22 jobs found

The R&D team at Chainalysis is inspired by solving the hardest technical challenges and building products that establish trust in cryptocurrencies. We're a global organization that thrives on challenging work and doing it alongside exceptionally talented teammates. Our industry evolves rapidly, and our mission is to build a flexible, AI-driven platform that automates entity resolution, optimizes data labeling pipelines, and creates predictive models that identify illicit patterns before they accelerate. Our data and solutions have been used to solve some of the world's most high-profile criminal cases and grow consumer access to cryptocurrency safely. Now, by pairing the industry's most trusted blockchain data with agents that reason, investigate, and act, we help our customers scale their workflows as the cryptocurrency economy becomes increasingly mainstream. Chainalysis data has helped solve some of the world's highest-profile criminal and national-security cases and made it safer for people everywhere to access crypto. The Global Intelligence Team produces the attribution at the heart of that data - connecting on-chain activity to the real-world entities behind it, across the global crypto ecosystem. It's the intelligence data moat beneath every Chainalysis product, and what investigators, sanctions authorities, and national-security agencies rely on to follow the money and disrupt threats. Few threats test that mission harder than Iran. Through the IRGC and its Qods Force, a network of proxies and Shia militant groups, state-linked cyber actors, and a sprawling sanctions-evasion apparatus, the Islamic Republic has turned to cryptocurrency to raise, move, and launder value beyond the reach of the traditional financial system - from exchange-based sanctions evasion and crypto mining powered by subsidized energy, to oil- and commodity-for-crypto schemes, dual-use procurement, and the financing of proxies across the region. Making that activity visible on-chain is one of the most consequential problems in crypto intelligence today. As our Iran-focused intelligence analyst - the team's subject-matter expert on Iran and the IRGC - you'll own that problem end to end. This is a depth role: while our analysts cover the breadth of the crypto-services ecosystem, you'll go deep on a single, high-stakes domain - becoming the person, inside Chainalysis and increasingly across the industry, who understands how Iran and its proxies use crypto and can prove it on-chain. You'll own the attribution for Iran's crypto footprint, map how these networks actually operate, turn that into finished intelligence customers act on, and be the expert voice representing Chainalysis on Iran crypto threats. Who you'll work with You'll join a fast-moving, globally distributed team - analysts, threat-domain SMEs, data scientists, and engineers - collaborating across time zones, async and in real time. We move fast, hold each other to a high bar, and back each other up across regions. As the Iran SME, you'll be the single point of depth for the domain and a force multiplier for everyone working adjacent to it. In this role, you'll: Own Iran attribution end to end - the threat-actor entities, their definitions, and the accounts, addresses, and infrastructure they operate: Iranian exchanges and OTC/no-KYC networks, IRGC and IRGC-QF financing, Iranian proxy and Shia militant finance (e.g., Hezbollah, the Houthis, and Iraqi militias), sanctions-evasion infrastructure, Iranian ransomware and state-linked cyber operations, and oil-, commodity-, and procurement-for-crypto flows. Lead the attribution response to Iran-related sanctions events - when OFAC or allied authorities designate Iranian entities, actors, or infrastructure, drive the rapid, high-visibility on-chain attribution that turns those designations into coverage in our data, often against the clock. Map the networks on-chain - trace how Iranian actors raise, move, launder, and cash out value through Iranian VASPs, regional exchanges, mixers, no-KYC swaps, mining operations, and off-ramps, and keep that picture current as they adapt to pressure. Produce finished intelligence - advisory notes, customer and partner briefings, and contributions to flagship publications (the Crypto Crime Report and beyond) that make the Iran crypto threat legible and actionable. Be the named external expert - represent Chainalysis on Iran crypto threats at conferences, on panels, with the press, and in briefings to public- and private-sector partners. Help set the Iran collection agenda - surface what data we need on Iranian networks and feed those requirements into our collection process and priority intelligence requirements; you direct collection for the domain, but it runs through the team's apparatus and prioritization, not you alone. Translate typologies into detection - turn what you learn about Iranian methods into guidance that our products and our customers can operationalize. Build with AI - design and tune the automation that scales your analysis and the team's, and handle the hard cases automation can't. Level up the team - raise the bar on Iran and threat-finance tradecraft broadly, and partner closely with analysts, other SMEs, data science, and engineering. We're looking for candidates who have: Deep, demonstrable Iran expertise - real command of the IRGC and IRGC-Qods Force, Iran's proxy and Shia militant landscape, Iranian sanctions evasion, and/or Iran's illicit-finance and procurement systems. This is the core of the role, and we'll expect you to show it. On-chain tracing ability against Iranian targets - direct experience following Iranian crypto activity on-chain (Iranian exchanges, sanctions evasion, proxy or terror finance), or deep Iran threat-finance expertise paired with proven blockchain-tracing skill you can bring to bear here from day one. A national-security or threat-finance background - intelligence, sanctions, counter-threat-finance, or investigations, from the IC, Treasury/OFAC, law enforcement, the military, a think tank or research institution, or private-sector CTF/sanctions work. Regional fluency - a strong grasp of Iranian geopolitics, the proxy network, and regional financial flows. Farsi (or Arabic) language ability is a significant plus. Elite potential and a proven track record - exceptional aptitude, judgment, and work ethic; you've led hard problems end to end and you raise everyone around you. Excellent writing and communication - this is an outward-facing expert role; your intelligence has to land with analysts, customers, and senior audiences alike. AI-forward instincts - you build automation to scale your work and others', not just use it. Comfort working with data; blockchain forensics experience strongly preferred. 