About us: We are champions of rail, inspired to build a greener, more sustainable future of travel. Trainline enables millions of travellers to find and book the best value tickets across carriers, fares, and journey options through our highly rated mobile app, website, and B2B partner channels. Great journeys start with Trainline Now Europe's number 1 downloaded rail app, with over 125 million monthly visits and £5.9 billion in annual ticket sales, we collaborate with 270+ rail and coach companies in over 40 countries. We want to create a world where travel is as simple, seamless, eco-friendly and affordable as it should be. Today, we're a FTSE 250 company driven by our incredible team of over 1,000 Trainliners from 50+ nationalities, based across London, Paris, Barcelona, Milan, Edinburgh and Madrid. With our focus on growth in the UK and Europe, now is the perfect time to join us on this high-speed journey. Introducing our Security Trainline is investing in the next evolution of our security program-and we're hiring a Principal Security Architect to lead our enterprise-wide architecture vision. This hybrid role sits at the intersection of corporate IT security and cloud-native product security, shaping strategy and execution across a complex, fast-moving environment. As part of Trainline's Information Security (InfoSec) team, reporting to the CISO, the Principal Security Architect you will define our Zero Trust architecture, embed secure-by-design thinking across engineering workflows, and partner with leaders across Platform, Engineering, Corporate Functions and GRC to uplift security maturity across both employee-facing and customer-facing systems. The Principal Security Architect will bring hands-on experience in technical design with proven ability to influence stakeholders-from IT and DevOps to Product Engineering and Compliance Teams. Joining at a key moment of expansion across the security team, you will have the ability to make immediate and visible impact on the mission-driven strategy of the team. As a Security Architect at Trainline, you will Define and own the enterprise-wide security architecture blueprint across corporate and product domains. Drive the Trainline Zero Trust initiative, spanning identity, device, network, and application layers. Lead secure design reviews and threat modelling for key product and infrastructure initiatives. Develop reference architectures and reusable security design patterns. Collaborate with the IAM Engineer to architect enterprise identity and access management Enforce secure configurations across SaaS, endpoint, and MDM platforms (e.g., CrowdStrike, Jamf, Intune). Evaluate and guide SaaS tool usage, integrations, and risk mitigation. Design and maintain DLP, insider threat, and device posture enforcement capabilities. Collaborate with product and platform engineering teams to embed security into the SDLC and CI/CD. Define security controls for cloud-native services in AWS (IAM, KMS, GuardDuty, VPC security, etc.). Contribute to secure API design, secrets management, service-to-service auth, and cloud segmentation. Provide architectural governance input into vendor risk, procurement reviews, and data privacy design. Provide input as the security architecture voice in planning meetings, engineering forums, and GRC efforts to ensure Security by Design. We'd love to hear from you if you have Proven experience in security roles, with a focus on architecture across both corporate and product domains. Demonstrable experience implementing Zero Trust in a cloud-first, SaaS-heavy environment. Strong knowledge of Cloud security architecture and tools (Preferably AWS). Experience with securing enterprise IT tools (O365, MDM, DLP, CASB). Familiarity with compliance frameworks (e.g., ISO 27001, PCI DSS, GDPR). Strong communication skills: equally comfortable in technical architecture forums and executive briefings. Strategic mindset with a bias for action and iterative delivery. Comfortable navigating ambiguity, competing priorities, and organisational scale-up challenges. More information: Enjoy fantastic perks like private healthcare & dental insurance, a generous work from abroad policy, 2-for-1 share purchase plans, an EV Scheme to further reduce carbon emissions, extra festive time off, and excellent family-friendly benefits. We prioritise career growth with clear career paths, transparent pay bands, personal learning budgets, and regular learning days. Jump on board and supercharge your career from day one! Our values represent the things that matter most to us and what we live and breathe everyday, in everything we do: Think Big - We're building the future of rail ️ Own It - We focus on every customer, partner and journey Travel Together - We're one team ️ Do Good - We make a positive impact We know that having a diverse team makes us better and helps us succeed. And we mean all forms of diversity - gender, ethnicity, sexuality, disability, nationality and diversity of thought. That's why we're committed to creating inclusive places to work, where everyone belongs and differences are valued and celebrated. Interested in finding out more about what it's like to work at Trainline? Why not check us out on LinkedIn , Instagram and Glassdoor !
Aug 13, 2025
Full time
About us: We are champions of rail, inspired to build a greener, more sustainable future of travel. Trainline enables millions of travellers to find and book the best value tickets across carriers, fares, and journey options through our highly rated mobile app, website, and B2B partner channels. Great journeys start with Trainline Now Europe's number 1 downloaded rail app, with over 125 million monthly visits and £5.9 billion in annual ticket sales, we collaborate with 270+ rail and coach companies in over 40 countries. We want to create a world where travel is as simple, seamless, eco-friendly and affordable as it should be. Today, we're a FTSE 250 company driven by our incredible team of over 1,000 Trainliners from 50+ nationalities, based across London, Paris, Barcelona, Milan, Edinburgh and Madrid. With our focus on growth in the UK and Europe, now is the perfect time to join us on this high-speed journey. Introducing our Security Trainline is investing in the next evolution of our security program-and we're hiring a Principal Security Architect to lead our enterprise-wide architecture vision. This hybrid role sits at the intersection of corporate IT security and cloud-native product security, shaping strategy and execution across a complex, fast-moving environment. As part of Trainline's Information Security (InfoSec) team, reporting to the CISO, the Principal Security Architect you will define our Zero Trust architecture, embed secure-by-design thinking across engineering workflows, and partner with leaders across Platform, Engineering, Corporate Functions and GRC to uplift security maturity across both employee-facing and customer-facing systems. The Principal Security Architect will bring hands-on experience in technical design with proven ability to influence stakeholders-from IT and DevOps to Product Engineering and Compliance Teams. Joining at a key moment of expansion across the security team, you will have the ability to make immediate and visible impact on the mission-driven strategy of the team. As a Security Architect at Trainline, you will Define and own the enterprise-wide security architecture blueprint across corporate and product domains. Drive the Trainline Zero Trust initiative, spanning identity, device, network, and application layers. Lead secure design reviews and threat modelling for key product and infrastructure initiatives. Develop reference architectures and reusable security design patterns. Collaborate with the IAM Engineer to architect enterprise identity and access management Enforce secure configurations across SaaS, endpoint, and MDM platforms (e.g., CrowdStrike, Jamf, Intune). Evaluate and guide SaaS tool usage, integrations, and risk mitigation. Design and maintain DLP, insider threat, and device posture enforcement capabilities. Collaborate with product and platform engineering teams to embed security into the SDLC and CI/CD. Define security controls for cloud-native services in AWS (IAM, KMS, GuardDuty, VPC security, etc.). Contribute to secure API design, secrets management, service-to-service auth, and cloud segmentation. Provide architectural governance input into vendor risk, procurement reviews, and data privacy design. Provide input as the security architecture voice in planning meetings, engineering forums, and GRC efforts to ensure Security by Design. We'd love to hear from you if you have Proven experience in security roles, with a focus on architecture across both corporate and product domains. Demonstrable experience implementing Zero Trust in a cloud-first, SaaS-heavy environment. Strong knowledge of Cloud security architecture and tools (Preferably AWS). Experience with securing enterprise IT tools (O365, MDM, DLP, CASB). Familiarity with compliance frameworks (e.g., ISO 27001, PCI DSS, GDPR). Strong communication skills: equally comfortable in technical