Job Search

We are seeking an experienced Vulnerability Research Team Leader to guide a specialist team responsible for identifying, analysing, and responsibly disclosing security vulnerabilities across operating systems, applications, embedded devices, and emerging technologies. You will provide technical direction, set research priorities, and help translate complex findings into practical recommendations for engineering, product, and security stakeholders. This role combines hands-on technical leadership with people management and strategic planning.

Key responsibilities include defining and maintaining the team’s research roadmap; overseeing vulnerability discovery, exploit development, reverse engineering, fuzzing, and proof-of-concept creation; reviewing technical reports and ensuring findings are accurately assessed and documented; and coordinating responsible disclosure activities with relevant vendors, researchers, and internal teams. You will establish effective research methodologies, improve tooling and laboratory capabilities, monitor the threat landscape, and contribute to security advisories, technical publications, and presentations. You will also support incident response and risk assessments when specialist vulnerability research expertise is required.

The successful candidate will have substantial experience in vulnerability research, offensive security, or a closely related discipline, together with a strong understanding of operating system internals, networking, software architecture, and common vulnerability classes. Practical knowledge of reverse engineering, debugging, static and dynamic analysis, fuzzing frameworks, and scripting or programming languages such as Python, C, C++, or Rust is essential. Experience leading or mentoring technical teams, managing competing priorities, and communicating complex security issues to varied audiences is also required. A methodical, curious, and collaborative approach is important, along with sound judgement when handling sensitive information. Relevant professional certifications, published research, or a demonstrable history of responsible vulnerability disclosure would be advantageous.

We are seeking a Cyber Vulnerability Researcher to identify, analyse, and help mitigate security weaknesses across complex software, hardware, and network environments. You will conduct vulnerability research using a combination of manual analysis, reverse engineering, fuzzing, code review, and dynamic testing. The role will involve investigating emerging threats, validating reported vulnerabilities, developing proof-of-concept exploits where appropriate, and assessing the potential impact, exploitability, and scope of identified issues.

You will collaborate with security engineers, developers, incident responders, and technical stakeholders to communicate findings clearly and support effective remediation. Responsibilities will include producing detailed technical reports, documenting attack paths and reproduction steps, recommending practical mitigations, and contributing to vulnerability disclosure and tracking processes. You may also support security assessments, threat modelling, penetration testing, malware analysis, and the development of internal tools, scripts, and automation to improve research efficiency. Staying informed about new attack techniques, vulnerability classes, defensive technologies, and relevant industry standards will be an important part of the position.

Applicants should have professional or demonstrable practical experience in vulnerability research, offensive security, application security, reverse engineering, or a closely related discipline. Strong knowledge of common vulnerability classes, operating systems, networking, secure coding principles, and security testing methodologies is required. Experience with languages such as Python, C, C++, JavaScript, or Rust, along with familiarity with debugging and analysis tools, is highly desirable. Experience using fuzzing frameworks, disassemblers, debuggers, virtualisation platforms, or cloud environments would be advantageous. The successful candidate will demonstrate analytical thinking, careful attention to detail, sound technical judgement, and the ability to explain complex findings to both technical and non-technical audiences. A curious, ethical, and methodical approach to research is essential.

We are seeking an experienced Head of Vulnerability Management to lead the development and delivery of a mature, risk-based vulnerability management capability across a complex digital and technology estate. This is a senior role requiring strong leadership, sound technical judgement and the ability to influence stakeholders at all levels. You will set the strategic direction for identifying, assessing, prioritising and remediating vulnerabilities, ensuring that security risks are understood and managed effectively.

You will oversee vulnerability scanning, threat intelligence, exposure assessment, remediation tracking and reporting across infrastructure, applications, cloud services and third-party environments. Working closely with cyber security, architecture, engineering, service management and risk teams, you will establish clear policies, standards, operating procedures and performance measures. You will provide authoritative advice on remediation priorities, risk acceptance and emerging threats, while ensuring that vulnerability data is accurate, actionable and communicated clearly to technical and senior audiences.

