312 jobs found

Summary: CCL Solutions Group is seeking an exceptional Senior Penetration Tester with CHECK Team Leader Infrastructure (CTL-INF) qualifications to join our elite team of security professionals. Location: Home based Main Job Summary This is more than just a job, we're looking for individuals with a hacker's mindset, deep technical expertise, and a relentless drive to secure the UK's most critical assets. You will be leading engagements across secure environments, delivering high-impact assessments, mentoring team members, and shaping the offensive security direction of the business. In return, we offer a highly supportive environment with structured mentoring, paid training days, and access to advanced tooling. Main Duties & Responsibilities (other duties may be assigned): CCL Solutions Group are more than just a leading provider of cybersecurity services, we are a team committed to making a real difference in protecting communities, businesses, and the critical infrastructure of the UK. As a Senior Penetration Tester within CCL Solutions Group, your key responsibilities will be: Lead and deliver end-to-end penetration testing engagements across infrastructure and cloud environments. Manage and mentor junior CHECK team members, supporting their development and quality of delivery. Produce comprehensive, high-quality reports that identify risks, remediation strategies, and technical impact. Support red team simulations, infrastructure reviews, and adversary emulation where required. Contribute to internal R&D, tooling improvements, and the development of our offensive security services. Required Skill Set & Experience: This role requires a senior and mature person who can demonstrate leadership, honesty and integrity and who expects high standards. Please understand this is not an entry level role it is essential that you have: CHECK Team Leader certification (Cyber Scheme Team Leader - INF or CREST CCT-INF). Minimum of 2 years delivering CHECK engagements as a CTL. At least 3 years of hands-on penetration testing experience in enterprise environments. Deep understanding of infrastructure testing, Active Directory security, and cloud technologies (AWS, Azure, Kubernetes). Strong familiarity with tools such as Nmap, Burp Suite, Metasploit, Impacket, and SMBClient. Able to articulate technical findings to both technical and non-technical audiences in written and verbal formats. How to be successful in this role? To be successful in this role you will need a Strong understanding of the following technical competencies: Solid grounding in OS and network fundamentals (Linux, Windows, Mac, TCP/IP stack). Knowledge of common attack techniques and mitigations (MITRE ATT&CK, OWASP Top 10). Familiarity with scripting and automation using Python, Bash, or PowerShell. Strong understanding of Active Directory attack chains and common privilege escalation paths. Experience interpreting logs and event outputs from OS and security appliances. Certifications: OSCP, OSEP, CRTO, or other advanced offensive security qualifications. Programming/scripting in Python, Ruby, Go, C#, or Java. Experience in red teaming, threat emulation, or purple teaming. Agile experience and knowledge of the common production frameworks is highly desired. Other Role Requirements: Must have been resident in the UK for a minimum of 5 years. Full UK driving licence. Ability to obtain (or currently hold) SC or DV clearance - this is non-negotiable and is set by the NSCS (National Cyber Security Centre ) for all Check Members. Willingness to travel for client engagements or on-site support. Travel is within the United Kingdom. CCL is an equal opportunities employer and positively encourages applications from suitably qualified and eligible candidates regardless of sex, race, disability, age, sexual orientation, gender reassignment, religion or belief, marital status, or pregnancy and maternity. In applying for a role you acknowledge that your personal data is necessary to consider you for the advertised role. Your information will be processed in accordance with the CCL Group Privacy Notice and retained for a maximum period of 12 months. If you would like to apply for this role please send us your current cv and a covering email. CCL Solutions Group is made up of the following companies: CCL (Solutions) Group Ltd (company number ), CCL-Forensics Ltd (company number ), Evidence Talks Limited (company number ), CCL Cyber Solutions Ltd (company number ), CCL (Computer Consultants) Ltd (company number )

Job Title: Principal Cyber Security Consultant Contract Type: Permenent Flexibility: This role is available part-time, job-share or full time . This is because we want the best people for our roles, and we recognise that sometimes those people aren't available full-time. Location: In terms of location , we have offices in Bath, Bristol & London, and we are happy to explore flexible and hybrid working arrangements. Please note that travel to customer sites or to attend meetings will be required. About BMT BMT is dedicated to tackling the most crucial engineering challenges of our era, fostering an environment where individuals with exceptional technical expertise provide meaningful, practical solutions. Committed to creating a safer, more efficient, effective, and sustainable future, BMT values diversity, equity, and inclusion, recognisng their pivotal role in achieving our business purpose. Learn more about BMT at . At BMT, we pride ourselves on being a verified flexible workplace, providing freedom and choice. We understand not everyone has the same needs in order to make work work for them and their lives - we'd love you to discuss any requirements for flexibility with us - we can't promise to fulfil every request but we do promise to listen to what matters to you. Learn more about our flexible status at Flexa Careers Why Work for Us? Joining BMT means gaining access to a comprehensive set of employee benefits designed to empower your success. In addition to a competitive salary, our offerings encompass health, family, finance, and personal development, including: Private Medical (family coverage) Enhanced Pension 18 weeks enhanced maternity pay (after a qualifying period of 1 year) Family friendly policies Committed to an inclusive culture Wellbeing Fund - an annual fund for personal hobbies or interests Holiday Trading Professional Subscriptions About The Role We are seeking an experienced Principal Cyber Security Consultant to join our team and engage in a diverse range of client projects within the defence, national security, environmental, and research sectors. This includes the provision of strategic risk management advice and/or technical consultancy within the context of cybersecurity. You will join a team of highly skilled professionals dedicated to safeguarding technologies and systems, many of which are critical to UK defence and national security. To deliver this outcome, you must be passionate about cyber security and apply your deep understanding and experience of HMG, NCSC, and international cyber standards. The role will require excellent stakeholder management and communication skills to build the trust and support necessary for successful outcomes. You will be supported by team members in a highly collaborative environment, a structured learning and development programme, and will have opportunities for growth within an expanding team. If you're ready to make a real impact and work with a fantastic team, we'd love to hear from you. About You We'd love to hear from you if you can demonstrate expertise in at least one of the following areas : Security governance, risk and compliance (GRC), aligned with HMG cybersecurity and information assurance policies, standards, and guidance with experience in consultancy or supplier roles. Securing OT (Operational Technologies) with knowledge and understanding of challenges, particularly within military platforms and/or Critical National Infrastructure (CNI) Federation of Security Operations Centre (SOC)operations across two or more organisational environments such as enterprise, edge/deployed environments or cloud . Demonstrable knowledge of cyber detection (e.g., threat identification/intelligence, real-time monitoring, anomaly detection) and cyber response (e.g. incident response, eradication and remediation, recovery, post-incident analysis). DevSecOps. Zero Trust Architecture (ZTA) expertise for enterprise, cloud and air-gapped environments along with knowledge of operational use of Zero Trust within any of the following: , IdAM systems, application security, supply chain security, data protection, other. As a Principal Cyber Security Consultant, you will be responsible for leading technical delivery teams, shaping and carrying out complex technical work, leading technical input into bid work, engaging with clients to define the scope of work for new projects, and supporting other cyber security professionals in their career development. People applying for the BMT Principal Cyber Security Consultancy role typically hold or are operating at the least the principal level of the UK Cyber Security Council's chartership scheme. Excellent consultancy skills are essential, including verbal and written communication skills, and stakeholder engagement and management. Line management experience would be beneficial for this role. In addition, the following technical knowledge or experience will be helpful for some of our projects: Expertise in consultancy. Knowledge of secure by design. Cybersecurity industry standards (e.g. NIST, ISO 27001, ISA/IEC 62443, etc). An understanding of cloud-native infrastructure (e.g. microservices, containerisation, Kubernetes, serverless computing). An understanding and/or experience with SIEM, SOAR and EDR. Knowledge and/or understanding of data and analytics in terms of cybersecurity implications. Missing skills? Let us be the judge! BMT are passionate about people; we recognise that technology moves quickly and that no one can learn everything, which is why we seek those who can adapt and demonstrate the aptitude to learn. With enthusiasm and the right attitude, we can help you discover your potential. This role will require full UK security clearance and you should have resided in the UK for the past 5 years What's Next? If you are ready to contribute your skills and passion to a dynamic team addressing impactful challenges, we invite you to apply for this exciting opportunity with BMT. Join us in shaping a safer, more efficient, and sustainable future. A message to recruitment agencies: We receive applications exclusively via our ATS. Please note that we do not accept CVs submitted via email to the HR department or staff within our Operational teams. We will not progress CVs shared on a speculative basis by email and you accept our right to pursue such candidates with no obligation to third-party terms and conditions or liability to a fee