5+ years of relevant analytic, intelligence, or threat-finance experience for a Senior hire; 8+ years and recognized domain authority for a Staff hire. You might also have: Farsi language ability. Direct experience with OFAC sanctions, terror-finance designations, or the designation process. A record of published research or public speaking on Iran, sanctions evasion, or crypto threat finance. Familiarity with Iranian exchange infrastructure, crypto mining as a sanctions-evasion vector, or dual-use procurement networks. AI at Chainalysis AI is not a feature at Chainalysis - it is a new way of working. One that turns instructions into work done, and helps us move faster than the threats we're built to counter, and we expect our employees to take ownership of the output and ensure quality. As the world's most trusted blockchain analytics platform, Chainalysis sits at a rare intersection of proprietary data, regulatory relationships and crypto expertise that makes it uniquely placed to shape and lead the next era of AI-driven intelligence - and we expect everyone here, regardless of role, to be an active part of it. AI fluency is tied directly to how we measure performance and how we plan to win. There is no substitute for your own curiosity. We provide the tools, workflows, and space to experiment - but the expectation is that you develop these capabilities yourself, bring ideas, and collaborate across teams to reinvent the way work gets done. We are not using AI to do less. We are using it to do what was never possible before. About Chainalysis Chainalysis is the blockchain data platform, making it easy to connect the movement of digital assets to real-world services. Powered by deep blockchain data and AI, organizations can investigate illicit activity, manage risk exposure, and develop innovative market solutions built on the industry's most trusted blockchain intelligence. Our mission is to build trust in blockchains, blending safety and security with an unwavering commitment to growth and innovation. You belong here. At Chainalysis, we believe that diversity of experience and thought makes us stronger. With both customers and employees around the world, we are committed to ensuring our team reflects the unique communities around us. We're ensuring we keep learning by committing to continually revisit and reevaluate our diversity culture. We encourage applicants across any race, ethnicity, gender/gender expression, age, spirituality, ability, experience and more. If you need any accommodations to make our interview process more accessible to you due to a disability, don't hesitate to let us know. You can learn more here. We can't wait to meet you. . click apply for full job details

About the job Job summary Discover a career in your hands at HMRC. Whether you're seeking purpose, growth, or a workplace that gives you a true sense of belonging, hear from some of our employees as they share their story about what it's really like to work at HMRC. Visit our YouTube channel to watch the full series and come and discover your potential. Our team is rapidly growing as we invest in new technologies and capabilities, and we are in search of enthusiastic individuals who can help us in achieving our mission. We are continually improving the service we give to our customers and, in line with this, we are creating a new response and management team within the HMRC Fraud Prevention Centre. The Fraud Prevention Centre (FPC) is a strategic capability within HMRC Security, designed to safeguard customers and the organisation against identity-related fraud and emerging threats. Its mission is built on three interconnected pillars: Protection, Detection, and Response, all underpinned by advanced threat intelligence and customer support. The Centre operates across multiple functional areas, including Proactive Protection, Customer Support & Response, and Strategy & Advisory, to deliver a holistic approach to fraud prevention. Job description We're looking for a proactive and analytical professional to support HMRC's fight against identity fraud. You'll help lead data-driven investigations into suspicious activity related to identity verification and authentication services, while working with the team and partners, acting as a key contributor in a team that supports customers and provides insight into identity fraud activity and proactive searching for threats. This is an exciting opportunity to make a real difference, working in a dynamic and evolving environment. Person specification Manipulate and analyse large data sets and investigate suspicious activity. Learn, develop, and apply methods using data analytics techniques such as data mining, data matching, clustering analysis and outlier detection. Use basic scripting languages to develop visualisations and automate effective searches to build a growing analytical suite of capabilities that you can operate efficiently. Have strong communication skills and be able to demonstrate working across business and technical domains. You will have excellent interpersonal skills. Apply your knowledge of security and fraud risks to digital services. Support and deputise for the senior analysts, producing clear, insightful reports and presentations for senior stakeholders. You will be confident working in an environment that may flex its focus in response to emerging issues and have a delivery focus. You will be eager to learn and widen your experience in different areas of identity work. You will use your experience of scripting, for example SPL, Python, SQL, KQL to proactively search and discover anomalies. Be flexible and enthusiastic whilst working with some ambiguity as the team forms, grows and matures. Support senior managers in the reporting of metrics and support the wider aims of the HMRC Security Identity Team. Identify process improvement areas. Essential Criteria Knowledge of fraud detection techniques, including behavioural analysis and anomaly detection and investigation and OSINT (Open Source Intelligence) methods. Data analysis skills and experience with large data sets, with proficiency scripting complex queries in analysis environments. Solid technical understanding of web and API services (e.g. cookies, IP addresses, authentication processes) and threats to those services from cybercrime actors and tools. Experience using Security Information and Event Management (SIEM) platforms, preferably in a security operations setting. A sound understanding of Identity, Verification and Authentication principles. Desirable Criteria A degree in Data Analysis, Data Science, Information Security, Cyber Security, or other Cyber qualifications eg SANS, or at least previous experience in a relevant cyber role. Proven experience in fraud detection, cyber security, or threat intelligence within a large organisation. Active use of at least one of the following: Python, SQL, KQL, SPL. Important Additional Information The successful candidate may be required to apply for Developed Vetting (DV) clearance level once in post but must already hold or be willing to obtain Security Check (SC) clearance level before starting the role. Further Location Information Please ensure that you only apply for a location that you are willing and able to work from, as we will only make one offer of employment. Any additional notes included in a 'Further Location Preferences (optional)' field within the application form, will not be considered. Please be aware that you cannot change your location preference after submitting your application. Office closures For more information on where you might be working, review this information on our locations. If your location preference is for one of the following sites, it's important to note that these are not long-term sites for HMRC and we will require you to move to a new building in the future, subject to our location strategy and the applicable employee policies at that time. These sites are: Benton Park View, Newcastle - moving to Pilgrims Quarter, Newcastle Telford Plaza, Telford - moving to Parkside Court, Telford Trinity Bridge House, Salford - moving to an alternative office in Manchester/ Salford You will be given more information about what this means at the job offer stage. Leeds Locations Moves Adjustment Payment will be available for this role, provided the successful applicant is a current HMRC colleague in Bradford and meets the eligibility requirements outlined in the HMRC's Moves Adjustment Payment guidance. Benefits Alongside your salary of £37,682, HM Revenue and Customs contributes £10,916 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides (opens in a new window). HMRC operates both Flexible and Hybrid Working policies, allowing you to balance your work and personal commitments. We welcome applications from those who need to work a more flexible arrangement and will agree to requests where possible, considering our