Lacuna Talent

Our global client is working with large scale brand names and financial services clients and looking to hire a GCP Security Lead. This role is on a contract basis working on site for 3 days in London at an end client site. Hybrid opportunity. We are looking for an experienced Google Cloud Platform Security Lead for a security initiative at a banking client. Strong cloud platform experience is essential. You will be leading a team of security engineers who are strong with GCP technologies. There is a CNAPP/CSPM implementation so previous experience with Wiz or Palo Alto CSPM is a MUST!. Drive design decision in threat modelling working with STRIDE and MITRE ATT&CK. Strong understanding of cloud security principles, including IAM, Network Security, Vulnerability management and threat detection. Experience with container security and Kubernetes would be a advantage. A full brief on the client and job is available, please send CV and contact number on application.

We are working with a growing Consultancy who are looking to add to their existing Cyber/Information Security team with a number of hires. The role would require a wide-range of technical knowledge. Whilst not being a hands-on role, you will be required to be a conduit between the technical and non-technical members, assisting with delivery of projects for a number of high profile clients. KEY SKILLS Experience in a number of the following areas: Frameworks such as JSP440, JSP604, NIST, ISO27001 Knowledge of Secure architecture and what looks good Ability to write policies and understand high-level documentations Risk Assessments/Risk Management The above are not exhaustive, nor exclusive but the more wider the knowledge the more your application would have a chance of being successful. The role would require people to be on client sites 3-4 days per week, largely across the South West, but sometimes into the City of London area. You would also need to be SC cleared as minimum (or eligible to be SC/DV cleared) If you'd like to hear more, then please do get in touch.

Location: London/Manchester (hybrid) - 2 days per week Status - INSIDE IR35 We are working with a global organisation who are looking to bring in a Cloud Security Engineer on a 6 month (initially) contract basis. This role will assist the organisation improving their cloud security posture as well as having a close relationship with stakeholders. Experience: Knowledge of securing Azure and GCP platforms (preferred) Good understanding of reviewing architecture and what 'looks good' Experience with Infrastructure as Code (Terraform) & Docker/Kubernetes Experience with implementing ZTNA Experience with security CI/CD pipelines Understanding of best practise frameworks such as CIS, NIST etc If it sounds interesting get in touch to discuss further.

A global client is seeking an experienced Security Operations Automation Engineer for a 6-month contract (with potential for further renewal). The role requires hands-on experience in automating security processes and working with various security tools and integrations. The ideal candidate will enhance security automation efforts by creating, optimizing, and troubleshooting workflows, resolving integration challenges, and developing custom automation scripts to meet security objectives. A strong understanding of the Tools, Tactics, and Procedures (TTPs) used in advanced threats, as well as experience in continuous monitoring, incident response, and mitigating and automating threat detection, is required. Mandatory Requirements: Proven experience designing, developing, and maintaining automated workflows using Hyperautomation or SOAR platforms (Google Chronicle/Siemplify, Microsoft Sentinel, Palo Alto XSOAR, Torq, Tines). Hands-on experience with APIs and security tool integrations. Understanding of security technologies (SIEM, EDR, VM, Networking & Firewalls, IDS/IPS, Cloud, Web proxy, etc.). The role hybrid with travel to their London office 2-3 days a week. Salary - negotiable Please apply if interested!

We are working with a global organisation who are looking to implement a Breach & Attack Simulation platform to test and monitor their Cloud environment. This position will focus specifically on the integration and operationalisation of the BAS platform and ongoing review. Knowledge of Azure, GCP, and Kubernetes will be imperative. KEY SKILLS Tools such as Cymulate and AttackIQ or similar IAM configurations around vulnerabilities and testing Logging and monitoring Simulating attacks such as Credential Access, Establishing Foothold, Lateral Movement etc. The job is remote and Inside IR35. Happy to discuss day rates.

We are working with a global organisation who are looking to add to their existing Cyber/Information Security team with a number of hires across their Analyst/Consultant division. The role would require a wide-range of technical knowledge. Whilst not being a hands-on role, you will be required to be a conduit between the Engineering teams and the non-technical stakeholders so the ability to know 'what looks good' would be imperative. KEY SKILLS Experience in a number of the following areas: Cloud Technologies (AWS, Azure, Oracle etc) Knowledge of DevOps/DevSecOps processes (Docker, Kubernetes etc) SIEM, PAM, EDR, DLP technologies Experience working with Testing teams and scoping activities Risk and Vulnerability Assessment/Management The above are not exhaustive, nor exclusive but the more wider the knowledge the more your application would have a chance of being successful. The organisation has a strong internal promotion culture, as well as self-development/studies which you would be supported with. The role would also be remote so the successful person can be based anywhere. The most important thing is a high-propensity for learning and improvement. Any certifications you hold which could support your application would also be great, but again not 100% imperative. If you'd like to hear more, then please do get in touch.

We are working with a global organisation who are looking to add to their existing Cyber/Information Security team with a number of hires across their Analyst/Consultant division. The role would require a wide-range of technical knowledge. Whilst not being a hands-on role, you will be required to be a conduit between the Engineering teams and the non-technical stakeholders so the ability to know 'what looks good' would be imperative. KEY SKILLS Experience in a number of the following areas: Cloud Technologies (AWS, Azure, Oracle etc) Knowledge of DevOps/DevSecOps processes (Docker, Kubernetes etc) SIEM, PAM, EDR, DLP technologies Experience working with Testing teams and scoping activities Risk and Vulnerability Assessment/Management The above are not exhaustive, nor exclusive but the more wider the knowledge the more your application would have a chance of being successful. The organisation has a strong internal promotion culture, as well as self-development/studies which you would be supported with. The role would also be remote so the successful person can be based anywhere. The most important thing is a high-propensity for learning and improvement. Any certifications you hold which could support your application would also be great, but again not 100% imperative. If you'd like to hear more, then please do get in touch.

We are working with a global organisation who are looking to add to their existing Cyber/Information Security team with a number of hires across their Analyst/Consultant division. The role would require a wide-range of technical knowledge. Whilst not being a hands-on role, you will be required to be a conduit between the Engineering teams and the non-technical stakeholders so the ability to know 'what looks good' would be imperative. KEY SKILLS Experience in a number of the following areas: Cloud Technologies (AWS, Azure, Oracle etc) Knowledge of DevOps/DevSecOps processes (Docker, Kubernetes etc) SIEM, PAM, EDR, DLP technologies Experience working with Testing teams and scoping activities Risk and Vulnerability Assessment/Management The above are not exhaustive, nor exclusive but the more wider the knowledge the more your application would have a chance of being successful. The organisation has a strong internal promotion culture, as well as self-development/studies which you would be supported with. The role would also be remote so the successful person can be based anywhere. The most important thing is a high-propensity for learning and improvement. Any certifications you hold which could support your application would also be great, but again not 100% imperative. If you'd like to hear more, then please do get in touch.