Senior ServiceNow Technical Consultant - SecOps (SIR/VR) Location: UK-Based Remote with Occasional Onsite Travel Salary: £50,000 - £100,000 (dependent on experience) I'm looking for a Senior ServiceNow Technical Consultant with deep expertise in Security Incident Response (SIR) and/or Vulnerability Response (VR). We're seeking a skilled consultant to join our growing team. This role is focused on a UK-based project, so UK residency and eligibility for UK security clearance (SC) are essential. Key Responsibilities: Lead technical delivery of SecOps implementations (SIR/VR). Translate requirements into scalable platform configurations. Act as a trusted advisor to clients. Mentor other technical consultants. What You'll Need: UK residency and eligibility for Security Clearance (SC). ServiceNow Certifications: Certified System Administrator. Implementation Specialist cert in SIR or VR. Additional micro-certifications are a plus. Randstad Technologies Ltd is a leading specialist recruitment business for the IT & Engineering industries. Please note that due to a high level of applications, we can only respond to applicants whose skills & qualifications are suitable for this position. No terminology in this advert is intended to discriminate against any of the protected characteristics that fall under the Equality Act 2010. For the purposes of the Conduct Regulations 2003, when advertising permanent vacancies we are acting as an Employment Agency, and when advertising temporary/contract vacancies we are acting as an Employment Business.
Dec 14, 2025
Full time
Senior ServiceNow Technical Consultant - SecOps (SIR/VR) Location: UK-Based Remote with Occasional Onsite Travel Salary: £50,000 - £100,000 (dependent on experience) I'm looking for a Senior ServiceNow Technical Consultant with deep expertise in Security Incident Response (SIR) and/or Vulnerability Response (VR). We're seeking a skilled consultant to join our growing team. This role is focused on a UK-based project, so UK residency and eligibility for UK security clearance (SC) are essential. Key Responsibilities: Lead technical delivery of SecOps implementations (SIR/VR). Translate requirements into scalable platform configurations. Act as a trusted advisor to clients. Mentor other technical consultants. What You'll Need: UK residency and eligibility for Security Clearance (SC). ServiceNow Certifications: Certified System Administrator. Implementation Specialist cert in SIR or VR. Additional micro-certifications are a plus. Randstad Technologies Ltd is a leading specialist recruitment business for the IT & Engineering industries. Please note that due to a high level of applications, we can only respond to applicants whose skills & qualifications are suitable for this position. No terminology in this advert is intended to discriminate against any of the protected characteristics that fall under the Equality Act 2010. For the purposes of the Conduct Regulations 2003, when advertising permanent vacancies we are acting as an Employment Agency, and when advertising temporary/contract vacancies we are acting as an Employment Business.
Job Title: Senior Cloud Native GCP Engineer Max Supplier Charge Rate: £825p/d max via Umbrella Clearance required: BPSS Duration: End of April 2026 Location: Hybrid (60% remote-40% onsite London) but client teams are mostly remote. Job Description: A senior engineer to join a modern engineering practice across commercial trading business of a multi brand retailer. This role requires deep hands on experience across open source development stacks, cloud native architecture using Google Cloud services and strong capability in driving automation, observability, and platform excellence. Key responsibilities Lead the design and implementation of microservices based architecture to build scalable, secure, and maintainable applications. Develop, deploy, and maintain microservices using Spring Boot, Node.js, React Deploy, manage, and scale applications in Google Cloud Platform (GCP) environments Implement cloud native solutions using containerization technologies like Docker and orchestration tools such as Kubernetes (GKE) Drive automation across the SDLC using CI/CD pipelines, GitOps, and modern DevSecOps workflows (e.g., Jenkins, GitLab CI, GitHub Actions) Use Infrastructure as Code (IaC) with Terraform for provisioning and environment consistency Collaborate with architects and product teams to design robust and future ready solutions Champion engineering excellence, clean code practices, observability, and shift left security Work with the junior engineers to uplift development standards across squads Lead the path for introducing AI / GenAI tooling for driving adoption across each phase of SDLC (analysis, design, development, testing and deployment) Essential Skills & Experience Strong back end development experience using Spring Boot and microservices patterns Front end development exposure with frameworks like React or Angular (nice to have) Hands on experience with Google Cloud core services (e.g., GKE, Cloud Run, Pub/Sub, BigQuery, IAM) Solid expertise in Terraform and Infrastructure as Code practices Strong CI/CD and DevOps toolchain knowledge: GitLab CI, Jenkins, GitHub Actions, ArgoCD, etc. Deep understanding of containerization (Docker) and Kubernetes deployments Familiarity with security, observability (e.g. OpenTelemetry, Stackdriver), and SRE principles Experience in integrating AI/GenAI tools (e.g., Gemini Code Assist, LangChain) into engineering workflows Worked in enterprise transformation programs involving both legacy and modern tech stacks Experience with service mesh (e.g., Istio) and API gateways Contributions to open source or engineering communities
Dec 13, 2025
Full time
Job Title: Senior Cloud Native GCP Engineer Max Supplier Charge Rate: £825p/d max via Umbrella Clearance required: BPSS Duration: End of April 2026 Location: Hybrid (60% remote-40% onsite London) but client teams are mostly remote. Job Description: A senior engineer to join a modern engineering practice across commercial trading business of a multi brand retailer. This role requires deep hands on experience across open source development stacks, cloud native architecture using Google Cloud services and strong capability in driving automation, observability, and platform excellence. Key responsibilities Lead the design and implementation of microservices based architecture to build scalable, secure, and maintainable applications. Develop, deploy, and maintain microservices using Spring Boot, Node.js, React Deploy, manage, and scale applications in Google Cloud Platform (GCP) environments Implement cloud native solutions using containerization technologies like Docker and orchestration tools such as Kubernetes (GKE) Drive automation across the SDLC using CI/CD pipelines, GitOps, and modern DevSecOps workflows (e.g., Jenkins, GitLab CI, GitHub Actions) Use Infrastructure as Code (IaC) with Terraform for provisioning and environment consistency Collaborate with architects and product teams to design robust and future ready solutions Champion engineering excellence, clean code practices, observability, and shift left security Work with the junior engineers to uplift development standards across squads Lead the path for introducing AI / GenAI tooling for driving adoption across each phase of SDLC (analysis, design, development, testing and deployment) Essential Skills & Experience Strong back end development experience using Spring Boot and microservices patterns Front end development exposure with frameworks like React or Angular (nice to have) Hands on experience with Google Cloud core services (e.g., GKE, Cloud Run, Pub/Sub, BigQuery, IAM) Solid expertise in Terraform and Infrastructure as Code practices Strong CI/CD and DevOps toolchain knowledge: GitLab CI, Jenkins, GitHub Actions, ArgoCD, etc. Deep understanding of containerization (Docker) and Kubernetes deployments Familiarity with security, observability (e.g. OpenTelemetry, Stackdriver), and SRE principles Experience in integrating AI/GenAI tools (e.g., Gemini Code Assist, LangChain) into engineering workflows Worked in enterprise transformation programs involving both legacy and modern tech stacks Experience with service mesh (e.g., Istio) and API gateways Contributions to open source or engineering communities
A leading investment platform is seeking a Senior DevSecOps Engineer to enhance their cloud security and developer workflows. This remote-first role requires experience with Node.js, Infrastructure as Code, AWS, and observability tools. The successful candidate will implement secure automation and work closely with engineering teams to foster collaboration. The position also offers generous benefits, including flexible holidays and a focus on well-being. Join a fast-growing company on a mission to improve the investment landscape.
Dec 13, 2025
Full time
A leading investment platform is seeking a Senior DevSecOps Engineer to enhance their cloud security and developer workflows. This remote-first role requires experience with Node.js, Infrastructure as Code, AWS, and observability tools. The successful candidate will implement secure automation and work closely with engineering teams to foster collaboration. The position also offers generous benefits, including flexible holidays and a focus on well-being. Join a fast-growing company on a mission to improve the investment landscape.
Job Title: Cloud Security Engineer Location: Remote (25% Weekly on-site - West Midlands and South East England) Clearance: Active SC required; DV eligibility needed post-probation. Company Overview: Atreides helps organizations transform large and complex multi-modal datasets into information-rich geo-spatial data subscriptions that can be used across a wide spectrum of use cases. Currently, Atreides focuses on providing high-fidelity data solutions to enable customers to derive insights quickly. We are a fast-moving, high-performance startup. We value a diverse team and believe inclusion drives better performance. We trust our team with autonomy, believing it leads to better results and job satisfaction. With a mission-driven mindset and entrepreneurial spirit, we are building something new and helping unlock the power of massive-scale data to make the world safer, stronger, and more prosperous. Team Overview: We are a passionate team of technologists, data scientists, and analysts with backgrounds in operational intelligence, law enforcement, large multinationals, and cybersecurity operations. We obsess about designing products that will change the way global companies, governments and nonprofits protect themselves from external threats and global adversaries. Position Overview: Atreides is seeking a motivated and proactive Cloud Security Engineer with a strong focus on Microsoft Azure security to join our growing team. This role is ideal for a security engineer or SecOps professional who understands the critical importance of maintaining a highly secure environment and is eager to work across cloud, endpoint, and infrastructure domains. While the primary focus will be Azure security engineering, experience with hardware and traditional infrastructure security will be considered a strong plus. Team Principles: Remain curious and passionate in all aspects of our work Promote clear, direct, and transparent communication Embrace the 'measure twice, cut once' philosophy Value and encourage diverse ideas and technologies Lead with empathy in all interactions Responsibilities: Security Engineering & Automation: Design, build, and maintain security automation and tooling to enforce controls and simplify compliance. Build and manage identity & access management controls across cloud platforms and applications. Write and review Infrastructure-as-Code (Bicep/Terraform) for secure cloud configuration. Implement preventative and detective controls in Azure; automate remediation of alerts. Secure CI/CD pipelines, integrating results from SAST/DAST/SCA tools and ensuring supply chain integrity. Engineer solutions for Kubernetes security, focusing on RBAC, network policies, and runtime protection. Detection, Monitoring & Incident Response: Perform triage, containment, eradication, and recovery activities as part of incident response, ensuring threats are effectively mitigated. Develop and optimise security detections (Sentinel, KQL, YARA). Manage log sources, ingestion pipelines, and monitoring infrastructure. Conduct threat hunting and analysis to identify emerging risks. Lead and contribute to incident investigations, including post-mortem analysis and remediation actions. Vulnerability & Risk Management: Identify, track, and remediate vulnerabilities across cloud, endpoint, and infrastructure. Implement controls from security assessments, audits, and architecture reviews. Support third-party risk assessments and vendor due diligence. Governance, Documentation & Projects: Maintain documentation of security standards, runbooks, and procedures. Participate in security-related projects and lead implementation of new security solutions. Required Qualifications: 3+ years in security engineering or security operations, ideally in cloud-first environments. Strong understanding of cloud security architecture with hands on experience securing cloud infrastructure and services. Hands on experience with the Azure security stack, including Microsoft Defender for Cloud (recommendations, alerts, Secure Score), Azure Policy, and related security tooling. Proficiency with SIEM platforms (Azure Sentinel preferred), developing detections and alerts, tuning rules, and investigating incidents. Proven incident response capability including triage, investigation, containment, eradication, and recovery. Practical experience integrating security into software and system development lifecycles. Experience with endpoint security solutions and MDM/EMM tools. Experience securing containerised environments (Kubernetes) and CI/CD pipelines. Proficiency in scripting and automation (PowerShell, Python, KQL, Bicep). Strong understanding of network security - protocols, firewalls, IDS/IPS, WAFs, and infrastructure hardening. Familiarity with incident response frameworks (NIST, SANS). Experience configuring and using cloud-native security logging, monitoring, and detection services. In-depth knowledge of security principles, attack vectors (OWASP Top 10, MITRE ATT&CK), and the threat landscape. Desired Qualifications: Azure Security Engineer AZ-500 Security Operations Analyst SC-200 Identity and Access administrator SC-300 GIAC Certified Forensic Analyst GIAC Certified Incident Handler Compensation and Benefits: Competitive salary Comprehensive health, dental, and vision insurance plans Flexible hybrid work environment Additional benefits like flexible hours, work travel opportunities, competitive vacation time and parental leave While meeting all of these criteria would be ideal, we understand that some candidates may meet most, but not all. If you're passionate, curious and ready to "work smart and get things done," we'd love to hear from you. Security Clearance: This role requires a current and active SC clearance at the time of hire. After successful probation, candidates must be willing and eligible to undergo DV, in line with contract requirements. DV is not required at application stage, though DV-cleared candidates are welcome to apply.
Dec 13, 2025
Full time
Job Title: Cloud Security Engineer Location: Remote (25% Weekly on-site - West Midlands and South East England) Clearance: Active SC required; DV eligibility needed post-probation. Company Overview: Atreides helps organizations transform large and complex multi-modal datasets into information-rich geo-spatial data subscriptions that can be used across a wide spectrum of use cases. Currently, Atreides focuses on providing high-fidelity data solutions to enable customers to derive insights quickly. We are a fast-moving, high-performance startup. We value a diverse team and believe inclusion drives better performance. We trust our team with autonomy, believing it leads to better results and job satisfaction. With a mission-driven mindset and entrepreneurial spirit, we are building something new and helping unlock the power of massive-scale data to make the world safer, stronger, and more prosperous. Team Overview: We are a passionate team of technologists, data scientists, and analysts with backgrounds in operational intelligence, law enforcement, large multinationals, and cybersecurity operations. We obsess about designing products that will change the way global companies, governments and nonprofits protect themselves from external threats and global adversaries. Position Overview: Atreides is seeking a motivated and proactive Cloud Security Engineer with a strong focus on Microsoft Azure security to join our growing team. This role is ideal for a security engineer or SecOps professional who understands the critical importance of maintaining a highly secure environment and is eager to work across cloud, endpoint, and infrastructure domains. While the primary focus will be Azure security engineering, experience with hardware and traditional infrastructure security will be considered a strong plus. Team Principles: Remain curious and passionate in all aspects of our work Promote clear, direct, and transparent communication Embrace the 'measure twice, cut once' philosophy Value and encourage diverse ideas and technologies Lead with empathy in all interactions Responsibilities: Security Engineering & Automation: Design, build, and maintain security automation and tooling to enforce controls and simplify compliance. Build and manage identity & access management controls across cloud platforms and applications. Write and review Infrastructure-as-Code (Bicep/Terraform) for secure cloud configuration. Implement preventative and detective controls in Azure; automate remediation of alerts. Secure CI/CD pipelines, integrating results from SAST/DAST/SCA tools and ensuring supply chain integrity. Engineer solutions for Kubernetes security, focusing on RBAC, network policies, and runtime protection. Detection, Monitoring & Incident Response: Perform triage, containment, eradication, and recovery activities as part of incident response, ensuring threats are effectively mitigated. Develop and optimise security detections (Sentinel, KQL, YARA). Manage log sources, ingestion pipelines, and monitoring infrastructure. Conduct threat hunting and analysis to identify emerging risks. Lead and contribute to incident investigations, including post-mortem analysis and remediation actions. Vulnerability & Risk Management: Identify, track, and remediate vulnerabilities across cloud, endpoint, and infrastructure. Implement controls from security assessments, audits, and architecture reviews. Support third-party risk assessments and vendor due diligence. Governance, Documentation & Projects: Maintain documentation of security standards, runbooks, and procedures. Participate in security-related projects and lead implementation of new security solutions. Required Qualifications: 3+ years in security engineering or security operations, ideally in cloud-first environments. Strong understanding of cloud security architecture with hands on experience securing cloud infrastructure and services. Hands on experience with the Azure security stack, including Microsoft Defender for Cloud (recommendations, alerts, Secure Score), Azure Policy, and related security tooling. Proficiency with SIEM platforms (Azure Sentinel preferred), developing detections and alerts, tuning rules, and investigating incidents. Proven incident response capability including triage, investigation, containment, eradication, and recovery. Practical experience integrating security into software and system development lifecycles. Experience with endpoint security solutions and MDM/EMM tools. Experience securing containerised environments (Kubernetes) and CI/CD pipelines. Proficiency in scripting and automation (PowerShell, Python, KQL, Bicep). Strong understanding of network security - protocols, firewalls, IDS/IPS, WAFs, and infrastructure hardening. Familiarity with incident response frameworks (NIST, SANS). Experience configuring and using cloud-native security logging, monitoring, and detection services. In-depth knowledge of security principles, attack vectors (OWASP Top 10, MITRE ATT&CK), and the threat landscape. Desired Qualifications: Azure Security Engineer AZ-500 Security Operations Analyst SC-200 Identity and Access administrator SC-300 GIAC Certified Forensic Analyst GIAC Certified Incident Handler Compensation and Benefits: Competitive salary Comprehensive health, dental, and vision insurance plans Flexible hybrid work environment Additional benefits like flexible hours, work travel opportunities, competitive vacation time and parental leave While meeting all of these criteria would be ideal, we understand that some candidates may meet most, but not all. If you're passionate, curious and ready to "work smart and get things done," we'd love to hear from you. Security Clearance: This role requires a current and active SC clearance at the time of hire. After successful probation, candidates must be willing and eligible to undergo DV, in line with contract requirements. DV is not required at application stage, though DV-cleared candidates are welcome to apply.
