36 jobs found

Insight Investment are seeking a Senior Cyber Defence Operations Analyst to be a part of the CISO function reporting to the Cyber Defence Operations Lead. The role will be to maintain and update alerts/rules within Insight Investment's monitoring solution, conduct vulnerability management with various stakeholders, continually ensure compliance with regulatory requirements, generate new security controls as required, and be responsible for incident response within the firm. The candidate will lead incident response activity as required. Role Responsibilities Lead, investigate, record and respond to SIEM alerts, determine scope and severity of incidents, and coordinate containment and remediation efforts. Define, implement and continuously improve operational security processes and runbooks to align with compliance standards and evolving threats. Assist with integrating and configuring security tooling, ensuring effective data ingestion, enrichment and alerting across the environment. Lead threat hunting activities to proactively identify suspicious behaviour and improve detection coverage. Deliver effective vulnerability management: analyse scanning outputs, coordinate with technology teams and ensure timely notification and remediation tracking. Participate in the out-of-hours, on-call rotation, supporting incident response efforts during non-core hours. Enforce security processes and requirements across the business. Experience Required Previous ownership of the incident response, vulnerability management or SIEM monitoring solution processes and procedures. Knowledge of SIEM tooling, designing and implementing use cases & documenting KBAs. Strong knowledge of KQL. Proven experience in incident response and handling. Experience contributing to cybersecurity operations in a professional or structured environment. Demonstrated commitment to continuous self-study. Experience working with an MSSP. Technical knowledge of access management and security controls. Strong collaboration skills with the ability to work across teams and stakeholders. A strong desire to drive security innovation across the firm. Advantageous Relevant technical cyber security certifications are desirable. Knowledge on task automation/scripting would be hugely beneficial. Experience with Microsoft suite (Defender/Azure), query-based SIEM (e.g. Sentinel, Splunk) and orchestration platforms. Experience in financial services or other highly regulated environments. Prior involvement in threat hunting activities. About Insight Investment Insight Investment is a leading asset manager focused on designing investment solutions to meet its clients' needs. Founded in 2002, Insight's collaborative approach has delivered both investment performance and growth in assets under management. Insight manages assets across its core liability-driven investment, risk management, full-spectrum fixed income, currency and absolute return capabilities. Insight has a global network of operations in the UK, Ireland, Germany, US, Japan and Australia. More information about Insight Investment can be found at:

What you will be part of: Explore a wealth of possibilities. Take on challenges, create smart inventions, and grow beyond. This is a place for curious minds, brave pioneers, and everyone in between. Together, we achieve the extraordinary, each bringing our unique perspectives. Your part matters. Saab is a leading defence and security company with an enduring mission, to help nations keep their people and society safe. Empowered by its 26,000 talented people, Saab constantly pushes the boundaries of technology to create a safer and more sustainable world. Saab designs, manufactures and maintains advanced systems in aeronautics, weapons, command and control, sensors and underwater systems. Saab is headquartered in Sweden. It has major operations all over the world and is part of the domestic defence capability of several nations. Read more about ushere . The Role: This is an initial 6 month contract role within our UK IT Business Unit. The IT Solution Architect will be responsible for designing and implementing technology solutions that align with business objectives and technical requirements. This role bridges the gap between business needs and IT capabilities, ensuring that solutions are scalable, secure, and cost-effective. The Solution Architect works closely with stakeholders, developers, and project managers to deliver robust architectures that support organisational goals. Key Responsibilities: Solution Design & Architecture to a high standard. Develop high-level and detailed solution architectures for IT systems and applications. Ensure solutions comply with enterprise architecture standards, security policies, and regulatory requirements. Create architectural diagrams, models, and documentation for proposed solutions. Stakeholder Engagement Collaborate with business analysts, project managers, and technical teams to understand requirements. Present architectural solutions to stakeholders and obtain buy-in. Assess emerging technologies and recommend adoption where appropriate. Conduct feasibility studies and cost-benefit analyses for proposed solutions. Governance & Standards Define and enforce architectural principles, guidelines, and best practices. Ensure consistency and integration across systems and platforms. Implementation Support Provide technical leadership during solution implementation. Troubleshoot architectural issues and guide development teams. Identify potential risks in solution design and propose mitigation strategies. Ensure compliance with data protection and cybersecurity standards. Qualifications and Skills: Bachelor's degree in Computer Science, Information Technology, or related field. 