69 jobs found

The R&D team at Chainalysis is inspired by solving the hardest technical challenges and building products that establish trust in cryptocurrencies. We're a global organization that thrives on challenging work and doing it alongside exceptionally talented teammates. Our industry evolves rapidly, and our mission is to build a flexible, AI-driven platform that automates entity resolution, optimizes data labeling pipelines, and creates predictive models that identify illicit patterns before they accelerate. Our data and solutions have been used to solve some of the world's most high-profile criminal cases and grow consumer access to cryptocurrency safely. Now, by pairing the industry's most trusted blockchain data with agents that reason, investigate, and act, we help our customers scale their workflows as the cryptocurrency economy becomes increasingly mainstream. Chainalysis data has helped solve some of the world's highest-profile criminal and national-security cases and made it safer for people everywhere to access crypto. The Global Intelligence Team produces the attribution at the heart of that data - connecting on-chain activity to the real-world entities behind it, across the global crypto ecosystem. It's the intelligence data moat beneath every Chainalysis product, and what investigators, sanctions authorities, and national-security agencies rely on to follow the money and disrupt threats. Few threats test that mission harder than Iran. Through the IRGC and its Qods Force, a network of proxies and Shia militant groups, state-linked cyber actors, and a sprawling sanctions-evasion apparatus, the Islamic Republic has turned to cryptocurrency to raise, move, and launder value beyond the reach of the traditional financial system - from exchange-based sanctions evasion and crypto mining powered by subsidized energy, to oil- and commodity-for-crypto schemes, dual-use procurement, and the financing of proxies across the region. Making that activity visible on-chain is one of the most consequential problems in crypto intelligence today. As our Iran-focused intelligence analyst - the team's subject-matter expert on Iran and the IRGC - you'll own that problem end to end. This is a depth role: while our analysts cover the breadth of the crypto-services ecosystem, you'll go deep on a single, high-stakes domain - becoming the person, inside Chainalysis and increasingly across the industry, who understands how Iran and its proxies use crypto and can prove it on-chain. You'll own the attribution for Iran's crypto footprint, map how these networks actually operate, turn that into finished intelligence customers act on, and be the expert voice representing Chainalysis on Iran crypto threats. Who you'll work with You'll join a fast-moving, globally distributed team - analysts, threat-domain SMEs, data scientists, and engineers - collaborating across time zones, async and in real time. We move fast, hold each other to a high bar, and back each other up across regions. As the Iran SME, you'll be the single point of depth for the domain and a force multiplier for everyone working adjacent to it. In this role, you'll: Own Iran attribution end to end - the threat-actor entities, their definitions, and the accounts, addresses, and infrastructure they operate: Iranian exchanges and OTC/no-KYC networks, IRGC and IRGC-QF financing, Iranian proxy and Shia militant finance (e.g., Hezbollah, the Houthis, and Iraqi militias), sanctions-evasion infrastructure, Iranian ransomware and state-linked cyber operations, and oil-, commodity-, and procurement-for-crypto flows. Lead the attribution response to Iran-related sanctions events - when OFAC or allied authorities designate Iranian entities, actors, or infrastructure, drive the rapid, high-visibility on-chain attribution that turns those designations into coverage in our data, often against the clock. Map the networks on-chain - trace how Iranian actors raise, move, launder, and cash out value through Iranian VASPs, regional exchanges, mixers, no-KYC swaps, mining operations, and off-ramps, and keep that picture current as they adapt to pressure. Produce finished intelligence - advisory notes, customer and partner briefings, and contributions to flagship publications (the Crypto Crime Report and beyond) that make the Iran crypto threat legible and actionable. Be the named external expert - represent Chainalysis on Iran crypto threats at conferences, on panels, with the press, and in briefings to public- and private-sector partners. Help set the Iran collection agenda - surface what data we need on Iranian networks and feed those requirements into our collection process and priority intelligence requirements; you direct collection for the domain, but it runs through the team's apparatus and prioritization, not you alone. Translate typologies into detection - turn what you learn about Iranian methods into guidance that our products and our customers can operationalize. Build with AI - design and tune the automation that scales your analysis and the team's, and handle the hard cases automation can't. Level up the team - raise the bar on Iran and threat-finance tradecraft broadly, and partner closely with analysts, other SMEs, data science, and engineering. We're looking for candidates who have: Deep, demonstrable Iran expertise - real command of the IRGC and IRGC-Qods Force, Iran's proxy and Shia militant landscape, Iranian sanctions evasion, and/or Iran's illicit-finance and procurement systems. This is the core of the role, and we'll expect you to show it. On-chain tracing ability against Iranian targets - direct experience following Iranian crypto activity on-chain (Iranian exchanges, sanctions evasion, proxy or terror finance), or deep Iran threat-finance expertise paired with proven blockchain-tracing skill you can bring to bear here from day one. A national-security or threat-finance background - intelligence, sanctions, counter-threat-finance, or investigations, from the IC, Treasury/OFAC, law enforcement, the military, a think tank or research institution, or private-sector CTF/sanctions work. Regional fluency - a strong grasp of Iranian geopolitics, the proxy network, and regional financial flows. Farsi (or Arabic) language ability is a significant plus. Elite potential and a proven track record - exceptional aptitude, judgment, and work ethic; you've led hard problems end to end and you raise everyone around you. Excellent writing and communication - this is an outward-facing expert role; your intelligence has to land with analysts, customers, and senior audiences alike. AI-forward instincts - you build automation to scale your work and others', not just use it. Comfort working with data; blockchain forensics experience strongly preferred. 