20 jobs found

PAM Architect +9 months + +DV cleared - current active clearance +Sole British nationals only due to the nature of the project +Hybrid working in Corsham +Inside IR35 + 500 - 550 a day Key Responsibilities Architect and deliver enterprise CyberArk PAM solutions , including PAS, CPM, PSM and PVWA Define privileged access, credential management, vaulting and session monitoring strategies Produce HLDs, LLDs, security architecture documentation and implementation runbooks Integrate CyberArk with Active Directory/LDAP, SIEM and ITSM platforms Conduct security assessments, gap analysis and remediation activities Provide PAM technical leadership, guidance and mentoring Work closely with customer and internal stakeholders, including on-site customer engagement Drive continuous improvement and innovation across the PAM capability Key Skills & Experience Proven experience as a PAM Architect or Senior PAM SME Strong hands-on CyberArk experience, ideally across PAS, CPM, PSM, PVWA and PTA Enterprise-scale PAM architecture and implementation experience Strong understanding of IAM, least privilege and privileged credential lifecycle management Experience with session isolation/recording and secure access controls Strong technical documentation and security architecture skills Knowledge of NIST, ISO 27001 or similar security frameworks Excellent stakeholder management and communication skills Experience of DevSecOps and secrets management would be advantageous If you'd like to discuss this PAM Architect in more detail, please send your updated CV to (url removed) and I will get in touch.

Head of Secure Digital Platform MUST HAVE ACTIVE SC CLEARANCE Location: Remote/Hybrid (Reading 2-3 days per week) The Opportunity We are seeking an experienced Head of Secure Digital Platform to lead the strategy, delivery and continuous improvement of enterprise digital platforms within a complex, global organisation. Reporting to the Chief Digital & Information Officer, you will lead multidisciplinary technology teams responsible for delivering secure, scalable and resilient platforms that support business operations and digital transformation. Key Responsibilities Develop and deliver the enterprise platform strategy and roadmap. Lead the design, implementation and support of secure digital platforms across cloud and hybrid environments. Build and develop high-performing teams of engineers, architects and product leaders. Collaborate with business stakeholders to translate strategic requirements into technology solutions. Drive platform performance, resilience, security and continuous improvement. Manage strategic technology partners and suppliers. Promote modern engineering practices, innovation and data-driven decision-making. About You You'll be an accomplished technology leader with: Significant experience leading enterprise IT platforms within large, complex organisations. Strong knowledge of cloud technologies, infrastructure, cybersecurity and enterprise architecture. Experience managing global technical teams and technology suppliers. Excellent stakeholder engagement, strategic planning and leadership skills. A degree in IT, Engineering, Business or a related discipline. Professional certifications in cloud technologies or IT service management are advantageous. Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.

Business Architect Remote with occasional client visits in the South £620pd - £650pd, Outside IR35 11-month contract, highly likely to extend Must hold valid SC Clearance, DV is desirable Our client, an established and successful Cyber security consultancy are looking for an experienced Architect to join them on a contract basis click apply for full job details

Integration Lead - Secure Digital Platform 6-Month contract - Inside IR35 - market rate Reading based - 5 days a week onsite Defence sector - need to be eligible for SC Clearance - current and active SC Cleared already is strongly preferred Role Description The Integration Lead is responsible for leading the technical design, development, and delivery of secure, scalable, and reusable foundational technology services within the Secure Digital Platform. The Integration Lead partners with Delivery Leads, product owners and architects, to lead and manage the technical implementation of platform capabilities and enterprise services to the roadmap planned for each platform. The Integration Lead acts as a hands-on technical leader and subject matter expert, ensuring engineering excellence, operational integrity, and alignment of delivery with enterprise architectural direction and business objectives. Key Responsibilities Provide delivery leadership across the Engineering, Agile team and Test teams to build and maintain reusable and secure platform services aligned with the organisation's technology strategy. Work with the Delivery leads to understand the roadmap of work Work closely with Product Owners / Architects to implement and test the capabilities within the platforms Drive high-quality software engineering practices across the team, including code reviews, test automation, CI/CD pipelines, performance monitoring, and observability. Ensure delivered solutions align with solution designs and security guardrails. Guide teams in the selection and use of modern tools, frameworks, and platforms that optimise development efficiency and operational effectiveness for delivery. Support the development and evolution of the Secure Digital Platform roadmap by identifying technical dependencies, enablers, and delivery risks. Partner with the wider Secure Digital Platform team to establish and enforce standards for infrastructure-as-code, API development, cloud-native services, and integration. Collaborate with cybersecurity, operations, and compliance teams to ensure secure design and adherence to internal and external policies. Act as a technical escalation point for complex engineering issues and support the Engineering, Agile and Test leads to develop and row technical capability within the teams. Contribute to the preparation of delivery-related artefacts such as technical documentation, support handovers, and implementation Runbook. Foster a culture of continuous improvement, experimentation, and feedback within engineering teams. Skills and Experience Essential 5+ years of experience in technical leadership roles within software engineering, infrastructure, or platform development teams Proven experience delivering secure, scalable technology services or platforms in complex enterprise environment Hands-on experience with cloud platforms (e.g., AWS, Azure, GCP), container orchestration, and infrastructure automation (e.g., Terraform, Ansible) Strong understanding of DevSecOps principles, CI/CD pipelines, test automation, and observability tooling Familiarity with platform and product-centric delivery models and agile frameworks (e.g., Scrum, SAFe) Excellent communication and stakeholder management skills across technical and non-technical audiences Strong problem-solving skills and ability to make pragmatic decisions under ambiguity or time constraints Commitment to fostering engineering culture, mentoring others, and growing internal technical capability High ethical standards when handling confidential information Desirable Experience with platform engineering, internal developer platforms (IDPs), or technical enablement teams Experience in a highly regulated industry (e.g., Aerospace & Defence, Finance, Critical Infrastructure) Exposure to secure coding practices, threat modelling, and secure-by-design approaches Experience leading hybrid delivery teams (e.g., internal and external/partner teams) Familiarity with ITSM and incident/problem/change/ management in an enterprise context Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.