7+ years in IT roles, with at least 3 years in solution architecture. Experience in large-scale system design and implementation. Certifications (Preferred). Knowledge of enterprise architecture frameworks (e.g., TOGAF, Zachman). Proficiency in cloud platforms (AWS, Azure, GCP) and hybrid architectures. Experience with APIs, microservices, and integration patterns. Understanding of networking, security, and infrastructure principles. Analytical & Problem-Solving. Ability to translate business requirements into technical solutions. Strong analytical skills for evaluating complex systems. Excellent verbal and written communication skills. Ability to influence and negotiate with stakeholders at all levels. Self-motivated, resilient and able to work under pressure. Excellent communication and presentation skills. By submitting an application to Saab UK you consent to undertaking workforce screening activities that may include but are not limited to: Baseline Personnel Security checks, National Security Vetting, reference checks, verification of working rights and in all circumstances preferred candidates will be placed through a security interview. Regardless of whether you value cutting edge technology, creativity or an innovative environment, everyone at Saab contributes to keeping people and society safe.

Technical Director Prevail is a security and intelligence company that uses technology and data to inform analysis and decision-making. The data platform, and the talented team that is now 17 people and growing, sits at the heart of the company delivering excellent support across the company and clients. Prevail is now investing more in this function to super charge the capability by recruiting a dedicated Technical Director/ Head of Technology, focussing the team, and directing financial resource. The role: We are looking for someone to implement our technology strategy and lead our growing team of 14 talented data professionals. Reporting to the Executive Team, you will be playing a critical role in leading on the growth of our tech offering, data capabilities, people & organisational strategy, helping to transition our service business in the Defence, Intelligence and Security industry. We envision that this role will deliver a critical impact as we upscale our technical service offering and continue to grow the company over the next 3-5 years. Responsibilities/ deliverables: These are the key things that you are responsible for delivering within your role. There will be activities and tasks in addition to this list that are expected from you but most of your time will include: Developing and executing a comprehensive data, analytics, and AI strategy aligned with our business objectives. Working closely with the executive team on building the company's technology offer as part of our strategic direction. Leading and building our high performing Tech Team encompassing data analysts, data engineers, and AI professionals, fostering a culture of innovation, collaboration, and excellence. Overseeing the implementation of data and AI projects, ensuring successful delivery, adherence to quality standards, and alignment with business requirements to improve service delivery to clients. Leading the identification and prioritisation of data and AI initiatives that deliver tangible business value, collaborating closely with cross functional teams to ensure alignment with company goals. Keep abreast of emerging data and AI technologies and industry trends, evaluating their potential impact on our business and identifying opportunities for innovation and competitive advantage. Have ultimate accountability for technology strategy and execution whilst contributing to the longer term vision, delivering the highest impact for our customers, balanced with maturing the technical capabilities across our diverse portfolio. Steer day to day execution of our technical support to our service delivery. Through overseeing of team planning and dynamic prioritisation of opportunities. Manage the longer term development roadmap, including resource allocation, and longer term strategic consideration Lead and manage third party partnership, including the necessary planning and integration work when required. Collaborate closely with the commercial team to shape technical solutions for business development opportunities and bid tenders, providing strategic technical leadership, feasibility assessments, and resource planning to strengthen proposals and win new business. You are a leader, with previous