Location: This role offers flexibility to work remotely, with occasional visits to client sites. Alternatively, you can choose a hybrid arrangement and work from our offices in Oxford or Glasgow, if preferred. Why join Dionach by Nomios? Since being acquired by Nomios in late 2024, Dionach by Nomios has continued its dynamic growth as a leading information security company. Specializing in penetration testing and information assurance services, we offer an incredible opportunity to be part of an experienced team, build your skills, and grow professionally. Dionach by Nomios holds impressive certifications, including CREST, CHECK, PCI QSA, and ISO 27001. With our focus on enhancing customers' security and fostering team development, you'll be joining a company that prioritizes both your growth and the safety of our clients. We're in an exciting phase of expansion and are looking for self-motivated individuals ready to thrive in a fun, flexible environment. At Dionach by Nomios, your contributions will have a genuine impact on the business, and you'll find opportunities for both interesting work and career development. Benefits Our employees are the heart of our business. We value our employees and invest in their growth and well-being. Here's what we offer: • Hybrid Working: Flexibility to work remotely or use our UK offices around client visits. • Professional Growth: Access to training labs, certification sponsorship, and time for skill development. • Well-being Focus: Private health insurance, eye care plan, income protection, EAP scheme, and well-being platform. • Additional Perks: Employee benefits and discounts platform. Our Commitment to Diversity and Inclusion At Dionach by Nomios, we believe that diversity fuels innovation. We're dedicated to creating an inclusive workplace where everyone feels valued and respected. We welcome applications from all backgrounds, perspectives, and experiences, and we're committed to being an equal opportunity employer. We do not discriminate based on race, religion, gender, age, disability, or any other legally protected status. We encourage candidates from underrepresented groups to apply and are committed to providing a supportive and accessible environment for all our employees. If you require accommodations during the application process, let us know, and we'll work to meet your needs. What You'll Do • Conduct penetration tests across various environments, including web applications, APIs, Cloud, and network infrastructure. • Issue detailed reports outlining findings, risks, and recommendations for remediation. • Translate complex technical findings into actionable insights for both technical and non-technical audiences. • Stay updated with the latest security trends, tools, and techniques. • Participate in research and development projects. • Focus on your development by attaining industry recognised certifications. • Be available for occasional on-call duties and on-site client engagements, as needed. What We're Looking For • Certifications: Relevant certifications such as CREST CRT, CREST CCT, OSCP, OSWE, OSCE, or equivalent level. • Experience: At least two years in penetration testing, covering network, web, and internal tests and customer engagements. • Tools: Proficiency with tools like Burpsuite Pro, Nessus, and other industry standards. • Communication: Strong verbal and written skills for stakeholder management, collaboration and report writing. • Independence: Ability to work solo or as part of a team on penetration tests. • Eligibility: Right to work in the UK and eligibility for security clearance. Key Attributes Analytical thinker with a proactive, detail-oriented approach. Excellent verbal and written communication skills, capable of engaging with technical and non-technical stakeholders. Ability to work effectively under pressure and adapt to rapidly changing threat landscapes. Commitment to maintaining the highest ethical and professional standards. Are you an experienced penetration tester looking to further improve your skills and take on more responsibilities? If so, this opportunity is perfect for you! We look forward to receiving your applications!

Senior Delivery Manager (DV Security Clearance) Position Description The Space, Defence and Intelligence business unit in CGI is a true IT Systems Integrator. We work, build, and operate bespoke, technically complex, mission-critical systems which help our clients keep us all safe and secure. We bring innovation to our clients using proven and emerging technologies, agile delivery processes and our deep expertise across the breadth of space, defence, intelligence, aerospace and maritime, all underpinned by our end-to-end cyber capability. We work collaboratively with global technology companies, cutting edge SMEs and academia to deliver the optimal solution for each client. CGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named one of the 'World's Best Employers' by Forbes magazine. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you'll be part of an open, friendly community of experts. We'll train and support you in taking your career wherever you want it to go. Due to the secure nature of the programme, you will need to hold UK Security Clearance or be eligible to go through this clearance. This position will be a hybrid position, working out of our site in Reading. Your future duties and responsibilities We are looking for an experienced Programme Manager to take on the role of Delivery Lead for a major bid. This position requires DV clearance, though there will be time for the right candidate to obtain this level of clearance. We seek an experienced consultant with extensive experience in delivering large-scale service and delivery programmes as well as leading large bids. The bid will be based near CGI's Reading office, with an expectation of some time spent on the client site. We are looking for experience delivering programmes including Applications Integration, Security, and Testing Services, with potential expansion into Infrastructure Services. Key Responsibilities: • Lead technical delivery management for the bid. • Oversee and manage workstreams, each led by Subject Matter Experts (SMEs). • Take ownership of the Service Solution and Delivery Solution Required qualifications to be successful in this role • Strong background in Defence and Enterprise Business Systems. • Proven expertise in Project & Service Delivery. • Extensive experience in large bid management. • Competence in contract and commercial management. • Excellent client and supplier relationship management skills. Desirable Skills & Qualifications: • Experience managing large infrastructure services programmes. • In-depth knowledge of applications integration services. • Understanding of desktop and hosting infrastructure services. • Track record of managing Agile delivery programmes Together, as owners, let's turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction. Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our team-one of the largest IT and business consulting services firms in the world.

