Incydr Sales SpecialistApplylocations: Great Britain - Londontime type: Full timeposted on: Posted Todayjob requisition id: R6506At Mimecast, we're redefining cybersecurity and leading the charge in human risk management. We protect businesses from evolving threats, and you'll be at the forefront. Every customer you bring on board builds something bigger - for them, for us, for our communities, and for your career. Simply put - when we grow, you grow.We set you up to win. Top-tier enablement, smart coaching, and real insights mean you'll smash quotas, not just hit them. You get the tools and knowledge to sell with confidence, turning complex sales cycles into closed deals.Your career path? It's yours to shape. Compelling commission, clear progression, and chances to lead, specialize, or pivot - you decide what's next. Here, success isn't just about the deals you close. It's about your progress, your influence, your impact.Mimecast is hiring an Incydr Sales Specialist to lead the charge in driving sales of the Incydr product Incydr Overview sales via new and expansion revenue while teaming with the core Mimecast sales teams within the local country. This is a unique opportunity to join an innovative, fast-growing team and make a significant impact on a key strategic growth area for the company.As an Incydr Sales Specialist, you'll focus on driving new and expansion revenue while working closely with Mimecast's core sales teams. You'll thrive in this role if you enjoy building relationships with key decision-makers and working collaboratively with cross-functional teams to deliver results.Ready to push boundaries and accelerate your career? Let's make it happen. About Mimecast Incydr The Incydr solution is a key strategic revenue growth lever for Mimecast, coming via the acquisition of Code42 in mid 2024. The solution is led and sold by an overlay sales team, teaming with the core Mimecast sales leaders and account executives. Incydr speeds the time to detect and respond to Insider Risks by delivering a fast, simple path to data loss detection, investigation and response. With our product, IncydrTM, security teams easily protect corporate data and reduce insider risk while fostering a collaborative and productive culture for employees. We're here to support organizations made up of people that move fast and think big. The ones who work together to solve hard problems and relentlessly pursue better. What You'll Do Develop and Grow Accounts: Build and manage accounts and key relationships, leveraging Mimecast's resources to drive sales execution. Introduce Incydr to Security Buyers: Use your expertise and connections to position Incydr with key stakeholders, including CISOs, IT Leaders, and Risk/Compliance professionals. Build and Maintain Strategic Partnerships: Establish relationships with business development and program teams within FSIs while understanding their business models and sales cycles. CRM Mastery: Maintain accurate and effective CRM hygiene in Salesforce and design impactful client campaigns. Product Demonstrations: Showcase the value of Incydr to clients, demonstrating how it helps address insider risks. Collaborate Across Teams: Partner with Account Executives, Sales Engineers, BDRs, Field Marketing, and Channel Account Managers to exceed sales targets. Drive Privacy and Security Compliance: Ensure all activities align with Mimecast's strict privacy and security policies, protecting sensitive information. What You'll Bring Enterprise SaaS Sales Experience: Proven track record of selling SaaS solutions to mid-market and enterprise customers. Cybersecurity Knowledge: Familiarity with the cybersecurity landscape and experience selling security solutions. Proven Sales Success: A history of exceeding booking and revenue targets, with experience engaging senior-level decision-makers (e.g., CIOs, CISOs). Communication Skills: Exceptional oral and written communication skills, with the ability to negotiate complex deals and overcome objections. Adaptability: Success in a fast-paced, high-growth environment with a collaborative and problem-solving mindset. Salesforce Proficiency: Strong working knowledge of Salesforce and other sales tools. The on-target earnings (OTE) range for this position is £128,000-£192,000 (OTE) plus benefits. This range represents the minimum and maximum new hire compensation for this role. The position may also be eligible for incentive plans and additional benefits, in accordance with company policy and local regulations. Our salary ranges are determined by role, level, and location with individual compensation also dependent on factors such as qualifications, experience, and skills. Final offers will reflect these considerations and may vary accordingly. Belonging at Mimecast Cybersecurity is a community effort. That's why we're committed to building an inclusive, diverse community that celebrates and welcomes everyone - unless they're a cybercriminal, of course.We're proud to be an Equal Opportunity and Affirmative Action Employer, and we'd encourage you to join us whatever your background. We particularly welcome applicants from traditionally underrepresented groups.We consider everyone equally: your race, age, religion, sexual orientation, gender identity, ability, marital status, nationality, or any other protected characteristic won't affect your application. Due to certain obligations to our customers, an offer of employment will be subject to your successful completion of applicable background checks, conducted in accordance with local law.
Aug 23, 2026
Full time
Incydr Sales SpecialistApplylocations: Great Britain - Londontime type: Full timeposted on: Posted Todayjob requisition id: R6506At Mimecast, we're redefining cybersecurity and leading the charge in human risk management. We protect businesses from evolving threats, and you'll be at the forefront. Every customer you bring on board builds something bigger - for them, for us, for our communities, and for your career. Simply put - when we grow, you grow.We set you up to win. Top-tier enablement, smart coaching, and real insights mean you'll smash quotas, not just hit them. You get the tools and knowledge to sell with confidence, turning complex sales cycles into closed deals.Your career path? It's yours to shape. Compelling commission, clear progression, and chances to lead, specialize, or pivot - you decide what's next. Here, success isn't just about the deals you close. It's about your progress, your influence, your impact.Mimecast is hiring an Incydr Sales Specialist to lead the charge in driving sales of the Incydr product Incydr Overview sales via new and expansion revenue while teaming with the core Mimecast sales teams within the local country. This is a unique opportunity to join an innovative, fast-growing team and make a significant impact on a key strategic growth area for the company.As an Incydr Sales Specialist, you'll focus on driving new and expansion revenue while working closely with Mimecast's core sales teams. You'll thrive in this role if you enjoy building relationships with key decision-makers and working collaboratively with cross-functional teams to deliver results.Ready to push boundaries and accelerate your career? Let's make it happen. About Mimecast Incydr The Incydr solution is a key strategic revenue growth lever for Mimecast, coming via the acquisition of Code42 in mid 2024. The solution is led and sold by an overlay sales team, teaming with the core Mimecast sales leaders and account executives. Incydr speeds the time to detect and respond to Insider Risks by delivering a fast, simple path to data loss detection, investigation and response. With our product, IncydrTM, security teams easily protect corporate data and reduce insider risk while fostering a collaborative and productive culture for employees. We're here to support organizations made up of people that move fast and think big. The ones who work together to solve hard problems and relentlessly pursue better. What You'll Do Develop and Grow Accounts: Build and manage accounts and key relationships, leveraging Mimecast's resources to drive sales execution. Introduce Incydr to Security Buyers: Use your expertise and connections to position Incydr with key stakeholders, including CISOs, IT Leaders, and Risk/Compliance professionals. Build and Maintain Strategic Partnerships: Establish relationships with business development and program teams within FSIs while understanding their business models and sales cycles. CRM Mastery: Maintain accurate and effective CRM hygiene in Salesforce and design impactful client campaigns. Product Demonstrations: Showcase the value of Incydr to clients, demonstrating how it helps address insider risks. Collaborate Across Teams: Partner with Account Executives, Sales Engineers, BDRs, Field Marketing, and Channel Account Managers to exceed sales targets. Drive Privacy and Security Compliance: Ensure all activities align with Mimecast's strict privacy and security policies, protecting sensitive information. What You'll Bring Enterprise SaaS Sales Experience: Proven track record of selling SaaS solutions to mid-market and enterprise customers. Cybersecurity Knowledge: Familiarity with the cybersecurity landscape and experience selling security solutions. Proven Sales Success: A history of exceeding booking and revenue targets, with experience engaging senior-level decision-makers (e.g., CIOs, CISOs). Communication Skills: Exceptional oral and written communication skills, with the ability to negotiate complex deals and overcome objections. Adaptability: Success in a fast-paced, high-growth environment with a collaborative and problem-solving mindset. Salesforce Proficiency: Strong working knowledge of Salesforce and other sales tools. The on-target earnings (OTE) range for this position is £128,000-£192,000 (OTE) plus benefits. This range represents the minimum and maximum new hire compensation for this role. The position may also be eligible for incentive plans and additional benefits, in accordance with company policy and local regulations. Our salary ranges are determined by role, level, and location with individual compensation also dependent on factors such as qualifications, experience, and skills. Final offers will reflect these considerations and may vary accordingly. Belonging at Mimecast Cybersecurity is a community effort. That's why we're committed to building an inclusive, diverse community that celebrates and welcomes everyone - unless they're a cybercriminal, of course.We're proud to be an Equal Opportunity and Affirmative Action Employer, and we'd encourage you to join us whatever your background. We particularly welcome applicants from traditionally underrepresented groups.We consider everyone equally: your race, age, religion, sexual orientation, gender identity, ability, marital status, nationality, or any other protected characteristic won't affect your application. Due to certain obligations to our customers, an offer of employment will be subject to your successful completion of applicable background checks, conducted in accordance with local law.