operational and customer service needs. We offer a generous leave allowance, starting at 25 days and increasing by a day for every year of qualifying service up to a maximum of 30 days. Pension - We make contributions to our colleagues' Alpha pension equal to at least 28.97% of their salary. Family friendly policies. Personal support. Coaching and development. To find out more about HMRC benefits and find out what it's really like to work for HMRC hear from our insiders or visit Thinking of joining the Civil Service Things you need to know Artificial intelligence Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance (opens in a new window) for more information on appropriate and inappropriate use. Selection process details This vacancy is using Success Profiles (opens in a new window), and will assess your Strengths and Experience. How to Apply As part of the application process, you will be asked to provide the following: A name-blind CV including your job history, previous experiences and qualifications. Qualifications are not mandatory for this role. A 750-word Personal Statement. Your Personal Statement should be used to describe how your skills and experience would be suitable for the advertised role, making reference to the Essential Criteria and Person Specification outlined in the advert. Please complete a separate statement (Max 250 words) for the Desirable Criteria where applicable. This is not essential for the role but may be considered by the vacancy-holder where candidates have the same scores at interview. Further details around what this will entail are listed on the application form. Prior to applications being sifted candidates will be asked to complete an additional IKM assessment. Candidates will be sent details of the assessment once the advert has closed. This assessment is a pass or fail and only those who pass will be considered at the sift stage. Sift In the event of a large number of applications being received, an initial sift may be held on your CV. At full sift your CV and your Personal Statement will be assessed, with the successful candidates being invited to interview. We may also raise the score required at any stage of the process if we receive a high number of applications. Interview During the panel interview, your experience will be assessed, and you will be asked strength-based questions to also explore what you enjoy and your motivations relevant to the job role. This is an example of a strengths-based question: . click apply for full job details

About the job Job summary Discover what it's like to work in a compliance role that makes an impact. Could you help us shape a stronger, fairer future? Your next career move starts here. HMRC's Fraud Investigation Service (FIS) is responsible for the department's civil and criminal investigations. Covert Operations, Digital Exploitation (CODE) sits within FIS. Working across Law Enforcement and government, CODE provides investigative tools and covert techniques to front-line investigations and works with key partners to develop and provide access to new technology and systems to enable investigators to respond to serious and complex tax evasion and crime. HMRC is faced with increasingly complex frauds committed by well-resourced and, often, digitally informed and aware criminal groups. This post sits within the CODE Digital Operations command that includes the Communications Data Unit (CDU) and the National Digital Investigation Unit (NDIU). This command recognises the importance and synergy between these two technical areas. This is an opportunity to join CODE Digital Operations during a crucial period of expansion, development of capability and impact. The National Digital Investigation Unit (NDIU) specialise in digital problem solving, drawing upon operational experience and pragmatic application of datasets, such as but not limited to Communications Data, Open Source Intelligence, vehicle telematics, ANPR data and digital forensics (handset downloads). Job description The NDIU is a team of Digital Investigators, which provide ongoing and dynamic operational advice and support to Risk Intelligence Service (RIS) and FIS case teams and wider internal 'customers' such as, the Priority Criminals Unit, Internal Investigations, Protected Persons Unit and the Operational Security network to name a few. Developing effective digital strategies is fundamental to NDIU assisting investigation teams to achieve meaningful operational outcomes. The NDIU is a national team, the role involves regular travel with overnight stays to attend training courses or work alongside colleagues, particularly within the first two years on the team. This is a fantastic opportunity to be part of a command that enhances HMRC's response to sophisticated organised crime and serious fraud. Our work is varied, rewarding and impactful, investigating the most harmful tax frauds and criminal groups. Using innovative digital approaches and techniques, you will be making decisions that will help tackle fraudsters who present the highest threat to the UK Exchequer. You will be working with like-minded people, who constantly look for opportunities to add value and share knowledge to drive investigations forward. Person specification As a Digital Investigator you will: Become proficient in the application of Digital Investigation techniques, exploiting social media, closed sources and emerging communication systems, using several bespoke third-party solutions. Consider and create bespoke digital strategies to assist and support high priority, complex and sensitive HMRC investigations. Provide advice to support proactive and reactive operations, including live deployments, to identify data acquisition and exploitation opportunities. Advice ranges from sustained dedicated support over many months to short term assistance. Provide guidance to Senior Investigation Officers/Investigators on the use of technology in investigations, using experience and knowledge to develop and progress digital strategies, in difficult or complex investigations. Gather intelligence and evidence on individuals, corporates, and organised crime groups to progress and enhance criminal investigations into attacks on our tax systems. Utilise digital investigation skills and bespoke tools to interrogate, evaluate and interpret relevant digital data sets. Identify, collate and exploit data from external and internal data sources to develop the most holistic picture of an individual. Conduct research, including internet and social networking analysis, to an evidential standard. Flexibility to travel within the role. There will be a bespoke training package depending on the previous experience of the successful candidate, which will require travel. Be part of 1 week in 4 on-call cadre. This is in line with Flexibility Payment 2. Essential Criteria A sound knowledge of Communications Data. An understanding of Digital Investigation opportunities and capabilities. An interest in current and emerging communications technologies. This role requires experience of conducting criminal investigations and a thorough working knowledge of Criminal Justice procedures. Including the following legislation and corresponding Codes of Practice: Investigatory Powers Act 2016 (IPA) Regulation of Investigatory Powers Act 2000 (RIPA) Police Act 1997 (PA) Proceeds of Crime Act 2002 (POCA) Criminal Procedures and Investigations Act 1996 (CPIA) Police and Criminal Evidence Act 1984 (PACE) Further Location Information Please ensure that you only apply for a location that you are willing and able to work from, as we will only make one offer of employment. Any additional notes included in a 'Further Location Preferences (optional)' field within the application form, will not be considered. Please be aware that you cannot change your location preference after