Job Title: Security and Governance Consultant Salary: £65,000 - £80,000 Location: Remote UK with regular client site visits and travel requirements Join Our Team as a Security and Governance Consultant at Focus Group . Who We Are: At Focus Group, we know our people are our greatest asset. We are a growing company that thrives on collaboration, energy and creativity, where every individual plays a key role in shaping our success. Our security practice delivers innovative governance and strategic security solutions to enterprise clients through our bespoke Fractional CxO and IT Strategy frameworks. We are looking for a highly skilled and experienced security leader to join our team and help shape the future of our security consulting services. If you're looking for an exciting, senior-level role where you can make a real strategic impact while working with diverse, high-profile clients, this could be the perfect opportunity for you. What We're Looking For: The ideal person for this role will be someone who thrives in a dynamic consulting environment, has exceptional strategic thinking capabilities, and can seamlessly transition between tactical board-level discussions and operational technical security work. You'll need to be a natural leader, an outstanding communicator, and someone comfortable working both independently as a trusted advisor and as part of our collaborative security team. Most importantly, you'll have the senior security expertise and consulting experience to drive meaningful change for our clients. What's in It for You? A strategic, high-impact role: Lead security transformation across multiple enterprise clients while serving as the dedicated Security Manager for a flagship client contract Executive-level exposure: Work directly with C-suite leaders, boards, and senior stakeholders on critical security initiatives Diverse client portfolio: Experience different industries, challenges, and security maturity levels through our Fractional CxO service models Growth and development opportunities: We're committed to helping you develop your skills and advance your career. You'll learn from a team of experienced professionals who are passionate about security excellence Industry recognition: Represent Focus Group at security forums and contribute to thought leadership in the security consulting space A supportive, inclusive culture: At Focus Group, we pride ourselves on maintaining a positive and collaborative work environment. We care about each individual's well-being and work-life balance, and we make sure everyone feels valued What Will You Do? Client-focused Security Manager (50% allocation): You'll serve as the dedicated Security Manager for a new strategic client contract, owning their defined Information Security requirements and ensuring world-class security governance across all managed services. You'll coordinate with the client's security partner, lead incident response activities, and provide monthly security reporting to executive stakeholders. In addition, you'll work closely with our internal teams to ensure all designs, projects, and services are delivered to agreed security standards. Fractional CxO Security Services (50% allocation): You'll deliver virtual CISO services across our client portfolio, conducting security strategy assessments, developing comprehensive security roadmaps, and providing executive-level security guidance. You'll lead complex engagements including security posture assessments, governance framework development, and digital transformation security initiatives. Technical Skills: Professional Security Certifications: CISSP, CISM, or equivalent senior security qualifications Security Frameworks: Deep expertise in ISO27001, SOC 2, CE+, NIST, and other governance frameworks Cloud Security: Advanced knowledge of Azure, Microsoft 365, and cloud security architecture Risk Management: Proven experience developing risk management frameworks and compliance programs Incident Response: Hands-on experience leading security incident response and forensic investigations Enterprise Security: Understanding of managed security services, SIEM/SOC operations, and security tooling integration Compliance: Knowledge of regulatory requirements, including PCI DSS and industry-specific standards Soft Skills: Executive Communication: Outstanding written and verbal communication skills with the ability to present to board-level audiences Strategic Thinking: Ability to translate business objectives into comprehensive security strategies Consulting Excellence: Proven track record building client relationships and delivering complex security consulting engagements Leadership: Experience mentoring teams and driving organizational change through security initiatives Problem-Solving: Exceptional analytical skills to resolve complex security challenges across diverse environments Continuous Learning: Commitment to staying current with evolving security threats, technologies, and best practices You must be willing to travel regularly to client sites and hold a full valid UK driving license. Nice to Have: Advanced certifications such as SABSA, TOGAF, or CISSP Background in hospitality, retail, or regulated industries Project management certification (PMP, PRINCE2) Experience with security automation and orchestration platforms Knowledge of DevSecOps and secure software development lifecycles Why Join Focus Group? At Focus Group, we're all about creating an environment where our security professionals can thrive and make a genuine impact on client organizations. Joining us means being part of a supportive, inclusive culture where we celebrate achievements, big and small. We value every individual's contribution and believe that together, we can help our clients build truly resilient security programs. If you're ready to take on a challenging and rewarding role that allows you to shape security strategy at the highest levels, we'd love to hear from you. Let's build something special together. Benefits: At Focus Group, you can be proud of what you do, how you do it and feel a true part of the team. We work hard to create an inclusive, collaborative, and rewarding environment where you are inspired to achieve brilliant things and make a real difference to the future of our business. We're proud to have built an outstanding place to work where people thrive and are recognised for their achievements. We're delighted to have been named one of the UK's Best 100 Companies to Work for 2021 and a British Private Equity & Venture Capital Association (BVCA) 2023 Vision Award Winner for London and the South East, recognising our commitment to culture and ESG.
Dec 13, 2025
Full time
Job Title: Security and Governance Consultant Salary: £65,000 - £80,000 Location: Remote UK with regular client site visits and travel requirements Join Our Team as a Security and Governance Consultant at Focus Group . Who We Are: At Focus Group, we know our people are our greatest asset. We are a growing company that thrives on collaboration, energy and creativity, where every individual plays a key role in shaping our success. Our security practice delivers innovative governance and strategic security solutions to enterprise clients through our bespoke Fractional CxO and IT Strategy frameworks. We are looking for a highly skilled and experienced security leader to join our team and help shape the future of our security consulting services. If you're looking for an exciting, senior-level role where you can make a real strategic impact while working with diverse, high-profile clients, this could be the perfect opportunity for you. What We're Looking For: The ideal person for this role will be someone who thrives in a dynamic consulting environment, has exceptional strategic thinking capabilities, and can seamlessly transition between tactical board-level discussions and operational technical security work. You'll need to be a natural leader, an outstanding communicator, and someone comfortable working both independently as a trusted advisor and as part of our collaborative security team. Most importantly, you'll have the senior security expertise and consulting experience to drive meaningful change for our clients. What's in It for You? A strategic, high-impact role: Lead security transformation across multiple enterprise clients while serving as the dedicated Security Manager for a flagship client contract Executive-level exposure: Work directly with C-suite leaders, boards, and senior stakeholders on critical security initiatives Diverse client portfolio: Experience different industries, challenges, and security maturity levels through our Fractional CxO service models Growth and development opportunities: We're committed to helping you develop your skills and advance your career. You'll learn from a team of experienced professionals who are passionate about security excellence Industry recognition: Represent Focus Group at security forums and contribute to thought leadership in the security consulting space A supportive, inclusive culture: At Focus Group, we pride ourselves on maintaining a positive and collaborative work environment. We care about each individual's well-being and work-life balance, and we make sure everyone feels valued What Will You Do? Client-focused Security Manager (50% allocation): You'll serve as the dedicated Security Manager for a new strategic client contract, owning their defined Information Security requirements and ensuring world-class security governance across all managed services. You'll coordinate with the client's security partner, lead incident response activities, and provide monthly security reporting to executive stakeholders. In addition, you'll work closely with our internal teams to ensure all designs, projects, and services are delivered to agreed security standards. Fractional CxO Security Services (50% allocation): You'll deliver virtual CISO services across our client portfolio, conducting security strategy assessments, developing comprehensive security roadmaps, and providing executive-level security guidance. You'll lead complex engagements including security posture assessments, governance framework development, and digital transformation security initiatives. Technical Skills: Professional Security Certifications: CISSP, CISM, or equivalent senior security qualifications Security Frameworks: Deep expertise in ISO27001, SOC 2, CE+, NIST, and other governance frameworks Cloud Security: Advanced knowledge of Azure, Microsoft 365, and cloud security architecture Risk Management: Proven experience developing risk management frameworks and compliance programs Incident Response: Hands-on experience leading security incident response and forensic investigations Enterprise Security: Understanding of managed security services, SIEM/SOC operations, and security tooling integration Compliance: Knowledge of regulatory requirements, including PCI DSS and industry-specific standards Soft Skills: Executive Communication: Outstanding written and verbal communication skills with the ability to present to board-level audiences Strategic Thinking: Ability to translate business objectives into comprehensive security strategies Consulting Excellence: Proven track record building client relationships and delivering complex security consulting engagements Leadership: Experience mentoring teams and driving organizational change through security initiatives Problem-Solving: Exceptional analytical skills to resolve complex security challenges across diverse environments Continuous Learning: Commitment to staying current with evolving security threats, technologies, and best practices You must be willing to travel regularly to client sites and hold a full valid UK driving license. Nice to Have: Advanced certifications such as SABSA, TOGAF, or CISSP Background in hospitality, retail, or regulated industries Project management certification (PMP, PRINCE2) Experience with security automation and orchestration platforms Knowledge of DevSecOps and secure software development lifecycles Why Join Focus Group? At Focus Group, we're all about creating an environment where our security professionals can thrive and make a genuine impact on client organizations. Joining us means being part of a supportive, inclusive culture where we celebrate achievements, big and small. We value every individual's contribution and believe that together, we can help our clients build truly resilient security programs. If you're ready to take on a challenging and rewarding role that allows you to shape security strategy at the highest levels, we'd love to hear from you. Let's build something special together. Benefits: At Focus Group, you can be proud of what you do, how you do it and feel a true part of the team. We work hard to create an inclusive, collaborative, and rewarding environment where you are inspired to achieve brilliant things and make a real difference to the future of our business. We're proud to have built an outstanding place to work where people thrive and are recognised for their achievements. We're delighted to have been named one of the UK's Best 100 Companies to Work for 2021 and a British Private Equity & Venture Capital Association (BVCA) 2023 Vision Award Winner for London and the South East, recognising our commitment to culture and ESG.
ABOUT THE COMPANY The best of all worlds: join Avolution, a highly regarded, worldwide, financially sound and growing 20-year-old Enterprise Architecture Software company. With offices in London, Sydney, Northern Virginia and Singapore, Avolution is established as an industry leader in its Gartner Magic Quadrant and other industry reports. Be part of a smart, friendly team, and use your skills and initiative to drive growth. Benefit from our culture which is described by employees as collegial, collaborative, flexible, and supportive. Key Responsibilities Cloud & Infrastructure Security Design, manage, and enhance security configurations across Azure and AWS environments, including integration with Office 365. Implement and enforce best practices for identity and access management (IAM) in Azure AD (Entra ID) and AWS IAM. Monitor cloud workloads for vulnerabilities, misconfigurations, and threats using tools like Microsoft Defender. Collaborate with DevOps/Engineering teams to embed security controls into CI/CD pipelines and promote DevSecOps practices. Conduct security assessments, including assisting with penetration testing, risk evaluations, to identify and mitigate potential issues. Endpoint & Identity Security Enhance device posture, compliance, and management using Microsoft Intune and Defender for Endpoint. Develop and maintain robust conditional access, multi-factor authentication (MFA), and endpoint protection policies. Oversee secure identity lifecycle processes, enforcing least-privilege access and zero-trust principles. IT Operations & Employee Support Act as the primary on-site and remote IT support contact for employees Provision and troubleshoot Windows laptops via Intune (enrolment, software deployment, basic hardware issues). Manage user onboarding/offboarding (Office 365, Azure AD, VPN, Wi-Fi, hardware handover). Resolve day-to-day employee issues (Teams, OneDrive, Outlook, printers, VPN connectivity, etc.). Maintain inventory of laptops, peripherals, and office IT equipment. Support meeting-room AV/setup and occasional hands on help in the London office. Document common issues and maintain internal IT knowledge base. Security Operations Respond to security alerts, incidents, and vulnerabilities with timely investigations and remediation. Perform regular risk assessments, security reviews, internal audits. Manage and optimize security tools (e.g., SIEM, EDR, vulnerability scanners, Microsoft Defender suite). Lead incident response efforts and coordinate with cross functional teams. Compliance & Governance Support ISO 27001:2022 recertification, continuous compliance activities, and internal audits. Prepare for and assist in achieving additional compliance certifications (e.g., SOC 2, GDPR) to support company growth. Develop, maintain, and improve security policies, procedures, and technical documentation. Track, report on, and remediate audit findings or compliance gaps. Collaboration & Culture Partner with global distributed teams across EMEA, AMER, and APAC regions. Educate internal teams on security best practices and foster a security first culture through training and awareness programs. Qualifications 3+ years of experience in Security Engineering, Cloud Security, IT Operations, or similar roles. Hands on expertise with Azure, AWS, Microsoft Intune, Defender suite, and Azure AD. Solid knowledge of cloud security standards (e.g., CIS Benchmarks, NIST, SOC 2). Experience with SIEM, EDR, vulnerability scanning, and security monitoring tools. Familiarity with ISO 27001 or other compliance frameworks. Understanding of network security concepts (e.g., VPN, firewalls, zero trust architectures). Excellent communication skills and ability to thrive in a global, distributed environment. Nice to Have Experience in a SaaS or fully cloud native company. Automation and scripting skills (e.g., PowerShell, Python, Terraform). Knowledge of DevSecOps practices and tools. Relevant security certifications (e.g., Microsoft AZ 500, AWS Security Specialty, CCSP, CISSP, ISO 27001 Lead Implementer/Auditor). Experience with Microsoft 365 security configurations or data privacy regulations (e.g., GDPR). Benefits Flexible working 25 days annual leave + bank holidays 1 day of birthday leave per year Private Medical Insurance which includes gym membership discounts and many other rewards Dental, Vision and Hearing insurance cover Pension Scheme Cycle to Work scheme All applicants must have right to work in the United Kingdom. Avolution is an equal opportunities employer.
Dec 13, 2025
Full time
ABOUT THE COMPANY The best of all worlds: join Avolution, a highly regarded, worldwide, financially sound and growing 20-year-old Enterprise Architecture Software company. With offices in London, Sydney, Northern Virginia and Singapore, Avolution is established as an industry leader in its Gartner Magic Quadrant and other industry reports. Be part of a smart, friendly team, and use your skills and initiative to drive growth. Benefit from our culture which is described by employees as collegial, collaborative, flexible, and supportive. Key Responsibilities Cloud & Infrastructure Security Design, manage, and enhance security configurations across Azure and AWS environments, including integration with Office 365. Implement and enforce best practices for identity and access management (IAM) in Azure AD (Entra ID) and AWS IAM. Monitor cloud workloads for vulnerabilities, misconfigurations, and threats using tools like Microsoft Defender. Collaborate with DevOps/Engineering teams to embed security controls into CI/CD pipelines and promote DevSecOps practices. Conduct security assessments, including assisting with penetration testing, risk evaluations, to identify and mitigate potential issues. Endpoint & Identity Security Enhance device posture, compliance, and management using Microsoft Intune and Defender for Endpoint. Develop and maintain robust conditional access, multi-factor authentication (MFA), and endpoint protection policies. Oversee secure identity lifecycle processes, enforcing least-privilege access and zero-trust principles. IT Operations & Employee Support Act as the primary on-site and remote IT support contact for employees Provision and troubleshoot Windows laptops via Intune (enrolment, software deployment, basic hardware issues). Manage user onboarding/offboarding (Office 365, Azure AD, VPN, Wi-Fi, hardware handover). Resolve day-to-day employee issues (Teams, OneDrive, Outlook, printers, VPN connectivity, etc.). Maintain inventory of laptops, peripherals, and office IT equipment. Support meeting-room AV/setup and occasional hands on help in the London office. Document common issues and maintain internal IT knowledge base. Security Operations Respond to security alerts, incidents, and vulnerabilities with timely investigations and remediation. Perform regular risk assessments, security reviews, internal audits. Manage and optimize security tools (e.g., SIEM, EDR, vulnerability scanners, Microsoft Defender suite). Lead incident response efforts and coordinate with cross functional teams. Compliance & Governance Support ISO 27001:2022 recertification, continuous compliance activities, and internal audits. Prepare for and assist in achieving additional compliance certifications (e.g., SOC 2, GDPR) to support company growth. Develop, maintain, and improve security policies, procedures, and technical documentation. Track, report on, and remediate audit findings or compliance gaps. Collaboration & Culture Partner with global distributed teams across EMEA, AMER, and APAC regions. Educate internal teams on security best practices and foster a security first culture through training and awareness programs. Qualifications 3+ years of experience in Security Engineering, Cloud Security, IT Operations, or similar roles. Hands on expertise with Azure, AWS, Microsoft Intune, Defender suite, and Azure AD. Solid knowledge of cloud security standards (e.g., CIS Benchmarks, NIST, SOC 2). Experience with SIEM, EDR, vulnerability scanning, and security monitoring tools. Familiarity with ISO 27001 or other compliance frameworks. Understanding of network security concepts (e.g., VPN, firewalls, zero trust architectures). Excellent communication skills and ability to thrive in a global, distributed environment. Nice to Have Experience in a SaaS or fully cloud native company. Automation and scripting skills (e.g., PowerShell, Python, Terraform). Knowledge of DevSecOps practices and tools. Relevant security certifications (e.g., Microsoft AZ 500, AWS Security Specialty, CCSP, CISSP, ISO 27001 Lead Implementer/Auditor). Experience with Microsoft 365 security configurations or data privacy regulations (e.g., GDPR). Benefits Flexible working 25 days annual leave + bank holidays 1 day of birthday leave per year Private Medical Insurance which includes gym membership discounts and many other rewards Dental, Vision and Hearing insurance cover Pension Scheme Cycle to Work scheme All applicants must have right to work in the United Kingdom. Avolution is an equal opportunities employer.
