Job Search

We are seeking a Security Operations Centre Specialist to support the monitoring, detection and response activities of a busy security operations function. In this role, you will monitor security alerts and events across a range of technologies, investigate suspicious activity, and help protect systems, networks and data from cyber threats. You will assess and prioritise incidents, perform initial triage, gather relevant evidence and escalate issues in line with established procedures and service levels.

Key responsibilities include analysing logs and alerts from security information and event management platforms, endpoint protection tools, firewalls, intrusion detection systems and other monitoring solutions. You will investigate potential breaches, malware infections, unauthorised access and unusual user or network behaviour. The role will involve documenting incidents accurately, maintaining clear case records, supporting containment and remediation activities, and contributing to post-incident reviews. You will also help refine monitoring rules, playbooks and operational procedures, identify recurring issues and provide information for security reporting and performance metrics. Effective communication with technical teams and stakeholders will be essential when coordinating responses and explaining security findings.

Applicants should have experience in a security operations, incident response, network monitoring or similar technical role, together with a sound understanding of cybersecurity principles, common attack methods and defensive controls. Familiarity with SIEM, EDR, vulnerability management, ticketing and threat intelligence tools is expected. Knowledge of security frameworks, incident management processes and relevant legislation or industry standards would be beneficial. Strong analytical and problem-solving skills, attention to detail and the ability to remain calm when handling high-priority incidents are essential. You should be comfortable working collaboratively, following documented procedures and participating in shift patterns or on-call arrangements where required. Relevant professional certifications or practical laboratory experience would be advantageous.

We are seeking a Security Operations Centre Specialist to support the continuous monitoring and protection of a complex technology environment. Working as part of a dedicated security operations team, you will help identify, investigate and respond to cyber threats across networks, endpoints, cloud services and business applications. You will monitor security alerts, analyse events from SIEM and other security tools, and determine the appropriate response based on risk, impact and established procedures.

Your responsibilities will include triaging and escalating incidents, conducting initial investigations, preserving relevant evidence and maintaining accurate case records. You will assist with threat hunting, vulnerability identification, security investigations and post-incident reviews, while contributing to the ongoing improvement of detection rules, playbooks and operational processes. The role also involves collaborating with infrastructure, engineering and service teams to contain threats, coordinate remediation and communicate the status of incidents clearly to technical and non-technical stakeholders. You may participate in an out-of-hours or shift-based rota to support 24/7 monitoring and response.

Applicants should have practical experience in a security operations, incident response or cyber defence environment, together with a strong understanding of networking, operating systems, identity management and common attack techniques. Experience using SIEM, endpoint detection and response, vulnerability management or threat intelligence platforms is highly desirable. Familiarity with recognised security frameworks and incident-handling methodologies would be advantageous. You should be analytical, methodical and comfortable making informed decisions in time-sensitive situations. Strong written and verbal communication skills, careful attention to detail and a commitment to continual learning are essential. Relevant professional certifications or formal training in cybersecurity, information security or a related discipline are welcome, although demonstrable hands-on experience will also be valued.

We are seeking an experienced Lead Security Engineer to provide technical leadership across the design, implementation, and continuous improvement of security capabilities. You will help protect critical systems, applications, infrastructure, and data by developing practical security solutions aligned with business and technology objectives. The role will involve setting engineering standards, guiding architectural decisions, and supporting the delivery of secure, resilient services across cloud and on-premises environments.

Your responsibilities will include leading security engineering projects, conducting threat modelling and risk assessments, and designing controls for identity and access management, network security, endpoint protection, vulnerability management, application security, and security monitoring. You will collaborate closely with software engineering, infrastructure, operations, and risk teams to embed security throughout the development and delivery lifecycle. You will also investigate complex security issues, support incident response activities, review technical designs, and ensure that vulnerabilities are prioritised and addressed effectively. As a technical lead, you will mentor engineers, promote automation, document standards and procedures, and communicate security risks and recommendations clearly to both technical and non-technical stakeholders.

The successful candidate will have substantial experience in security engineering, architecture, or a closely related discipline, together with a strong understanding of modern infrastructure and application security practices. Experience working with public cloud platforms, security information and event management, infrastructure as code, scripting or programming, CI/CD pipelines, and common security frameworks will be highly valued. You should be comfortable analysing complex problems, making sound risk-based decisions, and balancing security with usability and delivery needs. Relevant professional certifications are advantageous, as is experience leading technical initiatives in a fast-paced, regulated, or enterprise environment. Strong communication, collaboration, organisation, and mentoring skills are essential.