SENIOR SOFTWARE ENGINEER - eDV CLEARED NEW PERMANENT JOB OPPORTUNITY AVAILABLE WITHIN A GLOBALLY LEADING NATIONAL SECURITY COMPANY FOR A SENIOR SOFTWARE ENGINEER WITH eDV CLEARANCE Permanent job opportunity for a Senior Software Engineer Globally leading defence / cyber security company Salary up to £100,000 plus clearance bonus London based organisation in an easily accessible location Permanent Software Engineer To apply please call / or email WHO WE ARE? We are recruiting Senior and Lead Software Engineers to work with a multi-national, industry leading National Security client in central London. Due to the nature of the work you must hold enhanced DV Security Clearance. WHAT WILL THE SENIOR SOFTWARE ENGINEER BE DOING? As a Senior Software Engineer, you will work with an experienced agile team to design and deliver packages of bespoke work, work development teams and liaise with customers. You will work through the entire software development life cycle from requirements capture to R&D, implementation to automation. WE NEED THE SENIOR SOFTWARE ENGINEER TO HAVE . Current enhanced DV clearance Experience with at least one or more of the following: Java, Python, C++, .NET, C#, JavaScript, React Experience mentoring juniors or leading a team Experience / Knowledge of automation IT WOULD BE NICE FOR THE SENIOR SOFTWARE ENGINEER TO HAVE . Cloud based experience Microservice architecture or server-less architecture Big Data / Messaging technologies such as Apache Nifi / MiNiFi / Kafka TO BE CONSIDERED . Please either apply by clicking online or emailing me directly to For further information please call me on . I can make myself available outside of normal working hours to suit from 7am until 10pm. If unavailable please leave a message and either myself or one of my colleagues will respond. By applying for this role you give express consent for us to process & submit (subject to required skills) your application to our client in conjunction with this vacancy only. Also feel free to connect with me on LinkedIn, just search Dominic Barbet. I look forward to hearing from you. SENIOR SOFTWARE ENGINEER - DV CLEARED KEY SKILLS: SENIOR SOFTWARE ENGINEER / SENIOR SOFTWARE DEVELOPER LEAD SOFTWARE ENGINEER / JAVA DEVELOPER / JAVA ENGINEER / LEAD SOFTWARE DEVELOPER / SENIOR SOFTWARE DEVELOPER / DV CLEARED / DV CLEARANCE / DEVELOPPED VETTING / DEVELOPED VETTED / DEEP VETTING / DEEP VETTED / SC CLEARED / SC CLEARANCE / SECURITY CLEARED / SECURITY CLEARANCE