working experience managing tech teams as a technology lead or a key technology role and with the appropriate levels of empathy to guide and develop existing technology and data professionals. You are an entrepreneur, thriving in ambiguous environments, embracing the start up culture as a "doer", aspirational and resourceful You are commercially astute, capable with costing models, and proposal inputs. You are an effective communicator, able to contribute fully to corporate discussions with direct technical expertise. You'll have many years in a senior or leadership position and at least one role that was for a start up, small business, or autonomous business unit Technical skills: You have a computer science background and aptitude for big data and AWS environments. Us: Prevail Partners delivers high quality intelligence, and security consultancy services to clients ranging from governments and multinational corporations to non governmental organisations. These services are delivered predominantly across Europe, the Middle East and Africa. We pride ourselves on selecting interesting projects which we believe can genuinely make a difference. You will be joining the company at a time of continued growth, and be required to support a wide variety of these projects across the whole company. At Prevail, we believe in recognising and rewarding our people. Our benefits are designed to support your wellbeing, development, and life beyond work: Gym Access & Wellness Discounts: Access to discounted memberships and gym facilities for London-based employees Cycle to Work Scheme: Tax efficient savings on bikes and accessories, available post probation Season Ticket Loans: Interest free loans for annual commuting costs Private Medical Insurance: Fully funded cover through Vitality Health after two years' service Employee Assistance Programme: Confidential mental health, legal, financial and wellbeing support via Health Hero Enhanced Leave Entitlements: Supporting you through important life moments with flexibility Professional Development Days: Dedicated time off to focus on your personal and professional growth through training, courses, or self directed learning Culture & Development: A values led culture with regular social events, collaborative initiatives, and meaningful opportunities for personal and professional development

What we do We put our Customers and Families First. They are the driving force behind everything we do. We drive forward improvements for them to ensure the service they receive, whether reactive repairs or a major project, is completed safely and on time. In order to achieve this, we have 4 core values: open, caring, agile and collaborative. These are at the heart of everything we do. Contract & Location Full Time, Permanent Location: Larkhill or Aldershot (Hybrid: typically 3 days office / 2 days home, or 2 days office / 3 days home depending on the week) Working Hours: Monday to Friday, 8:30am-5:00pm (No weekends or out-of-hours work) About the Role As our Data Analyst you'll be the go to expert for all things data, working independently while collaborating with key stakeholders and contributing to high quality reporting across the business. You'll manage data exporting, cleansing and analysis, create dashboards and reports, and present findings to stakeholders, ensuring information remains accurate, accessible and up to date. Responsibilities • Daily reporting including cash reports and progress updates • Manipulate and interpret data to create meaningful outputs • Review, update and improve internal and external trackers across Excel and other programmes • Present findings to stakeholder groups or distribute reports via email • Conduct data validation checks and apply statistical methods where needed Qualifications • Strong Excel skills including VLOOKUPs, pivot tables and advanced data handling techniques • Prior experience in a data analyst role is essential; familiarity with Maximo, FM environments or MOD projects is highly advantageous • Ability to manage deadlines, maintain excellent timekeeping, work independently and communicate effectively with stakeholders • Innovation, accuracy and attention to detail are at the heart of this role • BPSS Clearance will be required • Applicants must be based within an hour of Larkhill or Aldershot to be eligible Benefits Up to 6% contributory pension scheme 25 Days annual leave Volunteer leave Established reward and recognition scheme One paid professional subscription Life Assurance Policy Employee discount and reward schemes VIVO Defence Services is a joint venture between Serco and EQUANS. The role you have applied for is with VIVO Defence Services. By applying for this role, please be aware that information contained within your CV may be shared between VIVO Defence Services, Serco and EQUANS during the recruitment process. We are committed to building a diverse and inclusive organisation that supports the needs of all. We will make reasonable adjustments at interview through to employment and strongly encourage applications from a diverse candidate pool by discussing flexibility and hybrid working options.