Principal Security Consultant (1-year Fixed Term) page is loaded Principal Security Consultant (1-year Fixed Term) Apply locations Cambridge, United Kingdom London Cannon Street time type Full time posted on Posted 14 Days Ago job requisition id R010568 AVEVA is creating software trusted by over 90% of leading industrial companies. Job Title : Principal Security Consultant Location: Cambridge or London, United Kingdom Employment Type: Full-time, 1-year Fixed Term The job AVEVA is a global leader in industrial software, driving digital transformation and sustainability. By connecting the power of information and artificial intelligence with human insight, AVEVA enables teams to use their data to unlock new value. We call this Performance Intelligence. AVEVA's comprehensive portfolio enables more than 20,000 industrial enterprises to engineer smarter, operate better and drive sustainable efficiency. AVEVA supports customers through a trusted ecosystem that includes 5,500 partners and 5,700 certified developers around the world. The company is headquartered in Cambridge, UK, with over 6,500 employees and ninety offices in over forty countries. Learn more at . We take pride in our core values and the diversity of our people, valuing the unique experience and expertise that people from diverse backgrounds bring to our business. At AVEVA, we are all about Limitless possibilities. Are you? The Principal Security Consultant is a 1-year fixed-term employee position, critical role in shaping and standing-up AVEVA's 2nd Line of Defence Security consultancy capabilities and services. This role will be responsible for providing insightful knowledge and actionable recommendations to achieve AVEVA's target operating model for security and increase the maturity of existing processes and systems. One area of focus of this 12 month work package is to improve transparency of security operations and compliance to customers. We will be improving our Trust Centre, and streamlining security engagement on customer contracts. The post holder will be expected to quickly integrate into the team, proactively engage with stakeholders across the business, from technical SME's to business leadership. They will need to work independently and able to prioritise their time across multiple projects and engagements. Key responsibilities Implementation of Security Policy & Standards. Provide subject matter expert knowledge and support on the developing policy, standards, and exemption services to enable controls and supporting control practices to be embedded and optimised across the organisation. Includes optimisation of underpinning risk and control indicators. Implementation of Security Risk Management & Assurance. Provide subject matter expert knowledge on developing security risk management and risk assurance services that enable effective, and data driven risk management and reporting across operations. This includes the capability to monitor and report effectiveness of risk management within the product development lifecycle and supply chain. Ability to Gather and Review Evidence For Compliance. Complete discovery investigations to demonstrate compliance to regulations, standards and customer requirements and present evidence in a consumable format for customers, regulators etc. Implementation of Security Control Systems. Provide subject matter expert knowledge to business stakeholders to enable adoption, adaption, and optimisation of security controls across the organisation. This includes the controls used within the product development lifecycle and supply chain. Stakeholder Engagement. Build and maintain trusted relationships with stakeholders to embed security risk practices into operational activities. This includes providing guidance and thought leadership on risk best practice and assurance to technical and non-technical stakeholders. Essential requirements Experience . Preferable 7+ years relevant work experience in security governance, risk, and compliance with at least 3 years of working as a senior expert or manager of a significant department. Experience of fulfilling similar role in a software publishing or internet business is preferrable. Governance. Significant experience in developing, implementing, and optimising security policies, standards, and control-sets to enable effective adaption and adoption across organisational departments and teams. Risk Management and Assurance. Extensive experience of understanding of using threat, security control performance and business operations to independently assess residual security risk position to the end customer based on business processes and practices including product development lifecycle and supply chain. Regulatory Compliance. Significant experience of working within a regulated environment and advising others on the principal requirements of major legislation and regulations relevant to security, and the legal and regulatory instruments relevant to the role. Experience of responding to new regulations e.g. NIS2. Knowledge of cross-border regulations, such as GDPR and EU Data Privacy rules. Desired skills Organisational Skills. Highly skilled in managing multiple tasks within set deadlines whilst managing expectations of invested parties Communication Skills. Excellent verbal and written communication skills, with the ability to convey complex information clearly and concisely to diverse audiences. Ability to communicate effectively with technical and non-technical stakeholders. Decision making. Highly skilled in tactical decision-making with organisational impact. Problem-solving . Able to address day-to-day challenges quickly with a focus on operational solutions. Highly skilled at deconstructing large complex problems into solutions that can be easily understood and executed by business and digital teams. Digital Security at AVEVA Our Digital Security team is responsible for protecting AVEVA's digital assets and keeping the company's data and IP secure. We're also playing a critical role in AVEVA's move to the cloud. As cyber threats grow and more and more data moves into the cloud, the importance of our role is only going to grow. If you're a collaborative problem solver that's passionate about cybersecurity, you'll find fulfilment and opportunity in our team. Find out more: UK Benefits include: Flexible benefits fund, emergency leave days, adoption leave, 28 days annual leave (plus bank holidays), pension, life cover, private medical insurance, parental leave, education assistance program. It's possible we're hiring for this position in multiple countries, in which case the above benefits apply to the primary location. Specific benefits vary by country, but our packages are similarly comprehensive. Find out more: Hybrid working By default, employees are expected to be in their local AVEVA office three days a week, but some positions are fully office-based. Roles supporting particular customers or markets are sometimes remote. Hiring process Interested? Great! Get started by submitting your cover letter and CV through our application portal. AVEVA is committed to recruiting and retaining people with disabilities. Please let us know in advance if you need reasonable support during your application process. Find out more: About AVEVA AVEVA is a global leader in industrial software with more than 6,500 employees in over 40 countries. Our cutting-edge solutions are used by thousands of enterprises to deliver the essentials of life - such as energy, infrastructure, chemicals, and minerals - safely, efficiently, and more sustainably. We are committed to embedding sustainability and inclusion into our operations, our culture, and our core business strategy. Learn more about how we are progressing against our ambitious 2030 targets: Find out more: AVEVA requires all successful applicants to undergo and pass a drug screening and comprehensive background check before they start employment. Background checks will be conducted in accordance with local laws and may, subject to those laws, include proof of educational attainment, employment history verification, proof of work authorization, criminal records, identity verification, credit check. Certain positions dealing with sensitive and/or third-party personal data may involve additional background check criteria. AVEVA is an Equal Opportunity Employer. We are committed to being an exemplary employer with an inclusive culture, developing a workplace environment where all our employees are treated with dignity and respect. We value diversity and the expertise that people from different backgrounds bring to our business. AVEVA provides reasonable accommodation to applicants with disabilities where appropriate. If you need reasonable accommodation for any part of the application and hiring process, please notify your recruiter. Determinations on requests for reasonable accommodation will be made on a case-by-case basis. Similar Jobs (2) Principal Specialist . click apply for full job details

