Location: Linthouse Glasgow, United KingdomIn fast changing markets, customers worldwide rely on Thales. Thales is a business where brilliant people from all over the world come together to share ideas and inspire each other. In aerospace, transportation, defence, security and space, our architects design innovative solutions that make our tomorrow's possible.Together we offer fantastic opportunities for committed employees to learn and develop their career with us. At Thales UK, we research, develop, and supply technology and services that impact the lives of millions of people each day to make life better, and keep us safer. We innovate across the major industries of Aerospace, Defence, Security and Space. Your health and well-being matters to us and that's why we offer you the flexibility to do what's important to you; whether that's part time hours, job sharing, home working, or the ability to flex your start and finish times. Where possible, we support a working pattern that suits your lifestyle and helps you reach your ambitions.# Factory Software Engineer Site Location: Bristol/Crawley/Glasgow (with Hybrid working) Travel Percentage: 10 - 30 % nationally and > 5% International Role Reports To: Customer Enterprise Data Architect Level (HQ): SC - DV capable (desirable) Primary Purpose of the Role: To drive the evolution and deployment of Data and AI capabilities within the businesses and to our customers in order to increase growth in orders and increased customer satisfaction.As part of a newly established software development team, the Factory Software Engineer will work with stakeholders throughout the Thales UK businesses, to implement technology solutions that support an integrated approach to data integration/curation deployed across Thales UK. Supporting the Thales UK Digital and Data strategy the Factory Software Engineer will; develop, test, deploy and support software offerings into an internal catalogue of reusable/re-deployable capabilities focused around data integration and curation, helping deliver continuous evolution of our capabilities.The role will interact with other data solutions architects and engineers across the business working in Data and Digital: delivering data solutions that make up new or enhanced market offers; provide technical feedback of solutions; delivering Proofs of Concept and acting as a technical expert in DevOps solutions used transversally throughout the business.The role will be part of the Thales UK Data and Digital Competence Centre team to ensure that the technology strategy, human capabilities and opportunity pipeline is enabling the business strategy and growth. The role will connect with stakeholders across engineering, Thales UK and Group Digital Competence Centres thinking. Key Responsibilities and Tasks: Deliver solutions that meet the needs of the strategy and design, collaborate with teams to deliver on those designs. Support solutions both developed by the team and from other teams throughout their lifecycles enabling multi-deployment of those solutions through a catalogue strategy Create and maintain CI/CD Pipelines to enable efficient deployment of code by automating development and deployment processes Identify solution opportunities that focus on Reuse, maximising the return on development costs by reducing other programme development costs. Collaborate with development teams to enable the delivery of high-quality, secure, and scalable applications on the cloud with automated tools and scripts Recommend best practices and ensure the products developed within the organization are robust, secure and scalable Work with the product owner to address user needs Develop secure and high-quality production code, perform code reviews and able to debug issues Participate in agile threat modelling and vulnerability managementEnsure compliance with security and regulatory requirements for MOD and high Design assurance softwares Develop solutions for where data can bring value to our offers and our customer Support the Customer Enterprise/Solution Data Architects in coordinating the data landscaping and cataloguing for Thales UK Support the Customer Enterprise and Solution Data Architects in the creation and influence of UK MoD standards for Data Management and solutions that support data management and integration Work to implement 3rd party data integrations to support internal and external use cases Working collaboratively with the various squads and technical roles to identify common issues and opportunities to improve operational and strategic delivery. Accountable for the creation of the technology software solution deliverables Horizon scan for major disruptive technology trends (trend spotting) that affect business. Provide practical advice and best practices to overcome these challenges and successfully deliver the expected business outcomes.SkillsTechnical Logical Analysis of technical solutions and problem solving Experience working on Linux or Windows based infrastructure Excellent understanding of modern programming languages such as Ruby, Python, Perl, and Java Configuration and managing databases such as MySQL, Mongo Excellent troubleshooting Working knowledge of various tools, open-source technologies, and cloud services Awareness of critical concepts in DevOps and Agile principles Knowledge of business ecosystems, SaaS, infrastructure as a service (IaaS), platform as a service (PaaS), SOA, APIs, open data, microservices, event-driven IT, predictive analytics, machine learning and artificial intelligence General IT Knowledge (applications, storage, networks, IT infrastructure, Infrastructure, service level agreements, Asset management etc) Familiarity with information management practices, system development life cycle management, IT services management, infrastructure and operations, and EA and ITIL frameworks Technical IT (security, transaction processing, user interface, data management, Operating Systems Services)to design innovative solutions whilst adhering to strong security constraints. Experience of the latest technology trends and their application within Data - including but not limited to AI, machine learning containerisation, IOT, big data and cloud.Interpersonal Skills Ability to engage and influence a diverse set of stakeholders (Product Engineering Leaders, Customer, Design Authorities, Project Management, IS/IT) Ability to work in complex multi-stakeholder environment to create clear and achievable goals. Able to influence a wide range of people to get things done - needs to be highly effective in a matrix based organisation - a good team player. Excellent communication skills and interpersonal skills - encourages an open environment where information and ideas are shared and innovative thinking is stimulated. Will be adept at effectively building stakeholder relationships and working collaboratively with customer, supplier and internal teams. Capable of effectively engaging with technical staff, suppliers and stakeholders to define the best architectural design to achieve business/user objectives. Detailed technical expertise is not always essential, but the ability to understand and support technical discussion to conclusion with confidence is essential Team player with a sharp intellect, challenging approach and a "can do attitude". Experience of multi-stakeholder change management activities Experience:Essential In excess of 5 years' experience in the defence Industry or Aviation/Medical in related software/DevOps/DevSecOps roles CI/CD deployment Software development and deployment in complex programmes Strong Data and Application understanding with underpinning Infrastructure solution development Technical Documentation production to a high standardDesirable Governance of architecture or detailed
Apr 16, 2026
Full time
Location: Linthouse Glasgow, United KingdomIn fast changing markets, customers worldwide rely on Thales. Thales is a business where brilliant people from all over the world come together to share ideas and inspire each other. In aerospace, transportation, defence, security and space, our architects design innovative solutions that make our tomorrow's possible.Together we offer fantastic opportunities for committed employees to learn and develop their career with us. At Thales UK, we research, develop, and supply technology and services that impact the lives of millions of people each day to make life better, and keep us safer. We innovate across the major industries of Aerospace, Defence, Security and Space. Your health and well-being matters to us and that's why we offer you the flexibility to do what's important to you; whether that's part time hours, job sharing, home working, or the ability to flex your start and finish times. Where possible, we support a working pattern that suits your lifestyle and helps you reach your ambitions.# Factory Software Engineer Site Location: Bristol/Crawley/Glasgow (with Hybrid working) Travel Percentage: 10 - 30 % nationally and > 5% International Role Reports To: Customer Enterprise Data Architect Level (HQ): SC - DV capable (desirable) Primary Purpose of the Role: To drive the evolution and deployment of Data and AI capabilities within the businesses and to our customers in order to increase growth in orders and increased customer satisfaction.As part of a newly established software development team, the Factory Software Engineer will work with stakeholders throughout the Thales UK businesses, to implement technology solutions that support an integrated approach to data integration/curation deployed across Thales UK. Supporting the Thales UK Digital and Data strategy the Factory Software Engineer will; develop, test, deploy and support software offerings into an internal catalogue of reusable/re-deployable capabilities focused around data integration and curation, helping deliver continuous evolution of our capabilities.The role will interact with other data solutions architects and engineers across the business working in Data and Digital: delivering data solutions that make up new or enhanced market offers; provide technical feedback of solutions; delivering Proofs of Concept and acting as a technical expert in DevOps solutions used transversally throughout the business.The role will be part of the Thales UK Data and Digital Competence Centre team to ensure that the technology strategy, human capabilities and opportunity pipeline is enabling the business strategy and growth. The role will connect with stakeholders across engineering, Thales UK and Group Digital Competence Centres thinking. Key Responsibilities and Tasks: Deliver solutions that meet the needs of the strategy and design, collaborate with teams to deliver on those designs. Support solutions both developed by the team and from other teams throughout their lifecycles enabling multi-deployment of those solutions through a catalogue strategy Create and maintain CI/CD Pipelines to enable efficient deployment of code by automating development and deployment processes Identify solution opportunities that focus on Reuse, maximising the return on development costs by reducing other programme development costs. Collaborate with development teams to enable the delivery of high-quality, secure, and scalable applications on the cloud with automated tools and scripts Recommend best practices and ensure the products developed within the organization are robust, secure and scalable Work with the product owner to address user needs Develop secure and high-quality production code, perform code reviews and able to debug issues Participate in agile threat modelling and vulnerability managementEnsure compliance with security and regulatory requirements for MOD and high Design assurance softwares Develop solutions for where data can bring value to our offers and our customer Support the Customer Enterprise/Solution Data Architects in coordinating the data landscaping and cataloguing for Thales UK Support the Customer Enterprise and Solution Data Architects in the creation and influence of UK MoD standards for Data Management and solutions that support data management and integration Work to implement 3rd party data integrations to support internal and external use cases Working collaboratively with the various squads and technical roles to identify common issues and opportunities to improve operational and strategic delivery. Accountable for the creation of the technology software solution deliverables Horizon scan for major disruptive technology trends (trend spotting) that affect business. Provide practical advice and best practices to overcome these challenges and successfully deliver the expected business outcomes.SkillsTechnical Logical Analysis of technical solutions and problem solving Experience working on Linux or Windows based infrastructure Excellent understanding of modern programming languages such as Ruby, Python, Perl, and Java Configuration and managing databases such as MySQL, Mongo Excellent troubleshooting Working knowledge of various tools, open-source technologies, and cloud services Awareness of critical concepts in DevOps and Agile principles Knowledge of business ecosystems, SaaS, infrastructure as a service (IaaS), platform as a service (PaaS), SOA, APIs, open data, microservices, event-driven IT, predictive analytics, machine learning and artificial intelligence General IT Knowledge (applications, storage, networks, IT infrastructure, Infrastructure, service level agreements, Asset management etc) Familiarity with information management practices, system development life cycle management, IT services management, infrastructure and operations, and EA and ITIL frameworks Technical IT (security, transaction processing, user interface, data management, Operating Systems Services)to design innovative solutions whilst adhering to strong security constraints. Experience of the latest technology trends and their application within Data - including but not limited to AI, machine learning containerisation, IOT, big data and cloud.Interpersonal Skills Ability to engage and influence a diverse set of stakeholders (Product Engineering Leaders, Customer, Design Authorities, Project Management, IS/IT) Ability to work in complex multi-stakeholder environment to create clear and achievable goals. Able to influence a wide range of people to get things done - needs to be highly effective in a matrix based organisation - a good team player. Excellent communication skills and interpersonal skills - encourages an open environment where information and ideas are shared and innovative thinking is stimulated. Will be adept at effectively building stakeholder relationships and working collaboratively with customer, supplier and internal teams. Capable of effectively engaging with technical staff, suppliers and stakeholders to define the best architectural design to achieve business/user objectives. Detailed technical expertise is not always essential, but the ability to understand and support technical discussion to conclusion with confidence is essential Team player with a sharp intellect, challenging approach and a "can do attitude". Experience of multi-stakeholder change management activities Experience:Essential In excess of 5 years' experience in the defence Industry or Aviation/Medical in related software/DevOps/DevSecOps roles CI/CD deployment Software development and deployment in complex programmes Strong Data and Application understanding with underpinning Infrastructure solution development Technical Documentation production to a high standardDesirable Governance of architecture or detailed
Your Impact Are you ready to take the next step in your engineering career and lead the delivery of critical platforms that protect national security? At Leonardo, our Senior Platform Engineers combine technical expertise with leadership, driving the design, integration, and support of complex systems that underpin our customers' missions. Your work at Leonardo UK will see you take the lead in solving customer problems in an agile, innovative and team centric manner. The role may involve a blended hybrid working model, with a mixture of working from home and working on site at one of our Leonardo offices to ensure close collaboration with the wider team and with our customers. What you will do as a Senior Platform Engineer Lead the design, build, and support of secure platforms across on premise, hybrid, and cloud environments. Take ownership of engineering delivery for one or more work packages, including planning, estimation, execution, and reporting. Develop and review system architectures, low level designs, and technical documentation. Integrate and test platform components, ensuring compliance with security and performance requirements. Provide mentoring, guidance, and technical leadership to Platform Engineers and Technicians. Collaborate with stakeholders, project teams, and customers to ensure solutions meet requirements. Drive continuous improvement initiatives and contribute to internal engineering standards. What you'll bring Strong technical ability with experience of delivering and supporting complex platforms. Ability to balance hands on engineering with technical leadership and mentoring responsibilities. Confidence to take ownership of solutions and represent engineering in technical discussions. Core areas (must have) Windows and Linux operating systems Experience with cloud platforms (AWS, Google) and containerisation (Kubernetes, Docker) Networking concepts (TCP/IP, DNS, DHCP, routing, firewalls) Experience with automation or scripting (e.g. PowerShell, Bash, Python, Ansible, Terraform) Familiarity with cyber security tools and system hardening practices Understanding of ITIL and service management frameworks Desirable Virtualisation platforms (VMware, Hyper V) Strong knowledge of enterprise services such as Active Directory, PKI, SQL, or Exchange Exposure to CI/CD pipelines and DevSecOps practices Hands on use of monitoring, endpoint security, and patch management tools Industry certifications (Microsoft, VMware, AWS, or equivalent) This is not an exhaustive list, and we are keen to hear from you even if you might not have experience in all the above. The most important skill is a good attitude and willingness to learn. Security Clearance This role is subject to pre employment screening in line with the UK Government's Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) may apply, this could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit Location This role can be based at one of our UK sites, Bristol, with hybrid/custom working options where appropriate. Why join us At Leonardo, our people are at the heart of everything we do. We offer a comprehensive, company funded benefits package that supports your wellbeing, career development, and work-life balance. Time to Recharge: Generous leave with the opportunity to accrue up to 12 additional flexi days each year. Secure your Future: Award winning pension scheme with up to 15% employer contribution. Your Wellbeing Matters: Free access to mental health support, financial advice, and employee led networks. Never Stop Learning: Free access to 4,000+ online courses via Coursera and LinkedIn Learning. Tailored Perks: Spend up to £500 annually on flexible benefits such as private healthcare, lifestyle discounts, and gym memberships. Flexible Working: Flexible hours with hybrid working options. For a full list of our company benefits please visit our website. Leonardo is a global leader in Aerospace, Defence, and Security. Headquartered in Italy, we employ over 53,000 people worldwide including 8,500 across 9 sites in the UK. Our employees are not just part of a team-they are key contributors to shaping innovation, advancing technology, and enhancing global safety. At Leonardo we are committed to building an inclusive, accessible, and welcoming workplace. We believe that a diverse workforce sparks creativity, drives innovation, and leads to better outcomes for our people and our customers. If you have any accessibility requirements to support you during the recruitment process, just let us know. Be part of something bigger - apply now! Primary Location: GB - Bristol - Coldharbour Lane Contract Type: Permanent Hybrid Working: Hybrid
Apr 16, 2026
Full time
Your Impact Are you ready to take the next step in your engineering career and lead the delivery of critical platforms that protect national security? At Leonardo, our Senior Platform Engineers combine technical expertise with leadership, driving the design, integration, and support of complex systems that underpin our customers' missions. Your work at Leonardo UK will see you take the lead in solving customer problems in an agile, innovative and team centric manner. The role may involve a blended hybrid working model, with a mixture of working from home and working on site at one of our Leonardo offices to ensure close collaboration with the wider team and with our customers. What you will do as a Senior Platform Engineer Lead the design, build, and support of secure platforms across on premise, hybrid, and cloud environments. Take ownership of engineering delivery for one or more work packages, including planning, estimation, execution, and reporting. Develop and review system architectures, low level designs, and technical documentation. Integrate and test platform components, ensuring compliance with security and performance requirements. Provide mentoring, guidance, and technical leadership to Platform Engineers and Technicians. Collaborate with stakeholders, project teams, and customers to ensure solutions meet requirements. Drive continuous improvement initiatives and contribute to internal engineering standards. What you'll bring Strong technical ability with experience of delivering and supporting complex platforms. Ability to balance hands on engineering with technical leadership and mentoring responsibilities. Confidence to take ownership of solutions and represent engineering in technical discussions. Core areas (must have) Windows and Linux operating systems Experience with cloud platforms (AWS, Google) and containerisation (Kubernetes, Docker) Networking concepts (TCP/IP, DNS, DHCP, routing, firewalls) Experience with automation or scripting (e.g. PowerShell, Bash, Python, Ansible, Terraform) Familiarity with cyber security tools and system hardening practices Understanding of ITIL and service management frameworks Desirable Virtualisation platforms (VMware, Hyper V) Strong knowledge of enterprise services such as Active Directory, PKI, SQL, or Exchange Exposure to CI/CD pipelines and DevSecOps practices Hands on use of monitoring, endpoint security, and patch management tools Industry certifications (Microsoft, VMware, AWS, or equivalent) This is not an exhaustive list, and we are keen to hear from you even if you might not have experience in all the above. The most important skill is a good attitude and willingness to learn. Security Clearance This role is subject to pre employment screening in line with the UK Government's Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) may apply, this could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit Location This role can be based at one of our UK sites, Bristol, with hybrid/custom working options where appropriate. Why join us At Leonardo, our people are at the heart of everything we do. We offer a comprehensive, company funded benefits package that supports your wellbeing, career development, and work-life balance. Time to Recharge: Generous leave with the opportunity to accrue up to 12 additional flexi days each year. Secure your Future: Award winning pension scheme with up to 15% employer contribution. Your Wellbeing Matters: Free access to mental health support, financial advice, and employee led networks. Never Stop Learning: Free access to 4,000+ online courses via Coursera and LinkedIn Learning. Tailored Perks: Spend up to £500 annually on flexible benefits such as private healthcare, lifestyle discounts, and gym memberships. Flexible Working: Flexible hours with hybrid working options. For a full list of our company benefits please visit our website. Leonardo is a global leader in Aerospace, Defence, and Security. Headquartered in Italy, we employ over 53,000 people worldwide including 8,500 across 9 sites in the UK. Our employees are not just part of a team-they are key contributors to shaping innovation, advancing technology, and enhancing global safety. At Leonardo we are committed to building an inclusive, accessible, and welcoming workplace. We believe that a diverse workforce sparks creativity, drives innovation, and leads to better outcomes for our people and our customers. If you have any accessibility requirements to support you during the recruitment process, just let us know. Be part of something bigger - apply now! Primary Location: GB - Bristol - Coldharbour Lane Contract Type: Permanent Hybrid Working: Hybrid
Dive into a world where technology meets innovation. At Kerv Digital, we're not just another tech company. We're the problem solvers, the magicians who transform complex challenges into seamless digital experiences. Utilising a powerful blend of Power Platform, DevSecOps, Data experiences, and Software Engineering, we create business solutions that truly resonate with our clients driving extreme value! With our roots planted in Birmingham and branches spreading across the globe from London to Bangalore, we're a proud member of the Kerv Group - a dynamic £112m revenue technology consultancy leader with a dedicated team of over 700 professionals, partnering with 800+ sector leaders. People come first always we are incredibly proud of our unparalleled work culture. Not just words on paper, we wear our "Great Place to Work" certifications from the UK and India like badges of honour. Dive into an ocean of opportunities in an atmosphere that celebrates collaboration. Sharpen your prowess with a global multi-discipline team and be guided by the industry's most forward-thinking architects. Who we are looking for: Required Experience: Dynamics 365 CE implementation and developing custom plugins, workflow and actions Strong C# dev. to support bespoke plugin/workflow development Strong JS/HTML/CSS dev. to support bespoke interface development Strong general .power automate background Insightful entity architecture, grounded in Fetch XML Excellent communicator, capable of engaging at all levels with customers Distributed team dev. inc source control appreciation, esp. GIT and CI Windows certifications, e.g. multiple MCPs or an MCSE Experience with Field Service customisation We are also looking for people that fit how we work, which is something like: happiest working under their own direction, but fully supported when needed an obvious attention to detail, we want you to obsess about the little things! an escalation handler, able to achieve win-win outcomes by utilising the skills across the team ability to work effectively with remote teams in India ability to work flexibly to deliver on-time to tight timescales What we can do for you: We're a transparent, honest and fiercely equal employer that believes completely in providing the best possible work experience for our employees: Real Flexibility - we're a family first organisation, and if the work gets done, you can work when and wherever you want. A healthy approach for most of our teams seems to be splitting three ways between home, customer sites and the office. Awesome Environment - all of our employees will tell you that we foster an easy going environment, are experts at what we do and care deeply about what we work on, and the company was started specifically to find a way for people to take more enjoyment from their work. Interesting Work - these days most of our customers are household names and many of our projects have an important impact on the world around us. The kind of things we do regularly include working with not for profits to transform how they leverage technology, working with public bodies to shape digital services and working with top tier private entities to bring genuinely new and meaningful products and services to market. Great Benefits - all the usual suspects and then some. Some highlights include our choose your own tech approach to end user devices, well stocked cupboards with tasty goodies (we're a food first company too), excellent professional development support including frequent in house training for tech. you can't get trained on anywhere else and private healthcare. Full disclosure; some benefits can only be provided after probation. Recognition & Growth - Recognized as a 'Great Place to Work' in both the UK and India, our commitment to excellence goes beyond our products and services. Our culture is a testament to the dedicated technologists who work tirelessly to drive our vision forward. Being a part of Kerv Digital means embracing a culture of innovation, collaboration, and mutual respect. Our teams in the UK and India thrive in an atmosphere that promotes continuous learning and growth. Join us at Kerv Digital, where we don't just build groundbreaking technology - we build future. Don't take our word for it though, check out our impartial Glass Door reviews More on equality: At Kerv, we're building something special and we're building it to last. We want everybody to feel valued, included and love working together. With an uncompromising pursuit of amazing employee experience, we always strive to do the right thing. We believe and will relentlessly promote and support the power of diversity, equality and belonging, through collaboration and creating exceptional solutions together.