architecture forums and executive briefings. Strategic mindset with a bias for action and iterative delivery. Comfortable navigating ambiguity, competing priorities, and organisational scale-up challenges. More information: Enjoy fantastic perks like private healthcare & dental insurance, a generous work from abroad policy, 2-for-1 share purchase plans, an EV Scheme to further reduce carbon emissions, extra festive time off, and excellent family-friendly benefits. We prioritise career growth with clear career paths, transparent pay bands, personal learning budgets, and regular learning days. Jump on board and supercharge your career from day one! Our values represent the things that matter most to us and what we live and breathe everyday, in everything we do: Think Big - We're building the future of rail ️ Own It - We focus on every customer, partner and journey Travel Together - We're one team ️ Do Good - We make a positive impact We know that having a diverse team makes us better and helps us succeed. And we mean all forms of diversity - gender, ethnicity, sexuality, disability, nationality and diversity of thought. That's why we're committed to creating inclusive places to work, where everyone belongs and differences are valued and celebrated. Interested in finding out more about what it's like to work at Trainline? Why not check us out on LinkedIn , Instagram and Glassdoor !
Security Operations Platform Enablement Engineer page is loaded Security Operations Platform Enablement Engineer Apply locations London time type Full time posted on Posted Yesterday job requisition id JR American International Group, Inc. (AIG) is a leading global insurance organization. AIG member companies provide a wide range of property casualty insurance in approximately 70 countries and jurisdictions. These diverse offerings include products and services that help businesses and individuals protect their assets and manage risks. We're also committed to making a positive difference for our colleagues and in the communities where we work and live. We encourage colleagues to give back to the causes they care most about, supporting these efforts through our Volunteer Time Off and Matching Grants Programs. Get to know the business At AIG, technology is at the heart of everything we do, from underwriting risks to processing claims. The Information Technology team equips our colleagues with the latest tools to complete their work efficiently and with the highest standards of excellence. The team is responsible for shielding the company's systems from security risks, while designing technology strategies that enable AIG's businesses to achieve their goals. AIG's Information Technology functions include enterprise architecture, software and systems engineering, cybersecurity, and technology risk and compliance. About the role The Security Operations Platform Enablement Engineer will help to deliver effective Security Operations services as part of a global team in a follow the sun model. They shall coordinate efforts in Data Engineering and Security Automation to provide regional capability in the support of operational teams such as Cyber Incident Response, the Security Operations Center, and Detection Engineering. In addition, they shall act as a conduit for regional requirements, working alongside local teams and stakeholders to help integrate with the wider capability. Responsibilities Support the delivery of Data Engineering and Security Automation services in day-to-day operations Work with Security Operations leadership, Data Engineering and Security Automation resources to design and deliver strategic projects and solutions Support 24/7/365 Security Operations teams, including Incident Response personnel throughout the course of an event if required Work closely with Security Operation Centre analysts to ensure end-user requirements are replicated in the functionality of security technologies Take ownership of local requirements and integrate them into the global security services, coordinating efforts between regional stakeholders and other engineering functions Lead and mentor junior resources across the global team Requirements Experience in Security Engineering, consisting of a minimum of 2+ years' recent experience in SIEM Engineering or similar engineering discipline Experience working in complex enterprises and global organizations. Insurance and financial services experience a plus. Deep understanding of standard security controls and frameworks in enterprise environments Experienced in task management technologies (Jira, ServiceNow, Confluence) desirable Strong Information Technology technical skills, with experience in coordination of technical teams and individual resources Proven ability to design and implement ingestion and transformation pipelines across modern data platforms Experience with SOAR solutions desirable Comfortable working in high pressure environments often outside of working hours throughout the course of an event An understanding of cyber security operations processes, procedures, guidelines and solutions, including practical experience of cyber kill chain principles Strong understanding of Windows, UNIX, and Linux operating systems, Cloud infrastructure, networking, malware defences, and perimeter controls. Familiarity with CrowdStrike NGSIEM data connectors, pipelines and parsers preferable Exposure to log aggregation platforms for data normalization and routing (eg Cribl, Apache Kafka) desirable Bachelor's degree or equivalent practical experience is preferred. Experience with security monitoring, event and anomaly analysis and intrusion detection/ prevention techniques. CISSP desirable Strong analytical and problem-solving skills with the ability to troubleshoot complex technical issues Excellent communication skills and the ability to collaborate effectively with cross-functional teams Proactive and self-motivated with the ability to work independently and manage multiple tasks simultaneously At AIG, we value in-person collaboration as a vital part of our culture, which is why we ask our team members to be primarily in the office. This approach helps us work together effectively and create a supportive, connected environment for our team and clients alike. Enjoy benefits that take care of what matters At AIG, our people are our greatest asset. We know how important it is to protect and invest in what's most important to you. That is why we created our Total Rewards Program, a comprehensive benefits package that extends beyond time spent at work to offer benefits focused on your health, wellbeing and financial security-as well as your professional development-to bring peace of mind to you and your family. Reimagining insurance to make a bigger difference to the world American International Group, Inc. (AIG) is a global leader in commercial and personal insurance solutions; we are one of the world's most far-reaching property casualty networks. It is an exciting time to join us - across our operations, we are thinking in new and innovative ways to deliver ever-better solutions to our customers. At AIG, you can go further to support individuals, businesses, and communities, helping them to manage risk, respond to times of uncertainty and discover new potential. We invest in our largest asset, our people, through continuous learning and development, in a culture that celebrates everyone for who they are and what they want to become. Welcome to a culture of inclusion We're committed to creating a culture that truly respects and celebrates each other's talents, backgrounds, cultures, opinions and goals. We foster a culture of inclusion and belonging through learning, cultural awareness activities and Employee Resource Groups (ERGs). With global chapters, ERGs are a cornerstone for our culture of inclusion. The talent of our people is one of AIG's greatest assets, and we are honored that our drive for positive change has been recognized by numerous recent awards and accreditations. AIG provides equal opportunity to all qualified individuals regardless of race, color, religion, age, gender, gender expression, national origin, veteran status, disability or any other legally protected categories. AIG is committed to working with and providing reasonable accommodations to job applicants and employees with disabilities. If you believe you need a reasonable accommodation, please send an email to . Functional Area: IT - Information TechnologyAIG Europe S.A. (U.K. Branch) & American International Group UK Ltd As a global risk leader with deep industry expertise and innovative solutions to smartly manage risk, AIG enables our clients' growth in ways they never thought possible. We also do the same for our colleagues, because we know our people are our greatest strength - the source of every insight, every idea and every innovation. When we're working as one team to do what's right for our colleagues and our communities, we can achieve excellence together. We encourage colleagues to give back to the causes they care most about, supporting these efforts through our Volunteer Time Off and Matching Grants Programs.