Application and Platform Engineer page is loaded Application and Platform Engineerlocations: UK-Londontime type: Full timeposted on: Posted Todayjob requisition id: R003321Application and Platform Engineer Shift Pattern: Standard 40 Hour Week (United Kingdom) Scheduled Weekly Hours: 40 Corporate Grade: E - Associate Reporting Line: (UK Division) Information Technology Location: UK-London Worker Type: Permanent Overall Purpose of Role: Provide Level 2 and Level 3 technical support with a focus on reliability, resilience, and automation for the LME's Middle Office, Back Office, and Market Data mission-critical applications. This role combines application support with modern SRE principles and platform engineering practices , helping ensure system stability, scalability, and continuous improvement for internal teams and external clients.This includes: Support our application suite in production with a view of platform engineering activities, including maintaining containerised environments and Infrastructure as Code (IaC). Build, migrate, support, optimise and manage our physical, virtual, containerised Openshift and Kubernetes environments for scalability, resilience, and operational efficiency, with a focus on a 'Five nines' operational availability. Deliver technical support for application rollouts within project frameworks. Assist project delivery across Waterfall and Agile methodologies, with exposure to Hybrid approaches. Troubleshoot and resolve incidents across applications, infrastructure, and network layers. Contribute to service improvements through automation and process optimisation. Participate in incident, change, and problem management processes. Validate changes through QA and automated testing pipelines. Apply RE practices such as proactive monitoring and performance tuning to improve system reliability. Key Accountabilities: Maintain and support mission-critical applications across Trading, Data and Clearing business units. Assist with regulatory, infrastructure, and security projects. Monitor application performance using observability tools and implement tuning where needed. Support test and production environments to ensure stability and readiness. Contribute to automation initiatives and CI/CD pipeline improvements. Maintain accurate documentation for supported systems and platforms. Participate in disaster recovery exercises and operational resiliency testing. Help identify and remediate security vulnerabilities across systems. Technical Responsibilities Maintain and test disaster recovery procedures. Respond promptly to production issues and communicate resolutions effectively. Support 24/7/365 system availability, including flexible shifts and on-call rota. Work with CI/CD pipelines (e.g., Bamboo, BitBucket) to support deployments. Assist with Infrastructure as Code using Ansible Tower. Support containerised environments on OpenShift and Kubernetes , ensuring scalability and resilience. Implement and maintain observability stacks with Grafana/Prometheus and Splunk for metrics and log analysis. Automate repetitive tasks using scripting languages (Python, Bash, PowerShell). Working with others: Collaborate with internal production teams, project teams, and business stakeholders. Work closely with Risk, Security, and GRC teams, as well as external vendors and auditors. Strong problem-solving skills, innovative mindset, and technical curiosity. Clear, communicator and team player with a focus on collaboration and knowledge sharing. Organised and proactive with excellent documentation skills. Ownership mindset: accountable for end-to-end delivery and lifecycle thinking PERSON SPECIFICATION: Qualifications Degree in Computer Science or a related discipline or 2+years of equivalent professional experience Preferred Experience Strong SQL and database knowledge (MySQL, Oracle, Liquibase). Hands-on experience with CI/CD, IaC, containerisation, and orchestration tools. Familiarity with monitoring and observability platforms. Exposure to DevSecOps practices and vulnerability scanning. 2-4 years in financial markets or mission-critical environments. Good understanding of networking, infrastructure, and cloud technologies. Experience supporting .NET, Java, and microservices-based applications. Desirable ITIL Foundation Certification v3/v4. ServiceNow experience. SRE and Agile/Lean methodologies. Swift Payment systems knowledge. Skills Strong problem-solving skills and technical curiosity. Clear communicator and collaborative team player. Organised and proactive with good documentation skills. Passion for automation and continuous improvement. Comfortable working in Agile environments and using shared tools (Jira, Confluence). Ability to work under pressure and prioritise effectively. Personal Qualities: Delivers high-quality results under pressure and tight deadlines. Strong problem-solving skills with an innovative, curious mindset. Clear communicator and collaborative team player, promoting knowledge sharing. Organised, proactive, and detail-oriented with strong planning skills. Ownership mindset with a passion for automation and continuous improvement. Comfortable with Agile practices and CI/CD tools (Jira, Confluence). Supports a culture of learning through blameless post-mortems and experimentation. The LME is committed to creating a diverse environment and is proud to be an equal opportunity employer. In recruiting for our teams, we welcome the unique contributions that you can bring in terms of education, ethnicity, race, sex, gender identity and expression, nation of origin, age, languages spoken, colour, religion, disability, sexual orientation and beliefs. In doing so, we want every LME employee to feel our commitment to showing respect for all and encouraging open collaboration and communication. Hong Kong Exchanges and Clearing Limited (HKEX) is a publicly-traded company (HKEX Stock Code:388) and one of the world's leading global exchange groups, offering a range of equity, derivative, commodity, fixed income and other financial markets, products and services, including the London Metals Exchange.As a superconnector and gateway between East and West, HKEX facilitates the two-way flow of capital, ideas and dialogue between China and the rest of world, through its pioneering Connect schemes, increasingly diversified product ecosystem and its deep, liquid and international markets.HKEX is a purpose-led organisation which, across its business and through the work of HKEX Foundation, seeks to connect, promote and progress its markets and the communities it supports for the prosperity of all.
Dec 13, 2025
Full time
Application and Platform Engineer page is loaded Application and Platform Engineerlocations: UK-Londontime type: Full timeposted on: Posted Todayjob requisition id: R003321Application and Platform Engineer Shift Pattern: Standard 40 Hour Week (United Kingdom) Scheduled Weekly Hours: 40 Corporate Grade: E - Associate Reporting Line: (UK Division) Information Technology Location: UK-London Worker Type: Permanent Overall Purpose of Role: Provide Level 2 and Level 3 technical support with a focus on reliability, resilience, and automation for the LME's Middle Office, Back Office, and Market Data mission-critical applications. This role combines application support with modern SRE principles and platform engineering practices , helping ensure system stability, scalability, and continuous improvement for internal teams and external clients.This includes: Support our application suite in production with a view of platform engineering activities, including maintaining containerised environments and Infrastructure as Code (IaC). Build, migrate, support, optimise and manage our physical, virtual, containerised Openshift and Kubernetes environments for scalability, resilience, and operational efficiency, with a focus on a 'Five nines' operational availability. Deliver technical support for application rollouts within project frameworks. Assist project delivery across Waterfall and Agile methodologies, with exposure to Hybrid approaches. Troubleshoot and resolve incidents across applications, infrastructure, and network layers. Contribute to service improvements through automation and process optimisation. Participate in incident, change, and problem management processes. Validate changes through QA and automated testing pipelines. Apply RE practices such as proactive monitoring and performance tuning to improve system reliability. Key Accountabilities: Maintain and support mission-critical applications across Trading, Data and Clearing business units. Assist with regulatory, infrastructure, and security projects. Monitor application performance using observability tools and implement tuning where needed. Support test and production environments to ensure stability and readiness. Contribute to automation initiatives and CI/CD pipeline improvements. Maintain accurate documentation for supported systems and platforms. Participate in disaster recovery exercises and operational resiliency testing. Help identify and remediate security vulnerabilities across systems. Technical Responsibilities Maintain and test disaster recovery procedures. Respond promptly to production issues and communicate resolutions effectively. Support 24/7/365 system availability, including flexible shifts and on-call rota. Work with CI/CD pipelines (e.g., Bamboo, BitBucket) to support deployments. Assist with Infrastructure as Code using Ansible Tower. Support containerised environments on OpenShift and Kubernetes , ensuring scalability and resilience. Implement and maintain observability stacks with Grafana/Prometheus and Splunk for metrics and log analysis. Automate repetitive tasks using scripting languages (Python, Bash, PowerShell). Working with others: Collaborate with internal production teams, project teams, and business stakeholders. Work closely with Risk, Security, and GRC teams, as well as external vendors and auditors. Strong problem-solving skills, innovative mindset, and technical curiosity. Clear, communicator and team player with a focus on collaboration and knowledge sharing. Organised and proactive with excellent documentation skills. Ownership mindset: accountable for end-to-end delivery and lifecycle thinking PERSON SPECIFICATION: Qualifications Degree in Computer Science or a related discipline or 2+years of equivalent professional experience Preferred Experience Strong SQL and database knowledge (MySQL, Oracle, Liquibase). Hands-on experience with CI/CD, IaC, containerisation, and orchestration tools. Familiarity with monitoring and observability platforms. Exposure to DevSecOps practices and vulnerability scanning. 2-4 years in financial markets or mission-critical environments. Good understanding of networking, infrastructure, and cloud technologies. Experience supporting .NET, Java, and microservices-based applications. Desirable ITIL Foundation Certification v3/v4. ServiceNow experience. SRE and Agile/Lean methodologies. Swift Payment systems knowledge. Skills Strong problem-solving skills and technical curiosity. Clear communicator and collaborative team player. Organised and proactive with good documentation skills. Passion for automation and continuous improvement. Comfortable working in Agile environments and using shared tools (Jira, Confluence). Ability to work under pressure and prioritise effectively. Personal Qualities: Delivers high-quality results under pressure and tight deadlines. Strong problem-solving skills with an innovative, curious mindset. Clear communicator and collaborative team player, promoting knowledge sharing. Organised, proactive, and detail-oriented with strong planning skills. Ownership mindset with a passion for automation and continuous improvement. Comfortable with Agile practices and CI/CD tools (Jira, Confluence). Supports a culture of learning through blameless post-mortems and experimentation. The LME is committed to creating a diverse environment and is proud to be an equal opportunity employer. In recruiting for our teams, we welcome the unique contributions that you can bring in terms of education, ethnicity, race, sex, gender identity and expression, nation of origin, age, languages spoken, colour, religion, disability, sexual orientation and beliefs. In doing so, we want every LME employee to feel our commitment to showing respect for all and encouraging open collaboration and communication. Hong Kong Exchanges and Clearing Limited (HKEX) is a publicly-traded company (HKEX Stock Code:388) and one of the world's leading global exchange groups, offering a range of equity, derivative, commodity, fixed income and other financial markets, products and services, including the London Metals Exchange.As a superconnector and gateway between East and West, HKEX facilitates the two-way flow of capital, ideas and dialogue between China and the rest of world, through its pioneering Connect schemes, increasingly diversified product ecosystem and its deep, liquid and international markets.HKEX is a purpose-led organisation which, across its business and through the work of HKEX Foundation, seeks to connect, promote and progress its markets and the communities it supports for the prosperity of all.
Methods Business and Digital Technology
City, London
Overview Methods Analytics (MA) is recruiting for a Mid/Senior Software Engineer (Full Stack) to join our team on a permanent basis. This role will be mainly remote but require flexibility to travel to client sites, and our offices based in London, Sheffield, and Bristol. What You'll Be Doing as a Software Engineer Lead technical aspects of full stack development projects and mentor junior engineers Design and build scalable web applications using modern frontend and backend technologies Develop responsive user interfaces and robust REST APIs Design and maintain database schemas, queries, and optimise performance Implement comprehensive testing strategies and CI/CD pipelines Make critical technical decisions on architecture and technology choices Optimise application performance across the full stack for scalability and user experience Collaborate with stakeholders to translate business requirements into technical specifications Present technical solutions to leadership and non-technical stakeholders Contribute to the development of the Methods Analytics Engineering Practice by participating in our internal community of practice Your Impact Deliver intuitive software solutions that enable better decision-making Drive adoption of modern development practices and elevate team capabilities Deliver seamless user experiences that enhance productivity Establish technical standards that ensure quality and maintainability You Will Demonstrate Proven experience leading technical aspects of full stack development projects Strong proficiency in TypeScript/JavaScript and modern frontend frameworks (React, Next.js, Svelte, or similar) Backend expertise with Python (Django or FastAPI) and RESTful API design Database proficiency with PostgreSQL including schema design and query optimization Experience with containerisation (Docker) Knowledge of CI/CD pipelines and testing methodologies (unit, integration, automated testing) Leadership skills for mentoring engineers and communicating with stakeholders Understanding of software design principles and performance optimization techniques Track record of successful project delivery in a technical leadership capacity You may also have some of the desirable skills and experience Experience with Kubernetes for container orchestration Knowledge of microservices architecture patterns and implementation Familiarity with object storage solutions (MinIO, S3) Experience with GitOps workflows and tools like ArgoCD or GitHub Actions Knowledge of DevSecOps practices and scan tooling for SAST, DAST, SCA and SBOM Experience with monitoring and observability tools Defence/Public Sector consultant experience Security Clearance UKSV (United Kingdom Security Vetting) clearance is required for this role, with Security Check (SC) as the minimum standard, either already held or with a willingness to undergo the process. Some roles/projects may require Developed Vetting (DV) clearance; while not mandatory, a willingness to obtain DV clearance would be beneficial. As part of the onboarding process candidates will be asked to complete a Baseline Personnel Security Standard (BPSS); details of the evidence required to apply may be found on the government website. If you are unable to meet this and any associated criteria, then your employment may be delayed, or rejected. Details of this will be discussed with you at interview. Our Hiring Process At Methods Analytics, we believe in a transparent hiring process. Here's what you can expect: Internal Application Review Initial Phone Screen Technical Interview Pair Programming Exercise Final Interview Offer Working at MA Methods Analytics (MA) exists to improve society by helping people make better decisions with data. Combining passionate people, sector-specific insight, and technical excellence to provide our customers an end-to-end data service. We use a collaborative, creative and user centric approach to data to do good and solve difficult problems. Ensuring that our outputs are transparent, robust, and transformative. We value discussion and debate as part of our approach. We will question assumptions, ambition, and process - but do so with respect and humility. We relish difficult problems, and overcome them with innovation, creativity, and technical freedom to help us design optimum solutions. Ethics, privacy, and quality are at the heart of our work, and we will not sacrifice these for outcomes. We treat data with respect and use it only for the right purpose. Our people are positive, dedicated, and relentless. Data is a vast topic, but we strive for interactions that are engaging, informative and fun in equal measure. But maintain a steely focus on outcomes and delivering quality products for our customers. We are passionate about our people; we want our colleagues to develop the things they are good at and enjoy. By joining us you can expect Autonomy to develop and grow your skills and experience Be part of exciting project work that is making a difference in society Strong, inspiring, and thought-provoking leadership A supportive and collaborative environment As well as this, we offer Annual two-day technical hackathon bringing together all technical teams for innovation and collaboration Monthly Engineering & Architecture Community of Practice event Bi-annual whole company teambuilding events bringing everyone together for a day of fun and connection Development access to Pluralsight and LinkedIn Learning Volunteering - 2 paid days per year to volunteer in our local communities or within a charity organisation Private Medical Insurance which is non-contributory (spouse and dependants included) Worldwide Travel Insurance which is non-contributory (spouse and dependants included) Discretionary Company Bonus based on company and individual performance Life Assurance of 4 times base salary Time off - 25 days of annual leave a year, plus bank holidays, with the option to buy 5 extra days each year Pension Salary Exchange Scheme with 4% employer contribution and 5% employee contribution Wellness 24/7 Confidential employee assistance programme Social - office parties, pizza Friday and commitment to charitable causes
Dec 13, 2025
Full time
Overview Methods Analytics (MA) is recruiting for a Mid/Senior Software Engineer (Full Stack) to join our team on a permanent basis. This role will be mainly remote but require flexibility to travel to client sites, and our offices based in London, Sheffield, and Bristol. What You'll Be Doing as a Software Engineer Lead technical aspects of full stack development projects and mentor junior engineers Design and build scalable web applications using modern frontend and backend technologies Develop responsive user interfaces and robust REST APIs Design and maintain database schemas, queries, and optimise performance Implement comprehensive testing strategies and CI/CD pipelines Make critical technical decisions on architecture and technology choices Optimise application performance across the full stack for scalability and user experience Collaborate with stakeholders to translate business requirements into technical specifications Present technical solutions to leadership and non-technical stakeholders Contribute to the development of the Methods Analytics Engineering Practice by participating in our internal community of practice Your Impact Deliver intuitive software solutions that enable better decision-making Drive adoption of modern development practices and elevate team capabilities Deliver seamless user experiences that enhance productivity Establish technical standards that ensure quality and maintainability You Will Demonstrate Proven experience leading technical aspects of full stack development projects Strong proficiency in TypeScript/JavaScript and modern frontend frameworks (React, Next.js, Svelte, or similar) Backend expertise with Python (Django or FastAPI) and RESTful API design Database proficiency with PostgreSQL including schema design and query optimization Experience with containerisation (Docker) Knowledge of CI/CD pipelines and testing methodologies (unit, integration, automated testing) Leadership skills for mentoring engineers and communicating with stakeholders Understanding of software design principles and performance optimization techniques Track record of successful project delivery in a technical leadership capacity You may also have some of the desirable skills and experience Experience with Kubernetes for container orchestration Knowledge of microservices architecture patterns and implementation Familiarity with object storage solutions (MinIO, S3) Experience with GitOps workflows and tools like ArgoCD or GitHub Actions Knowledge of DevSecOps practices and scan tooling for SAST, DAST, SCA and SBOM Experience with monitoring and observability tools Defence/Public Sector consultant experience Security Clearance UKSV (United Kingdom Security Vetting) clearance is required for this role, with Security Check (SC) as the minimum standard, either already held or with a willingness to undergo the process. Some roles/projects may require Developed Vetting (DV) clearance; while not mandatory, a willingness to obtain DV clearance would be beneficial. As part of the onboarding process candidates will be asked to complete a Baseline Personnel Security Standard (BPSS); details of the evidence required to apply may be found on the government website. If you are unable to meet this and any associated criteria, then your employment may be delayed, or rejected. Details of this will be discussed with you at interview. Our Hiring Process At Methods Analytics, we believe in a transparent hiring process. Here's what you can expect: Internal Application Review Initial Phone Screen Technical Interview Pair Programming Exercise Final Interview Offer Working at MA Methods Analytics (MA) exists to improve society by helping people make better decisions with data. Combining passionate people, sector-specific insight, and technical excellence to provide our customers an end-to-end data service. We use a collaborative, creative and user centric approach to data to do good and solve difficult problems. Ensuring that our outputs are transparent, robust, and transformative. We value discussion and debate as part of our approach. We will question assumptions, ambition, and process - but do so with respect and humility. We relish difficult problems, and overcome them with innovation, creativity, and technical freedom to help us design optimum solutions. Ethics, privacy, and quality are at the heart of our work, and we will not sacrifice these for outcomes. We treat data with respect and use it only for the right purpose. Our people are positive, dedicated, and relentless. Data is a vast topic, but we strive for interactions that are engaging, informative and fun in equal measure. But maintain a steely focus on outcomes and delivering quality products for our customers. We are passionate about our people; we want our colleagues to develop the things they are good at and enjoy. By joining us you can expect Autonomy to develop and grow your skills and experience Be part of exciting project work that is making a difference in society Strong, inspiring, and thought-provoking leadership A supportive and collaborative environment As well as this, we offer Annual two-day technical hackathon bringing together all technical teams for innovation and collaboration Monthly Engineering & Architecture Community of Practice event Bi-annual whole company teambuilding events bringing everyone together for a day of fun and connection Development access to Pluralsight and LinkedIn Learning Volunteering - 2 paid days per year to volunteer in our local communities or within a charity organisation Private Medical Insurance which is non-contributory (spouse and dependants included) Worldwide Travel Insurance which is non-contributory (spouse and dependants included) Discretionary Company Bonus based on company and individual performance Life Assurance of 4 times base salary Time off - 25 days of annual leave a year, plus bank holidays, with the option to buy 5 extra days each year Pension Salary Exchange Scheme with 4% employer contribution and 5% employee contribution Wellness 24/7 Confidential employee assistance programme Social - office parties, pizza Friday and commitment to charitable causes
Lead Architecture & Innovation as an Solutions Architect at Leighton! Are you a highly experienced Solutions Architect with a passion for driving large-scale technical transformations? At Leighton, we are looking for an expert technical leader to architect and implement scalable, high-performance cloud-native solutions while effectively managing stakeholders across business and technology teams. Role Highlights Architect & Lead: Design and implement enterprise-level software solutions, including microservices, event-driven architectures, and serverless computing. Cloud & DevSecOps Expertise: Spearhead cloud migrations (AWS, Azure, GCP) and drive DevSecOps best practices. Stakeholder Engagement: Partner with CXOs, product leaders, security teams, and engineering to align technology strategies with business objectives. Technical Governance: Lead and optimise architecture review boards to ensure compliance, performance, and scalability. Strategic Leadership: Define and drive architectural strategies for security, API design, SDLC, observability, and cloud platforms. Innovation & Mentorship: Develop high-performing engineering teams, mentoring technical leads, architects, and developers. Why Join Us? At Leighton, we don't just build technology-we create impact. Here's why you'll love being part of our team: Competitive salary & benefits Recognised as a Best Workplace for Tech & Innovation Flexible & hybrid working options Opportunity to lead multimillion-pound cloud & digital transformation projects An innovation-driven, collaborative culture What We're Looking For An AWS Solutions Architect with: Proven experience in Enterprise, Solutions or Cloud Architecture roles. A deep understanding of how to scale built and bought large scale e-commerce platforms Deep cloud expertise (AWS) and hands-on experience with serverless computing, microservices, and API design. Strong skills in Infrastructure as Code (Terraform, CloudFormation, AWS CDK). Exceptional stakeholder management skills-able to translate technical concepts into business value for executives and leadership teams. Expertise in agile methodologies, DevSecOps, and large-scale cloud migrations. Experience leading and managing technical teams. Apply Today! If you're an experienced architect looking to shape the future of enterprise software solutions, we'd love to hear from you. Apply now and be part of a visionary, excellence-driven team!
Dec 13, 2025
Full time
Lead Architecture & Innovation as an Solutions Architect at Leighton! Are you a highly experienced Solutions Architect with a passion for driving large-scale technical transformations? At Leighton, we are looking for an expert technical leader to architect and implement scalable, high-performance cloud-native solutions while effectively managing stakeholders across business and technology teams. Role Highlights Architect & Lead: Design and implement enterprise-level software solutions, including microservices, event-driven architectures, and serverless computing. Cloud & DevSecOps Expertise: Spearhead cloud migrations (AWS, Azure, GCP) and drive DevSecOps best practices. Stakeholder Engagement: Partner with CXOs, product leaders, security teams, and engineering to align technology strategies with business objectives. Technical Governance: Lead and optimise architecture review boards to ensure compliance, performance, and scalability. Strategic Leadership: Define and drive architectural strategies for security, API design, SDLC, observability, and cloud platforms. Innovation & Mentorship: Develop high-performing engineering teams, mentoring technical leads, architects, and developers. Why Join Us? At Leighton, we don't just build technology-we create impact. Here's why you'll love being part of our team: Competitive salary & benefits Recognised as a Best Workplace for Tech & Innovation Flexible & hybrid working options Opportunity to lead multimillion-pound cloud & digital transformation projects An innovation-driven, collaborative culture What We're Looking For An AWS Solutions Architect with: Proven experience in Enterprise, Solutions or Cloud Architecture roles. A deep understanding of how to scale built and bought large scale e-commerce platforms Deep cloud expertise (AWS) and hands-on experience with serverless computing, microservices, and API design. Strong skills in Infrastructure as Code (Terraform, CloudFormation, AWS CDK). Exceptional stakeholder management skills-able to translate technical concepts into business value for executives and leadership teams. Expertise in agile methodologies, DevSecOps, and large-scale cloud migrations. Experience leading and managing technical teams. Apply Today! If you're an experienced architect looking to shape the future of enterprise software solutions, we'd love to hear from you. Apply now and be part of a visionary, excellence-driven team!
A leading technology firm in the UK seeks a Solutions Architect to lead architecture and innovate cloud-native solutions. The ideal candidate will possess extensive AWS and DevSecOps expertise, along with exceptional stakeholder management skills. Join a progressive team that values innovation and collaboration, and take charge of multimillion-pound cloud transformations. This role offers competitive salary and hybrid working options.
Dec 13, 2025
Full time
A leading technology firm in the UK seeks a Solutions Architect to lead architecture and innovate cloud-native solutions. The ideal candidate will possess extensive AWS and DevSecOps expertise, along with exceptional stakeholder management skills. Join a progressive team that values innovation and collaboration, and take charge of multimillion-pound cloud transformations. This role offers competitive salary and hybrid working options.
A leading defence sector organization in the United Kingdom is seeking an Integration & Test Engineer with strong infrastructure engineering experience. The role involves planning and executing test activities, developing automated CI/CD pipelines, and collaborating within a multi-disciplinary team. Knowledge of AWS technologies and experience in DevSecOps practices are essential. The company is committed to inclusive recruitment, providing necessary adjustments upon request.
Dec 13, 2025
Full time
A leading defence sector organization in the United Kingdom is seeking an Integration & Test Engineer with strong infrastructure engineering experience. The role involves planning and executing test activities, developing automated CI/CD pipelines, and collaborating within a multi-disciplinary team. Knowledge of AWS technologies and experience in DevSecOps practices are essential. The company is committed to inclusive recruitment, providing necessary adjustments upon request.
At Metro Bank, we believe the best banking experience starts with people who genuinely care. We're not just delivering banking services - we're building trust through authentic connections. Here, our people come first; our colleagues are part of a team that values individuality, collaboration, and long-standing relationships. We are also all about balance so most of our jobs offer the opportunity for hybrid working built around your role and home life, wherever possible. What you will do: Collaborate with various first line of defence teams to ensure alignment of technology controls to relevant information security standards Support and challenge Information Security control design across IT and the wider business to be as efficient and effective as possible given the dynamic nature of risk and threat within the banking industry Ensure transparency in Information Security decisions made across all programmes and projects that you are supporting Support a varied and demanding programme of bank-wide change working with project teams to advise and guide on information security best practice. You will help ensure that final outputs comply with external best practice, regulation and internal governance, whilst balancing the specific delivery needs and challenges of the project Identify security testing requirements, collaborate with appropriate stakeholders to scope these tests and to ensure that the business risk associated with any issues identified is incorporated into project risk management and treated in accordance with the Bank's risk management policies and processes Information Security management reporting, specifically within the change and project environment When required, deputise for the Head of Information Security Change And we are a bank so risk is a part of everything we do. We love people who take responsibility, do the right thing for customers, colleagues and Metro Bank and have the ability to call out any concerns. What you will need: You must have a strong understanding of information security within the project management lifecycle, alongside a solid working knowledge of enterprise technology You must have a strong risk management background and experience in conducting security risk assessments on projects and developing security controls Specific experience in secure design, build and control methodologies aligned to relevant security standards, e.g. ISO27001, PCI DSS, NIST Demonstrable experience of Agile, DevSecOps, Cloud, containerization, microservices and similar technologies is desirable Excellent stakeholder management skills with the ability to distil complex conversations into information that can be consumed by a non-technical audience to make decisions You are able to critically assess regulatory risks applicable to systems and projects within the financial industry against the wider business and information security risks Understand the risks associated with your job and what that means for you, Metro Bank and all our stakeholders Our promise to you We will make sure that you are well-rewarded by providing you with a competitive salary, discretionary annual bonus, and a wide range of benefits, including generous holiday allowance, attractive pension scheme, healthcare, life assurance, and a number of colleague discounts! We will give you the training to ensure you succeed in your role and plenty of internal opportunities to progress your career (around 40% of our recruitment comes from internal promotions! Diverse teams really are the best teams. We know that candidates (especially women, research tells us) may be put off applying for a job unless they can tick every box. We also know that 'normal' office hours aren't always doable, and while we can't accommodate every flexible working request we are happy to be asked. So if you are excited about working with us and think you can do much of what we are looking for but aren't sure if you are 100% there yet why not give it a whirl? Please note that sometimes we may close a job earlier for applications if we are inundated with amazing candidates Good luck!
Dec 11, 2025
Full time
At Metro Bank, we believe the best banking experience starts with people who genuinely care. We're not just delivering banking services - we're building trust through authentic connections. Here, our people come first; our colleagues are part of a team that values individuality, collaboration, and long-standing relationships. We are also all about balance so most of our jobs offer the opportunity for hybrid working built around your role and home life, wherever possible. What you will do: Collaborate with various first line of defence teams to ensure alignment of technology controls to relevant information security standards Support and challenge Information Security control design across IT and the wider business to be as efficient and effective as possible given the dynamic nature of risk and threat within the banking industry Ensure transparency in Information Security decisions made across all programmes and projects that you are supporting Support a varied and demanding programme of bank-wide change working with project teams to advise and guide on information security best practice. You will help ensure that final outputs comply with external best practice, regulation and internal governance, whilst balancing the specific delivery needs and challenges of the project Identify security testing requirements, collaborate with appropriate stakeholders to scope these tests and to ensure that the business risk associated with any issues identified is incorporated into project risk management and treated in accordance with the Bank's risk management policies and processes Information Security management reporting, specifically within the change and project environment When required, deputise for the Head of Information Security Change And we are a bank so risk is a part of everything we do. We love people who take responsibility, do the right thing for customers, colleagues and Metro Bank and have the ability to call out any concerns. What you will need: You must have a strong understanding of information security within the project management lifecycle, alongside a solid working knowledge of enterprise technology You must have a strong risk management background and experience in conducting security risk assessments on projects and developing security controls Specific experience in secure design, build and control methodologies aligned to relevant security standards, e.g. ISO27001, PCI DSS, NIST Demonstrable experience of Agile, DevSecOps, Cloud, containerization, microservices and similar technologies is desirable Excellent stakeholder management skills with the ability to distil complex conversations into information that can be consumed by a non-technical audience to make decisions You are able to critically assess regulatory risks applicable to systems and projects within the financial industry against the wider business and information security risks Understand the risks associated with your job and what that means for you, Metro Bank and all our stakeholders Our promise to you We will make sure that you are well-rewarded by providing you with a competitive salary, discretionary annual bonus, and a wide range of benefits, including generous holiday allowance, attractive pension scheme, healthcare, life assurance, and a number of colleague discounts! We will give you the training to ensure you succeed in your role and plenty of internal opportunities to progress your career (around 40% of our recruitment comes from internal promotions! Diverse teams really are the best teams. We know that candidates (especially women, research tells us) may be put off applying for a job unless they can tick every box. We also know that 'normal' office hours aren't always doable, and while we can't accommodate every flexible working request we are happy to be asked. So if you are excited about working with us and think you can do much of what we are looking for but aren't sure if you are 100% there yet why not give it a whirl? Please note that sometimes we may close a job earlier for applications if we are inundated with amazing candidates Good luck!
Role: Head of Security (Cyber Security) Reporting to: CTO Location: Remote - UK Job Type: Full-time, Permanent Salary: Competitive, based on experience + benefits + bonus potential About Us Come and be a part of The Investigo Group (TIG), a dynamic coalition of cutting-edge tech firms specialising in Platform, Software, Data, AI and other bleeding edge technology solutions. Our innovative prowess spans the globe while proudly hailing from the United Kingdom. The group is multi functional with a large portfolio of B2B products and services. Our ecosystem is made up of: IIS, Providing secure internet access in both the public and private sectors. Its mission? To deliver world class secure internet capabilities enhancing productivity across diverse skillsets and organisations. Vestigo Consulting is our training and consultancy company, tailored around specialist sector specific knowledge, and provides regular courses and CPD for our community. The Consultancy side concentrates on expert support of our customers as well as specifically assigned individual deployments. Collaboraite is a bleeding edge company that provides our Data and AI capability. A collaborative partner for designing user centred secure data solutions to overcome operational hurdles, delivered through design thinking and agile coaching. Diversity, Equity, and Inclusion (DEI) are at the heart of The Investigo Group (TIG). We're dedicated to creating a workplace where people from all backgrounds are not only welcome but empowered to excel. We actively seek diverse talent, promote fairness, and foster an inclusive environment where every voice matters, driving innovation and progress in our dynamic tech community. The group provides bespoke, secure, user centric products fuelled by deep technical knowledge advanced data and analytical skills. We proudly stand as a global leader in this space, partnering with esteemed entities that require these advanced forward thinking capabilities. These partnerships have been forged from our understanding of customer challenges, as well as our expertise in developing world leading enterprise product sets. Join us at TIG, where innovation knows no bounds, and together, we'll shape the future of technology solutions for a safer, more efficient world. About You: You are an accomplished security leader with the credibility to influence at Board level and the technical depth to guide teams across cyber, physical, personnel, and operational resilience. You thrive in complex, high stakes environments where risk management, regulatory compliance, and innovation must coexist. You are equally comfortable defining long term strategy as you are rolling up your sleeves to solve immediate challenges. With a strong track record of building and leading multidisciplinary teams, you foster a culture of accountability, collaboration, and continuous improvement. You proven experience of shaping security functions in government, defence, critical national infrastructure, or highly regulated commercial sectors, and are fluent in the language of both security operations and business transformation. Above all, you see security as a business enabler; protecting today while preparing for tomorrow. About The Team: The Security & Resilience team spans cyber, physical, personnel, and operational resilience. The function is responsible for delivering the organisation wide Security Strategy, overseeing operations, architecture, compliance, and risk management, as well as leading resilience and incident response activities. As Head of Security, you will build and lead this cross disciplinary team, ensuring continuous development, resource alignment, and the delivery of targeted training and awareness programmes. The team works closely with engineering, DevSecOps, compliance, legal, and senior leadership to embed security by design and enable scalable, business aligned security practices. About The Role: We're looking for a seasoned and strategic Head of Security to take ownership of our organisation's entire security landscape, spanning cyber, physical, personnel, and operational resilience. This is a senior leadership role at the heart of the business, ensuring that security not only protects but also enables our growth. You will set and deliver a comprehensive security strategy that balances commercial ambitions with risk management, regulatory compliance, and resilience. Acting as a trusted advisor to the Board, you'll provide clear visibility of emerging threats, opportunities, and priorities while shaping security as a true business enabler. Leading a high performing, cross disciplinary team, you will drive innovation across security operations, architecture, risk, and assurance, embedding a security first culture that supports our long term success. Key Responsibilities: Strategic Leadership & Governance Report on key performance indicators (KPIs), threat landscape, and security posture to the Board of Directors. Lead the development and delivery of the organisation wide Security Strategy. Align security operations with commercial expansion goals and emerging geopolitical and sector trends. Champion a security first culture across all departments. Shape security as a business enabling capabilityli> Security Operations & Architecture Oversee the design, implementation, and operation of a modern Security Operations Centre (SOC), resilience programmes, red teaming, insider threat monitoring, and secure architecture consulting. Lead proactive threat intelligence, detection, and response efforts. Drive the implementation of security by design principles in collaboration with engineering and DevSecOps teams. Create and mature a Security Architecture function supporting SSDLC and security. Risk, Compliance & Assurance Own the enterprise risk register, redefining the organisation's approach to risk and resilience. Ensure full compliance with local, international, and sector specific standards (GDPR, etc.). Oversee supply chain and third party risk assessments, security onboarding, and vendor compliance. Lead ISMS development and manage external audits and certifications. Team Leadership & Development Build and lead a cross disciplinary security team (cyber, physical, personnel, and resilience). Ensure continuous development and resource alignment across the function. Deliver targeted training, simulations, and awareness campaigns to build a secure by default workforce. Establish performance tracking dashboards and feedback loops to measure effectiveness and drive continuous improvement. Engagement & Stakeholder Management Actively participate in the Senior Leadership Team, contributing to enterprise level transformation and strategy. Collaborate with legal, compliance, and engineering teams to ensure holistic and scalable security practices. Engage with external regulators government bodies, and strategic partners to share intelligence and influence standards. Resilience & Incident Management Lead organisation wide incident response, recovery, and post incident review processes. Design and scale resilience testing (e.g. tabletop exercises, scenario simulations) to improve organisational maturity and customer trust. Success in This Role Looks Like A clear, board approved Security Strategy is in place, actively aligning security priorities with business growth and regulatory requirements. The organisation has full visibility of key risks, with proactive reporting and measurable improvements to security posture and resilience. A high performing, cross disciplinary security team is established, continuously developed, and recognised as a trusted partner across the business. Security operations, including SOC, threat intelligence, incident response, and secure architecture are running effectively, with security by design embedded into products and services. Compliance with sector specific standards which is demonstrable through successful audits, certifications, vendor risk management. Incident response and resilience exercises are embedded into business as usual, strengthening customer trust and organisational readiness. A strong security culture is visible across the workforce, supported by awareness campaigns, training, and leadership engagement. Why Join Us? Play a critical role in shaping the future of security in a fast growing, mission driven organisation. Work closely with the Board and Senior Leadership Team to influence real change. Lead innovative security programmes at the intersection of commercial, operational, and national security domains. Access to unique sector opportunities, collaborative government networks, and meaningful impact on society. What We're Looking For: Proven experience in a senior InfoSec or Head of Security role, preferably in government, defence, law enforcement, or highly regulated sectors. Deep understanding of risk management, compliance, and resilience within complex organisations. Strong leadership and communication skills, with experience advising C level stakeholders and Boards. Technical fluency across cybersecurity, security architecture, threat intelligence, and secure development lifecycles. . click apply for full job details
Dec 10, 2025
Full time
Role: Head of Security (Cyber Security) Reporting to: CTO Location: Remote - UK Job Type: Full-time, Permanent Salary: Competitive, based on experience + benefits + bonus potential About Us Come and be a part of The Investigo Group (TIG), a dynamic coalition of cutting-edge tech firms specialising in Platform, Software, Data, AI and other bleeding edge technology solutions. Our innovative prowess spans the globe while proudly hailing from the United Kingdom. The group is multi functional with a large portfolio of B2B products and services. Our ecosystem is made up of: IIS, Providing secure internet access in both the public and private sectors. Its mission? To deliver world class secure internet capabilities enhancing productivity across diverse skillsets and organisations. Vestigo Consulting is our training and consultancy company, tailored around specialist sector specific knowledge, and provides regular courses and CPD for our community. The Consultancy side concentrates on expert support of our customers as well as specifically assigned individual deployments. Collaboraite is a bleeding edge company that provides our Data and AI capability. A collaborative partner for designing user centred secure data solutions to overcome operational hurdles, delivered through design thinking and agile coaching. Diversity, Equity, and Inclusion (DEI) are at the heart of The Investigo Group (TIG). We're dedicated to creating a workplace where people from all backgrounds are not only welcome but empowered to excel. We actively seek diverse talent, promote fairness, and foster an inclusive environment where every voice matters, driving innovation and progress in our dynamic tech community. The group provides bespoke, secure, user centric products fuelled by deep technical knowledge advanced data and analytical skills. We proudly stand as a global leader in this space, partnering with esteemed entities that require these advanced forward thinking capabilities. These partnerships have been forged from our understanding of customer challenges, as well as our expertise in developing world leading enterprise product sets. Join us at TIG, where innovation knows no bounds, and together, we'll shape the future of technology solutions for a safer, more efficient world. About You: You are an accomplished security leader with the credibility to influence at Board level and the technical depth to guide teams across cyber, physical, personnel, and operational resilience. You thrive in complex, high stakes environments where risk management, regulatory compliance, and innovation must coexist. You are equally comfortable defining long term strategy as you are rolling up your sleeves to solve immediate challenges. With a strong track record of building and leading multidisciplinary teams, you foster a culture of accountability, collaboration, and continuous improvement. You proven experience of shaping security functions in government, defence, critical national infrastructure, or highly regulated commercial sectors, and are fluent in the language of both security operations and business transformation. Above all, you see security as a business enabler; protecting today while preparing for tomorrow. About The Team: The Security & Resilience team spans cyber, physical, personnel, and operational resilience. The function is responsible for delivering the organisation wide Security Strategy, overseeing operations, architecture, compliance, and risk management, as well as leading resilience and incident response activities. As Head of Security, you will build and lead this cross disciplinary team, ensuring continuous development, resource alignment, and the delivery of targeted training and awareness programmes. The team works closely with engineering, DevSecOps, compliance, legal, and senior leadership to embed security by design and enable scalable, business aligned security practices. About The Role: We're looking for a seasoned and strategic Head of Security to take ownership of our organisation's entire security landscape, spanning cyber, physical, personnel, and operational resilience. This is a senior leadership role at the heart of the business, ensuring that security not only protects but also enables our growth. You will set and deliver a comprehensive security strategy that balances commercial ambitions with risk management, regulatory compliance, and resilience. Acting as a trusted advisor to the Board, you'll provide clear visibility of emerging threats, opportunities, and priorities while shaping security as a true business enabler. Leading a high performing, cross disciplinary team, you will drive innovation across security operations, architecture, risk, and assurance, embedding a security first culture that supports our long term success. Key Responsibilities: Strategic Leadership & Governance Report on key performance indicators (KPIs), threat landscape, and security posture to the Board of Directors. Lead the development and delivery of the organisation wide Security Strategy. Align security operations with commercial expansion goals and emerging geopolitical and sector trends. Champion a security first culture across all departments. Shape security as a business enabling capabilityli> Security Operations & Architecture Oversee the design, implementation, and operation of a modern Security Operations Centre (SOC), resilience programmes, red teaming, insider threat monitoring, and secure architecture consulting. Lead proactive threat intelligence, detection, and response efforts. Drive the implementation of security by design principles in collaboration with engineering and DevSecOps teams. Create and mature a Security Architecture function supporting SSDLC and security. Risk, Compliance & Assurance Own the enterprise risk register, redefining the organisation's approach to risk and resilience. Ensure full compliance with local, international, and sector specific standards (GDPR, etc.). Oversee supply chain and third party risk assessments, security onboarding, and vendor compliance. Lead ISMS development and manage external audits and certifications. Team Leadership & Development Build and lead a cross disciplinary security team (cyber, physical, personnel, and resilience). Ensure continuous development and resource alignment across the function. Deliver targeted training, simulations, and awareness campaigns to build a secure by default workforce. Establish performance tracking dashboards and feedback loops to measure effectiveness and drive continuous improvement. Engagement & Stakeholder Management Actively participate in the Senior Leadership Team, contributing to enterprise level transformation and strategy. Collaborate with legal, compliance, and engineering teams to ensure holistic and scalable security practices. Engage with external regulators government bodies, and strategic partners to share intelligence and influence standards. Resilience & Incident Management Lead organisation wide incident response, recovery, and post incident review processes. Design and scale resilience testing (e.g. tabletop exercises, scenario simulations) to improve organisational maturity and customer trust. Success in This Role Looks Like A clear, board approved Security Strategy is in place, actively aligning security priorities with business growth and regulatory requirements. The organisation has full visibility of key risks, with proactive reporting and measurable improvements to security posture and resilience. A high performing, cross disciplinary security team is established, continuously developed, and recognised as a trusted partner across the business. Security operations, including SOC, threat intelligence, incident response, and secure architecture are running effectively, with security by design embedded into products and services. Compliance with sector specific standards which is demonstrable through successful audits, certifications, vendor risk management. Incident response and resilience exercises are embedded into business as usual, strengthening customer trust and organisational readiness. A strong security culture is visible across the workforce, supported by awareness campaigns, training, and leadership engagement. Why Join Us? Play a critical role in shaping the future of security in a fast growing, mission driven organisation. Work closely with the Board and Senior Leadership Team to influence real change. Lead innovative security programmes at the intersection of commercial, operational, and national security domains. Access to unique sector opportunities, collaborative government networks, and meaningful impact on society. What We're Looking For: Proven experience in a senior InfoSec or Head of Security role, preferably in government, defence, law enforcement, or highly regulated sectors. Deep understanding of risk management, compliance, and resilience within complex organisations. Strong leadership and communication skills, with experience advising C level stakeholders and Boards. Technical fluency across cybersecurity, security architecture, threat intelligence, and secure development lifecycles. . click apply for full job details
Vulnerability Management Operations Lead page is loaded Vulnerability Management Operations Leadlocations: London, United Kingdomtime type: Full timeposted on: Posted Todayjob requisition id: RLSEG is seeking a Vulnerability Management Operations Lead to drive the execution, coordination, and continuous improvement of our global vulnerability management program. This is a hands-on technical leadership role that blends operational oversight with deep analytical and engineering engagement. You'll provide direction and coordination across specialized vulnerability management domains, including infrastructure and application level, ensuring alignment, consistency, and measurable risk reduction. As the key operational partner to the Head of Vulnerability Management, you'll serve as the connective tissue across the program, enabling technical teams, translating intelligence into action, defining performance metrics, and representing vulnerability management in critical business and incident contexts. Who you are You're a technical leader and analytical thinker who thrives at the intersection of engineering, data, and security operations. You combine a hands-on understanding of vulnerabilities and exploits with the ability to orchestrate complex operational programs. You are data-driven, curious, and relentless in pursuit of improvement, always looking for better ways to measure, prioritize, and reduce risk. You excel under pressure, lead with credibility, and elevate those around you through mentorship, clarity, and technical insight. Key Responsibilities Operational Leadership Provide matrix leadership and coordination across domain-aligned vulnerability management engineers. Oversee daily and strategic vulnerability management operations, ensuring consistent execution, quality, and prioritization across all domains. Coordinate activities across VM engineers to identify systemic weaknesses, unknown exposures, and emerging risks. Act as the key representative of the vulnerability management function during major incidents, providing expert analysis and coordinated response leadership. Threat and Intelligence Integration Assess and triage Cyber Threat Intelligence input, determining impact and required actions across the environment. Drive targeted response campaigns and validation efforts in collaboration with domain engineers. Translate external threat intelligence into actionable technical outcomes and measurable risk mitigation. Process and Governance Serve as a key contributor to the overarching VM process, framework, and standards, ensuring technical rigor and operational efficiency. Define, track, and evolve key performance and risk metrics (e.g., vulnerability MTTR, backlog trends, exploit exposure, patch SLAs, coverage rates). Collaborate with the VM Governance team to ensure alignment of reporting, dashboards, and audit readiness. Champion data-driven decision-making and measurable accountability across all VM activities. Technical Oversight Provide technical oversight to vulnerability management engineers, ensuring analytical depth, accuracy, and consistency in findings and remediation guidance. Partner with engineering, infrastructure, and DevSecOps teams to improve vulnerability lifecycle management, from identification and triage to remediation and validation. Contribute to root cause and trend analysis of recurring vulnerabilities to inform long-term preventative measures. Continuous Improvement Drive the ongoing enhancement of vulnerability management processes, leveraging lessons learned and industry developments. Identify and implement automation opportunities to streamline operations and improve response times. Foster a culture of continuous improvement within the team and across the wider security function. Required Skills and Experience Proven experience in vulnerability management, security operations, or a related information security domain. Strong understanding of vulnerability identification methodologies (e.g. infrastructure scanning, SAST, SCA, penetration testing) and remediation processes. Demonstrated ability to lead technical teams and manage operational workflows. Solid grasp of threat intelligence, risk assessment, and security best practices. Excellent analytical, problem-solving, and decision-making skills. Effective communication skills, capable of engaging both technical and non-technical stakeholders.Join us and be part of a team that values innovation, quality, and continuous improvement. If you're ready to take your career to the next level and make a significant impact, we'd love to hear from you.LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership , Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce.We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone's race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.You will be part of a collaborative and creative culture where we encourage new ideas. We are committed to sustainability across our global business and we are proud to partner with our customers to help them meet their sustainability objectives. Our charity, the LSEG Foundation provides charitable grants to community groups that help people access economic opportunities and build a secure future with financial independence. Colleagues can get involved through fundraising and volunteering.LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.Please take a moment to read this carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it's used for, and how it's obtained, .If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.LSEG (London Stock Exchange Group) is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth. Our culture of connecting, creating opportunity and delivering excellence shapes how we think, how we do things and how we help our people fulfil their potential.
Dec 10, 2025
Full time
Vulnerability Management Operations Lead page is loaded Vulnerability Management Operations Leadlocations: London, United Kingdomtime type: Full timeposted on: Posted Todayjob requisition id: RLSEG is seeking a Vulnerability Management Operations Lead to drive the execution, coordination, and continuous improvement of our global vulnerability management program. This is a hands-on technical leadership role that blends operational oversight with deep analytical and engineering engagement. You'll provide direction and coordination across specialized vulnerability management domains, including infrastructure and application level, ensuring alignment, consistency, and measurable risk reduction. As the key operational partner to the Head of Vulnerability Management, you'll serve as the connective tissue across the program, enabling technical teams, translating intelligence into action, defining performance metrics, and representing vulnerability management in critical business and incident contexts. Who you are You're a technical leader and analytical thinker who thrives at the intersection of engineering, data, and security operations. You combine a hands-on understanding of vulnerabilities and exploits with the ability to orchestrate complex operational programs. You are data-driven, curious, and relentless in pursuit of improvement, always looking for better ways to measure, prioritize, and reduce risk. You excel under pressure, lead with credibility, and elevate those around you through mentorship, clarity, and technical insight. Key Responsibilities Operational Leadership Provide matrix leadership and coordination across domain-aligned vulnerability management engineers. Oversee daily and strategic vulnerability management operations, ensuring consistent execution, quality, and prioritization across all domains. Coordinate activities across VM engineers to identify systemic weaknesses, unknown exposures, and emerging risks. Act as the key representative of the vulnerability management function during major incidents, providing expert analysis and coordinated response leadership. Threat and Intelligence Integration Assess and triage Cyber Threat Intelligence input, determining impact and required actions across the environment. Drive targeted response campaigns and validation efforts in collaboration with domain engineers. Translate external threat intelligence into actionable technical outcomes and measurable risk mitigation. Process and Governance Serve as a key contributor to the overarching VM process, framework, and standards, ensuring technical rigor and operational efficiency. Define, track, and evolve key performance and risk metrics (e.g., vulnerability MTTR, backlog trends, exploit exposure, patch SLAs, coverage rates). Collaborate with the VM Governance team to ensure alignment of reporting, dashboards, and audit readiness. Champion data-driven decision-making and measurable accountability across all VM activities. Technical Oversight Provide technical oversight to vulnerability management engineers, ensuring analytical depth, accuracy, and consistency in findings and remediation guidance. Partner with engineering, infrastructure, and DevSecOps teams to improve vulnerability lifecycle management, from identification and triage to remediation and validation. Contribute to root cause and trend analysis of recurring vulnerabilities to inform long-term preventative measures. Continuous Improvement Drive the ongoing enhancement of vulnerability management processes, leveraging lessons learned and industry developments. Identify and implement automation opportunities to streamline operations and improve response times. Foster a culture of continuous improvement within the team and across the wider security function. Required Skills and Experience Proven experience in vulnerability management, security operations, or a related information security domain. Strong understanding of vulnerability identification methodologies (e.g. infrastructure scanning, SAST, SCA, penetration testing) and remediation processes. Demonstrated ability to lead technical teams and manage operational workflows. Solid grasp of threat intelligence, risk assessment, and security best practices. Excellent analytical, problem-solving, and decision-making skills. Effective communication skills, capable of engaging both technical and non-technical stakeholders.Join us and be part of a team that values innovation, quality, and continuous improvement. If you're ready to take your career to the next level and make a significant impact, we'd love to hear from you.LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership , Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce.We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone's race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.You will be part of a collaborative and creative culture where we encourage new ideas. We are committed to sustainability across our global business and we are proud to partner with our customers to help them meet their sustainability objectives. Our charity, the LSEG Foundation provides charitable grants to community groups that help people access economic opportunities and build a secure future with financial independence. Colleagues can get involved through fundraising and volunteering.LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.Please take a moment to read this carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it's used for, and how it's obtained, .If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.LSEG (London Stock Exchange Group) is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth. Our culture of connecting, creating opportunity and delivering excellence shapes how we think, how we do things and how we help our people fulfil their potential.
Senior Vulnerability Management Engineer page is loaded Senior Vulnerability Management Engineerlocations: London, United Kingdomtime type: Full timeposted on: Posted Todayjob requisition id: RLSEG is seeking a Senior Vulnerability Management Engineer to join our internal offensive security team with focus on driving closure of penetration testing findings. This role bridges offensive security and engineering by translating penetration test results into clear, actionable remediation guidance and partnering with application and platform teams to implement secure fixes. The successful candidate has a strong penetration testing or application security background, hands on remediation experience, and the ability to coordinate multiple collaborators to reduce risk at scale. This is a highly technical, delivery focused role with responsibility for both individual findings and systemic improvements. Key Responsibilities Analyze and review penetration test reports to understand technical impact, exploitability, and business risk. Develop, document and maintain remediation guidance, patterns, and blue-prints for common vulnerability types (e.g. injections, access control, auth, session management, misconfigurations). Provide consultation to application and platform teams on secure design and remediation approaches, including code-level, configuration-level and business-level recommendations. Coordinate remediation activities across multiple teams, ensuring, clear ownership, agreed timelines, and risk-based prioritization. Validate fixes by retesting vulnerabilities (manually and/or via tools/scripts) and updating the status of findings through closure. Manage and track the remediation backlog, including SLAs, aging finings, and critical issues when needed. Produce and maintain documentation on remediation processes, workflows, and controls for audit and compliance purposes. Prepare and deliver regular status reports and metrics on remediation progress, trends, and risk reduction to management and partners. Perform root cause analysis for recurring or systemic issues and work with engineering, architecture, and governance teams to implement long-term corrective actions. Contribute to continuous improvement of the pentest-to-remediation lifecycle, including automation, standardization and integration with SDLC/DevSecOps pipelines. Compile technical documents, track and document remediation metadata + Engagement details (who, what, when, where) + Testing team members and roles + Tools and methodologies used + Schedule and timelines + Target systems and environments + Constraints, exclusions, and limitations + Testing activities and event logs Contribute to team improvement efforts and ensure all initiatives and feedback are well documented for future references. Contribute to the continuous improvement of testing methodologies, tooling, automation. Stay ahead of with emerging threats, vulnerabilities, and offensive security techniques. Participate in R&D initiatives as guided from leadership. Support knowledge sharing and mentoring within the team. Required Skills & Experience Proven hands-on experience in penetration testing of Web Applications, APIs, Thick Client and Common Infrastructures (Active Directory, Cloud and Cloud-native based environments). Proficiency with tools such as Burp Suite, common command-line tools, and ability to write custom scripts when needed. Experience in automating pentesting tasks. Solid understanding of application security, network protocols, and operating systems. Experience with cloud platforms (AWS, Azure, GCP) and containerized environments (Docker, Kubernetes). Solid understanding of common vulnerabilities and exposures (OWASP Top 10, SANS Top 25) and secure coding practices in at least on major language stack (e.g. Java/Springboot, .NET, JavaScript/Node, Python) Ability to write clear, technical reports and communicate findings and fixes to both technical and non-technical partners. Experience working in large, complex enterprise environments. Proficient communication skills in English, both written and verbal. Relevant certifications and engagement with the security community is a plus Threat Modelling experience is a plus. Proven track record of successfully managing and driving security engagements for various organizations with differing operational and technical profiles. Ability to identify, assess, and communicate technical and project risks to partners. Understanding project requirements and aligning work with agreed upon objectives and timelines.Join us and be part of a team that values innovation, quality, and continuous improvement. If you're ready to take your career to the next level and make a significant impact, we'd love to hear from you.LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership , Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce.We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone's race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.You will be part of a collaborative and creative culture where we encourage new ideas. We are committed to sustainability across our global business and we are proud to partner with our customers to help them meet their sustainability objectives. Our charity, the LSEG Foundation provides charitable grants to community groups that help people access economic opportunities and build a secure future with financial independence. Colleagues can get involved through fundraising and volunteering.LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.Please take a moment to read this carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it's used for, and how it's obtained, .If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.locations: London, United Kingdomtime type: Full timeposted on: Posted 30+ Days AgoLSEG (London Stock Exchange Group) is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth. Our culture of connecting, creating opportunity and delivering excellence shapes how we think, how we do things and how we help our people fulfil their potential.
Dec 10, 2025
Full time
Senior Vulnerability Management Engineer page is loaded Senior Vulnerability Management Engineerlocations: London, United Kingdomtime type: Full timeposted on: Posted Todayjob requisition id: RLSEG is seeking a Senior Vulnerability Management Engineer to join our internal offensive security team with focus on driving closure of penetration testing findings. This role bridges offensive security and engineering by translating penetration test results into clear, actionable remediation guidance and partnering with application and platform teams to implement secure fixes. The successful candidate has a strong penetration testing or application security background, hands on remediation experience, and the ability to coordinate multiple collaborators to reduce risk at scale. This is a highly technical, delivery focused role with responsibility for both individual findings and systemic improvements. Key Responsibilities Analyze and review penetration test reports to understand technical impact, exploitability, and business risk. Develop, document and maintain remediation guidance, patterns, and blue-prints for common vulnerability types (e.g. injections, access control, auth, session management, misconfigurations). Provide consultation to application and platform teams on secure design and remediation approaches, including code-level, configuration-level and business-level recommendations. Coordinate remediation activities across multiple teams, ensuring, clear ownership, agreed timelines, and risk-based prioritization. Validate fixes by retesting vulnerabilities (manually and/or via tools/scripts) and updating the status of findings through closure. Manage and track the remediation backlog, including SLAs, aging finings, and critical issues when needed. Produce and maintain documentation on remediation processes, workflows, and controls for audit and compliance purposes. Prepare and deliver regular status reports and metrics on remediation progress, trends, and risk reduction to management and partners. Perform root cause analysis for recurring or systemic issues and work with engineering, architecture, and governance teams to implement long-term corrective actions. Contribute to continuous improvement of the pentest-to-remediation lifecycle, including automation, standardization and integration with SDLC/DevSecOps pipelines. Compile technical documents, track and document remediation metadata + Engagement details (who, what, when, where) + Testing team members and roles + Tools and methodologies used + Schedule and timelines + Target systems and environments + Constraints, exclusions, and limitations + Testing activities and event logs Contribute to team improvement efforts and ensure all initiatives and feedback are well documented for future references. Contribute to the continuous improvement of testing methodologies, tooling, automation. Stay ahead of with emerging threats, vulnerabilities, and offensive security techniques. Participate in R&D initiatives as guided from leadership. Support knowledge sharing and mentoring within the team. Required Skills & Experience Proven hands-on experience in penetration testing of Web Applications, APIs, Thick Client and Common Infrastructures (Active Directory, Cloud and Cloud-native based environments). Proficiency with tools such as Burp Suite, common command-line tools, and ability to write custom scripts when needed. Experience in automating pentesting tasks. Solid understanding of application security, network protocols, and operating systems. Experience with cloud platforms (AWS, Azure, GCP) and containerized environments (Docker, Kubernetes). Solid understanding of common vulnerabilities and exposures (OWASP Top 10, SANS Top 25) and secure coding practices in at least on major language stack (e.g. Java/Springboot, .NET, JavaScript/Node, Python) Ability to write clear, technical reports and communicate findings and fixes to both technical and non-technical partners. Experience working in large, complex enterprise environments. Proficient communication skills in English, both written and verbal. Relevant certifications and engagement with the security community is a plus Threat Modelling experience is a plus. Proven track record of successfully managing and driving security engagements for various organizations with differing operational and technical profiles. Ability to identify, assess, and communicate technical and project risks to partners. Understanding project requirements and aligning work with agreed upon objectives and timelines.Join us and be part of a team that values innovation, quality, and continuous improvement. If you're ready to take your career to the next level and make a significant impact, we'd love to hear from you.LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership , Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce.We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone's race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.You will be part of a collaborative and creative culture where we encourage new ideas. We are committed to sustainability across our global business and we are proud to partner with our customers to help them meet their sustainability objectives. Our charity, the LSEG Foundation provides charitable grants to community groups that help people access economic opportunities and build a secure future with financial independence. Colleagues can get involved through fundraising and volunteering.LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.Please take a moment to read this carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it's used for, and how it's obtained, .If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.locations: London, United Kingdomtime type: Full timeposted on: Posted 30+ Days AgoLSEG (London Stock Exchange Group) is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth. Our culture of connecting, creating opportunity and delivering excellence shapes how we think, how we do things and how we help our people fulfil their potential.
We are seeking a highly motivated and experienced AWS Architect with strong DevOps expertise to support digital transformation across the UK public sector. This role is ideal for a self-starter who thrives in dynamic environments, is hands on with cloud technologies, and can operate both strategically and tactically. You will be instrumental in designing and delivering secure, scalable, and automated cloud solutions. Key Responsibilities Architect and implement secure, scalable, and resilient AWS cloud solutions. Lead DevOps practices including CI/CD pipeline development, infrastructure automation, and monitoring. Act as a trusted advisor to stakeholders, translating business needs into technical solutions. Drive cloud adoption and DevOps transformation initiatives across public sector projects. Ensure compliance with UK public sector regulations and security standards. Collaborate with cross-functional teams to deliver end to end cloud native solutions. Mentor engineering teams and promote best practices in cloud and DevOps. Take initiative in identifying opportunities for innovation and improvement. Essential Skills & Experience Several years of hands on experience with AWS architecture and services. Strong DevOps background with experience in automation, CI/CD, and infrastructure as code. Proficiency with tools such as Terraform, CloudFormation, Jenkins, GitLab CI, or AWS CodePipeline. Experience with containerization and orchestration (e.g., Docker, Kubernetes, ECS/EKS). Solid understanding of cloud security, identity management, and compliance frameworks. Demonstrated experience working in or with UK public sector organizations. Active UK Security Clearance (or eligibility to obtain). Ability to work independently, take ownership, and drive initiatives forward. Strong communication and collaboration skills; a true team player. Desirable Qualifications AWS Certified Solutions Architect - Professional AWS Certified DevOps Engineer - Professional Experience with monitoring and observability tools (e.g., CloudWatch, Prometheus, Grafana) Familiarity with Agile and DevSecOps methodologies
Dec 10, 2025
Full time
We are seeking a highly motivated and experienced AWS Architect with strong DevOps expertise to support digital transformation across the UK public sector. This role is ideal for a self-starter who thrives in dynamic environments, is hands on with cloud technologies, and can operate both strategically and tactically. You will be instrumental in designing and delivering secure, scalable, and automated cloud solutions. Key Responsibilities Architect and implement secure, scalable, and resilient AWS cloud solutions. Lead DevOps practices including CI/CD pipeline development, infrastructure automation, and monitoring. Act as a trusted advisor to stakeholders, translating business needs into technical solutions. Drive cloud adoption and DevOps transformation initiatives across public sector projects. Ensure compliance with UK public sector regulations and security standards. Collaborate with cross-functional teams to deliver end to end cloud native solutions. Mentor engineering teams and promote best practices in cloud and DevOps. Take initiative in identifying opportunities for innovation and improvement. Essential Skills & Experience Several years of hands on experience with AWS architecture and services. Strong DevOps background with experience in automation, CI/CD, and infrastructure as code. Proficiency with tools such as Terraform, CloudFormation, Jenkins, GitLab CI, or AWS CodePipeline. Experience with containerization and orchestration (e.g., Docker, Kubernetes, ECS/EKS). Solid understanding of cloud security, identity management, and compliance frameworks. Demonstrated experience working in or with UK public sector organizations. Active UK Security Clearance (or eligibility to obtain). Ability to work independently, take ownership, and drive initiatives forward. Strong communication and collaboration skills; a true team player. Desirable Qualifications AWS Certified Solutions Architect - Professional AWS Certified DevOps Engineer - Professional Experience with monitoring and observability tools (e.g., CloudWatch, Prometheus, Grafana) Familiarity with Agile and DevSecOps methodologies
Introduction At IBM CIC, we provide technical and industry expertise to a wide range of public and private sector clients in the UK. A career in IBM CIC means you'll have the opportunity to work with leading professionals across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. You will get the chance to deliver effective solutions, driving meaningful business change for our clients, using some of the latest technology platforms. Curiosity and a constant quest for knowledge serve as the foundation to success here. You'll be encouraged and supported to constantly reinvent yourself, focusing on skills in demand in an ever changing market. You'll be working with diverse teams, coming up with creative solutions which impact a wide network of clients, who may be at their site or one of our CIC or IBM locations. Our culture of evolution centres on long-term career growth and development opportunities in an environment that embraces your unique skills and experience. We offer Many training opportunities from classroom to e-learning, mentoring and coaching programs and the chance to gain industry recognized certifications Regular and frequent promotion opportunities to ensure you can drive and develop your career with us Feedback and checkpoints throughout the year Diversity & Inclusion as an essential and authentic component of our culture through our policies and process as well as our Employee Champion teams and support networks A culture where your ideas for growth and innovation are always welcome Internal recognition programs for peer-to-peer appreciation as well as from manager to employees Tools and policies to support your work-life balance from flexible working approaches, sabbatical programs, paid paternity leave, maternity leave and an innovative maternity returners scheme Your role and responsibilities We are looking for a highly skilled Data Platforms Data Engineer to design and implement advanced data engineering solutions across complex environments. You will develop applications using Big Data technologies, building APIs and data pipelines that enable robust data integration and analytics. Your expertise in DataStage, Redshift, S3, and QuickSight will be essential for developing scalable data warehouses and dashboards. You will also apply your knowledge of analytics libraries, open-source Natural Language Processing, and statistical computing to enhance data insights. Working in an Agile environment, you will ensure data quality, security, and performance optimisation across all systems. This is a hands-on technical role requiring deep coding expertise and innovation in data platform engineering. Responsibilities Design and develop data pipelines and APIs using Big Data technologies. Implement and optimise ETL processes for batch and real-time data flows. Develop data warehouse solutions using Redshift and DataStage. Build dashboards and analytical reports using QuickSight. Apply DevSecOps practices to automate and secure data workflows. Required technical and professional expertise Strong proficiency in Java, SQL, and data pipeline development. Expertise in AWS data tools such as Redshift, S3, and QuickSight. Experience with DataStage or similar ETL frameworks. Knowledge of analytics libraries and open-source NLP tools. Familiarity with GitHub/GitLab and Agile development practices. Experience with data migration/ ETL both batch and real time, data warehouse development, DevSecOps, Java, sql, relational databases Preferred technical and professional experience Experience with Python or Spark for data processing. Understanding of data security and compliance frameworks. Background in statistical computing or machine learning integration. Exposure to containerisation or CI/CD pipelines. Eligibility As an equal opportunities' employer, we welcome applications from individuals of all backgrounds. However, for you to be eligible for this role, you must have the valid right to work in the UK. Unfortunately, we do not offer visa sponsorship and have no future plans to do so. You must be a resident in the UK and have been living continuously in the UK for the last 5 years. Equal opportunity statement IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.