Apr 16, 2026
Full time
Dive into a world where technology meets innovation. At Kerv Digital, we're not just another tech company. We're the problem solvers, the magicians who transform complex challenges into seamless digital experiences. Utilising a powerful blend of Power Platform, DevSecOps, Data experiences, and Software Engineering, we create business solutions that truly resonate with our clients driving extreme value! With our roots planted in Birmingham and branches spreading across the globe from London to Bangalore, we're a proud member of the Kerv Group - a dynamic £112m revenue technology consultancy leader with a dedicated team of over 700 professionals, partnering with 800+ sector leaders. People come first always we are incredibly proud of our unparalleled work culture. Not just words on paper, we wear our "Great Place to Work" certifications from the UK and India like badges of honour. Dive into an ocean of opportunities in an atmosphere that celebrates collaboration. Sharpen your prowess with a global multi-discipline team and be guided by the industry's most forward-thinking architects. Who we are looking for: Required Experience: Dynamics 365 CE implementation and developing custom plugins, workflow and actions Strong C# dev. to support bespoke plugin/workflow development Strong JS/HTML/CSS dev. to support bespoke interface development Strong general .power automate background Insightful entity architecture, grounded in Fetch XML Excellent communicator, capable of engaging at all levels with customers Distributed team dev. inc source control appreciation, esp. GIT and CI Windows certifications, e.g. multiple MCPs or an MCSE Experience with Field Service customisation We are also looking for people that fit how we work, which is something like: happiest working under their own direction, but fully supported when needed an obvious attention to detail, we want you to obsess about the little things! an escalation handler, able to achieve win-win outcomes by utilising the skills across the team ability to work effectively with remote teams in India ability to work flexibly to deliver on-time to tight timescales What we can do for you: We're a transparent, honest and fiercely equal employer that believes completely in providing the best possible work experience for our employees: Real Flexibility - we're a family first organisation, and if the work gets done, you can work when and wherever you want. A healthy approach for most of our teams seems to be splitting three ways between home, customer sites and the office. Awesome Environment - all of our employees will tell you that we foster an easy going environment, are experts at what we do and care deeply about what we work on, and the company was started specifically to find a way for people to take more enjoyment from their work. Interesting Work - these days most of our customers are household names and many of our projects have an important impact on the world around us. The kind of things we do regularly include working with not for profits to transform how they leverage technology, working with public bodies to shape digital services and working with top tier private entities to bring genuinely new and meaningful products and services to market. Great Benefits - all the usual suspects and then some. Some highlights include our choose your own tech approach to end user devices, well stocked cupboards with tasty goodies (we're a food first company too), excellent professional development support including frequent in house training for tech. you can't get trained on anywhere else and private healthcare. Full disclosure; some benefits can only be provided after probation. Recognition & Growth - Recognized as a 'Great Place to Work' in both the UK and India, our commitment to excellence goes beyond our products and services. Our culture is a testament to the dedicated technologists who work tirelessly to drive our vision forward. Being a part of Kerv Digital means embracing a culture of innovation, collaboration, and mutual respect. Our teams in the UK and India thrive in an atmosphere that promotes continuous learning and growth. Join us at Kerv Digital, where we don't just build groundbreaking technology - we build future. Don't take our word for it though, check out our impartial Glass Door reviews More on equality: At Kerv, we're building something special and we're building it to last. We want everybody to feel valued, included and love working together. With an uncompromising pursuit of amazing employee experience, we always strive to do the right thing. We believe and will relentlessly promote and support the power of diversity, equality and belonging, through collaboration and creating exceptional solutions together.
Cybersecurity Advisory Lead £124,000 base + 10% bonus + excellent benefits UK Hybrid SC Eligible Required Organisation: Leading Global Cybersecurity Consulting Business Are you a visionary cybersecurity leader with the ability to turn high-level strategy into tangible, large-scale transformation? Do you thrive when working directly with C-suite executives to shape the future of secure cloud, cyber, and AI-driven initiatives? If so, this is your opportunity to make a real impact. We're seeking a Cybersecurity Advisory Lead to partner with CIOs, CTOs, and CISOs on complex, high-stakes programmes that redefine security at a global scale. This isn't a role for someone who simply delivers; it's a chance to lead, influence, and define cybersecurity as a strategic business enabler. What You'll Do Lead high-profile advisory engagements, shaping multi-million-pound deals and delivering transformative outcomes. Advise C-suite executives on cloud, cyber, and AI strategies with authority and confidence. Design and influence secure, scalable cloud environments that align with business goals. Advance AI and Agentic AI technologies from strategy to execution, positioning your organisation at the cutting edge. Represent the Advisory team internally and externally at board level, driving credibility and influence. What You'll Bring Recognised expertise in Cybersecurity Architecture & Strategy . Extensive experience across SecOps, DevSecOps, Cyber Controls, and GRC frameworks. Strong working knowledge of ISO 27001, NIST, GDPR, NIS2 standards and regulations. Proven ability to influence C-level stakeholders and successfully manage complex technical and commercial challenges. A commercial mindset with the leadership credibility to navigate and resolve challenging engagements. Why This Role Matters This role is not about day-to-day delivery; it's about shaping the future of cybersecurity at a global scale. You'll work on transformational programmes that position cybersecurity as a strategic driver for business growth. You'll have the visibility, the influence, and the authority to make a lasting impact. Compensation: £124k base + 10% bonus Scope: Global transformation programmes Career: Clear executive exposure & progression If you are ready to lead from the front, shape the future of cybersecurity, and partner with senior executives to deliver cutting-edge solutions, this is the role for you.
Apr 16, 2026
Full time
Cybersecurity Advisory Lead £124,000 base + 10% bonus + excellent benefits UK Hybrid SC Eligible Required Organisation: Leading Global Cybersecurity Consulting Business Are you a visionary cybersecurity leader with the ability to turn high-level strategy into tangible, large-scale transformation? Do you thrive when working directly with C-suite executives to shape the future of secure cloud, cyber, and AI-driven initiatives? If so, this is your opportunity to make a real impact. We're seeking a Cybersecurity Advisory Lead to partner with CIOs, CTOs, and CISOs on complex, high-stakes programmes that redefine security at a global scale. This isn't a role for someone who simply delivers; it's a chance to lead, influence, and define cybersecurity as a strategic business enabler. What You'll Do Lead high-profile advisory engagements, shaping multi-million-pound deals and delivering transformative outcomes. Advise C-suite executives on cloud, cyber, and AI strategies with authority and confidence. Design and influence secure, scalable cloud environments that align with business goals. Advance AI and Agentic AI technologies from strategy to execution, positioning your organisation at the cutting edge. Represent the Advisory team internally and externally at board level, driving credibility and influence. What You'll Bring Recognised expertise in Cybersecurity Architecture & Strategy . Extensive experience across SecOps, DevSecOps, Cyber Controls, and GRC frameworks. Strong working knowledge of ISO 27001, NIST, GDPR, NIS2 standards and regulations. Proven ability to influence C-level stakeholders and successfully manage complex technical and commercial challenges. A commercial mindset with the leadership credibility to navigate and resolve challenging engagements. Why This Role Matters This role is not about day-to-day delivery; it's about shaping the future of cybersecurity at a global scale. You'll work on transformational programmes that position cybersecurity as a strategic driver for business growth. You'll have the visibility, the influence, and the authority to make a lasting impact. Compensation: £124k base + 10% bonus Scope: Global transformation programmes Career: Clear executive exposure & progression If you are ready to lead from the front, shape the future of cybersecurity, and partner with senior executives to deliver cutting-edge solutions, this is the role for you.
Cybersecurity Advisory Lead £124,000 base + 10% bonus + excellent benefits UK Hybrid SC Eligible Required Organisation: Leading Global Cybersecurity Consulting Business Are you a visionary cybersecurity leader with the ability to turn high-level strategy into tangible, large-scale transformation? Do you thrive when working directly with C-suite executives to shape the future of secure cloud, cyber, and AI-driven initiatives? If so, this is your opportunity to make a real impact. We're seeking a Cybersecurity Advisory Lead to partner with CIOs, CTOs, and CISOs on complex, high-stakes programmes that redefine security at a global scale. This isn't a role for someone who simply delivers; it's a chance to lead, influence, and define cybersecurity as a strategic business enabler. What You'll Do Lead high-profile advisory engagements, shaping multi-million-pound deals and delivering transformative outcomes. Advise C-suite executives on cloud, cyber, and AI strategies with authority and confidence. Design and influence secure, scalable cloud environments that align with business goals. Advance AI and Agentic AI technologies from strategy to execution, positioning your organisation at the cutting edge. Represent the Advisory team internally and externally at board level, driving credibility and influence. What You'll Bring Recognised expertise in Cybersecurity Architecture & Strategy . Extensive experience across SecOps, DevSecOps, Cyber Controls, and GRC frameworks. Strong working knowledge of ISO 27001, NIST, GDPR, NIS2 standards and regulations. Proven ability to influence C-level stakeholders and successfully manage complex technical and commercial challenges. A commercial mindset with the leadership credibility to navigate and resolve challenging engagements. Why This Role Matters This role is not about day-to-day delivery; it's about shaping the future of cybersecurity at a global scale. You'll work on transformational programmes that position cybersecurity as a strategic driver for business growth. You'll have the visibility, the influence, and the authority to make a lasting impact. Compensation: £124k base + 10% bonus Scope: Global transformation programmes Career: Clear executive exposure & progression If you are ready to lead from the front, shape the future of cybersecurity, and partner with senior executives to deliver cutting-edge solutions, this is the role for you.
Apr 16, 2026
Full time
Cybersecurity Advisory Lead £124,000 base + 10% bonus + excellent benefits UK Hybrid SC Eligible Required Organisation: Leading Global Cybersecurity Consulting Business Are you a visionary cybersecurity leader with the ability to turn high-level strategy into tangible, large-scale transformation? Do you thrive when working directly with C-suite executives to shape the future of secure cloud, cyber, and AI-driven initiatives? If so, this is your opportunity to make a real impact. We're seeking a Cybersecurity Advisory Lead to partner with CIOs, CTOs, and CISOs on complex, high-stakes programmes that redefine security at a global scale. This isn't a role for someone who simply delivers; it's a chance to lead, influence, and define cybersecurity as a strategic business enabler. What You'll Do Lead high-profile advisory engagements, shaping multi-million-pound deals and delivering transformative outcomes. Advise C-suite executives on cloud, cyber, and AI strategies with authority and confidence. Design and influence secure, scalable cloud environments that align with business goals. Advance AI and Agentic AI technologies from strategy to execution, positioning your organisation at the cutting edge. Represent the Advisory team internally and externally at board level, driving credibility and influence. What You'll Bring Recognised expertise in Cybersecurity Architecture & Strategy . Extensive experience across SecOps, DevSecOps, Cyber Controls, and GRC frameworks. Strong working knowledge of ISO 27001, NIST, GDPR, NIS2 standards and regulations. Proven ability to influence C-level stakeholders and successfully manage complex technical and commercial challenges. A commercial mindset with the leadership credibility to navigate and resolve challenging engagements. Why This Role Matters This role is not about day-to-day delivery; it's about shaping the future of cybersecurity at a global scale. You'll work on transformational programmes that position cybersecurity as a strategic driver for business growth. You'll have the visibility, the influence, and the authority to make a lasting impact. Compensation: £124k base + 10% bonus Scope: Global transformation programmes Career: Clear executive exposure & progression If you are ready to lead from the front, shape the future of cybersecurity, and partner with senior executives to deliver cutting-edge solutions, this is the role for you.
Overview We're Kingfisher, a team of over 74,000 passionate people who bring Kingfisher-and all our other brands: B&Q, Screwfix, Brico Depot, Castorama and Koctas-to life. That's right, we're big, but we have ambitions to become even bigger and even better. We want to become the leading home improvement company and grow the largest community of home improvers in the world. And that's where you come in. At Kingfisher, our customers come from all walks of life, and so do we. We want to ensure that all colleagues, future colleagues, and applicants to Kingfisher are treated equally regardless of age, gender, marital or civil partnership status, colour, ethnic or national origin, culture, religious belief, philosophical belief, political opinion, disability, gender identity, gender expression or sexual orientation. We are open to flexible and agile working, both of hours and location. Therefore, we offer colleagues a blend of working from home and our offices, located in London, Southampton & Yeovil. Talk to us about how we can best support you! We have a brand new opportunity for an Application Security Specialist to join our Security Operations team. This senior position will play a key role in driving improvements to and safeguarding Kingfisher's digital platforms, by embedding security into every stage of development. This role ensures our web, mobile, and API applications remain resilient against evolving threats, supporting Kingfisher's purpose of making home improvement accessible and secure for everyone. This role will be based at our Kingfisher Head Office in Paddington, with an expectation of 12 days a month in the office. Responsibilities Own and optimise Kingfisher's application security tools and services to maximise value. Lead operational oversight of application security testing across web, mobile, and API platforms. Drive the bug bounty programme and manage relationships with vendors and researchers. Coordinate penetration testing activities and partner with application owners to remediate findings. Integrate security into CI/CD pipelines and champion automation of security testing. Provide actionable metrics, KPIs, and insights to improve application security posture. Stay ahead of emerging threats and lead continuous improvement initiatives for application security. Qualifications Proven experience in application security or software development within complex technology environments. Strong knowledge of secure coding practices and hands on experience with SAST, DAST, and related tooling. Practical experience integrating security into CI/CD pipelines in DevSecOps settings. Familiarity with common attack vectors (e.g., OWASP Top 10) and mitigation techniques. Experience with threat modelling and API security. Be Customer Focused - constantly improving our customers' experience We encourage you to apply for one of our roles even if you do not feel you meet 100% of the requirements. Be Human - acting with humanity and care I do the right thing. Be Curious - thrive on learning, thinking beyond the obvious I build and share new ideas. I try new things and share my learnings. Be Agile - working with trust, pace and agility I have courage to be creative. Done is better than perfect; I aim for 80/20. Be Inclusive - acting inclusively in diverse teams to work together I embrace allyship. I have self awareness and a desire to learn. Be Accountable - championing the plan to deliver results and growth I own my actions. I understand the Kingfisher plan and how it relates to my role. Our Benefits In return, we offer an inclusive environment, where what you can achieve is limited only by your imagination! We encourage new ideas, actively support experimentation, and strive to build an environment where everyone can be their best self. Find out more about Diversity & Inclusion at Kingfisher. We also offer a competitive benefits package and plenty of opportunities to stretch and grow your career. What We Offer. Private Health Care Opportunity to receive up to family level cover with AXA. Join within three months of starting or at annual renewal in April. (This benefit is subject to Benefit In Kind taxation). Kingfisher Pension Scheme Immediate eligibility through auto enrolment. Contribute 8% to receive a max 14% from the Company. 25 Days' Holiday 25 days per annum plus bank holidays as stated in your contract (pro rated for part time colleagues). Staff Discount 20% discount at B&Q and Screwfix. Eligible after 3 months service. Kingfisher Share Incentive Plan (SIP) Share ownership in a tax efficient way. Save between £10 to £150 per month. Join at any time once three months service is reached. Life Assurance x4 Salary plus benefit equal to value of your Retirement Account (if an active member of KPS MP) or x1 Salary if not active member. Bonus Competitive bonus scheme that aligns to work level of role. Kingfisher Share Save Save with the option to buy Kingfisher plc shares at the end of a 3 or 5 year period. Offered annually. Three months service is required at the annual invitation date, normally in October. Our Behaviours Constantly improving our customer experience Acting with humanity and care Be curious-thriving on learning, thinking beyond the obvious Be inclusive-acting inclusively in diverse teams to achieve together Be agile-working with trust, pace and agility Be accountable-championing the plan to deliver results and growth Training & Development There are so many ways you can grow, learn, and develop here at Kingfisher. At whatever pace suits you. Conversations with senior leaders Resources and tools to help you grow Improving without instruments to help you learn is near impossible. That's why we make sure you have everything at your fingertips to find exactly what you need to keep growing. Initiatives that measure development With plans that ask you what you want to achieve and when you want to achieve them by, tracking progress and keeping development at the forefront of conversation is easy. Find your path The scale of group functions within Kingfisher is huge. That means you have the chance to build different career paths within multiple areas of the organisation. Sharing is caring We aren't selfish here at Kingfisher. Whatever your level of experience, you'll work with colleagues who are always welcoming and ready to share their knowledge whenever you need it. Reach for the stars So your ambitions are high? Good thing we have opportunities to find experiences in line with more senior roles and responsibilities. Here, you can evolve your career, no matter your level. Why Kingfisher We're an innovative, international retailer on a journey to actively make a difference. Always striving to take that next step. You can be part of the difference. From bottom to top you can progress in a collaborative environment. So, why not Kingfisher? Application Process What to expect from our application process Step 1: Application Send in your application via our Kingfisher Careers website. Step 2: Review A member of the Talent Acquisition team will then review your application and let you know if you have progressed to the next stage of the process. Step 3: Interview 1 You'll then have a telephone interview/one to one conversation with a recruiter. Step 4: Interview 2 As you progress, you'll be invited to attend a face to face or virtual interview. Step 5: Feedback Your recruiter will be in contact with feedback and, if successful, the details of your job offer!