SOC Engineer Milton Keynes - Hybrid working SC Clearance Sponsorship Available £50,000 - £55,000 + Bonus We're seeking a hands-on SOC Engineer to join a growing Cyber Security Operations Centre supporting a diverse portfolio of customers across multiple sectors This is a specialist SOC Engineering position focused on building, maintaining, and optimising the tools, telemetry, detections, and automation that enable SOC Analysts to identify and respond to threats effectively. This is not a generalist cyber security role. Key Responsibilities Administer and optimise Microsoft Sentinel (or equivalent SIEM), including log ingestion, parsing, normalisation, and retention. Develop and maintain SOAR workflows and automation using Azure Logic Apps, Python, PowerShell, Bash, and KQL. Onboard and manage security telemetry from a range of data sources. Design, implement, and tune detection rules to improve alert quality and reduce false positives. Conduct proactive threat hunting using SIEM, EDR, and threat intelligence sources. Support incident investigations, containment, and response activities. Monitor and maintain the health of SOC tooling, sensors, agents, and log pipelines. Produce documentation, runbooks, and operational procedures. Skills & Experience Experience engineering and supporting SIEM platforms, ideally Microsoft Sentinel. Strong scripting and automation skills (Python, PowerShell, Bash, KQL). Experience with SOAR technologies and security automation. Knowledge of detection engineering and threat hunting. Strong understanding of Windows and Linux logging. Good networking knowledge including TCP/IP, DNS, firewalls, and proxies. Experience within a SOC, NOC, or 24/7 operational environment. Familiarity with MITRE ATT&CK, CVEs, and vulnerability management. Exposure to cloud security monitoring across Azure, AWS, or Microsoft 365. Desirable Certifications Microsoft SC-200 CompTIA Security+ / CySA+ ISC2 CC or CISSP GIAC GCIA CEH Cisco CyberOps or Fortinet certifications What's on Offer? Opportunity to work within a mature and growing SOC environment. Exposure to a wide range of customer environments and technologies. Security Clearance sponsorship available for eligible candidates. Clear opportunities to contribute to automation, detection engineering, and SOC improvement initiatives. Location: Milton Keynes (full-time onsite) Working Pattern: Shift rota including evenings, weekends, bank holidays on-call support. Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted. Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website
Aug 21, 2026
Full time
SOC Engineer Milton Keynes - Hybrid working SC Clearance Sponsorship Available £50,000 - £55,000 + Bonus We're seeking a hands-on SOC Engineer to join a growing Cyber Security Operations Centre supporting a diverse portfolio of customers across multiple sectors This is a specialist SOC Engineering position focused on building, maintaining, and optimising the tools, telemetry, detections, and automation that enable SOC Analysts to identify and respond to threats effectively. This is not a generalist cyber security role. Key Responsibilities Administer and optimise Microsoft Sentinel (or equivalent SIEM), including log ingestion, parsing, normalisation, and retention. Develop and maintain SOAR workflows and automation using Azure Logic Apps, Python, PowerShell, Bash, and KQL. Onboard and manage security telemetry from a range of data sources. Design, implement, and tune detection rules to improve alert quality and reduce false positives. Conduct proactive threat hunting using SIEM, EDR, and threat intelligence sources. Support incident investigations, containment, and response activities. Monitor and maintain the health of SOC tooling, sensors, agents, and log pipelines. Produce documentation, runbooks, and operational procedures. Skills & Experience Experience engineering and supporting SIEM platforms, ideally Microsoft Sentinel. Strong scripting and automation skills (Python, PowerShell, Bash, KQL). Experience with SOAR technologies and security automation. Knowledge of detection engineering and threat hunting. Strong understanding of Windows and Linux logging. Good networking knowledge including TCP/IP, DNS, firewalls, and proxies. Experience within a SOC, NOC, or 24/7 operational environment. Familiarity with MITRE ATT&CK, CVEs, and vulnerability management. Exposure to cloud security monitoring across Azure, AWS, or Microsoft 365. Desirable Certifications Microsoft SC-200 CompTIA Security+ / CySA+ ISC2 CC or CISSP GIAC GCIA CEH Cisco CyberOps or Fortinet certifications What's on Offer? Opportunity to work within a mature and growing SOC environment. Exposure to a wide range of customer environments and technologies. Security Clearance sponsorship available for eligible candidates. Clear opportunities to contribute to automation, detection engineering, and SOC improvement initiatives. Location: Milton Keynes (full-time onsite) Working Pattern: Shift rota including evenings, weekends, bank holidays on-call support. Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted. Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website
Microsoft Security & Compliance Consultant 3-Month Rolling Contract £450/day Outside IR35 London Hybrid (3 Days Per Week) We're supporting a specialist consultancy engaged on a major Microsoft 365 security and compliance programme for one of its clients. They're looking for an experienced Microsoft Security & Compliance Consultant to lead the assessment, design, and implementation of security monitoring, data protection, and information governance controls across the Microsoft ecosystem. This is a hands-on consulting engagement requiring strong technical expertise across Microsoft Defender and Microsoft Purview, coupled with the ability to engage stakeholders, provide strategic recommendations, and deliver practical improvements. The Role You'll work closely with technical and business stakeholders to evaluate the current Microsoft security estate, identify gaps and risks, and design a roadmap for improving detection, response, data protection, and information lifecycle management. The engagement will focus on three key areas: Security Monitoring & Threat Detection Review and assess the deployment of Microsoft Defender technologies across the organisation. Benchmark existing security configurations against Microsoft best practices and recognised industry standards. Evaluate alert quality, incident response processes, and overall monitoring effectiveness. Identify gaps in detection capability and security visibility. Assess coverage against MITRE ATT&CK techniques and tactics. Produce a prioritised remediation roadmap, balancing risk, effort, and business impact. Design alerting, escalation, and operational response processes. Data Loss Prevention & Information Protection Assess how sensitive information is created, shared, stored, and transferred across the organisation. Define an information classification and sensitivity labelling framework. Design and implement Microsoft Purview DLP controls across Microsoft 365 services and endpoints. Develop a phased deployment approach, including simulation, testing, tuning, and enforcement. Establish exception management and governance processes. Integrate DLP monitoring and incidents into wider security operations. Retention, Governance & Compliance Review retention obligations and compliance requirements across Microsoft 365 workloads. Translate regulatory and business requirements into implementable Purview controls. Design retention policies, retention labels, and automated policy application. Support GDPR-related processes, including data access and data deletion workflows. Develop operational procedures and governance documentation. Ensure appropriate auditability and evidencing of policy operation. Required Experience Extensive Microsoft 365 Security and Compliance experience. Strong hands-on Microsoft Defender expertise, including Endpoint, Identity, Office 365, Cloud Apps, and associated security controls. Microsoft Purview Information Protection and Data Loss Prevention. Purview Records Management and Retention. Microsoft Entra ID and identity security controls. Security Operations, alert management, and incident response. MITRE ATT&CK framework experience. Strong understanding of GDPR, information governance, and compliance requirements. Experience delivering security and compliance programmes within enterprise Microsoft environments. Previous consultancy or client-facing delivery experience. Desirable Microsoft Security certifications (SC-200, SC-300, SC-400, MS-102 or equivalent). Azure security experience. Experience working within regulated industries. Previous delivery of large-scale DLP, governance, or compliance transformation programmes. What's Important This role would suit a consultant who combines strong technical delivery capability with the ability to assess complex environments, engage senior stakeholders, and provide clear, pragmatic recommendations that improve both security posture and regulatory compliance. 3-Month Rolling Contract Outside IR35 £450/day London Hybrid (3 Days Per Week)
Aug 20, 2026
Contractor
Microsoft Security & Compliance Consultant 3-Month Rolling Contract £450/day Outside IR35 London Hybrid (3 Days Per Week) We're supporting a specialist consultancy engaged on a major Microsoft 365 security and compliance programme for one of its clients. They're looking for an experienced Microsoft Security & Compliance Consultant to lead the assessment, design, and implementation of security monitoring, data protection, and information governance controls across the Microsoft ecosystem. This is a hands-on consulting engagement requiring strong technical expertise across Microsoft Defender and Microsoft Purview, coupled with the ability to engage stakeholders, provide strategic recommendations, and deliver practical improvements. The Role You'll work closely with technical and business stakeholders to evaluate the current Microsoft security estate, identify gaps and risks, and design a roadmap for improving detection, response, data protection, and information lifecycle management. The engagement will focus on three key areas: Security Monitoring & Threat Detection Review and assess the deployment of Microsoft Defender technologies across the organisation. Benchmark existing security configurations against Microsoft best practices and recognised industry standards. Evaluate alert quality, incident response processes, and overall monitoring effectiveness. Identify gaps in detection capability and security visibility. Assess coverage against MITRE ATT&CK techniques and tactics. Produce a prioritised remediation roadmap, balancing risk, effort, and business impact. Design alerting, escalation, and operational response processes. Data Loss Prevention & Information Protection Assess how sensitive information is created, shared, stored, and transferred across the organisation. Define an information classification and sensitivity labelling framework. Design and implement Microsoft Purview DLP controls across Microsoft 365 services and endpoints. Develop a phased deployment approach, including simulation, testing, tuning, and enforcement. Establish exception management and governance processes. Integrate DLP monitoring and incidents into wider security operations. Retention, Governance & Compliance Review retention obligations and compliance requirements across Microsoft 365 workloads. Translate regulatory and business requirements into implementable Purview controls. Design retention policies, retention labels, and automated policy application. Support GDPR-related processes, including data access and data deletion workflows. Develop operational procedures and governance documentation. Ensure appropriate auditability and evidencing of policy operation. Required Experience Extensive Microsoft 365 Security and Compliance experience. Strong hands-on Microsoft Defender expertise, including Endpoint, Identity, Office 365, Cloud Apps, and associated security controls. Microsoft Purview Information Protection and Data Loss Prevention. Purview Records Management and Retention. Microsoft Entra ID and identity security controls. Security Operations, alert management, and incident response. MITRE ATT&CK framework experience. Strong understanding of GDPR, information governance, and compliance requirements. Experience delivering security and compliance programmes within enterprise Microsoft environments. Previous consultancy or client-facing delivery experience. Desirable Microsoft Security certifications (SC-200, SC-300, SC-400, MS-102 or equivalent). Azure security experience. Experience working within regulated industries. Previous delivery of large-scale DLP, governance, or compliance transformation programmes. What's Important This role would suit a consultant who combines strong technical delivery capability with the ability to assess complex environments, engage senior stakeholders, and provide clear, pragmatic recommendations that improve both security posture and regulatory compliance. 3-Month Rolling Contract Outside IR35 £450/day London Hybrid (3 Days Per Week)
Join Barclays as a DFIR Lead Cyber Operations Analyst, a VP-level role at the centre of the bank's cyber defence, delivering advanced digital forensics and incident response. You will analyse malware, malicious samples and network activity to support complex investigations, working closely with internal teams, external partners and law enforcement. This is a highly technical, hands on position suited to an experienced cyber or digital forensics professional, with passion for deep investigation, and the ability to produce clear, high quality reporting in a fast paced, high pressure environment. Please note that this role includes an on call support rotation. Occasional additional support may be required, including extended hours and weekend work. To be successful in this role, you will need the following: Digital forensics and incident response expertise, including host, network, cloud and live forensic analysis, supported by rigorous documentation practices. Excellent written and verbal communication skills, with the ability to clearly articulate complex technical findings to senior stakeholders and non technical business teams. Proven leadership under pressure, including coordinating investigations, managing cross functional stakeholders, and operating effectively within a regulated banking environment. Some other highly valued skills may include: Cloud investigation experience across platforms such as AWS, Azure, or Google Cloud. Scripting and automation capabilities, using languages such as Python, PowerShell, Bash, or JavaScript. Relevant industry certifications, such as GCFA, GNFA, GCFE, or GREM. You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen, strategic thinking and digital and technology, as well as job specific technical skills. The successful candidate will be based in Knutsford (Radbroke Hall). Purpose of the role To monitor the performance of operational controls, implement and manage security controls and consider lessons learned in order to protect the bank from potential cyber attacks and respond to threats. Accountabilities Management of security monitoring systems, including intrusive prevention and detection systems, to alert, detect and block potential cyber security incidents, and provide a prompt response to restore normal operations with minimised system damage. Identification of emerging cyber security threats, attack techniques and technologies to detect/prevent incidents, and collaborate with networks and conferences to gain industry knowledge and expertise. Management and analysis of security information and event management systems to collect, correlate and analyse security logs, events and alerts/potential threats. Triage of data loss prevention alerts to identify and prevent sensitive data for being exfiltrated from the banks network. Management of cyber security incidents including remediation & driving to closure. Vice President Expectations To contribute or set strategy, drive requirements and make recommendations for change. Plan resources, budgets, and policies; manage and maintain policies/processes; deliver continuous improvements and escalate breaches of policies/procedures. If managing a team, they define jobs and responsibilities, planning for the department's future needs and operations, counselling employees on performance and contributing to employee pay decisions/changes. They may also lead a number of specialists to influence the operations of a department, in alignment with strategic as well as tactical priorities, while balancing short and long term goals and ensuring that budgets and schedules meet corporate requirements. If the position has leadership responsibilities, People Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L - Listen and be authentic, E - Energise and inspire, A - Align across the enterprise, D - Develop others. OR for an individual contributor, they will be a subject matter expert within own discipline and will guide technical direction. They will lead collaborative, multi year assignments and guide team members through structured assignments, identify the need for the inclusion of other areas of specialisation to complete assignments. They will train, guide and coach less experienced specialists and provide information affecting long term profits, organisational risks and strategic decisions. Advise key stakeholders, including functional leadership teams and senior management on functional and cross functional areas of impact and alignment. Manage and mitigate risks through assessment, in support of the control and governance agenda. Demonstrate leadership and accountability for managing risk and strengthening controls in relation to the work your team does. Demonstrate comprehensive understanding of the organisation functions to contribute to achieving the goals of the business. Collaborate with other areas of work, for business aligned support areas to keep up to speed with business activity and the business strategies. Create solutions based on sophisticated analytical thought comparing and selecting complex alternatives. In depth analysis with interpretative thinking will be required to define problems and develop innovative solutions. Adopt and include the outcomes of extensive research in problem solving processes. Seek out, build and maintain trusting relationships and partnerships with internal and external stakeholders in order to accomplish key business objectives, using influencing and negotiating skills to achieve outcomes. All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship - our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset - to Empower, Challenge and Drive - the operating manual for how we behave.