submitting your application. Office Closures If your location preference is for the following site, it's important to note that this is not long-term site for HMRC and we will require you to move to a new building in the future, subject to our location strategy and the applicable employee policies at that time. For more information on where you might be working, review this information on our locations (opens in a new window) This site is: Benton Park View, Newcastle - moving to Pilgrims Quarter, Newcastle You will be given more information about what this means at the job offer stage. Flexibility Payment This post attracts a Level 2 Flexibility Payment (FP) that is paid monthly with salary. This FP allows HMRC flexibility to change your work pattern, at short notice, to meet business needs. You will be expected to undertake periods of On Call. You will also be expected to work additional hours, at weekends and outside your normal working hours/days (including bank holidays). In applying for a position and accepting the FP you agree that you can and will meet those attendance requirements. Note: Payment of FP is dependent on successful completion of role specific training and you will move to Level 2 FP eligibility in stages (see the attached document for details). FP levels are reviewed annually - on a business need and personal basis - and may be subject to change. Details of the Flexibility Payment can be found in the attached document. Qualifications Please advise on your CV that you are an accredited criminal justice professional or intelligence analyst, that you can commit to any required training, and that you hold at least one of the following: - HMRC BTEC Level 3 Advanced Diploma in Enforcement (Criminal Investigation) - HMRC Accredited Counter Fraud Qualification Level 4 Diploma - University of Portsmouth Counter Fraud Professional Accreditation Board (CFPAB) Accredited Counter Fraud Specialist. - University of Northumbria CFPAB Accredited Counter Fraud Specialist. - University of Portsmouth CFPAB Accredited Counter Fraud (Intelligence) Specialist. - University of Northumbria CFPAB Accredited Counter Fraud (Intelligence) Specialist. - Accredited Counter Fraud Intelligence Specialist (ACFIS) from the Counter Fraud Professional Accreditation Board (CFPAB) in conjunction with the University of Portsmouth. Current PIP2 Status - You must hold a current and active PIP2 (Investigator) accreditation issued by a recognised UK law enforcement body (e.g. the College of Policing or NCA). If your PIP2 accreditation is inactive, it must not have lapsed more than 24 months prior to your application, and you must be able to demonstrate relevant operational experience in managing or conducting serious and complex investigations within the last two years. Successful candidates with PIP2 status, will still be required to attend and pass HMRC's core learning programme and achieve Authorised Officer status through further classroom and practical training which will involve regular travel. Behaviours We'll assess you against these behaviours during the selection process: Making Effective Decisions Leadership Communicating and Influencing We only ask for evidence of these behaviours on your application form: Making Effective Decisions Leadership Technical skills We'll assess you against these technical skills during the selection process: You will be asked to prepare and deliver a 10-15 minute presentation on a recent example/case study of a digitally focussed investigation you carried out. This should highlight some of the challenges and techniques you used to reach the objectives. Benefits Alongside your salary of £37,682, HM Revenue and Customs contributes £10,916 towards you being a member of the Civil Service Defined Benefit Pension scheme . click apply for full job details

Job Title: Python Developer (Contract, Hybrid) Job Description Overview We are seeking a Python Developer to join a high-performing regulatory technology team within a leading investment bank. The successful candidate will design and develop scalable solutions supporting regulatory reporting platforms, ensuring compliance with evolving financial regulations while processing high volumes of transaction data. This role combines hands-on software engineering, data analysis, platform enhancement, and close collaboration with regulatory and business stakeholders. Key Responsibilities Design, develop and maintain enterprise-grade Python applications supporting regulatory reporting and compliance functions. Partner with Business Analysts, Compliance teams and Transaction Reporting SMEs to translate complex regulatory requirements into technical solutions. Build highly scalable data processing pipelines capable of handling millions of daily financial transactions. Conduct detailed data analysis, investigations, and root-cause assessments relating to reporting breaches and regulatory inquiries. Develop reconciliation and validation frameworks to ensure reporting accuracy and data integrity. Support remediation initiatives through the design of historical replay and data reconstruction capabilities. Drive system enhancements focused on performance, reliability, auditability and operational resilience. Manage and support software releases through the full development lifecycle, including testing, deployment and production support. Collaborate with cross-functional technology teams to deliver regulatory change programmes and strategic platform improvements. Required Skills & Experience Strong commercial Experience developing applications in Python . Proven Experience within investment banking , capital markets or financial services environments. Experience building scalable, high-volume data processing solutions. Strong understanding of transaction processing, financial data flows and regulatory reporting systems. Experience developing APIs and web applications using Flask or similar Python frameworks. Advanced SQL and database development Experience, ideally with Oracle Database . Strong data analysis and manipulation skills using Pandas . Experience developing reconciliation, validation or control frameworks. Knowledge of software engineering best practices, CI/CD and release management. Excellent stakeholder engagement skills, with Experience working directly with business and regulatory reporting teams. Desirable Experience Experience with transaction reporting regulations such as MiFID II , EMIR , SFTR , or similar. Experience with Elasticsearch . Knowledge of event-driven architectures and data replay/reprocessing frameworks. Experience with scheduling and orchestration tools such as Quartz . Exposure to regulatory remediation programmes and audit-driven development practices. Understanding of parallel processing and distributed computing techniques. Technical Stack Python Flask Pandas Oracle Database Elasticsearch Quartz Scheduler Git CI/CD Tooling Location Bromley, UK Rate/Salary .00 GBP Daily Trading as TEKsystems. Allegis Group Limited, Maxis 2, Western Road, Bracknell, RG12 1RT, United Kingdom. No. (phone number removed). Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands. If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at (url removed)> To access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go to (url removed)> We are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal data in the UK, EEA, Switzerland and the USA. If you would like to exercise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice at (url removed)/en-gb/privacy-notices for details on how to contact us. To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request. If you are resident in the UK, EEA or Switzerland, we will process any access request you make in accordance with our commitments under the UK Data Protection Act, EU-U.S. Privacy Shield or the Swiss-U.S. Privacy Shield.