Infrastructure Technical Project Manager (DV Cleared) Location: London (4-5 days per week on-site) Duration: 12-Month Contract Are you an experienced Infrastructure Project Manager with active DV Clearance? Do you excel at bridging the gap between technical engineering teams and senior stakeholders in high-assurance environments? If so, we want to hear from you. We are seeking an Infrastructure Technical Project Manager to lead the end-to-end delivery of secure, resilient, and compliant IT infrastructure projects. Key Responsibilities Project Delivery & Governance: Lead infrastructure projects (networks, hosting, data centers, end-user compute) using Waterfall, Agile, or Hybrid methodologies. Technical Oversight: Interpret and challenge engineering designs (HLD/LLD) while coordinating delivery across networks, private cloud platforms, and cyber security controls. Stakeholder & Vendor Management: Translate complex technical details into executive-level messaging and oversee third-party suppliers (SoWs, KPIs). Risk & Assurance: Manage RAID logs and support security accreditation and compliance processes within high-assurance frameworks. Transition Management: Ensure smooth project transition into live service following ITIL-aligned practices. Key Skills & Experience Required Security Clearance: Active DV Clearance is strictly essential. Frameworks & Environments: Proven experience with MOD frameworks (e.g., JSP 604), secure systems design, and air-gapped/high-side environments. Technical Depth: Ability to confidently challenge technical architectures and validate implementation risks. Methodologies: Proficiency in PRINCE2, Agile, or MSP. Certifications (Desirable): PRINCE2 Practitioner, PMP, ITIL, or CISSP. Apply Now If you have the required technical depth and active DV clearance to deliver high-quality infrastructure outcomes, please apply with your updated CV today. Randstad Technologies is acting as an Employment Business in relation to this vacancy.

Cyber Security Architect / Assurance Location(s): Remote, Bristol and Newbury Type: Flexible, driven by work requirements IR Status: TBC Rate: £600 - £800 Clearance: Must have active MOD DV Length: 3-6 months Sanderson G&D are seeking an MOD DV Cleared Security Architect for an existing programme of work in the defence sector click apply for full job details

Security Architect - SC Cleared - Outside IR35 Location : London Length: Initial 6 Months Type : 1 day a week on-site Clearance : Active SC Clearance IR35: Outside Rate: £500 - £550 Contingency : Must be able to start within 1-2 weeks Sanderson G&D are seeking a Security Architect who will provide strategic cyber security advice and guidance to digital product teams, acting as a Close Support Partner to ensu click apply for full job details

Job Title: DV Cleared Technical Author Location: Cheltenham Duration: 6 months with likely extension Rate: Up to 650 per day via an approved umbrella company Must be willing and able to go through highest security clearance process Our client, a leading organisation in the Defence sector, is hiring an experienced Technical Author. This is a unique opportunity to contribute to critical systems and operational processes within a secure environment. What you'll be doing: Producing, maintaining, and managing high-quality technical documentation for classified systems Translating complex technical concepts into clear, concise, and accurate written materials suitable for secure audiences Developing system documentation including architecture, design documents, user guides, operational manuals, and SOPs Supporting accreditation, assurance, and compliance documentation Collaborating closely with engineers, architects, cyber specialists, and stakeholders to validate content Ensuring all documentation aligns with security policies, governance frameworks, and information assurance standards Managing document control, versioning, and configuration throughout system lifecycles Preparing materials for both technical and non-technical audiences What you'll bring: Proven experience as a Technical Author or Documentation Specialist in highly secure or classified environments Strong ability to document complex technical systems clearly and accurately Experience producing documentation for IT, cyber, data, or engineering systems Excellent written communication skills with keen attention to detail Familiarity with formal documentation standards and structured authoring methods Ability to work collaboratively with technical teams and security professionals Strong understanding of information security and handling requirements Desirable skills: Background supporting UK defence, intelligence, or national security projects Experience documenting cyber security, data platforms, or software-based systems Familiarity with accreditation, risk management, or assurance documentation Experience with document management tools and markup languages such as Confluence, SharePoint, Markdown, or XML This role offers a chance to work on vital projects within a dynamic, secure environment. If you hold the necessary clearance and are passionate about producing impactful technical documentation, we encourage you to apply today!