5+ years of relevant analytic, intelligence, or threat-finance experience for a Senior hire; 8+ years and recognized domain authority for a Staff hire. You might also have: Farsi language ability. Direct experience with OFAC sanctions, terror-finance designations, or the designation process. A record of published research or public speaking on Iran, sanctions evasion, or crypto threat finance. Familiarity with Iranian exchange infrastructure, crypto mining as a sanctions-evasion vector, or dual-use procurement networks. AI at Chainalysis AI is not a feature at Chainalysis - it is a new way of working. One that turns instructions into work done, and helps us move faster than the threats we're built to counter, and we expect our employees to take ownership of the output and ensure quality. As the world's most trusted blockchain analytics platform, Chainalysis sits at a rare intersection of proprietary data, regulatory relationships and crypto expertise that makes it uniquely placed to shape and lead the next era of AI-driven intelligence - and we expect everyone here, regardless of role, to be an active part of it. AI fluency is tied directly to how we measure performance and how we plan to win. There is no substitute for your own curiosity. We provide the tools, workflows, and space to experiment - but the expectation is that you develop these capabilities yourself, bring ideas, and collaborate across teams to reinvent the way work gets done. We are not using AI to do less. We are using it to do what was never possible before. About Chainalysis Chainalysis is the blockchain data platform, making it easy to connect the movement of digital assets to real-world services. Powered by deep blockchain data and AI, organizations can investigate illicit activity, manage risk exposure, and develop innovative market solutions built on the industry's most trusted blockchain intelligence. Our mission is to build trust in blockchains, blending safety and security with an unwavering commitment to growth and innovation. You belong here. At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. We're ensuring we keep learning by committing to continually revisit and reevaluate our diversity culture. We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. If you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more here. We can't wait to meet you. . click apply for full job details

Business Change Analyst: £43,083 Business Change Manager: £53,000 Senior Business Change Manager: £68,745 All roles attract a Concessionary Payment of £2,758 to £3,144, depending on role. Flexible working: We support part-time working of at least 30 hours per week, compressed hours and job shares and flexible start and finish times. Working from home arrangements will be considered where possible and agreed in line with both personal circumstances and business needs. Due to the sensitive nature of these roles, opportunities to work from home are limited. GCHQ is an intelligence, cyber, and security agency with a mission to keep the UK safe. We use cutting-edge technology, ingenuity, and partnerships to identify, analyse and disrupt threats. Working with our intelligence partners MI5 and MI6, we protect the UK from terrorism, cyber-attacks, and espionage. At GCHQ, you'll do varied and fascinating work in a supportive and inclusive environment that puts the emphasis on teamwork. This is an opportunity to join a collaborative Business Change team delivering a wide range of transformation initiatives across the organisation - from technology implementation and structural reorganisation to cultural change and operating model redesign. At the heart of this work, the role involves helping teams understand not just what is changing, but why - and what it will take to make it successful. Working closely with stakeholders across the business, you'll bring a people-focused perspective to ensure that new systems, structures, and ways of working are understood, adopted, and deliver their intended benefits. The scope of your role will reflect your level of experience. You might be building your capability by supporting elements of a larger programme, delivering smaller scale change, or already leading complex initiatives and advising on the best way forward. At the most senior level, you'll operate as a trusted partner to the business, shaping how change is approached, influencing senior stakeholders, and guiding the organisation through its most challenging transformation. Across all levels, variety is a constant. You'll move between different types of change, teams, and priorities, often at pace, requiring you to adapt your approach and apply the right tools and techniques for each situation. It's about understanding context, people, and outcomes, and responding accordingly. So, what about you? You'll bring experience of delivering business change in a professional environment, along with the judgement to know that no two initiatives are ever quite the same. You're comfortable adapting your approach to suit the context, the people involved, and the outcomes you're trying to achieve. You may be building your experience by contributing to change delivery, or owning smaller initiatives, or already leading complex programmes and advising stakeholders at scale. At the most senior level, you'll be confident influencing decision-making and shaping how change is approached across an organisation. What matters most is how you work. You collaborate naturally, communicate clearly, and build effective relationships across teams. You're curious about different ways of delivering change, open to learning from others, and willing to share your own experience. You're also comfortable working in an environment where priorities can shift, adapting quickly and staying focused on what will deliver the greatest impact. You'll also hold, or be willing to work towards, a recognised Business Change qualification such as APMG or Prosci, with experience across areas such as technology, organisational design, culture, or operating model change. Beyond the role itself, you'll share our values of integrity and respect, along with a collaborative and creative approach, and be motivated by the opportunity to use your expertise to make a positive difference to the UK. At GCHQ diversity and inclusion are critical to our mission. We therefore welcome and encourage applications from everyone, including those from groups that are under-represented in our workforce such as women, those from an ethnic minority background, people with disabilities and those from low socio-economic backgrounds. Find out more about our culture, working environment and diversity on our website . To find out more and apply, please visit our website by clicking APPLY NOW. To be eligible to apply, you must be a British Citizen. If you hold dual nationality, of which one component is British, you will nonetheless be considered. Candidates must normally have been resident in the UK for seven out of the last ten years. This is particularly important if you were born outside the UK. You can apply at the age of 17; however, if successful, you will not be offered a start date before your 18th birthday. There is no upper age limit. Full eligibility details can be found on our website .