Senior Cyber Security & Network Analyst Tadworth - Advisable to be a car driver due to the location of the business Hybrid - 2 days in the office - 3 WFH - ( fully office based for the first 4 weeks) flexible to adhoc weekend work as and when required We're seeking a Senior Cyber Security & Network Analyst to support and manage our IT network and security infrastructure, ensuring robust protection of business systems and data. Key Responsibilities Manage day-to-day cyber security operations and incident response Monitor and optimise security tools (SIEM, firewalls, endpoint security) Maintain and support network infrastructure (LAN/WAN, Wi-Fi, L2/L3) Identify threats, conduct investigations, and implement security fixes Support delivery of cyber security projects and ongoing improvements Key Skills & Experience Proven experience in cyber security operations and network infrastructure Strong knowledge of Palo Alto firewalls, SIEM tools, and endpoint security Experience with L2/L3 networking (Nexus, LAN/WAN, Wi-Fi) Vulnerability management (e.g. Qualys) and incident response expertise Understanding of data security, threat analysis, and security best practice Essential Requirements Strong problem-solving and analytical skills Excellent communication and stakeholder management Ability to work independently in a fast-paced environment Methodical, organised, and detail-oriented approach Office Angels is an employment agency and business. We are an equal-opportunities employer who puts expertise, energy and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities, abilities and more. By showcasing talents, skills and unique experiences in an inclusive environment, we help individuals thrive. If you require reasonable adjustments at any stage, please let us know and we will be happy to support you. Office Angels acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers. Office Angels UK is an Equal Opportunities Employer. By applying for this role your details will be submitted to Office Angels. Our Candidate Privacy Information Statement explaining how we will use your information is available on our website.

GRC Analyst - Data Protection & GDPR Fixed Term Contract, 12 months - £45k - £50k Location: Hybrid - Birmingham Your new company: I am looking to recruit a GRC Analyst, focusing on Data Protection and GDPR, to join a leader in the hospitality space, with the role focusing on GRC activities, with a strong focus on information security, privacy, and regulatory assurance across the organisation. The role responsibilities: This role focusses on data protection assurance and GDPR compliance, ensuring personal data is processed lawfully, and in line with regulatory and organisational requirements. Key parts of the role: Reviewing how personal data is used across systems, business processes, and technology solutions. Identifying opportunities to reduce, anonymise, or eliminate personal data processing where it is not essential to business needs. Support the review, development, and rollout of information security and data protection policies. Contribute to the management of information security, third party, and privacy risk registers. Assist with internal and external audits, including GDPR assurance, PCI DSS, and financial audits. Track remediation of identified security, privacy, and compliance issues to ensure timely closure. Support incident and breach response activities, including investigation, documentation, and follow-up actions. You will need: Strong understanding of GDPR, the UK Data Protection Act, and privacy and security control requirements. Experience working in GRC, information security, data protection, supplier assurance, or a related compliance role. Ability to interpret and assess technical and organisational controls. Strong analytical skills with excellent attention to detail. Confident written and verbal communication skills, able to engage across legal, technical, and operational teams. Experience contributing to incident or breach investigations. Ability to manage multiple competing priorities and constructively challenge established processes. Minimum 3 years' experience in a relevant role. CIPP/E, CIPM, CompTIA Security+, or BCS Practitioner Certificate in Data Protection, desirable. What you'll get in return: Salary of between £45k-£50k Hybrid working Company discounts A pension contribution matched at 1.5x, up to 5%. Private healthcare, dental plan, cycle to work, and keep-fit schemes. 26 days annual leave plus bank holidays. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk

SOC / Cyber Threat Detection Analyst - SANS/GIAC Cyber Threat Detection Analyst Location: Wokingham, Berkshire (On-site) Salary: Competitive (dependent on experience) + excellent benefits & training Security Clearance: Ideally SC Cleared or eligible for SC Role Overview As a Cyber Threat Detection Analyst, you will play a hands-on role within an advanced cyber defence function, focused on proactive threat hunting, adversary behaviour analysis, and high-fidelity threat detection across enterprise environments. This role goes beyond reactive alert handling. You will actively hunt for malicious activity using telemetry, SIEM data, and threat intelligence, develop hypotheses based on MITRE ATT&CK Tactics, Techniques, and Procedures (TTPs), and support incident management and response activities when threats are identified. We are open to experienced SOC Analysts where threat hunting, investigations, and proactive detection have formed a significant part of their role, and who are looking to further develop in a more hunting-led environment. This position is well suited to analysts who enjoy thinking like an attacker, have worked alongside or supported red team or purple team activities, and want to deepen their expertise in threat detection and detection engineering. Skills & Experience We're Seeking Experience in threat hunting, cyber threat detection, SOC, blue team, or cyber defence environments, with ideally around five years hands on experience. Strong hands-on experience using SIEM platforms, including: Microsoft Sentinel (KQL) Splunk (SPL) Elastic Security/Kibana (KQL, ESQL) Practical and operational understanding of MITRE ATT&CK, attacker techniques, and adversary tradecraft Experience working with Indicators of Compromise (IOCs) and threat intelligence feeds Solid experience across the security event life cycle, including detection, investigation, and incident management Hands-on experience with EDR/XDR technologies such as Microsoft Defender, CrowdStrike, SentinelOne, or Carbon Black Strong knowledge of networking fundamentals (TCP/IP, DNS, HTTP/S, Firewalls, VPNs, Proxy technologies) Experience analysing telemetry from Windows, Linux, identity, endpoint, and network sources Strong analytical mindset with the ability to clearly communicate findings, impact, and risk Key Responsibilities Conduct proactive threat hunting activities across log, endpoint, and network telemetry to identify suspicious, stealthy, or previously unknown threats Develop and execute hunt hypotheses aligned to MITRE ATT&CK TTPs, adversary behaviours, and emerging threat intelligence Write, refine, and optimise SIEM queries using KQL, SPL, Elastic/ESQL, and Kibana Query Language Perform IOC analysis, enrichment, and validation, integrating internal and external threat intelligence sources Lead investigations from initial detection through scoping, root cause analysis, and impact assessment Support incident management and incident response activities, including containment, remediation, escalation, and lessons learned Collaborate closely with SOC teams, incident responders, red teams, and purple teams to validate detections and improve defensive coverage Contribute to detection logic improvements, use-case development, and continuous enhancement of hunting methodologies Produce clear investigation write-ups, timelines, and recommendations for technical and non-technical stakeholders Security Certifications (Highly Beneficial) SANS/GIAC certifications, including but not limited to: GCIH - Incident Handler GCIA - Intrusion Analyst GCED - Enterprise Defender GCTI - Cyber Threat Intelligence GMON - Continuous Monitoring GDAT - Defending Advanced Threats GCAT - Advanced Threat Intelligence OSCP or equivalent offensive security qualifications Crest certifications, such as: Crest Practitioner Intrusion Analyst (CPIA) Crest Registered Intrusion Analyst (CRIA) Crest Certified Threat Intelligence Analyst (CCTIA) Crest Certified Blue Team Professional (CCBTP) Microsoft SC-200 or related detection and response certifications Other recognised cyber security or threat intelligence credentials