Aug 13, 2025
Full time
Security Operations Platform Enablement Engineer page is loaded Security Operations Platform Enablement Engineer Apply locations London time type Full time posted on Posted Yesterday job requisition id JR American International Group, Inc. (AIG) is a leading global insurance organization. AIG member companies provide a wide range of property casualty insurance in approximately 70 countries and jurisdictions. These diverse offerings include products and services that help businesses and individuals protect their assets and manage risks. We're also committed to making a positive difference for our colleagues and in the communities where we work and live. We encourage colleagues to give back to the causes they care most about, supporting these efforts through our Volunteer Time Off and Matching Grants Programs. Get to know the business At AIG, technology is at the heart of everything we do, from underwriting risks to processing claims. The Information Technology team equips our colleagues with the latest tools to complete their work efficiently and with the highest standards of excellence. The team is responsible for shielding the company's systems from security risks, while designing technology strategies that enable AIG's businesses to achieve their goals. AIG's Information Technology functions include enterprise architecture, software and systems engineering, cybersecurity, and technology risk and compliance. About the role The Security Operations Platform Enablement Engineer will help to deliver effective Security Operations services as part of a global team in a follow the sun model. They shall coordinate efforts in Data Engineering and Security Automation to provide regional capability in the support of operational teams such as Cyber Incident Response, the Security Operations Center, and Detection Engineering. In addition, they shall act as a conduit for regional requirements, working alongside local teams and stakeholders to help integrate with the wider capability. Responsibilities Support the delivery of Data Engineering and Security Automation services in day-to-day operations Work with Security Operations leadership, Data Engineering and Security Automation resources to design and deliver strategic projects and solutions Support 24/7/365 Security Operations teams, including Incident Response personnel throughout the course of an event if required Work closely with Security Operation Centre analysts to ensure end-user requirements are replicated in the functionality of security technologies Take ownership of local requirements and integrate them into the global security services, coordinating efforts between regional stakeholders and other engineering functions Lead and mentor junior resources across the global team Requirements Experience in Security Engineering, consisting of a minimum of 2+ years' recent experience in SIEM Engineering or similar engineering discipline Experience working in complex enterprises and global organizations. Insurance and financial services experience a plus. Deep understanding of standard security controls and frameworks in enterprise environments Experienced in task management technologies (Jira, ServiceNow, Confluence) desirable Strong Information Technology technical skills, with experience in coordination of technical teams and individual resources Proven ability to design and implement ingestion and transformation pipelines across modern data platforms Experience with SOAR solutions desirable Comfortable working in high pressure environments often outside of working hours throughout the course of an event An understanding of cyber security operations processes, procedures, guidelines and solutions, including practical experience of cyber kill chain principles Strong understanding of Windows, UNIX, and Linux operating systems, Cloud infrastructure, networking, malware defences, and perimeter controls. Familiarity with CrowdStrike NGSIEM data connectors, pipelines and parsers preferable Exposure to log aggregation platforms for data normalization and routing (eg Cribl, Apache Kafka) desirable Bachelor's degree or equivalent practical experience is preferred. Experience with security monitoring, event and anomaly analysis and intrusion detection/ prevention techniques. CISSP desirable Strong analytical and problem-solving skills with the ability to troubleshoot complex technical issues Excellent communication skills and the ability to collaborate effectively with cross-functional teams Proactive and self-motivated with the ability to work independently and manage multiple tasks simultaneously At AIG, we value in-person collaboration as a vital part of our culture, which is why we ask our team members to be primarily in the office. This approach helps us work together effectively and create a supportive, connected environment for our team and clients alike. Enjoy benefits that take care of what matters At AIG, our people are our greatest asset. We know how important it is to protect and invest in what's most important to you. That is why we created our Total Rewards Program, a comprehensive benefits package that extends beyond time spent at work to offer benefits focused on your health, wellbeing and financial security-as well as your professional development-to bring peace of mind to you and your family. Reimagining insurance to make a bigger difference to the world American International Group, Inc. (AIG) is a global leader in commercial and personal insurance solutions; we are one of the world's most far-reaching property casualty networks. It is an exciting time to join us - across our operations, we are thinking in new and innovative ways to deliver ever-better solutions to our customers. At AIG, you can go further to support individuals, businesses, and communities, helping them to manage risk, respond to times of uncertainty and discover new potential. We invest in our largest asset, our people, through continuous learning and development, in a culture that celebrates everyone for who they are and what they want to become. Welcome to a culture of inclusion We're committed to creating a culture that truly respects and celebrates each other's talents, backgrounds, cultures, opinions and goals. We foster a culture of inclusion and belonging through learning, cultural awareness activities and Employee Resource Groups (ERGs). With global chapters, ERGs are a cornerstone for our culture of inclusion. The talent of our people is one of AIG's greatest assets, and we are honored that our drive for positive change has been recognized by numerous recent awards and accreditations. AIG provides equal opportunity to all qualified individuals regardless of race, color, religion, age, gender, gender expression, national origin, veteran status, disability or any other legally protected categories. AIG is committed to working with and providing reasonable accommodations to job applicants and employees with disabilities. If you believe you need a reasonable accommodation, please send an email to . Functional Area: IT - Information TechnologyAIG Europe S.A. (U.K. Branch) & American International Group UK Ltd As a global risk leader with deep industry expertise and innovative solutions to smartly manage risk, AIG enables our clients' growth in ways they never thought possible. We also do the same for our colleagues, because we know our people are our greatest strength - the source of every insight, every idea and every innovation. When we're working as one team to do what's right for our colleagues and our communities, we can achieve excellence together. We encourage colleagues to give back to the causes they care most about, supporting these efforts through our Volunteer Time Off and Matching Grants Programs.