Apr 16, 2026
Full time
Overview We're Kingfisher, a team of over 74,000 passionate people who bring Kingfisher-and all our other brands: B&Q, Screwfix, Brico Depot, Castorama and Koctas-to life. That's right, we're big, but we have ambitions to become even bigger and even better. We want to become the leading home improvement company and grow the largest community of home improvers in the world. And that's where you come in. At Kingfisher, our customers come from all walks of life, and so do we. We want to ensure that all colleagues, future colleagues, and applicants to Kingfisher are treated equally regardless of age, gender, marital or civil partnership status, colour, ethnic or national origin, culture, religious belief, philosophical belief, political opinion, disability, gender identity, gender expression or sexual orientation. We are open to flexible and agile working, both of hours and location. Therefore, we offer colleagues a blend of working from home and our offices, located in London, Southampton & Yeovil. Talk to us about how we can best support you! We have a brand new opportunity for an Application Security Specialist to join our Security Operations team. This senior position will play a key role in driving improvements to and safeguarding Kingfisher's digital platforms, by embedding security into every stage of development. This role ensures our web, mobile, and API applications remain resilient against evolving threats, supporting Kingfisher's purpose of making home improvement accessible and secure for everyone. This role will be based at our Kingfisher Head Office in Paddington, with an expectation of 12 days a month in the office. Responsibilities Own and optimise Kingfisher's application security tools and services to maximise value. Lead operational oversight of application security testing across web, mobile, and API platforms. Drive the bug bounty programme and manage relationships with vendors and researchers. Coordinate penetration testing activities and partner with application owners to remediate findings. Integrate security into CI/CD pipelines and champion automation of security testing. Provide actionable metrics, KPIs, and insights to improve application security posture. Stay ahead of emerging threats and lead continuous improvement initiatives for application security. Qualifications Proven experience in application security or software development within complex technology environments. Strong knowledge of secure coding practices and hands on experience with SAST, DAST, and related tooling. Practical experience integrating security into CI/CD pipelines in DevSecOps settings. Familiarity with common attack vectors (e.g., OWASP Top 10) and mitigation techniques. Experience with threat modelling and API security. Be Customer Focused - constantly improving our customers' experience We encourage you to apply for one of our roles even if you do not feel you meet 100% of the requirements. Be Human - acting with humanity and care I do the right thing. Be Curious - thrive on learning, thinking beyond the obvious I build and share new ideas. I try new things and share my learnings. Be Agile - working with trust, pace and agility I have courage to be creative. Done is better than perfect; I aim for 80/20. Be Inclusive - acting inclusively in diverse teams to work together I embrace allyship. I have self awareness and a desire to learn. Be Accountable - championing the plan to deliver results and growth I own my actions. I understand the Kingfisher plan and how it relates to my role. Our Benefits In return, we offer an inclusive environment, where what you can achieve is limited only by your imagination! We encourage new ideas, actively support experimentation, and strive to build an environment where everyone can be their best self. Find out more about Diversity & Inclusion at Kingfisher. We also offer a competitive benefits package and plenty of opportunities to stretch and grow your career. What We Offer. Private Health Care Opportunity to receive up to family level cover with AXA. Join within three months of starting or at annual renewal in April. (This benefit is subject to Benefit In Kind taxation). Kingfisher Pension Scheme Immediate eligibility through auto enrolment. Contribute 8% to receive a max 14% from the Company. 25 Days' Holiday 25 days per annum plus bank holidays as stated in your contract (pro rated for part time colleagues). Staff Discount 20% discount at B&Q and Screwfix. Eligible after 3 months service. Kingfisher Share Incentive Plan (SIP) Share ownership in a tax efficient way. Save between £10 to £150 per month. Join at any time once three months service is reached. Life Assurance x4 Salary plus benefit equal to value of your Retirement Account (if an active member of KPS MP) or x1 Salary if not active member. Bonus Competitive bonus scheme that aligns to work level of role. Kingfisher Share Save Save with the option to buy Kingfisher plc shares at the end of a 3 or 5 year period. Offered annually. Three months service is required at the annual invitation date, normally in October. Our Behaviours Constantly improving our customer experience Acting with humanity and care Be curious-thriving on learning, thinking beyond the obvious Be inclusive-acting inclusively in diverse teams to achieve together Be agile-working with trust, pace and agility Be accountable-championing the plan to deliver results and growth Training & Development There are so many ways you can grow, learn, and develop here at Kingfisher. At whatever pace suits you. Conversations with senior leaders Resources and tools to help you grow Improving without instruments to help you learn is near impossible. That's why we make sure you have everything at your fingertips to find exactly what you need to keep growing. Initiatives that measure development With plans that ask you what you want to achieve and when you want to achieve them by, tracking progress and keeping development at the forefront of conversation is easy. Find your path The scale of group functions within Kingfisher is huge. That means you have the chance to build different career paths within multiple areas of the organisation. Sharing is caring We aren't selfish here at Kingfisher. Whatever your level of experience, you'll work with colleagues who are always welcoming and ready to share their knowledge whenever you need it. Reach for the stars So your ambitions are high? Good thing we have opportunities to find experiences in line with more senior roles and responsibilities. Here, you can evolve your career, no matter your level. Why Kingfisher We're an innovative, international retailer on a journey to actively make a difference. Always striving to take that next step. You can be part of the difference. From bottom to top you can progress in a collaborative environment. So, why not Kingfisher? Application Process What to expect from our application process Step 1: Application Send in your application via our Kingfisher Careers website. Step 2: Review A member of the Talent Acquisition team will then review your application and let you know if you have progressed to the next stage of the process. Step 3: Interview 1 You'll then have a telephone interview/one to one conversation with a recruiter. Step 4: Interview 2 As you progress, you'll be invited to attend a face to face or virtual interview. Step 5: Feedback Your recruiter will be in contact with feedback and, if successful, the details of your job offer!
Site Reliability EngineerUK - Newcastle (Viewpoint)Job FamilySite Reliability Engineering Your Business Sector: AECO - Architects, Engineers, Construction & OwnersAre you ready to take your skills to the next level as a self-motivated and enthusiastic SiteReliability Engineer with hands-on experience supporting multiple connected Cloud-based What You Will Do: We are seeking a skilled and motivated Site Reliability Engineer to join our team in Trimble's Project Delivery Cloud Platform and take responsibility for the infrastructure of our cutting-edge reality capture solution running on Microsoft Azure. The ideal candidate will have a strong background in cloud platforms, infrastructure as code, and automation via programming/scripting languages. You will work with a distributed team to drive the reliability, scalability, and security of the service and infrastructure. Key Responsibilities: Develop and maintain infrastructure as code (IaC) using Terraform to ensure reliable and scalable cloud environments; Implement and enhance observability solutions using tools like New Relic, DataDog, Sumologic and Splunk for monitoring, logging, and alerting; Perform code deployments and manage CI/CD pipelines using Jenkins, Github, and related tooling to ensure smooth and efficient delivery processes; Automate routine tasks and workflows to increase operational efficiency and reduce manual intervention; Evaluate system designs and architectures for reliability, performance, security, and efficiency, ensuring best practices are followed; Lead incident response efforts, conduct root cause analysis, and implement long-term solutions for complex issues; Develop and maintain comprehensive runbooks and procedures for incident response and operational tasks; Collaborate with cross-functional teams to review and provide feedback on technical designs, ensuring alignment with SRE principles; Participate in on-call rotations and handle critical incidents with confidence and expertise; Continuously improve documentation for systems and services, contributing to a knowledge-sharing culture within the team. What Skills & Experience You Should Bring: Bachelor's or Master's degree in Computer Engineering or a related field; At least 5 years of technical experience with a proven ability to take ownership; Strong collaboration skills with leading cross-functional work; Demonstrated success in managing infrastructure in production environments; Expertise in capacity planning and cost optimisation for efficient operations; Extensive experience with Cloud provider hosted infrastructure (Amazon Web Services & Azure); Proficient in high-level scripting languages (Python) and Infrastructure as Code (IaC) tools (Terraform), along with containerisation; Experience with Kubernetes or other containerisation technologies; Familiarity with CI/CD pipelines and tools such as Azure DevOps, Jenkins, Argo CD, Helm, GitHub; Experience with monitoring tools and incident management processes like; Prometheus, Grafana, New Relic, DataDog, Splunk, Cloudwatch, Sumologic etc. Strong understanding of networking and security concepts; Additional experience preferred in: SRE observability experience with NewRelic or Datadog; OpenTelemetry; AIOps/MLOps; SecOps. How to Apply: Please submit an online application for this position by clicking on the 'Apply Now' button located in this posting. Join a Values-Driven Team: Belong, Grow, Innovate. At Trimble, our core values of Belong, Grow, and Innovate aren't just words-they're the foundation of our culture. We foster an environment where you are seen, heard, and valued (Belong); where you have an opportunity to build a career and drive our collective growth (Grow); and where your innovative ideas shape the future (Innovate). We believe in empowering local teams to create impactful strategies, ensuring our global vision resonates with every individual. Become part of a team where your contributions truly matter. If you need assistance or would like to request an accommodation in connection with the application process, please contact . Your Job Title: Site Reliability Engineer Location: UK - NewcastleTop skillsPostgreSQLAgile MethodologiesJavaC. Software Engineer2. DevOps Engineer3. Cloud Engineer4. Site Reliability Engineer5. Senior Site Reliability Engineer
Apr 16, 2026
Full time
Site Reliability EngineerUK - Newcastle (Viewpoint)Job FamilySite Reliability Engineering Your Business Sector: AECO - Architects, Engineers, Construction & OwnersAre you ready to take your skills to the next level as a self-motivated and enthusiastic SiteReliability Engineer with hands-on experience supporting multiple connected Cloud-based What You Will Do: We are seeking a skilled and motivated Site Reliability Engineer to join our team in Trimble's Project Delivery Cloud Platform and take responsibility for the infrastructure of our cutting-edge reality capture solution running on Microsoft Azure. The ideal candidate will have a strong background in cloud platforms, infrastructure as code, and automation via programming/scripting languages. You will work with a distributed team to drive the reliability, scalability, and security of the service and infrastructure. Key Responsibilities: Develop and maintain infrastructure as code (IaC) using Terraform to ensure reliable and scalable cloud environments; Implement and enhance observability solutions using tools like New Relic, DataDog, Sumologic and Splunk for monitoring, logging, and alerting; Perform code deployments and manage CI/CD pipelines using Jenkins, Github, and related tooling to ensure smooth and efficient delivery processes; Automate routine tasks and workflows to increase operational efficiency and reduce manual intervention; Evaluate system designs and architectures for reliability, performance, security, and efficiency, ensuring best practices are followed; Lead incident response efforts, conduct root cause analysis, and implement long-term solutions for complex issues; Develop and maintain comprehensive runbooks and procedures for incident response and operational tasks; Collaborate with cross-functional teams to review and provide feedback on technical designs, ensuring alignment with SRE principles; Participate in on-call rotations and handle critical incidents with confidence and expertise; Continuously improve documentation for systems and services, contributing to a knowledge-sharing culture within the team. What Skills & Experience You Should Bring: Bachelor's or Master's degree in Computer Engineering or a related field; At least 5 years of technical experience with a proven ability to take ownership; Strong collaboration skills with leading cross-functional work; Demonstrated success in managing infrastructure in production environments; Expertise in capacity planning and cost optimisation for efficient operations; Extensive experience with Cloud provider hosted infrastructure (Amazon Web Services & Azure); Proficient in high-level scripting languages (Python) and Infrastructure as Code (IaC) tools (Terraform), along with containerisation; Experience with Kubernetes or other containerisation technologies; Familiarity with CI/CD pipelines and tools such as Azure DevOps, Jenkins, Argo CD, Helm, GitHub; Experience with monitoring tools and incident management processes like; Prometheus, Grafana, New Relic, DataDog, Splunk, Cloudwatch, Sumologic etc. Strong understanding of networking and security concepts; Additional experience preferred in: SRE observability experience with NewRelic or Datadog; OpenTelemetry; AIOps/MLOps; SecOps. How to Apply: Please submit an online application for this position by clicking on the 'Apply Now' button located in this posting. Join a Values-Driven Team: Belong, Grow, Innovate. At Trimble, our core values of Belong, Grow, and Innovate aren't just words-they're the foundation of our culture. We foster an environment where you are seen, heard, and valued (Belong); where you have an opportunity to build a career and drive our collective growth (Grow); and where your innovative ideas shape the future (Innovate). We believe in empowering local teams to create impactful strategies, ensuring our global vision resonates with every individual. Become part of a team where your contributions truly matter. If you need assistance or would like to request an accommodation in connection with the application process, please contact . Your Job Title: Site Reliability Engineer Location: UK - NewcastleTop skillsPostgreSQLAgile MethodologiesJavaC. Software Engineer2. DevOps Engineer3. Cloud Engineer4. Site Reliability Engineer5. Senior Site Reliability Engineer
At Kroo Bank, we are charting the future of banking with our groundbreaking technological innovations and unique digital services. The rapid advancements in the fintech sector necessitate ongoing evolution in the roles and responsibilities of our bank to effectively tackle new business opportunities and challenges. We are dedicated to consistently updating our job descriptions to ensure we continue to lead in banking innovation. How you will contribute and key responsibilities: As a Senior Security Engineer, you will be instrumental in designing and implementing security measures for our mobile applications, services, and websites to meet the highest security standards. Your expertise will help us continuously analyse and improve our security systems, ensuring that our products and services are not only secure by design but also comply with internal and external regulatory requirements. Other responsibilities include: Security Analysis and Improvement: Continuously analyse our security systems for potential improvements, ensuring that our defences remain at the forefront of cybersecurity practices. Vulnerability Management: Proactively identify, assess, and remediate security vulnerabilities to maintain the integrity and confidentiality of our customer data. Security Automation: Automate security processes and procedures to enhance efficiency and effectiveness, reducing the risk of human error. Security Requirements and Solutions: Identify, define, and document system security requirements, providing well-considered recommendations to management. Development of Security Standards: Develop and maintain best practices and security standards for the organisation, guiding teams in the implementation of secure coding practices. Secure Design: Collaborate with development teams to ensure that web and mobile front-ends, as well as microservice architectures, are designed with robust security measures in mind. Cloud security and secure infrastructure: Assist teams in diagnosing and addressing gaps in infrastructure security, aligning the organisation with industry security posture standards. Cybersecurity Collaboration: Work closely with stakeholders across the organisation to align security measures with our overarching cybersecurity strategy and protect the bank's technology infrastructure. Regulatory Compliance: Support teams in meeting compliance requirements for internal audits and external regulators, safeguarding against potential fines and reputational damage. To be successful in this role you should have skills and experience in multiple domains, such as application security, network security or security operations. You need to have programming experience and the ability to proactively seek out efficient and repetitive solutions to security challenges. At a minimum, you should have at least 3 years of experience in system, network or application security. You should also have a proven experience and knowledge with any combination of the following: Threat modelling and risk assessments, Working knowledge of secure coding principles (OWASP and OWASP mobile, SANS ), Experience with designing and administering identity management (authentication and authorisation including policy enforcement points, token services, protocols such as OAuth2), Working knowledge of cryptography including encryption, signing and digital certificates, Principles of securing mobile applications and web services, Docker or kubernetes and infrastructure as code, Event driven streaming technologies, Logging and monitoring, networks, firewalls, load balancers, DNS, CDNs, Working knowledge of agile DevSecOps environments, and CI/CD (Git, Concourse, Terraform), Working knowledge of SAST, DAST, RASP, and IAST tools and building security into existing SDLC processes, Knowledge of cloud Security Architecture of public clouds (such as AWS or GCP), Security certification such as CISSP, CCP, SANS, GAIC, Ethical Hacker, Experience in working in regulated company, preferably with a FinTech/ banking background and experience in DevOps, Excellent oral, written communication and presentation skills. What we offer: At our cutting-edge fintech company, we know that attracting and retaining the best talent means offering top-notch benefits that help our employees thrive both in and outside of work. Check out what we currently offer: Generous holiday time: 25 days annual leave, 8 bank holidays, 1 Kroo bank holiday (June 24th), and 1 day off during the week of your birthday. Personal days: We know that life can be unpredictable, so we offer 3 personal days to use as needed. Employer-sponsored volunteer program: We're passionate about giving back to our community, and we support our employees in doing the same with up to 4 hours per month of employer-sponsored volunteer time. Mental health support: We care about the mental health of our team members and offer access to Spill, our mental health support partner. Workplace pension: We want you to feel secure about your future, so we offer a workplace pension with a 5% employee contribution and a 3% employer top-up. Learning and development: After 1 year of service, you'll have access to £500 from the Kroo Learning Fund to invest in your career development. Top-notch equipment: We provide top-of-the-line equipment necessary for smooth hybrid work, including a MacBook laptop. Additionally, we also offer support in establishing your home office by contributing towards your setup if required. Modern office: When you're in the office, you'll enjoy access to our modern, bustling workspace in Farringdon, Central London. Cycle to Work scheme: We encourage sustainable transportation with our Cycle to Work scheme. Electric Car scheme: We're committed to reducing our carbon footprint, and our Electric Car scheme makes it easy for our employees to do the same. Enhanced parental leave: We know that family comes first, and we offer an enhanced parental leave policy to support our employees in starting and growing their families. You get full healthcare for you and your nuclear family via Vitality. Hybrid Working: At Kroo Bank, we have a hybrid policy that gives both individuals and teams a lot of freedom when it comes to using the office space to boost productivity. Our London office is a great resource when used effectively. So, employees who can occasionally come to the office are a good fit for how we work right now. Keep in mind that this job involves working from Monday to Friday, with a mix of remote and office work, so you won't need to be on-site all the time. Diversity and Inclusion: We wholeheartedly uphold our commitment to fostering a diverse and inclusive workplace. Every employee is highly regarded, respected, and supported without any form of judgement or prejudice. We consider Diversity, Equality, and Inclusion as fundamental pillars guiding our path in all aspects of our bank. We also ensure that reasonable adjustments are made available to all candidates throughout the recruitment process. To all Recruitment Agencies: At Kroo Bank, agency resumes are strictly prohibited. Do not submit agency resumes or forward them to our job advertisements or Kroo Bank employees. Be aware that Kroo Bank will not assume any responsibility for fees incurred due to unsolicited resumes. To ensure a fair and efficient application process, all candidates are kindly requested to submit their applications directly through the advertised platform. We kindly ask that you refrain from reaching out to the company or its employees via email, LinkedIn, or any other communication channels for inquiries or updates. Please note that any attempts to contact us through these channels will not receive a response. Thank you for your understanding and cooperation.
Apr 16, 2026
Full time
At Kroo Bank, we are charting the future of banking with our groundbreaking technological innovations and unique digital services. The rapid advancements in the fintech sector necessitate ongoing evolution in the roles and responsibilities of our bank to effectively tackle new business opportunities and challenges. We are dedicated to consistently updating our job descriptions to ensure we continue to lead in banking innovation. How you will contribute and key responsibilities: As a Senior Security Engineer, you will be instrumental in designing and implementing security measures for our mobile applications, services, and websites to meet the highest security standards. Your expertise will help us continuously analyse and improve our security systems, ensuring that our products and services are not only secure by design but also comply with internal and external regulatory requirements. Other responsibilities include: Security Analysis and Improvement: Continuously analyse our security systems for potential improvements, ensuring that our defences remain at the forefront of cybersecurity practices. Vulnerability Management: Proactively identify, assess, and remediate security vulnerabilities to maintain the integrity and confidentiality of our customer data. Security Automation: Automate security processes and procedures to enhance efficiency and effectiveness, reducing the risk of human error. Security Requirements and Solutions: Identify, define, and document system security requirements, providing well-considered recommendations to management. Development of Security Standards: Develop and maintain best practices and security standards for the organisation, guiding teams in the implementation of secure coding practices. Secure Design: Collaborate with development teams to ensure that web and mobile front-ends, as well as microservice architectures, are designed with robust security measures in mind. Cloud security and secure infrastructure: Assist teams in diagnosing and addressing gaps in infrastructure security, aligning the organisation with industry security posture standards. Cybersecurity Collaboration: Work closely with stakeholders across the organisation to align security measures with our overarching cybersecurity strategy and protect the bank's technology infrastructure. Regulatory Compliance: Support teams in meeting compliance requirements for internal audits and external regulators, safeguarding against potential fines and reputational damage. To be successful in this role you should have skills and experience in multiple domains, such as application security, network security or security operations. You need to have programming experience and the ability to proactively seek out efficient and repetitive solutions to security challenges. At a minimum, you should have at least 3 years of experience in system, network or application security. You should also have a proven experience and knowledge with any combination of the following: Threat modelling and risk assessments, Working knowledge of secure coding principles (OWASP and OWASP mobile, SANS ), Experience with designing and administering identity management (authentication and authorisation including policy enforcement points, token services, protocols such as OAuth2), Working knowledge of cryptography including encryption, signing and digital certificates, Principles of securing mobile applications and web services, Docker or kubernetes and infrastructure as code, Event driven streaming technologies, Logging and monitoring, networks, firewalls, load balancers, DNS, CDNs, Working knowledge of agile DevSecOps environments, and CI/CD (Git, Concourse, Terraform), Working knowledge of SAST, DAST, RASP, and IAST tools and building security into existing SDLC processes, Knowledge of cloud Security Architecture of public clouds (such as AWS or GCP), Security certification such as CISSP, CCP, SANS, GAIC, Ethical Hacker, Experience in working in regulated company, preferably with a FinTech/ banking background and experience in DevOps, Excellent oral, written communication and presentation skills. What we offer: At our cutting-edge fintech company, we know that attracting and retaining the best talent means offering top-notch benefits that help our employees thrive both in and outside of work. Check out what we currently offer: Generous holiday time: 25 days annual leave, 8 bank holidays, 1 Kroo bank holiday (June 24th), and 1 day off during the week of your birthday. Personal days: We know that life can be unpredictable, so we offer 3 personal days to use as needed. Employer-sponsored volunteer program: We're passionate about giving back to our community, and we support our employees in doing the same with up to 4 hours per month of employer-sponsored volunteer time. Mental health support: We care about the mental health of our team members and offer access to Spill, our mental health support partner. Workplace pension: We want you to feel secure about your future, so we offer a workplace pension with a 5% employee contribution and a 3% employer top-up. Learning and development: After 1 year of service, you'll have access to £500 from the Kroo Learning Fund to invest in your career development. Top-notch equipment: We provide top-of-the-line equipment necessary for smooth hybrid work, including a MacBook laptop. Additionally, we also offer support in establishing your home office by contributing towards your setup if required. Modern office: When you're in the office, you'll enjoy access to our modern, bustling workspace in Farringdon, Central London. Cycle to Work scheme: We encourage sustainable transportation with our Cycle to Work scheme. Electric Car scheme: We're committed to reducing our carbon footprint, and our Electric Car scheme makes it easy for our employees to do the same. Enhanced parental leave: We know that family comes first, and we offer an enhanced parental leave policy to support our employees in starting and growing their families. You get full healthcare for you and your nuclear family via Vitality. Hybrid Working: At Kroo Bank, we have a hybrid policy that gives both individuals and teams a lot of freedom when it comes to using the office space to boost productivity. Our London office is a great resource when used effectively. So, employees who can occasionally come to the office are a good fit for how we work right now. Keep in mind that this job involves working from Monday to Friday, with a mix of remote and office work, so you won't need to be on-site all the time. Diversity and Inclusion: We wholeheartedly uphold our commitment to fostering a diverse and inclusive workplace. Every employee is highly regarded, respected, and supported without any form of judgement or prejudice. We consider Diversity, Equality, and Inclusion as fundamental pillars guiding our path in all aspects of our bank. We also ensure that reasonable adjustments are made available to all candidates throughout the recruitment process. To all Recruitment Agencies: At Kroo Bank, agency resumes are strictly prohibited. Do not submit agency resumes or forward them to our job advertisements or Kroo Bank employees. Be aware that Kroo Bank will not assume any responsibility for fees incurred due to unsolicited resumes. To ensure a fair and efficient application process, all candidates are kindly requested to submit their applications directly through the advertised platform. We kindly ask that you refrain from reaching out to the company or its employees via email, LinkedIn, or any other communication channels for inquiries or updates. Please note that any attempts to contact us through these channels will not receive a response. Thank you for your understanding and cooperation.