About the job Job summary Discover a career in your hands at HMRC. Whether you're seeking purpose, growth, or a workplace that gives you a true sense of belonging, hear from some of our employees as they share their story about what it's really like to work at HMRC. Visit our YouTube channel to watch the full series and come and discover your potential. Our team is rapidly growing as we invest in new technologies and capabilities, and we are in search of enthusiastic individuals who can help us in achieving our mission. We are continually improving the service we give to our customers and, in line with this, we are creating a new response and management team within the HMRC Fraud Prevention Centre. The Fraud Prevention Centre (FPC) is a strategic capability within HMRC Security, designed to safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy & Advisory, to deliver a holistic approach to fraud prevention. Job description We're looking for a proactive and analytical professional to support HMRC's fight against identity fraud. You'll help lead data-driven investigations into suspicious activity related to identity verification and authentication services, while working with the team and partners, acting as a key contributor in a team that supports customers and provides insight into identity fraud activity and proactive searching for threats. This is an exciting opportunity to make a real difference, working in a dynamic and evolving environment. Person specification Manipulate and analyse large data sets and investigate suspicious activity. Learn, develop, and apply methods using data analytics techniques such as data mining, data matching, clustering analysis and outlier detection. Use basic scripting languages to develop visualisations and automate effective searches to build a growing analytical suite of capabilities that you can operate efficiently. Have strong communication skills and be able to demonstrate working across business and technical domains. You will have excellent interpersonal skills. Apply your knowledge of security and fraud risks to digital services. Support and deputise for the senior analysts, producing clear, insightful reports and presentations for senior stakeholders. You will be confident working in an environment that may flex its focus in response to emerging issues and have a delivery focus. You will be eager to learn and widen your experience in different areas of identity work. You will use your experience of scripting, for example SPL, Python, SQL, KQL to proactively search and discover anomalies. Be flexible and enthusiastic whilst working with some ambiguity as the team forms, grows and matures. Support senior managers in the reporting of metrics and support the wider aims of the HMRC Security Identity Team. Identify process improvement areas. Essential Criteria Knowledge of fraud detection techniques, including behavioural analysis and anomaly detection and investigation and OSINT (Open Source Intelligence) methods. Data analysis skills and experience with large data sets, with proficiency scripting complex queries in analysis environments. Solid technical understanding of web and API services (e.g. cookies, IP addresses, authentication processes) and threats to those services from cybercrime actors and tools. Experience using Security Information and Event Management (SIEM) platforms, preferably in a security operations setting. A sound understanding of Identity, Verification and Authentication principles. Desirable Criteria A degree in Data Analysis, Data Science, Information Security, Cyber Security, or other Cyber qualifications eg SANS, or at least previous experience in a relevant cyber role. Proven experience in fraud detection, cyber security, or threat intelligence within a large organisation. Active use of at least one of the following: Python, SQL, KQL, SPL. Important Additional Information The successful candidate may be required to apply for Developed Vetting (DV) clearance level once in post but must already hold or be willing to obtain Security Check (SC) clearance level before starting the role. Further Location Information Please ensure that you only apply for a location that you are willing and able to work from, as we will only make one offer of employment. Any additional notes included in a 'Further Location Preferences (optional)' field within the application form, will not be considered. Please be aware that you cannot change your location preference after submitting your application. Office closures For more information on where you might be working, review this information on our locations. If your location preference is for one of the following sites, it's important to note that these are not long-term sites for HMRC and we will require you to move to a new building in the future, subject to our location strategy and the applicable employee policies at that time. These sites are: Benton Park View, Newcastle - moving to Pilgrims Quarter, Newcastle Telford Plaza, Telford - moving to Parkside Court, Telford Trinity Bridge House, Salford - moving to an alternative office in Manchester/ Salford You will be given more information about what this means at the job offer stage. Leeds Locations Moves Adjustment Payment will be available for this role, provided the successful applicant is a current HMRC colleague in Bradford and meets the eligibility requirements outlined in the HMRC's Moves Adjustment Payment guidance. Benefits Alongside your salary of £37,682, HM Revenue and Customs contributes £10,916 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window). HMRC operates both Flexible and Hybrid Working policies, allowing you to balance your work and personal commitments. We welcome applications from those who need to work a more flexible arrangement and will agree to requests where possible, considering our operational and customer service needs. We offer a generous leave allowance, starting at 25 days and increasing by a day for every year of qualifying service up to a maximum of 30 days. Pension - We make contributions to our colleagues' Alpha pension equal to at least 28.97% of their salary. Family friendly policies. Personal support. Coaching and development. To find out more about HMRC benefits and find out what it's really like to work for HMRC hear from our insiders or visit Thinking of joining the Civil Service Things you need to know Artificial intelligence Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use. Selection process details This vacancy is using Success Profiles (opens in a new window), and will assess your Strengths and Experience. How to Apply As part of the application process, you will be asked to provide the following: A name-blind CV including your job history, previous experiences and qualifications. Qualifications are not mandatory for this role. A 750-word Personal Statement. Your Personal Statement should be used to describe how your skills and experience would be suitable for the advertised role, making reference to the Essential Criteria and Person Specification outlined in the advert. Please complete a