Our client is a fast-growing Commodities-Focused Financial Services Firm based in London with offices in the US and Asia. They are seeking to recruit a Senior Security Engineer to join their London team. Reporting to the IT Security Officer, you will work alongside the IT Security Engineer as part of a 3-man IT Security team. As the Senior Security Engineer, you will implement and maintain robust security systems and protocols across the IT infrastructure. You will conduct risk assessments and vulnerability scans, mitigate vulnerabilities identified in penetration testing, and implement preventative measures to protect against cyber threats. You will monitor the security infrastructure, detect and respond to potential threats, and help mentor the IT security engineer. You will collaborate with the IT team to ensure compliance with security standards and best practices, acting as a key technical leader in safeguarding sensitive data and systems. Key Responsibilities/Duties Manage WAF and DDoS systems Manage the Web Security Gateway Manage the Email Security Gateway Manage the SIEM, SOAR, Identity Protection, EDR, and respond to alerts and threats Carry out vulnerability scans, identify risks, and perform remediation Manage perimeter and VPN firewalls Manage MFA and SSO Manage MDM/MAM and Conditional Access Manage security certificates and keys Manage IDS and IPS Manage PAM systems Deliver Cyber Security Awareness Training Remediate vulnerabilities identified during penetration testing Handle ad-hoc IT security projects Experience - Essential The successful candidate will have a good working knowledge and experience in managing the following technology stack: CrowdStrike EDR Mimecast Mail Security Gateway Duo Okta Rapid7 IVM, Tenable IO, or Nessus Rapid7 IDR or CrowdStrike Next Gen SIEM Palo Alto Firewalls and Panorama InTune and Conditional Access Experience with the following technologies is advantageous; understanding the principles is required: Imperva WAF and DDoS Menlo Web Security Gateway KnowBe4 Digicert Certificates and Microsoft Certificate Services Ivanti or Automox patching AppCheck or Tenable WAS Desired Education: CISM, MS SC100, 200, 900, OSCP or other penetration testing certifications Industry: Financial services, SOC, Penetration Testing is desirable Personal Skills: Excellent interpersonal, written, and verbal communication skills The ability to handle multiple priorities, tasks, and projects simultaneously Clear and precise communication skills Ability to deliver presentations to staff Cross-functional influence, engagement, and collaboration skills Location and Hours The position is usually based at the London Head Office Hours: The team works on a shift pattern from 07:30 to 17:30, including 07:30-16:30 (2 days WFH) and 08:30-17:30 (3 days in-office) Periods of weekend and out-of-hours work are expected If you meet the above requirements, please apply. Can't find the job you're looking for? Send us your info, and we will review your options. (Permitted file size is 5MB; acceptable formats: doc, docx, txt, pdf, rtf, xls) Complete the form below; your data is processed under legitimate interest. No data from this form is stored on this website (view our privacy policy).
Aug 10, 2025
Full time
Our client is a fast-growing Commodities-Focused Financial Services Firm based in London with offices in the US and Asia. They are seeking to recruit a Senior Security Engineer to join their London team. Reporting to the IT Security Officer, you will work alongside the IT Security Engineer as part of a 3-man IT Security team. As the Senior Security Engineer, you will implement and maintain robust security systems and protocols across the IT infrastructure. You will conduct risk assessments and vulnerability scans, mitigate vulnerabilities identified in penetration testing, and implement preventative measures to protect against cyber threats. You will monitor the security infrastructure, detect and respond to potential threats, and help mentor the IT security engineer. You will collaborate with the IT team to ensure compliance with security standards and best practices, acting as a key technical leader in safeguarding sensitive data and systems. Key Responsibilities/Duties Manage WAF and DDoS systems Manage the Web Security Gateway Manage the Email Security Gateway Manage the SIEM, SOAR, Identity Protection, EDR, and respond to alerts and threats Carry out vulnerability scans, identify risks, and perform remediation Manage perimeter and VPN firewalls Manage MFA and SSO Manage MDM/MAM and Conditional Access Manage security certificates and keys Manage IDS and IPS Manage PAM systems Deliver Cyber Security Awareness Training Remediate vulnerabilities identified during penetration testing Handle ad-hoc IT security projects Experience - Essential The successful candidate will have a good working knowledge and experience in managing the following technology stack: CrowdStrike EDR Mimecast Mail Security Gateway Duo Okta Rapid7 IVM, Tenable IO, or Nessus Rapid7 IDR or CrowdStrike Next Gen SIEM Palo Alto Firewalls and Panorama InTune and Conditional Access Experience with the following technologies is advantageous; understanding the principles is required: Imperva WAF and DDoS Menlo Web Security Gateway KnowBe4 Digicert Certificates and Microsoft Certificate Services Ivanti or Automox patching AppCheck or Tenable WAS Desired Education: CISM, MS SC100, 200, 900, OSCP or other penetration testing certifications Industry: Financial services, SOC, Penetration Testing is desirable Personal Skills: Excellent interpersonal, written, and verbal communication skills The ability to handle multiple priorities, tasks, and projects simultaneously Clear and precise communication skills Ability to deliver presentations to staff Cross-functional influence, engagement, and collaboration skills Location and Hours The position is usually based at the London Head Office Hours: The team works on a shift pattern from 07:30 to 17:30, including 07:30-16:30 (2 days WFH) and 08:30-17:30 (3 days in-office) Periods of weekend and out-of-hours work are expected If you meet the above requirements, please apply. Can't find the job you're looking for? Send us your info, and we will review your options. (Permitted file size is 5MB; acceptable formats: doc, docx, txt, pdf, rtf, xls) Complete the form below; your data is processed under legitimate interest. No data from this form is stored on this website (view our privacy policy).