About the job We currently have an exciting opportunity for a Detection Engineer to join our existing experienced team. Tasks / Responsibilities Design, implement, and optimise detection logic, rules, and use cases in SIEM, EDR, and related platforms. Tune existing alerts and rules to reduce false positives and enhance detection fidelity. Monitor, analyse, and investigate security alerts to identify potential threats and malicious activity. Conduct threat hunting activities to proactively discover hidden or advanced threats. Collaborate with Incident Response teams to provide detection insights and support investigations. Maintain and improve detection coverage based on emerging threats, adversary tactics (MITRE ATT&CK), and threat intelligence. Develop automation scripts and playbooks to streamline detection and alert triage processes. Document detection processes, use cases, and provide knowledge transfer to SOC analysts. Qualifications Relevant qualification(s) in Cyber Security, or other related technical roles Examples: Degree in Cyber Security, Computer Science, Networks etc. Professional Qualifications from organisations such as CompTIA, ISACA etc. Technical qualifications in security and technology such as (but not limited to) cloud computing, SIEM, Vulnerability Scanning/Management etc. Experience (essential) Strong experience with Security Information and Event Management (SIEM) tools, in order of preference: Elastic Security (Mandatory) Sentinel (Optional) Splunk (Optional) Hands on knowledge of Endpoint Detection & Response (EDR) solutions (e.g., Elastic XDR, Microsoft Defender, CrowdStrike, Carbon Black, SentinelOne). Practical understanding of log sources across network, endpoint, cloud, and identity platforms. Solid knowledge of MITRE ATT&CK framework and application in detection engineering. Proficiency in detection rule development using query languages (e.g., ESQL, KQL, Lucene). Experience in incident detection, triage, and analysis in SOC or related environments. Understanding of malware techniques, lateral movement, persistence mechanisms, and threat actor TTPs. Experience (nice to have) Exposure to cloud security monitoring (AWS, Azure, GCP logging and detections). Knowledge of SOAR platforms and automation playbook creation. Experience with YARA, Sigma, or Snort/Suricata rule writing. Familiarity with container and Kubernetes security monitoring. Threat intelligence analysis and integrating threat intel into detection workflows. Knowledge of offensive security/red teaming methodologies to improve detection coverage. Familiarity with scripting/programming (Python, PowerShell, or similar) for automation and detection enrichment. About SiXworks SiXworks is a leading provider of secure digital solutions, specialising in digital experimentation and focused on fail safe fast cutting edge technology solutions deployed in highly secure environments. We are unified in our mission to accelerate innovation and adoption of secure, digital technology to improve the operational agility of Defence and National Security. This is an exciting time for us, we have ambitious plans for continued growth and development, and we are seeking to add brilliant, experienced, motivated, and passionate people to our team to work with us on this journey. Why join SiXworks? Our team is a fusion of brilliance, featuring senior operational, technical, and business leaders from various industries and the armed forces. We're also powered by a league of extraordinary IT engineers, architects, developers, and project managers. Together, we're an unstoppable force of digital innovation! What can we offer in return? SiXworks offers a unique work culture around our core principles Agility, Security, Innovation, Quality, Collaboration and Inclusivity. Together, these six principles form SiXworks'NORTH STAR, guiding the organisation towards success. This is reflected in the raft of benefits available to all our employees. Benefits 25 days annual leave + bank holidays Private Medical Insurance Life Assurance Scheme Pension scheme Professional Development opportunities Cycle to Work scheme Perks at Work scheme Discretionary Bonus scheme A word on UK Security Clearance Due to the secure nature of the position and working environment, you must have, or be eligible to obtain Security Clearance. More details relating to UK Security Clearance can be found here: United Kingdom Security Vetting: clearance levels - GOV.UK () SiXworks is an IBM subsidiary which has been acquired by IBM and will be integrated into the IBM organisation. SiXworks will be the hiring entity. By proceeding with this application, you understand that SiXworks will share your personal information with other IBM subsidiaries involved in your recruitment process, wherever these are located. More Information on how IBM protects your personal information, including the safeguards in case of cross border data transfer, are available here: