotechnical expertise with cybersecurity awareness, helping to protect critical infrastructure, industrial environments and operational technology from disruption, misuse and emerging threats. You will work closely with engineering, maintenance, IT, safety and external service teams to ensure systems are designed, maintained and operated in accordance with technical, regulatory and security requirements.

Your responsibilities will include assessing electrical and control-system risks; supporting the design, installation, commissioning and maintenance of low-voltage systems, instrumentation, PLCs, SCADA and industrial networks; and identifying vulnerabilities across operational technology environments. You will contribute to asset inventories, network segmentation, access-control reviews, secure configuration, patching and backup strategies. The role will also involve investigating incidents, assisting with recovery activities, maintaining technical documentation, reviewing supplier solutions and ensuring that changes are properly assessed, authorised and recorded. You may participate in audits, risk assessments, emergency response exercises and continuous-improvement initiatives.

Applicants should have relevant qualifications or demonstrable experience in electrotechnical engineering, industrial automation, control systems, operational technology or cybersecurity. A sound understanding of electrical safety, industrial communications, network principles, vulnerability management and cybersecurity frameworks is essential. Experience with PLCs, SCADA, HMIs, firewalls, remote access technologies and security monitoring tools would be advantageous. You will need strong analytical and problem-solving skills, careful attention to detail and the ability to communicate technical issues clearly to both specialist and non-specialist audiences. A proactive, collaborative approach and commitment to safe working practices are essential. Relevant professional certifications, electrical authorisations or cybersecurity qualifications are desirable.

We are seeking an experienced Information Security Leader to define and advance the organisation’s security strategy, strengthen resilience, and protect critical information, systems, and services. This senior role will provide strategic direction across information security, cybersecurity, risk management, privacy, and business continuity, ensuring that security remains aligned with business priorities and evolving regulatory expectations. You will advise senior stakeholders, promote a strong security culture, and act as a trusted leader during incidents and periods of significant change.

Key responsibilities will include developing and maintaining the information security strategy, policies, standards, and governance framework; overseeing risk assessments, vulnerability management, security assurance, and compliance activities; and ensuring effective monitoring, detection, response, and recovery capabilities. You will lead the development and testing of incident response and disaster recovery plans, manage relationships with internal and external partners, and provide clear reporting on security risks, performance, and improvement plans. The role will also involve guiding secure technology adoption, supporting audits, assessing third-party risks, and embedding security by design across projects, products, and operational processes. You will lead, mentor, and develop security professionals while influencing colleagues at all levels to adopt practical and proportionate security controls.

Applicants should have substantial experience leading information security or cybersecurity functions in a complex environment, together with a strong understanding of security frameworks, risk management principles, threat landscapes, and relevant legislation. Experience of developing security strategies, managing major incidents, engaging executive stakeholders, and delivering organisational change is essential. Professional qualifications such as CISSP, CISM, CRISC, or equivalent experience are desirable. You will combine sound technical knowledge with commercial awareness, excellent communication skills, and the ability to explain complex risks clearly to both technical and non-technical audiences. A collaborative, pragmatic, and ethical approach, along with strong decision-making and leadership capability, is essential.

We are seeking an Information Security Risk Analyst specialising in Third Party Risk to support the identification, assessment and management of information security risks associated with external suppliers, partners and service providers. In this role, you will help protect sensitive information and technology services by ensuring third parties meet established security, privacy and resilience expectations throughout the relationship lifecycle.

Your responsibilities will include conducting risk assessments and due diligence reviews for new and existing third parties, analysing security questionnaires, audit reports, certifications and other supporting evidence, and documenting findings in a clear and consistent manner. You will identify control gaps, assess potential business impact, recommend appropriate remediation actions and track issues through to resolution. You will also support the development and maintenance of third-party risk records, prepare risk summaries and management reports, and escalate material concerns in line with governance requirements.

The successful candidate will have experience in information security, technology risk, supplier assurance, cybersecurity or a related discipline, with a good understanding of third-party risk management principles and security frameworks such as ISO 27001, NIST or equivalent standards. Familiarity with data protection, cloud security, business continuity, vulnerability management and risk-based control assessments is desirable. You should be confident reviewing technical and governance documentation, communicating with internal stakeholders and suppliers, and translating complex security matters into practical recommendations. Strong analytical, organisational and writing skills are essential, along with the ability to manage multiple assessments and deadlines. Relevant professional qualifications or certifications in information security, risk management, audit or privacy would be advantageous.

We are seeking a Senior Information Security Governance Analyst to strengthen the organisation’s information security governance, risk and compliance capabilities. In this role, you will help ensure that security policies, standards and control frameworks are effectively designed, implemented and maintained across the business. You will work closely with technology, risk, audit, legal, privacy and operational teams to promote secure and compliant ways of working, while providing clear, practical advice to stakeholders at all levels.

Your responsibilities will include developing, reviewing and maintaining information security policies, procedures, standards and guidance; coordinating risk assessments, control reviews and remediation plans; and monitoring compliance with relevant legislation, regulatory expectations and recognised frameworks such as ISO 27001, NIST or CIS. You will support internal and external audits, track findings through to resolution, prepare governance reports and management information, and contribute to security assurance activities involving suppliers, projects, systems and business processes. You will also help maintain risk and control registers, facilitate governance forums, identify opportunities for continuous improvement and support the development of security awareness and training materials.

The successful candidate will have substantial experience in information security governance, risk or compliance, together with a strong understanding of security principles, control frameworks, policy management and audit processes. You should be confident interpreting complex requirements, assessing risk and presenting clear recommendations to both technical and non-technical audiences. Experience working with third-party risk, business continuity, data protection, security assurance or regulatory compliance would be advantageous. Relevant certifications such as CISM, CISSP, CRISC, ISO 27001 Lead Implementer or Lead Auditor are desirable. Excellent communication, organisation and stakeholder-management skills are essential, along with the ability to manage competing priorities, work independently and influence positive security outcomes across a complex environment.

We are seeking a Technical Specialist – Identity to support the design, delivery and ongoing operation of Microsoft Identity Manager (MIM) services within a complex enterprise environment. This is an opportunity for an experienced identity professional to contribute to secure, reliable and scalable identity and access management capabilities, helping ensure that users, applications and systems have the appropriate access at the right time.

The role will involve configuring, administering and maintaining Microsoft Identity Manager, including synchronization services, management agents, metaverse configuration, connectors and identity lifecycle workflows. You will investigate and resolve incidents, service requests and integration issues, while monitoring system performance and maintaining operational stability. You will also support joiner, mover and leaver processes, account provisioning, group and entitlement management, password and authentication-related services, and integrations with Active Directory, Entra ID and other business or infrastructure platforms.

You will work closely with security, infrastructure, application and service management teams to gather requirements, assess technical impacts and deliver improvements. Responsibilities will include producing technical documentation, contributing to standards and procedures, supporting change and release activities, assisting with testing and disaster recovery planning, and identifying opportunities to automate manual processes using PowerShell or similar scripting technologies. The successful candidate will have strong practical experience with Microsoft Identity Manager and Active Directory, together with knowledge of identity governance, directory services, authentication concepts and secure access practices. Experience with Entra ID, hybrid identity, SQL Server, PowerShell, certificate services or related Microsoft technologies would be advantageous. Strong analytical, communication and problem-solving skills are essential, along with the ability to manage priorities and collaborate effectively in a service-focused environment.