Job Search

We are seeking an experienced Project Security Manager to lead security management across complex projects from initial planning through delivery and close-out. The successful candidate will ensure that security considerations are embedded into project design, mobilisation, implementation and operational readiness, while supporting the delivery of safe, compliant and resilient outcomes. This role will involve working with project leaders, contractors, consultants and operational teams to identify risks, establish appropriate controls and maintain effective governance throughout the project lifecycle.

Key responsibilities will include developing and implementing project security plans, conducting security risk assessments and vulnerability reviews, and advising on protective measures for people, assets, information and facilities. You will monitor compliance with relevant legislation, standards, policies and contractual requirements, coordinate security audits and inspections, and oversee the investigation and management of security incidents. The role will also contribute to emergency preparedness, business continuity, access control, contractor assurance, security systems integration and the development of project documentation, procedures and training. You will provide clear reporting to senior stakeholders, track risks and actions, and ensure that security issues are escalated and resolved promptly.

Applicants should have substantial experience in security management, risk management, project delivery or a closely related field, ideally within a complex, regulated or high-consequence environment. A relevant professional qualification or recognised security certification is desirable, along with experience managing security requirements across multiple workstreams and engaging with a broad range of stakeholders. You will need strong analytical, communication and influencing skills, sound judgement, and the ability to translate security risks into practical, proportionate solutions. The successful candidate will be organised, proactive and confident working independently while contributing effectively to multidisciplinary project teams. An understanding of incident response, protective security principles, contractor management and security assurance processes is essential.

We are seeking a Product Security Engineer to help build secure, resilient, and trustworthy products throughout their lifecycle. Working closely with software engineering, product management, infrastructure, and quality teams, you will embed security into design, development, testing, deployment, and ongoing operations. You will contribute to a strong security culture by providing practical guidance, identifying risks early, and helping teams deliver secure solutions without compromising usability or delivery speed.

Your responsibilities will include conducting threat modelling, security reviews, and architectural assessments; identifying and prioritising vulnerabilities; and recommending effective remediation strategies. You will support secure coding practices, perform or coordinate application and API security testing, and help integrate security controls into CI/CD pipelines and development workflows. You will also assist with vulnerability management, security incident investigations, dependency and secrets management, and the development of standards, playbooks, and technical documentation. Where appropriate, you will work with external assessors and technology providers to validate controls and address findings.

The successful candidate will have professional experience in product, application, or software security, with a solid understanding of secure software development principles and common vulnerabilities such as those identified by OWASP. Experience with cloud environments, containers, APIs, identity and access management, automated security tooling, and modern development languages or frameworks is highly desirable. You should be comfortable reviewing code and technical designs, communicating risk to both technical and non-technical audiences, and influencing teams through collaboration rather than authority. A proactive, analytical approach, strong problem-solving skills, and a commitment to continuous learning are essential. Relevant qualifications or certifications in cybersecurity, software engineering, or a related discipline are advantageous, but practical experience and demonstrated impact will be valued equally.

We are seeking a Data Protection Consultant to provide expert guidance on privacy, information governance and regulatory compliance across a range of business activities. You will advise stakeholders on the practical application of data protection legislation, helping to ensure that personal information is collected, used, stored and shared lawfully, fairly and transparently. The role will involve working with teams across the organisation to embed effective privacy practices and support a culture of responsible data handling.

Your responsibilities will include conducting data protection impact assessments, reviewing and updating privacy notices, policies, procedures and data retention schedules, and advising on records of processing activities. You will support the assessment and management of data breaches, access requests and other individual rights requests, coordinating with relevant teams to ensure timely and accurate responses. You will also review supplier and partner arrangements, assist with data processing agreements, contribute to audits and risk assessments, and monitor regulatory developments to identify required changes. The role may include delivering awareness sessions and tailored training to colleagues, as well as preparing clear reports and recommendations for senior stakeholders.

To succeed, you will have strong knowledge of UK and/or EU data protection requirements, including the principles of the GDPR, individual data rights, international transfers, direct marketing and privacy by design. Experience in a data protection, privacy, compliance or information governance role is essential, ideally within a complex or highly regulated environment. You should be confident interpreting legislation, assessing risk and translating technical or legal requirements into practical business advice. Excellent communication, organisation and stakeholder management skills are required, together with strong attention to detail and the ability to manage competing priorities. Relevant professional qualifications or membership of a recognised privacy or information governance body would be advantageous.