Founded in 2017, Obsidian Security was created to close a critical gap: securing the SaaS applications where modern business happens-platforms like Microsoft 365, Salesforce, and hundreds more. Backed by top investors including Greylock, Norwest Venture Partners, and IVP, we've built a complete SaaS security platform to reduce risk, detect and respond to threats, and prevent breaches at the source. Our team includes leaders who helped define the categories of endpoint and identity security at CrowdStrike, Okta, Cylance, and Carbon Black. Now, we're transforming how SaaS is secured-in the era of agentic AI. Today, Obsidian is trusted by global enterprises like Snowflake, T-Mobile, and Pure Storage. We protect more than 200 organizations across North America, Europe, the Middle East, Southeast Asia, Australia, and New Zealand-including many of the world's largest Fortune 1000 and Global 2000 companies. With strong global momentum, a growing partner ecosystem including SentinelOne, Databricks, and Google Cloud, and a major fundraise on the horizon, we're scaling quickly toward long-term growth and IPO readiness. Join us as we define the future of SaaS security! We are hiring a proactive Technical Account Manager (TAM) professional to join our Customer Success team. If you're excited to be part of a winning team of a SaaS security start-up, Obsidian Security is a great place to make an impact. A TAM is responsible for actively driving customer value within the Obsidian platform. The role is to technically advise on the usage of Obsidian solutions and be a subject matter expert on SaaS security challenges and best-practices. The TAM's responsibility is to partner with customers in a technical and educational capacity throughout the life of the customer partnership. The TAM is also the voice of the customer within Obsidian, providing important feedback to product management and engineering. The ideal candidate is driven, collaborative, and knowledgeable, has worked in a cybersecurity role and is excited about the opportunity to work in a SaaS security start-up. This is a 100% remote role with preference for candidates located in the Western region of the United States. About the Role: Deliver the highest level of customer experience and technical assistance to customers and partners. Manage simultaneous customer requests, inquiries and issues of varying complexity and priority. Take ownership of driving complex scenarios and issues, working with appropriate stakeholders in engineering, product management and sales to deliver successful outcomes. Work closely with our customers to make sure they are enabled/on-boarded successfully, fully understand how to use the platform, and can successfully integrate it into their day-to-day workflows. Drive towards improving customer understanding and usage of the Obsidian platform. This includes understanding common issues to build and improve in-product documentation and guides, as well as deliver live or recorded product training for new customers or partners. Identify, communicate, and deliver on opportunities to improve Obsidian's ability to support and enable our customers to be successful, including new processes, tools, or product prototypes. Create and deliver Account Health checks and Quarterly Business Review About You: A strong blend of communication abilities and technical skills to be the field-facing technical ambassador for Obsidian Experience building and managing strong customer relationships Experience with cybersecurity, especially Cloud and SaaS security concerns Ability to prioritize and manage multiple requests while delivering results Experience administering and configuring SaaS applications (such as Google Workplace / GSuite, O365, Okta, Duo, etc) Experience interacting with APIs, integrations, and middleware An understanding of common web authentication methods (such as tokens, OAuth, SAML, etc.) Versed in software engineering (Python) is a definite plus Experience with cybersecurity solution stacks Experience in incident response, threat triage, log analysis, and data correlation is a strong plus. Willingness to travel occasionally to meet with customers, not expected to exceed 5% Employee Benefits Our competitive benefits packages are designed to support our employees' well-being, both at work and at home. Our US based employees enjoy: Competitive compensation with equity and 401k Comprehensive healthcare with dental and vision coverage Flexible paid time off and paid holiday time off 12 weeks of new parent or family leave Personal and professional development resources For more details on our US benefits, or for information on our international benefits, please see here . Pay Transparancy Please note that the base pay range is a guideline and for candidates who receive an offer, the base pay will vary based on factors such as work location, as well as the knowledge, skills and experience of the candidate. In addition to a competitive base salary, this position is eligible for equity awards and may be eligible for incentive compensation based on factors such as experience, skills, and location. At Obsidian, we are proud to be an equal-opportunity employer. We value diversity and hire for talent, passion, and compassion. In compliance with federal law, all persons hired will be required to submit satisfactory proof of identity and legal authorization. If you have a need that requires accommodation, please contact Information collected and processed as part of any job applications you choose to submit is subject to Obsidian's Applicant Privacy Policy . Base Salary Range £83,000 - £116,000 GBP
Aug 07, 2025
Full time
Founded in 2017, Obsidian Security was created to close a critical gap: securing the SaaS applications where modern business happens-platforms like Microsoft 365, Salesforce, and hundreds more. Backed by top investors including Greylock, Norwest Venture Partners, and IVP, we've built a complete SaaS security platform to reduce risk, detect and respond to threats, and prevent breaches at the source. Our team includes leaders who helped define the categories of endpoint and identity security at CrowdStrike, Okta, Cylance, and Carbon Black. Now, we're transforming how SaaS is secured-in the era of agentic AI. Today, Obsidian is trusted by global enterprises like Snowflake, T-Mobile, and Pure Storage. We protect more than 200 organizations across North America, Europe, the Middle East, Southeast Asia, Australia, and New Zealand-including many of the world's largest Fortune 1000 and Global 2000 companies. With strong global momentum, a growing partner ecosystem including SentinelOne, Databricks, and Google Cloud, and a major fundraise on the horizon, we're scaling quickly toward long-term growth and IPO readiness. Join us as we define the future of SaaS security! We are hiring a proactive Technical Account Manager (TAM) professional to join our Customer Success team. If you're excited to be part of a winning team of a SaaS security start-up, Obsidian Security is a great place to make an impact. A TAM is responsible for actively driving customer value within the Obsidian platform. The role is to technically advise on the usage of Obsidian solutions and be a subject matter expert on SaaS security challenges and best-practices. The TAM's responsibility is to partner with customers in a technical and educational capacity throughout the life of the customer partnership. The TAM is also the voice of the customer within Obsidian, providing important feedback to product management and engineering. The ideal candidate is driven, collaborative, and knowledgeable, has worked in a cybersecurity role and is excited about the opportunity to work in a SaaS security start-up. This is a 100% remote role with preference for candidates located in the Western region of the United States. About the Role: Deliver the highest level of customer experience and technical assistance to customers and partners. Manage simultaneous customer requests, inquiries and issues of varying complexity