The team you'll be working with: Job Title: Senior Security Consultant (Architecture - AI Specialist) Overview: We are seeking a highly skilled and experienced Security Architect with a strong specialization in Artificial Intelligence (AI) security. The ideal candidate will be responsible for designing, implementing, and maintaining robust security architectures for AI-powered applications and infrastructure. You will play a critical role in identifying and mitigating security risks associated with AI, ensuring data privacy, and promoting ethical AI practices. This role requires a deep understanding of both traditional security principles and the unique challenges posed by AI technologies. What you'll be doing: AI Security Architecture: Design and implement secure architectures for AI/ML models, data pipelines, and related infrastructure. Develop security policies and procedures specific to AI systems. Evaluate and select security tools and technologies for AI environments. Risk Assessment and Management: Conduct thorough risk assessments to identify vulnerabilities and threats specific to AI systems. Develop and implement risk mitigation strategies for AI-related security issues, including adversarial attacks, data poisoning, and model bias. Monitor and report on AI security risks and compliance. Data Security and Privacy: Ensure the security and privacy of sensitive data used in AI applications. Implement data security controls and encryption techniques for AI datasets. Ensure compliance with relevant data privacy regulations (e.g., GDPR, CCPA). Ethical AI: Develop and implement policies and procedures for ethical AI development and deployment. Promote awareness of ethical considerations related to AI, including bias, fairness, and transparency. Assist in the development of AI governance frameworks. Security Best Practices: Provide expert advice and guidance on security best practices for AI development and deployment. Stay up to date on the latest AI security threats and vulnerabilities. Conduct security audits and penetration testing of AI systems. Collaboration: Collaborate with data scientists, AI engineers, and other stakeholders to ensure security is integrated throughout the AI lifecycle. Communicate security risks and recommendations effectively to both technical and non-technical audiences. What experience you'll bring: 7+ Years experience in a Cyber/Information Security Role. Hold a current and relevant Security Certifications (e.g., CISSP, CISM). Extensive knowledge of security best practices, frameworks, and standards (e.g., NIST, ISO 27001). Proven experience as a Security Architect, with a strong focus on AI security. Deep understanding of AI/ML concepts, including model development, data pipelines, and deployment. Strong understanding of ethical AI principles and practices. Experience with AI security tools and technologies. Knowledge of adversarial machine learning techniques. Familiarity with AI governance frameworks. Experience with data security and privacy regulations (e.g., GDPR, CCPA). Experience with DevSecOps practices. Strong analytical and problem-solving skills, with the ability to assess complex situations and develop effective solutions. Excellent communication, collaboration, problem-solving and presentation skills, with the ability to influence and persuade stakeholders. Experience in cloud security is highly desirable. Ability to obtain UK government SC clearance. Who we are: We're a business with a global reach that empowers local teams, and we undertake hugely exciting work that is genuinely changing the world. Our advanced portfolio of consulting, applications, business process, cloud, and infrastructure services will allow you to achieve great things by working with brilliant colleagues, and clients, on exciting projects. Our inclusive work environment prioritizes mutual respect, accountability, and continuous learning for all our people. This approach fosters collaboration, well-being, growth, and agility, leading to a more diverse, innovative, and competitive organization. We are also proud to share that we have a range of Inclusion Networks such as: the Women's Business Network, Cultural and Ethnicity Network, LGBTQ+ & Allies Network, Neurodiversity Network and the Parent Network. For more information on Diversity, Equity and Inclusion please click here: Creating Inclusion Together at NTT DATA UK NTT DATA What we'll offer you: We offer a range of tailored benefits that support your physical, emotional, and financial wellbeing. Our Learning and Development team ensure that there are continuous growth and development opportunities for our people. We also offer the opportunity to have flexible work options. You can find more information about NTT DATA UK & Ireland here: We are an equal opportunities employer. We believe in the fair treatment of all our employees and commit to promoting equity and diversity in our employment practices. We are also a proud Disability Confident Committed Employer - we are committed to creating a diverse and inclusive workforce. We actively collaborate with individuals who have disabilities and long-term health conditions which have an effect on their ability to do normal daily activities, ensuring that barriers are eliminated when it comes to employment opportunities. In line with our commitment, we guarantee an interview to applicants who declare to us, during the application process, that they have a disability and meet the minimum requirements for the role. If you require any reasonable adjustments during the recruitment process, please let us know. Join us in building a truly diverse and empowered team. Back to search Email to a friend Apply now

Cyber Security Consultant Location: Remote in the United Kingdom Purpose, objectives, and requirements of the role: BlueVoyant Cyber Security Consultants work within the Professional Services team advising, supporting, and managing clients with multiple activities, including but not limited to: Technical & organizational security controls Cyber and digital transformation activities Remediation workstreams and roadmaps Policy & process implementation Information Security Maturity Audits/CMMI Certification or alignment with recognised industry standards Compliance with applicable regulations & legislation Building and implementing governance & risk management processes Design implementation and testing of security tooling BC/DR & Incident response capability building and testing Production of threat intelligence reports and research Supply Chain Risk Management Consultants must possess and be able to demonstrate credibility and experience as well as currency in these fundamental skill sets. Consultants will work with industry-leading proprietary and standard security tools, other experts, and capabilities to protect and defend client organizations and their people, intellectual property, and technology against wide-ranging threats, including nation states and Advanced Persistent Threat groups that act on their behalf. Consultants must be proactive, and able to lead, manage, and problem-solve on multiple workstreams across varied client sectors by contributing to, managing, overseeing, or supporting complex cyber-security and technology transformation programs, with limited oversight. There is a base requirement to demonstrate understanding of and find ways to integrate activity with BlueVoyant colleagues across the globe, specifically Digital Forensics, Incident Response and Penetration Testing specialists as well as wider BlueVoyant service offerings when appropriate, to produce threat-aware products, services and outputs that are impactful, efficient, cohesive, and are enhanced with intelligence and automation. BlueVoyant are trusted cyber-security partners and advisors to some of the most high-profile organizations, entities, and governments in the world. Deep and wide-ranging expertise & experience, credibility, and quick understanding of key client outcomes with the ability to determine effective remediation paths is critical. Consultants must have demonstrable ability to understand people, communicate technical solutions to stakeholders at all levels, support senior client decision making, and help client technical teams overcome difficult challenges, potentially in the wake of a significant security breach. Main duties and responsibilities: Work to deliver, and directly support the delivery of any client-facing activity deemed necessary, which may include work or travel out of hours. Deliver, lead & manage complex workstreams; take ownership of outputs and outcomes and provide reporting and feedback when required. Support, when necessary, the development of opportunities by contributing as an SME in response to client RFPs and/or the construction of proposal documents and responses. Develop timely, accurate reporting that can convey technical findings to non-technical audiences at all levels when necessary. When required, work with the Director of Cyber Advisory and Head Consultant to continuously improve capability, enhance & integrate service offerings, and build the Professional Services team. In addition to the duties and responsibilities listed, perform other duties assigned by Line Management from time to time. Comply with applicable legislation, codes of conduct, and company policy - such as Health and Safety procedures as outlined by the Companies Health and Safety Policy. Essential Skills/Attributes: 3+ years in a client-facing information/cyber security/GRC role or 5+ years in a directly related field/role (such as cyber/intelligence/security in UK Armed Forces, Law Enforcement, UK Intelligence Community, UK Government Departments) Degree in Cyber Security, Computer Science, or related subject; or genuine equivalent experience working in cyber-security, GRC, security audit etc Professional certifications (currently held) including but not limited to CISSP, CCSP, CISM, CRISC, CISA Qualifications/experience in auditing against/implementing multiple security standards and frameworks, such as ISO 27001/2, NIST CSF, ISF CMMI, CIS, UK Govt/Defence standards, SANS Ability to translate technical requirements and their benefits to a non-technical audience and appeal to relevant stakeholders Experience in the production and briefing of threat intelligence products (not specifically cyber threat intelligence) Experience in conducting multi-source analysis to determine prioritised threats, risks and issues Excellent verbal, written communication, and presentation skills Ability to work independently and as part of a team Ability to travel to meet business needs Preferred competencies: Relevant cyber security or other qualifications, certifications such as CSX-P, CDPSE, SSCP, CAP, OWASP, PCI DSS Security Cleared with potential to gain enhanced clearances Experience implementing privacy solutions based on the requirements of the EU GDPR and UK Data Protection Act 2018 Good awareness of threats trends and issues across the cyber security industry Proven self-management skills, including time management and the ability to work on multiple assignments concurrently A passion for innovation and solving problems About BlueVoyant At BlueVoyant, we recognize that effective cyber security requires active prevention and defense across both your organization and supply chain. Our proprietary data, analytics, and technology, coupled with deep expertise, works as a force multiplier to secure your full ecosystem. Accuracy! Actionability! Timeliness! Scalability! Led by CEO, Jim Rosenthal, BlueVoyant's highly skilled team includes former government cyber officials with extensive frontline experience in responding to advanced cyber threats on behalf of the National Security Agency, Federal Bureau of Investigation, Unit 8200, and GCHQ, together with private sector experts. BlueVoyant services utilize large real-time datasets with industry leading analytics and technologies. Founded in 2017 by Fortune 500 executives, including Executive Chairman, Tom Glocer, and former Government cyber officials, BlueVoyant is headquartered in New York City and has offices in Maryland, Tel Aviv, San Francisco, London, Budapest, and Latin America. All employees must be authorized to work in the United Kingdom. BlueVoyant provides equal employment opportunities to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability or genetics. In addition to federal law requirements, BlueVoyant complies with applicable state and local laws governing non-discrimination in employment in every location in which the company has facilities. BlueVoyant Candidate Privacy Notice To understand how we secure and manage your personal data upon submitting a job application, please see our Candidate Privacy Notice, which can be found here - Candidate Privacy Notice

