SecOps Engineer - Central London (hybrid working) Up to £75,000 PA Well-established and highly profitable construction engineering business is seeking an experienced SecOps Engineer to join them on a permanent basis. This is a critical leadership role within an organisation undergoing significant digital transformation, with ambitious growth and acquisition plans driving demand for scalable, standardised and efficient business applications. This role is ideal for a proactive security professional with strong technical expertise across application, network and infrastructure security. You will play a key part in implementing security controls, mitigating risk and contributing to the continuous improvement of the company's overall security posture. Responsibilities: Monitor security tools including SIEM (QRadar) and respond to threat detection alerts Triage, analyse and prioritise security (via ServiceNow) Investigate root causes of security issues and design effective remediation solutions Oversee Patch Management Conduct vulnerability scans with Qualys, analyse results and prioritise remediation Document SecOps processes and create knowledge base articles in line with best practices Automate security tasks and toolchains using scripting (PowerShell, Batch, etc.) Collaborate with external SOC teams Prepare post-incident reports and root cause analyses Manage end-user device (EUD) security via MS Intune, Sophos and NinjaOne Schedule and assess vulnerability scans on critical infrastructure Maintain patching compliance for OS, Microsoft Office and third-party applications Support infrastructure teams to deploy systems, enhance security policies and manage security-driven changes Produce weekly security operations reports Manage Cisco Umbrella web filtering and SSL inspection policies Requirements: Previous hands-on experience in SecOps or Incident Response Recognised Security certifications such as Security+, CEH, or Microsoft security certifications Strong knowledge of Microsoft Windows OS security and hardening Working PowerShell scripting ability for automation tasks Solid understanding of cloud-native security across M365, Azure and AWS Experience with enterprise IT infrastructure Any experience with the following will be highly favoured: Strong experience with Qualys Exposure to Varonis Network security knowledge or relevant certifications (TCP/IP, VPNs, routing, segmentation) Experience working with ServiceNow Initially 4 days per week onsite, dropping to 3 once passed probation (this is not negotiable).
May 02, 2026
Full time
SecOps Engineer - Central London (hybrid working) Up to £75,000 PA Well-established and highly profitable construction engineering business is seeking an experienced SecOps Engineer to join them on a permanent basis. This is a critical leadership role within an organisation undergoing significant digital transformation, with ambitious growth and acquisition plans driving demand for scalable, standardised and efficient business applications. This role is ideal for a proactive security professional with strong technical expertise across application, network and infrastructure security. You will play a key part in implementing security controls, mitigating risk and contributing to the continuous improvement of the company's overall security posture. Responsibilities: Monitor security tools including SIEM (QRadar) and respond to threat detection alerts Triage, analyse and prioritise security (via ServiceNow) Investigate root causes of security issues and design effective remediation solutions Oversee Patch Management Conduct vulnerability scans with Qualys, analyse results and prioritise remediation Document SecOps processes and create knowledge base articles in line with best practices Automate security tasks and toolchains using scripting (PowerShell, Batch, etc.) Collaborate with external SOC teams Prepare post-incident reports and root cause analyses Manage end-user device (EUD) security via MS Intune, Sophos and NinjaOne Schedule and assess vulnerability scans on critical infrastructure Maintain patching compliance for OS, Microsoft Office and third-party applications Support infrastructure teams to deploy systems, enhance security policies and manage security-driven changes Produce weekly security operations reports Manage Cisco Umbrella web filtering and SSL inspection policies Requirements: Previous hands-on experience in SecOps or Incident Response Recognised Security certifications such as Security+, CEH, or Microsoft security certifications Strong knowledge of Microsoft Windows OS security and hardening Working PowerShell scripting ability for automation tasks Solid understanding of cloud-native security across M365, Azure and AWS Experience with enterprise IT infrastructure Any experience with the following will be highly favoured: Strong experience with Qualys Exposure to Varonis Network security knowledge or relevant certifications (TCP/IP, VPNs, routing, segmentation) Experience working with ServiceNow Initially 4 days per week onsite, dropping to 3 once passed probation (this is not negotiable).
Join our Architecture Services team! The Architecture Services Team comprises members from many different technical and non-technical backgrounds; from network and security to datacentre, end-user compute and service architecture. The team provides customers and the wider Softcat team sight of the broader picture - helping to pull all pieces of the jigsaw together and solving the puzzle of how business requirements are interpreted into technical solutions involving multiple technical verticals. Success. The Softcat Way. There is a uniqueness to Softcat - what we do, how we do it and why we do it. At the heart of our operations are our core values: Passion, Intelligence, Fun, Responsible and Community. These values are the pillars that Softcat and guide our every action. As a Senior Solutions Architect focused on Cyber Security, you'll be part of the Architecture Services Team. In this role, you'll be the first port of call for creating Cyber Security solutions that solve customer problems. You'll be a customer-facing technical leader responsible for delivering consultative advice, expertise, and guidance on technology strategy and how customers can use technology to solve business problems. The role spans the opportunity cycle - owning and leading architecture discovery through to successful delivery and validation - and includes building capability around chosen Cloud Security solutions and practices, with particular emphasis on Application Security Testing, Exposure Management, and Cloud Application Detection & Response. You will be considering customer's protection of applications running in the cloud, hosted in the cloud and developed in the cloud, as well of variations of cloud itself. The role will, however, cover all areas of Cyber Security. You'll also bring practical awareness of Governance, Risk & Compliance (GRC) and AI Security, helping customers adopt modern cloud and AI capabilities securely and responsibly. You'll be responsible for: Lead customer discovery and translate business, technical, and risk requirements into clear, deliverable security architectures. Act as Technical Design Authority on complex cloud and security engagements. Working with other Architecture Services members, Professional Services Consultants, Cyber Assessment Team and Architects to develop cross-discipline and multi-vendor solutions for customers. Working with the Softcat Sales Specialists and the Softcat Account Management team to provide technical information and expertise to assist customers in their business needs. Providing advice to sales and customers regarding the application of a Cyber Security discipline. We'd love you to have A passion for technology and making technology work for businesses, along with a desire to share your knowledge and experience with those around you. Senior-level experience in solutions architecture/security architecture, delivering discovery, design, and governance across complex environments. Proven capability to design security controls across: Cloud workload protection (VM/container/serverless security patterns) DevSecOps / secure SDLC (threat modelling, CI/CD security, supply chain awareness) Client-side protection (endpoint security and operational response integration) Working knowledge of relevant vendors solutions such as: Tenable, Orca, Snyk Wiz, Crowdstrike and Palo Alto. We also acknowledge that the confidence gap and imposter syndrome are a real thing and can get in the way of us meeting fantastic talent, so please don't hesitate to apply - we would love to hear from you! Work in a way that works for you We recognise that everyone is different and that the way in which people want to work and deliver at their best is different for everyone too. In this role, we can offer the following flexible working patterns: Hybrid working Working flexible hours - flexing the times you start and finish during the day Flexibility around school pick up and drop offs Working with us Wherever you work, we want you to experience the freedom and autonomy to realise your potential. You will feel supported by a team that celebrates individuality, encourages different perspectives, and embraces every background. Join us To become part of the success story, please apply now. If you have a disability or neurodiversity, we can provide support or adjustments that you may need throughout our recruitment process or any mitigating circumstance you wish for us to consider. Any information you share on your application will be treated in confidence. You can find out more about life at Softcat and our commitments to diversity and inclusion at Here at Softcat, we don't prohibit the use of AI (artificial intelligence) in our application process, as we understand how far it can go to creating a truly equitable candidate experience. That being said, as a culture-driven organisation, we believe that the genuine essence of each person is what truly matters, so we highly encourage you to be as authentically you as possible when submitting your application to showcase your true and whole self.
May 01, 2026
Full time
Join our Architecture Services team! The Architecture Services Team comprises members from many different technical and non-technical backgrounds; from network and security to datacentre, end-user compute and service architecture. The team provides customers and the wider Softcat team sight of the broader picture - helping to pull all pieces of the jigsaw together and solving the puzzle of how business requirements are interpreted into technical solutions involving multiple technical verticals. Success. The Softcat Way. There is a uniqueness to Softcat - what we do, how we do it and why we do it. At the heart of our operations are our core values: Passion, Intelligence, Fun, Responsible and Community. These values are the pillars that Softcat and guide our every action. As a Senior Solutions Architect focused on Cyber Security, you'll be part of the Architecture Services Team. In this role, you'll be the first port of call for creating Cyber Security solutions that solve customer problems. You'll be a customer-facing technical leader responsible for delivering consultative advice, expertise, and guidance on technology strategy and how customers can use technology to solve business problems. The role spans the opportunity cycle - owning and leading architecture discovery through to successful delivery and validation - and includes building capability around chosen Cloud Security solutions and practices, with particular emphasis on Application Security Testing, Exposure Management, and Cloud Application Detection & Response. You will be considering customer's protection of applications running in the cloud, hosted in the cloud and developed in the cloud, as well of variations of cloud itself. The role will, however, cover all areas of Cyber Security. You'll also bring practical awareness of Governance, Risk & Compliance (GRC) and AI Security, helping customers adopt modern cloud and AI capabilities securely and responsibly. You'll be responsible for: Lead customer discovery and translate business, technical, and risk requirements into clear, deliverable security architectures. Act as Technical Design Authority on complex cloud and security engagements. Working with other Architecture Services members, Professional Services Consultants, Cyber Assessment Team and Architects to develop cross-discipline and multi-vendor solutions for customers. Working with the Softcat Sales Specialists and the Softcat Account Management team to provide technical information and expertise to assist customers in their business needs. Providing advice to sales and customers regarding the application of a Cyber Security discipline. We'd love you to have A passion for technology and making technology work for businesses, along with a desire to share your knowledge and experience with those around you. Senior-level experience in solutions architecture/security architecture, delivering discovery, design, and governance across complex environments. Proven capability to design security controls across: Cloud workload protection (VM/container/serverless security patterns) DevSecOps / secure SDLC (threat modelling, CI/CD security, supply chain awareness) Client-side protection (endpoint security and operational response integration) Working knowledge of relevant vendors solutions such as: Tenable, Orca, Snyk Wiz, Crowdstrike and Palo Alto. We also acknowledge that the confidence gap and imposter syndrome are a real thing and can get in the way of us meeting fantastic talent, so please don't hesitate to apply - we would love to hear from you! Work in a way that works for you We recognise that everyone is different and that the way in which people want to work and deliver at their best is different for everyone too. In this role, we can offer the following flexible working patterns: Hybrid working Working flexible hours - flexing the times you start and finish during the day Flexibility around school pick up and drop offs Working with us Wherever you work, we want you to experience the freedom and autonomy to realise your potential. You will feel supported by a team that celebrates individuality, encourages different perspectives, and embraces every background. Join us To become part of the success story, please apply now. If you have a disability or neurodiversity, we can provide support or adjustments that you may need throughout our recruitment process or any mitigating circumstance you wish for us to consider. Any information you share on your application will be treated in confidence. You can find out more about life at Softcat and our commitments to diversity and inclusion at Here at Softcat, we don't prohibit the use of AI (artificial intelligence) in our application process, as we understand how far it can go to creating a truly equitable candidate experience. That being said, as a culture-driven organisation, we believe that the genuine essence of each person is what truly matters, so we highly encourage you to be as authentically you as possible when submitting your application to showcase your true and whole self.
Join our Architecture Services team! The Architecture Services Team comprises members from many different technical and non-technical backgrounds; from network and security to datacentre, end-user compute and service architecture. The team provides customers and the wider Softcat team sight of the broader picture - helping to pull all pieces of the jigsaw together and solving the puzzle of how business requirements are interpreted into technical solutions involving multiple technical verticals. Success. The Softcat Way. There is a uniqueness to Softcat - what we do, how we do it and why we do it. At the heart of our operations are our core values: Passion, Intelligence, Fun, Responsible and Community. These values are the pillars that Softcat and guide our every action. As a Senior Solutions Architect focused on Cyber Security, you'll be part of the Architecture Services Team. In this role, you'll be the first port of call for creating Cyber Security solutions that solve customer problems. You'll be a customer-facing technical leader responsible for delivering consultative advice, expertise, and guidance on technology strategy and how customers can use technology to solve business problems. The role spans the opportunity cycle - owning and leading architecture discovery through to successful delivery and validation - and includes building capability around chosen Cloud Security solutions and practices, with particular emphasis on Application Security Testing, Exposure Management, and Cloud Application Detection & Response. You will be considering customer's protection of applications running in the cloud, hosted in the cloud and developed in the cloud, as well of variations of cloud itself. The role will, however, cover all areas of Cyber Security. You'll also bring practical awareness of Governance, Risk & Compliance (GRC) and AI Security, helping customers adopt modern cloud and AI capabilities securely and responsibly. You'll be responsible for: Lead customer discovery and translate business, technical, and risk requirements into clear, deliverable security architectures. Act as Technical Design Authority on complex cloud and security engagements. Working with other Architecture Services members, Professional Services Consultants, Cyber Assessment Team and Architects to develop cross-discipline and multi-vendor solutions for customers. Working with the Softcat Sales Specialists and the Softcat Account Management team to provide technical information and expertise to assist customers in their business needs. Providing advice to sales and customers regarding the application of a Cyber Security discipline. We'd love you to have A passion for technology and making technology work for businesses, along with a desire to share your knowledge and experience with those around you. Senior-level experience in solutions architecture/security architecture, delivering discovery, design, and governance across complex environments. Proven capability to design security controls across: Cloud workload protection (VM/container/serverless security patterns) DevSecOps / secure SDLC (threat modelling, CI/CD security, supply chain awareness) Client-side protection (endpoint security and operational response integration) Working knowledge of relevant vendors solutions such as: Tenable, Orca, Snyk Wiz, Crowdstrike and Palo Alto. We also acknowledge that the confidence gap and imposter syndrome are a real thing and can get in the way of us meeting fantastic talent, so please don't hesitate to apply - we would love to hear from you! Work in a way that works for you We recognise that everyone is different and that the way in which people want to work and deliver at their best is different for everyone too. In this role, we can offer the following flexible working patterns: Hybrid working Working flexible hours - flexing the times you start and finish during the day Flexibility around school pick up and drop offs Working with us Wherever you work, we want you to experience the freedom and autonomy to realise your potential. You will feel supported by a team that celebrates individuality, encourages different perspectives, and embraces every background. Join us To become part of the success story, please apply now. If you have a disability or neurodiversity, we can provide support or adjustments that you may need throughout our recruitment process or any mitigating circumstance you wish for us to consider. Any information you share on your application will be treated in confidence. You can find out more about life at Softcat and our commitments to diversity and inclusion at Here at Softcat, we don't prohibit the use of AI (artificial intelligence) in our application process, as we understand how far it can go to creating a truly equitable candidate experience. That being said, as a culture-driven organisation, we believe that the genuine essence of each person is what truly matters, so we highly encourage you to be as authentically you as possible when submitting your application to showcase your true and whole self.
May 01, 2026
Full time
Join our Architecture Services team! The Architecture Services Team comprises members from many different technical and non-technical backgrounds; from network and security to datacentre, end-user compute and service architecture. The team provides customers and the wider Softcat team sight of the broader picture - helping to pull all pieces of the jigsaw together and solving the puzzle of how business requirements are interpreted into technical solutions involving multiple technical verticals. Success. The Softcat Way. There is a uniqueness to Softcat - what we do, how we do it and why we do it. At the heart of our operations are our core values: Passion, Intelligence, Fun, Responsible and Community. These values are the pillars that Softcat and guide our every action. As a Senior Solutions Architect focused on Cyber Security, you'll be part of the Architecture Services Team. In this role, you'll be the first port of call for creating Cyber Security solutions that solve customer problems. You'll be a customer-facing technical leader responsible for delivering consultative advice, expertise, and guidance on technology strategy and how customers can use technology to solve business problems. The role spans the opportunity cycle - owning and leading architecture discovery through to successful delivery and validation - and includes building capability around chosen Cloud Security solutions and practices, with particular emphasis on Application Security Testing, Exposure Management, and Cloud Application Detection & Response. You will be considering customer's protection of applications running in the cloud, hosted in the cloud and developed in the cloud, as well of variations of cloud itself. The role will, however, cover all areas of Cyber Security. You'll also bring practical awareness of Governance, Risk & Compliance (GRC) and AI Security, helping customers adopt modern cloud and AI capabilities securely and responsibly. You'll be responsible for: Lead customer discovery and translate business, technical, and risk requirements into clear, deliverable security architectures. Act as Technical Design Authority on complex cloud and security engagements. Working with other Architecture Services members, Professional Services Consultants, Cyber Assessment Team and Architects to develop cross-discipline and multi-vendor solutions for customers. Working with the Softcat Sales Specialists and the Softcat Account Management team to provide technical information and expertise to assist customers in their business needs. Providing advice to sales and customers regarding the application of a Cyber Security discipline. We'd love you to have A passion for technology and making technology work for businesses, along with a desire to share your knowledge and experience with those around you. Senior-level experience in solutions architecture/security architecture, delivering discovery, design, and governance across complex environments. Proven capability to design security controls across: Cloud workload protection (VM/container/serverless security patterns) DevSecOps / secure SDLC (threat modelling, CI/CD security, supply chain awareness) Client-side protection (endpoint security and operational response integration) Working knowledge of relevant vendors solutions such as: Tenable, Orca, Snyk Wiz, Crowdstrike and Palo Alto. We also acknowledge that the confidence gap and imposter syndrome are a real thing and can get in the way of us meeting fantastic talent, so please don't hesitate to apply - we would love to hear from you! Work in a way that works for you We recognise that everyone is different and that the way in which people want to work and deliver at their best is different for everyone too. In this role, we can offer the following flexible working patterns: Hybrid working Working flexible hours - flexing the times you start and finish during the day Flexibility around school pick up and drop offs Working with us Wherever you work, we want you to experience the freedom and autonomy to realise your potential. You will feel supported by a team that celebrates individuality, encourages different perspectives, and embraces every background. Join us To become part of the success story, please apply now. If you have a disability or neurodiversity, we can provide support or adjustments that you may need throughout our recruitment process or any mitigating circumstance you wish for us to consider. Any information you share on your application will be treated in confidence. You can find out more about life at Softcat and our commitments to diversity and inclusion at Here at Softcat, we don't prohibit the use of AI (artificial intelligence) in our application process, as we understand how far it can go to creating a truly equitable candidate experience. That being said, as a culture-driven organisation, we believe that the genuine essence of each person is what truly matters, so we highly encourage you to be as authentically you as possible when submitting your application to showcase your true and whole self.
DevSecOps Engineer Brockworth, Gloucester, Gloucestershire, South West UK 35044 - 86100 plus BUPA, benefits and bonus 37.5 hours + 4 Day Work Week option Lockheed Martin Rotary and Mission Systems (RMS) provides systems engineering, software development, training solutions and complex program management for global security, civil and commercial markets. Simply stated, our mission is to be the world's leading global security and aerospace company. The role: We are seeking DevSecOps Engineers at a variety of levels of seniority. Join Our Team as an DevSecOps Engineer (with a Focus on Infrastructure Engineering). You'll play a pivotal role in integrating, administering and securing a range of systems and applications, with a strong focus on designing, building, and maintaining scalable, reliable, and secure infrastructure. As an Engineer within our DevSecOps team, you'll be at the forefront of driving innovation and safeguarding digital infrastructures by ensuring robust, high-performance systems that support our mission-critical solutions. You'll need to have an understanding of Windows and Linux systems and DevSecOps principles and experience of working within a multi-disciplined team. Knowledge and understanding of core software tools, methods, and frameworks to reliably integrate and deploy, integrate, and test features into environments to ensure optimum outcomes for our customers. Additionally, we're looking for candidates with hands-on experience in infrastructure engineering, including expertise in areas such as cloud architecture, containerization (e.g., Docker, Kubernetes), infrastructure-as-code (e.g., Terraform, Ansible), and system performance optimization to support seamless integration and testing processes. Key Responsibilities: Design, build, deploy and manage a broad set of IT Infrastructure aligning to customer needs and requirements, while leveraging infrastructure engineering best practices to maintain system reliability and scalability with a focus on automation and repeatability. Develop Infrastructure as Code and scripts and integrate those with CI/CD pipelines and a wider ecosystem of tools, prioritising automation to streamline deployments. Provide full end to end systems lifecycle management covering architecture, design, deployment and support through to decommissioning and migration. Support the integration and delivery of large and complex solutions into a wider system-of-systems, ensuring infrastructure components are robust and interoperable. Opportunities to experience the cloud by undertaking deployments in Public, Private, and Hybrid Cloud environments, addressing potential constraints while optimizing infrastructure performance and security. If you're passionate about DevSecOps, with a strong focus and background in Infrastructure Engineering, and eager to take your career to the next level, we want to hear from you! Apply now to join our team and embark on an exciting journey of innovation and growth. Required skills, qualifications and experience : Advanced understanding of DevSecOps. The ability to work within an agile environment and delivering using Scrum and Sprints utilising tools such as Jira and Confluence to help planning and collaboration. Expert in Windows and Linux systems administration (Active Directory etc). Expert in Virtualisation technologies and concepts - VMware vsphere, ARIA Ops performance monitoring, software defined networking - NSX. Advanced understanding of Web proxy servers and configuration - Squid. Experience of Automation technologies Terraform and Ansible for complex builds, Packer. Experience of CI/CD pipeline builds - Jenkins. Understanding of Git/Bitbucket/GitLab integration, coding and branching strategies. Proficient in the use and administration of Containerisation technologies - Kubernetes, Docker. Proficient in Powershell, bash scripting. Proficient in Python. Proficient in the use of Networking skills - IPv4 addressing and routing. Experience of Logging and monitoring using Zabbix and Splunk. Experience of Cloud and AWS concepts and technologies. Desired Skills: Ability to support maturation of automated CI/CD software pipelines for Cloud deployments. Understanding of IaC and using this to deploy and integrate services on Cloud. Hands on experience in using and integrating with AWS Services such as EC2, EKS, Fargate, IAM, S3, Lambda. Experience using the AWS SDK (Boto3) to automate integration tasks. Experience or understanding integrating hybrid-cloud application deployments. Understanding of CloudTrail to debug and diagnose integration issues. We would love to hear from you if you have any of the following Qualifications or Certifications: Linux Admin, (RHCSA) or (RHCE). Microsoft Certified: Windows Server Hybrid Administrator Associate. Red Hat Certified Specialist in Ansible Automation (EX407). Terraform Associate certification. AWS Certification. CCNA Certification. Oracle Java Certification. ISTQB Certification. OSCP Certification. Disclaimer: This vacancy is being advertised by Optamor Limited. Optamor is a specialist Recruitment Process Outsourcing provider. We provide a flexible full recruitment solution which takes care of all recruitment requirements from planning to on-boarding. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission.
May 01, 2026
Full time
DevSecOps Engineer Brockworth, Gloucester, Gloucestershire, South West UK 35044 - 86100 plus BUPA, benefits and bonus 37.5 hours + 4 Day Work Week option Lockheed Martin Rotary and Mission Systems (RMS) provides systems engineering, software development, training solutions and complex program management for global security, civil and commercial markets. Simply stated, our mission is to be the world's leading global security and aerospace company. The role: We are seeking DevSecOps Engineers at a variety of levels of seniority. Join Our Team as an DevSecOps Engineer (with a Focus on Infrastructure Engineering). You'll play a pivotal role in integrating, administering and securing a range of systems and applications, with a strong focus on designing, building, and maintaining scalable, reliable, and secure infrastructure. As an Engineer within our DevSecOps team, you'll be at the forefront of driving innovation and safeguarding digital infrastructures by ensuring robust, high-performance systems that support our mission-critical solutions. You'll need to have an understanding of Windows and Linux systems and DevSecOps principles and experience of working within a multi-disciplined team. Knowledge and understanding of core software tools, methods, and frameworks to reliably integrate and deploy, integrate, and test features into environments to ensure optimum outcomes for our customers. Additionally, we're looking for candidates with hands-on experience in infrastructure engineering, including expertise in areas such as cloud architecture, containerization (e.g., Docker, Kubernetes), infrastructure-as-code (e.g., Terraform, Ansible), and system performance optimization to support seamless integration and testing processes. Key Responsibilities: Design, build, deploy and manage a broad set of IT Infrastructure aligning to customer needs and requirements, while leveraging infrastructure engineering best practices to maintain system reliability and scalability with a focus on automation and repeatability. Develop Infrastructure as Code and scripts and integrate those with CI/CD pipelines and a wider ecosystem of tools, prioritising automation to streamline deployments. Provide full end to end systems lifecycle management covering architecture, design, deployment and support through to decommissioning and migration. Support the integration and delivery of large and complex solutions into a wider system-of-systems, ensuring infrastructure components are robust and interoperable. Opportunities to experience the cloud by undertaking deployments in Public, Private, and Hybrid Cloud environments, addressing potential constraints while optimizing infrastructure performance and security. If you're passionate about DevSecOps, with a strong focus and background in Infrastructure Engineering, and eager to take your career to the next level, we want to hear from you! Apply now to join our team and embark on an exciting journey of innovation and growth. Required skills, qualifications and experience : Advanced understanding of DevSecOps. The ability to work within an agile environment and delivering using Scrum and Sprints utilising tools such as Jira and Confluence to help planning and collaboration. Expert in Windows and Linux systems administration (Active Directory etc). Expert in Virtualisation technologies and concepts - VMware vsphere, ARIA Ops performance monitoring, software defined networking - NSX. Advanced understanding of Web proxy servers and configuration - Squid. Experience of Automation technologies Terraform and Ansible for complex builds, Packer. Experience of CI/CD pipeline builds - Jenkins. Understanding of Git/Bitbucket/GitLab integration, coding and branching strategies. Proficient in the use and administration of Containerisation technologies - Kubernetes, Docker. Proficient in Powershell, bash scripting. Proficient in Python. Proficient in the use of Networking skills - IPv4 addressing and routing. Experience of Logging and monitoring using Zabbix and Splunk. Experience of Cloud and AWS concepts and technologies. Desired Skills: Ability to support maturation of automated CI/CD software pipelines for Cloud deployments. Understanding of IaC and using this to deploy and integrate services on Cloud. Hands on experience in using and integrating with AWS Services such as EC2, EKS, Fargate, IAM, S3, Lambda. Experience using the AWS SDK (Boto3) to automate integration tasks. Experience or understanding integrating hybrid-cloud application deployments. Understanding of CloudTrail to debug and diagnose integration issues. We would love to hear from you if you have any of the following Qualifications or Certifications: Linux Admin, (RHCSA) or (RHCE). Microsoft Certified: Windows Server Hybrid Administrator Associate. Red Hat Certified Specialist in Ansible Automation (EX407). Terraform Associate certification. AWS Certification. CCNA Certification. Oracle Java Certification. ISTQB Certification. OSCP Certification. Disclaimer: This vacancy is being advertised by Optamor Limited. Optamor is a specialist Recruitment Process Outsourcing provider. We provide a flexible full recruitment solution which takes care of all recruitment requirements from planning to on-boarding. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission.
Job Description Are you ready to launch your career and make an impact on real world projects from day one? At Leonardo, we're looking for graduates who want to be part of something bigger-shaping innovation, advancing technology, and enhancing global safety. We are committed to developing our graduates into leading technical or business professionals, and as such we will also support you through your preferred route for professional development. Our Graduate Programmes give you the opportunity to work on exciting and challenging projects alongside subject matter experts. On joining, you will receive a starting salary of £34,000 per annum, plus a £1,000 welcome bonus. You'll also be eligible for a £1,000 exit bonus upon successful completion of the programme. In addition, you may be eligible for a Temporary Accommodation Allowance (TAA), subject to specific criteria. We encourage you to spend at least three days each week on site to integrate with your team and maximise your learning experience. Our Graduate Programme We are looking for dynamic and talented individuals to join our expanding team in Digital Solutions to help us meet the growing demand for digital and data driven value in Leonardo. As we embed new technologies and practices into the business, we want to bring in and develop graduates who are interested in areas such as Cloud computing and its embedded applications, Data Science and Engineering, DevSecOps software development, Cyber implementation and management, Digital transformation and development of data driven value. Our goal is to provide a world class IT function that enables the business to succeed and grow. What you'll do as a Digital Solutions Professional As a Leonardo Graduate in the Digital Solutions team, you'll participate in many areas of the function, from Architecture and Innovation to Delivery and Service Operations. You'll be involved in innovation initiatives and have the opportunity to work on projects across a number of business areas. What we need from you All of our roles require (a) a minimum of a 2:2 Bachelors/Integrated Master's degree, or (b) a higher degree, such as a MSc or PhD achieved in the last three years, from Business, IT, Technology, Science or Maths courses, although other subjects may also be relevant. Experience of Experimentally led development. Building prototypes, demonstrating key design concepts and understanding of technical challenges. Cloud Computing Information Technology Software engineering Developing Infrastructure and Code (Terraform Scripting) Data Analytics and Data Science Cyber Implementation, guidelines and management A strong interest in and awareness of technology and innovation Ability to work efficiently as part of a team in a demanding but rewarding environment Strong interpersonal and communication skills Desire to grow experience across the lifecycle of Digital & IT. Security Clearance This role is subject to pre employment screening in line with the UK Government's Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) may apply, this could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: Why join us At Leonardo, our people are at the heart of everything we do, key contributors in shaping innovation, advancing technology, and enhancing global safety. We offer a comprehensive, company funded benefits package that supports your wellbeing, career development, and work-life balance. Whether you're looking to grow professionally, care for your health, or plan for the future, we're here to help you thrive. Time to recharge: Enjoy generous leave with the opportunity to accrue up to 12 additional flexi days each year. Secure your future: Benefit from our award winning pension scheme with up to 15% employer contribution. Your wellbeing matters: Free access to mental health support, financial advice, and employee led networks championing inclusion and diversity (Enable, Pride, Equalise, Armed Forces, Carers, Wellbeing and Ethnicity). Rewarding performance: All employees are eligible for our bonus scheme. Tailored perks: Spend up to £500 annually on flexible benefits including private healthcare, dental, family cover, tech & lifestyle discounts, gym memberships and more. For a full list of our company benefits please visit: We are committed to building an inclusive, accessible, and welcoming workplace. We believe that a diverse workforce sparks creativity, drives innovation, and leads to better outcomes for our people, communities and our customers. If you have any accessibility requirements to support you during the recruitment process, just let us know. Be part of something bigger - apply now! Primary Location: GB - Edinburgh Additional Locations: GB - Luton - Cap. Green 300, GB - Yeovil - Lysander Rd Contract Type: Permanent Hybrid Working: Hybrid
Apr 30, 2026
Full time
Job Description Are you ready to launch your career and make an impact on real world projects from day one? At Leonardo, we're looking for graduates who want to be part of something bigger-shaping innovation, advancing technology, and enhancing global safety. We are committed to developing our graduates into leading technical or business professionals, and as such we will also support you through your preferred route for professional development. Our Graduate Programmes give you the opportunity to work on exciting and challenging projects alongside subject matter experts. On joining, you will receive a starting salary of £34,000 per annum, plus a £1,000 welcome bonus. You'll also be eligible for a £1,000 exit bonus upon successful completion of the programme. In addition, you may be eligible for a Temporary Accommodation Allowance (TAA), subject to specific criteria. We encourage you to spend at least three days each week on site to integrate with your team and maximise your learning experience. Our Graduate Programme We are looking for dynamic and talented individuals to join our expanding team in Digital Solutions to help us meet the growing demand for digital and data driven value in Leonardo. As we embed new technologies and practices into the business, we want to bring in and develop graduates who are interested in areas such as Cloud computing and its embedded applications, Data Science and Engineering, DevSecOps software development, Cyber implementation and management, Digital transformation and development of data driven value. Our goal is to provide a world class IT function that enables the business to succeed and grow. What you'll do as a Digital Solutions Professional As a Leonardo Graduate in the Digital Solutions team, you'll participate in many areas of the function, from Architecture and Innovation to Delivery and Service Operations. You'll be involved in innovation initiatives and have the opportunity to work on projects across a number of business areas. What we need from you All of our roles require (a) a minimum of a 2:2 Bachelors/Integrated Master's degree, or (b) a higher degree, such as a MSc or PhD achieved in the last three years, from Business, IT, Technology, Science or Maths courses, although other subjects may also be relevant. Experience of Experimentally led development. Building prototypes, demonstrating key design concepts and understanding of technical challenges. Cloud Computing Information Technology Software engineering Developing Infrastructure and Code (Terraform Scripting) Data Analytics and Data Science Cyber Implementation, guidelines and management A strong interest in and awareness of technology and innovation Ability to work efficiently as part of a team in a demanding but rewarding environment Strong interpersonal and communication skills Desire to grow experience across the lifecycle of Digital & IT. Security Clearance This role is subject to pre employment screening in line with the UK Government's Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) may apply, this could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: Why join us At Leonardo, our people are at the heart of everything we do, key contributors in shaping innovation, advancing technology, and enhancing global safety. We offer a comprehensive, company funded benefits package that supports your wellbeing, career development, and work-life balance. Whether you're looking to grow professionally, care for your health, or plan for the future, we're here to help you thrive. Time to recharge: Enjoy generous leave with the opportunity to accrue up to 12 additional flexi days each year. Secure your future: Benefit from our award winning pension scheme with up to 15% employer contribution. Your wellbeing matters: Free access to mental health support, financial advice, and employee led networks championing inclusion and diversity (Enable, Pride, Equalise, Armed Forces, Carers, Wellbeing and Ethnicity). Rewarding performance: All employees are eligible for our bonus scheme. Tailored perks: Spend up to £500 annually on flexible benefits including private healthcare, dental, family cover, tech & lifestyle discounts, gym memberships and more. For a full list of our company benefits please visit: We are committed to building an inclusive, accessible, and welcoming workplace. We believe that a diverse workforce sparks creativity, drives innovation, and leads to better outcomes for our people, communities and our customers. If you have any accessibility requirements to support you during the recruitment process, just let us know. Be part of something bigger - apply now! Primary Location: GB - Edinburgh Additional Locations: GB - Luton - Cap. Green 300, GB - Yeovil - Lysander Rd Contract Type: Permanent Hybrid Working: Hybrid
Job Title: Senior DevSecOps Engineer Location: London Contract Length: 12 months Working Pattern : Hybrid, Via Umbrella Company Join Our Team! Are you ready to take your career to the next level in a dynamic, fast-paced environment? Our client, a leading financial institution, is seeking a passionate and experienced Senior DevSecOps Engineer to lead the charge in defining and implementing cutting-edge CI/CD and DevSecOps strategies! What You'll Do: As a key player in our client's engineering team, you will: Define & Own : Craft and manage the enterprise CI/CD and DevSecOps strategy to align with security, risk, and governance standards. Architect Solutions : Develop CI/CD approaches that cater to multiple teams and technologies while ensuring quality, security, and scalability. Enhance Cloud Applications : Provide your expertise in building cloud and cloud-ready applications, and support containerized workloads using Docker and Kubernetes. Integrate Security & Compliance : Embed security controls directly into CI/CD pipelines, ensuring solutions meet all governance and regulatory requirements. Engage Stakeholders : Build strong partnerships with functional teams and translate complex technical concepts into clear recommendations for various audiences. Drive Continuous Improvement : Champion a strong engineering mindset and relentlessly seek new tools and approaches to enhance developer experience and release cadence. What We're Looking For: To thrive in this role, you should possess: Core Technical Experience : Extensive experience in designing enterprise-scale CI/CD solutions, with a focus on GitLab. Hands-on experience in supporting build pipelines for Java, C#, JavaScript, and Python is essential. Cloud & Containerization Expertise : Proven ability to deliver containerized and cloud-ready applications, with experience in integrating CI/CD pipelines with cloud services. Financial Services Acumen : Familiarity with highly regulated environments, especially in the financial sector, and a strong understanding of risk management and governance frameworks. Leadership Skills : You should operate effectively as a senior individual contributor, demonstrating sound judgment, professionalism, and integrity while influencing outcomes without direct authority. Communication Skills : Exceptional clarity and precision in communication, particularly regarding risk-aware recommendations. What Success Looks Like: Secure, scalable, and trusted CI/CD platforms across the organization. Efficient and compliant delivery of containerized and cloud-ready applications. Seamless integration of security and governance into delivery processes. Empowered development teams capable of navigating control frameworks effectively. Why Join Us? This is your opportunity to be at the forefront of innovation in the financial services industry! You'll work in a collaborative environment where your expertise is valued, and your contributions will make a real impact. Ready to Make a Difference? If you're driven by a passion for engineering excellence and are ready to take on new challenges, we'd love to hear from you! Apply now and join our client's mission to innovate and lead in the financial sector. Your next big opportunity awaits! We use generative AI tools to support our candidate screening process. This helps us ensure a fair, consistent, and efficient experience for all applicants. Rest assured, all final decisions are made by our hiring team, and your application will be reviewed with care and attention. Adecco is a disability-confident employer. It is important to us that we run an inclusive and accessible recruitment process to support candidates of all backgrounds and all abilities to apply. Adecco is committed to building a supportive environment for you to explore the next steps in your career. If you require reasonable adjustments at any stage, please let us know and we will be happy to support you.
Apr 30, 2026
Contractor
Job Title: Senior DevSecOps Engineer Location: London Contract Length: 12 months Working Pattern : Hybrid, Via Umbrella Company Join Our Team! Are you ready to take your career to the next level in a dynamic, fast-paced environment? Our client, a leading financial institution, is seeking a passionate and experienced Senior DevSecOps Engineer to lead the charge in defining and implementing cutting-edge CI/CD and DevSecOps strategies! What You'll Do: As a key player in our client's engineering team, you will: Define & Own : Craft and manage the enterprise CI/CD and DevSecOps strategy to align with security, risk, and governance standards. Architect Solutions : Develop CI/CD approaches that cater to multiple teams and technologies while ensuring quality, security, and scalability. Enhance Cloud Applications : Provide your expertise in building cloud and cloud-ready applications, and support containerized workloads using Docker and Kubernetes. Integrate Security & Compliance : Embed security controls directly into CI/CD pipelines, ensuring solutions meet all governance and regulatory requirements. Engage Stakeholders : Build strong partnerships with functional teams and translate complex technical concepts into clear recommendations for various audiences. Drive Continuous Improvement : Champion a strong engineering mindset and relentlessly seek new tools and approaches to enhance developer experience and release cadence. What We're Looking For: To thrive in this role, you should possess: Core Technical Experience : Extensive experience in designing enterprise-scale CI/CD solutions, with a focus on GitLab. Hands-on experience in supporting build pipelines for Java, C#, JavaScript, and Python is essential. Cloud & Containerization Expertise : Proven ability to deliver containerized and cloud-ready applications, with experience in integrating CI/CD pipelines with cloud services. Financial Services Acumen : Familiarity with highly regulated environments, especially in the financial sector, and a strong understanding of risk management and governance frameworks. Leadership Skills : You should operate effectively as a senior individual contributor, demonstrating sound judgment, professionalism, and integrity while influencing outcomes without direct authority. Communication Skills : Exceptional clarity and precision in communication, particularly regarding risk-aware recommendations. What Success Looks Like: Secure, scalable, and trusted CI/CD platforms across the organization. Efficient and compliant delivery of containerized and cloud-ready applications. Seamless integration of security and governance into delivery processes. Empowered development teams capable of navigating control frameworks effectively. Why Join Us? This is your opportunity to be at the forefront of innovation in the financial services industry! You'll work in a collaborative environment where your expertise is valued, and your contributions will make a real impact. Ready to Make a Difference? If you're driven by a passion for engineering excellence and are ready to take on new challenges, we'd love to hear from you! Apply now and join our client's mission to innovate and lead in the financial sector. Your next big opportunity awaits! We use generative AI tools to support our candidate screening process. This helps us ensure a fair, consistent, and efficient experience for all applicants. Rest assured, all final decisions are made by our hiring team, and your application will be reviewed with care and attention. Adecco is a disability-confident employer. It is important to us that we run an inclusive and accessible recruitment process to support candidates of all backgrounds and all abilities to apply. Adecco is committed to building a supportive environment for you to explore the next steps in your career. If you require reasonable adjustments at any stage, please let us know and we will be happy to support you.
Job Title: Senior Full Stack Developer (React & C#.NET) Contract Length: 12 Months Location: London - 3 Days a week Daily Rate: Circa 650/Day (Inside IR35) About the Role Join our dynamic team as a Senior Full Stack Developer, where your expertise in React JS and C# .NET Core will shine! We are looking for a tech-savvy professional with a passion for building scalable applications within the financial sector. This is an exciting opportunity to work with cloud-native architectures and cutting-edge technologies. If you thrive in a collaborative environment and are eager to make an impact, we want to hear from you! Technical Skills Front-end: Strong proficiency in React.js, JavaScript/TypeScript, Redux/RTK, and modern UI patterns, develop framework is essential Back-end: Expertise in C# .NET Core, REST APIs, and microservices-based development is essential Python (pyspark): Experience with data pipelines and analytics is a plus. Power BI: Familiarity with developing dashboards and data models. Architecture: Knowledge of microservices, API design, and event-driven architectures. DevOps/CI/CD: Experience with Azure DevOps, GitLab, GitHub Actions, or similar tools. Cloud Platforms: Proficient in Azure or AWS (Azure preferred). Databases: Strong skills in SQL Server, PostgreSQL, or other relational databases. containerisation: Experience with Docker and Kubernetes. Key Responsibilities Design & Develop: Create and maintain full stack applications using React JS and C#.NET Core. Build Services: Develop high-performance backend services and RESTful APIs with a focus on scalability and resilience. Create UI Components: Craft responsive and modular UI components using React JS and modern JavaScript/TypeScript patterns. Collaboration: Work closely with business stakeholders and domain experts in Risk, Regulatory Reporting, and Finance. Power BI Expertise: utilise your knowledge of Power BI to develop dashboards and analytical reports. CI/CD Implementation: Collaborate with DevSecOps to optimise CI/CD pipelines, ensuring automated testing and deployment. Architecture Contribution: Contribute to event-driven and distributed system designs using technologies like Kafka or Event Hub. Mentorship: Guide junior developers and foster a collaborative atmosphere within a cross-functional agile team. Soft Skills A strong engineering mindset with a relentless curiosity. Excellent analytical and problem-solving abilities. Exceptional communication skills to interact with both technical and non-technical stakeholders. An agile mindset with experience in Scrum/Agile environments. Ability to work independently and lead technical solutions from start to finish. Why Join Us? Work on innovative projects that make a difference in the financial sector. Collaborate with a talented team in a vibrant environment. Enjoy a competitive daily rate and flexible working arrangements. If you are ready to take your career to the next level and contribute to exciting projects, apply now! We can't wait to meet you! Pontoon is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities, and more. We do this by showcasing their talents, skills, and unique experience in an inclusive environment that helps them thrive. If you require reasonable adjustments at any stage, please let us know and we will be happy to support you.
Apr 30, 2026
Contractor
Job Title: Senior Full Stack Developer (React & C#.NET) Contract Length: 12 Months Location: London - 3 Days a week Daily Rate: Circa 650/Day (Inside IR35) About the Role Join our dynamic team as a Senior Full Stack Developer, where your expertise in React JS and C# .NET Core will shine! We are looking for a tech-savvy professional with a passion for building scalable applications within the financial sector. This is an exciting opportunity to work with cloud-native architectures and cutting-edge technologies. If you thrive in a collaborative environment and are eager to make an impact, we want to hear from you! Technical Skills Front-end: Strong proficiency in React.js, JavaScript/TypeScript, Redux/RTK, and modern UI patterns, develop framework is essential Back-end: Expertise in C# .NET Core, REST APIs, and microservices-based development is essential Python (pyspark): Experience with data pipelines and analytics is a plus. Power BI: Familiarity with developing dashboards and data models. Architecture: Knowledge of microservices, API design, and event-driven architectures. DevOps/CI/CD: Experience with Azure DevOps, GitLab, GitHub Actions, or similar tools. Cloud Platforms: Proficient in Azure or AWS (Azure preferred). Databases: Strong skills in SQL Server, PostgreSQL, or other relational databases. containerisation: Experience with Docker and Kubernetes. Key Responsibilities Design & Develop: Create and maintain full stack applications using React JS and C#.NET Core. Build Services: Develop high-performance backend services and RESTful APIs with a focus on scalability and resilience. Create UI Components: Craft responsive and modular UI components using React JS and modern JavaScript/TypeScript patterns. Collaboration: Work closely with business stakeholders and domain experts in Risk, Regulatory Reporting, and Finance. Power BI Expertise: utilise your knowledge of Power BI to develop dashboards and analytical reports. CI/CD Implementation: Collaborate with DevSecOps to optimise CI/CD pipelines, ensuring automated testing and deployment. Architecture Contribution: Contribute to event-driven and distributed system designs using technologies like Kafka or Event Hub. Mentorship: Guide junior developers and foster a collaborative atmosphere within a cross-functional agile team. Soft Skills A strong engineering mindset with a relentless curiosity. Excellent analytical and problem-solving abilities. Exceptional communication skills to interact with both technical and non-technical stakeholders. An agile mindset with experience in Scrum/Agile environments. Ability to work independently and lead technical solutions from start to finish. Why Join Us? Work on innovative projects that make a difference in the financial sector. Collaborate with a talented team in a vibrant environment. Enjoy a competitive daily rate and flexible working arrangements. If you are ready to take your career to the next level and contribute to exciting projects, apply now! We can't wait to meet you! Pontoon is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities, and more. We do this by showcasing their talents, skills, and unique experience in an inclusive environment that helps them thrive. If you require reasonable adjustments at any stage, please let us know and we will be happy to support you.
Technical Lead Full Stack Developer (TypeScript, JavaScript, Node) Location: Hybrid working within Hampshire / West Sussex Salary: Competitive + benefits We're working with a fast-growing UK SaaS technology company that builds data-driven digital products used by commercial teams to better understand and engage with their customers. They are now looking for an experienced technical lead full stack developer to play a key role in shaping and delivering their next generation of customer-facing platforms. This is a hands-on technical leadership role where you'll be involved from early design through to production delivery, working with a modern cloud-based stack and deploying to live environments on a daily basis. The Role Lead technical delivery across a high-performing development squad (10+) Contribute to solution design, system architecture and domain modelling Build proof-of-concepts and spike complex or uncertain areas of work Break down requirements into deliverable epics and user stories alongside product and initiative managers Develop and deliver production-ready code across the full stack Ensure high standards of quality, maintainability, performance and security Support and improve live systems once deployed Influence technical direction, tooling and best practice across the wider engineering function Tech Environment You'll work with a modern stack including: Node.js microservices JavaScript & TypeScript Vue.js Redis, SQL Server & Snowflake AWS cloud infrastructure CI/CD pipelines and DevSecOps practices About You Strong full stack development experience (ideally 10+ years) 5+ years of JavaScript and TypeScript experience Solid background in system design and scalable architectures Experience building large, production SaaS platforms A clean-code mindset (SOLID principles, design patterns, testable code) Experience working in mature CI/CD and continuous deployment environments A commercial mindset when designing and delivering software Excellent collaboration skills and confidence working with stakeholders Interest in using AI to accelerate and improve software development A passion for performance, security and engineering best practice Degree in Computer Science or equivalent real-world experience What's On Offer Competitive salary and benefits package Hybrid working (1 day per week in the Fareham office) Opportunity to join a scaling UK SaaS business Strong engineering culture with a focus on quality and continuous improvement Supportive, collaborative working environment Community and charity initiatives, including volunteer days Send your CV across to me on email (url removed) or call (phone number removed) for more information. Spectrum IT Recruitment (South) Limited is acting as an Employment Agency in relation to this vacancy.
Apr 30, 2026
Full time
Technical Lead Full Stack Developer (TypeScript, JavaScript, Node) Location: Hybrid working within Hampshire / West Sussex Salary: Competitive + benefits We're working with a fast-growing UK SaaS technology company that builds data-driven digital products used by commercial teams to better understand and engage with their customers. They are now looking for an experienced technical lead full stack developer to play a key role in shaping and delivering their next generation of customer-facing platforms. This is a hands-on technical leadership role where you'll be involved from early design through to production delivery, working with a modern cloud-based stack and deploying to live environments on a daily basis. The Role Lead technical delivery across a high-performing development squad (10+) Contribute to solution design, system architecture and domain modelling Build proof-of-concepts and spike complex or uncertain areas of work Break down requirements into deliverable epics and user stories alongside product and initiative managers Develop and deliver production-ready code across the full stack Ensure high standards of quality, maintainability, performance and security Support and improve live systems once deployed Influence technical direction, tooling and best practice across the wider engineering function Tech Environment You'll work with a modern stack including: Node.js microservices JavaScript & TypeScript Vue.js Redis, SQL Server & Snowflake AWS cloud infrastructure CI/CD pipelines and DevSecOps practices About You Strong full stack development experience (ideally 10+ years) 5+ years of JavaScript and TypeScript experience Solid background in system design and scalable architectures Experience building large, production SaaS platforms A clean-code mindset (SOLID principles, design patterns, testable code) Experience working in mature CI/CD and continuous deployment environments A commercial mindset when designing and delivering software Excellent collaboration skills and confidence working with stakeholders Interest in using AI to accelerate and improve software development A passion for performance, security and engineering best practice Degree in Computer Science or equivalent real-world experience What's On Offer Competitive salary and benefits package Hybrid working (1 day per week in the Fareham office) Opportunity to join a scaling UK SaaS business Strong engineering culture with a focus on quality and continuous improvement Supportive, collaborative working environment Community and charity initiatives, including volunteer days Send your CV across to me on email (url removed) or call (phone number removed) for more information. Spectrum IT Recruitment (South) Limited is acting as an Employment Agency in relation to this vacancy.
DevSecOps Consultant Sheffield (3 days per week onsite) Inside IR35 We're partnering with a leading financial services client to appoint a DevSecOps Consultant to drive secure engineering practices across large-scale, cloud-based platforms. This role is ideal for someone who has come from a hands-on DevSecOps Engineering background and has since transitioned into architecture/design and advisory, while still retaining strong technical depth. Key Responsibilities: Define and implement secure architecture patterns across engineering platforms (CI/CD, build systems, runtime environments) Conduct security assessments, threat modelling, and gap analysis across platforms and pipelines Develop and embed DevSecOps best practices, including secure pipeline design and automated controls Establish and enforce security baselines using policy-as-code Build and deliver security roadmaps, prioritising risk and regulatory requirements Partner with engineering and platform teams to remediate vulnerabilities and improve security posture Act as a trusted advisor to senior stakeholders, translating technical risks into business impact Key Requirements: Proven background in hands-on DevSecOps Engineering, now operating in a design/architecture-focused role Strong experience across both AWS and GCP (essential) Deep understanding of CI/CD pipelines, build tools, artifact repositories, and developer platforms Expertise in secure software delivery, vulnerability management, and platform security Experience with threat modelling, security frameworks, and maturity assessments Strong knowledge of application security, network security, and cloud security principles Excellent stakeholder management and communication skills Desirable: Experience in financial services or regulated environments Knowledge of Kubernetes and container security Familiarity with supply chain security, SBOM, and secure development practices Relevant certifications (eg CISSP, CISM, CCSP) This is a key role focused on shaping and embedding secure-by-design engineering practices across a complex, enterprise environment, with strong influence across both technology and security functions. More details available on successful application.
Apr 30, 2026
Contractor
DevSecOps Consultant Sheffield (3 days per week onsite) Inside IR35 We're partnering with a leading financial services client to appoint a DevSecOps Consultant to drive secure engineering practices across large-scale, cloud-based platforms. This role is ideal for someone who has come from a hands-on DevSecOps Engineering background and has since transitioned into architecture/design and advisory, while still retaining strong technical depth. Key Responsibilities: Define and implement secure architecture patterns across engineering platforms (CI/CD, build systems, runtime environments) Conduct security assessments, threat modelling, and gap analysis across platforms and pipelines Develop and embed DevSecOps best practices, including secure pipeline design and automated controls Establish and enforce security baselines using policy-as-code Build and deliver security roadmaps, prioritising risk and regulatory requirements Partner with engineering and platform teams to remediate vulnerabilities and improve security posture Act as a trusted advisor to senior stakeholders, translating technical risks into business impact Key Requirements: Proven background in hands-on DevSecOps Engineering, now operating in a design/architecture-focused role Strong experience across both AWS and GCP (essential) Deep understanding of CI/CD pipelines, build tools, artifact repositories, and developer platforms Expertise in secure software delivery, vulnerability management, and platform security Experience with threat modelling, security frameworks, and maturity assessments Strong knowledge of application security, network security, and cloud security principles Excellent stakeholder management and communication skills Desirable: Experience in financial services or regulated environments Knowledge of Kubernetes and container security Familiarity with supply chain security, SBOM, and secure development practices Relevant certifications (eg CISSP, CISM, CCSP) This is a key role focused on shaping and embedding secure-by-design engineering practices across a complex, enterprise environment, with strong influence across both technology and security functions. More details available on successful application.
Software Architect 12 Month Contract - 37 Hours Per Week Newcastle (Hybrid) Inside IR35 Role Overview - Belcan are currently working with one of the leaders in the Aviation industry for a software architect to join their team in Newcastle. The role is based at their Newcastle office. Flexible working arrangements are in place for the team. The successful candidate is expected to be in the office 3 days a week, with the opportunity to work 2 days from home. They are looking for the following; Responsibilities Work with System Architects to translate business goals and high-level requirements into robust software architectures, balancing performance, security, reliability, and compliance Design scalable, flexible, and maintainable architectures for complex geospatial systems using the latest modern cloud based technologies and tools Identify technical risks early and define pragmatic mitigation strategies Work in an AGILE scrum team, collaborating closely with software engineers, testers and the Product Owner, providing clear guidance and hands-on architectural support Collaborate with development teams to select appropriate technologies, frameworks, and patterns Ensure delivered solutions align with the agreed architecture and meet both functional and non-functional requirements Produce clear, structured documentation covering architecture decisions and design rationale Contribute to and support technical and architectural reviews Skill Set Essential Strong experience designing and owning software architectures for complex systems, preferably in a cloud environment with an awareness of DevSecOps Ability to balance strategic thinking with practical delivery Confidence communicating architectural designs to both technical and non-technical stakeholders Experience working in environments with security, reliability, and compliance constraints, preferably in the geospatial domain. A collaborative mindset and passion for mentoring and supporting engineering teams If interested, please apply now, and we will be in touch! This vacancy is being advertised by Belcan
Apr 30, 2026
Contractor
Software Architect 12 Month Contract - 37 Hours Per Week Newcastle (Hybrid) Inside IR35 Role Overview - Belcan are currently working with one of the leaders in the Aviation industry for a software architect to join their team in Newcastle. The role is based at their Newcastle office. Flexible working arrangements are in place for the team. The successful candidate is expected to be in the office 3 days a week, with the opportunity to work 2 days from home. They are looking for the following; Responsibilities Work with System Architects to translate business goals and high-level requirements into robust software architectures, balancing performance, security, reliability, and compliance Design scalable, flexible, and maintainable architectures for complex geospatial systems using the latest modern cloud based technologies and tools Identify technical risks early and define pragmatic mitigation strategies Work in an AGILE scrum team, collaborating closely with software engineers, testers and the Product Owner, providing clear guidance and hands-on architectural support Collaborate with development teams to select appropriate technologies, frameworks, and patterns Ensure delivered solutions align with the agreed architecture and meet both functional and non-functional requirements Produce clear, structured documentation covering architecture decisions and design rationale Contribute to and support technical and architectural reviews Skill Set Essential Strong experience designing and owning software architectures for complex systems, preferably in a cloud environment with an awareness of DevSecOps Ability to balance strategic thinking with practical delivery Confidence communicating architectural designs to both technical and non-technical stakeholders Experience working in environments with security, reliability, and compliance constraints, preferably in the geospatial domain. A collaborative mindset and passion for mentoring and supporting engineering teams If interested, please apply now, and we will be in touch! This vacancy is being advertised by Belcan
Cyber Solution Architect (Digital Platforms & Trading Systems) 8-Month contract - Inside IR35 - market rate London based - hybrid working - 3 days a week onsite Must have Base Metals trading experience Role Overview We are looking for a hands-on, highly technical Cyber Solution Architect to design and deliver secure solutions across our digital platform ecosystem, with a strong focus on Base Metals Order Execution Management Systems (OEMS). This role requires deep technical expertise, practical implementation capability, and the ability to embed security into complex, low-latency trading environments. Key Responsibilities Design and implement secure, scalable cyber solutions for digital platforms, including OEMS and associated trading infrastructure. Act as a hands-on architect, contributing directly to solution design, engineering decisions, and security implementation. Develop and maintain security architecture patterns, reference models, and solution blueprints. Lead security design for Base Metals OEMS platforms, ensuring alignment with performance, resilience, and regulatory requirements. Perform threat modelling, security risk assessments, and architecture reviews. Integrate security into DevOps pipelines, promoting DevSecOps best practices. Collaborate with engineering, infrastructure, and business teams to ensure security is embedded by design. Provide technical oversight on identity and access management (IAM), encryption, API security, and network security. Evaluate and implement security tooling (e.g., SIEM, EDR, DLP, WAF) within platform environments. Support incident response activities and provide expert guidance on security incidents affecting trading systems. Required Skills & Experience Proven experience in a Cyber Solution Architect role with strong hands-on delivery capability. Deep technical knowledge across application, infrastructure, network, and cloud security domains. Demonstrated experience securing digital platforms in complex enterprise environments. Strong understanding of Order Execution Management Systems (OEMS), ideally within Base Metals or commodities trading. Experience in commodities or financial trading environments (particularly Base Metals). Understanding of regulatory requirements relevant to trading systems. Knowledge of trading workflows, low-latency systems, and associated cyber risks. Experience with cloud platforms (AWS, Azure, or GCP) and cloud-native security architecture. Strong familiarity with security frameworks (e.g., NIST, ISO 27001, CIS). Experience implementing security controls including IAM, encryption, endpoint protection, and monitoring solutions. Proficiency in scripting or programming (e.g., Python, PowerShell, Bash). Desirable Skills Experience with high-frequency or algorithmic trading security. Knowledge of Zero Trust architecture and modern identity frameworks. Relevant certifications such as CISSP, CCSP, or TOGAF. Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.
Apr 30, 2026
Contractor
Cyber Solution Architect (Digital Platforms & Trading Systems) 8-Month contract - Inside IR35 - market rate London based - hybrid working - 3 days a week onsite Must have Base Metals trading experience Role Overview We are looking for a hands-on, highly technical Cyber Solution Architect to design and deliver secure solutions across our digital platform ecosystem, with a strong focus on Base Metals Order Execution Management Systems (OEMS). This role requires deep technical expertise, practical implementation capability, and the ability to embed security into complex, low-latency trading environments. Key Responsibilities Design and implement secure, scalable cyber solutions for digital platforms, including OEMS and associated trading infrastructure. Act as a hands-on architect, contributing directly to solution design, engineering decisions, and security implementation. Develop and maintain security architecture patterns, reference models, and solution blueprints. Lead security design for Base Metals OEMS platforms, ensuring alignment with performance, resilience, and regulatory requirements. Perform threat modelling, security risk assessments, and architecture reviews. Integrate security into DevOps pipelines, promoting DevSecOps best practices. Collaborate with engineering, infrastructure, and business teams to ensure security is embedded by design. Provide technical oversight on identity and access management (IAM), encryption, API security, and network security. Evaluate and implement security tooling (e.g., SIEM, EDR, DLP, WAF) within platform environments. Support incident response activities and provide expert guidance on security incidents affecting trading systems. Required Skills & Experience Proven experience in a Cyber Solution Architect role with strong hands-on delivery capability. Deep technical knowledge across application, infrastructure, network, and cloud security domains. Demonstrated experience securing digital platforms in complex enterprise environments. Strong understanding of Order Execution Management Systems (OEMS), ideally within Base Metals or commodities trading. Experience in commodities or financial trading environments (particularly Base Metals). Understanding of regulatory requirements relevant to trading systems. Knowledge of trading workflows, low-latency systems, and associated cyber risks. Experience with cloud platforms (AWS, Azure, or GCP) and cloud-native security architecture. Strong familiarity with security frameworks (e.g., NIST, ISO 27001, CIS). Experience implementing security controls including IAM, encryption, endpoint protection, and monitoring solutions. Proficiency in scripting or programming (e.g., Python, PowerShell, Bash). Desirable Skills Experience with high-frequency or algorithmic trading security. Knowledge of Zero Trust architecture and modern identity frameworks. Relevant certifications such as CISSP, CCSP, or TOGAF. Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.
Role Title: Lead Software and DevOps Engineer Duration: contract to run until 23/04/2027 Location: Sheffield, Hybrid 3 days per week onsite Rate: up to 529 p/d Umbrella inside IR35 Role purpose / summary If you're looking for a career that will help you stand out, join our client, and fulfil your potential - whether you want a career that could take you to the top, or simply take you in an exciting new direction, our client offers opportunities, support and rewards that will take you further. Our client is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions. We are seeking an accomplished Cybersecurity Lead Software and DevOps Engineer to drive the Responsible for designing and delivering enterprise security solutions, creating reusable security patterns, leading security engineering initiatives, and building new capabilities and environments. Acts as a principal-level engineer driving strategy, hands-on implementation, and cross-team adoption. In this role you will: Design and implement end-to-end security solutions across cloud and on-prem environments. Build new security environments, frameworks, and components; perform POCs and pilots for emerging solutions. Develop and maintain reusable security patterns and reference architectures to reduce developer toil and improve security controls. Manage stakeholder requirements in a fast-past changing landscape of technical and customer requirements and deliverables. Manage a small team of engineers to deliver on objectives and stakeholder requirements. Lead security initiatives across IAM, secrets management, CI/CD pipeline security, and supply chain security. Implement secure secrets management using native cloud vaults and HashiCorp Vault. Work closely with platform and engineering teams to solve security control gaps and provide technical implementation guidance. Handover new environments, solutions, and patterns to engineering teams and provide support during adoption. Lead a team of engineers: define strategy, roadmap, delivery milestones, and ensure engineering execution. Drive enterprise-wide adoption of security patterns through pilots, scaling, and stakeholder alignment. Produce high-quality technical designs, implementation documents, and knowledge transfers. Operate independently at a principal engineer level, influencing architectural decisions and engineering direction. To be successful in this role you should meet the following requirements: Strong experience in security architecture, DevSecOps, IAM, secrets and key management. Hands-on expertise with CI/CD security, cloud platforms, supply chain security, and HashiCorp Vault. Strong experience building enterprise solutions in both public cloud (AWS GCP Azure) and on premise. Proven track record leading engineering teams and large-scale technical initiatives. Ability to design, build, test, handover, and scale security capabilities across an enterprise. Excellent communication, documentation, and stakeholder management skills. Ability to communicate effectively, and negotiate requirements and demands, from stakeholders and customers alike. Desired qualifications and experience The candidate will have suitable qualifications in public cloud or equivalent experience (e.g. AWS professional level at either Architecture or DevOps track) All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!
Apr 30, 2026
Contractor
Role Title: Lead Software and DevOps Engineer Duration: contract to run until 23/04/2027 Location: Sheffield, Hybrid 3 days per week onsite Rate: up to 529 p/d Umbrella inside IR35 Role purpose / summary If you're looking for a career that will help you stand out, join our client, and fulfil your potential - whether you want a career that could take you to the top, or simply take you in an exciting new direction, our client offers opportunities, support and rewards that will take you further. Our client is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions. We are seeking an accomplished Cybersecurity Lead Software and DevOps Engineer to drive the Responsible for designing and delivering enterprise security solutions, creating reusable security patterns, leading security engineering initiatives, and building new capabilities and environments. Acts as a principal-level engineer driving strategy, hands-on implementation, and cross-team adoption. In this role you will: Design and implement end-to-end security solutions across cloud and on-prem environments. Build new security environments, frameworks, and components; perform POCs and pilots for emerging solutions. Develop and maintain reusable security patterns and reference architectures to reduce developer toil and improve security controls. Manage stakeholder requirements in a fast-past changing landscape of technical and customer requirements and deliverables. Manage a small team of engineers to deliver on objectives and stakeholder requirements. Lead security initiatives across IAM, secrets management, CI/CD pipeline security, and supply chain security. Implement secure secrets management using native cloud vaults and HashiCorp Vault. Work closely with platform and engineering teams to solve security control gaps and provide technical implementation guidance. Handover new environments, solutions, and patterns to engineering teams and provide support during adoption. Lead a team of engineers: define strategy, roadmap, delivery milestones, and ensure engineering execution. Drive enterprise-wide adoption of security patterns through pilots, scaling, and stakeholder alignment. Produce high-quality technical designs, implementation documents, and knowledge transfers. Operate independently at a principal engineer level, influencing architectural decisions and engineering direction. To be successful in this role you should meet the following requirements: Strong experience in security architecture, DevSecOps, IAM, secrets and key management. Hands-on expertise with CI/CD security, cloud platforms, supply chain security, and HashiCorp Vault. Strong experience building enterprise solutions in both public cloud (AWS GCP Azure) and on premise. Proven track record leading engineering teams and large-scale technical initiatives. Ability to design, build, test, handover, and scale security capabilities across an enterprise. Excellent communication, documentation, and stakeholder management skills. Ability to communicate effectively, and negotiate requirements and demands, from stakeholders and customers alike. Desired qualifications and experience The candidate will have suitable qualifications in public cloud or equivalent experience (e.g. AWS professional level at either Architecture or DevOps track) All profiles will be reviewed against the required skills and experience. Due to the high number of applications we will only be able to respond to successful applicants in the first instance. We thank you for your interest and the time taken to apply!
ServiceNow IRM or SecOps Technical Consultants - Remote Salary: 50,000 - 90,000 (depending on experience). Must be eligible for Security Clearance. We're working with a growing, well-backed ServiceNow specialist that's investing heavily in its Risk and Security capability, and they're looking to bring in strong IRM and SecOps talent to support a healthy pipeline of projects across the UK. This isn't just another delivery role; you'll be front and centre with clients, helping them shape and implement robust, scalable solutions across IRM (Risk, Policy & Compliance, Vendor Risk, Audit) and SecOps (SIR, VR, Threat Intelligence, etc). You'll be trusted to lead conversations, challenge thinking where needed, and deliver solutions that actually land and add value, not just tick boxes. It's a great opportunity if you want more ownership, more variety, and the chance to work on genuinely interesting programmes across regulated and security-conscious environments. You'll be joining a team that knows the platform inside out, but still gives you the space to bring ideas and do things properly. The role is predominantly remote with occasional client site visits when needed. UK Security Clearance (or eligibility) is important given the nature of the work. On offer is a strong package with salaries up to 90k depending on platform and module experience/specialism, alongside a solid benefits package including pension, private healthcare, and generous annual leave. What you'll be doing You'll be working closely with clients to understand their risk and security challenges, leading workshops, shaping requirements, and delivering end-to-end ServiceNow IRM and/or SecOps solutions. From initial design through to build and implementation, you'll play a key role in ensuring solutions are scalable, user-friendly, and aligned to best practice. You'll also contribute to continuous improvement across projects, helping clients get more from their platform over time. What we're looking for Experience delivering ServiceNow projects in a client-facing capacity Strong exposure to IRM (Risk Management, Policy & Compliance, Vendor Risk, Audit) and/or SecOps Solid understanding of ServiceNow best practice and platform capabilities ServiceNow certifications (CSA and/or CIS preferred) Comfortable running workshops and engaging with stakeholders at all levels Strong technical capability - configuration, customisation, and solution design If you're at the point where you want more impact, more autonomy, and better projects to get stuck into, this is well worth a conversation. Looking to move quickly on this so send your CV in for immediate consideration. Modis International Ltd acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers in the UK. Modis Europe Ltd provide a variety of international solutions that connect clients to the best talent in the world. For all positions based in Switzerland, Modis Europe Ltd works with its licensed Swiss partner Accurity GmbH to ensure that candidate applications are handled in accordance with Swiss law. Both Modis International Ltd and Modis Europe Ltd are Equal Opportunities Employers. By applying for this role your details will be submitted to Modis International Ltd and/ or Modis Europe Ltd. Our Candidate Privacy Information Statement which explains how we will use your information is available on the Modis website.
Apr 30, 2026
Full time
ServiceNow IRM or SecOps Technical Consultants - Remote Salary: 50,000 - 90,000 (depending on experience). Must be eligible for Security Clearance. We're working with a growing, well-backed ServiceNow specialist that's investing heavily in its Risk and Security capability, and they're looking to bring in strong IRM and SecOps talent to support a healthy pipeline of projects across the UK. This isn't just another delivery role; you'll be front and centre with clients, helping them shape and implement robust, scalable solutions across IRM (Risk, Policy & Compliance, Vendor Risk, Audit) and SecOps (SIR, VR, Threat Intelligence, etc). You'll be trusted to lead conversations, challenge thinking where needed, and deliver solutions that actually land and add value, not just tick boxes. It's a great opportunity if you want more ownership, more variety, and the chance to work on genuinely interesting programmes across regulated and security-conscious environments. You'll be joining a team that knows the platform inside out, but still gives you the space to bring ideas and do things properly. The role is predominantly remote with occasional client site visits when needed. UK Security Clearance (or eligibility) is important given the nature of the work. On offer is a strong package with salaries up to 90k depending on platform and module experience/specialism, alongside a solid benefits package including pension, private healthcare, and generous annual leave. What you'll be doing You'll be working closely with clients to understand their risk and security challenges, leading workshops, shaping requirements, and delivering end-to-end ServiceNow IRM and/or SecOps solutions. From initial design through to build and implementation, you'll play a key role in ensuring solutions are scalable, user-friendly, and aligned to best practice. You'll also contribute to continuous improvement across projects, helping clients get more from their platform over time. What we're looking for Experience delivering ServiceNow projects in a client-facing capacity Strong exposure to IRM (Risk Management, Policy & Compliance, Vendor Risk, Audit) and/or SecOps Solid understanding of ServiceNow best practice and platform capabilities ServiceNow certifications (CSA and/or CIS preferred) Comfortable running workshops and engaging with stakeholders at all levels Strong technical capability - configuration, customisation, and solution design If you're at the point where you want more impact, more autonomy, and better projects to get stuck into, this is well worth a conversation. Looking to move quickly on this so send your CV in for immediate consideration. Modis International Ltd acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers in the UK. Modis Europe Ltd provide a variety of international solutions that connect clients to the best talent in the world. For all positions based in Switzerland, Modis Europe Ltd works with its licensed Swiss partner Accurity GmbH to ensure that candidate applications are handled in accordance with Swiss law. Both Modis International Ltd and Modis Europe Ltd are Equal Opportunities Employers. By applying for this role your details will be submitted to Modis International Ltd and/ or Modis Europe Ltd. Our Candidate Privacy Information Statement which explains how we will use your information is available on the Modis website.
Software Engineer - Hybrid - Up to 60,000 Overview Fuel Recruitment is supporting a leading technology organisation that is looking for a Software Engineer to join its established development team. This role offers the chance to work across modern Front End and Back End technologies, contributing to high-quality software used across the business. You'll be part of a collaborative environment focused on delivering robust, scalable solutions and continuously improving engineering practices. Key Responsibilities Design, develop and maintain software solutions in collaboration with the wider development team. Create responsive, interactive user interfaces using JavaScript/TypeScript and React. Develop Back End components using languages such as Java, Python or Go. Use Docker and other containerisation tools to support consistent deployment. Implement and maintain CI/CD pipelines to automate build and delivery processes. Apply software engineering best practices, including documentation, code reviews and static analysis. Stay current with emerging tools, technologies and development practices. Key Skills/Experience Degree in Computer Science, Engineering or similar. Strong experience with Git for version control. Proficiency in JavaScript/TypeScript and React. Experience with Back End languages: Java, Python or Go. Solid understanding of algorithms, data structures and core software engineering principles. Hands-on experience with Docker. Knowledge of CI/CD pipelines and automated testing frameworks. Strong written and verbal communication skills, including remote collaboration. Ability to evaluate and compare different languages and technologies. Adaptable and eager to learn new tools and technologies. Desired Skills Experience with AWS or Azure. Knowledge of Kubernetes or other container orchestration tools. Familiarity with Agile methodologies and DevSecOps practices. Understanding of web security principles. Exposure to Rust. Security Clearance Due to the nature of the work, candidates must be UK sole nationals and eligible to obtain UK Security Clearance.
Apr 28, 2026
Full time
Software Engineer - Hybrid - Up to 60,000 Overview Fuel Recruitment is supporting a leading technology organisation that is looking for a Software Engineer to join its established development team. This role offers the chance to work across modern Front End and Back End technologies, contributing to high-quality software used across the business. You'll be part of a collaborative environment focused on delivering robust, scalable solutions and continuously improving engineering practices. Key Responsibilities Design, develop and maintain software solutions in collaboration with the wider development team. Create responsive, interactive user interfaces using JavaScript/TypeScript and React. Develop Back End components using languages such as Java, Python or Go. Use Docker and other containerisation tools to support consistent deployment. Implement and maintain CI/CD pipelines to automate build and delivery processes. Apply software engineering best practices, including documentation, code reviews and static analysis. Stay current with emerging tools, technologies and development practices. Key Skills/Experience Degree in Computer Science, Engineering or similar. Strong experience with Git for version control. Proficiency in JavaScript/TypeScript and React. Experience with Back End languages: Java, Python or Go. Solid understanding of algorithms, data structures and core software engineering principles. Hands-on experience with Docker. Knowledge of CI/CD pipelines and automated testing frameworks. Strong written and verbal communication skills, including remote collaboration. Ability to evaluate and compare different languages and technologies. Adaptable and eager to learn new tools and technologies. Desired Skills Experience with AWS or Azure. Knowledge of Kubernetes or other container orchestration tools. Familiarity with Agile methodologies and DevSecOps practices. Understanding of web security principles. Exposure to Rust. Security Clearance Due to the nature of the work, candidates must be UK sole nationals and eligible to obtain UK Security Clearance.
Job Title: DevSecOps Security Consultant Location: Sheffield or Birmingham (hybrid - 3 days per week) Salary/Rate: (Apply online only) per day inside IR35 Start Date: May Job Type: Initial contract until 18/05/2027 Company Introduction We have an exciting opportunity now available with one of our sector-leading consultancy clients! They are currently looking for a skilled DevSecOps Security Consultant to join their client at a Tier 1 bank in either Sheffield or Birmingham on a hybrid basis. Job Responsibilities/Objectives We are seeking a highly skilled and experienced Senior Cybersecurity SME / Consultant to join the Engineering Excellence and Enablement team. The successful candidate will work across global engineering platforms to benchmark, uplift, and continuously evolve cybersecurity maturity. The successful candidate will play a critical role in ensuring that build systems, runtime infrastructure, and developer tooling are secure by design, while enabling rapid and resilient software delivery across the bank. This role offers a unique opportunity to shape the cybersecurity posture of engineering platforms at one of the world?s leading financial institutions, ensuring the bank can deliver digital services securely, reliably, and at scale. Framework and Assessment Develop and maintain an Engineering-Platform Cybersecurity Maturity Framework to standardise assessments across platforms. Conduct comprehensive platform security reviews (build systems, CI/CD pipelines, runtime infrastructure, developer tooling) against defined framework criteria. Perform threat modelling and gap analysis, identifying vulnerabilities and systemic risks impacting source code, artifacts, and workloads. Engineering Platform Security Enablement Establish standardised secure architecture and engineering patterns for build systems, CI/CD pipelines, runtime environments, and developer tooling. Define and enforce platform security baselines using policy-as-code and automated controls. Partner with platform owners to remediate critical gaps and implement scalable solutions for artifact integrity, access control, and configuration security. Integrate vulnerability management, SBOM, provenance, and code-signing practices within engineering workflows. Roadmap Development & Execution Prioritise identified gaps based on business risk, regulatory impact, and operational criticality. Collaborate with platform owners and engineering leads to build actionable security roadmaps, balancing quick wins with long-term strategic improvements. Partner with engineering teams to design, develop, and embed security patterns and best practices into engineering platforms. Stakeholder Engagement & Governance Serve as a trusted advisor to platform owners, senior technology stakeholders, and Cybersecurity leadership, translating technical risks into business impact. Represent the function in key governance forums, providing updates on maturity progress, roadmap delivery, and risk posture. Influence and align stakeholders across federated engineering teams to ensure consistent adoption of cybersecurity best practices. Continuous Improvement Track and report maturity scores, ensuring measurable improvement across platforms. Continuously evolve the maturity framework in response to emerging threats, technology evolution, and regulatory expectations. Drive a culture of secure-by-design engineering through engagement, advocacy, and knowledge sharing. Required Skills/Experience The ideal candidate will have the following: Proven expertise in Cybersecurity within large-scale, regulated financial institutions or similarly complex environments. Deep technical knowledge of engineering platforms, including CI/CD systems, build tools, artifact repositories, runtime environments, and developer tooling. Strong experience with DevSecOps practices, including secure pipeline design, integration of security scanning tools, and automation of security controls. Strong knowledge and understanding of service mesh, cryptography, network security, application security, vulnerability management, and risk management. Demonstrable ability to conduct threat modelling, platform security assessments, and gap analysis. Experience building and implementing maturity models, frameworks, or roadmaps in complex enterprise environments. Strong stakeholder management skills, with the ability to influence senior leadership and drive change across federated technology teams. Excellent communication skills, with the ability to translate technical risk into business impact. Desirable Skills/Experience Although not essential, the following skills are desired by the client: Professional certifications such as CISSP, CISM, CCSK, CCSP, or equivalent. Hands-on knowledge of cloud security (AWS, Azure, GCP) and container orchestration platforms (e.g., Kubernetes). Experience in international and diverse environments, with exposure to regulatory engagement. Familiarity with engineering excellence practices such as SLSA, supply chain security, SBOM, or secure developer tooling initiatives. If you are interested in this opportunity, please apply now with your updated CV in Microsoft Word/PDF format. Disclaimer Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies. Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.
Apr 22, 2026
Contractor
Job Title: DevSecOps Security Consultant Location: Sheffield or Birmingham (hybrid - 3 days per week) Salary/Rate: (Apply online only) per day inside IR35 Start Date: May Job Type: Initial contract until 18/05/2027 Company Introduction We have an exciting opportunity now available with one of our sector-leading consultancy clients! They are currently looking for a skilled DevSecOps Security Consultant to join their client at a Tier 1 bank in either Sheffield or Birmingham on a hybrid basis. Job Responsibilities/Objectives We are seeking a highly skilled and experienced Senior Cybersecurity SME / Consultant to join the Engineering Excellence and Enablement team. The successful candidate will work across global engineering platforms to benchmark, uplift, and continuously evolve cybersecurity maturity. The successful candidate will play a critical role in ensuring that build systems, runtime infrastructure, and developer tooling are secure by design, while enabling rapid and resilient software delivery across the bank. This role offers a unique opportunity to shape the cybersecurity posture of engineering platforms at one of the world?s leading financial institutions, ensuring the bank can deliver digital services securely, reliably, and at scale. Framework and Assessment Develop and maintain an Engineering-Platform Cybersecurity Maturity Framework to standardise assessments across platforms. Conduct comprehensive platform security reviews (build systems, CI/CD pipelines, runtime infrastructure, developer tooling) against defined framework criteria. Perform threat modelling and gap analysis, identifying vulnerabilities and systemic risks impacting source code, artifacts, and workloads. Engineering Platform Security Enablement Establish standardised secure architecture and engineering patterns for build systems, CI/CD pipelines, runtime environments, and developer tooling. Define and enforce platform security baselines using policy-as-code and automated controls. Partner with platform owners to remediate critical gaps and implement scalable solutions for artifact integrity, access control, and configuration security. Integrate vulnerability management, SBOM, provenance, and code-signing practices within engineering workflows. Roadmap Development & Execution Prioritise identified gaps based on business risk, regulatory impact, and operational criticality. Collaborate with platform owners and engineering leads to build actionable security roadmaps, balancing quick wins with long-term strategic improvements. Partner with engineering teams to design, develop, and embed security patterns and best practices into engineering platforms. Stakeholder Engagement & Governance Serve as a trusted advisor to platform owners, senior technology stakeholders, and Cybersecurity leadership, translating technical risks into business impact. Represent the function in key governance forums, providing updates on maturity progress, roadmap delivery, and risk posture. Influence and align stakeholders across federated engineering teams to ensure consistent adoption of cybersecurity best practices. Continuous Improvement Track and report maturity scores, ensuring measurable improvement across platforms. Continuously evolve the maturity framework in response to emerging threats, technology evolution, and regulatory expectations. Drive a culture of secure-by-design engineering through engagement, advocacy, and knowledge sharing. Required Skills/Experience The ideal candidate will have the following: Proven expertise in Cybersecurity within large-scale, regulated financial institutions or similarly complex environments. Deep technical knowledge of engineering platforms, including CI/CD systems, build tools, artifact repositories, runtime environments, and developer tooling. Strong experience with DevSecOps practices, including secure pipeline design, integration of security scanning tools, and automation of security controls. Strong knowledge and understanding of service mesh, cryptography, network security, application security, vulnerability management, and risk management. Demonstrable ability to conduct threat modelling, platform security assessments, and gap analysis. Experience building and implementing maturity models, frameworks, or roadmaps in complex enterprise environments. Strong stakeholder management skills, with the ability to influence senior leadership and drive change across federated technology teams. Excellent communication skills, with the ability to translate technical risk into business impact. Desirable Skills/Experience Although not essential, the following skills are desired by the client: Professional certifications such as CISSP, CISM, CCSK, CCSP, or equivalent. Hands-on knowledge of cloud security (AWS, Azure, GCP) and container orchestration platforms (e.g., Kubernetes). Experience in international and diverse environments, with exposure to regulatory engagement. Familiarity with engineering excellence practices such as SLSA, supply chain security, SBOM, or secure developer tooling initiatives. If you are interested in this opportunity, please apply now with your updated CV in Microsoft Word/PDF format. Disclaimer Notwithstanding any guidelines given to level of experience sought, we will consider candidates from outside this range if they can demonstrate the necessary competencies. Square One is acting as both an employment agency and an employment business, and is an equal opportunities recruitment business. Square One embraces diversity and will treat everyone equally. Please see our website for our full diversity statement.
A leading technology firm in Greater London is seeking a Staff Engineer to architect future Java and Kotlin powered services. The role requires strong technical leadership, guiding teams through modern engineering and DevSecOps practices. Candidates should have robust Java development experience, knowledge in AWS, Docker, and relational databases, and a proven background in leading technical initiatives across multiple teams. This is a fantastic opportunity to influence at scale within a rapidly evolving technology landscape.
Apr 20, 2026
Full time
A leading technology firm in Greater London is seeking a Staff Engineer to architect future Java and Kotlin powered services. The role requires strong technical leadership, guiding teams through modern engineering and DevSecOps practices. Candidates should have robust Java development experience, knowledge in AWS, Docker, and relational databases, and a proven background in leading technical initiatives across multiple teams. This is a fantastic opportunity to influence at scale within a rapidly evolving technology landscape.
Wood Mackenzie is the global leader in analytics, insights and proprietary data across the entire energy and natural resources landscape.For over 50 years our work has guided the decisions of the world's most influential energy producers, utilities companies, financial institutions and governments.Now, with the world's energy system more complex and interconnected than ever before, sector-specific views are no longer enough. That's why we've redefined what's possible with Intelligence Connected.By fusing our unparalleled proprietary data with the sharpest analytical minds, all supercharged by Synoptic AI, we deliver a clear, interconnected view of the entire value chain. Our trusted team of 2,700 experts across 30 countries breaks siloes and connects industries, markets and regions across the globe.This empowers our customers to identify risk sooner, spot opportunities faster and recalibrate strategy with confidence - whether planning days, weeks, months or decades ahead.Wood Mackenzie Intelligence Connected Wood Mackenzie Values Position Overview We are seeking an experienced Cyber Security Lead Analyst to join our cyber security team. The ideal candidate will have a minimum of 5 years cyber security experience and 3+ years in cloud security and/or application security. The candidate will be able to demonstrate a proven track record of protecting enterprise environments against evolving cyber threats. This role requires a technically proficient lead analyst who can lead security initiatives and ensure our cloud and application infrastructure maintains the highest security standards, whilst maintaining business partnerships across the group. Key Responsibilities Monitor and analyze security events across cloud and on-premises environments using SIEM and security analytics tools Conduct thorough investigations of security incidents and provide detailed incident reports Develop and maintain incident response playbooks and procedures Experience with threat intelligence platforms and threat hunting Experience with security orchestration, automation and response (SOAR) platforms Understanding of data protection and encryption technologies Experience in regulated industries (financial services, healthcare, energy) Background in offensive security or penetration testing Design, implement, and maintain security controls across cloud platforms (AWS, Azure, GCP) Conduct cloud security assessments and architecture reviews Ensure compliance with cloud security best practices and frameworks (CIS Benchmarks, CSA CCM, NIST) Manage cloud-native security tools including CSPM, CWPP, and cloud WAF solutions Implement and maintain identity and access management (IAM) policies and controls Lead cyber security programs and coordinate remediation efforts Collaborate with DevOps teams to integrate security into CI/CD pipelines (DevSecOps) Stay current with emerging threats, vulnerabilities, and security technologies Contribute to security awareness training and documentation Facilitate Supplier Management and security input into bids Support compliance initiatives (SOC 2, ISO 27001, PCI-DSS, GDPR, etc.) Develop and enforce security policies, standards, and procedures Conduct security audits and risk assessments Maintain security documentation and metrics reporting Required Qualifications 5+ years of experience in cybersecurity roles 3+ years of hands-on experience with cloud security (AWS, Azure, or GCP) Proven experience leading security incidents and coordinating response efforts Experience with security frameworks such as NIST CSF, MITRE ATT&CK, or Zero Trust architecture Technical Skills Strong expertise in cloud security services and tools (AWS & Azure) Experience working with SIEM platforms (Splunk, Sentinel) Understanding of network security, firewalls, IDS/IPS, and VPN technologies Familiarity with security testing tools (vulnerability scanners, SAST/DAST, penetration testing tools) Experience with endpoint detection and response (EDR) solutions Certifications (one or more preferred) CISSP (Certified Information Systems Security Professional) CCSP (Certified Cloud Security Professional) AWS Certified Security - Specialty Microsoft Certified: Azure Security Engineer Associate Soft Skills Strong analytical and problem-solving abilities Excellent written and verbal communication skills Ability to explain complex security concepts to technical and non-technical audiences Leadership capabilities and experience mentoring team members Strong attention to detail and ability to work under pressure Collaborative mindset with cross-functional teams Business Partnering experience Education Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience) Working Conditions Some flexibility for remote work - 2 days minimum in office (Edinburgh preferred) Equal Opportunities We are an equal opportunities employer. This means we are committed to recruiting the best people regardless of their race, colour, religion, age, sex, national origin, disability or protected veteran status. You can find out more about your rights under the law at If you are applying for a role and have a physical or mental disability, we will support you with your application or through the hiring process. Inclusive - we succeed together Trusting - we choose to trust each other Customer committed - we put customers at the heart of our decisions Future Focused - we accelerate change Curious - we turn knowledge into action
Apr 15, 2026
Full time
Wood Mackenzie is the global leader in analytics, insights and proprietary data across the entire energy and natural resources landscape.For over 50 years our work has guided the decisions of the world's most influential energy producers, utilities companies, financial institutions and governments.Now, with the world's energy system more complex and interconnected than ever before, sector-specific views are no longer enough. That's why we've redefined what's possible with Intelligence Connected.By fusing our unparalleled proprietary data with the sharpest analytical minds, all supercharged by Synoptic AI, we deliver a clear, interconnected view of the entire value chain. Our trusted team of 2,700 experts across 30 countries breaks siloes and connects industries, markets and regions across the globe.This empowers our customers to identify risk sooner, spot opportunities faster and recalibrate strategy with confidence - whether planning days, weeks, months or decades ahead.Wood Mackenzie Intelligence Connected Wood Mackenzie Values Position Overview We are seeking an experienced Cyber Security Lead Analyst to join our cyber security team. The ideal candidate will have a minimum of 5 years cyber security experience and 3+ years in cloud security and/or application security. The candidate will be able to demonstrate a proven track record of protecting enterprise environments against evolving cyber threats. This role requires a technically proficient lead analyst who can lead security initiatives and ensure our cloud and application infrastructure maintains the highest security standards, whilst maintaining business partnerships across the group. Key Responsibilities Monitor and analyze security events across cloud and on-premises environments using SIEM and security analytics tools Conduct thorough investigations of security incidents and provide detailed incident reports Develop and maintain incident response playbooks and procedures Experience with threat intelligence platforms and threat hunting Experience with security orchestration, automation and response (SOAR) platforms Understanding of data protection and encryption technologies Experience in regulated industries (financial services, healthcare, energy) Background in offensive security or penetration testing Design, implement, and maintain security controls across cloud platforms (AWS, Azure, GCP) Conduct cloud security assessments and architecture reviews Ensure compliance with cloud security best practices and frameworks (CIS Benchmarks, CSA CCM, NIST) Manage cloud-native security tools including CSPM, CWPP, and cloud WAF solutions Implement and maintain identity and access management (IAM) policies and controls Lead cyber security programs and coordinate remediation efforts Collaborate with DevOps teams to integrate security into CI/CD pipelines (DevSecOps) Stay current with emerging threats, vulnerabilities, and security technologies Contribute to security awareness training and documentation Facilitate Supplier Management and security input into bids Support compliance initiatives (SOC 2, ISO 27001, PCI-DSS, GDPR, etc.) Develop and enforce security policies, standards, and procedures Conduct security audits and risk assessments Maintain security documentation and metrics reporting Required Qualifications 5+ years of experience in cybersecurity roles 3+ years of hands-on experience with cloud security (AWS, Azure, or GCP) Proven experience leading security incidents and coordinating response efforts Experience with security frameworks such as NIST CSF, MITRE ATT&CK, or Zero Trust architecture Technical Skills Strong expertise in cloud security services and tools (AWS & Azure) Experience working with SIEM platforms (Splunk, Sentinel) Understanding of network security, firewalls, IDS/IPS, and VPN technologies Familiarity with security testing tools (vulnerability scanners, SAST/DAST, penetration testing tools) Experience with endpoint detection and response (EDR) solutions Certifications (one or more preferred) CISSP (Certified Information Systems Security Professional) CCSP (Certified Cloud Security Professional) AWS Certified Security - Specialty Microsoft Certified: Azure Security Engineer Associate Soft Skills Strong analytical and problem-solving abilities Excellent written and verbal communication skills Ability to explain complex security concepts to technical and non-technical audiences Leadership capabilities and experience mentoring team members Strong attention to detail and ability to work under pressure Collaborative mindset with cross-functional teams Business Partnering experience Education Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience) Working Conditions Some flexibility for remote work - 2 days minimum in office (Edinburgh preferred) Equal Opportunities We are an equal opportunities employer. This means we are committed to recruiting the best people regardless of their race, colour, religion, age, sex, national origin, disability or protected veteran status. You can find out more about your rights under the law at If you are applying for a role and have a physical or mental disability, we will support you with your application or through the hiring process. Inclusive - we succeed together Trusting - we choose to trust each other Customer committed - we put customers at the heart of our decisions Future Focused - we accelerate change Curious - we turn knowledge into action
We're proud to be trusted by some of the largest companies in the world to handle their Salesforce DevOps. Underpinning that trust is a commitment to protect their data through our modern approach to security and compliance, and this is only getting more important as we grow our customer base in increasingly regulated sectors. This is a fantastic opportunity to progress your career in security and compliance within the tech sector. This role will provide you with exposure to several key areas including information security, data protection, general compliance, audits and relevant project work. There'll be lots of opportunity to progress within the role and specialise within a certain area of the business in the future. What's the opportunity at Gearset? Own our security and compliance documentation accurate and up to date, such as policies, procedures, and support documentation across our information security and compliance programs. Support our commercial teams in complex information security and compliance negotiations, while making sure we respond accurately and within given timescales. Take ownership of maintaining our current ISO 27001 compliance and certification through continuous improvement activities, as well as supporting preparation for internal and external audits. Own our internal Data Protection compliance program and make sure we comply with various regulations globally including UK GDPR, EU GDPR, and CCPA. Gain experience in the implementation and ownership of additional compliance based projects as we increase the international regulation and standards we comply with. Help us work efficiently by identifying common deal blockers and standardising documentation and processes. What you'll achieve You'll build on your prior experience from a GRC or an information security role, within a technology company, to support our ambitious company growth plans. You'll become a technical expert on the company and our products to streamline customer onboarding, and security and compliance reviews. You'll own reviewing and responding to our complex customer security and compliance requests. You'll have ownership of compliance and reporting to the international information security standard ISO 27001, to ensure Gearset retains our certification and continues to provide the highest level of protection to our customers' data. You'll own our internal Data Protection compliance program and make sure we comply with various regulations globally including UK GDPR, EU GDPR, CCPA. You'll manage out third party supplier risk program. You'll work as part of the compliance project team when implementing new regulations or standards such as NIST, fedRAMP etc. You'll have the opportunity to get certified to international standards on Information Security, Compliance, Risk, Data Protection or Cyber Security. About you Have been in an information security or GRC role, within a technology company and hold either a ISO 27001 Lead Implementer or Lead Auditor certificate. Have in-depth knowledge of ISO 27001 standards & proven experience in implementing ISO 27001 and maintaining the certification. Along with knowledge of general compliance requirements such as Modern Slavery, AML, Bribery etc. Have a track record of owning internal compliance with global data protection laws including GDPR and CCPA. Have an understanding of AWS Cloud infrastructure, and application security. Possess a technical predisposition, the desire to learn and ability to react to the needs of a rapidly growing company eg comfortable working in an ever changing environment. Are an excellent communicator, with attention to detail and a passion for always delivering a great customer experience. Great to haves A degree in Computer Science, Information Security, Cybersecurity, or a closely related discipline such as Data Protection, Information Governance or Risk. A recognised Information Security qualification such as CISSP, CompTIA Security+ etc. Past exposure to other regulations or frameworks such as NIST, HIPAA, fedRAMP, DORA. Knowledge of DevOps and DevSecOps. Benefits (the stuff you'd expect!) This role is based in our Cambridge office but with the flexibility to work from home when you need to. Opportunity to join our Long Term Incentive scheme. Generous personal development budget for courses, conferences, or whatever is useful to your professional development in the role of up to £1500 per year. Top end hardware provided. Free lunch any day you are in the office. BUPA health care. Life Insurance & critical illness cover. Discounted gym membership, as well as a range of health and wellness benefits.
Apr 15, 2026
Full time
We're proud to be trusted by some of the largest companies in the world to handle their Salesforce DevOps. Underpinning that trust is a commitment to protect their data through our modern approach to security and compliance, and this is only getting more important as we grow our customer base in increasingly regulated sectors. This is a fantastic opportunity to progress your career in security and compliance within the tech sector. This role will provide you with exposure to several key areas including information security, data protection, general compliance, audits and relevant project work. There'll be lots of opportunity to progress within the role and specialise within a certain area of the business in the future. What's the opportunity at Gearset? Own our security and compliance documentation accurate and up to date, such as policies, procedures, and support documentation across our information security and compliance programs. Support our commercial teams in complex information security and compliance negotiations, while making sure we respond accurately and within given timescales. Take ownership of maintaining our current ISO 27001 compliance and certification through continuous improvement activities, as well as supporting preparation for internal and external audits. Own our internal Data Protection compliance program and make sure we comply with various regulations globally including UK GDPR, EU GDPR, and CCPA. Gain experience in the implementation and ownership of additional compliance based projects as we increase the international regulation and standards we comply with. Help us work efficiently by identifying common deal blockers and standardising documentation and processes. What you'll achieve You'll build on your prior experience from a GRC or an information security role, within a technology company, to support our ambitious company growth plans. You'll become a technical expert on the company and our products to streamline customer onboarding, and security and compliance reviews. You'll own reviewing and responding to our complex customer security and compliance requests. You'll have ownership of compliance and reporting to the international information security standard ISO 27001, to ensure Gearset retains our certification and continues to provide the highest level of protection to our customers' data. You'll own our internal Data Protection compliance program and make sure we comply with various regulations globally including UK GDPR, EU GDPR, CCPA. You'll manage out third party supplier risk program. You'll work as part of the compliance project team when implementing new regulations or standards such as NIST, fedRAMP etc. You'll have the opportunity to get certified to international standards on Information Security, Compliance, Risk, Data Protection or Cyber Security. About you Have been in an information security or GRC role, within a technology company and hold either a ISO 27001 Lead Implementer or Lead Auditor certificate. Have in-depth knowledge of ISO 27001 standards & proven experience in implementing ISO 27001 and maintaining the certification. Along with knowledge of general compliance requirements such as Modern Slavery, AML, Bribery etc. Have a track record of owning internal compliance with global data protection laws including GDPR and CCPA. Have an understanding of AWS Cloud infrastructure, and application security. Possess a technical predisposition, the desire to learn and ability to react to the needs of a rapidly growing company eg comfortable working in an ever changing environment. Are an excellent communicator, with attention to detail and a passion for always delivering a great customer experience. Great to haves A degree in Computer Science, Information Security, Cybersecurity, or a closely related discipline such as Data Protection, Information Governance or Risk. A recognised Information Security qualification such as CISSP, CompTIA Security+ etc. Past exposure to other regulations or frameworks such as NIST, HIPAA, fedRAMP, DORA. Knowledge of DevOps and DevSecOps. Benefits (the stuff you'd expect!) This role is based in our Cambridge office but with the flexibility to work from home when you need to. Opportunity to join our Long Term Incentive scheme. Generous personal development budget for courses, conferences, or whatever is useful to your professional development in the role of up to £1500 per year. Top end hardware provided. Free lunch any day you are in the office. BUPA health care. Life Insurance & critical illness cover. Discounted gym membership, as well as a range of health and wellness benefits.
At Kroo Bank, we are charting the future of banking with our groundbreaking technological innovations and unique digital services. The rapid advancements in the fintech sector necessitate ongoing evolution in the roles and responsibilities of our bank to effectively tackle new business opportunities and challenges. We are dedicated to consistently updating our job descriptions to ensure we continue to lead in banking innovation. How you will contribute and key responsibilities: As a Senior Security Engineer, you will be instrumental in designing and implementing security measures for our mobile applications, services, and websites to meet the highest security standards. Your expertise will help us continuously analyse and improve our security systems, ensuring that our products and services are not only secure by design but also comply with internal and external regulatory requirements. Other responsibilities include: Security Analysis and Improvement: Continuously analyse our security systems for potential improvements, ensuring that our defences remain at the forefront of cybersecurity practices. Vulnerability Management: Proactively identify, assess, and remediate security vulnerabilities to maintain the integrity and confidentiality of our customer data. Security Automation: Automate security processes and procedures to enhance efficiency and effectiveness, reducing the risk of human error. Security Requirements and Solutions: Identify, define, and document system security requirements, providing well-considered recommendations to management. Development of Security Standards: Develop and maintain best practices and security standards for the organisation, guiding teams in the implementation of secure coding practices. Secure Design: Collaborate with development teams to ensure that web and mobile front-ends, as well as microservice architectures, are designed with robust security measures in mind. Cloud security and secure infrastructure: Assist teams in diagnosing and addressing gaps in infrastructure security, aligning the organisation with industry security posture standards. Cybersecurity Collaboration: Work closely with stakeholders across the organisation to align security measures with our overarching cybersecurity strategy and protect the bank's technology infrastructure. Regulatory Compliance: Support teams in meeting compliance requirements for internal audits and external regulators, safeguarding against potential fines and reputational damage. To be successful in this role you should have skills and experience in multiple domains, such as application security, network security or security operations. You need to have programming experience and the ability to proactively seek out efficient and repetitive solutions to security challenges. At a minimum, you should have at least 3 years of experience in system, network or application security. You should also have a proven experience and knowledge with any combination of the following: Threat modelling and risk assessments, Working knowledge of secure coding principles (OWASP and OWASP mobile, SANS ), Experience with designing and administering identity management (authentication and authorisation including policy enforcement points, token services, protocols such as OAuth2), Working knowledge of cryptography including encryption, signing and digital certificates, Principles of securing mobile applications and web services, Docker or kubernetes and infrastructure as code, Event driven streaming technologies, Logging and monitoring, networks, firewalls, load balancers, DNS, CDNs, Working knowledge of agile DevSecOps environments, and CI/CD (Git, Concourse, Terraform), Working knowledge of SAST, DAST, RASP, and IAST tools and building security into existing SDLC processes, Knowledge of cloud Security Architecture of public clouds (such as AWS or GCP), Security certification such as CISSP, CCP, SANS, GAIC, Ethical Hacker, Experience in working in regulated company, preferably with a FinTech/ banking background and experience in DevOps, Excellent oral, written communication and presentation skills. What we offer: At our cutting-edge fintech company, we know that attracting and retaining the best talent means offering top-notch benefits that help our employees thrive both in and outside of work. Check out what we currently offer: Generous holiday time: 25 days annual leave, 8 bank holidays, 1 Kroo bank holiday (June 24th), and 1 day off during the week of your birthday. Personal days: We know that life can be unpredictable, so we offer 3 personal days to use as needed. Employer-sponsored volunteer program: We're passionate about giving back to our community, and we support our employees in doing the same with up to 4 hours per month of employer-sponsored volunteer time. Mental health support: We care about the mental health of our team members and offer access to Spill, our mental health support partner. Workplace pension: We want you to feel secure about your future, so we offer a workplace pension with a 5% employee contribution and a 3% employer top-up. Learning and development: After 1 year of service, you'll have access to £500 from the Kroo Learning Fund to invest in your career development. Top-notch equipment: We provide top-of-the-line equipment necessary for smooth hybrid work, including a MacBook laptop. Additionally, we also offer support in establishing your home office by contributing towards your setup if required. Modern office: When you're in the office, you'll enjoy access to our modern, bustling workspace in Farringdon, Central London. Cycle to Work scheme: We encourage sustainable transportation with our Cycle to Work scheme. Electric Car scheme: We're committed to reducing our carbon footprint, and our Electric Car scheme makes it easy for our employees to do the same. Enhanced parental leave: We know that family comes first, and we offer an enhanced parental leave policy to support our employees in starting and growing their families. You get full healthcare for you and your nuclear family via Vitality. Hybrid Working: At Kroo Bank, we have a hybrid policy that gives both individuals and teams a lot of freedom when it comes to using the office space to boost productivity. Our London office is a great resource when used effectively. So, employees who can occasionally come to the office are a good fit for how we work right now. Keep in mind that this job involves working from Monday to Friday, with a mix of remote and office work, so you won't need to be on-site all the time. Diversity and Inclusion: We wholeheartedly uphold our commitment to fostering a diverse and inclusive workplace. Every employee is highly regarded, respected, and supported without any form of judgement or prejudice. We consider Diversity, Equality, and Inclusion as fundamental pillars guiding our path in all aspects of our bank. We also ensure that reasonable adjustments are made available to all candidates throughout the recruitment process. To all Recruitment Agencies: At Kroo Bank, agency resumes are strictly prohibited. Do not submit agency resumes or forward them to our job advertisements or Kroo Bank employees. Be aware that Kroo Bank will not assume any responsibility for fees incurred due to unsolicited resumes. To ensure a fair and efficient application process, all candidates are kindly requested to submit their applications directly through the advertised platform. We kindly ask that you refrain from reaching out to the company or its employees via email, LinkedIn, or any other communication channels for inquiries or updates. Please note that any attempts to contact us through these channels will not receive a response. Thank you for your understanding and cooperation.
Apr 15, 2026
Full time
At Kroo Bank, we are charting the future of banking with our groundbreaking technological innovations and unique digital services. The rapid advancements in the fintech sector necessitate ongoing evolution in the roles and responsibilities of our bank to effectively tackle new business opportunities and challenges. We are dedicated to consistently updating our job descriptions to ensure we continue to lead in banking innovation. How you will contribute and key responsibilities: As a Senior Security Engineer, you will be instrumental in designing and implementing security measures for our mobile applications, services, and websites to meet the highest security standards. Your expertise will help us continuously analyse and improve our security systems, ensuring that our products and services are not only secure by design but also comply with internal and external regulatory requirements. Other responsibilities include: Security Analysis and Improvement: Continuously analyse our security systems for potential improvements, ensuring that our defences remain at the forefront of cybersecurity practices. Vulnerability Management: Proactively identify, assess, and remediate security vulnerabilities to maintain the integrity and confidentiality of our customer data. Security Automation: Automate security processes and procedures to enhance efficiency and effectiveness, reducing the risk of human error. Security Requirements and Solutions: Identify, define, and document system security requirements, providing well-considered recommendations to management. Development of Security Standards: Develop and maintain best practices and security standards for the organisation, guiding teams in the implementation of secure coding practices. Secure Design: Collaborate with development teams to ensure that web and mobile front-ends, as well as microservice architectures, are designed with robust security measures in mind. Cloud security and secure infrastructure: Assist teams in diagnosing and addressing gaps in infrastructure security, aligning the organisation with industry security posture standards. Cybersecurity Collaboration: Work closely with stakeholders across the organisation to align security measures with our overarching cybersecurity strategy and protect the bank's technology infrastructure. Regulatory Compliance: Support teams in meeting compliance requirements for internal audits and external regulators, safeguarding against potential fines and reputational damage. To be successful in this role you should have skills and experience in multiple domains, such as application security, network security or security operations. You need to have programming experience and the ability to proactively seek out efficient and repetitive solutions to security challenges. At a minimum, you should have at least 3 years of experience in system, network or application security. You should also have a proven experience and knowledge with any combination of the following: Threat modelling and risk assessments, Working knowledge of secure coding principles (OWASP and OWASP mobile, SANS ), Experience with designing and administering identity management (authentication and authorisation including policy enforcement points, token services, protocols such as OAuth2), Working knowledge of cryptography including encryption, signing and digital certificates, Principles of securing mobile applications and web services, Docker or kubernetes and infrastructure as code, Event driven streaming technologies, Logging and monitoring, networks, firewalls, load balancers, DNS, CDNs, Working knowledge of agile DevSecOps environments, and CI/CD (Git, Concourse, Terraform), Working knowledge of SAST, DAST, RASP, and IAST tools and building security into existing SDLC processes, Knowledge of cloud Security Architecture of public clouds (such as AWS or GCP), Security certification such as CISSP, CCP, SANS, GAIC, Ethical Hacker, Experience in working in regulated company, preferably with a FinTech/ banking background and experience in DevOps, Excellent oral, written communication and presentation skills. What we offer: At our cutting-edge fintech company, we know that attracting and retaining the best talent means offering top-notch benefits that help our employees thrive both in and outside of work. Check out what we currently offer: Generous holiday time: 25 days annual leave, 8 bank holidays, 1 Kroo bank holiday (June 24th), and 1 day off during the week of your birthday. Personal days: We know that life can be unpredictable, so we offer 3 personal days to use as needed. Employer-sponsored volunteer program: We're passionate about giving back to our community, and we support our employees in doing the same with up to 4 hours per month of employer-sponsored volunteer time. Mental health support: We care about the mental health of our team members and offer access to Spill, our mental health support partner. Workplace pension: We want you to feel secure about your future, so we offer a workplace pension with a 5% employee contribution and a 3% employer top-up. Learning and development: After 1 year of service, you'll have access to £500 from the Kroo Learning Fund to invest in your career development. Top-notch equipment: We provide top-of-the-line equipment necessary for smooth hybrid work, including a MacBook laptop. Additionally, we also offer support in establishing your home office by contributing towards your setup if required. Modern office: When you're in the office, you'll enjoy access to our modern, bustling workspace in Farringdon, Central London. Cycle to Work scheme: We encourage sustainable transportation with our Cycle to Work scheme. Electric Car scheme: We're committed to reducing our carbon footprint, and our Electric Car scheme makes it easy for our employees to do the same. Enhanced parental leave: We know that family comes first, and we offer an enhanced parental leave policy to support our employees in starting and growing their families. You get full healthcare for you and your nuclear family via Vitality. Hybrid Working: At Kroo Bank, we have a hybrid policy that gives both individuals and teams a lot of freedom when it comes to using the office space to boost productivity. Our London office is a great resource when used effectively. So, employees who can occasionally come to the office are a good fit for how we work right now. Keep in mind that this job involves working from Monday to Friday, with a mix of remote and office work, so you won't need to be on-site all the time. Diversity and Inclusion: We wholeheartedly uphold our commitment to fostering a diverse and inclusive workplace. Every employee is highly regarded, respected, and supported without any form of judgement or prejudice. We consider Diversity, Equality, and Inclusion as fundamental pillars guiding our path in all aspects of our bank. We also ensure that reasonable adjustments are made available to all candidates throughout the recruitment process. To all Recruitment Agencies: At Kroo Bank, agency resumes are strictly prohibited. Do not submit agency resumes or forward them to our job advertisements or Kroo Bank employees. Be aware that Kroo Bank will not assume any responsibility for fees incurred due to unsolicited resumes. To ensure a fair and efficient application process, all candidates are kindly requested to submit their applications directly through the advertised platform. We kindly ask that you refrain from reaching out to the company or its employees via email, LinkedIn, or any other communication channels for inquiries or updates. Please note that any attempts to contact us through these channels will not receive a response. Thank you for your understanding and cooperation.
About the role: Our mission is to make mobility more ecological, efficient, and convenient by delivering world-class in-car data and transaction services. Our technology powers companies such as Apple, HERE, TomTom, and more than 20 automotive brands including Audi and Volkswagen. As we continue to grow and integrate into the Arrive Global Platform, we are looking for a Staff Engineer. We are transitioning from a established monolith to a high-performance, modern ecosystem built on Java and Kotlin. We need a technical heavyweight who can navigate our roots while architecting the future of global automotive services. Why This Role Is Exciting This is a high-impact technical leadership role where you will: Architect the Future: Act as the primary driver for our move toward Java/Kotlin powered services. Bridge Two Eras: Use your deep understanding of architecture to ensure a seamless transition without disrupting services used by millions. Influence at Scale: Shape the technical roadmap across multiple teams and the broader Arrive Global Platform. Mentor & Elevate: Build a culture of engineering excellence, guiding teams through the nuances of modern JVM languages and cloud-native patterns. If you enjoy solving complex technical challenges while helping teams grow, this role offers the perfect balance of hands on engineering and strategic influence. What You'll Be Working On You'll help guide the technical direction of our platform while collaborating closely with engineers, product teams, and stakeholders. Your work will include: Leading architecture discussions and technical decision-making Improving performance, scalability, and reliability of our platform Diagnosing complex issues across local, pre release, and production environments Driving engineering best practices across DevSecOps, CI/CD, and testing Helping modernise parts of our PHP based platform as we evolve our technology stack Supporting teams through technical mentorship and guidance Working within Agile/Scrum teams to deliver impactful features for drivers and automotive partners Our current core stack includes: MySQL AWS Docker Linux and the future includes JAVA KOTLIN PostGres What We're Looking For We're looking for a strong technical leader who enjoys solving complex problems and helping teams succeed. You likely bring: Strong development experience Expert in modern Java based systems Experience with related technologies such as TypeScript, React, JavaScript, or Python Hands on experience working with AWS and Infrastructure as Code (Terraform, CDK, or CloudFormation) Deep understanding of MySQL and relational database performance optimisation Experience working with Linux, Docker, and Git Proven experience leading technical initiatives across multiple teams Experience designing scalable, high performance systems Experience working with legacy or monolithic systems and modernising them Strong understanding of API design and distributed systems Knowledge of modern engineering practices, including CI/CD and DevSecOps Understanding of secure development practices such as OWASP Top 10 Experience with testing methodologies such as TDD or BDD Bonus experience: PostgreSQL or NoSQL databases Large scale platform migrations or re architecture initiatives Experience in Automotive Experience with Payments We've signed up to an ambitious journey. Join us! As Arrive, we guide customers and communities towards brighter futures and more livable cities, it isn't a challenge just anyone could take on. Luckily, we have something to help us make it happen. Our people and our values. We Arrive Curious, Focused and Together. Just as our entire brand is inspired by the North Star, the shining light leading travelers to their destinations since time began, our values guide us. They help us be at our best. For our customers. For the cities and communities we serve. For ourselves. As a global team, we are transforming urban mobility. Let's grow better, together.
Apr 13, 2026
Full time
About the role: Our mission is to make mobility more ecological, efficient, and convenient by delivering world-class in-car data and transaction services. Our technology powers companies such as Apple, HERE, TomTom, and more than 20 automotive brands including Audi and Volkswagen. As we continue to grow and integrate into the Arrive Global Platform, we are looking for a Staff Engineer. We are transitioning from a established monolith to a high-performance, modern ecosystem built on Java and Kotlin. We need a technical heavyweight who can navigate our roots while architecting the future of global automotive services. Why This Role Is Exciting This is a high-impact technical leadership role where you will: Architect the Future: Act as the primary driver for our move toward Java/Kotlin powered services. Bridge Two Eras: Use your deep understanding of architecture to ensure a seamless transition without disrupting services used by millions. Influence at Scale: Shape the technical roadmap across multiple teams and the broader Arrive Global Platform. Mentor & Elevate: Build a culture of engineering excellence, guiding teams through the nuances of modern JVM languages and cloud-native patterns. If you enjoy solving complex technical challenges while helping teams grow, this role offers the perfect balance of hands on engineering and strategic influence. What You'll Be Working On You'll help guide the technical direction of our platform while collaborating closely with engineers, product teams, and stakeholders. Your work will include: Leading architecture discussions and technical decision-making Improving performance, scalability, and reliability of our platform Diagnosing complex issues across local, pre release, and production environments Driving engineering best practices across DevSecOps, CI/CD, and testing Helping modernise parts of our PHP based platform as we evolve our technology stack Supporting teams through technical mentorship and guidance Working within Agile/Scrum teams to deliver impactful features for drivers and automotive partners Our current core stack includes: MySQL AWS Docker Linux and the future includes JAVA KOTLIN PostGres What We're Looking For We're looking for a strong technical leader who enjoys solving complex problems and helping teams succeed. You likely bring: Strong development experience Expert in modern Java based systems Experience with related technologies such as TypeScript, React, JavaScript, or Python Hands on experience working with AWS and Infrastructure as Code (Terraform, CDK, or CloudFormation) Deep understanding of MySQL and relational database performance optimisation Experience working with Linux, Docker, and Git Proven experience leading technical initiatives across multiple teams Experience designing scalable, high performance systems Experience working with legacy or monolithic systems and modernising them Strong understanding of API design and distributed systems Knowledge of modern engineering practices, including CI/CD and DevSecOps Understanding of secure development practices such as OWASP Top 10 Experience with testing methodologies such as TDD or BDD Bonus experience: PostgreSQL or NoSQL databases Large scale platform migrations or re architecture initiatives Experience in Automotive Experience with Payments We've signed up to an ambitious journey. Join us! As Arrive, we guide customers and communities towards brighter futures and more livable cities, it isn't a challenge just anyone could take on. Luckily, we have something to help us make it happen. Our people and our values. We Arrive Curious, Focused and Together. Just as our entire brand is inspired by the North Star, the shining light leading travelers to their destinations since time began, our values guide us. They help us be at our best. For our customers. For the cities and communities we serve. For ourselves. As a global team, we are transforming urban mobility. Let's grow better, together.