and priority. Take ownership of driving complex scenarios and issues, working with appropriate stakeholders in engineering, product management and sales to deliver successful outcomes. Work closely with our customers to make sure they are enabled/on-boarded successfully, fully understand how to use the platform, and can successfully integrate it into their day-to-day workflows. Drive towards improving customer understanding and usage of the Obsidian platform. This includes understanding common issues to build and improve in-product documentation and guides, as well as deliver live or recorded product training for new customers or partners. Identify, communicate, and deliver on opportunities to improve Obsidian's ability to support and enable our customers to be successful, including new processes, tools, or product prototypes. Create and deliver Account Health checks and Quarterly Business Review About You: A strong blend of communication abilities and technical skills to be the field-facing technical ambassador for Obsidian Experience building and managing strong customer relationships Experience with cybersecurity, especially Cloud and SaaS security concerns Ability to prioritize and manage multiple requests while delivering results Experience administering and configuring SaaS applications (such as Google Workplace / GSuite, O365, Okta, Duo, etc) Experience interacting with APIs, integrations, and middleware An understanding of common web authentication methods (such as tokens, OAuth, SAML, etc.) Versed in software engineering (Python) is a definite plus Experience with cybersecurity solution stacks Experience in incident response, threat triage, log analysis, and data correlation is a strong plus. Willingness to travel occasionally to meet with customers, not expected to exceed 5% Employee Benefits Our competitive benefits packages are designed to support our employees' well-being, both at work and at home. Our US based employees enjoy: Competitive compensation with equity and 401k Comprehensive healthcare with dental and vision coverage Flexible paid time off and paid holiday time off 12 weeks of new parent or family leave Personal and professional development resources For more details on our US benefits, or for information on our international benefits, please see here . Pay Transparancy Please note that the base pay range is a guideline and for candidates who receive an offer, the base pay will vary based on factors such as work location, as well as the knowledge, skills and experience of the candidate. In addition to a competitive base salary, this position is eligible for equity awards and may be eligible for incentive compensation based on factors such as experience, skills, and location. At Obsidian, we are proud to be an equal-opportunity employer. We value diversity and hire for talent, passion, and compassion. In compliance with federal law, all persons hired will be required to submit satisfactory proof of identity and legal authorization. If you have a need that requires accommodation, please contact Information collected and processed as part of any job applications you choose to submit is subject to Obsidian's Applicant Privacy Policy . Base Salary Range £83,000 - £116,000 GBP
Senior IT Security Engineer London (Hybrid) 80,000 - 85,000 DOE + Bonus + Benefits Join a leading London-based broker and market maker with offices worldwide! We are looking for a Senior IT Security Engineer to play a vital role in safeguarding critical infrastructure and data, working as part of a close-knit, expert IT Security team. The Role You will be instrumental in developing, implementing, and maintaining security solutions that protect systems from ever-evolving cyber threats. You'll serve as the technical lead, drive key security initiatives, and play a pivotal role in mentoring junior team members. Key Responsibilities Monitor, manage, and respond to threats via SIEM, SOAR, and EDR platforms Conduct vulnerability scans and support remediation and risk mitigation efforts Oversee WAF, DDoS, VPN, and perimeter firewalls Manage Email and Web Security Gateways Administer MFA, SSO, PAM, MDM/MAM, and Conditional Access systems Maintain security certificates, encryption keys, and IDS/IPS systems Deliver cybersecurity awareness training and lead ad-hoc security projects Support and resolve issues identified during penetration testing Ideal Experience We're looking for someone with strong hands-on experience in most of the following technologies: Essential: CrowdStrike EDR Mimecast Duo, Okta Rapid7 IVM, Tenable IO or Nessus Palo Alto Firewalls, InTune, Entra ID, Active Directory Desirable: Imperva WAF, Menlo Security, Cisco Secure Access/Umbrella, KnowBe4, AppCheck Ivanti or Automox patching Kali Linux, Metasploit, NMAP, BurpSuite Candidate Profile Professional certifications such as CISM, MS SC100/200/900, OSCP are advantageous Background in financial services, SOC environments, or penetration testing preferred Strong interpersonal and communication skills, with the ability to engage across teams and deliver training effectively Able to manage multiple priorities and collaborate cross-functionally What's on Offer Competitive salary 25 days annual leave plus bank holidays Discretionary annual bonus scheme Contributory pension (SIPP), life assurance, income protection Interest-free season ticket loan Subsidised gym membership Ready to step into a key security leadership role with one of London's premier trading firms? Apply now and help us secure the future of global trading May & Stephens Ltd is acting as an Employment Agency in relation to this vacancy.
Aug 06, 2025
Full time
Senior IT Security Engineer London (Hybrid) 80,000 - 85,000 DOE + Bonus + Benefits Join a leading London-based broker and market maker with offices worldwide! We are looking for a Senior IT Security Engineer to play a vital role in safeguarding critical infrastructure and data, working as part of a close-knit, expert IT Security team. The Role You will be instrumental in developing, implementing, and maintaining security solutions that protect systems from ever-evolving cyber threats. You'll serve as the technical lead, drive key security initiatives, and play a pivotal role in mentoring junior team members. Key Responsibilities Monitor, manage, and respond to threats via SIEM, SOAR, and EDR platforms Conduct vulnerability scans and support remediation and risk mitigation efforts Oversee WAF, DDoS, VPN, and perimeter firewalls Manage Email and Web Security Gateways Administer MFA, SSO, PAM, MDM/MAM, and Conditional Access systems Maintain security certificates, encryption keys, and IDS/IPS systems Deliver cybersecurity awareness training and lead ad-hoc security projects Support and resolve issues identified during penetration testing Ideal Experience We're looking for someone with strong hands-on experience in most of the following technologies: Essential: CrowdStrike EDR Mimecast Duo, Okta Rapid7 IVM, Tenable IO or Nessus Palo Alto Firewalls, InTune, Entra ID, Active Directory Desirable: Imperva WAF, Menlo Security, Cisco Secure Access/Umbrella, KnowBe4, AppCheck Ivanti or Automox patching Kali Linux, Metasploit, NMAP, BurpSuite Candidate Profile Professional certifications such as CISM, MS SC100/200/900, OSCP are advantageous Background in financial services, SOC environments, or penetration testing preferred Strong interpersonal and communication skills, with the ability to engage across teams and deliver training effectively Able to manage multiple priorities and collaborate cross-functionally What's on Offer Competitive salary 25 days annual leave plus bank holidays Discretionary annual bonus scheme Contributory pension (SIPP), life assurance, income protection Interest-free season ticket loan Subsidised gym membership Ready to step into a key security leadership role with one of London's premier trading firms? Apply now and help us secure the future of global trading May & Stephens Ltd is acting as an Employment Agency in relation to this vacancy.