Location Hanslope, South East England, MK19 7BH About the job Job summary At FCDO Services, we protect the UK's interests at home and overseas. We design and construct secure government buildings, courier diplomatic packages worldwide, safeguard government tech, and a whole lot more. Our work is as varied and vital as it gets, but we never lose sight of our people. Their skills, aspirations and growth mean as much as the global mission we're on. In our world, it all matters. Job description Our Digital and Data technology team are at the forefront of digital innovation. They provide best in-class solutions for our clients, helping to shape and support a data driven future for UK government. Whether it's creating bespoke, secure software, offering programme and application support or moving an entire embassy's servers to a Cloud platform. No matter the task, they are on hand to support. Now, you've got the opportunity to join them. Providing innovation to government partners. Delivering best-in-class solutions. Working at the cutting-edge of technology It all matters. Protect, secure and safeguard vital government services Being a Lead Security Architect within the Cyber Security department means you'll be steering architecture and security decisions during a period of significant innovation and change driven by emerging cyber threats and the rise of Cloud and AI technologies. The role will have you working across diverse departments, business processes and large programmes of work - all while you identify potential security information risks associated with the acquisition, implementation and use of technologies. Keeping your focus on monitoring and mitigating risk, you'll recommend controls, audit tests - while also providing input on the development of security policies, system development lifecycles, secure coding practices, risk assessments, governance requirements and architecture for both FCDO Services and its customers. Your leadership skills will help you thrive here. You'll be responsible for leading, coaching and developing a team of Security Information Risk Advisors - fostering a culture that supports high performance and continuous improvement. If you encounter a security breach, you will be the first to come up with solutions rooted in prevention and learning to foster a culture of continual improvement - guiding and advising management and promoting security awareness across the organisation at every step. Use your specialist skills to improve our technological resilience You'll bring extensive knowledge of technical and security tools and techniques - supported with an IS-related qualification at NVQ Level 6 or equivalent. You'll also be well-versed in everything from analysing proposals, technical documentation and designs, processes and practices to identifying security information and cyber vulnerabilities and risks - owing to the experience you've gained through previous roles. You're a born leader. Engaging, motivating and full of knowledge, you'll bring your excellent interpersonal and communication skills to every task you undertake. On a personal as well as professional level, you'll be organised, collaborative, proactive and decisive - which translates to delivering at pace and to deadline. This is an exciting and varied role where you'll play a vital part in keeping the nation safe and secure, all while continuing to grow and develop your own expertise. Discover the support you need to grow your career further Working with us, you'll help keep people, information, and assets safe around the world. It's a role you can feel proud of; and we aim to make every part of your career just as rewarding. That's why when you join us, expect to receive a competitive salary, flexible working to support work/life balance, attractive holiday entitlement and a Civil Service Pension. Along with this, you'll also have access to training and other development opportunities to help grow your career with us. Our offices have an on-site gym, nursery, café, and restaurant, and we offer interest-free loans on season tickets and bikes to help you get there. It's a great set of benefits made to support all you do, and all you need. Want to see your future team's work in action? Step into our Virtual Embassy to see how we deliver for government customers and how you could help. Explore the embassy now at virtual-embassy.fcdoservicescareers.co.uk. Every single colleague must be security cleared before joining us. If you're successful in your application, we'll ask you to undergo our vetting process to achieve Developed Vetting (DV) clearance. You can find out more about vetting at fcdoservicescareers.co.uk/how-to-apply/ To find out more about our benefits and our organisation, please visit fcdoservicescareers.co.uk It takes a diverse team to protect a diverse world. The vital work we do takes an incredible community of colleagues, with different skills, backgrounds, cultures and identities. We support every individual, so that you always know you're welcome and valued. It's what makes us a Disability Confident employer. And why we're recognised as a 'Carer Confident' workplace. And it's how you know you're joining an inspiring, inclusive organisation. Person specification We are looking for people with: IS related qualifications at NVQ Level 6 or equivalent, e.g. ISO 207001 Internal Auditor or Lead Implementer ISACA CRISC, ISC2 CISSP. Extensive knowledge of technical and security tools and techniques Experience analysing proposals, processes and practices and identifying security information risks Line management experience Strong influencing and interpersonal skills Able to produce clear technical documentation Qualifications IS related qualifications at NVQ Level 6 or equivalent, e.g. ISO 207001 Internal Auditor or Lead Implementer ISACA CRISC, ISC2 CISSP. Behaviours We'll assess you against these behaviours during the selection process: Seeing the Big Picture Making Effective Decisions Delivering at Pace Technical skills We'll assess you against these technical skills during the selection process: IS related qualifications at NVQ Level 6 or equivalent, e.g. ISO 207001 Internal Auditor or Lead Implementer ISACA CRISC, ISC2 CISSP. Extensive knowledge of technical and security tools and techniques Experience analysing proposals, processes and practices and identifying security information risks Line management experience Strong influencing and interpersonal skills Able to produce clear technical documentation We only ask for evidence of these technical skills on your application form: IS related qualifications at NVQ Level 6 or equivalent, e.g. ISO 207001 Internal Auditor or Lead Implementer ISACA CRISC, ISC2 CISSP. Extensive knowledge of technical and security tools and techniques Experience analysing proposals, processes and practices and identifying security information risks Able to produce clear technical documentation