The Intelligence Database Manager (IDM) will be responsible for the effective use, maintenance, and development of Keoghs intelligence systems to help drive revenue growth and increase operational efficiencies. This role combines analytical expertise, robust data management skills and client engagement to ensure high-quality intelligence outputs, accurate data structures, and efficient workflows are maintained. The IDM will support investigations, operational teams, and strategic decision-making by transforming raw data into clear, actionable intelligence products and help drive high-quality fraud referrals both externally and internally. Key Responsibilities Database Management Manage, maintain, and optimise the organisation's intelligence database(s), ensuring data integrity, accuracy, and consistency. Create and maintain entity types, fields, data models, and controlled vocabularies. Implement and monitor data quality controls, including deduplication and audit processes. Manage user permissions, access levels, and security protocols in line with organisational policies. Fraud Identification Optimisation of all Davies Group data sources to maximise and drive internal fraud referrals. Oversee data ingestion, cleansing, validation, and structuring to support analytical outputs and optimise data matching solutions. Automate existing core data feeds to drive revenue growth and increase operational efficiencies. Identify further opportunities to enhance the scope and volume of information and intelligence being ingested into the database. Oversee querying and analysis of existing intelligence and fraud data to support CFS matters and enrich available evidence. Liaise with clients with regards to optimising fraud data washing processes and opportunities. Systems Development & Technical Support Work with IT and operational teams to enhance database functionality, reporting tools, scope of data to be ingested, and integration with other systems. Troubleshoot issues related to i2 software, database performance, and data workflows. Support upgrades and configuration changes to i2 and associated systems. Provide training, guidance, and support to colleagues on i2 tools and data handling best practices. Where necessary, and working with others, create business cases for IT investment to improve, operationalise, or implement data-enrichment improvements. Compliance & Governance Ensure all data held complies with legal, regulatory, and organisational requirements (e.g., GDPR, data retention, audit standards). Maintain accurate documentation of processes, data structures, and system changes. Support internal and external audits relating to data management and intelligence processes. Leadership The role includes responsibility for the performance and technical development of an Intel Assistant or equivalent. Financial Achieve objectives and financial targets Adhere to time recording policy Skills, Knowledge and Expertise Essential Proven experience using i2 Analyst's Notebook and/or i2 iBase in an analytical or intelligence environment. Strong understanding of data structures, relational databases, and data quality principles. Ability to be able to identify and manage data opportunities for inclusion within intelligence systems. Experience of working with clients to develop and optimise data matching solutions. Ability to interpret complex datasets and present findings clearly. Experience working with sensitive or confidential information. Excellent attention to detail and problem-solving skills. Strong communication skills, with the ability to explain technical concepts to non-technical audiences. Desirable Experience in investigations, fraud analysis, law enforcement, insurance intelligence, or similar fields. Knowledge of SQL, data modelling, or ETL processes. Familiarity with other analytical and data management tools (e.g., Power BI, Tableau, Egress, GIS platforms). Experience developing or delivering training on analytical tools. Understanding of intelligence cycle principles and analytical methodologies. Benefits Davies Incentive Plan 25 days holiday per year which increases with level of service (opportunity to buy & sell 3 days) Family Cover Private Medical Insurance (Bupa) Simply Health Care Cash Plan WeCare - 24/7 online GP, mental health support and virtual wellbeing covering a whole host of topics to do with health, mental health, wellbeing & healthy living and financial & legal wellbeing Death in Service Critical Illness Cover PHI/Income Protection (Private health insurance) Pension Contribution based 5% Employee / 3% Employer Employee Resource Groups Employee Volunteering Programme Cycle to Work Scheme Tech Scheme Season Ticket Loan Gym Flex Access to Online Discount Sites Discounted Gourmet Society Membership Discounted Tickets for Merlin Attractions nationwide Discounts at local retail outlets after successfully completing probation

Ready for your next move in cyber security? Join our fast-growing Security Operations Centre, where you'll help defend multiple organisations across a wide range of industries - from critical infrastructure to complex enterprise environments. As part of our SOC team, you'll play a key role in strengthening and maturing our services, helping deliver smart, efficient and high-impact security outcomes for our clients. You won't just monitor alerts. You'll investigate, enhance detection capability, influence processes and help shape how we defend modern environments. You'll gain exposure to real-world threats, diverse technology stacks and large-scale operations - giving you the kind of hands-on experience that accelerates careers. If you're curious, analytical and enjoy solving problems that genuinely matter, this could be your next challenge. Our team operates a 24/7 SOC. This role involves working day and night shifts. Office based in Hemel Hempstead. You must be eligible for SC Clearance. What you'll be doing: Monitoring and analysing security alerts and events, conducting initial investigations responding. Escalating complex incidents to Senior Analysts for deeper analysis and resolution. Managing SOC incident queues. Maintaining and improving asset baselines across customer environments. Producing clear, insightful reports for both technical and non-technical audiences. Enhancing detection rules and use cases aligned to MITRE ATT&CK and threat-informed defence. What you'll bring: Hands-on experience with Microsoft Sentinel and Splunk. Knowledge of the MITRE ATT&CK framework. Understanding of client-server and multi-tier applications, databases, firewalls, VPNs and endpoint security. Solid networking fundamentals (TCP/IP, LAN/WAN, HTTP, SMTP, FTP, LDAP, etc.). Strong analytical thinking and structured problem-solving. An entry-level cyber security certification (e.g. Security+, CEH, CPSA) or similar. It would be great if you had: ? Scripting or programming skills (Python, PowerShell, Bash, Perl, C++). Broader SIEM experience (e.g. QRadar). Additional SOC or CREST certifications. If you're interested in this role but not sure if your skills and experience are exactly what we're looking for, please do apply, we'd love to hear from you! Employment Type: Full-time, Permanent. Location: Hemel Hempstead. Security Clearance Level: SC. Internal Recruiter: Jane. Salary: £42,000 to £58,000. Benefits: 25 days annual leave with the choice to buy additional days, health cash plan, life assurance and pension. Shift allowance. Sopra Steria: Our Aerospace, Defence and Security business designs, develops and deploys digital solutions to Central Government clients. The work we do makes a real difference to the client's goal of National Security, and we operate in a unique and privileged environment. We are given time for professional development activities, and we coach and mentor our colleagues, sharing knowledge and learning from each other. We foster a culture in which employees feel valued and supported and have pride in their work for the customer, delivering outstanding rates of customer satisfaction in the UK's most complex safety- and security-critical markets.

We're expanding our Security Operations Centre in Farnborough and looking for sharp, collaborative L2 SOC Analysts to protect enterprise-scale environments across the Defence sector. You'll investigate real threats, tune detections, and make measurable impact-using Microsoft Sentinel, Splunk, and MISP. Your work fuels national security. Your growth fuels our mission. Role based on site in our Farnborough office and is shift work. 2 x 6am to 6pm, 2 x 6pm to 6am, 4 days off. You do need to be eligible for DV Clearance for this role, and cannot start until your clearance is through. What you'll be doing: Monitor, analyse security alerts and events, conduct initial investigations, and determine the appropriate response. Raise complex incidents to Senior Analysts. Manage SOC Incident queues. Support the maintenance of monitored asset baselines of the customer environments. Prepare reports for managed clients to both technical and non-technical audiences, Collaborate on improving detection rules and use cases aligned with Mitre Att&ck and threat-informed defense. Participate in a team effort to guarantee that corporate data and technology platform components are shielded from known threats. Collaborate with team members to maintain and update security incident documentation, including incident reports, analysis findings, and recommended mitigation strategies. Aid the development and use of threat intelligence throughout the service. Ability to work shifts from our office in Farnborough. What you'll bring: Experience demonstrated in Security Operations Centre. Experience using Microsoft Sentinel and Splunk. Knowledge and experience with Mitre Att&ck Framework. Basic knowledge of client-server applications, multi-tier web applications, relational databases, firewalls, VPNs, and enterprise AntiVirus products. Understanding of networking principles including TCP/IP, WANs, LANs and commonly used Internet protocols such as SMTP, HTTP, FTP, POP, LDAP. Entry level cyber security certification (e.g. CompTIA Security+, CEH, CPSA). CREST Practitioner Intrusion Analyst/Blue Teams Level 1 or other SOC related certifications. Completed an academic module in cyber security or a related subject It would be great if you had: Programming and scripting such as Python, Perl, Bash, PowerShell, C++. CREST Practitioner Intrusion Analyst/Blue Teams Level 1 or other SOC related certifications. Experience with SIEM technologies, namely Sentinel and Splunk, with some experience with QRadar. If you are interested in this role but not sure if your skills and experience are exactly what we're looking for, please do apply, we'd love to hear from you! Employment Type: Permanent Location: Office based in Farnborough Security Clearance Level: Eligible for DV Clearance Internal Recruiter: Jane Salary: To £58K Depending on experience, plus on shift allowance. Benefits: 25 days annual leave with the choice to buy additional days, health cash plan, life assurance, pension. Loved reading about this job and want to know more about us? Sopra Steria's Aerospace, Defence and Security business designs, develops and deploys digital solutions to Central Government clients. The work we do makes a real difference to the client's goal of National Security, and we operate in a unique and privileged environment. We are given time for professional development activities, and we coach and mentor our colleagues, sharing knowledge and learning from each other. We foster a culture in which employees feel valued and supported and have pride in their work for the customer, delivering outstanding rates of customer satisfaction in the UK's most complex safety- and security-critical markets.