About Citi Citi, the world leading global bank, has approximately 200 million customer accounts and a presence in more than 160 countries and jurisdictions worldwide. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management. Citi enables clients to achieve their strategic financial objectives by providing them with cutting edge ideas, best in class products and solutions, and unparalleled access to capital and liquidity. The Team Cloud Technology Services (CTS) is responsible for looking after Citi's Cloud programme across Public and Private Cloud. It has several new and exciting programmes utilising cutting edge cloud and container technologies, with a view to ensuring that our offerings are best in class and enable our wider business lines and clients alike. The Job This role sits within the newly formed GenAI Security team, which is responsible for ensuring, maintaining, and improving the security of our GenAi Prompt security capabilities within the firm. You will be responsible for engineering solutions that strengthen and broaden our security capabilities in an environment that is changing daily whilst also working with vendor products to achieve the same aims. You will have the opportunity to partner with key Engineering teams, alongside Operations and Site Reliability Engineering. Effective capabilities that combine security and engineering excellence are key to success. What the Role Covers Designing, developing, optimizing, and enhancing a GenAI prompt security platform to protect firm AI/LLM based applications from adversarial attacks and prompt injections. Building and automating a security testing framework to validate protection mechanisms for various LLM use cases. Owning solutions that are expected to operate and perform at scale across the organisation. Collaboration with multiple stakeholders and partners across Engineering and Operations as well as partner teams within the wider Citi organisation, across different time zones. Job Skills / Qualifications Highly motivated self starter with excellent interpersonal and problem solving skills. Bachelor's degree or equivalent work experience. Good oral and written communication skills. Significant relevant industry work experience. Experience of the full lifecycle of design, implementation and running of enterprise software solutions involving cross functional team collaboration. Expertise in a major programming language such as Python and/or Go, and associated tooling (Git, Maven, IDEs, Jenkins, Bitbucket etc). Expertise in designing and implementing secure APIs and libraries. Experience in Generative AI, LLM frameworks, LLM prompt engineering and/or adversarial testing is a bonus. Experience with Cyber engineering and Operations, which could include DevSecOps or MLOps. Experience contributing to the architecture and design (architecture, design patterns, reliability, scaling) of new and current systems. Experience in containerized deployment (Kubernetes, OpenShift etc). Expertise with DevOps, CI/CD and agile methodology. What We Can Offer You By joining Citi, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive base salary (which is annually reviewed), and enjoy a whole host of additional benefits such as: 27 days annual leave (plus bank holidays) Discretional annual performance related bonus Private Medical Care & Life Insurance Employee Assistance Program Pension Plan Paid Parental Leave Special discounts for employees, family, and friends Access to an array of learning and development resources Visit our Global Benefits page to learn more. Alongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self, every day. We want the best talent around the world to be energized to join us, motivated to stay and empowered to thrive. Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi. View Citi's EEO Policy Statement and the Know Your Rights poster.
Apr 15, 2026
Full time
About Citi Citi, the world leading global bank, has approximately 200 million customer accounts and a presence in more than 160 countries and jurisdictions worldwide. Citi provides consumers, corporations, governments, and institutions with a broad range of financial products and services, including consumer banking and credit, corporate and investment banking, securities brokerage, transaction services, and wealth management. Citi enables clients to achieve their strategic financial objectives by providing them with cutting edge ideas, best in class products and solutions, and unparalleled access to capital and liquidity. The Team Cloud Technology Services (CTS) is responsible for looking after Citi's Cloud programme across Public and Private Cloud. It has several new and exciting programmes utilising cutting edge cloud and container technologies, with a view to ensuring that our offerings are best in class and enable our wider business lines and clients alike. The Job This role sits within the newly formed GenAI Security team, which is responsible for ensuring, maintaining, and improving the security of our GenAi Prompt security capabilities within the firm. You will be responsible for engineering solutions that strengthen and broaden our security capabilities in an environment that is changing daily whilst also working with vendor products to achieve the same aims. You will have the opportunity to partner with key Engineering teams, alongside Operations and Site Reliability Engineering. Effective capabilities that combine security and engineering excellence are key to success. What the Role Covers Designing, developing, optimizing, and enhancing a GenAI prompt security platform to protect firm AI/LLM based applications from adversarial attacks and prompt injections. Building and automating a security testing framework to validate protection mechanisms for various LLM use cases. Owning solutions that are expected to operate and perform at scale across the organisation. Collaboration with multiple stakeholders and partners across Engineering and Operations as well as partner teams within the wider Citi organisation, across different time zones. Job Skills / Qualifications Highly motivated self starter with excellent interpersonal and problem solving skills. Bachelor's degree or equivalent work experience. Good oral and written communication skills. Significant relevant industry work experience. Experience of the full lifecycle of design, implementation and running of enterprise software solutions involving cross functional team collaboration. Expertise in a major programming language such as Python and/or Go, and associated tooling (Git, Maven, IDEs, Jenkins, Bitbucket etc). Expertise in designing and implementing secure APIs and libraries. Experience in Generative AI, LLM frameworks, LLM prompt engineering and/or adversarial testing is a bonus. Experience with Cyber engineering and Operations, which could include DevSecOps or MLOps. Experience contributing to the architecture and design (architecture, design patterns, reliability, scaling) of new and current systems. Experience in containerized deployment (Kubernetes, OpenShift etc). Expertise with DevOps, CI/CD and agile methodology. What We Can Offer You By joining Citi, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive base salary (which is annually reviewed), and enjoy a whole host of additional benefits such as: 27 days annual leave (plus bank holidays) Discretional annual performance related bonus Private Medical Care & Life Insurance Employee Assistance Program Pension Plan Paid Parental Leave Special discounts for employees, family, and friends Access to an array of learning and development resources Visit our Global Benefits page to learn more. Alongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self, every day. We want the best talent around the world to be energized to join us, motivated to stay and empowered to thrive. Citi is an equal opportunity employer, and qualified candidates will receive consideration without regard to their race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other characteristic protected by law. If you are a person with a disability and need a reasonable accommodation to use our search tools and/or apply for a career opportunity review Accessibility at Citi. View Citi's EEO Policy Statement and the Know Your Rights poster.
At Kroo Bank, we're building a better bank from the ground up. One that puts customers first, treats money responsibly, and uses technology to make everyday banking simpler, fairer and more transparent. We're a fully regulated UK bank, backed by long term investors, with a growing customer base and big ambitions. We move fast, think carefully, and hold ourselves to the highest standards, whether that's how we engage with our customers, build products, manage risk, or look after our people. Job Overview Drive our IT security strategy and implementation forward whilst protecting the business from security threats against unauthorised, disruption or destruction of digital data. Direct strategy, operations and product development for the protection of the enterprise information assets and manage the program of delivery. The scope of responsibility will encompass security awareness, security operations and applications and infrastructure, including the policies and procedures which apply. Responsibilities Managing the daily operation and implementation of the information security strategy Developing and maintaining a forward looking security roadmap covering cloud, mobile, AI, and software platforms. Collaborating with the technology leadership to deliver new security technology approaches and implementing next generation solutions and controls Ensuring secure configuration and continuous compliance across IaaS, PaaS, and SaaS environments. Conducting a continuous assessment of current security practices and systems and identifying areas for improvement Performing security audits and risk assessments and reporting on ways to minimise threats and security exposure Owning the Information Security Management System (ISMS) and maintain ISO 27001 certification maintenance Ensuring compliance and governance with applicable regulations Collaborating with operational teams to develop, implement and test business continuity plans to ensure service is continuous when a change programme is introduced, or a security breach occurs or in the event that the disaster recovery plan needs to be triggered Protecting the intellectual property of the organisation at all times Monitoring security vulnerabilities and hacking threats in network and host systems Leading security operations (including Managed SOC), threat intelligence, detection, and response capabilities Defining KPIs and KRIs to measure security maturity and providing regular security reporting to Executive and Board level stakeholders. Managing and developing the information security team Championing and educating the organisation about the latest security strategies and technologies Managing the IT security budget and communicating this with the appropriate parties Qualifications Significant senior leadership experience in information security within a FCA and PRA regulated UK bank, fintech, or other regulated financial services organisation, with demonstrated engagement on CBEST matters (including oversight of threat led penetration testing) at Board Risk Committee level. Demonstrable experience achieving and maintaining ISO/IEC 27001 certification. Strong background in software application security and mobile security. Experience implementing and improving DevSecOps processes in cloud native (AWS or GCP) environments. Knowledge of AI/ML security risks and governance frameworks like ISO 42001 or NIST AI RMF. Experience leading security operations, incident response, and threat management. Ability to work collaboratively with the 2nd line of defence to ensure the Bank remains within risk appetite Ability to work with team members at all levels from Software Engineers & IT through to board level. What we offer Generous holiday time: 25 days annual leave, 8 bank holidays, 1 Kroo bank holiday (June 24th), and 1 day off during the week of your birthday. Personal days: We know that life can be unpredictable, so we offer 3 personal days to use as needed. Employer-sponsored volunteer program: We're passionate about giving back to our community, and we support our employees in doing the same with up to 4 hours per month of employer-sponsored volunteer time. Mental health support: We care about the mental health of our team members and offer access to Spill, our mental health support partner. Workplace pension: We want you to feel secure about your future, so we offer a workplace pension with a 5% employee contribution and a 3% employer top up. Top notch equipment: We provide top of the line equipment necessary for smooth hybrid work, including a MacBook laptop. Additionally, we also offer support in establishing your home office by contributing towards your setup if required. Modern office: When you're in the office, you'll enjoy access to our modern, bustling workspace in Farringdon (Central London). Cycle to Work scheme: We encourage sustainable transportation with our Cycle to Work scheme. Electric Car scheme: We're committed to reducing our carbon footprint, and our Electric Car scheme makes it easy for our employees to do the same. Enhanced parental leave: We know that family comes first, and we offer an enhanced parental leave policy to support our employees in starting and growing their families. Room for growth: As a fast paced, high growth start up, we're dedicated to providing our employees with room to grow and excel. You get full healthcare for you and your nuclear family via Vitality. Hybrid Working At Kroo Bank, we have a hybrid policy that gives both individuals and teams a lot of freedom when it comes to using the office space to boost productivity. Our London office is a great resource when used effectively. So, employees who can occasionally come to the office are a good fit for how we work right now. Keep in mind that this job involves working from Monday to Friday, with a mix of remote and office work, so you won't need to be on site all the time. Diversity and Inclusion We wholeheartedly uphold our commitment to fostering a diverse and inclusive workplace. Every employee is highly regarded, respected, and supported without any form of judgement or prejudice. We consider Diversity, Equality, and Inclusion as fundamental pillars guiding our path in all aspects of our bank. We also ensure that reasonable adjustments are made available to all candidates throughout the recruitment process. To all Recruitment Agencies At Kroo Bank, agency resumes are strictly prohibited. Do not submit agency resumes or forward them to our job advertisements or Kroo Bank employees. Be aware that Kroo Bank will not assume any responsibility for fees incurred due to unsolicited resumes. To ensure a fair and efficient application process, all candidates are kindly requested to submit their applications directly through the advertised platform. We kindly ask that you refrain from reaching out to the company or its employees via email, LinkedIn, or any other communication channels for inquiries or updates. Please note that any attempts to contact us through these channels will not receive a response. Thank you for your understanding and cooperation.
Apr 15, 2026
Full time
At Kroo Bank, we're building a better bank from the ground up. One that puts customers first, treats money responsibly, and uses technology to make everyday banking simpler, fairer and more transparent. We're a fully regulated UK bank, backed by long term investors, with a growing customer base and big ambitions. We move fast, think carefully, and hold ourselves to the highest standards, whether that's how we engage with our customers, build products, manage risk, or look after our people. Job Overview Drive our IT security strategy and implementation forward whilst protecting the business from security threats against unauthorised, disruption or destruction of digital data. Direct strategy, operations and product development for the protection of the enterprise information assets and manage the program of delivery. The scope of responsibility will encompass security awareness, security operations and applications and infrastructure, including the policies and procedures which apply. Responsibilities Managing the daily operation and implementation of the information security strategy Developing and maintaining a forward looking security roadmap covering cloud, mobile, AI, and software platforms. Collaborating with the technology leadership to deliver new security technology approaches and implementing next generation solutions and controls Ensuring secure configuration and continuous compliance across IaaS, PaaS, and SaaS environments. Conducting a continuous assessment of current security practices and systems and identifying areas for improvement Performing security audits and risk assessments and reporting on ways to minimise threats and security exposure Owning the Information Security Management System (ISMS) and maintain ISO 27001 certification maintenance Ensuring compliance and governance with applicable regulations Collaborating with operational teams to develop, implement and test business continuity plans to ensure service is continuous when a change programme is introduced, or a security breach occurs or in the event that the disaster recovery plan needs to be triggered Protecting the intellectual property of the organisation at all times Monitoring security vulnerabilities and hacking threats in network and host systems Leading security operations (including Managed SOC), threat intelligence, detection, and response capabilities Defining KPIs and KRIs to measure security maturity and providing regular security reporting to Executive and Board level stakeholders. Managing and developing the information security team Championing and educating the organisation about the latest security strategies and technologies Managing the IT security budget and communicating this with the appropriate parties Qualifications Significant senior leadership experience in information security within a FCA and PRA regulated UK bank, fintech, or other regulated financial services organisation, with demonstrated engagement on CBEST matters (including oversight of threat led penetration testing) at Board Risk Committee level. Demonstrable experience achieving and maintaining ISO/IEC 27001 certification. Strong background in software application security and mobile security. Experience implementing and improving DevSecOps processes in cloud native (AWS or GCP) environments. Knowledge of AI/ML security risks and governance frameworks like ISO 42001 or NIST AI RMF. Experience leading security operations, incident response, and threat management. Ability to work collaboratively with the 2nd line of defence to ensure the Bank remains within risk appetite Ability to work with team members at all levels from Software Engineers & IT through to board level. What we offer Generous holiday time: 25 days annual leave, 8 bank holidays, 1 Kroo bank holiday (June 24th), and 1 day off during the week of your birthday. Personal days: We know that life can be unpredictable, so we offer 3 personal days to use as needed. Employer-sponsored volunteer program: We're passionate about giving back to our community, and we support our employees in doing the same with up to 4 hours per month of employer-sponsored volunteer time. Mental health support: We care about the mental health of our team members and offer access to Spill, our mental health support partner. Workplace pension: We want you to feel secure about your future, so we offer a workplace pension with a 5% employee contribution and a 3% employer top up. Top notch equipment: We provide top of the line equipment necessary for smooth hybrid work, including a MacBook laptop. Additionally, we also offer support in establishing your home office by contributing towards your setup if required. Modern office: When you're in the office, you'll enjoy access to our modern, bustling workspace in Farringdon (Central London). Cycle to Work scheme: We encourage sustainable transportation with our Cycle to Work scheme. Electric Car scheme: We're committed to reducing our carbon footprint, and our Electric Car scheme makes it easy for our employees to do the same. Enhanced parental leave: We know that family comes first, and we offer an enhanced parental leave policy to support our employees in starting and growing their families. Room for growth: As a fast paced, high growth start up, we're dedicated to providing our employees with room to grow and excel. You get full healthcare for you and your nuclear family via Vitality. Hybrid Working At Kroo Bank, we have a hybrid policy that gives both individuals and teams a lot of freedom when it comes to using the office space to boost productivity. Our London office is a great resource when used effectively. So, employees who can occasionally come to the office are a good fit for how we work right now. Keep in mind that this job involves working from Monday to Friday, with a mix of remote and office work, so you won't need to be on site all the time. Diversity and Inclusion We wholeheartedly uphold our commitment to fostering a diverse and inclusive workplace. Every employee is highly regarded, respected, and supported without any form of judgement or prejudice. We consider Diversity, Equality, and Inclusion as fundamental pillars guiding our path in all aspects of our bank. We also ensure that reasonable adjustments are made available to all candidates throughout the recruitment process. To all Recruitment Agencies At Kroo Bank, agency resumes are strictly prohibited. Do not submit agency resumes or forward them to our job advertisements or Kroo Bank employees. Be aware that Kroo Bank will not assume any responsibility for fees incurred due to unsolicited resumes. To ensure a fair and efficient application process, all candidates are kindly requested to submit their applications directly through the advertised platform. We kindly ask that you refrain from reaching out to the company or its employees via email, LinkedIn, or any other communication channels for inquiries or updates. Please note that any attempts to contact us through these channels will not receive a response. Thank you for your understanding and cooperation.
Insight Investment is looking for Security Architect to join the Data Platform team in Manchester. The role will focus on designing, implementing, and continuously enhancing the security of our Snowflake-based data platform hosted on Microsoft Azure. This role has been created to strengthen security-by-design principles throughout the platform's development and delivery processes. Working collaboratively within the team, you will partner closely with engineers and fellow architects to proactively identify cyber threats, devise proportionate security controls, and see these measures through to practical implementation. Your efforts will be instrumental in ensuring our platform remains secure and compliant, while supporting efficient and frictionless delivery. This is a hands-on, delivery-oriented position, embedded within the wider Data Platform team. You will play a key part in shaping our secure system development practices, championing robust governance and regulatory compliance, and enabling trusted access to data for users across the organisation. Role Responsibilities Design and implement security architecture for the Snowflake data platform on Microsoft Azure, encompassing data, identity, network, and platform controls, while embedding security into Snowflake workspaces and GitHub-backed repositories (secure branching, code reviews, pipelines, secrets management, and deployment patterns) Secure integrations with Sigma, Collibra, on-premises systems, other clouds/SaaS, and third-party vendors by ensuring connectivity, authentication, data exchange, and auditability Lead threat modelling and hands-on security assessments for systems, data flows, integrations, and vendors; translate findings into actionable controls, prioritise remediation, and track closure Implement and refine controls across IAM (Entra ID/Azure AD, Snowflake roles/RBAC), networking (private endpoints, firewall rules), encryption and key management (customer-managed keys, Key Vault), secrets management, monitoring, and logging, ensuring operability and observability (logs, alerts, dashboards), incident response, and post-incident learning Define and embed reusable, automatable security patterns, guardrails, and reference architectures in CI/CD; enforce secure data lifecycle controls (ingestion, storage, processing, sharing, retention/deletion), including classification, masking, and least-privilege access Work closely with the platform team and Internal Security to align on standards and enable secure delivery, contribute to Architecture Review Boards and technical risk management, and ensure compliance with legal, regulatory, industry, and enterprise standards, focusing on real risk reduction. Elevate the platform team's security maturity and mindset in the process Experience Required Snowflake on Azure security: role/warehouse design, RBAC, masking/row level controls, network policies, private connectivity, secure data sharing patterns Azure security: identity (Entra ID), network isolation (VNets, Private Link), Key Vault / customer managed keys, policy/blueprints, logging/monitoring GitHub security & DevSecOps: protected branches, code owners, signed commits, secrets management, GitHub Actions hardening, SAST/secret scanning, supply chain hygiene Infrastructure as Code (e.g., Terraform) and pipeline embedded controls (policy as code, automated checks, drift detection) Threat modelling & risk assessment skills; ability to turn threats into concrete, testable mitigations and track them to done Zero Trust and principal of least privilege mindset; strong grasp of enforcing role entitlement over data security (classification, tokenisation/masking, lineage, audit) Security observability: designing for logs, metrics and alerts that support detection, response and auditability Working familiarity with industry frameworks (e.g., NIST CSF, CSA Cloud Controls) to communicate design rationale in governance forums Clear, pragmatic communication to brief engineers, product, architects and ARB succinctly; documents decisions and residual risk Behaviours: collaborative, embedded, outcome focused, balances speed and safety, takes ownership, learns from incidents, influences through expertise, consultative stakeholder style, curiosity, continuous improvement mindset, transparent about trade offs and residual risk Insight is committed to being an inclusive employer and encourages applications from all suitably qualified applicants irrespective of background, circumstances, age, disability, gender identity, ethnicity, religion or belief and sexual orientation. If you are a candidate with a disability, or are assisting a candidate with a disability, and require an accommodation to apply for one of our jobs, please email us at About Insight Investment Insight Investment is a leading asset manager focused on designing investment solutions to meet its clients' needs. Founded in 2002, Insight's collaborative approach has delivered both investment performance and growth in assets under management. Insight manages assets across its core liability-driven investment, risk management, full-spectrum fixed income, currency and absolute return capabilities. Insight has a global network of operations in the UK, Ireland, Germany, US, Japan and Australia. More information about Insight Investment can be found at:
Apr 15, 2026
Full time
Insight Investment is looking for Security Architect to join the Data Platform team in Manchester. The role will focus on designing, implementing, and continuously enhancing the security of our Snowflake-based data platform hosted on Microsoft Azure. This role has been created to strengthen security-by-design principles throughout the platform's development and delivery processes. Working collaboratively within the team, you will partner closely with engineers and fellow architects to proactively identify cyber threats, devise proportionate security controls, and see these measures through to practical implementation. Your efforts will be instrumental in ensuring our platform remains secure and compliant, while supporting efficient and frictionless delivery. This is a hands-on, delivery-oriented position, embedded within the wider Data Platform team. You will play a key part in shaping our secure system development practices, championing robust governance and regulatory compliance, and enabling trusted access to data for users across the organisation. Role Responsibilities Design and implement security architecture for the Snowflake data platform on Microsoft Azure, encompassing data, identity, network, and platform controls, while embedding security into Snowflake workspaces and GitHub-backed repositories (secure branching, code reviews, pipelines, secrets management, and deployment patterns) Secure integrations with Sigma, Collibra, on-premises systems, other clouds/SaaS, and third-party vendors by ensuring connectivity, authentication, data exchange, and auditability Lead threat modelling and hands-on security assessments for systems, data flows, integrations, and vendors; translate findings into actionable controls, prioritise remediation, and track closure Implement and refine controls across IAM (Entra ID/Azure AD, Snowflake roles/RBAC), networking (private endpoints, firewall rules), encryption and key management (customer-managed keys, Key Vault), secrets management, monitoring, and logging, ensuring operability and observability (logs, alerts, dashboards), incident response, and post-incident learning Define and embed reusable, automatable security patterns, guardrails, and reference architectures in CI/CD; enforce secure data lifecycle controls (ingestion, storage, processing, sharing, retention/deletion), including classification, masking, and least-privilege access Work closely with the platform team and Internal Security to align on standards and enable secure delivery, contribute to Architecture Review Boards and technical risk management, and ensure compliance with legal, regulatory, industry, and enterprise standards, focusing on real risk reduction. Elevate the platform team's security maturity and mindset in the process Experience Required Snowflake on Azure security: role/warehouse design, RBAC, masking/row level controls, network policies, private connectivity, secure data sharing patterns Azure security: identity (Entra ID), network isolation (VNets, Private Link), Key Vault / customer managed keys, policy/blueprints, logging/monitoring GitHub security & DevSecOps: protected branches, code owners, signed commits, secrets management, GitHub Actions hardening, SAST/secret scanning, supply chain hygiene Infrastructure as Code (e.g., Terraform) and pipeline embedded controls (policy as code, automated checks, drift detection) Threat modelling & risk assessment skills; ability to turn threats into concrete, testable mitigations and track them to done Zero Trust and principal of least privilege mindset; strong grasp of enforcing role entitlement over data security (classification, tokenisation/masking, lineage, audit) Security observability: designing for logs, metrics and alerts that support detection, response and auditability Working familiarity with industry frameworks (e.g., NIST CSF, CSA Cloud Controls) to communicate design rationale in governance forums Clear, pragmatic communication to brief engineers, product, architects and ARB succinctly; documents decisions and residual risk Behaviours: collaborative, embedded, outcome focused, balances speed and safety, takes ownership, learns from incidents, influences through expertise, consultative stakeholder style, curiosity, continuous improvement mindset, transparent about trade offs and residual risk Insight is committed to being an inclusive employer and encourages applications from all suitably qualified applicants irrespective of background, circumstances, age, disability, gender identity, ethnicity, religion or belief and sexual orientation. If you are a candidate with a disability, or are assisting a candidate with a disability, and require an accommodation to apply for one of our jobs, please email us at About Insight Investment Insight Investment is a leading asset manager focused on designing investment solutions to meet its clients' needs. Founded in 2002, Insight's collaborative approach has delivered both investment performance and growth in assets under management. Insight manages assets across its core liability-driven investment, risk management, full-spectrum fixed income, currency and absolute return capabilities. Insight has a global network of operations in the UK, Ireland, Germany, US, Japan and Australia. More information about Insight Investment can be found at:
A leading asset management firm based in Manchester seeks a Security Architect to enhance the security of its Snowflake-based data platform on Microsoft Azure. The role focuses on designing security architectures, implementing security measures, and ensuring compliance while collaborating with engineers. With a strong emphasis on developing and maintaining secure practices, the ideal candidate will have expertise in Snowflake on Azure security as well as familiarity with DevSecOps principles. This position offers a hands-on approach in a collaborative team environment, striving for frictionless and compliant delivery.
Apr 15, 2026
Full time
A leading asset management firm based in Manchester seeks a Security Architect to enhance the security of its Snowflake-based data platform on Microsoft Azure. The role focuses on designing security architectures, implementing security measures, and ensuring compliance while collaborating with engineers. With a strong emphasis on developing and maintaining secure practices, the ideal candidate will have expertise in Snowflake on Azure security as well as familiarity with DevSecOps principles. This position offers a hands-on approach in a collaborative team environment, striving for frictionless and compliant delivery.
Wood Mackenzie is the global leader in analytics, insights and proprietary data across the entire energy and natural resources landscape.For over 50 years our work has guided the decisions of the world's most influential energy producers, utilities companies, financial institutions and governments.Now, with the world's energy system more complex and interconnected than ever before, sector-specific views are no longer enough. That's why we've redefined what's possible with Intelligence Connected.By fusing our unparalleled proprietary data with the sharpest analytical minds, all supercharged by Synoptic AI, we deliver a clear, interconnected view of the entire value chain. Our trusted team of 2,700 experts across 30 countries breaks siloes and connects industries, markets and regions across the globe.This empowers our customers to identify risk sooner, spot opportunities faster and recalibrate strategy with confidence - whether planning days, weeks, months or decades ahead.Wood Mackenzie Intelligence Connected Wood Mackenzie Values Position Overview We are seeking an experienced Cyber Security Lead Analyst to join our cyber security team. The ideal candidate will have a minimum of 5 years cyber security experience and 3+ years in cloud security and/or application security. The candidate will be able to demonstrate a proven track record of protecting enterprise environments against evolving cyber threats. This role requires a technically proficient lead analyst who can lead security initiatives and ensure our cloud and application infrastructure maintains the highest security standards, whilst maintaining business partnerships across the group. Key Responsibilities Monitor and analyze security events across cloud and on-premises environments using SIEM and security analytics tools Conduct thorough investigations of security incidents and provide detailed incident reports Develop and maintain incident response playbooks and procedures Experience with threat intelligence platforms and threat hunting Experience with security orchestration, automation and response (SOAR) platforms Understanding of data protection and encryption technologies Experience in regulated industries (financial services, healthcare, energy) Background in offensive security or penetration testing Design, implement, and maintain security controls across cloud platforms (AWS, Azure, GCP) Conduct cloud security assessments and architecture reviews Ensure compliance with cloud security best practices and frameworks (CIS Benchmarks, CSA CCM, NIST) Manage cloud-native security tools including CSPM, CWPP, and cloud WAF solutions Implement and maintain identity and access management (IAM) policies and controls Lead cyber security programs and coordinate remediation efforts Collaborate with DevOps teams to integrate security into CI/CD pipelines (DevSecOps) Stay current with emerging threats, vulnerabilities, and security technologies Contribute to security awareness training and documentation Facilitate Supplier Management and security input into bids Support compliance initiatives (SOC 2, ISO 27001, PCI-DSS, GDPR, etc.) Develop and enforce security policies, standards, and procedures Conduct security audits and risk assessments Maintain security documentation and metrics reporting Required Qualifications 5+ years of experience in cybersecurity roles 3+ years of hands-on experience with cloud security (AWS, Azure, or GCP) Proven experience leading security incidents and coordinating response efforts Experience with security frameworks such as NIST CSF, MITRE ATT&CK, or Zero Trust architecture Technical Skills Strong expertise in cloud security services and tools (AWS & Azure) Experience working with SIEM platforms (Splunk, Sentinel) Understanding of network security, firewalls, IDS/IPS, and VPN technologies Familiarity with security testing tools (vulnerability scanners, SAST/DAST, penetration testing tools) Experience with endpoint detection and response (EDR) solutions Certifications (one or more preferred) CISSP (Certified Information Systems Security Professional) CCSP (Certified Cloud Security Professional) AWS Certified Security - Specialty Microsoft Certified: Azure Security Engineer Associate Soft Skills Strong analytical and problem-solving abilities Excellent written and verbal communication skills Ability to explain complex security concepts to technical and non-technical audiences Leadership capabilities and experience mentoring team members Strong attention to detail and ability to work under pressure Collaborative mindset with cross-functional teams Business Partnering experience Education Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience) Working Conditions Some flexibility for remote work - 2 days minimum in office (Edinburgh preferred) Equal Opportunities We are an equal opportunities employer. This means we are committed to recruiting the best people regardless of their race, colour, religion, age, sex, national origin, disability or protected veteran status. You can find out more about your rights under the law at If you are applying for a role and have a physical or mental disability, we will support you with your application or through the hiring process. Inclusive - we succeed together Trusting - we choose to trust each other Customer committed - we put customers at the heart of our decisions Future Focused - we accelerate change Curious - we turn knowledge into action
Apr 15, 2026
Full time
Wood Mackenzie is the global leader in analytics, insights and proprietary data across the entire energy and natural resources landscape.For over 50 years our work has guided the decisions of the world's most influential energy producers, utilities companies, financial institutions and governments.Now, with the world's energy system more complex and interconnected than ever before, sector-specific views are no longer enough. That's why we've redefined what's possible with Intelligence Connected.By fusing our unparalleled proprietary data with the sharpest analytical minds, all supercharged by Synoptic AI, we deliver a clear, interconnected view of the entire value chain. Our trusted team of 2,700 experts across 30 countries breaks siloes and connects industries, markets and regions across the globe.This empowers our customers to identify risk sooner, spot opportunities faster and recalibrate strategy with confidence - whether planning days, weeks, months or decades ahead.Wood Mackenzie Intelligence Connected Wood Mackenzie Values Position Overview We are seeking an experienced Cyber Security Lead Analyst to join our cyber security team. The ideal candidate will have a minimum of 5 years cyber security experience and 3+ years in cloud security and/or application security. The candidate will be able to demonstrate a proven track record of protecting enterprise environments against evolving cyber threats. This role requires a technically proficient lead analyst who can lead security initiatives and ensure our cloud and application infrastructure maintains the highest security standards, whilst maintaining business partnerships across the group. Key Responsibilities Monitor and analyze security events across cloud and on-premises environments using SIEM and security analytics tools Conduct thorough investigations of security incidents and provide detailed incident reports Develop and maintain incident response playbooks and procedures Experience with threat intelligence platforms and threat hunting Experience with security orchestration, automation and response (SOAR) platforms Understanding of data protection and encryption technologies Experience in regulated industries (financial services, healthcare, energy) Background in offensive security or penetration testing Design, implement, and maintain security controls across cloud platforms (AWS, Azure, GCP) Conduct cloud security assessments and architecture reviews Ensure compliance with cloud security best practices and frameworks (CIS Benchmarks, CSA CCM, NIST) Manage cloud-native security tools including CSPM, CWPP, and cloud WAF solutions Implement and maintain identity and access management (IAM) policies and controls Lead cyber security programs and coordinate remediation efforts Collaborate with DevOps teams to integrate security into CI/CD pipelines (DevSecOps) Stay current with emerging threats, vulnerabilities, and security technologies Contribute to security awareness training and documentation Facilitate Supplier Management and security input into bids Support compliance initiatives (SOC 2, ISO 27001, PCI-DSS, GDPR, etc.) Develop and enforce security policies, standards, and procedures Conduct security audits and risk assessments Maintain security documentation and metrics reporting Required Qualifications 5+ years of experience in cybersecurity roles 3+ years of hands-on experience with cloud security (AWS, Azure, or GCP) Proven experience leading security incidents and coordinating response efforts Experience with security frameworks such as NIST CSF, MITRE ATT&CK, or Zero Trust architecture Technical Skills Strong expertise in cloud security services and tools (AWS & Azure) Experience working with SIEM platforms (Splunk, Sentinel) Understanding of network security, firewalls, IDS/IPS, and VPN technologies Familiarity with security testing tools (vulnerability scanners, SAST/DAST, penetration testing tools) Experience with endpoint detection and response (EDR) solutions Certifications (one or more preferred) CISSP (Certified Information Systems Security Professional) CCSP (Certified Cloud Security Professional) AWS Certified Security - Specialty Microsoft Certified: Azure Security Engineer Associate Soft Skills Strong analytical and problem-solving abilities Excellent written and verbal communication skills Ability to explain complex security concepts to technical and non-technical audiences Leadership capabilities and experience mentoring team members Strong attention to detail and ability to work under pressure Collaborative mindset with cross-functional teams Business Partnering experience Education Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience) Working Conditions Some flexibility for remote work - 2 days minimum in office (Edinburgh preferred) Equal Opportunities We are an equal opportunities employer. This means we are committed to recruiting the best people regardless of their race, colour, religion, age, sex, national origin, disability or protected veteran status. You can find out more about your rights under the law at If you are applying for a role and have a physical or mental disability, we will support you with your application or through the hiring process. Inclusive - we succeed together Trusting - we choose to trust each other Customer committed - we put customers at the heart of our decisions Future Focused - we accelerate change Curious - we turn knowledge into action
We're proud to be trusted by some of the largest companies in the world to handle their Salesforce DevOps. Underpinning that trust is a commitment to protect their data through our modern approach to security and compliance, and this is only getting more important as we grow our customer base in increasingly regulated sectors. This is a fantastic opportunity to progress your career in security and compliance within the tech sector. This role will provide you with exposure to several key areas including information security, data protection, general compliance, audits and relevant project work. There'll be lots of opportunity to progress within the role and specialise within a certain area of the business in the future. What's the opportunity at Gearset? Own our security and compliance documentation accurate and up to date, such as policies, procedures, and support documentation across our information security and compliance programs. Support our commercial teams in complex information security and compliance negotiations, while making sure we respond accurately and within given timescales. Take ownership of maintaining our current ISO 27001 compliance and certification through continuous improvement activities, as well as supporting preparation for internal and external audits. Own our internal Data Protection compliance program and make sure we comply with various regulations globally including UK GDPR, EU GDPR, and CCPA. Gain experience in the implementation and ownership of additional compliance based projects as we increase the international regulation and standards we comply with. Help us work efficiently by identifying common deal blockers and standardising documentation and processes. What you'll achieve You'll build on your prior experience from a GRC or an information security role, within a technology company, to support our ambitious company growth plans. You'll become a technical expert on the company and our products to streamline customer onboarding, and security and compliance reviews. You'll own reviewing and responding to our complex customer security and compliance requests. You'll have ownership of compliance and reporting to the international information security standard ISO 27001, to ensure Gearset retains our certification and continues to provide the highest level of protection to our customers' data. You'll own our internal Data Protection compliance program and make sure we comply with various regulations globally including UK GDPR, EU GDPR, CCPA. You'll manage out third party supplier risk program. You'll work as part of the compliance project team when implementing new regulations or standards such as NIST, fedRAMP etc. You'll have the opportunity to get certified to international standards on Information Security, Compliance, Risk, Data Protection or Cyber Security. About you Have been in an information security or GRC role, within a technology company and hold either a ISO 27001 Lead Implementer or Lead Auditor certificate. Have in-depth knowledge of ISO 27001 standards & proven experience in implementing ISO 27001 and maintaining the certification. Along with knowledge of general compliance requirements such as Modern Slavery, AML, Bribery etc. Have a track record of owning internal compliance with global data protection laws including GDPR and CCPA. Have an understanding of AWS Cloud infrastructure, and application security. Possess a technical predisposition, the desire to learn and ability to react to the needs of a rapidly growing company eg comfortable working in an ever changing environment. Are an excellent communicator, with attention to detail and a passion for always delivering a great customer experience. Great to haves A degree in Computer Science, Information Security, Cybersecurity, or a closely related discipline such as Data Protection, Information Governance or Risk. A recognised Information Security qualification such as CISSP, CompTIA Security+ etc. Past exposure to other regulations or frameworks such as NIST, HIPAA, fedRAMP, DORA. Knowledge of DevOps and DevSecOps. Benefits (the stuff you'd expect!) This role is based in our Cambridge office but with the flexibility to work from home when you need to. Opportunity to join our Long Term Incentive scheme. Generous personal development budget for courses, conferences, or whatever is useful to your professional development in the role of up to £1500 per year. Top end hardware provided. Free lunch any day you are in the office. BUPA health care. Life Insurance & critical illness cover. Discounted gym membership, as well as a range of health and wellness benefits.