The successful candidate will have substantial experience leading vulnerability management or a closely related cyber security function within a large, complex environment. You will bring strong knowledge of vulnerability assessment methodologies, common security weaknesses, risk-based prioritisation, remediation processes and relevant security tooling. Experience of managing teams, suppliers and cross-functional programmes is essential, along with the ability to develop capability, improve operational maturity and deliver measurable outcomes. You should be confident presenting recommendations to senior leaders, challenging constructively and building effective relationships across organisational boundaries. Relevant professional qualifications or demonstrable equivalent experience are welcome. We value people who are collaborative, inclusive, analytical and committed to continuous improvement. This role offers the opportunity to shape security practice, reduce organisational exposure and strengthen resilience across essential digital services.

We are seeking a Vulnerability Researcher – Consultant to identify, analyse, and responsibly disclose security weaknesses across software, hardware, embedded systems, and enterprise technologies. You will conduct vulnerability research from initial discovery through proof-of-concept development, validation, documentation, and remediation support. The role involves working with varied technologies and clients, translating complex technical findings into clear risk assessments and practical recommendations.

Responsibilities will include performing vulnerability assessments and security-focused code reviews; developing and refining fuzzing, reverse-engineering, and exploit-development techniques; analysing binaries, protocols, operating systems, applications, and firmware; and creating reliable proof-of-concept demonstrations in controlled environments. You will document findings to a high standard, assess exploitability and business impact, contribute to technical reports and presentations, and support responsible disclosure activities. You may also advise development and security teams on mitigation strategies, secure design principles, and methods for preventing similar weaknesses. The role may require managing multiple assignments, engaging directly with stakeholders, and presenting technical conclusions to both specialist and non-specialist audiences.

Applicants should have demonstrable experience in vulnerability research, penetration testing, exploit development, reverse engineering, or a closely related discipline. Strong knowledge of computer architecture, operating systems, networking, and common security weaknesses is expected, together with practical programming ability in languages such as C, C++, Python, Rust, or assembly. Experience with tools including debuggers, disassemblers, fuzzing frameworks, static and dynamic analysis platforms, and source-control systems would be valuable. An analytical mindset, curiosity, persistence, and the ability to explain complex issues clearly are essential. Relevant professional certifications, academic qualifications, published research, conference contributions, or a portfolio of independent security work are advantageous. A commitment to ethical conduct, confidentiality, continuous learning, and responsible vulnerability handling is required.

We are seeking an experienced Head of Vulnerability Management to lead the development and delivery of a comprehensive, risk-based vulnerability management programme. This is a strategic leadership role responsible for reducing cyber risk across a complex technology environment, including cloud platforms, on-premises infrastructure, applications, endpoints and third-party services. You will define the vulnerability management vision, establish effective governance and ensure that security risks are identified, prioritised and remediated in line with business objectives and regulatory expectations.

You will lead a team of vulnerability management specialists and work closely with Security Operations, Infrastructure, Engineering, Architecture, Risk, Compliance and Technology leadership. Responsibilities will include overseeing vulnerability discovery, scanning, validation, threat intelligence, risk-based prioritisation, remediation tracking and management reporting. You will establish meaningful service levels and key performance indicators, improve asset visibility and coverage, and ensure that vulnerabilities are assessed in the context of exploitability, business criticality and emerging threats. The role will also involve managing strategic relationships with technology and security vendors, supporting audit activity, and providing clear, concise updates to senior stakeholders.

The successful candidate will have substantial experience leading vulnerability management or a closely related cyber security function within a large and complex organisation. You will possess strong knowledge of vulnerability assessment methodologies, common security frameworks, risk management principles and industry tooling, with practical experience across infrastructure, applications and cloud environments. A proven ability to lead teams, influence stakeholders and translate technical risk into business-focused recommendations is essential. Relevant professional certifications such as CISSP, CISM, CRISC, OSCP or equivalent are desirable. You should be analytical, decisive and collaborative, with a continuous improvement mindset and the communication skills needed to drive accountability at all levels.

