Job Search

We are seeking a Cyber Security Engineer, Cloud Security Specialist, to help protect cloud-based platforms, applications, data and infrastructure across a complex technology environment. This role will contribute to the design, implementation and continuous improvement of secure cloud services, while supporting security operations, risk reduction and regulatory compliance. The successful candidate will work closely with infrastructure, engineering, architecture, development and governance teams to embed security throughout the technology lifecycle.

Key responsibilities include developing and maintaining cloud security controls across environments such as Azure, AWS or Google Cloud; managing identity and access controls, privileged access, encryption, key management, network security and secure configuration standards; and monitoring cloud services for vulnerabilities, misconfigurations and suspicious activity. You will support security assessments, threat modelling, incident response, penetration testing and remediation activities. The role will also involve creating and maintaining security policies, standards, technical documentation and assurance reports, as well as contributing to automation that improves security monitoring, compliance and operational efficiency.

Applicants should have proven experience in cloud security engineering or a closely related cyber security role, with practical knowledge of cloud-native security tools, IAM, logging and monitoring, security information and event management, vulnerability management and infrastructure-as-code. Experience with technologies such as Terraform, Kubernetes, CI/CD pipelines, scripting or security automation would be advantageous. Familiarity with recognised security frameworks and standards, including NIST, CIS, ISO 27001 or the shared responsibility model, is desirable. You will be analytical, collaborative and confident communicating technical risks to both specialist and non-specialist audiences. Relevant professional certifications, such as CCSP, CISSP, cloud-provider security certifications or equivalent practical experience, are welcomed.

We are seeking an Operational Cyber Researcher to investigate emerging cyber threats, assess their potential impact, and translate technical findings into practical security improvements. You will monitor threat activity, analyse malicious infrastructure, study attacker tactics and techniques, and contribute to the development of actionable intelligence for operational and strategic decision-making. The role requires curiosity, sound judgement, and the ability to work confidently with incomplete or rapidly changing information.

Your responsibilities will include conducting research across open, technical, and specialist intelligence sources; identifying indicators of compromise and patterns of malicious behaviour; and producing clear written assessments, briefings, and research reports for both technical and non-technical audiences. You will support incident investigations, vulnerability and threat assessments, and the continuous improvement of detection, response, and risk-management processes. You may also be expected to develop research methodologies, maintain intelligence repositories, collaborate with security operations and technology teams, and present findings to relevant stakeholders.

Applicants should have experience in cyber threat intelligence, security research, incident response, digital investigations, or a closely related discipline. A practical understanding of networking, operating systems, malware behaviour, attack frameworks, and common defensive tools is essential. Familiarity with scripting or data-analysis languages such as Python, experience using online investigation and intelligence platforms, and an understanding of threat modelling would be advantageous. You should be able to evaluate the reliability of sources, communicate complex issues clearly, manage competing priorities, and work effectively both independently and as part of a multidisciplinary team. Relevant professional certifications or equivalent demonstrable experience are welcome.

We are seeking an experienced Information Security Manager for a 12-month fixed-term contract. This is an excellent opportunity to lead and strengthen information security across a complex organisation, helping to protect critical systems, data and services while supporting business objectives. You will provide expert guidance on security strategy, governance, risk management and compliance, working closely with technology, operational and senior leadership teams.

Your responsibilities will include maintaining and developing information security policies, standards and procedures; identifying, assessing and managing information security risks; and overseeing security controls, assurance activities and improvement plans. You will coordinate responses to security incidents, support investigations and ensure that appropriate corrective actions are implemented. The role will also involve managing vulnerability and threat-related activities, supporting penetration testing, reviewing third-party security arrangements and contributing to business continuity and disaster recovery planning.

The successful candidate will have proven experience in an information security management role, with a strong understanding of security governance, risk frameworks, data protection principles and relevant industry standards such as ISO 27001 or NIST. Professional qualifications such as CISSP, CISM, CRISC or equivalent experience would be advantageous. You will be confident communicating with both technical and non-technical stakeholders, able to present complex risks clearly and influence decision-making at all levels. Strong analytical, organisational and problem-solving skills are essential, along with the ability to manage competing priorities and deliver practical solutions within agreed timescales. Experience of leading security awareness programmes, managing suppliers and working in a regulated or complex environment would be beneficial.

An exciting opportunity is available for an experienced Head of Information Security to provide strategic leadership across cybersecurity, information assurance and technology risk. This role is suited to a security professional who can combine strong technical knowledge with effective governance, stakeholder management and business-focused decision-making. The successful candidate will help strengthen security maturity, protect critical information assets and ensure that security practices support organisational objectives.