separate statement (Max 250 words) for the Desirable Criteria where applicable. This is not essential for the role but may be considered by the vacancy-holder where candidates have the same scores at interview. Further details around what this will entail are listed on the application form. Prior to applications being sifted candidates will be asked to complete an additional IKM assessment. Candidates will be sent details of the assessment once the advert has closed. This assessment is a pass or fail and only those who pass will be considered at the sift stage. Sift In the event of a large number of applications being received, an initial sift may be held on your CV. At full sift your CV and your Personal Statement will be assessed, with the successful candidates being invited to interview. We may also raise the score required at any stage of the process if we receive a high number of applications. Interview During the panel interview, your experience will be assessed, and you will be asked strength-based questions to also explore what you enjoy and your motivations relevant to the job role. This is an example of a strengths-based question: . click apply for full job details

About the job Job summary Discover what it's like to work in a compliance role that makes an impact. Could you help us shape a stronger, fairer future? Your next career move starts here. HMRC's Fraud Investigation Service (FIS) is responsible for the department's civil and criminal investigations. Covert Operations, Digital Exploitation (CODE) sits within FIS. Working across Law Enforcement and government, CODE provides investigative tools and covert techniques to front-line investigations and works with key partners to develop and provide access to new technology and systems to enable investigators to respond to serious and complex tax evasion and crime. HMRC is faced with increasingly complex frauds committed by well-resourced and, often, digitally informed and aware criminal groups. This post sits within the CODE Digital Operations command that includes the Communications Data Unit (CDU) and the National Digital Investigation Unit (NDIU). This command recognises the importance and synergy between these two technical areas. This is an opportunity to join CODE Digital Operations during a crucial period of expansion, development of capability and impact. The National Digital Investigation Unit (NDIU) specialise in digital problem solving, drawing upon operational experience and pragmatic application of datasets, such as but not limited to Communications Data, Open Source Intelligence, vehicle telematics, ANPR data and digital forensics (handset downloads). Job description The NDIU is a team of Digital Investigators, which provide ongoing and dynamic operational advice and support to Risk Intelligence Service (RIS) and FIS case teams and wider internal 'customers' such as, the Priority Criminals Unit, Internal Investigations, Protected Persons Unit and the Operational Security network to name a few. Developing effective digital strategies is fundamental to NDIU assisting investigation teams to achieve meaningful operational outcomes. The NDIU is a national team, the role involves regular travel with overnight stays to attend training courses or work alongside colleagues, particularly within the first two years on the team. This is a fantastic opportunity to be part of a command that enhances HMRC's response to sophisticated organised crime and serious fraud. Our work is varied, rewarding and impactful, investigating the most harmful tax frauds and criminal groups. Using innovative digital approaches and techniques, you will be making decisions that will help tackle fraudsters who present the highest threat to the UK Exchequer. You will be working with like-minded people, who constantly look for opportunities to add value and share knowledge to drive investigations forward. Person specification As a Digital Investigator you will: Become proficient in the application of Digital Investigation techniques, exploiting social media, closed sources and emerging communication systems, using several bespoke third-party solutions. Consider and create bespoke digital strategies to assist and support high priority, complex and sensitive HMRC investigations. Provide advice to support proactive and reactive operations, including live deployments, to identify data acquisition and exploitation opportunities. Advice ranges from sustained dedicated support over many months to short term assistance. Provide guidance to Senior Investigation Officers/Investigators on the use of technology in investigations, using experience and knowledge to develop and progress digital strategies, in difficult or complex investigations. Gather intelligence and evidence on individuals, corporates, and organised crime groups to progress and enhance criminal investigations into attacks on our tax systems. Utilise digital investigation skills and bespoke tools to interrogate, evaluate and interpret relevant digital data sets. Identify, collate and exploit data from external and internal data sources to develop the most holistic picture of an individual. Conduct research, including internet and social networking analysis, to an evidential standard. Flexibility to travel within the role. There will be a bespoke training package depending on the previous experience of the successful candidate, which will require travel. Be part of 1 week in 4 on-call cadre. This is in line with Flexibility Payment 2. Essential Criteria A sound knowledge of Communications Data. An understanding of Digital Investigation opportunities and capabilities. An interest in current and emerging communications technologies. This role requires experience of conducting criminal investigations and a thorough working knowledge of Criminal Justice procedures. Including the following legislation and corresponding Codes of Practice: Investigatory Powers Act 2016 (IPA) Regulation of Investigatory Powers Act 2000 (RIPA) Police Act 1997 (PA) Proceeds of Crime Act 2002 (POCA) Criminal Procedures and Investigations Act 1996 (CPIA) Police and Criminal Evidence Act 1984 (PACE) Further Location Information Please ensure that you only apply for a location that you are willing and able to work from, as we will only make one offer of employment. Any additional notes included in a 'Further Location Preferences (optional)' field within the application form, will not be considered. Please be aware that you cannot change your location preference after submitting your application. Office Closures If your location preference is for the following site, it's important to note that this is not long-term site for HMRC and we will require you to move to a new building in the future, subject to our location strategy and the applicable employee policies at that time. For more information on where you might be working, review this information on our locations (opens in a new window) This site is: Benton Park View, Newcastle - moving to Pilgrims Quarter, Newcastle You will be given more information about what this means at the job offer stage. Flexibility Payment This post attracts a Level 2 Flexibility Payment (FP) that is paid monthly with salary. This FP allows HMRC flexibility to change your work pattern, at short notice, to meet business needs. You will be expected to undertake periods of On Call. You will also be expected to work additional hours, at weekends and outside your normal working hours/days (including bank holidays). In applying for a position and accepting the FP you agree that you can and will meet those attendance requirements. Note: Payment of FP is dependent on successful completion of role specific training and you will move to Level 2 FP eligibility in stages (see the attached document for details). FP levels are reviewed annually - on a business need and personal basis - and may be subject to change. Details of the Flexibility Payment can be found in the attached document. Qualifications Please advise on your CV that you are an accredited criminal justice professional or intelligence analyst, that you can commit to any required training, and that you hold at least one of the following: - HMRC BTEC Level 3 Advanced Diploma in Enforcement (Criminal Investigation) - HMRC Accredited Counter Fraud Qualification Level 4 Diploma - University of Portsmouth Counter Fraud Professional Accreditation Board (CFPAB) Accredited Counter Fraud Specialist. - University of Northumbria CFPAB Accredited Counter Fraud Specialist. - University of Portsmouth CFPAB Accredited Counter Fraud (Intelligence) Specialist. - University of Northumbria CFPAB Accredited Counter Fraud (Intelligence) Specialist. - Accredited Counter Fraud Intelligence Specialist (ACFIS) from the Counter Fraud Professional Accreditation Board (CFPAB) in conjunction with the University of Portsmouth. Current PIP2 Status - You must hold a current and active PIP2 (Investigator) accreditation issued by a recognised UK law enforcement body (e.g. the College of Policing or NCA). If your PIP2 accreditation is inactive, it must not have lapsed more than 24 months prior to your application, and you must be able to demonstrate relevant operational experience in managing or conducting serious and complex investigations within the last two years. Successful candidates with PIP2 status, will still be required to attend and pass HMRC's core learning programme and achieve Authorised Officer status through further classroom and practical training which will involve regular travel. Behaviours We'll assess you against these behaviours during the selection process: Making Effective Decisions Leadership Communicating and Influencing We only ask for evidence of these behaviours on your application form: Making Effective Decisions Leadership Technical skills We'll assess you against these technical skills during the selection process: You will be asked to prepare and deliver a 10-15 minute presentation on a recent example/case study of a digitally focussed investigation you carried out. This should highlight some of the challenges and techniques you used to reach the objectives. Benefits Alongside your salary of £37,682, HM Revenue and Customs contributes £10,916 towards you being a member of the Civil Service Defined Benefit Pension scheme . click apply for full job details

About the RoleAs a Senior Cloud Security Analyst, you'll play a key role in protecting cloud infrastructure and services through proactive monitoring, threat detection and incident response. Working within a collaborative Security Operations function, you'll analyse security events, investigate emerging threats and help strengthen the organisation's overall cyber resilience.This role offers the opportunity to work across modern cloud platforms, partnering with infrastructure, engineering and application teams to improve security controls, enhance detection capabilities and support secure cloud operations.Key ResponsibilitiesMonitor and investigate security events across Azure, AWS and hybrid cloud environments using SIEM, CSPM and native cloud security services.Perform detailed triage of alerts to identify genuine threats, eliminate false positives and determine appropriate remediation actions.Lead or support investigations into cloud-based security incidents, ensuring timely containment, recovery and accurate documentation.Analyse authentication activity, privileged access events, API usage and configuration changes to identify suspicious behaviour and potential compromise.Work alongside Security Operations, Infrastructure and DevOps teams to coordinate effective responses to security incidents.Recommend improvements to detection logic, alert quality and monitoring coverage based on operational findings and emerging threats.Develop and maintain security use cases that improve visibility across cloud workloads and services.Contribute to threat hunting activities by identifying indicators of compromise and analysing attacker techniques.Produce clear technical reports and communicate investigation findings to both technical and non-technical stakeholders.Participate in security improvement initiatives, helping implement new technologies, processes and operational controls.Keep up to date with developments in cloud security, attacker methodologies and industry best practices to strengthen organisational security.Technical SkillsExperience in several of the following areas would be advantageous:Microsoft Azure SecurityAWS Security ServicesGoogle Cloud Platform (desirable)Microsoft SentinelKusto Query Language (KQL)CloudTrail, Azure Activity Logs and cloud audit loggingCloud Security Posture Management (CSPM)CrowdStrike Falcon Cloud SecurityMicrosoft Defender SuiteKubernetes security conceptsIdentity and Access Management (IAM)Privileged Access ManagementMicrosoft Entra ID (Azure AD)MITRE ATT&CK FrameworkThreat IntelligenceIncident ResponseThreat HuntingSIEM TechnologiesSecurity MonitoringSecurity Operations (SOC)Cloud Networking FundamentalsWhat You'll BringExperience working within a Security Operations Centre or Cloud Security environment.Strong analytical and investigative skills with the ability to prioritise and manage multiple security events.Confidence interpreting security telemetry and identifying indicators of malicious activity.Excellent problem-solving skills and the ability to make informed decisions during security incidents.Strong communication skills with the ability to present technical findings clearly.A collaborative approach to working with infrastructure, engineering and operational teams.A proactive mindset focused on continuous improvement and operational excellence.Desirable QualificationsMicrosoft SC-200Microsoft AZ-500AWS Certified Security - SpecialtyCertified Kubernetes Security Specialist (CKS)CompTIA Security+CISSPGIAC certificationsRelevant cloud or cyber security certifications To speak in absolute confidence about this opportunity please send an up-to-date CV via the link provided or contact Senior Recruitment Consultant Stuart Kennedy at MCS Group on or . Even if this position is not right for you, we may have others that are. Please visit MCS Group to view a wide selection of our current jobs.

Join a culture of empowerment and connectivity. Develop your craft Learn the skills you need to accelerate your career. Discover benefits that your life and work. Innovate with intention Build mission-ready tech that protects the nation. Critical decisions are made every day in our government. What if you could use your technical skills to help them make informed decisions? As an analyst, you will be responsible for examining radar emissions, signals, and other electronic data to identify and assess foreign electronic capabilities. You will use advanced signal processing tools and techniques to collect, interpret, and analyze data, providing critical insights into potential threats and strategic developments. You will conduct thorough analyses of electronic signal data, preparing detailed reports and briefings that communicate your findings and recommendations to key stakeholders. You will work closely with other intelligence professionals, military personnel, and government agencies to share information and support joint intelligence operations. Staying abreast of advancements in electronic systems and signal processing technologies, you will contribute to the development of new analytical tools and met hodologies to enhance our capabilities. This is a chance to grow your expertise, develop new skills, and share your insights with other technical spe cia lists. You can interact with collection managers, collection operators, and analysts on new analytic met hods, technologies, and collection strategies, and collaborate with national and tactical collection and operations elements to advance target development efforts, recommend collection strategies, and support strategic and operational requirements. We focus on growing as a team to deliver the best support to our customers, so you'll have resources for mentoring and learning new skills and tools. Join us as we provide the right information at the right time to support the critical needs of the intelligence community ( IC ) . Join us. The world can't wait. You Have: Knowledge of intelligence requirements and intelligence oversight policies Ability to work weekends and a rotating 24 / 7 shift schedule Ability to perform, collaborate, and communicate in an operational working environment TS/SCI clearance with a polygraph HS diploma or GED and 6+ years of experience with signal analysis or processing, or Bachelor's degree and 4+ years of experience with signal analysis or processing Nice If You Have: Experience with signal collection, digital signal processing, or technical work at a technical processing center Experience using spe cia lized analysis and mapping tools Ability to evaluate system inaccuracies and identify improvements Possession of excellent verbal and written communication skills Completion of SIGE-2810 or SIGE-3810 Course Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information ; TS/SCI clearance with polygraph is required. Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $61,900.00 to $141,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date. Signals Analyst The Opportunity: Critical decisions are made every day in our government. What if you could use your technical skills to help them make informed decisions? As an analyst, you will be responsible for examining radar emissions, signals, and other electronic data to identify and assess foreign electronic capabilities. You will use advanced signal processing tools and techniques to collect, interpret, and analyze data, providing critical insights into potential threats and strategic developments. You will conduct thorough analyses of electronic signal data, preparing detailed reports and briefings that communicate your findings and recommendations to key stakeholders. You will work closely with other intelligence professionals, military personnel, and government agencies to share information and support joint intelligence operations. Staying abreast of advances in electronic systems and signal processing technologies, you will contribute to the development of new analytical tools and met hodologies to enhance our capabilities. This is a chance to grow your expertise, develop new skills, and share your insights with other technical spe cia lists. You can interact with collection managers, collection operators, and analysts on new analytic met hods, technologies, and collection strategies, and collaborate with national and tactical collection and operations elements to advance target development efforts, recommend collection strategies, and support strategic and operational requirements. We focus on growing as a team to deliver the best support to our customers, so you'll have resources for mentoring and learning new skills and tools. Join us as we provide the right information at the right time to support the critical needs of the intelligence community ( IC ) . Join us. The world can't wait. You Have: Knowledge of intelligence requirements and intelligence oversight policies Ability to work weekends and a rotating 24 / 7 shift schedule Ability to perform, collaborate, and communicate in an operational working environment TS/SCI clearance with a polygraph HS diploma or GED and 6+ years of experience with signal analysis or processing, or Bachelor's degree and 4+ years of experience with signal analysis or processing Nice If You Have: Experience with signal collection, digital signal processing, or technical work at a technical processing center Experience using spe cia lized analysis and mapping tools Ability to evaluate system inaccuracies and identify improvements Possession of excellent verbal and written communication skills Completion of SIGE-2810 or SIGE-3810 Course Clearance: Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information ; TS/SCI clearance with polygraph is required. Compensation At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen's benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page. Salary at Booz Allen is determined by various factors, including but not limited to location, the individual's particular combination of education, knowledge, skills, competencies, and experience, as well as contract-specific affordability and organizational requirements. The projected compensation range for this position is $61,900.00 to $141,000.00 (annualized USD). The estimate displayed represents the typical salary range for this position and is just one component of Booz Allen's total compensation package for employees. This posting will close within 90 days from the Posting Date. Identity Statement As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud. Candidate AI Usage Policy AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on . click apply for full job details