Apr 15, 2026
Full time
We're proud to be trusted by some of the largest companies in the world to handle their Salesforce DevOps. Underpinning that trust is a commitment to protect their data through our modern approach to security and compliance, and this is only getting more important as we grow our customer base in increasingly regulated sectors. This is a fantastic opportunity to progress your career in security and compliance within the tech sector. This role will provide you with exposure to several key areas including information security, data protection, general compliance, audits and relevant project work. There'll be lots of opportunity to progress within the role and specialise within a certain area of the business in the future. What's the opportunity at Gearset? Own our security and compliance documentation accurate and up to date, such as policies, procedures, and support documentation across our information security and compliance programs. Support our commercial teams in complex information security and compliance negotiations, while making sure we respond accurately and within given timescales. Take ownership of maintaining our current ISO 27001 compliance and certification through continuous improvement activities, as well as supporting preparation for internal and external audits. Own our internal Data Protection compliance program and make sure we comply with various regulations globally including UK GDPR, EU GDPR, and CCPA. Gain experience in the implementation and ownership of additional compliance based projects as we increase the international regulation and standards we comply with. Help us work efficiently by identifying common deal blockers and standardising documentation and processes. What you'll achieve You'll build on your prior experience from a GRC or an information security role, within a technology company, to support our ambitious company growth plans. You'll become a technical expert on the company and our products to streamline customer onboarding, and security and compliance reviews. You'll own reviewing and responding to our complex customer security and compliance requests. You'll have ownership of compliance and reporting to the international information security standard ISO 27001, to ensure Gearset retains our certification and continues to provide the highest level of protection to our customers' data. You'll own our internal Data Protection compliance program and make sure we comply with various regulations globally including UK GDPR, EU GDPR, CCPA. You'll manage out third party supplier risk program. You'll work as part of the compliance project team when implementing new regulations or standards such as NIST, fedRAMP etc. You'll have the opportunity to get certified to international standards on Information Security, Compliance, Risk, Data Protection or Cyber Security. About you Have been in an information security or GRC role, within a technology company and hold either a ISO 27001 Lead Implementer or Lead Auditor certificate. Have in-depth knowledge of ISO 27001 standards & proven experience in implementing ISO 27001 and maintaining the certification. Along with knowledge of general compliance requirements such as Modern Slavery, AML, Bribery etc. Have a track record of owning internal compliance with global data protection laws including GDPR and CCPA. Have an understanding of AWS Cloud infrastructure, and application security. Possess a technical predisposition, the desire to learn and ability to react to the needs of a rapidly growing company eg comfortable working in an ever changing environment. Are an excellent communicator, with attention to detail and a passion for always delivering a great customer experience. Great to haves A degree in Computer Science, Information Security, Cybersecurity, or a closely related discipline such as Data Protection, Information Governance or Risk. A recognised Information Security qualification such as CISSP, CompTIA Security+ etc. Past exposure to other regulations or frameworks such as NIST, HIPAA, fedRAMP, DORA. Knowledge of DevOps and DevSecOps. Benefits (the stuff you'd expect!) This role is based in our Cambridge office but with the flexibility to work from home when you need to. Opportunity to join our Long Term Incentive scheme. Generous personal development budget for courses, conferences, or whatever is useful to your professional development in the role of up to £1500 per year. Top end hardware provided. Free lunch any day you are in the office. BUPA health care. Life Insurance & critical illness cover. Discounted gym membership, as well as a range of health and wellness benefits.
At Kroo Bank, we are charting the future of banking with our groundbreaking technological innovations and unique digital services. The rapid advancements in the fintech sector necessitate ongoing evolution in the roles and responsibilities of our bank to effectively tackle new business opportunities and challenges. We are dedicated to consistently updating our job descriptions to ensure we continue to lead in banking innovation. How you will contribute and key responsibilities: As a Senior Security Engineer, you will be instrumental in designing and implementing security measures for our mobile applications, services, and websites to meet the highest security standards. Your expertise will help us continuously analyse and improve our security systems, ensuring that our products and services are not only secure by design but also comply with internal and external regulatory requirements. Other responsibilities include: Security Analysis and Improvement: Continuously analyse our security systems for potential improvements, ensuring that our defences remain at the forefront of cybersecurity practices. Vulnerability Management: Proactively identify, assess, and remediate security vulnerabilities to maintain the integrity and confidentiality of our customer data. Security Automation: Automate security processes and procedures to enhance efficiency and effectiveness, reducing the risk of human error. Security Requirements and Solutions: Identify, define, and document system security requirements, providing well-considered recommendations to management. Development of Security Standards: Develop and maintain best practices and security standards for the organisation, guiding teams in the implementation of secure coding practices. Secure Design: Collaborate with development teams to ensure that web and mobile front-ends, as well as microservice architectures, are designed with robust security measures in mind. Cloud security and secure infrastructure: Assist teams in diagnosing and addressing gaps in infrastructure security, aligning the organisation with industry security posture standards. Cybersecurity Collaboration: Work closely with stakeholders across the organisation to align security measures with our overarching cybersecurity strategy and protect the bank's technology infrastructure. Regulatory Compliance: Support teams in meeting compliance requirements for internal audits and external regulators, safeguarding against potential fines and reputational damage. To be successful in this role you should have skills and experience in multiple domains, such as application security, network security or security operations. You need to have programming experience and the ability to proactively seek out efficient and repetitive solutions to security challenges. At a minimum, you should have at least 3 years of experience in system, network or application security. You should also have a proven experience and knowledge with any combination of the following: Threat modelling and risk assessments, Working knowledge of secure coding principles (OWASP and OWASP mobile, SANS ), Experience with designing and administering identity management (authentication and authorisation including policy enforcement points, token services, protocols such as OAuth2), Working knowledge of cryptography including encryption, signing and digital certificates, Principles of securing mobile applications and web services, Docker or kubernetes and infrastructure as code, Event driven streaming technologies, Logging and monitoring, networks, firewalls, load balancers, DNS, CDNs, Working knowledge of agile DevSecOps environments, and CI/CD (Git, Concourse, Terraform), Working knowledge of SAST, DAST, RASP, and IAST tools and building security into existing SDLC processes, Knowledge of cloud Security Architecture of public clouds (such as AWS or GCP), Security certification such as CISSP, CCP, SANS, GAIC, Ethical Hacker, Experience in working in regulated company, preferably with a FinTech/ banking background and experience in DevOps, Excellent oral, written communication and presentation skills. What we offer: At our cutting-edge fintech company, we know that attracting and retaining the best talent means offering top-notch benefits that help our employees thrive both in and outside of work. Check out what we currently offer: Generous holiday time: 25 days annual leave, 8 bank holidays, 1 Kroo bank holiday (June 24th), and 1 day off during the week of your birthday. Personal days: We know that life can be unpredictable, so we offer 3 personal days to use as needed. Employer-sponsored volunteer program: We're passionate about giving back to our community, and we support our employees in doing the same with up to 4 hours per month of employer-sponsored volunteer time. Mental health support: We care about the mental health of our team members and offer access to Spill, our mental health support partner. Workplace pension: We want you to feel secure about your future, so we offer a workplace pension with a 5% employee contribution and a 3% employer top-up. Learning and development: After 1 year of service, you'll have access to £500 from the Kroo Learning Fund to invest in your career development. Top-notch equipment: We provide top-of-the-line equipment necessary for smooth hybrid work, including a MacBook laptop. Additionally, we also offer support in establishing your home office by contributing towards your setup if required. Modern office: When you're in the office, you'll enjoy access to our modern, bustling workspace in Farringdon, Central London. Cycle to Work scheme: We encourage sustainable transportation with our Cycle to Work scheme. Electric Car scheme: We're committed to reducing our carbon footprint, and our Electric Car scheme makes it easy for our employees to do the same. Enhanced parental leave: We know that family comes first, and we offer an enhanced parental leave policy to support our employees in starting and growing their families. You get full healthcare for you and your nuclear family via Vitality. Hybrid Working: At Kroo Bank, we have a hybrid policy that gives both individuals and teams a lot of freedom when it comes to using the office space to boost productivity. Our London office is a great resource when used effectively. So, employees who can occasionally come to the office are a good fit for how we work right now. Keep in mind that this job involves working from Monday to Friday, with a mix of remote and office work, so you won't need to be on-site all the time. Diversity and Inclusion: We wholeheartedly uphold our commitment to fostering a diverse and inclusive workplace. Every employee is highly regarded, respected, and supported without any form of judgement or prejudice. We consider Diversity, Equality, and Inclusion as fundamental pillars guiding our path in all aspects of our bank. We also ensure that reasonable adjustments are made available to all candidates throughout the recruitment process. To all Recruitment Agencies: At Kroo Bank, agency resumes are strictly prohibited. Do not submit agency resumes or forward them to our job advertisements or Kroo Bank employees. Be aware that Kroo Bank will not assume any responsibility for fees incurred due to unsolicited resumes. To ensure a fair and efficient application process, all candidates are kindly requested to submit their applications directly through the advertised platform. We kindly ask that you refrain from reaching out to the company or its employees via email, LinkedIn, or any other communication channels for inquiries or updates. Please note that any attempts to contact us through these channels will not receive a response. Thank you for your understanding and cooperation.
Apr 15, 2026
Full time
At Kroo Bank, we are charting the future of banking with our groundbreaking technological innovations and unique digital services. The rapid advancements in the fintech sector necessitate ongoing evolution in the roles and responsibilities of our bank to effectively tackle new business opportunities and challenges. We are dedicated to consistently updating our job descriptions to ensure we continue to lead in banking innovation. How you will contribute and key responsibilities: As a Senior Security Engineer, you will be instrumental in designing and implementing security measures for our mobile applications, services, and websites to meet the highest security standards. Your expertise will help us continuously analyse and improve our security systems, ensuring that our products and services are not only secure by design but also comply with internal and external regulatory requirements. Other responsibilities include: Security Analysis and Improvement: Continuously analyse our security systems for potential improvements, ensuring that our defences remain at the forefront of cybersecurity practices. Vulnerability Management: Proactively identify, assess, and remediate security vulnerabilities to maintain the integrity and confidentiality of our customer data. Security Automation: Automate security processes and procedures to enhance efficiency and effectiveness, reducing the risk of human error. Security Requirements and Solutions: Identify, define, and document system security requirements, providing well-considered recommendations to management. Development of Security Standards: Develop and maintain best practices and security standards for the organisation, guiding teams in the implementation of secure coding practices. Secure Design: Collaborate with development teams to ensure that web and mobile front-ends, as well as microservice architectures, are designed with robust security measures in mind. Cloud security and secure infrastructure: Assist teams in diagnosing and addressing gaps in infrastructure security, aligning the organisation with industry security posture standards. Cybersecurity Collaboration: Work closely with stakeholders across the organisation to align security measures with our overarching cybersecurity strategy and protect the bank's technology infrastructure. Regulatory Compliance: Support teams in meeting compliance requirements for internal audits and external regulators, safeguarding against potential fines and reputational damage. To be successful in this role you should have skills and experience in multiple domains, such as application security, network security or security operations. You need to have programming experience and the ability to proactively seek out efficient and repetitive solutions to security challenges. At a minimum, you should have at least 3 years of experience in system, network or application security. You should also have a proven experience and knowledge with any combination of the following: Threat modelling and risk assessments, Working knowledge of secure coding principles (OWASP and OWASP mobile, SANS ), Experience with designing and administering identity management (authentication and authorisation including policy enforcement points, token services, protocols such as OAuth2), Working knowledge of cryptography including encryption, signing and digital certificates, Principles of securing mobile applications and web services, Docker or kubernetes and infrastructure as code, Event driven streaming technologies, Logging and monitoring, networks, firewalls, load balancers, DNS, CDNs, Working knowledge of agile DevSecOps environments, and CI/CD (Git, Concourse, Terraform), Working knowledge of SAST, DAST, RASP, and IAST tools and building security into existing SDLC processes, Knowledge of cloud Security Architecture of public clouds (such as AWS or GCP), Security certification such as CISSP, CCP, SANS, GAIC, Ethical Hacker, Experience in working in regulated company, preferably with a FinTech/ banking background and experience in DevOps, Excellent oral, written communication and presentation skills. What we offer: At our cutting-edge fintech company, we know that attracting and retaining the best talent means offering top-notch benefits that help our employees thrive both in and outside of work. Check out what we currently offer: Generous holiday time: 25 days annual leave, 8 bank holidays, 1 Kroo bank holiday (June 24th), and 1 day off during the week of your birthday. Personal days: We know that life can be unpredictable, so we offer 3 personal days to use as needed. Employer-sponsored volunteer program: We're passionate about giving back to our community, and we support our employees in doing the same with up to 4 hours per month of employer-sponsored volunteer time. Mental health support: We care about the mental health of our team members and offer access to Spill, our mental health support partner. Workplace pension: We want you to feel secure about your future, so we offer a workplace pension with a 5% employee contribution and a 3% employer top-up. Learning and development: After 1 year of service, you'll have access to £500 from the Kroo Learning Fund to invest in your career development. Top-notch equipment: We provide top-of-the-line equipment necessary for smooth hybrid work, including a MacBook laptop. Additionally, we also offer support in establishing your home office by contributing towards your setup if required. Modern office: When you're in the office, you'll enjoy access to our modern, bustling workspace in Farringdon, Central London. Cycle to Work scheme: We encourage sustainable transportation with our Cycle to Work scheme. Electric Car scheme: We're committed to reducing our carbon footprint, and our Electric Car scheme makes it easy for our employees to do the same. Enhanced parental leave: We know that family comes first, and we offer an enhanced parental leave policy to support our employees in starting and growing their families. You get full healthcare for you and your nuclear family via Vitality. Hybrid Working: At Kroo Bank, we have a hybrid policy that gives both individuals and teams a lot of freedom when it comes to using the office space to boost productivity. Our London office is a great resource when used effectively. So, employees who can occasionally come to the office are a good fit for how we work right now. Keep in mind that this job involves working from Monday to Friday, with a mix of remote and office work, so you won't need to be on-site all the time. Diversity and Inclusion: We wholeheartedly uphold our commitment to fostering a diverse and inclusive workplace. Every employee is highly regarded, respected, and supported without any form of judgement or prejudice. We consider Diversity, Equality, and Inclusion as fundamental pillars guiding our path in all aspects of our bank. We also ensure that reasonable adjustments are made available to all candidates throughout the recruitment process. To all Recruitment Agencies: At Kroo Bank, agency resumes are strictly prohibited. Do not submit agency resumes or forward them to our job advertisements or Kroo Bank employees. Be aware that Kroo Bank will not assume any responsibility for fees incurred due to unsolicited resumes. To ensure a fair and efficient application process, all candidates are kindly requested to submit their applications directly through the advertised platform. We kindly ask that you refrain from reaching out to the company or its employees via email, LinkedIn, or any other communication channels for inquiries or updates. Please note that any attempts to contact us through these channels will not receive a response. Thank you for your understanding and cooperation.
We are looking to hire a new role and bring someone in as our Head of Product Security, a key leadership role within our Information Security team. In this role you will shape how Our Future Health builds secure, trusted products at national scale. You'll lead the security engineering and architecture functions, ensuring they provide clear and pragmatic guidance to product, engineering, and wider technical teams. Your work centres on embedding secure by design thinking, strengthening how the organisation understands and manages risk, and helping teams see security as an enabler that supports delivery rather than slowing it down. You'll also contribute hands on technical input to complex architectural decisions where your expertise adds real value. Alongside this strategic impact, you'll manage and develop a growing team, ensuring smooth day to day operations and a culture of continuous improvement. The role needs empathetic people leadership, exceptional stakeholder management, and the ability to influence across a fast moving, agile environment. With an engineering background and solid security architecture experience, you'll bring the technical credibility and collaborative approach needed to guide teams, shape priorities, and drive the future direction of product security. At Our Future Health, our mission is to transform the prevention,detectionand treatment of conditions such as dementia, cancer, diabetes, heart disease and stroke. We're looking for people to join us on our journey. If you're looking for a new challenge where you can contribute to helping future generations live in good health for longer, then we're keen to speak with you. What you'll be doing Acting as deputy to the Director of Information Security, supporting security strategy and leadership alongside the Head of Cyber Defence. Leading the security consultancy and technical security functions, covering core services such as IAM, vulnerability management, threat modelling, and secure base image maintenance. Serving as the primary contact for security consultancy, delegating work across the team as needed. Overseeing security architecture and engineering for our cloud native (Azure) production and corporate platforms. Driving continuous improvement, prioritising enhancements and maturing operational documentation. Line managing a multidisciplinary security team, including security engineers, application security specialists, and a security architect. Coaching and mentoring team members across all security disciplines. Advising product, engineering, and data squads on embedding security into their work and processes. Communicating security risks, threats, and requirements to both technical and non technical colleagues. Promoting security standardisation and consistency across platforms. Collaborating with technical and data architects on broader architectural decisions. Supporting organisational compliance by ensuring colleagues and contractors understand and meet their security responsibilities. What you won't be doing Working in a siloed environment with no freedom to make decisions. Working in a place where you can't see the impact your expertise makes. To succeed in this role you will be able to demonstrate some of the following skills and experience: Proven ability to manage and develop high performing security teams while fostering a collaborative, people centred environment. Demonstrable experience partnering with product teams to integrate security requirements into roadmaps, balancing security with usability and overall user experience. Previous experience working with DevSecOps or similar delivery models, embedding security in a way that supports rapid, iterative development. Experience designing secure cloud native architectures at both conceptual and detailed technical levels. Familiarity with Microsoft security technologies such as Defender, Sentinel, Entra, and Purview. An understanding of modern software engineering practices including source control, testing, code review, design documentation, and effective debugging. Advanced knowledge of security risk management and threat modelling. Solid understanding of core security controls, including cloud security, IAM, network security, and vulnerability management. Knowledge of modern cloud platforms, particularly Azure. Awareness of ISO 27001 and other widely used security standards. Comfortable working with Infrastructure as Code, ideally including Terraform. Experience working in Agile environments. The ability to communicate clearly between technical and non technical teams. Comfortable operating in a fast paced, small team environment. Relevant professional certifications. Salary from £110,000 per annum. Generous Pension Scheme - We invest in your future with employer contributions of up to 12%. 30 Days Holiday + Bank Holidays - Enjoy a generous holiday allowance with the flexibility to take bank holidays when it suits you. Enhanced Parental Leave - Supporting you during life's biggest moments. Cycle to Work Scheme - Save 25-39% on a new bike and accessories through salary sacrifice. Home & Tech Savings - Get up to 8% off on IKEA and Currys products, spreading the cost over 12 months through salary sacrifice £1,000 Employee Referral Bonus - Know someone amazing? Get rewarded for bringing them on board! Wellbeing Support - Access to Mental Health First Aiders, plus 24/7 online GP services and an Employee Assistance Programme for you and your family. A Great Place to Work - We have a lovely Central London office in Holborn, and offer flexible and remote working arrangements. Join us - let's prevent disease together. At Our Future Health, we recognise the importance of having a diverse workforce and ensuring that all candidates, regardless of their background, have equitable access to our application process. We proactively encourage applicants who identify as having a disability, neurodiversity, or long-term health conditions to let us know if they require any reasonable adjustments as part of their application process. If you do require any reasonable adjustments, please email us at
Apr 15, 2026
Full time