Dec 10, 2025
Full time
Introduction At IBM CIC, we provide technical and industry expertise to a wide range of public and private sector clients in the UK. A career in IBM CIC means you'll have the opportunity to work with leading professionals across multiple industries to improve the hybrid cloud and AI journey for the most innovative and valuable companies in the world. You will get the chance to deliver effective solutions, driving meaningful business change for our clients, using some of the latest technology platforms. Curiosity and a constant quest for knowledge serve as the foundation to success here. You'll be encouraged and supported to constantly reinvent yourself, focusing on skills in demand in an ever changing market. You'll be working with diverse teams, coming up with creative solutions which impact a wide network of clients, who may be at their site or one of our CIC or IBM locations. Our culture of evolution centres on long-term career growth and development opportunities in an environment that embraces your unique skills and experience. We offer Many training opportunities from classroom to e-learning, mentoring and coaching programs and the chance to gain industry recognized certifications Regular and frequent promotion opportunities to ensure you can drive and develop your career with us Feedback and checkpoints throughout the year Diversity & Inclusion as an essential and authentic component of our culture through our policies and process as well as our Employee Champion teams and support networks A culture where your ideas for growth and innovation are always welcome Internal recognition programs for peer-to-peer appreciation as well as from manager to employees Tools and policies to support your work-life balance from flexible working approaches, sabbatical programs, paid paternity leave, maternity leave and an innovative maternity returners scheme Your role and responsibilities We are looking for a highly skilled Data Platforms Data Engineer to design and implement advanced data engineering solutions across complex environments. You will develop applications using Big Data technologies, building APIs and data pipelines that enable robust data integration and analytics. Your expertise in DataStage, Redshift, S3, and QuickSight will be essential for developing scalable data warehouses and dashboards. You will also apply your knowledge of analytics libraries, open-source Natural Language Processing, and statistical computing to enhance data insights. Working in an Agile environment, you will ensure data quality, security, and performance optimisation across all systems. This is a hands-on technical role requiring deep coding expertise and innovation in data platform engineering. Responsibilities Design and develop data pipelines and APIs using Big Data technologies. Implement and optimise ETL processes for batch and real-time data flows. Develop data warehouse solutions using Redshift and DataStage. Build dashboards and analytical reports using QuickSight. Apply DevSecOps practices to automate and secure data workflows. Required technical and professional expertise Strong proficiency in Java, SQL, and data pipeline development. Expertise in AWS data tools such as Redshift, S3, and QuickSight. Experience with DataStage or similar ETL frameworks. Knowledge of analytics libraries and open-source NLP tools. Familiarity with GitHub/GitLab and Agile development practices. Experience with data migration/ ETL both batch and real time, data warehouse development, DevSecOps, Java, sql, relational databases Preferred technical and professional experience Experience with Python or Spark for data processing. Understanding of data security and compliance frameworks. Background in statistical computing or machine learning integration. Exposure to containerisation or CI/CD pipelines. Eligibility As an equal opportunities' employer, we welcome applications from individuals of all backgrounds. However, for you to be eligible for this role, you must have the valid right to work in the UK. Unfortunately, we do not offer visa sponsorship and have no future plans to do so. You must be a resident in the UK and have been living continuously in the UK for the last 5 years. Equal opportunity statement IBM is committed to creating a diverse environment and is proud to be an equal-opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, gender, gender identity or expression, sexual orientation, national origin, caste, genetics, pregnancy, disability, neurodivergence, age, veteran status, or other characteristics. IBM is also committed to compliance with all fair employment practices regarding citizenship and immigration status.
The Associate is responsible for the design, implementation, maintenance, and support of the Bank's platforms and software solutions. The Associate plays a critical role within the squad, taking a lead on designing, developing and optimising EBRD's infrastructure and software solutions within their own value stream. The Associate provides guidance to individual contributors, and works closely with other multi-functional teams and business product owners, to deliver high quality, product aligned services, that meets our users' needs. The role may involve leading small projects and the individual is expected to be proficient in software design and ability to implement CI/CD pipeline, Infrastructure as Code (IaC) or technologies within their specialism. Accountabilities & Responsibilities Simplify to amplify: Working within the squad and across other multi-disciplinary teams, the Associate openly questions complexity within and across teams and aims to simplify. The Associate works with business Product Owners to challenge current processes and requests which add no real value and is open to similar challenges from others. The Associate adopts and role models a "progress over perfection" approach across the team to emphasize the importance of continuous and incremental improvements. The Associate is comfortable taking swift decisions within their sphere of responsibility and instils trust in others to encourage them to take their own. The Associate understands the power of the team and the need to support decisions made, even when these may not be ones they would personally make. The Associate recognises that enabling the team to take swift decisions more efficiently, increases EBRD's agility and our ability to deliver value quicker. Listen well and speak up : The Associate helps to create a continuous learning and growth culture where each team member feels safe to share their different perspectives and people do not fear being judged. They encourage and facilitate dialogue and share feedback positively, constructively and respectfully. They role model these behaviours. Collaborate smartly : The Associate takes an active role in establishing and encouraging a collaborative culture across a squad, mentoring new team members and fostering productive working relationships with peers in other multi-disciplinary teams. The Associate builds close relationships with critical business Product Owners and SMEs and constantly seeks to improve the delivery of services to the Business. Engineering Excellence : The Associate brings in-depth knowledge and experience and uses this to enable others within the team to be successful, though remains humble and is proactive in keeping updated with the latest technologies, tools and best practices within their field. The role will mentor and guide less experienced engineers, fostering a culture of technical excellence, innovation and learning. The role will work with colleagues to understand business needs, design optimal engineering architectures and ensure engineering quality throughout the lifecycle. Agile Ways of Working : The Associate is an established agile practitioner and will help the squad to adopt Agile Ways of Working. The role will build and maintain high-performing teams focused on delivering continuous value to our business whilst enabling teams to learn how to adopt an adaptive and iterative approach using experimentation and metrics to help learning and continuous improvement. Managing cost and budget: The Associate will follow the appropriate tooling to track time and effort. The Associate will not be directly responsible for budget management however would be responsible for effectively managing the value from technology and delivery partners. Quality at our core : The Associate ensures that technical excellence and a quality assurance mindset are embedded with their own and the team's work. This involves a strong focus on automation and use of industry best practices such as Test Driven Development to embed the mindset of accountability across the development lifecycle. Secure First : The Associate actively promotes and ensures engineering activities are fully aligned with EBRD Cyber and IT Security policies and procedures, and works to embed a DevSecOps culture and working practices. Working closely with IT security, engineering peers and architecture, the role will ensure that key security controls, toolchain automation, and risk/threat analysis is carried out at every stage of the work done by the team. Drives User Experience : The Associate ensures that services which are being developed and supported are based on user needs, which are captured in user stories and acceptance criteria. This helps keep users at the centre of engineering efforts, and enables teams to align with established user journeys and user experience goals, in support of business requirements. Knowledge, Skills, Experience & Qualifications Education and Qualifications Networks - Network Security Technology experience in this area includes but is not limited to: Perimeter Security, including firewalls, intrusion detection/ prevention (IDS/IPS), anti-malware and threat prevention (Check Point, Palo Alto Networks and Cisco). Cloud network security (Check Point and Microsoft Azure). Web Application Firewalls (WAFs) - SaaS / on Prem / Azure. SSL VPNs. Secure Access Service Edge (SASE). Macro and micro network segmentation and tagging. Load balancing, including Global Server Load Balancing (GSLB). Network Access Control (NAC) covering 802.1x, profiling and MAB. Wi-Fi security (encryption / authentication / IPS). RADIUS and TACACS authentication. PKI infrastructure / certificate deployment and operation. What is it like to work at the EBRD? Our agile and innovative approach is what makes life at the EBRD a unique experience! You will be part of a pioneering and diverse international organisation, and use your talents to make a real difference to people's lives and help shape the future of the regions we invest in. The EBRD environment provides you with: Varied, stimulating and engaging work that gives you an opportunity to interact with a wide range of experts in the financial, political, public and private sectors across the regions we invest in; A working culture that embraces inclusion and celebrates diversity; An environment that places sustainability, equality and digital transformation at the heart of what we do. Diversity is one of the Bank's core values which are at the heart of everything it does. A diverse workforce with the right knowledge and skills enables connection with our clients, brings pioneering ideas, energy and innovation. The EBRD staff is characterised by its rich diversity of nationalities, cultures and opinions and we aim to sustain and build on this strength. As such, the EBRD seeks to ensure that everyone is treated with respect and given equal opportunities and works in an inclusive environment. The EBRD encourages all qualified candidates who are nationals of the EBRD member countries to apply regardless of their racial, ethnic, religious and cultural background, gender, sexual orientation or disabilities. As an inclusive employer, we promote flexible working and expecting our employee to attend the office 50% of their working time. Job Segment: Network Engineer, Embedded, Sustainability, Testing, Engineer, Engineering, Technology, Energy
Dec 10, 2025
Full time
The Associate is responsible for the design, implementation, maintenance, and support of the Bank's platforms and software solutions. The Associate plays a critical role within the squad, taking a lead on designing, developing and optimising EBRD's infrastructure and software solutions within their own value stream. The Associate provides guidance to individual contributors, and works closely with other multi-functional teams and business product owners, to deliver high quality, product aligned services, that meets our users' needs. The role may involve leading small projects and the individual is expected to be proficient in software design and ability to implement CI/CD pipeline, Infrastructure as Code (IaC) or technologies within their specialism. Accountabilities & Responsibilities Simplify to amplify: Working within the squad and across other multi-disciplinary teams, the Associate openly questions complexity within and across teams and aims to simplify. The Associate works with business Product Owners to challenge current processes and requests which add no real value and is open to similar challenges from others. The Associate adopts and role models a "progress over perfection" approach across the team to emphasize the importance of continuous and incremental improvements. The Associate is comfortable taking swift decisions within their sphere of responsibility and instils trust in others to encourage them to take their own. The Associate understands the power of the team and the need to support decisions made, even when these may not be ones they would personally make. The Associate recognises that enabling the team to take swift decisions more efficiently, increases EBRD's agility and our ability to deliver value quicker. Listen well and speak up : The Associate helps to create a continuous learning and growth culture where each team member feels safe to share their different perspectives and people do not fear being judged. They encourage and facilitate dialogue and share feedback positively, constructively and respectfully. They role model these behaviours. Collaborate smartly : The Associate takes an active role in establishing and encouraging a collaborative culture across a squad, mentoring new team members and fostering productive working relationships with peers in other multi-disciplinary teams. The Associate builds close relationships with critical business Product Owners and SMEs and constantly seeks to improve the delivery of services to the Business. Engineering Excellence : The Associate brings in-depth knowledge and experience and uses this to enable others within the team to be successful, though remains humble and is proactive in keeping updated with the latest technologies, tools and best practices within their field. The role will mentor and guide less experienced engineers, fostering a culture of technical excellence, innovation and learning. The role will work with colleagues to understand business needs, design optimal engineering architectures and ensure engineering quality throughout the lifecycle. Agile Ways of Working : The Associate is an established agile practitioner and will help the squad to adopt Agile Ways of Working. The role will build and maintain high-performing teams focused on delivering continuous value to our business whilst enabling teams to learn how to adopt an adaptive and iterative approach using experimentation and metrics to help learning and continuous improvement. Managing cost and budget: The Associate will follow the appropriate tooling to track time and effort. The Associate will not be directly responsible for budget management however would be responsible for effectively managing the value from technology and delivery partners. Quality at our core : The Associate ensures that technical excellence and a quality assurance mindset are embedded with their own and the team's work. This involves a strong focus on automation and use of industry best practices such as Test Driven Development to embed the mindset of accountability across the development lifecycle. Secure First : The Associate actively promotes and ensures engineering activities are fully aligned with EBRD Cyber and IT Security policies and procedures, and works to embed a DevSecOps culture and working practices. Working closely with IT security, engineering peers and architecture, the role will ensure that key security controls, toolchain automation, and risk/threat analysis is carried out at every stage of the work done by the team. Drives User Experience : The Associate ensures that services which are being developed and supported are based on user needs, which are captured in user stories and acceptance criteria. This helps keep users at the centre of engineering efforts, and enables teams to align with established user journeys and user experience goals, in support of business requirements. Knowledge, Skills, Experience & Qualifications Education and Qualifications Networks - Network Security Technology experience in this area includes but is not limited to: Perimeter Security, including firewalls, intrusion detection/ prevention (IDS/IPS), anti-malware and threat prevention (Check Point, Palo Alto Networks and Cisco). Cloud network security (Check Point and Microsoft Azure). Web Application Firewalls (WAFs) - SaaS / on Prem / Azure. SSL VPNs. Secure Access Service Edge (SASE). Macro and micro network segmentation and tagging. Load balancing, including Global Server Load Balancing (GSLB). Network Access Control (NAC) covering 802.1x, profiling and MAB. Wi-Fi security (encryption / authentication / IPS). RADIUS and TACACS authentication. PKI infrastructure / certificate deployment and operation. What is it like to work at the EBRD? Our agile and innovative approach is what makes life at the EBRD a unique experience! You will be part of a pioneering and diverse international organisation, and use your talents to make a real difference to people's lives and help shape the future of the regions we invest in. The EBRD environment provides you with: Varied, stimulating and engaging work that gives you an opportunity to interact with a wide range of experts in the financial, political, public and private sectors across the regions we invest in; A working culture that embraces inclusion and celebrates diversity; An environment that places sustainability, equality and digital transformation at the heart of what we do. Diversity is one of the Bank's core values which are at the heart of everything it does. A diverse workforce with the right knowledge and skills enables connection with our clients, brings pioneering ideas, energy and innovation. The EBRD staff is characterised by its rich diversity of nationalities, cultures and opinions and we aim to sustain and build on this strength. As such, the EBRD seeks to ensure that everyone is treated with respect and given equal opportunities and works in an inclusive environment. The EBRD encourages all qualified candidates who are nationals of the EBRD member countries to apply regardless of their racial, ethnic, religious and cultural background, gender, sexual orientation or disabilities. As an inclusive employer, we promote flexible working and expecting our employee to attend the office 50% of their working time. Job Segment: Network Engineer, Embedded, Sustainability, Testing, Engineer, Engineering, Technology, Energy