Key responsibilities will include developing and executing an enterprise-wide information security strategy; maintaining security policies, standards and procedures; and overseeing risk assessments, threat management and vulnerability remediation. You will lead the design and continuous improvement of security controls across infrastructure, applications, cloud services and third-party environments. The role will also involve managing incident response capabilities, coordinating investigations, reporting on security events and ensuring that lessons learned are incorporated into future planning. You will support compliance with relevant legal, regulatory and industry requirements, prepare clear reports for senior leadership, and contribute to business continuity and disaster recovery planning.

Applicants should have substantial experience in senior information security, cybersecurity or information assurance leadership roles, together with a strong understanding of security frameworks, risk management principles and regulatory obligations. Experience leading security programmes, incident response, audit activity and supplier assurance is highly desirable. Relevant professional certifications such as CISSP, CISM, CRISC or equivalent would be advantageous. Excellent communication and influencing skills are essential, as you will work with technical teams, executives and external partners to embed a practical, risk-based security culture. The position offers a rate of $90 per hour, with the opportunity to earn up to $1,800 per week, subject to hours worked and engagement terms.

We are seeking a Critical Incident Responder to coordinate the effective management of high-impact incidents affecting services, systems, customers, or business operations. In this role, you will act as a central point of coordination during major incidents, ensuring that the right technical and business stakeholders are engaged promptly and that response activities remain focused, structured, and clearly communicated. You will assess incident severity, initiate appropriate response procedures, establish communication channels, and maintain accurate records throughout the incident lifecycle.

Your responsibilities will include leading incident bridges, coordinating investigation and recovery activities, tracking actions and decisions, providing regular updates to stakeholders, and escalating issues when required. You will work closely with technical support, engineering, infrastructure, security, suppliers, and business teams to minimise disruption and restore normal service as quickly as possible. Following each incident, you will facilitate post-incident reviews, document root causes and contributing factors, identify lessons learned, and ensure that corrective and preventative actions are assigned and followed through. You will also contribute to the development of incident response procedures, communication templates, service resilience practices, and operational reporting.

The successful candidate will have experience managing critical incidents in a fast-paced technology or service environment, with a strong understanding of incident management principles, escalation processes, and service restoration. You will be confident making decisions under pressure, balancing competing priorities, and communicating clearly with both technical and non-technical audiences. Strong organisational, analytical, and stakeholder management skills are essential, along with the ability to remain calm and impartial during challenging situations. Experience with IT service management frameworks, incident management platforms, operational resilience, problem management, or business continuity would be advantageous. A proactive approach, attention to detail, and commitment to continuous improvement are key to success in this role.

We are seeking a Security Systems Engineer to design, install, maintain and improve integrated security technologies across a range of operational environments. The role will focus on ensuring that physical security systems are reliable, resilient and aligned with business, regulatory and safety requirements. You will work closely with internal stakeholders, contractors and technology partners to deliver effective solutions that protect people, premises, assets and information.

Key responsibilities will include configuring, commissioning and supporting CCTV, access control, intruder detection, intercom, perimeter protection and associated monitoring systems. You will investigate faults, assess system performance, coordinate planned maintenance and respond to incidents or service requests. The successful candidate will produce technical specifications, system designs, test plans, risk assessments and detailed documentation. You may also support project delivery by reviewing designs, managing installations, witnessing testing, coordinating suppliers and ensuring that completed work meets agreed standards. Regular site visits may be required, together with participation in an out-of-hours escalation or on-call arrangement.

Applicants should have experience engineering or supporting electronic security systems, ideally within a complex, multi-site or highly regulated environment. Knowledge of IP networking, databases, operating systems, system integrations and cybersecurity principles is desirable, along with practical experience of fault-finding and technical diagnostics. Familiarity with relevant industry standards, data protection obligations, health and safety requirements and change-control processes would be advantageous. A methodical approach, strong communication skills and the ability to manage competing priorities are essential. You should be comfortable working independently while contributing effectively to multidisciplinary projects, and be able to explain technical issues clearly to both specialist and non-specialist audiences. Relevant technical qualifications or professional certifications are welcomed.

We are seeking an experienced Data Protection Officer to lead and coordinate data protection, privacy, and information governance activities across the organisation. You will provide independent advice on compliance with applicable data protection laws and regulations, monitor adherence to internal policies, and promote a strong culture of privacy and responsible information handling. Working with colleagues at all levels, you will help ensure that personal data is collected, used, stored, shared, and deleted lawfully, fairly, and transparently.

Your responsibilities will include maintaining and reviewing data protection policies, procedures, records of processing activities, data retention schedules, and privacy notices. You will advise on data protection impact assessments, legitimate interest assessments, international data transfers, contractual arrangements, and the privacy implications of new systems, projects, and services. You will also oversee the management of individual rights requests, support the investigation and reporting of personal data breaches, and coordinate responses to regulatory enquiries. Regular monitoring, internal audits, risk assessments, and clear reporting to senior stakeholders will be central to the role.