We are looking to hire a new role and bring someone in as our Head of Product Security, a key leadership role within our Information Security team. In this role you will shape how Our Future Health builds secure, trusted products at national scale. You'll lead the security engineering and architecture functions, ensuring they provide clear and pragmatic guidance to product, engineering, and wider technical teams. Your work centres on embedding secure by design thinking, strengthening how the organisation understands and manages risk, and helping teams see security as an enabler that supports delivery rather than slowing it down. You'll also contribute hands on technical input to complex architectural decisions where your expertise adds real value. Alongside this strategic impact, you'll manage and develop a growing team, ensuring smooth day to day operations and a culture of continuous improvement. The role needs empathetic people leadership, exceptional stakeholder management, and the ability to influence across a fast moving, agile environment. With an engineering background and solid security architecture experience, you'll bring the technical credibility and collaborative approach needed to guide teams, shape priorities, and drive the future direction of product security. At Our Future Health, our mission is to transform the prevention,detectionand treatment of conditions such as dementia, cancer, diabetes, heart disease and stroke. We're looking for people to join us on our journey. If you're looking for a new challenge where you can contribute to helping future generations live in good health for longer, then we're keen to speak with you. What you'll be doing Acting as deputy to the Director of Information Security, supporting security strategy and leadership alongside the Head of Cyber Defence. Leading the security consultancy and technical security functions, covering core services such as IAM, vulnerability management, threat modelling, and secure base image maintenance. Serving as the primary contact for security consultancy, delegating work across the team as needed. Overseeing security architecture and engineering for our cloud native (Azure) production and corporate platforms. Driving continuous improvement, prioritising enhancements and maturing operational documentation. Line managing a multidisciplinary security team, including security engineers, application security specialists, and a security architect. Coaching and mentoring team members across all security disciplines. Advising product, engineering, and data squads on embedding security into their work and processes. Communicating security risks, threats, and requirements to both technical and non technical colleagues. Promoting security standardisation and consistency across platforms. Collaborating with technical and data architects on broader architectural decisions. Supporting organisational compliance by ensuring colleagues and contractors understand and meet their security responsibilities. What you won't be doing Working in a siloed environment with no freedom to make decisions. Working in a place where you can't see the impact your expertise makes. To succeed in this role you will be able to demonstrate some of the following skills and experience: Proven ability to manage and develop high performing security teams while fostering a collaborative, people centred environment. Demonstrable experience partnering with product teams to integrate security requirements into roadmaps, balancing security with usability and overall user experience. Previous experience working with DevSecOps or similar delivery models, embedding security in a way that supports rapid, iterative development. Experience designing secure cloud native architectures at both conceptual and detailed technical levels. Familiarity with Microsoft security technologies such as Defender, Sentinel, Entra, and Purview. An understanding of modern software engineering practices including source control, testing, code review, design documentation, and effective debugging. Advanced knowledge of security risk management and threat modelling. Solid understanding of core security controls, including cloud security, IAM, network security, and vulnerability management. Knowledge of modern cloud platforms, particularly Azure. Awareness of ISO 27001 and other widely used security standards. Comfortable working with Infrastructure as Code, ideally including Terraform. Experience working in Agile environments. The ability to communicate clearly between technical and non technical teams. Comfortable operating in a fast paced, small team environment. Relevant professional certifications. Salary from £110,000 per annum. Generous Pension Scheme - We invest in your future with employer contributions of up to 12%. 30 Days Holiday + Bank Holidays - Enjoy a generous holiday allowance with the flexibility to take bank holidays when it suits you. Enhanced Parental Leave - Supporting you during life's biggest moments. Cycle to Work Scheme - Save 25-39% on a new bike and accessories through salary sacrifice. Home & Tech Savings - Get up to 8% off on IKEA and Currys products, spreading the cost over 12 months through salary sacrifice £1,000 Employee Referral Bonus - Know someone amazing? Get rewarded for bringing them on board! Wellbeing Support - Access to Mental Health First Aiders, plus 24/7 online GP services and an Employee Assistance Programme for you and your family. A Great Place to Work - We have a lovely Central London office in Holborn, and offer flexible and remote working arrangements. Join us - let's prevent disease together. At Our Future Health, we recognise the importance of having a diverse workforce and ensuring that all candidates, regardless of their background, have equitable access to our application process. We proactively encourage applicants who identify as having a disability, neurodiversity, or long-term health conditions to let us know if they require any reasonable adjustments as part of their application process. If you do require any reasonable adjustments, please email us at
The Deputy CISO is the CISO's principal delegate and second-in-command, accountable for day-to-day execution of the global cyber security program, team leadership and for elevating security influence across the enterprise. The role ensures cohesive strategy, robust operations, and clear business alignment in a complex logistics environment, including WMS/TMS platforms and warehouse robotics, IoT, and OT. The Deputy CISO strengthens succession planning, executive decision-making, and senior business partnering across the organisation. Operates in a global role, based at either of our UK corporate HQs (London or Northampton). Key Responsibilities: Strategy Support the CISO in translating the enterprise risk appetite into an actionable, outcome-driven security strategy; and support the multi-year roadmap and quarterly OKRs. Chair the executive security governance forums and drive enterprise security governance mechanisms. Architecture & Engineering Oversee Security Architecture and Engineering; ensure "secure-by-default" across cloud, application, data, identity, and infrastructure landscapes. Establish IDAM function with clear RACI and coherent operating model. Govern the security tooling strategy and operating model (build vs. buy vs. MSSP); maximize value from SIEM, SOAR, IAM, PAM, EDR, DLP, DSPM, and CTI platforms. Security Operations & Incident Response Accountable for SOC performance (24 7 detection, response, threat hunting), DFIR, purple-team/assurance, ransomware preparedness, and crisis playbooks. Maintain executive incident communications, regulator notifications, and post-incident improvements. Act as escalation point for any security related service failures or major incidents. Threat and Vulnerability Management Support the TVM team in continuously reducing vulnerability levels in the organisation. Recommend procedural improvements and reporting to drive constant improvement. Drive secure-by-design into applications and ensure all applications and the wider estate are sufficiently tested for signs of vulnerability. Governance, Risk & Compliance (GRC) Ensure audit readiness, control effectiveness (key SOX/ITGC, NIST/ISO mappings), and remediation governance; lead policy lifecycle and attestations. Oversee the enterprise risk process (RCSA, KRIs), executive reporting, and board risk briefings. Improve third-party risk management (carriers, 4PL/3PL partners, SaaS/IaaS providers) and regulatory alignment Business Partnering & PMO Ensure the Business Partnering function embeds security in product/platform roadmaps and regional operations (Americas/EMEA/APAC). Oversee the InfoSec PMO: portfolio selection, prioritization, benefits tracking, and transparent delivery reporting to business and technology leaders. People, Culture & Leadership Provide day-to-day management of InfoSec senior leaders (four directors/senior directors) and their teams; build succession paths, mentorship, and leadership development. Sponsor Security Awareness & Culture programs and executive engagement; promote inclusive, high-performance behaviors. The role has enterprise-wide accountability for the execution of the global cyber security program, ensuring effective risk management, operational resilience, and alignment with business strategy. It influences executive decision-making, enterprise risk posture, and regulatory outcomes across a complex global logistics environment. You will operate in a complex and evolving threat landscape, requiring continuous improvement of security processes, tooling, and operating models. You will address ambiguous and high-impact challenges across technology, risk, and business domains with enterprise-wide implications. The role engages extensively with the CISO, regulators, and senior business and technology leaders. It is responsible for executive-level incident communications, regulatory engagement, and influencing security outcomes across regions and functions. You will provide leadership to senior InfoSec leaders and their teams, supporting performance, development, and succession planning across the global security organisation. Experience and Qualifications Required: 15+ years in information security with progressive leadership; 8+ years leading multi-disciplinary teams across SecOps/IR, GRC, Engineering/Architecture and Business Partnering. Demonstrated success interfacing with boards/executive committees; executive incident leadership and public/regulatory communications. Deep experience in either GRC or technical cyber security. Experience in managing and leading global cross-functional and cross regional tech teams. Experience in Continuous improvement, six sigma or other improvement tools to drive business performance and create value Strong understanding and maturing of IT operating models in matrixed, global environments. Demonstrated success in driving technology standardization and transformation programs. Bachelor's degree in computer science, engineering, or a related field; advanced degree preferred. CISSP (or CISM) Other security certifications. Travel requirement - up to 20% GXO is a leading provider of cutting-edge supply chain solutions to the most successful companies in the world. We help our customers manage their goods most efficiently using our technology and services. Our greatest strength is our global team - energetic, innovative people of all experience levels and talents who make GXO a great place to work. GXO is an equal opportunity employer. We celebrate, support and thrive on diversity and are committed to creating an inclusive environment for all employees. We believe that diversity and inclusion in our business is critical to our success as a global company, and we seek to recruit, develop and retain the most talented people from a diverse candidate pool. We are an Armed Forces friendly organisation and Disability Confident Leader as part of the Disability Confident Scheme (GIS) and actively welcome applications from people with disabilities. The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All employees may be required to perform duties outside of their normal responsibilities from time to time, as needed. Review GXO's candidate privacy statement
Apr 15, 2026
Full time
The Deputy CISO is the CISO's principal delegate and second-in-command, accountable for day-to-day execution of the global cyber security program, team leadership and for elevating security influence across the enterprise. The role ensures cohesive strategy, robust operations, and clear business alignment in a complex logistics environment, including WMS/TMS platforms and warehouse robotics, IoT, and OT. The Deputy CISO strengthens succession planning, executive decision-making, and senior business partnering across the organisation. Operates in a global role, based at either of our UK corporate HQs (London or Northampton). Key Responsibilities: Strategy Support the CISO in translating the enterprise risk appetite into an actionable, outcome-driven security strategy; and support the multi-year roadmap and quarterly OKRs. Chair the executive security governance forums and drive enterprise security governance mechanisms. Architecture & Engineering Oversee Security Architecture and Engineering; ensure "secure-by-default" across cloud, application, data, identity, and infrastructure landscapes. Establish IDAM function with clear RACI and coherent operating model. Govern the security tooling strategy and operating model (build vs. buy vs. MSSP); maximize value from SIEM, SOAR, IAM, PAM, EDR, DLP, DSPM, and CTI platforms. Security Operations & Incident Response Accountable for SOC performance (24 7 detection, response, threat hunting), DFIR, purple-team/assurance, ransomware preparedness, and crisis playbooks. Maintain executive incident communications, regulator notifications, and post-incident improvements. Act as escalation point for any security related service failures or major incidents. Threat and Vulnerability Management Support the TVM team in continuously reducing vulnerability levels in the organisation. Recommend procedural improvements and reporting to drive constant improvement. Drive secure-by-design into applications and ensure all applications and the wider estate are sufficiently tested for signs of vulnerability. Governance, Risk & Compliance (GRC) Ensure audit readiness, control effectiveness (key SOX/ITGC, NIST/ISO mappings), and remediation governance; lead policy lifecycle and attestations. Oversee the enterprise risk process (RCSA, KRIs), executive reporting, and board risk briefings. Improve third-party risk management (carriers, 4PL/3PL partners, SaaS/IaaS providers) and regulatory alignment Business Partnering & PMO Ensure the Business Partnering function embeds security in product/platform roadmaps and regional operations (Americas/EMEA/APAC). Oversee the InfoSec PMO: portfolio selection, prioritization, benefits tracking, and transparent delivery reporting to business and technology leaders. People, Culture & Leadership Provide day-to-day management of InfoSec senior leaders (four directors/senior directors) and their teams; build succession paths, mentorship, and leadership development. Sponsor Security Awareness & Culture programs and executive engagement; promote inclusive, high-performance behaviors. The role has enterprise-wide accountability for the execution of the global cyber security program, ensuring effective risk management, operational resilience, and alignment with business strategy. It influences executive decision-making, enterprise risk posture, and regulatory outcomes across a complex global logistics environment. You will operate in a complex and evolving threat landscape, requiring continuous improvement of security processes, tooling, and operating models. You will address ambiguous and high-impact challenges across technology, risk, and business domains with enterprise-wide implications. The role engages extensively with the CISO, regulators, and senior business and technology leaders. It is responsible for executive-level incident communications, regulatory engagement, and influencing security outcomes across regions and functions. You will provide leadership to senior InfoSec leaders and their teams, supporting performance, development, and succession planning across the global security organisation. Experience and Qualifications Required: 15+ years in information security with progressive leadership; 8+ years leading multi-disciplinary teams across SecOps/IR, GRC, Engineering/Architecture and Business Partnering. Demonstrated success interfacing with boards/executive committees; executive incident leadership and public/regulatory communications. Deep experience in either GRC or technical cyber security. Experience in managing and leading global cross-functional and cross regional tech teams. Experience in Continuous improvement, six sigma or other improvement tools to drive business performance and create value Strong understanding and maturing of IT operating models in matrixed, global environments. Demonstrated success in driving technology standardization and transformation programs. Bachelor's degree in computer science, engineering, or a related field; advanced degree preferred. CISSP (or CISM) Other security certifications. Travel requirement - up to 20% GXO is a leading provider of cutting-edge supply chain solutions to the most successful companies in the world. We help our customers manage their goods most efficiently using our technology and services. Our greatest strength is our global team - energetic, innovative people of all experience levels and talents who make GXO a great place to work. GXO is an equal opportunity employer. We celebrate, support and thrive on diversity and are committed to creating an inclusive environment for all employees. We believe that diversity and inclusion in our business is critical to our success as a global company, and we seek to recruit, develop and retain the most talented people from a diverse candidate pool. We are an Armed Forces friendly organisation and Disability Confident Leader as part of the Disability Confident Scheme (GIS) and actively welcome applications from people with disabilities. The above statements are intended to describe the general nature and level of work being performed by people assigned to this classification. They are not intended to be construed as an exhaustive list of all responsibilities, duties, and skills required of personnel so classified. All employees may be required to perform duties outside of their normal responsibilities from time to time, as needed. Review GXO's candidate privacy statement
Company Overview Harness is the AI Software Delivery Platform company, led by technologist and entrepreneur Jyoti Bansal (founder of AppDynamics, acquired by Cisco for $3.7B). Harness has raised approximately $570M in funding and is valued at $5.5B, backed by leading investors including Goldman Sachs, Menlo Ventures, IVP, Unusual Ventures, Citi Ventures, and more. As AI accelerates code creation, the real bottleneck has shifted to everything after the code - testing, deployments, application security, reliability, compliance, and cost optimization. Harness brings AI and automation to this "outer loop," helping teams ship software faster while maintaining security and governance throughout the entire software delivery lifecycle. Powered by Harness AI and the Software Delivery Knowledge Graph, the Harness Platform applies deep context and intelligent automation across the software delivery lifecycle with governance and policy-driven controls embedded throughout the platform. Over the past year, Harness powered over 185M deployments, 82M builds, 18T flag evaluations, 8M security scans, 9.1B optimized tests, 3T protected API calls, and helped manage $2.8B in cloud spend - enabling customers like United Airlines, Morningstar, and Choice Hotels to accelerate releases by up to 75%, reduce cloud costs by up to 60%, and achieve 10x DevOps efficiency. With a global team across 14 offices and 25 countries, Harness is shaping the future of AI software delivery - and we're looking for exceptional talent to help us move even faster. Position Summary In this role, you will be working with internal and external stakeholders to architect, design and implement DevSecOps, FinOps and Engineering Excellence solutions for enterprise customers. You will have an opportunity to work with Harness Engineering and various customer functions, such as DevOps, SRE, Cloud, Finance and Engineering Analytics teams. You will develop best practices and automations to streamline Harness platform deployments in the most efficient, scalable, repeatable and reliable manner possible. We're a high-growth company on a once-in-a-lifetime journey to revolutionize engineering deployment tools & continuous delivery. About The Role Engage with our customer's technical teams to analyze and understand current DevSecOps/CI/CD/Policy & Template Governance tools and processes Architect and implement an optimized Harness setup for integration, scale, and repeatability Interface with the Customer's Executive and Leadership teams to understand the technical goals and business objectives related to their CI/CD process, design their Harness implementation to best fit those requirements, and correlate the technical success criteria to the business requirements Provide positive anecdotes from each engagement, craft best practices around Customer implementations, convert them into automation and create reference patterns Document and implement processes and solutions that are employed for onboarding success for the purpose of internal enablement Contribute to the product design, assist in the Harness Community, and for building out of an advanced technical knowledge base Consult on DevSecOps/CI/CD best practices, processes, solutions, etc. Interact with customers on a professional, meaningful and technically deep level Work closely with Pre-sales and Post-sales teams to ensure that Harness customers are successful and experience a high level of customer satisfaction with the Harness solution. About You BA/BS degree in CS or Computer Engineering-related field with 3+ years of relevant experience 3+ Experience with DevOps and including some multiple of the following solutions preferred: Kubernetes, Jenkins, GitHub, Gitlab, Bamboo, TeamCity, TravisCI, Bitbucket, Jira, ServiceNow, Helm, Kustomize, PCF, OpenShift, AWS, GCP, Azure, Terraform, CloudFormation, Linux, Python, Bash, Powershell, AppDynamics, New Relic, Dynatrace, Instana, Prometheus, ELK, Splunk, Sumo Logic, etc. Experience delivering custom solutions to customers of all sizes, whether internal or external (external customer-facing experience a plus). You are a perpetual learner, thrive in a team setting, enjoy sharing your experience and solutions, consistently pursuing excellence and success in all your tasks, detail-oriented and analytical, with excellent written and verbal communication skills. Results-driven individual with a hunger for accomplishing in fast paced environments and a knack for optimizing processes Willingness to travel up to 25% Work Location Hybrid from our London office. Travel required up to 25%. Harness In The News Accelerating Our Mission to Bring AI to Everything After Code Goldman Sachs leads investment in software delivery startup Harness at $5.5 billion valuation How Harness runs 16 "startups within a startup" at scale Jyoti Bansal Harness Research Shows AI Visibility Crisis Fueling Security Nightmare Harness has been named to the Inc. Power Partner list for software delivery success All qualified applicants will receive consideration for employment without regard to race, color, religion, sex or national origin. Note on Fraudulent Recruiting/Offers We have become aware that there may be fraudulent recruiting attempts being made by people posing as representatives of Harness. These scams may involve fake job postings, unsolicited emails, or messages claiming to be from our recruiters or hiring managers. Please note, we do not ask for sensitive or financial information via chat, text, or social media, and any email communications will come from the Additionally, Harness will never ask for any payment, fee to be paid, or purchases to be made by a job applicant. All applicants are encouraged to apply directly to our open jobs via our website. Interviews are generally conducted via Zoom video conference unless the candidate requests other accommodations. If you believe that you have been the target of an interview/offer scam by someone posing as a representative of Harness, please do not provide any personal or financial information and contact us immediately at . You can also find additional information about this type of scam and report any fraudulent employment offers via the Federal Trade Commission's website (), or you can contact your local law enforcement agency.
Apr 14, 2026
Full time
Company Overview Harness is the AI Software Delivery Platform company, led by technologist and entrepreneur Jyoti Bansal (founder of AppDynamics, acquired by Cisco for $3.7B). Harness has raised approximately $570M in funding and is valued at $5.5B, backed by leading investors including Goldman Sachs, Menlo Ventures, IVP, Unusual Ventures, Citi Ventures, and more. As AI accelerates code creation, the real bottleneck has shifted to everything after the code - testing, deployments, application security, reliability, compliance, and cost optimization. Harness brings AI and automation to this "outer loop," helping teams ship software faster while maintaining security and governance throughout the entire software delivery lifecycle. Powered by Harness AI and the Software Delivery Knowledge Graph, the Harness Platform applies deep context and intelligent automation across the software delivery lifecycle with governance and policy-driven controls embedded throughout the platform. Over the past year, Harness powered over 185M deployments, 82M builds, 18T flag evaluations, 8M security scans, 9.1B optimized tests, 3T protected API calls, and helped manage $2.8B in cloud spend - enabling customers like United Airlines, Morningstar, and Choice Hotels to accelerate releases by up to 75%, reduce cloud costs by up to 60%, and achieve 10x DevOps efficiency. With a global team across 14 offices and 25 countries, Harness is shaping the future of AI software delivery - and we're looking for exceptional talent to help us move even faster. Position Summary In this role, you will be working with internal and external stakeholders to architect, design and implement DevSecOps, FinOps and Engineering Excellence solutions for enterprise customers. You will have an opportunity to work with Harness Engineering and various customer functions, such as DevOps, SRE, Cloud, Finance and Engineering Analytics teams. You will develop best practices and automations to streamline Harness platform deployments in the most efficient, scalable, repeatable and reliable manner possible. We're a high-growth company on a once-in-a-lifetime journey to revolutionize engineering deployment tools & continuous delivery. About The Role Engage with our customer's technical teams to analyze and understand current DevSecOps/CI/CD/Policy & Template Governance tools and processes Architect and implement an optimized Harness setup for integration, scale, and repeatability Interface with the Customer's Executive and Leadership teams to understand the technical goals and business objectives related to their CI/CD process, design their Harness implementation to best fit those requirements, and correlate the technical success criteria to the business requirements Provide positive anecdotes from each engagement, craft best practices around Customer implementations, convert them into automation and create reference patterns Document and implement processes and solutions that are employed for onboarding success for the purpose of internal enablement Contribute to the product design, assist in the Harness Community, and for building out of an advanced technical knowledge base Consult on DevSecOps/CI/CD best practices, processes, solutions, etc. Interact with customers on a professional, meaningful and technically deep level Work closely with Pre-sales and Post-sales teams to ensure that Harness customers are successful and experience a high level of customer satisfaction with the Harness solution. About You BA/BS degree in CS or Computer Engineering-related field with 3+ years of relevant experience 3+ Experience with DevOps and including some multiple of the following solutions preferred: Kubernetes, Jenkins, GitHub, Gitlab, Bamboo, TeamCity, TravisCI, Bitbucket, Jira, ServiceNow, Helm, Kustomize, PCF, OpenShift, AWS, GCP, Azure, Terraform, CloudFormation, Linux, Python, Bash, Powershell, AppDynamics, New Relic, Dynatrace, Instana, Prometheus, ELK, Splunk, Sumo Logic, etc. Experience delivering custom solutions to customers of all sizes, whether internal or external (external customer-facing experience a plus). You are a perpetual learner, thrive in a team setting, enjoy sharing your experience and solutions, consistently pursuing excellence and success in all your tasks, detail-oriented and analytical, with excellent written and verbal communication skills. Results-driven individual with a hunger for accomplishing in fast paced environments and a knack for optimizing processes Willingness to travel up to 25% Work Location Hybrid from our London office. Travel required up to 25%. Harness In The News Accelerating Our Mission to Bring AI to Everything After Code Goldman Sachs leads investment in software delivery startup Harness at $5.5 billion valuation How Harness runs 16 "startups within a startup" at scale Jyoti Bansal Harness Research Shows AI Visibility Crisis Fueling Security Nightmare Harness has been named to the Inc. Power Partner list for software delivery success All qualified applicants will receive consideration for employment without regard to race, color, religion, sex or national origin. Note on Fraudulent Recruiting/Offers We have become aware that there may be fraudulent recruiting attempts being made by people posing as representatives of Harness. These scams may involve fake job postings, unsolicited emails, or messages claiming to be from our recruiters or hiring managers. Please note, we do not ask for sensitive or financial information via chat, text, or social media, and any email communications will come from the Additionally, Harness will never ask for any payment, fee to be paid, or purchases to be made by a job applicant. All applicants are encouraged to apply directly to our open jobs via our website. Interviews are generally conducted via Zoom video conference unless the candidate requests other accommodations. If you believe that you have been the target of an interview/offer scam by someone posing as a representative of Harness, please do not provide any personal or financial information and contact us immediately at . You can also find additional information about this type of scam and report any fraudulent employment offers via the Federal Trade Commission's website (), or you can contact your local law enforcement agency.