Aug 19, 2026
Full time
Join Barclays as a DFIR Lead Cyber Operations Analyst, a VP-level role at the centre of the bank's cyber defence, delivering advanced digital forensics and incident response. You will analyse malware, malicious samples and network activity to support complex investigations, working closely with internal teams, external partners and law enforcement. This is a highly technical, hands on position suited to an experienced cyber or digital forensics professional, with passion for deep investigation, and the ability to produce clear, high quality reporting in a fast paced, high pressure environment. Please note that this role includes an on call support rotation. Occasional additional support may be required, including extended hours and weekend work. To be successful in this role, you will need the following: Digital forensics and incident response expertise, including host, network, cloud and live forensic analysis, supported by rigorous documentation practices. Excellent written and verbal communication skills, with the ability to clearly articulate complex technical findings to senior stakeholders and non technical business teams. Proven leadership under pressure, including coordinating investigations, managing cross functional stakeholders, and operating effectively within a regulated banking environment. Some other highly valued skills may include: Cloud investigation experience across platforms such as AWS, Azure, or Google Cloud. Scripting and automation capabilities, using languages such as Python, PowerShell, Bash, or JavaScript. Relevant industry certifications, such as GCFA, GNFA, GCFE, or GREM. You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen, strategic thinking and digital and technology, as well as job specific technical skills. The successful candidate will be based in Knutsford (Radbroke Hall). Purpose of the role To monitor the performance of operational controls, implement and manage security controls and consider lessons learned in order to protect the bank from potential cyber attacks and respond to threats. Accountabilities Management of security monitoring systems, including intrusive prevention and detection systems, to alert, detect and block potential cyber security incidents, and provide a prompt response to restore normal operations with minimised system damage. Identification of emerging cyber security threats, attack techniques and technologies to detect/prevent incidents, and collaborate with networks and conferences to gain industry knowledge and expertise. Management and analysis of security information and event management systems to collect, correlate and analyse security logs, events and alerts/potential threats. Triage of data loss prevention alerts to identify and prevent sensitive data for being exfiltrated from the banks network. Management of cyber security incidents including remediation & driving to closure. Vice President Expectations To contribute or set strategy, drive requirements and make recommendations for change. Plan resources, budgets, and policies; manage and maintain policies/processes; deliver continuous improvements and escalate breaches of policies/procedures. If managing a team, they define jobs and responsibilities, planning for the department's future needs and operations, counselling employees on performance and contributing to employee pay decisions/changes. They may also lead a number of specialists to influence the operations of a department, in alignment with strategic as well as tactical priorities, while balancing short and long term goals and ensuring that budgets and schedules meet corporate requirements. If the position has leadership responsibilities, People Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L - Listen and be authentic, E - Energise and inspire, A - Align across the enterprise, D - Develop others. OR for an individual contributor, they will be a subject matter expert within own discipline and will guide technical direction. They will lead collaborative, multi year assignments and guide team members through structured assignments, identify the need for the inclusion of other areas of specialisation to complete assignments. They will train, guide and coach less experienced specialists and provide information affecting long term profits, organisational risks and strategic decisions. Advise key stakeholders, including functional leadership teams and senior management on functional and cross functional areas of impact and alignment. Manage and mitigate risks through assessment, in support of the control and governance agenda. Demonstrate leadership and accountability for managing risk and strengthening controls in relation to the work your team does. Demonstrate comprehensive understanding of the organisation functions to contribute to achieving the goals of the business. Collaborate with other areas of work, for business aligned support areas to keep up to speed with business activity and the business strategies. Create solutions based on sophisticated analytical thought comparing and selecting complex alternatives. In depth analysis with interpretative thinking will be required to define problems and develop innovative solutions. Adopt and include the outcomes of extensive research in problem solving processes. Seek out, build and maintain trusting relationships and partnerships with internal and external stakeholders in order to accomplish key business objectives, using influencing and negotiating skills to achieve outcomes. All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship - our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset - to Empower, Challenge and Drive - the operating manual for how we behave.
Salary is competitive and commensurate with experience, plus a 14.5% pension contribution and a relocation package where applicable. Shape the future of information security for one of the world's most important organisations supporting biomedical research. At UK Biobank, information security isn't simply about protecting systems, it's about safeguarding one of the world's most valuable health research resources. Our data is trusted by more than 22,000 approved researchers across over 60 countries, helping advance our understanding of cancer, dementia, cardiovascular disease, mental health and hundreds of other conditions. Protecting that trust while enabling scientific discovery is fundamental to everything we do. We're entering one of the most significant periods of technology transformation in our history. As we continue to invest in modern cloud platforms, AI-enabled services, new digital capabilities and our £127.6 million headquarters at Manchester Science Park, we're looking for a Director of Information Security to lead the next phase of our information security maturity. This isn't a role focused on maintaining an established security function. It's an opportunity to shape and define a world-class capability Can you do it? As Director of Information Security, you'll report directly to our Chief Technology Officer and provide strategic leadership for information security across UK Biobank. You'll be responsible for ensuring our governance, cyber security, identity management, business continuity, and risk management capabilities continue to evolve alongside an increasingly complex threat landscape. Working closely with colleagues across Data and Technology, Legal, and the wider organisation, you'll embed security into organisational decision-making, providing confidence that our platforms remain secure, resilient, and compliant while continuing to support innovation and world-leading research. This is a unique opportunity to build on the strong foundations already in place while leading the next phase of UK Biobank's security maturity. As we continue our wider technology transformation, you'll shape the organisation's security strategy, strengthen operational capability, and help embed security into every aspect of our cloud platforms, digital services, AI initiatives, and future technologies. You'll lead a growing Information Security function, with the opportunity to develop capability, evolve the team, and foster a positive security culture across the organisation. Working at both strategic and operational levels, you'll influence Executive Leadership and Board discussions while providing the leadership needed to respond to emerging threats, manage organisational risk, and ensure security enables innovation rather than becoming a barrier to it. This is a unique and rare opportunity to shape the future of information security within one of the world's leading biomedical research organisations, protecting data that supports thousands of researchers across the globe while helping deliver the next generation of scientific discovery. You will be responsible for Developing, implementing, and creating a comprehensive information security strategy, providing direction and support to ensure effective implementation of security controls. Conducting regular risk assessments, audits, tests, and modelling to identify and evaluate vulnerabilities and potential threats. Providing regular updates to the executive leadership team and represent information security at board, audit, and governance committees Establishing metrics and enforcing information security policies, procedures, and guidelines aligned with standards and frameworks, particularly ISO27001 and the NCSC Cyber Assessment Framework, as well as regulatory requirements and industry best practices. Ensuring that critical data and assets have been identified, classified, and subject to appropriate controls, including for handling, ownership, and destruction. Leading the organisation's response to major cyber incidents, including providing out-of-hours and crisis-level support when required. Promoting and communicating a culture of security awareness so all staff understand their role in maintaining information security. Managing the Information Security budget, setting investment priorities, and contributing to financial planning. Is this 'you'? To be successful, you will have: Significant experience in information security management, with a proven track record of leadership in the field. Relevant industry certifications, preferably CISSP, CISM, or CCISO. Strong knowledge of information security standards, frameworks, and best practices. Previous experience of ISO270001 is a key requirement. A clear understanding of the laws and regulations associated with controlling and processing personal data, directing organisation responses to cyber incidents. Strong knowledge and understanding of the cyber threat landscape. Experience securing cloud environments with a knowledge of the vulnerability detection tools and security services available in AWS and /or MS Azure. Experience of deploying controls across networking, end-user compute, identity and access management, software development, and business operations to minimise the likelihood of security incidents. Experience of recruiting specialist staff, building teams, and developing existing colleagues through training, coaching and mentoring. Working hours are 35 hours per week, Monday to Friday, with 3 days onsite and hybrid working available. The role will be based at Greenheys, Manchester Science Park's headquarters. Our passion for diversity and equality means creating a work environment for all employees that is welcoming, respectful, engaging, and enriched with opportunities for personal and professional development. We actively welcome applications from people with disabilities, long-term health conditions, neurodivergent candidates, and those with diverse thinking styles. We are committed to making reasonable adjustments throughout our recruitment process and in the workplace so that everyone can perform at their best. If you require any adjustments during the recruitment process, please contact Tommy Wilson at so we can support you. Your Wellbeing Matters to Us Colleagues at UK Biobank often highlight feeling supported, included, and connected to meaningful work, with wellbeing and work-life balance genuinely valued across teams. We're proud to offer a benefits package that supports your health, financial security, and development from day one: Currently 14.5% employer contribution to the USS Pension Scheme Healthcare Cash Plan to help cover everyday healthcare costs ️ 30 days' annual leave, plus bank holidays Buy up to 5 additional days' annual leave through our Holiday Buy Scheme A paid day off for your birthday Enhanced maternity, paternity, adoption and shared parental pay Hybrid and flexible working for many office-based roles Up to 6 months' full sick pay ️ Free on-site gym Subsidised lunch when working on site ️ Life Assurance Cycle to Work Scheme Season Ticket Loan Training and development opportunities, including a £500 annual personal development allowance Paid professional subscriptions, where applicable ️ Employee Discounts Portal Wellbeing support, including an Employee Assistance Programme Free annual flu vaccination and Hepatitis B vaccination, where applicable An active social committee with regular social events Free on-site parking Payroll Giving (Give As You Earn) The job advert closing date may change, so early applications are encouraged. About UK Biobank UK Biobank is a large-scale biomedical database and research resource containing in-depth genetic and health information from half a million UK participants. The database, the largest and most comprehensive of its kind in the world, is anonymised and made widely accessible by UK Biobank to global researchers who use it to find new scientific discoveries about common and life-threatening diseases - such as cancer, heart disease and stroke which strike in mid-later life. UK Biobank is an innovative organisation with over 350 staff across four sites in the UK that fosters an engaging environment and supports the development of our staff. Our dedicated teams work alongside the world's leading biomedical scientists in our joint mission to improve public health.
Aug 17, 2026
Full time
Salary is competitive and commensurate with experience, plus a 14.5% pension contribution and a relocation package where applicable. Shape the future of information security for one of the world's most important organisations supporting biomedical research. At UK Biobank, information security isn't simply about protecting systems, it's about safeguarding one of the world's most valuable health research resources. Our data is trusted by more than 22,000 approved researchers across over 60 countries, helping advance our understanding of cancer, dementia, cardiovascular disease, mental health and hundreds of other conditions. Protecting that trust while enabling scientific discovery is fundamental to everything we do. We're entering one of the most significant periods of technology transformation in our history. As we continue to invest in modern cloud platforms, AI-enabled services, new digital capabilities and our £127.6 million headquarters at Manchester Science Park, we're looking for a Director of Information Security to lead the next phase of our information security maturity. This isn't a role focused on maintaining an established security function. It's an opportunity to shape and define a world-class capability Can you do it? As Director of Information Security, you'll report directly to our Chief Technology Officer and provide strategic leadership for information security across UK Biobank. You'll be responsible for ensuring our governance, cyber security, identity management, business continuity, and risk management capabilities continue to evolve alongside an increasingly complex threat landscape. Working closely with colleagues across Data and Technology, Legal, and the wider organisation, you'll embed security into organisational decision-making, providing confidence that our platforms remain secure, resilient, and compliant while continuing to support innovation and world-leading research. This is a unique opportunity to build on the strong foundations already in place while leading the next phase of UK Biobank's security maturity. As we continue our wider technology transformation, you'll shape the organisation's security strategy, strengthen operational capability, and help embed security into every aspect of our cloud platforms, digital services, AI initiatives, and future technologies. You'll lead a growing Information Security function, with the opportunity to develop capability, evolve the team, and foster a positive security culture across the organisation. Working at both strategic and operational levels, you'll influence Executive Leadership and Board discussions while providing the leadership needed to respond to emerging threats, manage organisational risk, and ensure security enables innovation rather than becoming a barrier to it. This is a unique and rare opportunity to shape the future of information security within one of the world's leading biomedical research organisations, protecting data that supports thousands of researchers across the globe while helping deliver the next generation of scientific discovery. You will be responsible for Developing, implementing, and creating a comprehensive information security strategy, providing direction and support to ensure effective implementation of security controls. Conducting regular risk assessments, audits, tests, and modelling to identify and evaluate vulnerabilities and potential threats. Providing regular updates to the executive leadership team and represent information security at board, audit, and governance committees Establishing metrics and enforcing information security policies, procedures, and guidelines aligned with standards and frameworks, particularly ISO27001 and the NCSC Cyber Assessment Framework, as well as regulatory requirements and industry best practices. Ensuring that critical data and assets have been identified, classified, and subject to appropriate controls, including for handling, ownership, and destruction. Leading the organisation's response to major cyber incidents, including providing out-of-hours and crisis-level support when required. Promoting and communicating a culture of security awareness so all staff understand their role in maintaining information security. Managing the Information Security budget, setting investment priorities, and contributing to financial planning. Is this 'you'? To be successful, you will have: Significant experience in information security management, with a proven track record of leadership in the field. Relevant industry certifications, preferably CISSP, CISM, or CCISO. Strong knowledge of information security standards, frameworks, and best practices. Previous experience of ISO270001 is a key requirement. A clear understanding of the laws and regulations associated with controlling and processing personal data, directing organisation responses to cyber incidents. Strong knowledge and understanding of the cyber threat landscape. Experience securing cloud environments with a knowledge of the vulnerability detection tools and security services available in AWS and /or MS Azure. Experience of deploying controls across networking, end-user compute, identity and access management, software development, and business operations to minimise the likelihood of security incidents. Experience of recruiting specialist staff, building teams, and developing existing colleagues through training, coaching and mentoring. Working hours are 35 hours per week, Monday to Friday, with 3 days onsite and hybrid working available. The role will be based at Greenheys, Manchester Science Park's headquarters. Our passion for diversity and equality means creating a work environment for all employees that is welcoming, respectful, engaging, and enriched with opportunities for personal and professional development. We actively welcome applications from people with disabilities, long-term health conditions, neurodivergent candidates, and those with diverse thinking styles. We are committed to making reasonable adjustments throughout our recruitment process and in the workplace so that everyone can perform at their best. If you require any adjustments during the recruitment process, please contact Tommy Wilson at so we can support you. Your Wellbeing Matters to Us Colleagues at UK Biobank often highlight feeling supported, included, and connected to meaningful work, with wellbeing and work-life balance genuinely valued across teams. We're proud to offer a benefits package that supports your health, financial security, and development from day one: Currently 14.5% employer contribution to the USS Pension Scheme Healthcare Cash Plan to help cover everyday healthcare costs ️ 30 days' annual leave, plus bank holidays Buy up to 5 additional days' annual leave through our Holiday Buy Scheme A paid day off for your birthday Enhanced maternity, paternity, adoption and shared parental pay Hybrid and flexible working for many office-based roles Up to 6 months' full sick pay ️ Free on-site gym Subsidised lunch when working on site ️ Life Assurance Cycle to Work Scheme Season Ticket Loan Training and development opportunities, including a £500 annual personal development allowance Paid professional subscriptions, where applicable ️ Employee Discounts Portal Wellbeing support, including an Employee Assistance Programme Free annual flu vaccination and Hepatitis B vaccination, where applicable An active social committee with regular social events Free on-site parking Payroll Giving (Give As You Earn) The job advert closing date may change, so early applications are encouraged. About UK Biobank UK Biobank is a large-scale biomedical database and research resource containing in-depth genetic and health information from half a million UK participants. The database, the largest and most comprehensive of its kind in the world, is anonymised and made widely accessible by UK Biobank to global researchers who use it to find new scientific discoveries about common and life-threatening diseases - such as cancer, heart disease and stroke which strike in mid-later life. UK Biobank is an innovative organisation with over 350 staff across four sites in the UK that fosters an engaging environment and supports the development of our staff. Our dedicated teams work alongside the world's leading biomedical scientists in our joint mission to improve public health.