We are seeking an Advanced Cyber Threat Analyst to identify, investigate and disrupt sophisticated cyber threats across a complex technology environment. You will monitor threat activity, analyse security telemetry and intelligence, and assess potential impacts to systems, applications, data and business operations. The role requires a proactive, analytical professional who can connect seemingly unrelated events, identify attack patterns and provide clear, actionable recommendations to strengthen defensive capabilities.

Your responsibilities will include conducting advanced threat hunting across endpoint, network, cloud and identity environments; investigating alerts and suspected incidents; analysing malware, attacker tactics, techniques and procedures; and developing detection logic, use cases and response playbooks. You will correlate information from security information and event management, endpoint detection, vulnerability management and threat intelligence platforms. You will also support incident response activities, including scoping, containment, eradication and recovery, while contributing to post-incident reviews and improvements to security controls. Producing concise technical reports, risk assessments and briefings for both technical and non-technical audiences will be an important part of the role.

The successful candidate will have substantial experience in cyber threat analysis, security operations, incident investigation or a related discipline, together with strong knowledge of networking, operating systems, cloud services, identity platforms and common attack frameworks such as MITRE ATT&CK. Experience with scripting or automation, malware analysis, digital forensics, threat intelligence and query languages used in security platforms is highly desirable. You should be comfortable working with incomplete information, prioritising competing risks and communicating findings confidently. Relevant professional certifications or equivalent practical experience are welcomed. A strong commitment to continuous learning, sound judgement, attention to detail and the ability to collaborate effectively across technical and operational teams are essential.

We are seeking a Threat Intelligence Analyst to monitor, assess and communicate cyber threat activity affecting the organisation, its technology environment and relevant business sectors. You will collect and analyse intelligence from open, commercial and internal sources to identify emerging threats, adversary activity, vulnerabilities and potential impacts. Working closely with security operations, incident response, vulnerability management and risk teams, you will help transform complex information into clear, actionable insight.

Your responsibilities will include tracking threat actors, campaigns, malware, tactics, techniques and procedures; producing regular intelligence reports, alerts, briefings and executive summaries; and supporting investigations by providing relevant context, indicators of compromise and attack-pattern analysis. You will maintain intelligence records and mappings to recognised frameworks, contribute to detection and prevention improvements, and help assess the potential business impact of geopolitical, criminal and technology-related threats. You may also support threat-hunting activities, intelligence requirements, incident reviews and collaboration with trusted industry or public-sector partners.

The successful candidate will have experience in cyber threat intelligence, security analysis, incident response, security operations or a related discipline. You should be confident researching and evaluating information from multiple sources, distinguishing credible reporting from unreliable data, and presenting findings to both technical and non-technical audiences. Familiarity with threat intelligence platforms, security monitoring tools, malware analysis, digital investigations, MITRE ATT&CK and common intelligence lifecycle practices is desirable. Strong analytical, written and verbal communication skills are essential, along with curiosity, sound judgement and the ability to prioritise work in a changing threat environment. Relevant professional certifications or a degree in cybersecurity, computer science, intelligence studies or a similar subject would be advantageous.

We are seeking a Senior Cyber Threat Detection and Response Analyst to lead the identification, investigation and containment of sophisticated cyber threats across a complex technology environment. You will monitor security events, analyse alerts and intelligence, and coordinate effective responses to incidents affecting networks, endpoints, cloud services, applications and critical data. The role will involve working closely with security engineering, infrastructure, risk and operational teams to strengthen defensive capabilities and reduce organisational exposure.

Key responsibilities include developing and tuning detection rules, use cases and correlation logic; conducting advanced threat hunting across security telemetry; investigating indicators of compromise and suspicious activity; and managing incidents from initial triage through to remediation and post-incident review. You will contribute to the development of playbooks, response procedures and threat models, while identifying opportunities to automate repetitive tasks and improve investigation efficiency. The role will also require clear documentation of findings, production of threat and incident reports, participation in vulnerability and risk discussions, and mentoring less experienced analysts. You may be required to support security operations outside standard hours through an agreed on-call or escalation rota.

You will bring significant experience in cyber threat detection, incident response, security operations or a closely related discipline, together with a strong understanding of attack techniques, adversary behaviours and frameworks such as MITRE ATT&CK. Practical experience with SIEM, EDR, SOAR, network monitoring and threat intelligence platforms is essential, as is the ability to investigate using endpoint, network, identity and cloud logs. Scripting or automation skills in languages such as Python or PowerShell are desirable. Relevant professional certifications, such as CISSP, GIAC, GCIH, GCIA or equivalent, would be advantageous. Strong analytical, communication and problem-solving skills are required, along with the ability to explain technical risk clearly to both specialist and non-specialist audiences.

We are seeking an experienced Cyber Threat Intelligence Lead to shape and advance an intelligence capability that supports informed security decision-making across the organisation. In this role, you will lead the collection, analysis and dissemination of actionable intelligence relating to cyber threats, threat actors, vulnerabilities and emerging attack techniques. You will translate complex technical information into clear insights for security teams, senior stakeholders and business leaders, helping them understand risk and prioritise effective defensive measures.

You will establish and maintain intelligence requirements, develop structured collection plans and oversee the use of internal, open-source, commercial and industry data. Responsibilities will include analysing indicators of compromise, tracking threat actor activity, producing regular intelligence reports and briefings, and contributing to incident response, threat hunting and vulnerability management activities. You will also lead the development of threat assessments, support scenario planning and ensure intelligence is integrated into security operations, detection engineering and wider risk processes. Building strong relationships with internal teams, external intelligence providers, law enforcement and relevant information-sharing communities will be an important part of the role.

The successful candidate will have significant experience in cyber threat intelligence, security operations, incident response or a related discipline, with a strong understanding of the threat landscape and current attack methodologies. You should be confident assessing the reliability and relevance of intelligence, identifying trends and communicating findings to both technical and non-technical audiences. Experience with intelligence platforms, SIEM technologies, analytical frameworks such as MITRE ATT&CK, and scripting or data-analysis tools would be advantageous. Strong leadership, collaboration, writing and presentation skills are essential, together with a proactive approach, sound judgement and the ability to manage competing priorities in a fast-changing environment.

We are seeking a Research Assistant in Vulnerability Modelling to support research into the factors that influence vulnerability, risk and resilience across individuals, communities, systems or environments. You will contribute to the development, testing and application of quantitative and qualitative models, helping to transform complex evidence into robust insights for research, policy and practice. The role offers the opportunity to work across interdisciplinary projects and collaborate with researchers, data specialists and external stakeholders.

Your responsibilities will include conducting literature reviews, gathering and cleaning datasets, selecting appropriate modelling approaches, and implementing analyses using relevant statistical, computational or geospatial techniques. You will assist with developing vulnerability indicators, risk assessments and scenario-based analyses, while documenting assumptions, methods and results clearly. You will also prepare figures, tables, technical summaries and research outputs; contribute to reports, presentations and publications; and support the organisation of project meetings, workshops and stakeholder engagement activities. A strong commitment to data quality, ethical research and the responsible handling of sensitive information is essential.

Applicants should hold, or be close to completing, a degree in a relevant discipline such as data science, statistics, mathematics, computer science, geography, environmental science, social science, public health or a related field. You should have experience with data analysis and an understanding of statistical modelling, uncertainty, validation and reproducible research practices. Familiarity with programming languages such as Python or R, and experience working with databases, spreadsheets or geospatial data, would be advantageous. The successful candidate will demonstrate careful attention to detail, clear written and verbal communication, effective time management and the ability to work independently while contributing positively to a collaborative research environment. A willingness to learn new methods and engage with interdisciplinary challenges is highly valued.