Job Description Role: Security Automation Engineer Location: Cheltenham Career Level: Specialist Please Note: Due to the nature of client work you will be undertaking, you will need to be willing to go through a Security Clearance process as part of this role, which requires 5+ years UK address history at the point of application Accenture is a leading global professional services company, providing a broad range of services in strategy and consulting, interactive, technology and operations, with digital capabilities across all of these services. With our thought leadership and culture of innovation, we apply industry expertise, diverse skill sets and next generation technology to each business challenge. We believe in inclusion and diversity and supporting the whole person. Our core values comprise of Stewardship, Best People, Client Value Creation, One Global Network, Respect for the Individual and Integrity. Year after year, Accenture is recognized worldwide not just for business performance but for inclusion and diversity too. "Across the globe, one thing is universally true of the people of Accenture: We care deeply about what we do and the impact we have with our clients and with the communities in which we work and live. It is personal to all of us." - Julie Sweet, Accenture CEO As a Security Automation Engineer: You will be responsible for developing and optimising Security Orchestration, Automation and Response (SOAR) toolsets. The Security Automation Engineer (SOAR) will drive the maturation of Accenture's Security Operation Centre (SOC) offerings, integrating security technologies and implementing automated workflows. The ideal candidate will approach problems with a security first mindset, and have a strong technical background in security operations or network / infrastructure engineering. Qualifications Hands on experience of developing playbooks with Security Orchestration, Automation and Response (SOAR) platforms, such as Palo Alto XSOAR, Splunk Phantom, Google SecOps SOAR, Microsoft Sentinel (Azure Logic Apps). Knowledge of interacting with REST APIs and webhooks (including authentication methods), and working with JSON / YAML data structures. Understanding of DevOps principles and orchestration toolsets. Working knowledge of at least one software development or scripting language, such as Python or PowerShell. Familiarity with the principles of public Cloud environments such as AWS or Azure, and knowledge of cloud native security controls. Strong general Cyber Security Knowledge. In-depth knowledge of common threats, attacker tools and techniques and MITRE ATT&CK is advantageous. Familiarity with functionality of common security toolsets (such as SIEM and EDR); previous experience in configuring or managing is advantageous. 2+ years' experience working within a Security Operations environment or similar. Collaborative and engaging approach to problem solving, and a willingness to work as part of the team. Passionate for diversity, recognising the innovation and competitive edge that comes from a diverse highly skilled team where equal opportunities are truly valued. A problem solver, always seeking the best solution for the right outcome. Self motivated, results focussed, pragmatic with the ability to manage conflicting deadlines and prioritise. Vendor certifications for Security Tooling (such as SOAR, SIEM, EDR) would be advantageous. Responsibilities Integrating SOAR platforms with technologies such as SIEM, EDR, Email gateways and ITSM. Development of playbooks within SOAR platforms (interactive workflows that enable efficient triage of security incidents). Development of scripts to automate processes and repetitive tasks. Manage the lifecycle of security content (playbooks, integrations, scripts) from development through to production. Produce and maintain technical design documentation relating to SOAR integrations. Engage directly with client stakeholders to capture requirements, and scope development activities. Work closely and collaboratively with internal project teams and engineers. Engage with SOAR vendors to provide feedback and drive product development roadmaps. Contribute to internal security working groups, advocating the adoption of SOAR and innovation within the discipline of Security Operations. What's in it for you At Accenture in addition to a competitive basic salary, you will also have an extensive benefits package which includes 25 days' vacation per year, private medical insurance and 3 extra days leave per year for charitable work of your choice! Flexibility and mobility are required to deliver this role as there may be requirements to spend time onsite with our clients and partners to enable delivery of the first class services we are known for. Accenture reserves the right to close the role should a suitable applicant be found. RROOTS . Closing date for applications 25/08/26. Locations Cheltenham Additional Information Equal Employment Opportunity Statement All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process. Accenture is committed to providing veteran employment opportunities to our service men and women. Please read Accenture's Recruiting and Hiring Statement for more information on how we process your data during the Recruiting and Hiring process. About Accenture We work with one shared purpose: to deliver on the promise of technology and human ingenuity. Every day, more than 775,000 of us help our stakeholders continuously reinvent. Together, we drive positive change and deliver value to our clients, partners, shareholders, communities, and each other. We believe that delivering value requires innovation, and innovation thrives in an inclusive and diverse environment. We actively foster a workplace free from bias, where everyone feels a sense of belonging and is respected and empowered to do their best work. At Accenture, we see well being holistically, supporting our people's physical, mental, and financial health. We also provide opportunities to keep skills relevant through certifications, learning, and diverse work experiences. We're proud to be consistently recognized as one of the World's Best Workplaces . Join Accenture to work at the heart of change. Visit us at .
Apr 14, 2026
Full time
Job Description Role: Security Automation Engineer Location: Cheltenham Career Level: Specialist Please Note: Due to the nature of client work you will be undertaking, you will need to be willing to go through a Security Clearance process as part of this role, which requires 5+ years UK address history at the point of application Accenture is a leading global professional services company, providing a broad range of services in strategy and consulting, interactive, technology and operations, with digital capabilities across all of these services. With our thought leadership and culture of innovation, we apply industry expertise, diverse skill sets and next generation technology to each business challenge. We believe in inclusion and diversity and supporting the whole person. Our core values comprise of Stewardship, Best People, Client Value Creation, One Global Network, Respect for the Individual and Integrity. Year after year, Accenture is recognized worldwide not just for business performance but for inclusion and diversity too. "Across the globe, one thing is universally true of the people of Accenture: We care deeply about what we do and the impact we have with our clients and with the communities in which we work and live. It is personal to all of us." - Julie Sweet, Accenture CEO As a Security Automation Engineer: You will be responsible for developing and optimising Security Orchestration, Automation and Response (SOAR) toolsets. The Security Automation Engineer (SOAR) will drive the maturation of Accenture's Security Operation Centre (SOC) offerings, integrating security technologies and implementing automated workflows. The ideal candidate will approach problems with a security first mindset, and have a strong technical background in security operations or network / infrastructure engineering. Qualifications Hands on experience of developing playbooks with Security Orchestration, Automation and Response (SOAR) platforms, such as Palo Alto XSOAR, Splunk Phantom, Google SecOps SOAR, Microsoft Sentinel (Azure Logic Apps). Knowledge of interacting with REST APIs and webhooks (including authentication methods), and working with JSON / YAML data structures. Understanding of DevOps principles and orchestration toolsets. Working knowledge of at least one software development or scripting language, such as Python or PowerShell. Familiarity with the principles of public Cloud environments such as AWS or Azure, and knowledge of cloud native security controls. Strong general Cyber Security Knowledge. In-depth knowledge of common threats, attacker tools and techniques and MITRE ATT&CK is advantageous. Familiarity with functionality of common security toolsets (such as SIEM and EDR); previous experience in configuring or managing is advantageous. 2+ years' experience working within a Security Operations environment or similar. Collaborative and engaging approach to problem solving, and a willingness to work as part of the team. Passionate for diversity, recognising the innovation and competitive edge that comes from a diverse highly skilled team where equal opportunities are truly valued. A problem solver, always seeking the best solution for the right outcome. Self motivated, results focussed, pragmatic with the ability to manage conflicting deadlines and prioritise. Vendor certifications for Security Tooling (such as SOAR, SIEM, EDR) would be advantageous. Responsibilities Integrating SOAR platforms with technologies such as SIEM, EDR, Email gateways and ITSM. Development of playbooks within SOAR platforms (interactive workflows that enable efficient triage of security incidents). Development of scripts to automate processes and repetitive tasks. Manage the lifecycle of security content (playbooks, integrations, scripts) from development through to production. Produce and maintain technical design documentation relating to SOAR integrations. Engage directly with client stakeholders to capture requirements, and scope development activities. Work closely and collaboratively with internal project teams and engineers. Engage with SOAR vendors to provide feedback and drive product development roadmaps. Contribute to internal security working groups, advocating the adoption of SOAR and innovation within the discipline of Security Operations. What's in it for you At Accenture in addition to a competitive basic salary, you will also have an extensive benefits package which includes 25 days' vacation per year, private medical insurance and 3 extra days leave per year for charitable work of your choice! Flexibility and mobility are required to deliver this role as there may be requirements to spend time onsite with our clients and partners to enable delivery of the first class services we are known for. Accenture reserves the right to close the role should a suitable applicant be found. RROOTS . Closing date for applications 25/08/26. Locations Cheltenham Additional Information Equal Employment Opportunity Statement All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process. Accenture is committed to providing veteran employment opportunities to our service men and women. Please read Accenture's Recruiting and Hiring Statement for more information on how we process your data during the Recruiting and Hiring process. About Accenture We work with one shared purpose: to deliver on the promise of technology and human ingenuity. Every day, more than 775,000 of us help our stakeholders continuously reinvent. Together, we drive positive change and deliver value to our clients, partners, shareholders, communities, and each other. We believe that delivering value requires innovation, and innovation thrives in an inclusive and diverse environment. We actively foster a workplace free from bias, where everyone feels a sense of belonging and is respected and empowered to do their best work. At Accenture, we see well being holistically, supporting our people's physical, mental, and financial health. We also provide opportunities to keep skills relevant through certifications, learning, and diverse work experiences. We're proud to be consistently recognized as one of the World's Best Workplaces . Join Accenture to work at the heart of change. Visit us at .
Security Architect - H&PS Location: Flexible: UK (With Client Travel) Career Level: Consultant Salary: Competitive Salary & Package (Dependent on Experience) Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside of the UK) at the point of application. This role also requires full British Nationality at point of application. Note: The above information relates to a specific client requirement As a team: We are one of the world's leading providers of data engineering. You'll work on innovative projects with colleagues to drive collaboration from strategy through to implementation. You will be using the latest technologies with clients to help them get to the next level. Do you want to work in an environment where you will be part of a thriving team working on the most complex security challenges in the UK health, public sector, Defence and Central Government. You'll learn, grow and advance in an innovative culture that thrives on shared success, diverse ways of thinking and enables boundaryless opportunities that can drive your career in new and exciting ways. If you're looking for a challenging career working in a vibrant environment with access to training and a global network of experts, this could be the role for you. As part of our global team, you'll be working with cutting edge technologies and will have the opportunity to develop a wide range of new skills on the job. What we are looking for: A motivated and technically grounded Junior Security Architect or Security Architect with experience designing, implementing, and maintaining secure systems and infrastructure. Possesses a solid foundation in security principles, threat modelling, and risk assessment, with growing expertise in translating business requirements into robust security architectures. Comfortable collaborating with cross functional teams including engineering, DevOps, and compliance. In our team you will learn: How to identify and deploy innovative security solutions to real world problems, across a variety of industries How to work with both clients and internal stakeholders, across a wide range of disciplines, providing expert input and influencing design of large and complex IT solutions How to apply a range of risk methodologies, advising both internal and external stakeholders on risk mitigations. How to work with a wide range of security technologies, including new and emerging technologies Get to work with leading technologies, experts, and industry leaders As a Security Consultant, you will: Design security architectures for a range of IT solutions, including large digital transformational programmes Provide advisory to wider complex transformation programmes that shape the future of the UK Advise clients on regulatory compliance (e.g., ISO 27001, NIST, GDPR, PCI DSS) Communicate to a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve challenging security problems via research and innovation Identify security vulnerabilities in system architectures and articulate these via risk terminology Security architecture design and review Threat modelling and risk assessment (e.g., STRIDE, DREAD, MITRE ATT&CK) Cloud security, including IAM, network segmentation, and encryption Network security principles including firewalls, VPNs, WAFs, and zero trust architecture Application security (OWASP Top 10, secure SDLC, code review) Security frameworks and standards (NIST, ISO 27001, CIS Benchmarks, SOC 2) Infrastructure as Code security (Terraform, CloudFormation) SIEM, logging, and monitoring tools (Splunk, Sentinel, ELK) Vulnerability management and penetration testing coordination What's in it for you At Accenture in addition to a competitive basic salary, you will also have an extensive benefits package which includes 30 days' vacation per year, private medical insurance and 3 extra days leave per year for charitable work of your choice! Flexibility and mobility are required to deliver this role as there may be requirements to spend time onsite with our clients and partners to enable delivery of the first class services we are known for. Closing Date for Applications: 30/04/2026 Accenture reserves the right to close the role prior to this date should a suitable applicant be found. Qualification We are looking for experience in the following skills: 2 5 years of progressive experience in cybersecurity, with at least 1 2 years in a architecture or design focused role. Prior experience in security engineering, infrastructure security, or application security is highly valued. Exposure to regulated industries (financial services, healthcare, government) is a plus. Experience with agile/DevSecOps environments and modern software delivery practices. Preferred certifications (one or more of the following preferred): CompTIA Security+ Certified Information Systems Security Professional (CISSP) - Associate level AWS Certified Security - Specialty / Azure Security Engineer Associate Certified Cloud Security Professional (CCSP) GIAC Security Essentials (GSEC) or GIAC certifications in a relevant domain TOGAF or SABSA (for architecture specific credentials) Locations London Birmingham Manchester Equal Employment Opportunity Statement All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process. Accenture is committed to providing veteran employment opportunities to our service men and women. Please read Accenture's Recruiting and Hiring Statement for more information on how we process your data during the Recruiting and Hiring process. About Accenture We work with one shared purpose: to deliver on the promise of technology and human ingenuity. Every day, more than 775,000 of us help our stakeholders continuously reinvent. Together, we drive positive change and deliver value to our clients, partners, shareholders, communities, and each other. We believe that delivering value requires innovation, and innovation thrives in an inclusive and diverse environment. We actively foster a workplace free from bias, where everyone feels a sense of belonging and is respected and empowered to do their best work. At Accenture, we see well being holistically, supporting our people's physical, mental, and financial health. We also provide opportunities to keep skills relevant through certifications, learning, and diverse work experiences. We're proud to be consistently recognized as one of the World's Best Workplaces . Join Accenture to work at the heart of change. Visit us at .
Apr 14, 2026
Full time
Security Architect - H&PS Location: Flexible: UK (With Client Travel) Career Level: Consultant Salary: Competitive Salary & Package (Dependent on Experience) Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside of the UK) at the point of application. This role also requires full British Nationality at point of application. Note: The above information relates to a specific client requirement As a team: We are one of the world's leading providers of data engineering. You'll work on innovative projects with colleagues to drive collaboration from strategy through to implementation. You will be using the latest technologies with clients to help them get to the next level. Do you want to work in an environment where you will be part of a thriving team working on the most complex security challenges in the UK health, public sector, Defence and Central Government. You'll learn, grow and advance in an innovative culture that thrives on shared success, diverse ways of thinking and enables boundaryless opportunities that can drive your career in new and exciting ways. If you're looking for a challenging career working in a vibrant environment with access to training and a global network of experts, this could be the role for you. As part of our global team, you'll be working with cutting edge technologies and will have the opportunity to develop a wide range of new skills on the job. What we are looking for: A motivated and technically grounded Junior Security Architect or Security Architect with experience designing, implementing, and maintaining secure systems and infrastructure. Possesses a solid foundation in security principles, threat modelling, and risk assessment, with growing expertise in translating business requirements into robust security architectures. Comfortable collaborating with cross functional teams including engineering, DevOps, and compliance. In our team you will learn: How to identify and deploy innovative security solutions to real world problems, across a variety of industries How to work with both clients and internal stakeholders, across a wide range of disciplines, providing expert input and influencing design of large and complex IT solutions How to apply a range of risk methodologies, advising both internal and external stakeholders on risk mitigations. How to work with a wide range of security technologies, including new and emerging technologies Get to work with leading technologies, experts, and industry leaders As a Security Consultant, you will: Design security architectures for a range of IT solutions, including large digital transformational programmes Provide advisory to wider complex transformation programmes that shape the future of the UK Advise clients on regulatory compliance (e.g., ISO 27001, NIST, GDPR, PCI DSS) Communicate to a wide range of stakeholders on secure design solutions and IT risk mitigation strategies Solve challenging security problems via research and innovation Identify security vulnerabilities in system architectures and articulate these via risk terminology Security architecture design and review Threat modelling and risk assessment (e.g., STRIDE, DREAD, MITRE ATT&CK) Cloud security, including IAM, network segmentation, and encryption Network security principles including firewalls, VPNs, WAFs, and zero trust architecture Application security (OWASP Top 10, secure SDLC, code review) Security frameworks and standards (NIST, ISO 27001, CIS Benchmarks, SOC 2) Infrastructure as Code security (Terraform, CloudFormation) SIEM, logging, and monitoring tools (Splunk, Sentinel, ELK) Vulnerability management and penetration testing coordination What's in it for you At Accenture in addition to a competitive basic salary, you will also have an extensive benefits package which includes 30 days' vacation per year, private medical insurance and 3 extra days leave per year for charitable work of your choice! Flexibility and mobility are required to deliver this role as there may be requirements to spend time onsite with our clients and partners to enable delivery of the first class services we are known for. Closing Date for Applications: 30/04/2026 Accenture reserves the right to close the role prior to this date should a suitable applicant be found. Qualification We are looking for experience in the following skills: 2 5 years of progressive experience in cybersecurity, with at least 1 2 years in a architecture or design focused role. Prior experience in security engineering, infrastructure security, or application security is highly valued. Exposure to regulated industries (financial services, healthcare, government) is a plus. Experience with agile/DevSecOps environments and modern software delivery practices. Preferred certifications (one or more of the following preferred): CompTIA Security+ Certified Information Systems Security Professional (CISSP) - Associate level AWS Certified Security - Specialty / Azure Security Engineer Associate Certified Cloud Security Professional (CCSP) GIAC Security Essentials (GSEC) or GIAC certifications in a relevant domain TOGAF or SABSA (for architecture specific credentials) Locations London Birmingham Manchester Equal Employment Opportunity Statement All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. Job candidates will not be obligated to disclose sealed or expunged records of conviction or arrest as part of the hiring process. Accenture is committed to providing veteran employment opportunities to our service men and women. Please read Accenture's Recruiting and Hiring Statement for more information on how we process your data during the Recruiting and Hiring process. About Accenture We work with one shared purpose: to deliver on the promise of technology and human ingenuity. Every day, more than 775,000 of us help our stakeholders continuously reinvent. Together, we drive positive change and deliver value to our clients, partners, shareholders, communities, and each other. We believe that delivering value requires innovation, and innovation thrives in an inclusive and diverse environment. We actively foster a workplace free from bias, where everyone feels a sense of belonging and is respected and empowered to do their best work. At Accenture, we see well being holistically, supporting our people's physical, mental, and financial health. We also provide opportunities to keep skills relevant through certifications, learning, and diverse work experiences. We're proud to be consistently recognized as one of the World's Best Workplaces . Join Accenture to work at the heart of change. Visit us at .