SOC Engineer +6 months + +DV cleared role + 600 - 700 a day Inside IR35 +On site in Hemel Hempstead Skills: + SIEM / SPLUNK / SOC + DV clearance - must hold current active clearance Join our team as a SOC Engineer and become a critical player in safeguarding organizations through cutting-edge security monitoring and threat detection. In this role, you will lead the design, implementation, and optimization of advanced security tools within a dynamic Security Operations Centre, ensuring our clients' infrastructure remains resilient against emerging cyber threats. This is an exciting opportunity for an experienced cybersecurity professional to shape security strategies, work with innovative technologies, and make a tangible impact in the field of digital protection. Required Skills: Proven experience leading security engineering teams and managing large client engagements Expertise in SIEM platforms, specifically Splunk Enterprise & Enterprise Security and Elastic Stack / Elastic Security Deep knowledge of detection engineering, threat intelligence frameworks (MITRE ATT&CK), and noise reduction techniques Hands-on experience with data ingestion tools such as Elastic Agent, Beats, Splunk UF/HF, Syslog, Kafka Advanced proficiency in querying languages including SPL, KQL, and EQL Strong understanding of ECS and CIM log normalization, enrichment, and large-scale data architectures Expertise in detection rule design, tuning, and lifecycle management Proficiency with automation and orchestration tools, CI/CD pipelines, and Infrastructure as Code (Terraform, Ansible) Excellent stakeholder communication and client management skills Ability to assess risks, evaluate complex information, and communicate effectively at all levels Ready to take your cybersecurity expertise to the next level? Apply now and become a vital part of our mission to defend digital assets with innovative security solutions!

I have several requirements for DV cleared professionals within National Security. There are a range of clients and role types and I am happy to have an initial conversation about what is right for you. These roles will be on a permanent basis and will be based at a client site in Cheltenham. Please note, that due to the nature of these opportunities candidates must already hold DV level security clearance Roles available: Business Change Business Analyst Solutions Architect Cyber Engineer Systems engineer Scrum Master Developers (Java, C++ or Python) Automation Tester Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.

Cyber Security Architect / Assurance Location(s): Remote, Bristol and Newbury Type: Flexible, driven by work requirements IR Status: TBC Rate: £600 - £800 Clearance: Must have active MOD DV Length: 3-6 months Sanderson G&D are seeking an MOD DV Cleared Security Architect for an existing programme of work in the defence sector click apply for full job details

PRINCIPAL CYBERSECURITY ENGINEER SC Cleared - UK Only - (Sponsorship is unavailable) you must hold SC Clearance.Provide expert advice on the defences against cyber threats, data breaches, and emerging risks. This includes offering guidance on the selection, design, justification, implementation, and operational management of cybersecurity strategies, technologies, and standards. Contribute to the development and refinement of controls and processes to ensure the safety, confidentiality, integrity, availability, and overall security of data stored on systems. You will be responsible for identifying gaps in existing cybersecurity policies and procedures and, in collaboration with security, network, information governance, and technical leads, developing new measures to address these gaps. KEY RESPONSIBILITIES: You will work closely with system and service owners, as well as internal and external stakeholders, to design, implement, and enforce appropriate protective and detective security controls, policies, and procedures. The role includes the administration and operational management of security tooling and SIEM platforms, with responsibility for monitoring, detecting, and responding to cyber threats, intrusions, and unauthorised or suspicious activity. This includes Microsoft Sentinel (data and source tuning, creation and maintenance of workbooks and connectors, and threat intelligence review), Microsoft Defender for Endpoint and Defender for Cloud, and Darktrace, including system and model tuning, email module management, and configuration of autonomous response actions. You will be responsible for incident response activities, including triaging security alerts, investigating incidents, coordinating escalation and remediation, and conducting root cause analysis. You must be able to communicate effectively about security incidents and cyber risks to both technical and non-technical stakeholders. The role works closely with the Security Operations Centre (SOC) partner, supporting the assessment and investigation of alerts and contributing to the development and refinement of incident response plans and playbooks. You will support vulnerability management activities, including vulnerability assessments, annual audits, and penetration testing. This includes preparing and presenting incident, threat, and compliance reporting to stakeholders at all levels, including compiling a monthly SIRO report. Continuous improvement is a core responsibility. You will conduct post-incident reviews, recommend control and process improvements, and contribute to the creation and maintenance of cybersecurity governance documentation. You will also research emerging cyber threats and mitigation strategies and provide reports or presentations to senior stakeholders as required. The role supports cybersecurity training and awareness initiatives, promoting a strong security culture and helping to upskill colleagues in cybersecurity best practices. You will also collaborate with solution architects and project teams to ensure security is embedded into system and application designs, supporting secure architecture and delivery from the outset. Compliance & Framework Alignment: Ensure security operations align with regulatory standards and frameworks such as NIST, ISO 27001, and NCSC CAF. Person SpecificationEssential: Demonstrated experience with Microsoft Sentinel, Microsoft Defender for Endpoint/Cloud SIEM tools, threat intelligence platforms, and vulnerability management. Technical experience securing Microsoft Azure and Amazon Web Services cloud environments as well as on-premise/virtual Microsoft technologies. Strong analytical, communication, and problem-solving skills, including the ability to produce clear technical and non-technical reports. Ability to analyse and interpret security events/logs and perform remediation work to address security issues. Desirable: Recognised cybersecurity certifications (e.g., CompTIA Security+, CEH, GIAC, CISSP). Experience with DarkTrace Qualifications Bachelor's degree in Cybersecurity or Computer Science Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk

Cyber Security GRC Consultant (DV Cleared) Location: Cambridgeshire / London, Hybrid - c. 3 days minimum on-site presence required Contract Type: Permanent & Full-time Salary: Competitive + Benefits About the Role As a Cyber Security Consultant, you will play a pivotal role in delivering Secure by Design risk and security assurance services within MOD and Public Sector environments. You'll collaborate with multi-disciplinary teams to define and implement security risk assessments and best practice solutions, ensuring alignment with business risk appetites and transformation goals. You'll be part of a knowledge-sharing culture, working alongside expert peers in Secure Architecture and Risk Planning. Key Responsibilities Deliver Secure by Design risk and security assurance functions within MOD/Public Sector. Lead and advise on risk management frameworks, ISMS, and Enterprise Security Risk Management. Facilitate security and risk workshops with Authority departments. Produce clear reporting on vulnerabilities, risks, controls, and treatment activities. Provide pragmatic remediation and risk management guidance. Support secure design across technology platforms including cloud infrastructures. Contribute to blogs and research within the business community. Experience Required The successful candidate will possess proven experience in cybersecurity, security architecture, threat modelling, or related fields within Public Sector and MOD and will have achieved or be working towards Full Membership of CIISEC and UK Cyber Security Council professional registration at either Chartered or Principal for Risk Management. Active DV clearance required Strong working knowledge of: Security Assurance Coordinator or Delivery Team Security Lead roles JSP440, JSP604/453 & JSP490 Working with system secure design MOD/GDS Secure by Design Principles Supplier Chain Assurance and Risks. Security related legislation (e.g. GDPR, PCI DSS, ICO requirements). Security Control Frameworks such as ISO 27001, NIST CSF and CIS Controls v8. HMG, NPSA and NCSC security policies, standards and guidance. Have experience building and implementing secure by design principals within the software development lifecycle (SDLC). Threat Modelling - Kill Chain - Attack tree analysis. Working understanding of: Cloud security including Azure, Amazon Web Service, Key Management Systems, Containerisation, Network Security Groups, Host based firewalls, Web Application Firewalls Physical Network Infrastructure, Anti-Patterns, Network Firewalls, IDS/IPS, DMZs AI use cases, secure configuration (ISO42001 knowledge preferable), ITHC scoping and remediation action plans. HLD and LLD reviews and analysis. Working knowledge and experience of tooling relating to cloud security posture management offerings, cloud native security (AWS/Azure) and endpoint security. Proficient in Public Key Infrastructure, Data at Rest/inTransit, Cryptography, Privileged User Access Management, Zero Trust, Cross Domain Solutions and Role-based Access Controls. Thrives on tackling challenges with creative solutions, challenging the normal. What's in it for You Hybrid Working: c. 3 days onsite per week. Career Development: Continuous learning and professional growth. Interested? Submit your application to learn more about this exciting opportunity Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.