This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. Client Details Our client is a well-established and respected professional services organisation with a strong national presence and a reputation for delivering high-quality solutions to a broad client base. With ongoing investment in technology and cybersecurity, they are committed to maintaining a secure and resilient environment that supports business growth, innovation, and operational excellence. Description Investigating and responding to security incidents escalated through the Security Operations function. Performing detailed security event analysis and identifying potential threats or areas requiring further investigation. Working closely with external security service providers to ensure effective monitoring, alert management, and incident handling. Supporting cyber incident response activities as a technical security specialist. Analysing security metrics and trends, providing recommendations to improve security controls and reduce risk. Delivering and managing security awareness initiatives, including phishing simulations and remediation activities. Maintaining and optimising security monitoring and protection platforms across the technology estate. Conducting security reviews of systems, infrastructure, and operational processes. Collaborating with technology and business teams to drive continuous security improvements. Ensuring security operations align with relevant regulatory, governance, and industry best practice requirements. Contributing to the development and implementation of operational security controls and procedures. Profile Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment. Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline. Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security incidents and coordinating response activities. Knowledge of Security Information and Event Management (SIEM), Identity and Access Management (IAM), and Data Loss Prevention (DLP) technologies. Good understanding of modern security frameworks, detection engineering concepts, and operational security best practices. Experience securing cloud-based and enterprise collaboration environments. Familiarity with cyber threat intelligence and attack frameworks such as MITRE ATT&CK. Strong analytical and problem-solving skills with the ability to assess security risks effectively. A proactive approach to continuous learning and staying current with emerging threats and security trends. Desirable Degree in Cyber Security, Information Technology, Computer Science, or a related discipline. Relevant industry certifications such as CISSP, GIAC, CompTIA Security+, SC-200, AZ-500, or equivalent. Experience working within regulated or enterprise-scale environments. Job Offer Private healthcare. Life assurance. hybrid working 3 days in offices (Liverpool, Glasgow, London) Ongoing training and professional development opportunities.
Jul 31, 2026
Full time
This position focuses on security monitoring, incident investigation, threat analysis, and operational security improvement. The successful candidate will act as a subject matter expert for cyber security operations, supporting both proactive and reactive security activities while helping to enhance the organisation's overall security maturity. Client Details Our client is a well-established and respected professional services organisation with a strong national presence and a reputation for delivering high-quality solutions to a broad client base. With ongoing investment in technology and cybersecurity, they are committed to maintaining a secure and resilient environment that supports business growth, innovation, and operational excellence. Description Investigating and responding to security incidents escalated through the Security Operations function. Performing detailed security event analysis and identifying potential threats or areas requiring further investigation. Working closely with external security service providers to ensure effective monitoring, alert management, and incident handling. Supporting cyber incident response activities as a technical security specialist. Analysing security metrics and trends, providing recommendations to improve security controls and reduce risk. Delivering and managing security awareness initiatives, including phishing simulations and remediation activities. Maintaining and optimising security monitoring and protection platforms across the technology estate. Conducting security reviews of systems, infrastructure, and operational processes. Collaborating with technology and business teams to drive continuous security improvements. Ensuring security operations align with relevant regulatory, governance, and industry best practice requirements. Contributing to the development and implementation of operational security controls and procedures. Profile Previous experience working within a Security Operations Centre (SOC) or equivalent cyber security environment. Demonstrated experience in security operations, cyber defence, incident response, threat detection, or a related security discipline. Strong understanding of cyber attack techniques, threat actor methodologies, and appropriate mitigation strategies. Experience investigating security incidents and coordinating response activities. Knowledge of Security Information and Event Management (SIEM), Identity and Access Management (IAM), and Data Loss Prevention (DLP) technologies. Good understanding of modern security frameworks, detection engineering concepts, and operational security best practices. Experience securing cloud-based and enterprise collaboration environments. Familiarity with cyber threat intelligence and attack frameworks such as MITRE ATT&CK. Strong analytical and problem-solving skills with the ability to assess security risks effectively. A proactive approach to continuous learning and staying current with emerging threats and security trends. Desirable Degree in Cyber Security, Information Technology, Computer Science, or a related discipline. Relevant industry certifications such as CISSP, GIAC, CompTIA Security+, SC-200, AZ-500, or equivalent. Experience working within regulated or enterprise-scale environments. Job Offer Private healthcare. Life assurance. hybrid working 3 days in offices (Liverpool, Glasgow, London) Ongoing training and professional development opportunities.
Cyber Security Engineer/Specialist Permanent Up to £80,000 (+ Benefits) Hybrid Working (2 3 days per week Onsite) Surrey Help Shape Enterprise Cyber Security on a Global Scale We're looking for an experienced Cyber Security Engineer/Specialist to join a global organisation where security is a genuine business priority, not simply a compliance exercise. This is an opportunity to play a key role in protecting a complex enterprise environment, helping to identify, assess and mitigate sophisticated cyber threats while influencing the organisation's long-term security strategy. Working alongside infrastructure, architecture and operational teams, you'll strengthen enterprise security capabilities, improve cyber resilience and help safeguard critical business systems across an international environment. If you're looking for a role where you can make a real impact while continuing to develop your career within a stable organisation, we'd love to hear from you. The Role This is an enterprise Cyber Security position focused on proactive threat mitigation, security improvement and risk reduction rather than purely operational support. You'll be responsible for strengthening the organisation's security posture through threat assessment, vulnerability management, incident response and continuous security improvement initiatives. Key responsibilities include: Enterprise Threat Management Identify, assess and mitigate cyber threats across enterprise infrastructure and business systems Conduct proactive threat assessments and vulnerability analysis Develop and implement security controls and remediation strategies Monitor emerging threats and recommend appropriate defensive measures Enhance threat detection, monitoring and incident response capabilities Develop and maintain incident response playbooks and operational procedures Work closely with third-party security providers during incidents and security assessments Security Engineering & Risk Support enterprise security architecture and secure design initiatives Contribute to cyber risk management and governance activities Assess third-party and supply chain security risks Support penetration testing, vulnerability management and security assurance programmes Produce meaningful security metrics and KPI reporting for stakeholders Ensure alignment with recognised security frameworks and regulatory requirements Security Improvement Collaborate with infrastructure, cloud and engineering teams to embed security best practice Participate in Red Team / Blue Team exercises and cyber resilience testing Support business continuity and disaster recovery planning Champion continuous improvement across the organisation's security capability Communicate technical security risks clearly to both technical and business stakeholders What You'll Bring We're looking for someone who enjoys solving complex security challenges within large enterprise environments. You'll ideally have: A minimum of 5 years' experience in Cyber Security or Information Security Strong experience protecting enterprise environments against modern cyber threats Experience designing and implementing security controls to reduce organisational risk Excellent knowledge of enterprise security technologies and security operations Experience with SIEM platforms, incident response and threat detection Strong understanding of vulnerability management and security remediation Experience working with recognised security frameworks including: NIST ISO 27001 CIS Controls Cyber Essentials Knowledge of MITRE ATT&CK, Cyber Kill Chain and modern threat intelligence methodologies Excellent analytical, troubleshooting and stakeholder management skills Technical Environment Experience with several of the following technologies would be advantageous: Microsoft Defender Splunk Qualys Azure Security AWS Microsoft 365 Security PowerShell Python Kubernetes Windows Server Linux SOAR platforms Data Loss Prevention (DLP) DevSecOps practices Experience with AI-driven threat detection technologies would also be beneficial. Qualifications Ideally you'll hold one of the following: CISSP (preferred) CISM GIAC Certification CEH However, we recognise that exceptional enterprise Cyber Security experience is just as valuable. If you've developed your expertise through hands-on experience and hold certifications such as CompTIA Security+ , we'd still be keen to hear from you. Ideal Background We'd particularly like to speak with professionals currently working as: Senior Cyber Security Engineer Cyber Security Engineer Information Security Engineer Security Operations Engineer Threat Detection Engineer Cyber Defence Engineer Blue Team Engineer Senior SOC Engineer Security Consultant Experience within large enterprise or global organisations would be highly desirable. Why Join? You'll become part of a collaborative Cyber Security team within a business that continues to invest heavily in technology and security. In return, you'll benefit from: Competitive salary up to £80,000 (+ benefits) Hybrid working (2 3 days onsite in Surrey) Exposure to enterprise-scale security technologies Opportunities to influence security strategy Ongoing investment in professional development and certifications Long-term career progression within a stable global organisation A supportive and collaborative working culture Ready to Make an Impact? If you're passionate about enterprise Cyber Security, enjoy solving complex security challenges and want to help shape the future of Cyber Security within a global organisation, we'd love to hear from you. If you are passionate about cybersecurity, threat management and strengthening enterprise security capabilities, we would love to hear from you.
Jul 31, 2026
Full time
Cyber Security Engineer/Specialist Permanent Up to £80,000 (+ Benefits) Hybrid Working (2 3 days per week Onsite) Surrey Help Shape Enterprise Cyber Security on a Global Scale We're looking for an experienced Cyber Security Engineer/Specialist to join a global organisation where security is a genuine business priority, not simply a compliance exercise. This is an opportunity to play a key role in protecting a complex enterprise environment, helping to identify, assess and mitigate sophisticated cyber threats while influencing the organisation's long-term security strategy. Working alongside infrastructure, architecture and operational teams, you'll strengthen enterprise security capabilities, improve cyber resilience and help safeguard critical business systems across an international environment. If you're looking for a role where you can make a real impact while continuing to develop your career within a stable organisation, we'd love to hear from you. The Role This is an enterprise Cyber Security position focused on proactive threat mitigation, security improvement and risk reduction rather than purely operational support. You'll be responsible for strengthening the organisation's security posture through threat assessment, vulnerability management, incident response and continuous security improvement initiatives. Key responsibilities include: Enterprise Threat Management Identify, assess and mitigate cyber threats across enterprise infrastructure and business systems Conduct proactive threat assessments and vulnerability analysis Develop and implement security controls and remediation strategies Monitor emerging threats and recommend appropriate defensive measures Enhance threat detection, monitoring and incident response capabilities Develop and maintain incident response playbooks and operational procedures Work closely with third-party security providers during incidents and security assessments Security Engineering & Risk Support enterprise security architecture and secure design initiatives Contribute to cyber risk management and governance activities Assess third-party and supply chain security risks Support penetration testing, vulnerability management and security assurance programmes Produce meaningful security metrics and KPI reporting for stakeholders Ensure alignment with recognised security frameworks and regulatory requirements Security Improvement Collaborate with infrastructure, cloud and engineering teams to embed security best practice Participate in Red Team / Blue Team exercises and cyber resilience testing Support business continuity and disaster recovery planning Champion continuous improvement across the organisation's security capability Communicate technical security risks clearly to both technical and business stakeholders What You'll Bring We're looking for someone who enjoys solving complex security challenges within large enterprise environments. You'll ideally have: A minimum of 5 years' experience in Cyber Security or Information Security Strong experience protecting enterprise environments against modern cyber threats Experience designing and implementing security controls to reduce organisational risk Excellent knowledge of enterprise security technologies and security operations Experience with SIEM platforms, incident response and threat detection Strong understanding of vulnerability management and security remediation Experience working with recognised security frameworks including: NIST ISO 27001 CIS Controls Cyber Essentials Knowledge of MITRE ATT&CK, Cyber Kill Chain and modern threat intelligence methodologies Excellent analytical, troubleshooting and stakeholder management skills Technical Environment Experience with several of the following technologies would be advantageous: Microsoft Defender Splunk Qualys Azure Security AWS Microsoft 365 Security PowerShell Python Kubernetes Windows Server Linux SOAR platforms Data Loss Prevention (DLP) DevSecOps practices Experience with AI-driven threat detection technologies would also be beneficial. Qualifications Ideally you'll hold one of the following: CISSP (preferred) CISM GIAC Certification CEH However, we recognise that exceptional enterprise Cyber Security experience is just as valuable. If you've developed your expertise through hands-on experience and hold certifications such as CompTIA Security+ , we'd still be keen to hear from you. Ideal Background We'd particularly like to speak with professionals currently working as: Senior Cyber Security Engineer Cyber Security Engineer Information Security Engineer Security Operations Engineer Threat Detection Engineer Cyber Defence Engineer Blue Team Engineer Senior SOC Engineer Security Consultant Experience within large enterprise or global organisations would be highly desirable. Why Join? You'll become part of a collaborative Cyber Security team within a business that continues to invest heavily in technology and security. In return, you'll benefit from: Competitive salary up to £80,000 (+ benefits) Hybrid working (2 3 days onsite in Surrey) Exposure to enterprise-scale security technologies Opportunities to influence security strategy Ongoing investment in professional development and certifications Long-term career progression within a stable global organisation A supportive and collaborative working culture Ready to Make an Impact? If you're passionate about enterprise Cyber Security, enjoy solving complex security challenges and want to help shape the future of Cyber Security within a global organisation, we'd love to hear from you. If you are passionate about cybersecurity, threat management and strengthening enterprise security capabilities, we would love to hear from you.