Senior Security Consultant (AI Specialist) Job Title: Senior Security Consultant (Architecture - AI Specialist) Overview: We are seeking a highly skilled and experienced Security Architect with a strong specialisation in Artificial Intelligence (AI) security. The ideal candidate will be responsible for designing, implementing, and maintaining robust security architectures for AI-powered applications and infrastructure. You will play a critical role in identifying and mitigating security risks associated with AI, ensuring data privacy, and promoting ethical AI practices. This role requires a deep understanding of both traditional security principles and the unique challenges posed by AI technologies. What you'll be doing: AI Security Architecture: Design and implement secure architectures for AI/ML models, data pipelines, and related infrastructure. Develop security policies and procedures specific to AI systems. Evaluate and select security tools and technologies for AI environments. Risk Assessment and Management: Conduct thorough risk assessments to identify vulnerabilities and threats specific to AI systems. Develop and implement risk mitigation strategies for AI-related security issues, including adversarial attacks, data poisoning, and model bias. Monitor and report on AI security risks and compliance. Data Security and Privacy: Ensure the security and privacy of sensitive data used in AI applications. Implement data security controls and encryption techniques for AI datasets. Ensure compliance with relevant data privacy regulations (e.g., GDPR, CCPA). Ethical AI: Develop and implement policies and procedures for ethical AI development and deployment. Promote awareness of ethical considerations related to AI, including bias, fairness, and transparency. Assist in the development of AI governance frameworks. Security Best Practices: Provide expert advice and guidance on security best practices for AI development and deployment. Stay up to date on the latest AI security threats and vulnerabilities. Conduct security audits and penetration testing of AI systems. Collaborate with data scientists, AI engineers, and other stakeholders to ensure security is integrated throughout the AI lifecycle. Communicate security risks and recommendations effectively to both technical and non-technical audiences. What experience you'll bring: 7+ Years experience in a Cyber/Information Security Role. Hold a current and relevant Security Certifications (e.g., CISSP, CISM). Extensive knowledge of security best practices, frameworks, and standards (e.g., NIST, ISO 27001). Proven experience as a Security Architect, with a strong focus on AI security. Deep understanding of AI/ML concepts, including model development, data pipelines, and deployment. Strong understanding of ethical AI principles and practices. Experience with AI security tools and technologies. Knowledge of adversarial machine learning techniques. Familiarity with AI governance frameworks. Experience with data security and privacy regulations (e.g., GDPR, CCPA). Experience with DevSecOps practices. Strong analytical and problem-solving skills, with the ability to assess complex situations and develop effective solutions. Excellent communication, collaboration, problem-solving and presentation skills, with the ability to influence and persuade stakeholders. Experience in cloud security is highly desirable. Ability to obtain UK government SC clearance.

CHECK Senior Infrastructure Penetration Tester PGI is a global consultancy that helps organisations build digital resilience. We deploy our people to implement solutions on behalf of clients or to support them in developing their capabilities. Our Penetration Testers work with organisations of all sizes and types to detect and remediate vulnerabilities. They help identify areas lacking sufficient protection. The team tests the security of infrastructure and applications, conducts IT Health Checks, reviews IT configurations, identifies gaps that threat actors could exploit, and makes recommendations to safeguard assets. What you'll be doing: Providing professional cybersecurity consultancy to internal and external stakeholders. Leading the delivery of PGI's infrastructure penetration testing. Collaborating on the design and delivery of new and existing service lines related to offensive security assessments. Supporting and often leading technical pre-sales, proposal writing, and client engagements. Coaching and supervising junior team members, including resource management, development planning, mentoring, and knowledge transfer. Analyzing security data to identify patterns, threats, and vulnerabilities. Producing high-quality technical reports that explain vulnerabilities in non-technical language for stakeholders. Performing quality assurance and peer reviews of project reports. Collaborating with colleagues on internal or client projects. Contributing to technical training and development materials. Supporting technical delivery projects to ensure successful outcomes. Mentoring security consultants or clients by sharing knowledge and overseeing skill development. Participating in exercises such as Capture The Flag (CTF) challenges. Providing accurate scoping of penetration testing opportunities for sales activities. Supporting sales activities with proposals and client presentations. Supporting marketing with subject matter expertise and content development. Developing and maintaining technical skills and certifications, e.g., Hack The Box. Staying current with cybersecurity trends, threats, and technologies. On day one you will bring: Relevant professional certifications, such as CCT inf or CSTL inf. Chartership from the Cyber Security Council with the title Principal or Chartered (preferred). At least 3 years of experience in penetration testing or security consulting. Knowledge of operating systems, networks, and cloud platforms. A good understanding of network security and protocols like TCP/IP. Experience with technical concepts such as tunneling traffic and IP configuration. Experience delivering penetration tests and vulnerability assessments for networks, applications, and cloud services. Excellent communication skills, both verbal and written, with the ability to present to clients. Ability to manage time effectively and work to deadlines. Critical thinking skills and an innovative approach to problem-solving. Experience with security tools like Nessus, Burp Suite, and Metasploit. Ability to work independently and collaboratively, sharing knowledge freely. Knowledge of scripting languages. Eligibility for security clearance. Self-motivation and a commitment to continuous development. Diversity, Equity, and Inclusion at PGI As a British company operating internationally, we value the diversity of our team. We work across 80+ countries, with team members speaking 25+ languages and from various backgrounds. We believe that a diverse, equitable, and inclusive workforce enables us to deliver innovative solutions to complex problems. Accessibility at PGI We are committed to making reasonable adjustments to accommodate individual needs, removing barriers in the workplace. We aim to make our recruitment process accessible and encourage candidates with questions or concerns to contact us. Please note: We are not accepting applications or profiles from recruitment agencies. Additional resources will be engaged directly by PGI if needed.

The team you'll be working with: Consultant - Offensive Security Testing Role Overview: We are seeking a highly skilled and experienced Offensive Security Consultant with a strong focus on threat intelligence and attack methods. The ideal candidate will manage and conduct advanced penetration testing engagements, leveraging threat intelligence to simulate real-world attacks across various environments, including OT, IT, web applications, cloud infrastructure, and APIs. This role requires a deep understanding of adversarial tactics, excellent communication skills, and the ability to provide strategic, actionable recommendations to enhance our clients' security posture. What you'll be doing: Responsibilities: Lead and manage the full lifecycle of complex penetration testing engagements, applying a threat intelligence-led approach. Execute advanced penetration tests across environments such as applications, infrastructure, web, APIs, O365, Azure, AWS, and OT, using current threat landscape knowledge and attacker TTPs. Develop and maintain detailed test plans and use cases informed by threat intelligence analysis. Identify and prioritize critical OT and IT assets based on potential threats and exposure. Plan and schedule testing engagements based on threat assessments and client needs. Produce clear, detailed reports with technical findings, business impact, and strategic remediation recommendations for diverse audiences. Communicate complex security concepts and threat insights effectively to technical and non-technical stakeholders. Collaborate with client IT and cybersecurity teams to improve security protocols and address vulnerabilities. Monitor remediation efforts and provide updates highlighting threat reduction. Conduct proactive security research and contribute to technical content on emerging threats and attack techniques. Enhance security monitoring by sharing offensive insights to improve detection and response. Drive patching efforts for vulnerabilities based on threat intelligence and exploitation potential. What experience you'll bring: Skills and Qualifications: At least 5 years of professional penetration testing experience with a focus on adversarial tactics and threat intelligence. Understanding of OT and IT assets, technologies, and security best practices within the current threat landscape. Deep knowledge of network protocols, cryptography, vulnerabilities, and attack vectors used by sophisticated threat actors. Proficiency with a range of penetration testing tools and methodologies, especially those related to threat analysis. Experience in planning and executing complex, threat-driven penetration tests. Excellent communication skills for articulating technical findings and threat insights clearly. Strong organizational skills to manage multiple engagements effectively. Current CREST CRT certification or higher is required. Eligibility for SC Clearance is required. Desirable Skills: Experience with Breach Attack Simulation tools and threat-informed vulnerability management. Knowledge of Risk Management frameworks and their integration with threat intelligence. Hands-on experience with cloud security reviews (AWS, Azure, GCP) considering cloud-specific threats. Familiarity with ISO 27001 audits and threat-informed compliance practices. Additional certifications such as CISM, CISSP, ECSA, CREST CCT are advantageous. Who we are: We're a global business empowering local teams with exciting work that makes a difference. Our portfolio spans consulting, applications, cloud, and infrastructure services, enabling you to collaborate with talented colleagues and clients on innovative projects. Our inclusive environment promotes mutual respect, accountability, and continuous learning, fostering diversity, collaboration, and innovation. We also support various Inclusion Networks such as Women's Business Network, Cultural and Ethnicity Network, LGBTQ+ & Allies Network, Neurodiversity Network, and Parent Network. For more on our Diversity, Equity, and Inclusion initiatives, visit: Creating Inclusion Together at NTT DATA UK NTT DATA What we'll offer you: We provide tailored benefits supporting your physical, emotional, and financial wellbeing. Our Learning and Development programs ensure ongoing growth, and flexible work options are available. Learn more about us at: We are committed to diversity and inclusion. As a Disability Confident Employer, we guarantee an interview for applicants with disabilities who meet the role requirements and offer reasonable adjustments during recruitment. Join us in building a diverse, empowered team. Back to search Email to a friend Apply now

Operational Technology Principal Consultant We believe in the power of ingenuity to build a positive human future. As strategies, technologies, and innovation collide, we create opportunity from complexity. Our teams of interdisciplinary experts combine innovative thinking and breakthrough technologies to progress further, faster. Our clients adapt and transform, and together we achieve enduring results. We are over 4,000 strategists, innovators, designers, consultants, digital experts, scientists, engineers, and technologists. And we have deep expertise in consumer and manufacturing, defence and security, energy and utilities, financial services, government and public services, health and life sciences, and transport. Our teams operate globally from offices across the UK, Ireland, US, Nordics, and Netherlands. PA. Bringing Ingenuity to Life. We believe in the power of ingenuity to build a positive human future. We challenge where it matters and own the outcome. We combine strategic thinking, customer-centric service design, and agile engineering practices to accelerate innovation in a tech-driven world. Join our Digital & Data team working alongside product, design and a wide range of other experts and cross-disciplinary teams to bring ideas to life through innovative software solutions. Grow a flexible and unique career within a trust-based, inclusive environment that values excellence, innovation, and curiosity. You have the option to progress with us on a technical career track. No need to go onto the Partner career track if this doesn't align with what you want to do. Hybrid working - our approach is to be in the office or on client site a minimum of 2 days per week. Work on a broad variety of projects and tech stacks for clients across seven sectors - no project is ever the same Join other experts within our supportive and collaborative tech community through knowledge-sharing and peer-level support, coaching and mentoring Deepen your expertise through our a culture of learning and growth - you'll have budget to take courses (technical and non-technical training), plus gain certifications What you can expect Work to agile best practices and cross-functionally with multiple teams and stakeholders. You'll be using your technical skills to problem solve with our clients, as well as working on internal projects Tackling cybersecurity hurdles for organisations, particularly in Operational Technology (OT) Hybrid working with the team on client site or in our office a minimum of two days per week. However, the actual time you spend and where you spend it will vary by role or assignment, including up to 5 days per week on a client site. Even if you don't meet every requirement below, feel free to still apply as we are often hiring for similar roles which your background might be better suited to. Security management of industrial control and operational technology systems and applications such as: Process control SCADA Distributed control PLCs and RTUs Industrial cyber security and data communications Electricity transmission and distribution network control. IoT and Industrial IoT Industrial cyber security risk management, architecture and security monitoring Key industries such as: Electricity generation, transmission, distribution and distributed energy Smart energy and metering Oil and gas Water Civil Nuclear Transport (including aviation, rail, maritime, road and autonomous vehicles) Wider critical infrastructure Security standards relating to the sector, including: NCSC NIS Guidance and CAF ISO 27001 and ISO 27005 NERC CIP ISA-99/IEC 62443 NIST CSF. Additional information Please note that the interview stages may be subject to change based on the specific requirements of the role. Quick call with one of our Tech Recruiters - to discuss your application, the role and PA Round 1: Either a competency or technical interview (60 mins) Round 2: Either a competency or technical interview, whichever you didn't do at first round (60 mins) Final round : Meeting with a PA leader - a mini case study and discussion around your client-centricity (60 mins) Life At PA encompasses our peoples' experience at PA. It's about how we enrich peoples' working lives by giving them access to unique people and growth opportunities and purpose led meaningful work. Our purpose guides how we work with our clients and our teams, and support our communities, to deliver insight and impact, solving the world's most complex challenges. We're focused on building a workplace that values human difference and diverse mindsets, and a culture of inclusion and equality that unlocks the potential in our people so everyone can be their best self. We are dedicated to supporting the physical, emotional, social and financial well-being of our people. Check out some of our extensive benefits: Health and lifestyle perks accompanying private healthcare for you and your family 25 days annual leave (plus a bonus half day on Christmas Eve) with the opportunity to buy 5 additional days Generous company pension scheme Opportunity to get involved with community and charity-based initiatives Annual performance-based bonus PA share ownership Tax efficient benefits (cycle to work, give as you earn) We're committed to advancing equality.We recruit, retain, reward and develop our people based solely on their abilities and contributions and without reference to their age, background, disability, genetic information, parental or family status, religion or belief, race, ethnicity, nationality, sex, sexual orientation, gender identity (or expression), political belief veteran status, or other by any other range of human difference brought about by identity and experience. We welcome applications from underrepresented groups. Adjustments or accommodations - Should you need any adjustments or accommodations to the recruitment process, at either application or interview, please contact us on

At the Capco Technology Delivery Center, we are dedicated to the financial services industries. Our professionals combine innovative thinking with unrivalled industry and domain expertise to offer our clients consulting expertise, complex technology and package integration, transformation delivery, and managed services, to move their organizations forward. Through our collaborative and efficient approach, we help our clients successfully innovate, increase revenue, manage risk and regulatory change, reduce costs, and enhance controls. Our teams stay at the forefront of industry trends and technologies that are driving innovation. From strategy to launch, we are adept at delivering across the full product lifecycle. About the Job: As a member of the Capco Technology Delivery Team, you'll bring practical knowledge of agile development methodologies and engineering best practices. As an AI Engineer, you'll play an integral role using your experience and skills to contribute to the quality and implementation of our projects. What You'll Get to Do: Architect and develop autonomous AI systems that integrate LLMs with multi-modal capabilities (text, image, audio, and video) to support complex, real-world tasks Create robust agentic workflows enabling AI agents to interact autonomously with data sources and external APIs using advanced prompt engineering and retrieval-augmented generation (RAG) Fine-tune and optimize pre-trained large language models and multi-modal models for targeted use cases, ensuring high performance and low latency in production. Implement distributed training and scalable MLOps pipelines for continuous model improvement Collaborate with cross-functional teams-research, product, and engineering-to embed AI capabilities into products and services Evaluate and select appropriate AI frameworks (e.g., LangChain, LlamaIndex) to integrate agent components seamlessly with enterprise systems Build full-stack applications (front-end interfaces and back-end APIs) using modern languages and frameworks (React/Angular, Python, Java, Node.js) Develop and enforce testing protocols and monitoring systems to ensure AI outputs are accurate, reliable, and ethically aligned Proactively identify and mitigate risks such as hallucinations, bias, and security vulnerabilities within deployed AI systems Manage project timelines and collaborate with business groups in an agile environment, considering cost-benefit trade-offs for GenAI solutions Stay current on advancements in generative AI, agentic systems, and multi-modal models; experiment with novel architectures and workflows Develop quick prototypes and evaluate emerging technologies in the GenAI space in collaboration with technical teams What You'll Bring with You: The Essentials: Bachelor's degree or above in Computer Science, Engineering, Information Technology, Artificial Intelligence, or a related field (STEM) Hands-on experience in AI/ML engineering, with demonstrable work deploying LLMs at scale (Multi-modal models and autonomous agent systems preferrable) Proven experience building back-end application components and APIs in Python Proficiency in designing and executing complex prompt strategies and intput/output data validation models to achieve desired outputs from LLMs Experience monitoring AI applications using popular observability tools (e.g. Langfuse, Langsmith) to ensure seamless performance and monitoring Strong skills in data transformations for both structured and unstructured data; ability to integrate these processes into scalable pipelines Experience deploying AI models and full-stack applications using cloud-native tools Strong grasp of DevOp/MLOps best practices, including version control and CI/CD Excellent problem-solving, debugging and rapid prototyping Strong project management skills to coordinate effectively with technical and business teams Demonstrated understanding of cost-benefit trade-offs when employing GenAI solutions, ensuring efficient resource utilization Excellent communication skills and a collaborative mindset, with experience working in multi-disciplinary, agile teams Preferable to have: Experience in deep learning frameworks Experience working with agentic AI frameworks Experience building user-facing front-end applications Knowledge and implementation of Model Context Protocol Why Capco? A career at Capco is a chance to help reshape the competitive landscape in financial services. We launch new banks, transform existing ones, and help our clients navigate complex change. As consultants, we work on the front-end business design all the way through to technology implementation. We are the largest Financial Services focused consultancy in the world, serving everyone from global banks to emerging FinTechs, from strategy through digital transformation, design, business consulting, data and analytics, cyber, cloud, technology architecture, and engineering. Capco is a young and growing firm. We maintain an entrepreneurial spirit and growth mindset, and have minimal bureaucracy. We have no internal silos that get in the way of your career opportunities or ability to focus on our clients and make a difference to the business. We offer the opportunity for everyone to learn rapidly, take on tough challenges, and get promoted quickly. We take pride in our creative, collaborative, diverse, and inclusive culture, where everyone can . We offer highly competitive benefits, including medical, dental, and vision insurance, a 401(k) plan, tuition reimbursement, and a work culture focused on innovation and creation of lasting value for our clients and employees. Ready to Take the Next Step? If this sounds like you, we would love to hear from you. This is an opportunity to make a difference and contribute to a highly successful company with a significant growth trajectory. Apply for this job indicates a required field First Name Last Name Preferred First Name Email Phone Resume/CV Enter manually Accepted file types: pdf, doc, docx, txt, rtf Enter manually Accepted file types: pdf, doc, docx, txt, rtf LinkedIn Profile Website Capco does not and shall not discriminate on the basis of race, color, religion (creed), gender, gender expression, age, national origin (ancestry), disability, marital status, sexual orientation, or military status, in any of its activities or operations. In order to track the effectiveness of our recruiting efforts, please consider participating in the optional questionnaire.

When you join Kainos, you get to think beyond limitations to make an immediate and positive impact - like transforming digital services for millions of citizens or helping Fortune 500 companies get live and thrive on Workday. You'll be part of a people-first culture that is growing around the world. We're a creative, committed, and diverse group of individuals who succeed as a team. At Kainos your ideas are heard and valued and you'll leave a legacy that you can feel proud of. Join us and discover how our people write our story. MAIN PURPOSE OF THE ROLE & RESPONSIBILITIES IN THE BUSINESS: As a Security Architect (Consultant) in Kainos, you'll be responsible for the design and application of good security practices in the platforms and services we build for our customers. You'll work with Agile delivery teams to develop good security practices throughout the software development journey. You'll learn about and apply new technologies and approaches, with talented colleagues who will help you develop and grow. You'll share knowledge and help educate people - both customers and Kainos team members. You'll manage, coach and develop a small number of staff, with a focus on managing employee performance and assisting in their career development. You'll also provide direction and leadership for your team as you solve challenging problems together. MINIMUM (ESSENTIAL) REQUIREMENTS Experience in the secure design and delivery of new cloud services and solutions. Experience in identifying security issues in existing system designs or products, including recommending sensible mitigations that balance cost, risk and usability. Knowledge of security standards and regulations (e.g. NCSC, ISO, SoC, NIST, PCI, GDPR). Experience in application architecture, software development and/or infrastructure architecture. Experience testing the security of software and infrastructure using appropriate security tools. Experience with Continuous Security, Continuous Integration and Continuous Delivery techniques. Experience of network security (e.g. OSI, TCP/IP), web application security (e.g. OWASP) and cryptographic controls (e.g. PKI, TLS). Demonstrated ability in managing, mentoring and coaching members of your team and wider community. Excellent communication skills, with the ability to convey security complexities to audiences of various technical abilities (e.g. senior stakeholders, development teams). DESIRABLE Experience of Identity management and authentication/authorisation products and patterns. End-to-end security involvement, including governance, risk and compliance, operational security, supply chain security and secure user management. Penetration testing qualifications (e.g. OSCP, CREST, TIGER or equivalent). Experience leading security engineers and other junior members of staff. So what are you waiting for? Let's write the next incredible chapter of our story together. Embracing our differences At Kainos, we believe in the power of diversity, equity and inclusion. We are committed to building a team that is as diverse as the world we live in, where everyone is valued, respected, and given an equal chance to thrive. We actively seek out talented people from all backgrounds, regardless of age, race, ethnicity, gender, sexual orientation, religion, disability, or any other characteristic that makes them who they are. We also believe every candidate deserves a level playing field. Our friendly talent acquisition team is here to support you every step of the way, so if you require any accommodations or adjustments, we encourage you to reach out. We understand that everyone's journey is different, and by having a private conversation we can ensure that our recruitment process is tailored to your needs.

Location(s): UK, Europe & Africa: UK: London BAE Systems Digital Intelligence is home to 4,500 digital, cyber and intelligence experts. We work collaboratively across 10 countries to collect, connect and understand complex data, so that governments, nation states, armed forces and commercial businesses can unlock digital advantage in the most demanding environments. Job Title: Security & Resilience Consultant Location: London - We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role. Grade: GG10-GG11 Referral Bonus: £5000 What You'll Be Doing Working on client sites, you will support and lead engagements that deliver cyber risk assessments, improve security control maturity, define secure solutions and ensure compliance. Delivery of small to medium cyber security work-streams or engagements Understanding business and information risk context of our customers and judging risk at a technical and business process level Reviewing effectiveness of security controls and proposing proportionate security improvements and mitigations Analysing and researching security technologies to support the development of innovative solutions Working and collaborating with account teams to identify new opportunities for work and support the production of quality proposals Skills & Experience Ability to articulate and pitch security advice, often at a technical level, directly to key customer stakeholders Resilience Experience Excellent interpersonal skills as well as both written and verbal communication and presentation skills Ability to evaluate cyber security risk at the technical, system process and/or organisational level, measuring the associated business impact using a structured approach Ability to document and articulate to customer stakeholders how to manage cyber security risk utilizing a structured approach based on industry frameworks The Team We work hard and often go the extra mile, but we recognise people's efforts and that everyone has a life outside of work. We encourage people to speak up if they want to rotate to a new project. Benefits As well as a competitive pension scheme, BAE Systems also offers an employee share plan, an extensive range of flexible discounted health, wellbeing and lifestyle benefits including a green care scheme, private health plans and shopping discounts - you may also be eligible for an annual incentive. Why BAE Systems? This is a place where you'll be able to make a real difference. You'll be part of an inclusive culture that values diversity of thought, rewards integrity, and merit, and where you'll be empowered to fulfill your potential. We welcome people from all backgrounds and want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must at least achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting, where applicants must typically have 5 to 10 years of continuous residency in the UK, depending on the vetting level required for the role, to allow for meaningful security vetting checks.

Business Consultant - Air and Space (Security Clearance) Position Description The Space, Defence and Intelligence business unit in CGI is a true IT Systems Integrator. We work, build, and operate bespoke, technically complex, mission-critical systems which help our clients keep us all safe and secure. We bring innovation to our clients using proven and emerging technologies, agile delivery processes and our deep expertise across the breadth of space, defence, intelligence, aerospace and maritime, all underpinned by our end-to-end cyber capability. We work collaboratively with global technology companies, cutting edge SMEs and academia to deliver the optimal solution for each client. CGI was recognised in the Sunday Times Best Places to Work List 2025 and has been named one of the 'World's Best Employers' by Forbes magazine. We offer a competitive salary, excellent pension, private healthcare, plus a share scheme (3.5% + 3.5% matching) which makes you a CGI Partner not just an employee. We are committed to inclusivity, building a genuinely diverse community of tech talent and inspiring everyone to pursue careers in our sector, including our Armed Forces, and are proud to hold a Gold Award in recognition of our support of the Armed Forces Corporate Covenant. Join us and you'll be part of an open, friendly community of experts. We'll train and support you in taking your career wherever you want it to go. Due to the secure nature of the programmes, you will need to hold UK Security Clearance or be eligible to go through this clearance. This position will require travel to client sites across the UK. Your future duties and responsibilities This is a unique and exciting opportunity to work directly with Air and Space clients and key stakeholders across the Defence sector. You'll be advising on the status and risks associated with current and future digital programmes, helping to shape services that deliver real operational impact and Information Advantage to the UK's Armed Forces. You'll work at the heart of strategic decision-making for Defence's digital evolution - with the backing of CGI's experienced, mission-focused teams. What You'll Bring We're seeking someone with a solid background in military Air and/or Space operations, a keen analytical mindset, and a natural ability to influence and collaborate at all levels. As a Business Consultant, you will: • Engage with stakeholders across CGI, Air, and Space clients. • Conduct analysis of defence information systems and digital services. • Identify and assess operational risks and business challenges. • Define and document system and process improvement requirements. • Contribute to the delivery of digital programmes with real-world Defence impact. • Provide thought leadership on evolving Air and Space capability needs. Required qualifications to be successful in this role • 10+ years of active-duty experience within the Air or Space Command, or relevant MOD roles. • Operational experience at Formation (FE) and Operational HQ level. • Demonstrated ability to deliver operational outputs at a mid to senior rank. • Deep knowledge of current Defence programmes and capability roadmaps. • Strong analytical and critical thinking skills to assess complex problems and systems. Proven experience in: • Business and systems analysis • Risk assessment and mitigation • Requirement definition and stakeholder engagement • Document/report production and presentation • Strategic analysis and benefit realisation • Confident communicator with excellent client-facing and team collaboration skills. • Self-starter with an inquisitive mindset and a drive to deliver meaningful outcomes. Desirable Skills: • Familiarity with SAFe and Agile delivery methods. • Understanding of digital architecture frameworks such as NAF and TOGAF. • Awareness of Secure by Design principles and MOD security standards. Together, as owners, let's turn meaningful insights into action. Life at CGI is rooted in ownership, teamwork, respect and belonging. Here, you'll reach your full potential because You are invited to be an owner from day 1 as we work together to bring our Dream to life. That's why we call ourselves CGI Partners rather than employees. We benefit from our collective success and actively shape our company's strategy and direction. Your work creates value. You'll develop innovative solutions and build relationships with teammates and clients while accessing global capabilities to scale your ideas, embrace new opportunities, and benefit from expansive industry and technology expertise. You'll shape your career by joining a company built to grow and last. You'll be supported by leaders who care about your health and well-being and provide you with opportunities to deepen your skills and broaden your horizons. Come join our team-one of the largest IT and business consulting services firms in the world.

Business Development Manager - Security Technology (WFH) Job title: Business Development Manager - Security Technology (WFH) Business Development Manager (Ref 2406) - Security Technology To £70K Base (90K OTE) Company Car & Benefits A leading security technology manufacturer is seeking a BDM to drive growth across the UK market. This role focuses on direct engagement with security consultants and end-users, supporting a strategic shift to expand key verticals such as Stadiums & Venues, Government, and Retail. With best-in-class AI-driven surveillance solutions, a strong emphasis on cybersecurity, and an established global presence, this is a fantastic opportunity to be part of a forward-thinking organisation investing heavily in the UK market. This is a WFH opportunity with occasional team meetings in central London. What's in it for you? To £70k base salary OTE £90k Company car, private health insurance, and excellent pension scheme Opportunity for international exposure Work closely with an engaged leadership team driving a new UK strategy Industry-leading AI security products with a strong market reputation Ready to shape the future of security innovation?