Are you a Detection Engineer ready to take on the fight against modern adversaries? Join a well-established SOC working with high-profile Defence clients, where your expertise genuinely matters. In this hands-on technical role, you'll own the end-to-end design, development and maturity of detection logic across SIEM platforms-engineering effective responses to real-world attacker techniques. You'll operate with a high degree of autonomy, acting as a trusted SME across multiple secure environments within a complex MSSP setting. This is a standout opportunity to advance your career at the sharp end of cyber defence. Location: Hybrid working - 2 days per week in our Farnborough office. Security: You must hold or be eligible for SC Clearance. What you'll be doing: ? Design, build, test and continuously refine advanced SIEM detection logic, including rules, correlations and analytics. Research emerging threats, vulnerabilities and adversary TTPs, mapping them to MITRE ATT&CK to close detection and visibility gaps. Tune and validate detections to minimise false positives and deliver high-fidelity alerts for SOC analysts. Act as a technical authority, providing expert guidance to SOC Analysts, Architects and Engineers to strengthen overall detection capability. Define, implement and maintain technical detection standards across environments. Clearly communicate complex technical risks and detection logic to both technical teams and non-technical stakeholders. What you'll bring: Deep SIEM expertise, building advanced detection logic, automation and complex queries in Splunk (SPL) and Microsoft Sentinel (KQL). A proven track record delivering complex detection engineering projects within enterprise or MSSP environments. Strong analytical skills, with the ability to break down sophisticated attacks into actionable detection patterns. Confidence to own technical delivery end-to-end, driving work through to completion with minimal escalation. Expert knowledge of MITRE ATT&CK, with real-world application in detection engineering. A BSc in Computer Science, IT, or a related discipline. Solid scripting skills in Python, PowerShell, or similar, supporting automation and data manipulation. Experience developing detections in QRadar and/or conducting EDR-focused threat hunting (e.g. CrowdStrike, Microsoft Defender for Endpoint). Broad infrastructure awareness across Cloud (Azure/AWS), on-prem, and SaaS / PaaS / IaaS environments. If you are interested in this role but not sure if your skills and experience are exactly what we're looking for, please do apply, we'd love to hear from you! Employment Type: Full-time, Permanent. Location: Hybrid: 2 days per week in Farnborough. Security Clearance Level: SC Cleared or eligible. Internal Recruiter: Jane. Salary: To £65,000. Benefits: 25 days annual leave with the choice to buy additional days, health cash plan, life assurance and pension. Sopra Steria: Our Aerospace, Defence and Security business designs, develops and deploys digital solutions to Central Government clients. The work we do makes a real difference to the client's goal of National Security, and we operate in a unique and privileged environment. We are given time for professional development activities, and we coach and mentor our colleagues, sharing knowledge and learning from each other. We foster a culture in which employees feel valued and supported and have pride in their work for the customer, delivering outstanding rates of customer satisfaction in the UK's most complex safety- and security-critical markets.

Cyber Security Assurance Specialist SC Cleared We're supporting a leading UK research and technology organisation delivering nationally significant programmes, and they're looking for an SC cleared Cyber Security Assurance Specialist to play a key role in securing a complex, hybrid technology estate. The chosen candidate must have capabilites in risk assessments across IT, Cloud and OT environments with exposure to secure cloud or infrastructure design (Azure/M365).This is 8 month rolling contract, paying £407 PD Inside IR 35 to be based in Culham two to three days per week. Key responsibilities include: Conducting risk assessments across IT, cloud and OT environments Reviewing and advising on security architecture & design patterns Owning and maintaining enterprise risk registers Leading technical assurance reviews aligned to GovAssure / CAF / ISO27001 Supporting audit, compliance, and remediation activities Embedding security controls across platforms (Azure, M365, infrastructure) Working closely with engineering, architecture, and delivery teams Key experience: Strong experience in cyber security assurance / risk / governance roles Proven background in secure cloud or infrastructure design (Azure/M365) Experience with risk frameworks (ISO 31000, NIST, OWASP etc.) Knowledge of GovAssure, CAF, ISO27001, Cyber Essentials Entra ID / Azure / M365 SIEM / EDR / vulnerability management tools Access control models (RBAC/ABAC) Experience supporting audits, assurance reviews, and remediation plans Ability to translate technical risk into clear business language SC cleared, one stage, must be commutable from Cluham.