Position Summary As a SOC Shift Lead, you build on your solid experience as a SOC Analyst by supervising and guiding a team of SOC Analysts during your assigned shift. You ensure quality and consistency across all alerts and incidents handled by the team while serving as the primary point of escalation. In this role, you support team development, drive process improvements, and maintain clear, customer-centric communication with all stakeholders. You also lead quality assurance efforts and ensure that service-level agreements (SLAs) are met. Objectives & Key Results Key Responsibilities Shift Leadership and Team Coordination - You run shift operations, ensuring compliance with SLAs and maintaining high-quality incident handling. You set shift agendas, balance workloads, and promptly address any process or staffing issues. You also maintain effective, customer-centric communication with internal teams (including Security Optimisation and Engineering), customers, and their incident response partners Incident Triage and Investigation - You review and prioritise new alerts, taking initial ownership of high-priority or complex incidents, and ensure proper escalation to customers and Senior SOC Analysts. You make sound, data-driven decisions to facilitate effective triage, investigation, and escalation in line with operational standards Quality Assurance and Documentation - You conduct regular quality assurance (QA) of tickets to ensure SOC procedures and documentation standards are met, providing clear, constructive feedback to team members to improve technical skills and workflow consistency Collaboration and Mentorship - You mentor SOC Analysts in your team by offering regular, constructive feedback on triage processes and best practices. You encourage targeted training initiatives, including relevant certifications, to support career progression within the SOC Service Improvement - You contribute to ongoing service improvement through participation in supporting threat hunting activity led by Senior SOC Analysts, rule tuning, and process refinement initiatives. You assist in monthly reporting and post-incident reviews to drive improvements that reflect our commitment to transparent and reliable performance Required Qualifications & Experience You may be required to hold or obtain UK Non-Police Personnel Vetting (NPPV) and/or a Security Check (SC) clearance as part of this role Willingness to work towards or obtain intermediate cybersecurity certifications (e.g. SBT BTL2, CREST Registered Intrusion Analyst) Proficiency with SIEM platforms, endpoint security tools, and ticketing systems, with an ability to make clear, data-driven decisions under pressure Critical Competencies - Technical Fit Operating Systems - Possess detailed knowledge of Windows and Linux system architectures, with a clear understanding of how event logs (e.g., Windows Event Viewer, Syslog) reflect system security posture Networking and Protocols - Have a comprehensive understanding of TCP/IP, DNS, DCHP, VPNs, SSL/TLS, and network forensics concepts to validate network-based alerts and anomalies Cybersecurity Frameworks - Deeply understand and be able to articulate the elements of the MITRE ATT&CK framework, and Cyber Kill Chain; know how adversary tactics and techniques translate into observable indicators SIEM and Security Tools - Know the theoretical underpinnings of SIEM operations, including alert correlation, the design of automated detection rules, and the interpretation of aggregated security data Incident Triage - Understand the principles behind effective triage, including the rationale for using standardised playbooks and the criteria for escalating incidents without undertaking complex forensic analysis Threat Intelligence Integration - Be knowledgeable about the role and structure of threat intelligence - how feeds are sourced, what constitutes actionable information, and how malware indicators are defined Scripting and Automation - Understand the concepts behind using scripting for automating regular data extraction and log analysis, and the benefits such tools being to maintaining consistency in alert handling Benefits At Claranet, we go the extra mile with our people-because we believe in building a workplace where everyone feels valued and supported. What makes us unique is Team Claranet , our internal community that supports causes close to our employees' hearts. We offer paid charity leave, support local charities across our offices, and host annual fundraising events, all backed by a dedicated committee. We're proud founding members of TC4RE (Technology Community for Racial Equality) working collectively to build a more diverse and inclusive tech industry. About Claranet Founded at the beginning of the dot com bubble in 1996, our CEO Charles Nasser had a light bulb moment to develop a truly customer-focused IT business. Since then, Claranet has grown from an Internet Service Provider (ISP) in the UK to being one of the leading business modernisation experts, who deliver solutions across 11+ countries. Equal Opportunities Statement Diversity, equity and inclusion are at the heart of what we value as an organisation. Claranet is an equal opportunities employer and all qualified applicants will receive consideration for employment without regard to race, religion, sex, sexual orientation, age, disability or any other status protected by law. Our recruitment team are happy to support any reasonable adjustments that are needed within the recruitment process. Ready to take the next step in your career with Claranet? Click 'apply' - we can't wait to meet you! To view full job description please visit our careers page