Join a structured Product Cyber Security Graduate Programme starting in 2027 and begin developing the skills needed to protect connected products, systems, and services throughout their lifecycle. Working alongside experienced security professionals, you will gain practical exposure to secure design, threat modelling, vulnerability management, security testing, incident response, and regulatory compliance. You will contribute to projects that help identify and reduce cyber risks from initial concept and development through to deployment, maintenance, and retirement.

Your responsibilities may include reviewing product requirements for security considerations, supporting risk assessments, documenting security controls, and assisting with the investigation and remediation of vulnerabilities. You will help analyse threats affecting hardware, software, embedded systems, networks, and cloud-connected services, while learning how to apply recognised security principles and industry standards. The role will also involve collaborating with engineering, software development, quality, compliance, and project teams. You may prepare technical reports, present findings to stakeholders, support security awareness activities, and contribute to continuous improvements in product security processes and tools.

Applicants should have, or expect to achieve by 2027, a degree or equivalent qualification in cyber security, computer science, software engineering, information technology, electronic engineering, or a related subject. A genuine interest in product and application security is essential, along with analytical thinking, curiosity, and a willingness to learn. Familiarity with networking, operating systems, programming or scripting, secure development practices, or common security tools would be beneficial, but extensive professional experience is not required. You should be able to communicate technical information clearly, work effectively in a team, manage competing priorities, and approach problems methodically. Eligibility to work in the relevant location and any required background screening will apply.

We are seeking a Cyber Security Specialist to help protect critical systems, networks, applications and data from evolving cyber threats. In this role, you will support the development, implementation and continuous improvement of security controls across the organisation. You will monitor security events, investigate alerts, assess vulnerabilities and contribute to effective incident response. Working closely with technology, risk and business teams, you will help ensure that security is embedded into day-to-day operations and future projects.

Key responsibilities include reviewing security logs and threat intelligence, identifying suspicious activity and coordinating appropriate remediation. You will conduct vulnerability assessments, support penetration testing activities and track corrective actions through to completion. The role will also involve maintaining security policies, procedures and technical documentation; contributing to risk assessments and audits; supporting identity and access management; and advising on secure configuration, cloud security and the protection of sensitive information. You may also assist with security awareness initiatives, incident simulations and the development of reports and metrics for senior stakeholders.

The successful candidate will have practical experience in cyber security, information security, infrastructure security or a related discipline, together with a good understanding of security principles, risk management and incident handling. Familiarity with security monitoring tools, vulnerability scanners, endpoint protection, firewalls, identity platforms and cloud technologies is desirable. Relevant certifications or formal training in cyber security will be advantageous. You should possess strong analytical and problem-solving skills, communicate clearly with technical and non-technical audiences, and be able to manage competing priorities with sound attention to detail. A proactive approach, professional integrity and a commitment to continuous learning are essential.

We are seeking a Cyber Security Specialist to help protect critical systems, networks, applications and information assets from evolving cyber threats. The successful candidate will support the development, implementation and continuous improvement of security controls across the technology environment. This role will work closely with infrastructure, software development, service delivery and risk teams to identify vulnerabilities, strengthen defensive measures and promote secure working practices.

Key responsibilities include monitoring security alerts and events, investigating potential incidents, coordinating response and recovery activities, and maintaining accurate incident records. You will conduct vulnerability assessments, support penetration testing activities, review security logs and recommend appropriate remediation. The role will also contribute to risk assessments, security architecture reviews, access control monitoring, endpoint protection, cloud security and compliance reporting. You will help maintain security policies, standards and procedures, assist with audit preparation, and provide clear security guidance to technical and non-technical stakeholders. Keeping informed about current threat intelligence, attack techniques and relevant regulatory requirements will be an important part of the position.

Applicants should have proven experience in cyber security, information security, security operations or a closely related discipline, together with a sound understanding of network security, identity and access management, vulnerability management, incident response and common security frameworks. Familiarity with security information and event management tools, endpoint detection platforms, cloud technologies and risk management processes would be advantageous. Strong analytical, problem-solving and communication skills are essential, as is the ability to prioritise effectively in a fast-moving environment. Professional certifications such as CompTIA Security+, CISSP, CISM, GIAC or equivalent experience are welcomed. A proactive approach, high level of integrity and commitment to continuous learning are expected.

We are seeking a Security Operations Center Analyst to monitor, investigate, and respond to cybersecurity events across a complex technology environment. The successful candidate will work as part of a security operations team responsible for maintaining continuous visibility of threats, identifying suspicious activity, and helping protect systems, applications, networks, and data. This role requires sound technical judgment, strong attention to detail, and the ability to remain calm and methodical when handling incidents.

Key responsibilities include monitoring security information and event management (SIEM) platforms, endpoint detection and response tools, network security technologies, and other monitoring systems. You will triage alerts, validate potential threats, conduct initial investigations, and escalate confirmed or high-risk incidents in accordance with established procedures. The role will also involve analysing logs and indicators of compromise, performing basic threat hunting, supporting containment and remediation activities, documenting findings, and preparing accurate incident reports. You will contribute to the improvement of detection rules, playbooks, operational procedures, and security monitoring capabilities. Collaboration with infrastructure, application, identity, and risk teams will be essential, as will participation in vulnerability investigations, security reviews, and continuous improvement initiatives.

Applicants should have experience in a security operations, incident response, monitoring, or technical support environment, with a practical understanding of cybersecurity principles, common attack techniques, and incident handling processes. Familiarity with SIEM solutions, endpoint security platforms, firewalls, intrusion detection systems, identity and access management, and cloud security technologies is desirable. Knowledge of networking, Windows and Linux operating systems, scripting, and log analysis will be advantageous. Relevant industry certifications or formal training in cybersecurity are welcomed. You should demonstrate clear written and verbal communication, effective prioritisation, a commitment to accurate record-keeping, and a willingness to participate in shift patterns or an on-call rota where required.

We are seeking an experienced Group CISO to lead the organisation’s information and cyber security strategy across a complex, globally distributed environment. This is a senior leadership role with responsibility for establishing a resilient, risk-based security framework that protects critical data, systems, customers and colleagues while enabling business growth and transformation. You will act as a trusted adviser to executive leadership and the board, providing clear insight into the organisation’s cyber risk profile, threat landscape and security priorities.

The successful candidate will define and deliver a multi-year cyber security strategy, oversee governance, risk and compliance activities, and ensure that appropriate policies, standards and controls are implemented across the group. Responsibilities will include leading security architecture, identity and access management, data protection, security operations, vulnerability management, third-party risk, incident response, business continuity and cyber resilience. You will direct the organisation’s approach to threat monitoring and response, ensuring that significant incidents are managed effectively and that lessons learned are embedded. The role will also involve maintaining alignment with relevant regulatory obligations, industry standards and emerging technology risks.

You will lead and develop a high-performing security function, building strong relationships with technology, risk, legal, audit, compliance and operational teams. You will promote a positive security culture through effective communication, awareness and training, while ensuring that security is embedded into major programmes, products and change initiatives from the outset. Applicants should bring significant experience in senior information or cyber security leadership roles, ideally within a large, regulated or international environment. You will have a strong understanding of enterprise risk management, security governance and modern cyber threats, together with the credibility to influence at board level. Relevant professional qualifications and certifications are desirable, as is a track record of leading transformation, managing budgets and developing capable, collaborative teams.

We are seeking a skilled Penetration Tester to identify, assess and help remediate security vulnerabilities across applications, networks, cloud environments and infrastructure. You will plan and conduct authorised penetration tests, vulnerability assessments and red-team exercises, using a range of manual techniques and industry-standard tools. The role will involve assessing security controls, validating potential weaknesses, exploiting vulnerabilities safely and documenting clear evidence of findings, business impact and recommended remediation.

You will work closely with security, infrastructure, development and operational teams to communicate technical risks in a practical and accessible way. Responsibilities will include scoping and scheduling engagements, reviewing architecture and technical documentation, performing reconnaissance, testing web applications, APIs, mobile platforms, internal and external networks, and producing accurate reports for both technical and non-technical audiences. You will also present findings to stakeholders, support remediation activities, conduct retesting and contribute to the ongoing improvement of security testing methodologies, standards and processes.

Applicants should have demonstrable experience in penetration testing or offensive security, with a strong understanding of common attack techniques, vulnerability management and secure development principles. Practical knowledge of tools such as Burp Suite, Nmap, Metasploit and command-line utilities is expected, along with familiarity with scripting or programming languages such as Python, PowerShell or Bash. Experience testing cloud services, Active Directory, containers or CI/CD environments would be advantageous. Relevant certifications, such as OSCP, CREST or equivalent, are desirable but not essential. You should be analytical, curious and able to explain complex issues clearly, while maintaining professional judgement, confidentiality and strict adherence to authorised testing procedures.