We are seeking a Lead Ethical Hacking Penetration Tester to provide expert security testing and assurance across a complex technology environment. Offering a salary of £57,515–£82,430, this role will lead the planning, delivery and reporting of penetration tests across applications, infrastructure, cloud platforms, networks, mobile technologies and emerging services. You will identify vulnerabilities, assess business impact, validate security controls and provide clear, practical recommendations that help reduce cyber risk.

You will take technical ownership of penetration testing engagements from scoping and threat modelling through to remediation support and retesting. Responsibilities will include developing test plans, selecting appropriate tools and methodologies, conducting manual and automated assessments, producing high-quality technical and executive reports, and presenting findings to technical teams and senior stakeholders. You will also contribute to security standards, improve testing processes, support vulnerability management, and help build capability through mentoring, knowledge sharing and the development of reusable testing techniques. The role may involve coordinating work delivered by external testers and ensuring activity is completed safely, ethically and in line with agreed rules of engagement.

Applicants should have substantial experience in penetration testing or ethical hacking, together with a strong understanding of web application, infrastructure, API, cloud and network security. You will be comfortable demonstrating and explaining complex vulnerabilities, prioritising risk and influencing remediation across a range of audiences. Relevant professional certifications such as CREST, OSCP, OSEP, OSWE, CHECK or equivalent experience are desirable. Strong knowledge of common attack frameworks, secure development principles, scripting or programming, and industry-standard tools will be valuable. Above all, you should be curious, methodical and committed to professional ethics, with excellent written and verbal communication skills and the ability to lead technical work in a collaborative environment.

We are seeking a Lead Ethical Hacking Penetration Tester to direct and deliver high-quality security assessments across applications, infrastructure, cloud environments, networks, and emerging technologies. This role will lead engagements from scoping and rules of engagement through testing, risk analysis, reporting, and remediation validation. You will apply a broad range of manual and automated techniques to identify vulnerabilities, demonstrate realistic attack paths, and provide clear, practical guidance that helps teams strengthen their security posture.

Key responsibilities include planning and leading penetration tests, red team exercises, web and mobile application assessments, internal and external infrastructure reviews, API testing, wireless assessments, and social engineering engagements where authorised. You will oversee the safe use of testing tools and frameworks, maintain accurate evidence and documentation, and produce technically detailed reports for security and engineering audiences. You will present findings to senior stakeholders, explain business impact and exploitability, support remediation discussions, and mentor junior testers through coaching, peer review, and knowledge sharing. You will also contribute to improving methodologies, playbooks, testing standards, and the quality of security deliverables.

Applicants should have substantial hands-on experience in penetration testing or ethical hacking, with a strong understanding of common attack techniques, vulnerability management, secure architecture, and industry frameworks such as OWASP, NIST, and MITRE ATT&CK. Experience with scripting or programming languages such as Python, PowerShell, Bash, or JavaScript is desirable, as is practical knowledge of cloud platforms, Active Directory, container environments, CI/CD pipelines, and modern authentication technologies. Relevant professional certifications, such as OSCP, CREST, CRTO, GXPN, or equivalent experience, are advantageous. Excellent written and verbal communication, strong analytical ability, sound professional judgement, and a commitment to responsible, authorised testing are essential.

We are seeking a Lead Infrastructure Engineer to provide technical leadership across storage, backup and cyber recovery services. This is a key role responsible for ensuring that critical infrastructure is resilient, secure, highly available and capable of supporting evolving business and technology needs. The successful candidate will lead the design, implementation, operation and continuous improvement of enterprise storage and data protection platforms, while helping to strengthen recovery capabilities against cyber threats and major incidents. Salary: £57,515–£82,430.

You will define and maintain technical standards, roadmaps and service strategies for storage, backup, replication, archiving and recovery solutions. Responsibilities will include leading complex infrastructure projects; developing robust backup and recovery architectures; configuring and managing storage technologies; improving monitoring, capacity planning and performance; and ensuring that recovery point and recovery time objectives are consistently met. You will also oversee testing of disaster recovery and cyber recovery procedures, identify vulnerabilities and resilience gaps, and implement appropriate controls to protect data from accidental loss, operational failure, ransomware and other threats. The role will involve producing clear technical documentation, maintaining accurate configuration records and contributing to incident, problem and change management processes.

You will act as a senior technical authority, providing guidance to engineers and collaborating with architects, security specialists, service teams, suppliers and senior stakeholders. The role requires strong experience in enterprise storage, backup and recovery technologies, together with a sound understanding of infrastructure security, cyber resilience, networking, virtualisation and cloud services. You should be confident analysing complex issues, making evidence-based recommendations and communicating technical information clearly to both technical and non-technical audiences. Experience of leading technical delivery, managing third-party suppliers, developing operational standards and working within IT service management frameworks is highly desirable. Relevant professional qualifications or equivalent practical experience would be welcomed.