SOC Engineer - SIEM, Exabeam, SOAR, EDR, IDS/IPS, MITRE, Azure, SC-200, SC-100, Our leading global law firm client are currently looking to take on a new SOC Engineer (SIEM, Exabeam, SOAR, EDR, IDS/IPS, MITRE, Azure, SC-200, SC-100) to join their team on a contractual basis. The firm are an extremely modern law firm which offer a healthy hybrid working solution 2-3 days per week in London and offer a great deal of autonomy and technical exposure. This SOC Engineer (SIEM, Exabeam, SOAR, EDR, IDS/IPS, MITRE, Azure, SC-200, SC-100) role, will be responsible for the enhancement of existing SIEM platform and improve performance, coverage and fidelity by conducting regular assessments of the SIEM architecture. To be considered for this SOC Engineer (SIEM, Exabeam, SOAR, EDR, IDS/IPS, MITRE, Azure, SC-200, SC-100)Defender) role, it's ideal you have: 3 + years within a similar role Ideal but not required law firm experience Security qualifications such as CISSP, CISM, CEH, CompTIA Sec+ or others SIEM Engineering & Maturity Enhance and optimise the existing SIEM platform to improve performance, coverage, and fidelity. Conduct regular assessments of SIEM architecture and propose improvements to ingestion pipelines, parsing rules, correlation logic, and storage management. Implement automation and orchestration components (SOAR) to streamline incident response activities. Log Source Onboarding & Integration Identify, prioritise, and onboard new log sources from cloud, on-prem, network, endpoint, identity, and application platforms. Develop and maintain custom parsers, connectors, and ingestion playbooks. Work with internal teams and vendors to ensure high-quality, reliable telemetry and error-free ingestion. Use Case & Detection Content Development Design, implement, test, and tune detection use cases based on attacker techniques (MITRE ATT&CK), threat intelligence, and risk appetite. Build correlation rules, anomaly-based detections, dashboards, and alerting workflows. Regularly review detection efficacy and reduce false positives through tuning and logic refinement. SOC Support & Incident Response Work closely with SOC analysts to validate and refine detection logic. Support incident investigations through SIEM searches, enrichment, and data modelling. Provide technical SME support for complex incidents that require deep SIEM or log knowledge. Documentation & Governance Maintain high-quality documentation covering data models, feed onboarding, use cases, correlation logic, and architecture. Ensure alignment with internal controls, compliance requirements, and industry standards. Education, Skills & Experience Technical Expertise Hands-on experience with leading SIEM platforms (e.g., Exabeam, LogRhythm, ArcSight, Microsoft Sentinel, Splunk, QRadar, Elastic). Strong understanding of log formats (JSON, syslog, XML, CEF, etc.) and ingestion technologies (Syslog, API, Event Hubs, Kafka, Agents). Practical knowledge of detection engineering, threat modelling, and attacker behaviour analysis. Experience building and tuning correlation rules, searches, and dashboards. Familiarity with SOAR platforms and automation workflows. Security Knowledge Strong understanding of networking, Windows/Linux systems, Cloud platforms (Azure/AWS/GCP), identity systems, and endpoint protection technologies (e.g. SentinelOne and Microsoft Defender) Knowledge of MITRE ATT&CK, cyber kill chain, and threat hunting methodologies. Must Have Level 4 or higher qualification in a computing subject, or equivalent experience IT experience including both IT Infrastructure and Information Security roles Relevant professional certifications that validate the fundamental skills required to perform the role, e.g. GIAC (GCIA,GCDA,GMON) Microsoft SC-200/SC-100, CompTIA Secure Infrastructure Specialist (CSIS), SSCP/CISSP etc Strong skill level in scripting technologies, including Python, MS PowerShell and PowerApps Ability to conduct research into Infrastructure issues and products as required Self-starting with strong interpersonal, written, and oral communication skills. Ability to engage colleagues at all levels and project a solid, professional attitude consistently. Nice to have Data Loss Prevention Secure Remote Access solutions Network Security solutions Open Source and Cyber Threat Intelligence Suitable experience working with the market leading technology vendor product suites Experience in software-defined and cloud services such as SaaS, IaaS, PaaS and DaaS Experience in Disaster Recovery Management and Business Continuity Knowledge of applicable data privacy practices and laws

RSR is a public safety & enterprise security recruitment specialist. We assist public safety employers find the right talent. We assist all employers when they want to source public safety and enterprise security skills and experience. 4 x Intelligence Analysts Location: Birmingham Pay Rate: 170 per day Contract: 6 months+ Working Pattern: Shift-based (including early mornings, late evenings and weekends) due to the shift patterns you should have access to own vehicle Vetting Requirement: SC Clearance (must be eligible) About the Role We are seeking an experienced and highly analytical Intelligence Analyst to join a dynamic intelligence function on a contract basis. This is a critical role where you will deliver high-quality analytical products to support decision-making at strategic, tactical, and operational levels. You will provide insight into threats, risks, and vulnerabilities, helping shape responses to complex challenges. This opportunity is ideal for someone with strong analytical expertise, experience working with complex datasets, and the ability to operate effectively in high-pressure environments. Key Responsibilities Analysis & Intelligence Development Conduct strategic, tactical, and operational analysis using a range of analytical techniques Identify patterns, trends, and intelligence gaps to inform decision-making Assess threat, risk, and harm, providing clear recommendations Develop and contribute to intelligence collection plans Maintain up-to-date knowledge of emerging trends and risks Strategic Support & Advisory Provide expert analytical advice to support prioritisation and resource allocation Identify key priorities using structured risk assessment approaches Deliver insights to senior stakeholders to guide operational activity Support governance processes to ensure a coordinated response to threats Stakeholder Engagement Build and maintain effective relationships with internal teams and external partners Prepare and deliver high-quality briefings and presentations Translate complex data into clear, actionable insights Work closely with investigators to interpret and develop evidential material Operational & Evidential Support Produce analytical products to support investigations and operational activity Prepare evidence and, where required, present findings in formal settings Provide detailed analytical support to serious and complex cases Monitoring & Evaluation Conduct horizon scanning and environmental analysis Deliver detailed reports identifying emerging risks and opportunities Communicate findings, hypotheses, and recommendations clearly About You Essential Experience & Knowledge About You Essential Experience & Knowledge Degree level in relevant subject or equivalent qualification or experience within a similar environment Experience as an Intelligence Analyst within a law enforcement agency (LEA) Experience of collating, evaluating, structuring and processing data to identify patterns, series, similarities and discrepancies within a variety of information types Ability to use software packages in the charting and analytical preparation of data Evidence of working with, Interpreting & simplifying complex data sets Highly competent in the use of Microsoft packages, advanced skills in Microsoft Excel Evidence a good understanding of the requirements of the National Intelligence Model (NIM) Understanding of, and ability to apply, relevant legislation (i.e ECHR, RIPA, Data Protection) Experience of working within a team and on own initiative, effectively planning and organising activities and resources to meet objectives Desirable Experience working in an intelligence or analytical role Knowledge of crime trends, risk modelling, or investigative environments Experience using specialist analytical tools (e.g. data visualisation or mapping software) Understanding of the distinction between analysis, policy, and decision-making Due to the high volume of applications we receive, if you do not hear from us within 7 working days, your application has been unsuccessful. If this role is not for you but you do know somebody who would be interested, please feel free to refer them to us! We have a "Refer A Friend" bonus scheme and we will reward you retail vouchers for any referrals who are not already known to us and are successfully placed! Red Snapper Recruitment is a member of the Red Snapper Group. The Red Snapper Group acts as an employment agency (permanent) and as an employment business (temporary) - a free and confidential service to candidates. The Red Snapper Recruitment Group is an equal opportunities employer.