We are looking for a Managing Security Engineer to lead the design, implementation and documentation of enterprise security monitoring platforms. This is a key technical leadership role, responsible for ensuring the right tooling, controls and processes are in place to help protect and monitor our clients' environments. This opportunity is ideally suited to someone with strong hands-on experience deploying and managing Splunk at enterprise scale. In return, the role offers the chance to broaden your capability and gain deeper experience in Elastic Security, with support to build your expertise further. You will work closely with cross-functional teams to assess risk, design effective security controls and define testing requirements. You will champion security by design, promote engineering excellence and act as a trusted advisor to clients, helping them understand their security challenges and implement practical, effective solutions to strengthen their security posture. This is an excellent opportunity to deepen your hands-on cybersecurity expertise while making a meaningful impact across both client and organisational security. This role is permanent and requires full-time, on-site working in Hemel Hempstead. The successful candidate may also participate in an out-of-hours call-out rota. What you will be doing: Lead the deployment, management and optimisation of Splunk Enterprise and Splunk ES platforms in large, complex environments. Support and develop capability in Elastic Stack / Elastic Security, with training and upskilling provided as needed. Design, implement and maintain data pipelines, including log ingestion, enrichment and schema standardisation. Develop and tune security detection content, translating threat intelligence and TTPs aligned to MITRE ATT&CK into actionable, high-value alerts. Manage the full detection content lifecycle: design, test, deploy, monitor, tune and retire, using version control and rollback processes. Automate workflows and platform configurations using CI/CD, SOAR, scripting and Infrastructure as Code tools such as Terraform and Ansible. Ensure platform performance, stability and resilience through capacity planning, high availability, disaster recovery and proactive monitoring. Provide technical leadership and guidance to internal teams and clients on security monitoring strategy and best practice. What you will bring: Proven experience deploying and managing Splunk at enterprise scale. Strong hands-on knowledge of SIEM engineering, including indexing, parsing, onboarding and performance tuning. Experience designing and optimising detection content, including MITRE ATT&CK-aligned use cases and alert tuning to reduce noise. Good understanding of data pipeline engineering, log enrichment, data quality and large-scale ingestion architectures. Strong knowledge of SPL; experience with KQL and EQL would be beneficial, but is not essential. Experience with automation and Infrastructure-as-Code within security monitoring or SIEM environments. Solid understanding of SIEM platform operations, including clustering, scaling, high availability, disaster recovery and performance optimisation. Strong problem-solving skills and a proactive approach to improving security operations. An interest in developing expertise in Elastic Security, with support and training available as part of the role. If you are interested in this role but not sure if your skills and experience are exactly what we're looking for, please do apply, we'd love to hear from you! Employment Type: Full Time, Permanent Location: Hemel Hempstead Security Clearance Level: DV Cleared Internal Recruiter: Jane Salary: from £DOE Benefits: £5400 Car Allowance, 25 days annual leave with the option to buy additional days, private health care, life assurance, pension, and generous flexible benefits fund Loved reading about this job and want to know more about us? Sopra Steria's Aerospace, Defence and Security business designs, develops and deploys digital solutions to Central Government clients. The work we do makes a real difference to the client's goal of National Security, and we operate in a unique and privileged environment. We are given time for professional development activities, and we coach and mentor our colleagues, sharing knowledge and learning from each other. We foster a culture in which employees feel valued and supported and have pride in their work for the customer, delivering outstanding rates of customer satisfaction in the UK's most complex safety- and security-critical markets.

Security Architect - SC Cleared - Outside IR35 Location : London Length: Initial 6 Months Type : 1 day a week on-site Clearance : Active SC Clearance IR35: Outside Rate: £500 - £550 Contingency : Must be able to start within 1-2 weeks Sanderson G&D are seeking a Security Architect who will provide strategic cyber security advice and guidance to digital product teams, acting as a Close Support Partner to ensu click apply for full job details

Job Title: DV Cleared Technical Author Location: Cheltenham Duration: 6 months with likely extension Rate: Up to 650 per day via an approved umbrella company Must be willing and able to go through highest security clearance process Our client, a leading organisation in the Defence sector, is hiring an experienced Technical Author. This is a unique opportunity to contribute to critical systems and operational processes within a secure environment. What you'll be doing: Producing, maintaining, and managing high-quality technical documentation for classified systems Translating complex technical concepts into clear, concise, and accurate written materials suitable for secure audiences Developing system documentation including architecture, design documents, user guides, operational manuals, and SOPs Supporting accreditation, assurance, and compliance documentation Collaborating closely with engineers, architects, cyber specialists, and stakeholders to validate content Ensuring all documentation aligns with security policies, governance frameworks, and information assurance standards Managing document control, versioning, and configuration throughout system lifecycles Preparing materials for both technical and non-technical audiences What you'll bring: Proven experience as a Technical Author or Documentation Specialist in highly secure or classified environments Strong ability to document complex technical systems clearly and accurately Experience producing documentation for IT, cyber, data, or engineering systems Excellent written communication skills with keen attention to detail Familiarity with formal documentation standards and structured authoring methods Ability to work collaboratively with technical teams and security professionals Strong understanding of information security and handling requirements Desirable skills: Background supporting UK defence, intelligence, or national security projects Experience documenting cyber security, data platforms, or software-based systems Familiarity with accreditation, risk management, or assurance documentation Experience with document management tools and markup languages such as Confluence, SharePoint, Markdown, or XML This role offers a chance to work on vital projects within a dynamic, secure environment. If you hold the necessary clearance and are passionate about producing impactful technical documentation, we encourage you to apply today!