The successful candidate will have substantial experience in a data protection, privacy, compliance, or information governance position, together with a strong working knowledge of relevant legislation and regulatory guidance. A recognised professional qualification in data protection, privacy, law, information governance, or a related discipline is desirable. You should be confident interpreting complex requirements, producing practical guidance, and communicating effectively with both technical and non-technical audiences. Strong organisational skills, sound judgement, discretion, and the ability to manage competing priorities are essential. Experience developing training and awareness programmes, influencing stakeholders, and working with information security, legal, procurement, and technology teams would be highly advantageous.

We are seeking a Security Operations Centre (SOC) Analyst to help protect critical systems, applications and data from cyber threats. Working as part of a collaborative security team, you will monitor security events, investigate suspicious activity and support the timely resolution of incidents across a diverse technology environment. This role is suited to an analytical and methodical professional who can remain calm under pressure, communicate clearly and maintain a strong focus on risk reduction.

Key responsibilities will include monitoring SIEM, endpoint detection and response, network security and other security tools; triaging alerts and identifying false positives; conducting initial investigation and analysis of potential incidents; escalating confirmed or complex threats in line with established procedures; and maintaining accurate records of investigations, actions and outcomes. You will contribute to incident response activities, vulnerability and threat monitoring, security reporting and the continual improvement of detection rules, playbooks and operational processes. The role may also involve supporting forensic investigations, reviewing logs, producing management information and participating in an on-call or shift-based rota.

Applicants should have experience in a SOC, security monitoring, incident response or a closely related cybersecurity environment, together with a practical understanding of common attack techniques, cyber risks and defensive controls. Familiarity with SIEM platforms, endpoint security solutions, network traffic analysis, firewalls, intrusion detection systems and threat intelligence is desirable. Knowledge of relevant frameworks and standards, such as NIST or ISO 27001, would be advantageous. Professional qualifications in cybersecurity or equivalent practical experience are welcome. You should demonstrate strong analytical and problem-solving skills, attention to detail, sound judgement and the ability to explain technical issues to both specialist and non-specialist audiences. A commitment to continuous learning and maintaining current knowledge of the evolving threat landscape is essential.

We are seeking a Cloud Security Engineer to support the design, implementation and continual improvement of secure cloud environments for customers operating in sensitive and highly regulated sectors. Based in Leeds, this role offers the opportunity to work on complex national security programmes, helping to protect critical systems, data and services against evolving cyber threats. You will collaborate with architects, developers, infrastructure specialists and security professionals to deliver robust, resilient and compliant cloud solutions.

Your responsibilities will include designing and deploying security controls across cloud platforms, reviewing architectures, and providing technical guidance on identity and access management, encryption, network security, logging, monitoring and vulnerability management. You will help embed security throughout the development lifecycle, assess risks, support threat modelling and contribute to incident response and security investigations when required. The role will also involve producing clear technical documentation, supporting security assurance activities, and ensuring solutions align with relevant policies, standards and regulatory obligations.

We are looking for experience in cloud security engineering, ideally within environments such as AWS, Microsoft Azure or Google Cloud, along with a strong understanding of secure cloud architecture and DevSecOps practices. You should be comfortable working with infrastructure as code, automation, security monitoring tools and common cloud-native security services. Experience of UK government, defence, national security or other highly controlled environments would be advantageous, as would familiarity with frameworks such as NIST, CIS or ISO 27001. Strong analytical, communication and problem-solving skills are essential. You must be able to obtain and maintain the appropriate level of UK security clearance, and be willing to work collaboratively in a delivery-focused environment.

We are seeking an experienced Data Protection and Compliance Manager to lead the development, implementation and continuous improvement of data protection, privacy and compliance arrangements across the organisation. This is a key role responsible for ensuring that personal data is handled lawfully, securely and transparently, while supporting colleagues to understand and meet their regulatory and governance obligations.

You will provide practical advice on data protection legislation, including the UK GDPR and Data Protection Act 2018, and oversee the maintenance of policies, procedures, records of processing activities, data retention schedules and privacy notices. Responsibilities will include managing data protection impact assessments, responding to data subject rights requests, supporting the investigation and reporting of personal data breaches, and coordinating responses to information requests. You will also monitor compliance risks, maintain appropriate registers and controls, prepare reports for senior stakeholders, and contribute to audits and assurance activity. Working with internal teams and external partners, you will review contracts and data-sharing arrangements, advise on lawful bases and international transfers, and ensure suitable safeguards are in place.

The successful candidate will have substantial experience in a data protection, privacy, information governance or compliance role, together with a strong understanding of relevant legislation, regulatory guidance and good practice. A recognised data protection or compliance qualification is desirable, as is experience of delivering training, influencing stakeholders and embedding a positive compliance culture. You will be analytical, organised and confident interpreting complex requirements and translating them into clear, proportionate actions. Excellent written and verbal communication skills are essential, along with sound judgement, discretion and the ability to manage competing priorities. This role offers the opportunity to make a visible contribution to effective governance, responsible data use and continuous organisational improvement.