Senior SOC Engineer - Microsoft Security We're looking for a senior SOC engineer to lead the design, delivery, and evolution of Microsoft-based security platforms within a fast-paced MSSP environment. This role combines hands-on engineering, customer engagement, and technical leadership to deliver high-quality, scalable security services. The Role You will take ownership of SOC-aligned platform engineering across the full lifecycle-from customer onboarding and solution design through to optimisation, maintenance, and continual improvement. You'll work closely with internal teams and customers to ensure security platforms are resilient, efficient, and aligned to evolving threat landscapes. A key part of the role is leading complex deployments and providing technical direction across SIEM, EDR, SOAR, and supporting technologies. You'll oversee platform health through proactive lifecycle management, including patching, upgrades, and service transitions, while driving improvements in detection, automation, and performance. You'll also act as a senior escalation point, mentoring engineers and helping to build capability across the team. Alongside delivery, you'll contribute to pre-sales activities, shaping solutions and supporting bids, demos, and customer discussions. Key Responsibilities Lead the design and implementation of SOC security platforms across customer environments Own end-to-end delivery, including onboarding, configuration, optimisation, and handover Manage platform lifecycle activities to maintain performance, stability, and operational readiness Drive continual improvement through enhancements to detection, automation, and scalability Act as a senior technical escalation point and mentor for the engineering team Maintain high-quality documentation, standards, and repeatable delivery practices Support pre-sales and stakeholder engagement with technical insight and solution design Core Experience & Skills You'll bring strong experience working in SOC or security engineering environments, with deep expertise in Microsoft security technologies and platform engineering. Strong hands-on experience with Microsoft Sentinel, Defender XDR, and Azure security services Proven ability to design and operate SIEM, EDR, SOAR, and log management solutions at scale Expertise in KQL for detection engineering, tuning, and performance optimisation Experience building and maintaining automation using Logic Apps and related tooling Solid understanding of telemetry pipelines, integration patterns, and security architecture Familiarity with frameworks such as MITRE ATT&CK and modern detection practices Strong troubleshooting and problem-solving skills across complex, integrated environments Experience in MSSP environments and working across multi-tenant platforms is highly desirable, particularly where you've contributed to service development, standardisation, and platform evolution. How You Work You're a confident communicator who can translate complex technical concepts into clear, actionable insights for both technical and non-technical audiences. You're comfortable leading engineering delivery, making decisions under pressure, and balancing customer needs with operational constraints. You thrive in collaborative environments, working closely with SOC analysts, detection engineers, sales teams, and optimisation specialists to deliver effective security outcomes. You also take an active role in mentoring others, supporting continuous learning and capability growth within the team. Additional Information You may be required to obtain UK security clearance (NPPV/SC) Some travel may be required for customer engagement and collaboration Growth & Development You'll be part of a team that values continuous development, with opportunities to progress into architectural, strategic, or leadership roles. Ongoing development is supported through certifications, complex project work, and involvement in shaping future SOC capabilities.
Jun 01, 2026
Full time
Senior SOC Engineer - Microsoft Security We're looking for a senior SOC engineer to lead the design, delivery, and evolution of Microsoft-based security platforms within a fast-paced MSSP environment. This role combines hands-on engineering, customer engagement, and technical leadership to deliver high-quality, scalable security services. The Role You will take ownership of SOC-aligned platform engineering across the full lifecycle-from customer onboarding and solution design through to optimisation, maintenance, and continual improvement. You'll work closely with internal teams and customers to ensure security platforms are resilient, efficient, and aligned to evolving threat landscapes. A key part of the role is leading complex deployments and providing technical direction across SIEM, EDR, SOAR, and supporting technologies. You'll oversee platform health through proactive lifecycle management, including patching, upgrades, and service transitions, while driving improvements in detection, automation, and performance. You'll also act as a senior escalation point, mentoring engineers and helping to build capability across the team. Alongside delivery, you'll contribute to pre-sales activities, shaping solutions and supporting bids, demos, and customer discussions. Key Responsibilities Lead the design and implementation of SOC security platforms across customer environments Own end-to-end delivery, including onboarding, configuration, optimisation, and handover Manage platform lifecycle activities to maintain performance, stability, and operational readiness Drive continual improvement through enhancements to detection, automation, and scalability Act as a senior technical escalation point and mentor for the engineering team Maintain high-quality documentation, standards, and repeatable delivery practices Support pre-sales and stakeholder engagement with technical insight and solution design Core Experience & Skills You'll bring strong experience working in SOC or security engineering environments, with deep expertise in Microsoft security technologies and platform engineering. Strong hands-on experience with Microsoft Sentinel, Defender XDR, and Azure security services Proven ability to design and operate SIEM, EDR, SOAR, and log management solutions at scale Expertise in KQL for detection engineering, tuning, and performance optimisation Experience building and maintaining automation using Logic Apps and related tooling Solid understanding of telemetry pipelines, integration patterns, and security architecture Familiarity with frameworks such as MITRE ATT&CK and modern detection practices Strong troubleshooting and problem-solving skills across complex, integrated environments Experience in MSSP environments and working across multi-tenant platforms is highly desirable, particularly where you've contributed to service development, standardisation, and platform evolution. How You Work You're a confident communicator who can translate complex technical concepts into clear, actionable insights for both technical and non-technical audiences. You're comfortable leading engineering delivery, making decisions under pressure, and balancing customer needs with operational constraints. You thrive in collaborative environments, working closely with SOC analysts, detection engineers, sales teams, and optimisation specialists to deliver effective security outcomes. You also take an active role in mentoring others, supporting continuous learning and capability growth within the team. Additional Information You may be required to obtain UK security clearance (NPPV/SC) Some travel may be required for customer engagement and collaboration Growth & Development You'll be part of a team that values continuous development, with opportunities to progress into architectural, strategic, or leadership roles. Ongoing development is supported through certifications, complex project work, and involvement in shaping future SOC capabilities.
Principle IT Security Specialist - London - Hybrid Working £80,000 - £105,000 (dependent on experience) + Equity & Benefits Help Build Europe's Hypersonic Capability This organisation is redefining what's possible in European defence technology, delivering speed, resilience, and technological independence at a pace that sets a new standard. Operating as a small, elite, and highly capable team, it focuses on solving complex, high-impact problems quickly and effectively. They are seeking an Lead IT Security Specialist to join a talent-dense environment where every individual plays a critical role in shaping both technical direction and organisational capability. This is not a predefined role, it is an opportunity for a high-calibre security professional to take ownership of core security functions, with scope to evolve the position based on their strengths and expertise. The successful candidate will play a key role in strengthening security posture through SIEM ownership, incident response, and system hardening, directly contributing to Europe's technological sovereignty. The Role The IT Security Specialist will: Design, build, and operate a centralised SIEM platform to aggregate and analyse security logs across infrastructure, networks, and applications Own security log analysis, vulnerability management, and incident investigation, including defining baselines and developing alerting rules for critical events Lead incident response efforts, using log correlation and analysis to investigate and resolve security issues quickly and effectively Define and implement system and application hardening standards, ensuring strong, consistent security configurations across environments Act as an on-call responder for security incidents, taking full ownership from detection through to resolution and post-incident improvement Collaborate with Information Security and leadership teams to ensure compliance with relevant standards and frameworks (e.g. Cyber Essentials, ISO 27001, DEF STAN, Grundschutz) Develop and maintain clear documentation covering SIEM architecture, security controls, incident response procedures, and audit requirements Candidate Profile The ideal candidate will bring: Hands-on experience deploying and operating SIEM solutions (e.g. ELK Stack, OpenSearch, Wazuh, Microsoft Defender), with proven incident investigation experience in production environments Strong expertise in Linux and Windows system hardening, with familiarity across frameworks such as CIS Benchmarks or STIGs Scripting capability for automation, log parsing, and alerting rule development Experience working within compliance-driven or regulated environments A strong security mindset, with a focus on access control, threat detection, and auditability The ability to balance robust security controls with operational efficiency High levels of autonomy and sound judgement, with the ability to manage incidents end-to-end A pragmatic, delivery-focused approach, prioritising effective security outcomes over theoretical perfection Security Clearance Due to the nature of the work, applicants must be British citizens (or dual nationals with British citizenship) and eligible for UK Security Clearance (SC), with the potential requirement for Developed Vetting (DV). What's on Offer The opportunity to work on one of Europe's most critical and high-impact defence challenges A high-autonomy environment with full ownership of key security capabilities Collaboration with leading experts across engineering, operations, and defence A fast-paced setting where ideas are implemented quickly and security improvements have immediate impact A culture built on clarity, integrity, and excellence, supporting individuals who take initiative and operate with accountability Competitive compensation and meaningful equity aligned to impact and responsibility Robert Half Ltd acts as an employment business for temporary positions and an employment agency for permanent positions. Robert Half is committed to diversity, equity and inclusion. Suitable candidates with equivalent qualifications and more or less experience can apply. Rates of pay and salary ranges are dependent upon your experience, qualifications and training. If you wish to apply, please read our Privacy Notice describing how we may process, disclose and store your personal data:
May 19, 2026
Full time
Principle IT Security Specialist - London - Hybrid Working £80,000 - £105,000 (dependent on experience) + Equity & Benefits Help Build Europe's Hypersonic Capability This organisation is redefining what's possible in European defence technology, delivering speed, resilience, and technological independence at a pace that sets a new standard. Operating as a small, elite, and highly capable team, it focuses on solving complex, high-impact problems quickly and effectively. They are seeking an Lead IT Security Specialist to join a talent-dense environment where every individual plays a critical role in shaping both technical direction and organisational capability. This is not a predefined role, it is an opportunity for a high-calibre security professional to take ownership of core security functions, with scope to evolve the position based on their strengths and expertise. The successful candidate will play a key role in strengthening security posture through SIEM ownership, incident response, and system hardening, directly contributing to Europe's technological sovereignty. The Role The IT Security Specialist will: Design, build, and operate a centralised SIEM platform to aggregate and analyse security logs across infrastructure, networks, and applications Own security log analysis, vulnerability management, and incident investigation, including defining baselines and developing alerting rules for critical events Lead incident response efforts, using log correlation and analysis to investigate and resolve security issues quickly and effectively Define and implement system and application hardening standards, ensuring strong, consistent security configurations across environments Act as an on-call responder for security incidents, taking full ownership from detection through to resolution and post-incident improvement Collaborate with Information Security and leadership teams to ensure compliance with relevant standards and frameworks (e.g. Cyber Essentials, ISO 27001, DEF STAN, Grundschutz) Develop and maintain clear documentation covering SIEM architecture, security controls, incident response procedures, and audit requirements Candidate Profile The ideal candidate will bring: Hands-on experience deploying and operating SIEM solutions (e.g. ELK Stack, OpenSearch, Wazuh, Microsoft Defender), with proven incident investigation experience in production environments Strong expertise in Linux and Windows system hardening, with familiarity across frameworks such as CIS Benchmarks or STIGs Scripting capability for automation, log parsing, and alerting rule development Experience working within compliance-driven or regulated environments A strong security mindset, with a focus on access control, threat detection, and auditability The ability to balance robust security controls with operational efficiency High levels of autonomy and sound judgement, with the ability to manage incidents end-to-end A pragmatic, delivery-focused approach, prioritising effective security outcomes over theoretical perfection Security Clearance Due to the nature of the work, applicants must be British citizens (or dual nationals with British citizenship) and eligible for UK Security Clearance (SC), with the potential requirement for Developed Vetting (DV). What's on Offer The opportunity to work on one of Europe's most critical and high-impact defence challenges A high-autonomy environment with full ownership of key security capabilities Collaboration with leading experts across engineering, operations, and defence A fast-paced setting where ideas are implemented quickly and security improvements have immediate impact A culture built on clarity, integrity, and excellence, supporting individuals who take initiative and operate with accountability Competitive compensation and meaningful equity aligned to impact and responsibility Robert Half Ltd acts as an employment business for temporary positions and an employment agency for permanent positions. Robert Half is committed to diversity, equity and inclusion. Suitable candidates with equivalent qualifications and more or less experience can apply. Rates of pay and salary ranges are dependent upon your experience, qualifications and training. If you wish to apply, please read our Privacy Notice describing how we may process, disclose and store your personal data:
Senior SOC Engineer - Microsoft Security We're looking for a senior SOC engineer to lead the design, delivery, and evolution of Microsoft-based security platforms within a fast-paced MSSP environment. This role combines hands-on engineering, customer engagement, and technical leadership to deliver high-quality, scalable security services. The Role You will take ownership of SOC-aligned platform engineering across the full lifecycle-from customer onboarding and solution design through to optimisation, maintenance, and continual improvement. You'll work closely with internal teams and customers to ensure security platforms are resilient, efficient, and aligned to evolving threat landscapes. A key part of the role is leading complex deployments and providing technical direction across SIEM, EDR, SOAR, and supporting technologies. You'll oversee platform health through proactive lifecycle management, including patching, upgrades, and service transitions, while driving improvements in detection, automation, and performance. You'll also act as a senior escalation point, mentoring engineers and helping to build capability across the team. Alongside delivery, you'll contribute to pre-sales activities, shaping solutions and supporting bids, demos, and customer discussions. Key Responsibilities Lead the design and implementation of SOC security platforms across customer environments Own end-to-end delivery, including onboarding, configuration, optimisation, and handover Manage platform lifecycle activities to maintain performance, stability, and operational readiness Drive continual improvement through enhancements to detection, automation, and scalability Act as a senior technical escalation point and mentor for the engineering team Maintain high-quality documentation, standards, and repeatable delivery practices Support pre-sales and stakeholder engagement with technical insight and solution design Core Experience & Skills You'll bring strong experience working in SOC or security engineering environments, with deep expertise in Microsoft security technologies and platform engineering. Strong hands-on experience with Microsoft Sentinel, Defender XDR, and Azure security services Proven ability to design and operate SIEM, EDR, SOAR, and log management solutions at scale Expertise in KQL for detection engineering, tuning, and performance optimisation Experience building and maintaining automation using Logic Apps and related tooling Solid understanding of telemetry pipelines, integration patterns, and security architecture Familiarity with frameworks such as MITRE ATT&CK and modern detection practices Strong troubleshooting and problem-solving skills across complex, integrated environments Experience in MSSP environments and working across multi-tenant platforms is highly desirable, particularly where you've contributed to service development, standardisation, and platform evolution. How You Work You're a confident communicator who can translate complex technical concepts into clear, actionable insights for both technical and non-technical audiences. You're comfortable leading engineering delivery, making decisions under pressure, and balancing customer needs with operational constraints. You thrive in collaborative environments, working closely with SOC analysts, detection engineers, sales teams, and optimisation specialists to deliver effective security outcomes. You also take an active role in mentoring others, supporting continuous learning and capability growth within the team. Additional Information You may be required to obtain UK security clearance (NPPV/SC) Some travel may be required for customer engagement and collaboration Growth & Development You'll be part of a team that values continuous development, with opportunities to progress into architectural, strategic, or leadership roles. Ongoing development is supported through certifications, complex project work, and involvement in shaping future SOC capabilities.
May 19, 2026
Full time
Senior SOC Engineer - Microsoft Security We're looking for a senior SOC engineer to lead the design, delivery, and evolution of Microsoft-based security platforms within a fast-paced MSSP environment. This role combines hands-on engineering, customer engagement, and technical leadership to deliver high-quality, scalable security services. The Role You will take ownership of SOC-aligned platform engineering across the full lifecycle-from customer onboarding and solution design through to optimisation, maintenance, and continual improvement. You'll work closely with internal teams and customers to ensure security platforms are resilient, efficient, and aligned to evolving threat landscapes. A key part of the role is leading complex deployments and providing technical direction across SIEM, EDR, SOAR, and supporting technologies. You'll oversee platform health through proactive lifecycle management, including patching, upgrades, and service transitions, while driving improvements in detection, automation, and performance. You'll also act as a senior escalation point, mentoring engineers and helping to build capability across the team. Alongside delivery, you'll contribute to pre-sales activities, shaping solutions and supporting bids, demos, and customer discussions. Key Responsibilities Lead the design and implementation of SOC security platforms across customer environments Own end-to-end delivery, including onboarding, configuration, optimisation, and handover Manage platform lifecycle activities to maintain performance, stability, and operational readiness Drive continual improvement through enhancements to detection, automation, and scalability Act as a senior technical escalation point and mentor for the engineering team Maintain high-quality documentation, standards, and repeatable delivery practices Support pre-sales and stakeholder engagement with technical insight and solution design Core Experience & Skills You'll bring strong experience working in SOC or security engineering environments, with deep expertise in Microsoft security technologies and platform engineering. Strong hands-on experience with Microsoft Sentinel, Defender XDR, and Azure security services Proven ability to design and operate SIEM, EDR, SOAR, and log management solutions at scale Expertise in KQL for detection engineering, tuning, and performance optimisation Experience building and maintaining automation using Logic Apps and related tooling Solid understanding of telemetry pipelines, integration patterns, and security architecture Familiarity with frameworks such as MITRE ATT&CK and modern detection practices Strong troubleshooting and problem-solving skills across complex, integrated environments Experience in MSSP environments and working across multi-tenant platforms is highly desirable, particularly where you've contributed to service development, standardisation, and platform evolution. How You Work You're a confident communicator who can translate complex technical concepts into clear, actionable insights for both technical and non-technical audiences. You're comfortable leading engineering delivery, making decisions under pressure, and balancing customer needs with operational constraints. You thrive in collaborative environments, working closely with SOC analysts, detection engineers, sales teams, and optimisation specialists to deliver effective security outcomes. You also take an active role in mentoring others, supporting continuous learning and capability growth within the team. Additional Information You may be required to obtain UK security clearance (NPPV/SC) Some travel may be required for customer engagement and collaboration Growth & Development You'll be part of a team that values continuous development, with opportunities to progress into architectural, strategic, or leadership roles. Ongoing development is supported through certifications, complex project work, and involvement in shaping future SOC capabilities.
Network and Security Engineer Permanent - £50k - £60k + strong benefits Location: Hybrid - Berkshire Your new company: I am looking to recruit a Network & Security Engineer to join a great public sector organisation. You'll join a well-respected organisation with a user base exceeding 3,000 people. You'll be joining a strong, existing team who are looking to expand and add more expertise into the team. The role responsibilities: Manage network routing, switching and access control to maintain secure and reliable connectivity across the campus. Maintain and optimise firewall and web filtering platforms to ensure secure access, appropriate content filtering and safeguarding compliance (including KCSIE requirements). Monitor network traffic and security events using Splunk and related tooling, investigating alerts and supporting detection, containment and remediation of incidents. Support vulnerability management processes across network and security infrastructure. Contribute to the development of network resilience, segmentation and cyber security controls. Produce safeguarding and security-related reporting to support pastoral and safeguarding teams. Maintain accurate documentation of network topology, security configurations and standards. Work with external partners and service providers to maintain high levels of security and availability. Support disaster recovery and business continuity planning from a security and network perspective. Promote cyber security awareness across the community. Provide 2nd/3rd line support for complex network and security issues. Support compliance with relevant security and data protection frameworks, including Cyber Essentials, NCSC guidance and ISO-aligned standards where applicable. You will need: Strong demonstrable experience of Network and Cyber engineering Experience communicating with stakeholders at all levels. The ability to write fluently, accurately and concisely with clarity and authority. Proven abilities in documenting and presenting concise reports, explaining complex information to varied audiences. Strong experience supporting enterprise network infrastructure (switching, routing and wireless environments). Experience working with modern network platforms (experience with Arista would be advantageous). Practical understanding of cyber security principles, threat monitoring and operational security controls. Experience using SIEM or monitoring platforms (experience with Splunk would be highly advantageous) Knowledge of secure network segmentation, filtering and access control models. Experience investigating and responding to security alerts or anomalous network activity. Strong troubleshooting skills and the ability to analyse complex network or security issues. Experience designing or implementing resilient, high-availability network architectures. Experience operating at 2nd/3rd line support level within a network or security focused environment. Clear written and verbal communication skills, with a structured and methodical approach. What you'll get in return: Salary of between £50k-£60k 28 days annual leave + bank holidays Strong pension (11%) And more! Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk
May 18, 2026
Full time
Network and Security Engineer Permanent - £50k - £60k + strong benefits Location: Hybrid - Berkshire Your new company: I am looking to recruit a Network & Security Engineer to join a great public sector organisation. You'll join a well-respected organisation with a user base exceeding 3,000 people. You'll be joining a strong, existing team who are looking to expand and add more expertise into the team. The role responsibilities: Manage network routing, switching and access control to maintain secure and reliable connectivity across the campus. Maintain and optimise firewall and web filtering platforms to ensure secure access, appropriate content filtering and safeguarding compliance (including KCSIE requirements). Monitor network traffic and security events using Splunk and related tooling, investigating alerts and supporting detection, containment and remediation of incidents. Support vulnerability management processes across network and security infrastructure. Contribute to the development of network resilience, segmentation and cyber security controls. Produce safeguarding and security-related reporting to support pastoral and safeguarding teams. Maintain accurate documentation of network topology, security configurations and standards. Work with external partners and service providers to maintain high levels of security and availability. Support disaster recovery and business continuity planning from a security and network perspective. Promote cyber security awareness across the community. Provide 2nd/3rd line support for complex network and security issues. Support compliance with relevant security and data protection frameworks, including Cyber Essentials, NCSC guidance and ISO-aligned standards where applicable. You will need: Strong demonstrable experience of Network and Cyber engineering Experience communicating with stakeholders at all levels. The ability to write fluently, accurately and concisely with clarity and authority. Proven abilities in documenting and presenting concise reports, explaining complex information to varied audiences. Strong experience supporting enterprise network infrastructure (switching, routing and wireless environments). Experience working with modern network platforms (experience with Arista would be advantageous). Practical understanding of cyber security principles, threat monitoring and operational security controls. Experience using SIEM or monitoring platforms (experience with Splunk would be highly advantageous) Knowledge of secure network segmentation, filtering and access control models. Experience investigating and responding to security alerts or anomalous network activity. Strong troubleshooting skills and the ability to analyse complex network or security issues. Experience designing or implementing resilient, high-availability network architectures. Experience operating at 2nd/3rd line support level within a network or security focused environment. Clear written and verbal communication skills, with a structured and methodical approach. What you'll get in return: Salary of between £50k-£60k 28 days annual leave + bank holidays Strong pension (11%) And more! Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk
Senior Cyber Security Engineer (Contract) Hybrid 6-Month Contract Start: ASAP Day Rate: 500p/d inside The Opportunity We're looking for a Senior Cyber Security Engineer to join a forward-thinking public sector environment at a critical point in its cyber maturity journey. With a newly implemented outsourced Security Operations Centre (SOC) powered by Splunk and CrowdStrike , this role is key to maximising both investment and capability. You'll act as the senior technical lead-optimising tooling, strengthening detection and response, and upskilling the internal team. This is a hands-on, high-impact role suited to someone who can hit the ground running and elevate an evolving security function. Key Responsibilities Endpoint Security Leadership: Own deployment, configuration, and optimisation of CrowdStrike Falcon SIEM Optimisation: Partner with the SOC to enhance Splunk dashboards, alerts, and data models Incident Response: Act as escalation point for high-priority incidents, driving rapid containment Threat Hunting: Proactively identify hidden threats using advanced queries and telemetry Automation (SOAR): Build workflows to streamline response and reduce manual effort Capability Building: Upskill internal teams across CrowdStrike, Splunk, and security analysis Required Experience 5+ years in Cyber Security Engineering or SOC (Tier 3 level) Deep hands-on experience with CrowdStrike Falcon (Prevent, Insight, Discover) Strong Splunk expertise, including SPL and Enterprise Security (ES) Solid understanding of: Network protocols Cloud security (AWS/Azure) MITRE ATT&CK framework Additional desirable experience: Vulnerability Assessment tools Penetration Testing / Web Application Testing exposure Security policy and standards development Certifications (Desirable) Cyber Security: CompTIA Security+, Network+, CySA+, GSEC CISSP, GCIH, GCIA, CCSP CrowdStrike (ideally 2+): CCFA (Falcon Administrator) CCFR (Falcon Responder) CCSE (SIEM Engineer) Splunk: Splunk Certified Cybersecurity Defense Engineer (preferred) Why Apply? Shape and optimise a modern SOC capability Work with best-in-class tools (CrowdStrike & Splunk) High-impact role with visibility across the organisation Opportunity to leave a lasting legacy through capability uplift and knowledge transfer If you're a senior cyber specialist who thrives in hands-on, technically challenging environments and enjoys building capability as well as solving problems, this is worth a conversation Eden Brown Synergy is an equal opportunities employer. Eden Brown Limited is a limited company registered in England and Wales with registered number (phone number removed). Our registered address is 5th floor 4 Coleman Street, London, EC2R 5AR, part of nGAGE Specialist Recruitment Limited T/A nGAGE Talent. Please consider the environment before printing this e-mail. This message is intended solely for the addressee and may contain confidential information. If you have received this message in error, please send it back to us, and immediately and permanently delete it. Do not use, copy or disclose the information contained in this message or in any attachment. We take reasonable precautions to ensure no viruses are present in this email but cannot accept responsibility for any loss or damage sustained as a result of computer viruses and the recipient must ensure that the email (and attachments) are virus free.
May 16, 2026
Contractor
Senior Cyber Security Engineer (Contract) Hybrid 6-Month Contract Start: ASAP Day Rate: 500p/d inside The Opportunity We're looking for a Senior Cyber Security Engineer to join a forward-thinking public sector environment at a critical point in its cyber maturity journey. With a newly implemented outsourced Security Operations Centre (SOC) powered by Splunk and CrowdStrike , this role is key to maximising both investment and capability. You'll act as the senior technical lead-optimising tooling, strengthening detection and response, and upskilling the internal team. This is a hands-on, high-impact role suited to someone who can hit the ground running and elevate an evolving security function. Key Responsibilities Endpoint Security Leadership: Own deployment, configuration, and optimisation of CrowdStrike Falcon SIEM Optimisation: Partner with the SOC to enhance Splunk dashboards, alerts, and data models Incident Response: Act as escalation point for high-priority incidents, driving rapid containment Threat Hunting: Proactively identify hidden threats using advanced queries and telemetry Automation (SOAR): Build workflows to streamline response and reduce manual effort Capability Building: Upskill internal teams across CrowdStrike, Splunk, and security analysis Required Experience 5+ years in Cyber Security Engineering or SOC (Tier 3 level) Deep hands-on experience with CrowdStrike Falcon (Prevent, Insight, Discover) Strong Splunk expertise, including SPL and Enterprise Security (ES) Solid understanding of: Network protocols Cloud security (AWS/Azure) MITRE ATT&CK framework Additional desirable experience: Vulnerability Assessment tools Penetration Testing / Web Application Testing exposure Security policy and standards development Certifications (Desirable) Cyber Security: CompTIA Security+, Network+, CySA+, GSEC CISSP, GCIH, GCIA, CCSP CrowdStrike (ideally 2+): CCFA (Falcon Administrator) CCFR (Falcon Responder) CCSE (SIEM Engineer) Splunk: Splunk Certified Cybersecurity Defense Engineer (preferred) Why Apply? Shape and optimise a modern SOC capability Work with best-in-class tools (CrowdStrike & Splunk) High-impact role with visibility across the organisation Opportunity to leave a lasting legacy through capability uplift and knowledge transfer If you're a senior cyber specialist who thrives in hands-on, technically challenging environments and enjoys building capability as well as solving problems, this is worth a conversation Eden Brown Synergy is an equal opportunities employer. Eden Brown Limited is a limited company registered in England and Wales with registered number (phone number removed). Our registered address is 5th floor 4 Coleman Street, London, EC2R 5AR, part of nGAGE Specialist Recruitment Limited T/A nGAGE Talent. Please consider the environment before printing this e-mail. This message is intended solely for the addressee and may contain confidential information. If you have received this message in error, please send it back to us, and immediately and permanently delete it. Do not use, copy or disclose the information contained in this message or in any attachment. We take reasonable precautions to ensure no viruses are present in this email but cannot accept responsibility for any loss or damage sustained as a result of computer viruses and the recipient must ensure that the email (and attachments) are virus free.
What you'll be doing Join the Deployable and Reactive Team (DaRT) at the House of Commons - a unique opportunity to play a pivotal role in safeguarding UK Parliament. As a DaRT Officer, you'll be part of a highly skilled, mobile security unit that responds to emerging threats, supports planned operations, and enhances the overall safety of the Parliamentary Estate. In this role, you'll act as both a proactive and reactive security asset - conducting targeted patrols, overt and covert behavioural detection, and leading specialist security searches across key locations. You'll respond to incidents across the Estate, exercise common law powers where necessary, and play a central part in contingency planning. You will also support high profile committees and events, facilitate the secure movement of dignitaries, and carry out close protection duties, sometimes acting as team leader. From major ceremonial occasions such as State Opening to spontaneous security challenges, no two days are the same. If you're motivated by purpose, problem solving, and working at the heart of democracy, this is a rare and exciting opportunity to make a meaningful impact. Find out more about working at the House of Commons. Why Join us? In addition to your salary, we offer an attractive range of benefits including but not limited to: Generous annual leave starting at 30 days and increasing to 35 after one full working year. Enrolment in the excellent Civil Service pension scheme with an average employer contribution of 27% Flexible working options that help you find a balance including enhanced maternity, paternity, shared parental and adoption leave, caring leave and alternative working patterns. What we're looking for. A security background with demonstrable experience in areas relevant to the role such as close protection, surveillance, specialist search skills and behaviour detection; Experience of working with diverse groups of people; Experience of working in a fast-moving, unpredictable environment; Excellent interpersonal and written & verbal communications skills; Sound decision making skills. Next Steps and Additional Information Application Form - If you would like to apply for this role, please submit an application providing evidence against criteria 2, 5 & 6 in the Job Description. More information on the application process can be found here: Application process - UK Parliament Please note that the assessment day will be held on Saturday 13th June. This is the only available date. Please note that most job offers will be made at the minimum of the salary range, other than in exceptional circumstances. We may close the vacancy prior to the closing date stated due to a high volume of applications.
May 07, 2026
Full time
What you'll be doing Join the Deployable and Reactive Team (DaRT) at the House of Commons - a unique opportunity to play a pivotal role in safeguarding UK Parliament. As a DaRT Officer, you'll be part of a highly skilled, mobile security unit that responds to emerging threats, supports planned operations, and enhances the overall safety of the Parliamentary Estate. In this role, you'll act as both a proactive and reactive security asset - conducting targeted patrols, overt and covert behavioural detection, and leading specialist security searches across key locations. You'll respond to incidents across the Estate, exercise common law powers where necessary, and play a central part in contingency planning. You will also support high profile committees and events, facilitate the secure movement of dignitaries, and carry out close protection duties, sometimes acting as team leader. From major ceremonial occasions such as State Opening to spontaneous security challenges, no two days are the same. If you're motivated by purpose, problem solving, and working at the heart of democracy, this is a rare and exciting opportunity to make a meaningful impact. Find out more about working at the House of Commons. Why Join us? In addition to your salary, we offer an attractive range of benefits including but not limited to: Generous annual leave starting at 30 days and increasing to 35 after one full working year. Enrolment in the excellent Civil Service pension scheme with an average employer contribution of 27% Flexible working options that help you find a balance including enhanced maternity, paternity, shared parental and adoption leave, caring leave and alternative working patterns. What we're looking for. A security background with demonstrable experience in areas relevant to the role such as close protection, surveillance, specialist search skills and behaviour detection; Experience of working with diverse groups of people; Experience of working in a fast-moving, unpredictable environment; Excellent interpersonal and written & verbal communications skills; Sound decision making skills. Next Steps and Additional Information Application Form - If you would like to apply for this role, please submit an application providing evidence against criteria 2, 5 & 6 in the Job Description. More information on the application process can be found here: Application process - UK Parliament Please note that the assessment day will be held on Saturday 13th June. This is the only available date. Please note that most job offers will be made at the minimum of the salary range, other than in exceptional circumstances. We may close the vacancy prior to the closing date stated due to a high volume of applications.