IT Security Engineer London (Hybrid) 55,000 - 60,000 DOE + Bonus + Benefits Join a leading London-based broker and market maker with offices worldwide! We are looking for a IT Security Engineer to play a vital role in safeguarding critical infrastructure and data, working as part of a close-knit, expert IT Security team. The Role You will be instrumental in developing, implementing, and maintaining security solutions that protect systems from ever-evolving cyber threats. You'll serve as the technical lead, drive key security initiatives, and play a pivotal role in mentoring junior team members. Key Responsibilities Monitor, manage, and respond to threats via SIEM, SOAR, and EDR platforms Conduct vulnerability scans and support remediation and risk mitigation efforts Oversee WAF, DDoS, VPN, and perimeter firewalls Manage Email and Web Security Gateways Administer MFA, SSO, PAM, MDM/MAM, and Conditional Access systems Maintain security certificates, encryption keys, and IDS/IPS systems Deliver cybersecurity awareness training and lead ad-hoc security projects Support and resolve issues identified during penetration testing Ideal Experience We're looking for someone with strong hands-on experience in most of the following technologies: Essential: CrowdStrike EDR Mimecast Duo, Okta Rapid7 IVM, Tenable IO or Nessus Palo Alto Firewalls, InTune, Entra ID, Active Directory Desirable: Imperva WAF, Menlo Security, Cisco Secure Access/Umbrella, KnowBe4, AppCheck Ivanti or Automox patching Kali Linux, Metasploit, NMAP, BurpSuite Candidate Profile Professional certifications such as CISM, MS SC100/200/900, OSCP are advantageous Background in financial services, SOC environments, or penetration testing preferred Strong interpersonal and communication skills, with the ability to engage across teams and deliver training effectively Able to manage multiple priorities and collaborate cross-functionally What's on Offer Competitive salary 25 days annual leave plus bank holidays Discretionary annual bonus scheme Contributory pension (SIPP), life assurance, income protection Interest-free season ticket loan Subsidised gym membership Ready to step into a key security leadership role with one of London's premier trading firms? Apply now and help us secure the future of global trading May & Stephens Ltd is acting as an Employment Agency in relation to this vacancy.
Aug 06, 2025
Full time
IT Security Engineer London (Hybrid) 55,000 - 60,000 DOE + Bonus + Benefits Join a leading London-based broker and market maker with offices worldwide! We are looking for a IT Security Engineer to play a vital role in safeguarding critical infrastructure and data, working as part of a close-knit, expert IT Security team. The Role You will be instrumental in developing, implementing, and maintaining security solutions that protect systems from ever-evolving cyber threats. You'll serve as the technical lead, drive key security initiatives, and play a pivotal role in mentoring junior team members. Key Responsibilities Monitor, manage, and respond to threats via SIEM, SOAR, and EDR platforms Conduct vulnerability scans and support remediation and risk mitigation efforts Oversee WAF, DDoS, VPN, and perimeter firewalls Manage Email and Web Security Gateways Administer MFA, SSO, PAM, MDM/MAM, and Conditional Access systems Maintain security certificates, encryption keys, and IDS/IPS systems Deliver cybersecurity awareness training and lead ad-hoc security projects Support and resolve issues identified during penetration testing Ideal Experience We're looking for someone with strong hands-on experience in most of the following technologies: Essential: CrowdStrike EDR Mimecast Duo, Okta Rapid7 IVM, Tenable IO or Nessus Palo Alto Firewalls, InTune, Entra ID, Active Directory Desirable: Imperva WAF, Menlo Security, Cisco Secure Access/Umbrella, KnowBe4, AppCheck Ivanti or Automox patching Kali Linux, Metasploit, NMAP, BurpSuite Candidate Profile Professional certifications such as CISM, MS SC100/200/900, OSCP are advantageous Background in financial services, SOC environments, or penetration testing preferred Strong interpersonal and communication skills, with the ability to engage across teams and deliver training effectively Able to manage multiple priorities and collaborate cross-functionally What's on Offer Competitive salary 25 days annual leave plus bank holidays Discretionary annual bonus scheme Contributory pension (SIPP), life assurance, income protection Interest-free season ticket loan Subsidised gym membership Ready to step into a key security leadership role with one of London's premier trading firms? Apply now and help us secure the future of global trading May & Stephens Ltd is acting as an Employment Agency in relation to this vacancy.
Cyber Security Engineer required by a London financial brokerage ( near Bank station ), paying up to 75k + bonus + benefits. Hybrid role (3 days office-based). Join a focused 3-person IT Security team, reporting to the IT Security Officer, to implement and maintain robust security across their infrastructure. Key responsibilities include managing WAF/DDoS, security gateways, SIEM/SOAR/EDR, firewalls, MFA/SSO, MDM/MAM, vulnerability scans, and incident response. Key Responsibilities: Manage WAF/DDoS, web/email security gateways, SIEM/SOAR/EDR (alert response), firewalls, MFA/SSO, MDM/MAM, vulnerability scans/remediation, security certificates, IDS/IPS, PAM, and deliver security awareness training. Remediate penetration test findings and contribute to ad-hoc projects. Experience: Strong knowledge of CrowdStrike EDR, Mimecast, Duo, Okta, Rapid7 IVM/IDR, Palo Alto Firewalls, InTune, and Entra ID/Azure AD/Group Policy. Experience: Familiarity with Imperva WAF/DDoS, Menlo, Cisco security, KnowBe4, Digicert, patching tools, web application scanners, and Kali Linux, AI, Machine Learning Candidate Profile: Relevant security certifications (CISM, MS Security, OSCP preferred). Financial services/SOC/pentesting background desirable. Strong communication and problem-solving skills. Location & Hours: London, hybrid (3 days office), shift pattern (07:30-17:30), some out-of-hours work. Salary & Benefits: Up to 75k, bonus, 25 days holiday, pension, income protection, life assurance, season ticket loan, subsidised gym. Be a key technical leader safeguarding sensitive data and systems in a collaborative environment. Apply now to make a significant impact.