Locations : Boston London Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Global Delivery Director - Secure Data is a critical leadership role that enables the secure foundation of BCG's digital operations globally. By driving scalable, automated, and user-focused security engineering-and by embedding security into modern engineering and operational practices-this role ensures BCG can innovate securely while maintaining trust, compliance, and operational excellence. The Global Delivery Director - Secure Data is responsible for leading the design, delivery, and continuous evolution of BCG's data security strategy and controls. This role ensures that BCG's most sensitive data is protected globally through secure-by-design engineering, automation at scale, and resilient security platforms. The Director will drive strategic planning, execution, and operations of scalable, automated, and resilient security solutions that safeguard BCG's global operations and users, while enabling innovation and agility across BCG Core, BCG X, and CT worldwide. This role is accountable for embedding security within DevSecOps practices, applying Site Reliability Engineering (SRE) principles across all security services, and aligning with privacy, compliance, and business leaders to maintain trust and regulatory compliance. Key Responsibilities: Strategic Leadership & Transformation: Define and execute a unified security engineering strategy that addresses data protection across all environments and data lifecycle stages. Lead the design and implementation of scalable, automated solutions that integrate seamlessly into enterprise platforms and user experiences. Establish a global security architecture and engineering roadmap focused on prevention, detection, and rapid response. Drive continuous improvement of security posture while aligning with business needs, regulatory requirements, and user experience expectations. Champion DevSecOps practices to embed security early into development and delivery workflows. Data Security Engineering: Build and operate scalable data protection solutions, including data loss prevention (DLP), secrets management, encryption, and classification. Collaborate with the IAM team to align authentication, authorization, and privileged access policies with data security controls. Deliver security capabilities that support modern work scenarios, remote access, zero-trust networking, and protection of sensitive data in AI/ML workloads. Leverage automation frameworks and IaC to improve scalability and reduce manual intervention. Operational Security, SRE & Assurance: Ensure security platforms are resilient, continuously monitored, and designed for 24x7 support and incident response readiness. Embed security telemetry and observability to enable proactive threat detection and automated response. Apply SRE principles to improve reliability, performance, and maintainability of security services. Define service level objectives (SLOs) and key performance indicators (KPIs) for all security services. Compliance, Governance & Risk Management: Ensure alignment with global compliance requirements such as ISO 27001, NIST, SOC 2, GDPR, and others. Partner with governance, legal, and ISRM teams to implement enforceable policies and standards across identity, endpoint, and data domains. Implement automated compliance controls and continuous assurance checks. Lead risk mitigation efforts with technical solutions that scale across diverse user and system profiles. Financial & Vendor Management: Manage security platform budgets and investments with a focus on cost optimization and long-term value. Evaluate and manage third-party vendors and partners, ensuring they meet technical, contractual, and security expectations. Lead procurement and renewal cycles in alignment with operational and architectural strategies. Leadership & Talent Development: Build and mentor a global team of security engineers, fostering a high-performance, collaborative, and forward-thinking culture. Drive internal knowledge sharing and upskilling programs across the team. Collaborate cross-functionally with platform, product, and enterprise architecture teams to embed security early and often. What You'll Bring Required Qualifications: 10+ years of experience in cybersecurity, security engineering, or platform security roles. 5+ years in a senior leadership position with accountability for enterprise-scale security platforms. Deep expertise in data protection technologies, with proven ability to design and scale global solutions. Experience with security engineering in hybrid and cloud-native environments (AWS, Azure, GCP). Proven track record in automating security controls, implementing zero-trust models, and supporting 24x7 security operations. Strong understanding of compliance frameworks and risk management strategies. Demonstrated ability to present complex security topics to executive leadership. Preferred Qualifications: Certifications such as CISSP, CCSP, CISM, AWS/Azure Security Specialty, or equivalent. Experience with tools like Symantec DLP, Zscaler CASB, MS Purview, Palo Alto Prisma, Hashi Vault and other modern security platforms. Familiarity with DevSecOps principles, Infrastructure as Code, and secure software development practices. Who You'll Work With Work Environment & Additional Information: Hybrid or on-site work model. Occasional travel may be required for business, vendor, or team engagement. Ability to operate in a fast-paced, complex environment, balancing long-term strategy with operational agility. Additional info For US locations only In the US, we have a compensation transparency approach. Total compensation for this role includes base salary, annual discretionary performance bonus, retirement contribution, and a market leading benefits package described below. The base salary range for this role in Boston is $181,000.00 - $221,000.00 This is an estimated range, however, specific base salaries within the range depend on various factors such as experience and skill set. It is not common for new BCG employees to be hired at the high-end of the salary range. BCG regularly reviews its ranges to ensure market competitiveness. In addition to your base salary, your total compensation will include a bonus of up to 30% and a generous retirement contribution that starts at 5% and moves to 10% after 2 years. All of our plans provide best in class coverage: Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children Low $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs Dental coverage, including up to $5,000 in orthodontia benefits Vision insurance with coverage for both glasses and contact lenses annually Reimbursement for gym memberships and other fitness activities Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month) Paid sick time on an as needed basis Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
Dec 09, 2025
Full time
Locations : Boston London Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Global Delivery Director - Secure Data is a critical leadership role that enables the secure foundation of BCG's digital operations globally. By driving scalable, automated, and user-focused security engineering-and by embedding security into modern engineering and operational practices-this role ensures BCG can innovate securely while maintaining trust, compliance, and operational excellence. The Global Delivery Director - Secure Data is responsible for leading the design, delivery, and continuous evolution of BCG's data security strategy and controls. This role ensures that BCG's most sensitive data is protected globally through secure-by-design engineering, automation at scale, and resilient security platforms. The Director will drive strategic planning, execution, and operations of scalable, automated, and resilient security solutions that safeguard BCG's global operations and users, while enabling innovation and agility across BCG Core, BCG X, and CT worldwide. This role is accountable for embedding security within DevSecOps practices, applying Site Reliability Engineering (SRE) principles across all security services, and aligning with privacy, compliance, and business leaders to maintain trust and regulatory compliance. Key Responsibilities: Strategic Leadership & Transformation: Define and execute a unified security engineering strategy that addresses data protection across all environments and data lifecycle stages. Lead the design and implementation of scalable, automated solutions that integrate seamlessly into enterprise platforms and user experiences. Establish a global security architecture and engineering roadmap focused on prevention, detection, and rapid response. Drive continuous improvement of security posture while aligning with business needs, regulatory requirements, and user experience expectations. Champion DevSecOps practices to embed security early into development and delivery workflows. Data Security Engineering: Build and operate scalable data protection solutions, including data loss prevention (DLP), secrets management, encryption, and classification. Collaborate with the IAM team to align authentication, authorization, and privileged access policies with data security controls. Deliver security capabilities that support modern work scenarios, remote access, zero-trust networking, and protection of sensitive data in AI/ML workloads. Leverage automation frameworks and IaC to improve scalability and reduce manual intervention. Operational Security, SRE & Assurance: Ensure security platforms are resilient, continuously monitored, and designed for 24x7 support and incident response readiness. Embed security telemetry and observability to enable proactive threat detection and automated response. Apply SRE principles to improve reliability, performance, and maintainability of security services. Define service level objectives (SLOs) and key performance indicators (KPIs) for all security services. Compliance, Governance & Risk Management: Ensure alignment with global compliance requirements such as ISO 27001, NIST, SOC 2, GDPR, and others. Partner with governance, legal, and ISRM teams to implement enforceable policies and standards across identity, endpoint, and data domains. Implement automated compliance controls and continuous assurance checks. Lead risk mitigation efforts with technical solutions that scale across diverse user and system profiles. Financial & Vendor Management: Manage security platform budgets and investments with a focus on cost optimization and long-term value. Evaluate and manage third-party vendors and partners, ensuring they meet technical, contractual, and security expectations. Lead procurement and renewal cycles in alignment with operational and architectural strategies. Leadership & Talent Development: Build and mentor a global team of security engineers, fostering a high-performance, collaborative, and forward-thinking culture. Drive internal knowledge sharing and upskilling programs across the team. Collaborate cross-functionally with platform, product, and enterprise architecture teams to embed security early and often. What You'll Bring Required Qualifications: 10+ years of experience in cybersecurity, security engineering, or platform security roles. 5+ years in a senior leadership position with accountability for enterprise-scale security platforms. Deep expertise in data protection technologies, with proven ability to design and scale global solutions. Experience with security engineering in hybrid and cloud-native environments (AWS, Azure, GCP). Proven track record in automating security controls, implementing zero-trust models, and supporting 24x7 security operations. Strong understanding of compliance frameworks and risk management strategies. Demonstrated ability to present complex security topics to executive leadership. Preferred Qualifications: Certifications such as CISSP, CCSP, CISM, AWS/Azure Security Specialty, or equivalent. Experience with tools like Symantec DLP, Zscaler CASB, MS Purview, Palo Alto Prisma, Hashi Vault and other modern security platforms. Familiarity with DevSecOps principles, Infrastructure as Code, and secure software development practices. Who You'll Work With Work Environment & Additional Information: Hybrid or on-site work model. Occasional travel may be required for business, vendor, or team engagement. Ability to operate in a fast-paced, complex environment, balancing long-term strategy with operational agility. Additional info For US locations only In the US, we have a compensation transparency approach. Total compensation for this role includes base salary, annual discretionary performance bonus, retirement contribution, and a market leading benefits package described below. The base salary range for this role in Boston is $181,000.00 - $221,000.00 This is an estimated range, however, specific base salaries within the range depend on various factors such as experience and skill set. It is not common for new BCG employees to be hired at the high-end of the salary range. BCG regularly reviews its ranges to ensure market competitiveness. In addition to your base salary, your total compensation will include a bonus of up to 30% and a generous retirement contribution that starts at 5% and moves to 10% after 2 years. All of our plans provide best in class coverage: Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children Low $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs Dental coverage, including up to $5,000 in orthodontia benefits Vision insurance with coverage for both glasses and contact lenses annually Reimbursement for gym memberships and other fitness activities Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month) Paid sick time on an as needed basis Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
At Trustpilot, we're on an incredible journey. We're a profitable, high-growth FTSE-250 company with a big vision: to become the universal symbol of trust. We run the world's largest independent consumer review platform, and while we've come a long way, there's still so much exciting work to do. Come join us at the heart of trust! We are searching for a SecOps Engineer to enable us to continue to advance the security of our products, our data, our infrastructures, our people, to protect our brand and reputation. This is a great chance to learn and develop within a forward-thinking DevSecOps focused team. This is a wide-ranging role, an opportunity to propel important work streams which could range from supporting the build out of our threat hunting and operations capabilities, improving our playbooks and breach response, to Cloud anomaly detection and response. What you'll be doing: Enhance our Security Operations capabilities and abilities to threat hunt Work closely with other team members and the Security Operations Lead on roadmap planning and delivery Mature metrics and KPI's Run with incidents and investigations into alerts Keep up to date with current security trends, advisories, publications and security research across the industry Contribute to facilitate an awesome culture of trust by engaging across the business, evangelising Security across both tech and non-tech areas Participate in an on-call rotation (avg 10 out of 52 weeks) to handle urgent-only, out-of-hour's needs, for which you will be additionally compensated. Who you are: Keen interest in security and want to develop Experience in SIEM or SOAR Knowledge of the MITRE ATT,CK Framework or common attack and response methods Previous experience with incident response in a fast-paced environment Knowledge of Cloud environments AWS or GCP Python experience preferred Benefits: A range of flexible working options to dedicate time to what matters to you Competitive compensation package + bonus 25 days holiday per year, increasing to 28 days after 2 years of employment Two (paid) volunteering days a year to spend your time giving back to the causes that matter to you and your community Rich learning and development opportunities are supported through the Trustpilot Academy and Blinkist Pension and life insurance Health cash plan, online GP, 24/7, Employee Assistance Plan Full access to Headspace, a popular mindfulness app to promote positive mental health Paid parental leave Season ticket loan and a cycle-to-work scheme Central office location complete with table tennis, a gaming corner, coffee bars and all the snacks and refreshments you can ask for Regular opportunities to connect and get to know your fellow Trusties, including company-wide celebrations and events, ERG activities, and team socials. Access to over 4,000 deals and discounts on things like travel, electronics, fashion, fitness, cinema discounts, and more. Independent financial advice and free standard professional mortgage broker advice Talent acceleration programs: Fast-track your career with our tailored development programs designed to support growth at whatever stage of your career About us Trustpilot began in 2007 with a simple yet powerful idea that is more relevant today than ever - to be the universal symbol of trust, bringing consumers and businesses together through reviews. Trustpilot is open, independent, and impartial - we help consumers make the right choices and businesses to build trust, grow and improve. Today, we have more than 300 million reviews and 64 million monthly active users on average across the globe, with 140 billion annual Trustbox impressions, and the numbers keep growing. We have more than 1,000 employees and we're headquartered in Copenhagen, with operations in Amsterdam, Denver, Edinburgh, Hamburg, London, Melbourne, Milan and New York. We're driven by connection. It's at the heart of what we do. Our culture keeps things fresh it's built on the relationships we create. We talk, we laugh, we collaborate and we respect each other. We work across borders and cultures to be the universal symbol of trust in an ever-changing world. With vibrant office locations worldwide and over 50 nationalities, we're proud to be an equal opportunity workplace with diverse perspectives and ideas. Our purpose to help people and businesses help each other is a tall order, but we keep it real. We're a great bunch of humans, doing awesome stuff, without fuss or pretense. A successful Trustpilot future is driven by you we give you the autonomy to shape a career you can be proud of. If you're ready to grow, let's go. Join us at the heart of trust. Trustpilot is committed to creating an inclusive environment where people from all backgrounds can thrive and where different viewpoints and experiences are valued and respected. Trustpilot will consider all applications for employment without regard to race, ethnicity, national origin, religious beliefs, gender identity or expression, sexual orientation, neurodiversity, disability, age, parental or veteran status. Together, we are the heart of trust. Trustpilot is a global company and our data practices are designed to ensure that your personally identifiable information is appropriately protected. Please note that your personal information will be transferred, accessed, and stored globally as necessary for the uses and disclosures stated in our Privacy Policy. If you have a disability and would like to discuss any adjustments you might need either in submitting your application, or to the recruitment process more generally, please let us know by contacting our Talent Acquisition Team (). Quoting the role you wish to apply for. Any offer of employment for this position will be subject to our standard background checks.
Dec 09, 2025
Full time
At Trustpilot, we're on an incredible journey. We're a profitable, high-growth FTSE-250 company with a big vision: to become the universal symbol of trust. We run the world's largest independent consumer review platform, and while we've come a long way, there's still so much exciting work to do. Come join us at the heart of trust! We are searching for a SecOps Engineer to enable us to continue to advance the security of our products, our data, our infrastructures, our people, to protect our brand and reputation. This is a great chance to learn and develop within a forward-thinking DevSecOps focused team. This is a wide-ranging role, an opportunity to propel important work streams which could range from supporting the build out of our threat hunting and operations capabilities, improving our playbooks and breach response, to Cloud anomaly detection and response. What you'll be doing: Enhance our Security Operations capabilities and abilities to threat hunt Work closely with other team members and the Security Operations Lead on roadmap planning and delivery Mature metrics and KPI's Run with incidents and investigations into alerts Keep up to date with current security trends, advisories, publications and security research across the industry Contribute to facilitate an awesome culture of trust by engaging across the business, evangelising Security across both tech and non-tech areas Participate in an on-call rotation (avg 10 out of 52 weeks) to handle urgent-only, out-of-hour's needs, for which you will be additionally compensated. Who you are: Keen interest in security and want to develop Experience in SIEM or SOAR Knowledge of the MITRE ATT,CK Framework or common attack and response methods Previous experience with incident response in a fast-paced environment Knowledge of Cloud environments AWS or GCP Python experience preferred Benefits: A range of flexible working options to dedicate time to what matters to you Competitive compensation package + bonus 25 days holiday per year, increasing to 28 days after 2 years of employment Two (paid) volunteering days a year to spend your time giving back to the causes that matter to you and your community Rich learning and development opportunities are supported through the Trustpilot Academy and Blinkist Pension and life insurance Health cash plan, online GP, 24/7, Employee Assistance Plan Full access to Headspace, a popular mindfulness app to promote positive mental health Paid parental leave Season ticket loan and a cycle-to-work scheme Central office location complete with table tennis, a gaming corner, coffee bars and all the snacks and refreshments you can ask for Regular opportunities to connect and get to know your fellow Trusties, including company-wide celebrations and events, ERG activities, and team socials. Access to over 4,000 deals and discounts on things like travel, electronics, fashion, fitness, cinema discounts, and more. Independent financial advice and free standard professional mortgage broker advice Talent acceleration programs: Fast-track your career with our tailored development programs designed to support growth at whatever stage of your career About us Trustpilot began in 2007 with a simple yet powerful idea that is more relevant today than ever - to be the universal symbol of trust, bringing consumers and businesses together through reviews. Trustpilot is open, independent, and impartial - we help consumers make the right choices and businesses to build trust, grow and improve. Today, we have more than 300 million reviews and 64 million monthly active users on average across the globe, with 140 billion annual Trustbox impressions, and the numbers keep growing. We have more than 1,000 employees and we're headquartered in Copenhagen, with operations in Amsterdam, Denver, Edinburgh, Hamburg, London, Melbourne, Milan and New York. We're driven by connection. It's at the heart of what we do. Our culture keeps things fresh it's built on the relationships we create. We talk, we laugh, we collaborate and we respect each other. We work across borders and cultures to be the universal symbol of trust in an ever-changing world. With vibrant office locations worldwide and over 50 nationalities, we're proud to be an equal opportunity workplace with diverse perspectives and ideas. Our purpose to help people and businesses help each other is a tall order, but we keep it real. We're a great bunch of humans, doing awesome stuff, without fuss or pretense. A successful Trustpilot future is driven by you we give you the autonomy to shape a career you can be proud of. If you're ready to grow, let's go. Join us at the heart of trust. Trustpilot is committed to creating an inclusive environment where people from all backgrounds can thrive and where different viewpoints and experiences are valued and respected. Trustpilot will consider all applications for employment without regard to race, ethnicity, national origin, religious beliefs, gender identity or expression, sexual orientation, neurodiversity, disability, age, parental or veteran status. Together, we are the heart of trust. Trustpilot is a global company and our data practices are designed to ensure that your personally identifiable information is appropriately protected. Please note that your personal information will be transferred, accessed, and stored globally as necessary for the uses and disclosures stated in our Privacy Policy. If you have a disability and would like to discuss any adjustments you might need either in submitting your application, or to the recruitment process more generally, please let us know by contacting our Talent Acquisition Team (). Quoting the role you wish to apply for. Any offer of employment for this position will be subject to our standard background checks.