Cyber Security Contractors (Multiple Opportunities) SC Cleared 594/day Remote UK Location: UK Remote (occasional client-site visits required) Contract: Inside IR35 Rate: 594 per day (Umbrella) Duration: Until March 2027 Security Clearance: Active SC Clearance Required We are supporting a major, long-term Cyber Security Programme and are seeking experienced SC-cleared professionals across several specialist disciplines. These are excellent opportunities to join a high-profile programme delivering critical security services within a complex environment. Opportunities Available Security Architect (Cloud Security) Key responsibilities include: Cloud security architecture and design assurance Security assessments and risk reviews Development and implementation of security standards, patterns, and best practices Collaboration with technical and business stakeholders to ensure secure-by-design solutions Experience required: Strong cloud security architecture background Experience with enterprise cloud platforms (AWS, Azure, or GCP) Security design and assurance expertise Knowledge of security frameworks and standards Security Operations Analyst Key responsibilities include: Security operations monitoring and analysis Cyber threat intelligence assessment Threat modelling and risk identification Incident investigation and security event analysis Experience required: Security Operations Centre (SOC) or cyber defence experience Hands-on threat intelligence and analysis capability Threat modelling expertise Strong understanding of cyber security technologies and processes Threat Intelligence Analyst Key responsibilities include: Production of threat intelligence reports and assessments Analysis of Indicators of Compromise (IOCs) and Tactics, Techniques & Procedures (TTPs) Tracking emerging cyber threats and threat actors Supporting security architecture and operational security decision-making Experience required: Proven cyber threat intelligence background Experience analysing threat actor activity and attack methodologies Strong reporting and stakeholder engagement skills Knowledge of intelligence frameworks such as MITRE ATT&CK Information Assurance Consultant Key responsibilities include: Information Assurance (IA) and Governance, Risk & Compliance (GRC) activities Quality assurance and quality management support Business Continuity and Disaster Recovery (BCDR) planning and assessment Policy, controls, and compliance reviews Experience required: Strong IA/GRC experience Knowledge of security governance frameworks Experience in quality management and assurance activities BCDR planning and implementation expertise Essential Requirements Active SC Clearance (mandatory) Proven experience within the relevant cyber security discipline Ability to work effectively in complex stakeholder environments Strong communication and reporting skills

The Opportunity: The Brand Intelligence Analyst works in the office as part of the larger Global Corporate Communications Group. Help oversee the monitoring and protection of the Fisher Investments brand in traditional (print, online, broadcast) and social media. Strategically planning and implementing social media campaigns to achieve specific reputational goals. They analyse, report and enhance findings to management to help build awareness and make informed business recommendations. The Day-to-Day: Conduct social listening, identifying client and prospective service opportunities and addressing as appropriate Analyse reputational situations, gathering research across multiple data sources to make a business recommendation Identify and proactively inform management of potential brand threats, providing comprehensive risk assessment and recommendation Distil brand media coverage into important highlights and observations for management Maintain knowledge of evolving and new online platforms, including the latest security enhancements Research and implement new processes Identify gaps in our existing processes and technologies, recommending and implementing change to improve Develop and implement social media campaigns to achieve specific reputational goals, including content creation and community interaction Your Qualifications: Bachelor's degree or equivalent combination of education and experience required Highly developed qualitative and quantitative skills required Analyse various situations, develop creative solutions and adapt to changes in a fast paced, team environment Experience managing ad campaigns preferred Prior experience using social media management tools (Sprout, Hootsuite) Prior experience using social listening tools (Brandwatch, Talkwalker) Why Fisher Investments Europe: The global Fisher organisation distinguishes itself by putting clients first, providing unmatched service, and taking a personalised approach to investing. You can feel confident knowing that we align with our clients' best interests by using a simple and transparent fee structure and recognised European custodians. It's the people that make the Fisher purpose possible, and to help our employees meet their long-term goals, we offer an array of benefits, including: 100% paid premiums for our top-tier supplemental medical, dental and annual health screening plans for employees and their qualified dependents 28 days annual leave, with the ability to purchase up to 3 additional days per year, plus up to 8 paid holidays Enhanced maternity pay package with 16 weeks' top up to full base pay for eligible employees $10,000 fertility, hormonal health and family-forming benefit A retirement pension plan, featuring a 9% company contribution of base pay with an additional company match of up to 5% of base pay on personal contributions Gym subsidy of up to £50 per month Employee Assistance Program and other emotional wellbeing services A collaborative working environment that practises ongoing training, educational support and employee appreciation events This is an in-office role. Based on your role, tenure, and performance eligibility you may have the opportunity to participate in our hybrid work from home program. This program is subject to change. Employees residing outside of the US will be eligible for the $10,000 equivalent in their local currency. FISHER INVESTMENTS EUROPE IS AN EQUAL OPPORTUNITY EMPLOYER