SOC Engineer - SIEM, Exabeam, SOAR, EDR, IDS/IPS, MITRE, Azure, SC-200, SC-100, Our leading global law firm client are currently looking to take on a new SOC Engineer (SIEM, Exabeam, SOAR, EDR, IDS/IPS, MITRE, Azure, SC-200, SC-100) to join their team on a contractual basis. The firm are an extremely modern law firm which offer a healthy hybrid working solution 2-3 days per week in London and offer a great deal of autonomy and technical exposure. This SOC Engineer (SIEM, Exabeam, SOAR, EDR, IDS/IPS, MITRE, Azure, SC-200, SC-100) role, will be responsible for the enhancement of existing SIEM platform and improve performance, coverage and fidelity by conducting regular assessments of the SIEM architecture. To be considered for this SOC Engineer (SIEM, Exabeam, SOAR, EDR, IDS/IPS, MITRE, Azure, SC-200, SC-100)Defender) role, it's ideal you have: 3 + years within a similar role Ideal but not required law firm experience Security qualifications such as CISSP, CISM, CEH, CompTIA Sec+ or others SIEM Engineering & Maturity Enhance and optimise the existing SIEM platform to improve performance, coverage, and fidelity. Conduct regular assessments of SIEM architecture and propose improvements to ingestion pipelines, parsing rules, correlation logic, and storage management. Implement automation and orchestration components (SOAR) to streamline incident response activities. Log Source Onboarding & Integration Identify, prioritise, and onboard new log sources from cloud, on-prem, network, endpoint, identity, and application platforms. Develop and maintain custom parsers, connectors, and ingestion playbooks. Work with internal teams and vendors to ensure high-quality, reliable telemetry and error-free ingestion. Use Case & Detection Content Development Design, implement, test, and tune detection use cases based on attacker techniques (MITRE ATT&CK), threat intelligence, and risk appetite. Build correlation rules, anomaly-based detections, dashboards, and alerting workflows. Regularly review detection efficacy and reduce false positives through tuning and logic refinement. SOC Support & Incident Response Work closely with SOC analysts to validate and refine detection logic. Support incident investigations through SIEM searches, enrichment, and data modelling. Provide technical SME support for complex incidents that require deep SIEM or log knowledge. Documentation & Governance Maintain high-quality documentation covering data models, feed onboarding, use cases, correlation logic, and architecture. Ensure alignment with internal controls, compliance requirements, and industry standards. Education, Skills & Experience Technical Expertise Hands-on experience with leading SIEM platforms (e.g., Exabeam, LogRhythm, ArcSight, Microsoft Sentinel, Splunk, QRadar, Elastic). Strong understanding of log formats (JSON, syslog, XML, CEF, etc.) and ingestion technologies (Syslog, API, Event Hubs, Kafka, Agents). Practical knowledge of detection engineering, threat modelling, and attacker behaviour analysis. Experience building and tuning correlation rules, searches, and dashboards. Familiarity with SOAR platforms and automation workflows. Security Knowledge Strong understanding of networking, Windows/Linux systems, Cloud platforms (Azure/AWS/GCP), identity systems, and endpoint protection technologies (e.g. SentinelOne and Microsoft Defender) Knowledge of MITRE ATT&CK, cyber kill chain, and threat hunting methodologies. Must Have Level 4 or higher qualification in a computing subject, or equivalent experience IT experience including both IT Infrastructure and Information Security roles Relevant professional certifications that validate the fundamental skills required to perform the role, e.g. GIAC (GCIA,GCDA,GMON) Microsoft SC-200/SC-100, CompTIA Secure Infrastructure Specialist (CSIS), SSCP/CISSP etc Strong skill level in scripting technologies, including Python, MS PowerShell and PowerApps Ability to conduct research into Infrastructure issues and products as required Self-starting with strong interpersonal, written, and oral communication skills. Ability to engage colleagues at all levels and project a solid, professional attitude consistently. Nice to have Data Loss Prevention Secure Remote Access solutions Network Security solutions Open Source and Cyber Threat Intelligence Suitable experience working with the market leading technology vendor product suites Experience in software-defined and cloud services such as SaaS, IaaS, PaaS and DaaS Experience in Disaster Recovery Management and Business Continuity Knowledge of applicable data privacy practices and laws
May 03, 2026
Contractor
SOC Engineer - SIEM, Exabeam, SOAR, EDR, IDS/IPS, MITRE, Azure, SC-200, SC-100, Our leading global law firm client are currently looking to take on a new SOC Engineer (SIEM, Exabeam, SOAR, EDR, IDS/IPS, MITRE, Azure, SC-200, SC-100) to join their team on a contractual basis. The firm are an extremely modern law firm which offer a healthy hybrid working solution 2-3 days per week in London and offer a great deal of autonomy and technical exposure. This SOC Engineer (SIEM, Exabeam, SOAR, EDR, IDS/IPS, MITRE, Azure, SC-200, SC-100) role, will be responsible for the enhancement of existing SIEM platform and improve performance, coverage and fidelity by conducting regular assessments of the SIEM architecture. To be considered for this SOC Engineer (SIEM, Exabeam, SOAR, EDR, IDS/IPS, MITRE, Azure, SC-200, SC-100)Defender) role, it's ideal you have: 3 + years within a similar role Ideal but not required law firm experience Security qualifications such as CISSP, CISM, CEH, CompTIA Sec+ or others SIEM Engineering & Maturity Enhance and optimise the existing SIEM platform to improve performance, coverage, and fidelity. Conduct regular assessments of SIEM architecture and propose improvements to ingestion pipelines, parsing rules, correlation logic, and storage management. Implement automation and orchestration components (SOAR) to streamline incident response activities. Log Source Onboarding & Integration Identify, prioritise, and onboard new log sources from cloud, on-prem, network, endpoint, identity, and application platforms. Develop and maintain custom parsers, connectors, and ingestion playbooks. Work with internal teams and vendors to ensure high-quality, reliable telemetry and error-free ingestion. Use Case & Detection Content Development Design, implement, test, and tune detection use cases based on attacker techniques (MITRE ATT&CK), threat intelligence, and risk appetite. Build correlation rules, anomaly-based detections, dashboards, and alerting workflows. Regularly review detection efficacy and reduce false positives through tuning and logic refinement. SOC Support & Incident Response Work closely with SOC analysts to validate and refine detection logic. Support incident investigations through SIEM searches, enrichment, and data modelling. Provide technical SME support for complex incidents that require deep SIEM or log knowledge. Documentation & Governance Maintain high-quality documentation covering data models, feed onboarding, use cases, correlation logic, and architecture. Ensure alignment with internal controls, compliance requirements, and industry standards. Education, Skills & Experience Technical Expertise Hands-on experience with leading SIEM platforms (e.g., Exabeam, LogRhythm, ArcSight, Microsoft Sentinel, Splunk, QRadar, Elastic). Strong understanding of log formats (JSON, syslog, XML, CEF, etc.) and ingestion technologies (Syslog, API, Event Hubs, Kafka, Agents). Practical knowledge of detection engineering, threat modelling, and attacker behaviour analysis. Experience building and tuning correlation rules, searches, and dashboards. Familiarity with SOAR platforms and automation workflows. Security Knowledge Strong understanding of networking, Windows/Linux systems, Cloud platforms (Azure/AWS/GCP), identity systems, and endpoint protection technologies (e.g. SentinelOne and Microsoft Defender) Knowledge of MITRE ATT&CK, cyber kill chain, and threat hunting methodologies. Must Have Level 4 or higher qualification in a computing subject, or equivalent experience IT experience including both IT Infrastructure and Information Security roles Relevant professional certifications that validate the fundamental skills required to perform the role, e.g. GIAC (GCIA,GCDA,GMON) Microsoft SC-200/SC-100, CompTIA Secure Infrastructure Specialist (CSIS), SSCP/CISSP etc Strong skill level in scripting technologies, including Python, MS PowerShell and PowerApps Ability to conduct research into Infrastructure issues and products as required Self-starting with strong interpersonal, written, and oral communication skills. Ability to engage colleagues at all levels and project a solid, professional attitude consistently. Nice to have Data Loss Prevention Secure Remote Access solutions Network Security solutions Open Source and Cyber Threat Intelligence Suitable experience working with the market leading technology vendor product suites Experience in software-defined and cloud services such as SaaS, IaaS, PaaS and DaaS Experience in Disaster Recovery Management and Business Continuity Knowledge of applicable data privacy practices and laws
Role: Cyber Security Assurance Specialist Salary/Rate: £45-55 per hr inside IR35 Location: Hybrid, near Oxford 3x per week Contract Duration: until December 2026 We are currently looking for a Cyber Security Assurance Specialist for our government client. This Cyber Security Assurance Specialist role is hybrid, based between working 3 days per week on site in Abingdon Oxfordshire and the remainder of the week working remotely. There is no further flexibility with the on-site requirement. The contract for this Cyber Security Assurance Specialist position is until December 2026, with potential to extend, operating inside IR35. Security Clearance: eligible for Security Check ("SC Clearance") This role is inside IR35 - Due to the service of the role, it will now be based on an Umbrella solution. Essential skills/experience required: Demonstrable experience in designing and implementing secure infrastructure or cloud architectures . Proven experience with risk assessment methodologies and maintaining enterprise risk registers . Working knowledge of risk assessment methodologies (e.g. ISO 31000, FAIR, OWASP risk rating). Strong understanding of Gov Assure, CAF, ISO 27001, Cyber Essentials, and NIST frameworks. Experience conducting or supporting security audits and implementing remediation plans. Proficiency in assessing and securing platforms such as Entra ID (Azure AD), Microsoft 365 E5, Azure IaaS/PaaS, Windows/Linux/Unix. Strong knowledge of security tooling such as SIEM, endpoint detection (EDR/XDR), and vulnerability management platforms. Hands-on experience with policy development, access control models and logging standards. Experience supporting assurance activities or government-mandated reviews (e.g. GovAssure, Secure by Design). Knowledge of Incident Management, Vulnerability Assessments, SIEM & SOC Systems. Familiarity with ITSM workflows and change control procedures Experience designing or reviewing secure software supply chain and CI/CD security . Ability to interpret CVEs, CVSS scores, and threat intelligence feeds. Strong stakeholder engagement and communication skills with an ability to produce technical reports and articulate risk to non-specialists. Excellent written and verbal communication skills with the ability to present to senior stakeholders. Role / Responsibilities: Conduct technical risk assessments on IT/OT/cloud systems Provide secure design guidance to digital projects (cloud/infra/app) Maintain and update the security risk register quarterly Evaluate 2 critical technical changes for architectural risk (e.g., network reconfig, app onboarding) Document evidence gathering and remediation planning for Secure-by-design,CAF and GovAssure Conduct internal technical assurance reviews aligned to GovAssure/CAF/ISO27001 domains Maintain traceability of security controls to frameworks (NIST, CE+, NCSC), Evaluate Suppliers against internal and external risk criteria for Assurance. Contribute to the adoption of Zero Trust principles in platform design Provide secure-by-design input into infrastructure/cloud/app initiatives Define security control templates for new deployments (e.g., SaaS, Azure service, OT upgrade) Deliver knowledge sessions to technical teams (secure config, threats, compliance) Develop secure configuration guidance for platforms (e.g. Entra ID, Linux, M365) Represent Cyber Security in architecture/design authorities Produce and maintain technical security reports for assurance cycles Support compliance audit evidence packs (GovAssure/CAF, CE+, ISO 27001) Develop or update security standard documents (e.g. threat modelling, vulnerability mgmt) Support cyber input for IT, research or OT programmes Work with IT teams to co-author and test secure configuration standards and playbooks Support security policy application in hybrid cloud, infra, and app settings Support audit and compliance activities with reporting and evidence gathering If you are interested in the above role, please click Apply Now and send a CV for quick review. Should you require reasonable adjustments at any point during the recruitment process or if there is a better way for us to communicate, please do let us know. Security, Cyber, Infosec, Information Security, GRC, Assurance, Compliance, Risk, Vulnerability Circle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter and LinkedIn - Circle Recruitment.
May 03, 2026
Contractor
Role: Cyber Security Assurance Specialist Salary/Rate: £45-55 per hr inside IR35 Location: Hybrid, near Oxford 3x per week Contract Duration: until December 2026 We are currently looking for a Cyber Security Assurance Specialist for our government client. This Cyber Security Assurance Specialist role is hybrid, based between working 3 days per week on site in Abingdon Oxfordshire and the remainder of the week working remotely. There is no further flexibility with the on-site requirement. The contract for this Cyber Security Assurance Specialist position is until December 2026, with potential to extend, operating inside IR35. Security Clearance: eligible for Security Check ("SC Clearance") This role is inside IR35 - Due to the service of the role, it will now be based on an Umbrella solution. Essential skills/experience required: Demonstrable experience in designing and implementing secure infrastructure or cloud architectures . Proven experience with risk assessment methodologies and maintaining enterprise risk registers . Working knowledge of risk assessment methodologies (e.g. ISO 31000, FAIR, OWASP risk rating). Strong understanding of Gov Assure, CAF, ISO 27001, Cyber Essentials, and NIST frameworks. Experience conducting or supporting security audits and implementing remediation plans. Proficiency in assessing and securing platforms such as Entra ID (Azure AD), Microsoft 365 E5, Azure IaaS/PaaS, Windows/Linux/Unix. Strong knowledge of security tooling such as SIEM, endpoint detection (EDR/XDR), and vulnerability management platforms. Hands-on experience with policy development, access control models and logging standards. Experience supporting assurance activities or government-mandated reviews (e.g. GovAssure, Secure by Design). Knowledge of Incident Management, Vulnerability Assessments, SIEM & SOC Systems. Familiarity with ITSM workflows and change control procedures Experience designing or reviewing secure software supply chain and CI/CD security . Ability to interpret CVEs, CVSS scores, and threat intelligence feeds. Strong stakeholder engagement and communication skills with an ability to produce technical reports and articulate risk to non-specialists. Excellent written and verbal communication skills with the ability to present to senior stakeholders. Role / Responsibilities: Conduct technical risk assessments on IT/OT/cloud systems Provide secure design guidance to digital projects (cloud/infra/app) Maintain and update the security risk register quarterly Evaluate 2 critical technical changes for architectural risk (e.g., network reconfig, app onboarding) Document evidence gathering and remediation planning for Secure-by-design,CAF and GovAssure Conduct internal technical assurance reviews aligned to GovAssure/CAF/ISO27001 domains Maintain traceability of security controls to frameworks (NIST, CE+, NCSC), Evaluate Suppliers against internal and external risk criteria for Assurance. Contribute to the adoption of Zero Trust principles in platform design Provide secure-by-design input into infrastructure/cloud/app initiatives Define security control templates for new deployments (e.g., SaaS, Azure service, OT upgrade) Deliver knowledge sessions to technical teams (secure config, threats, compliance) Develop secure configuration guidance for platforms (e.g. Entra ID, Linux, M365) Represent Cyber Security in architecture/design authorities Produce and maintain technical security reports for assurance cycles Support compliance audit evidence packs (GovAssure/CAF, CE+, ISO 27001) Develop or update security standard documents (e.g. threat modelling, vulnerability mgmt) Support cyber input for IT, research or OT programmes Work with IT teams to co-author and test secure configuration standards and playbooks Support security policy application in hybrid cloud, infra, and app settings Support audit and compliance activities with reporting and evidence gathering If you are interested in the above role, please click Apply Now and send a CV for quick review. Should you require reasonable adjustments at any point during the recruitment process or if there is a better way for us to communicate, please do let us know. Security, Cyber, Infosec, Information Security, GRC, Assurance, Compliance, Risk, Vulnerability Circle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter and LinkedIn - Circle Recruitment.