Aug 05, 2025
Full time
Cyber Security Engineer required by a London financial brokerage ( near Bank station ), paying up to 75k + bonus + benefits. Hybrid role (3 days office-based). Join a focused 3-person IT Security team, reporting to the IT Security Officer, to implement and maintain robust security across their infrastructure. Key responsibilities include managing WAF/DDoS, security gateways, SIEM/SOAR/EDR, firewalls, MFA/SSO, MDM/MAM, vulnerability scans, and incident response. Key Responsibilities: Manage WAF/DDoS, web/email security gateways, SIEM/SOAR/EDR (alert response), firewalls, MFA/SSO, MDM/MAM, vulnerability scans/remediation, security certificates, IDS/IPS, PAM, and deliver security awareness training. Remediate penetration test findings and contribute to ad-hoc projects. Experience: Strong knowledge of CrowdStrike EDR, Mimecast, Duo, Okta, Rapid7 IVM/IDR, Palo Alto Firewalls, InTune, and Entra ID/Azure AD/Group Policy. Experience: Familiarity with Imperva WAF/DDoS, Menlo, Cisco security, KnowBe4, Digicert, patching tools, web application scanners, and Kali Linux, AI, Machine Learning Candidate Profile: Relevant security certifications (CISM, MS Security, OSCP preferred). Financial services/SOC/pentesting background desirable. Strong communication and problem-solving skills. Location & Hours: London, hybrid (3 days office), shift pattern (07:30-17:30), some out-of-hours work. Salary & Benefits: Up to 75k, bonus, 25 days holiday, pension, income protection, life assurance, season ticket loan, subsidised gym. Be a key technical leader safeguarding sensitive data and systems in a collaborative environment. Apply now to make a significant impact.
Cyber Security Engineer required by a London financial brokerage ( near Bank station ), paying up to 85k + bonus + benefits. Hybrid role (3 days office-based). Join a focused 3-person IT Security team, reporting to the IT Security Officer, to implement and maintain robust security across their infrastructure. Key responsibilities include managing WAF/DDoS, security gateways, SIEM/SOAR/EDR, firewalls, MFA/SSO, MDM/MAM, vulnerability scans, and incident response. Key Responsibilities: Manage WAF/DDoS, web/email security gateways, SIEM/SOAR/EDR (alert response), firewalls, MFA/SSO, MDM/MAM, vulnerability scans/remediation, security certificates, IDS/IPS, PAM, and deliver security awareness training. Remediate penetration test findings and contribute to ad-hoc projects. Experience: CrowdStrike EDR, Mimecast, Duo, Okta, Rapid7 IVM/IDR, Palo Alto Firewalls, InTune, and Entra ID/Azure AD/Group Policy. Experience: Familiarity with Imperva WAF/DDoS, Menlo, Cisco security, KnowBe4, Digicert, patching tools, web application scanners, and Kali Linux, AI, Machine Learning Candidate Profile: Relevant security certifications (CISM, MS Security, OSCP preferred). Financial services/SOC/pentesting background desirable. Strong communication and problem-solving skills. Location & Hours: London, hybrid (3 days office), shift pattern (07:30-17:30), some out-of-hours work. Salary & Benefits: Up to 85k, bonus, 25 days holiday, pension, income protection, life assurance, season ticket loan, subsidised gym. Be a key technical leader safeguarding sensitive data and systems in a collaborative environment. Apply now to make a significant impact.
Aug 05, 2025
Full time
Cyber Security Engineer required by a London financial brokerage ( near Bank station ), paying up to 85k + bonus + benefits. Hybrid role (3 days office-based). Join a focused 3-person IT Security team, reporting to the IT Security Officer, to implement and maintain robust security across their infrastructure. Key responsibilities include managing WAF/DDoS, security gateways, SIEM/SOAR/EDR, firewalls, MFA/SSO, MDM/MAM, vulnerability scans, and incident response. Key Responsibilities: Manage WAF/DDoS, web/email security gateways, SIEM/SOAR/EDR (alert response), firewalls, MFA/SSO, MDM/MAM, vulnerability scans/remediation, security certificates, IDS/IPS, PAM, and deliver security awareness training. Remediate penetration test findings and contribute to ad-hoc projects. Experience: CrowdStrike EDR, Mimecast, Duo, Okta, Rapid7 IVM/IDR, Palo Alto Firewalls, InTune, and Entra ID/Azure AD/Group Policy. Experience: Familiarity with Imperva WAF/DDoS, Menlo, Cisco security, KnowBe4, Digicert, patching tools, web application scanners, and Kali Linux, AI, Machine Learning Candidate Profile: Relevant security certifications (CISM, MS Security, OSCP preferred). Financial services/SOC/pentesting background desirable. Strong communication and problem-solving skills. Location & Hours: London, hybrid (3 days office), shift pattern (07:30-17:30), some out-of-hours work. Salary & Benefits: Up to 85k, bonus, 25 days holiday, pension, income protection, life assurance, season ticket loan, subsidised gym. Be a key technical leader safeguarding sensitive data and systems in a collaborative environment. Apply now to make a significant impact.
Locations : Boston London Gurgaon Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Director - Secure Devices is responsible for protecting BCG's edge and endpoint environments, including laptops, mobile phones, corporate-managed, BYOD, and server-side devices. This critical role leads the engineering and enablement of endpoint protection technologies, ensuring device compliance, threat detection, and automated response capabilities. The role combines strong technical leadership, deep expertise in endpoint protection platforms, and a collaborative approach to operationalize security across all user and device touchpoints globally. Key Responsibilities: Endpoint Security Strategy & Engineering: Define and lead the secure device strategy, ensuring strong protection across all device types and operating systems. Engineer and operate scalable solutions for endpoint protection, data loss prevention (DLP), and compliance checking. Build automated controls for device posture, encryption, threat detection, and remediation. Own and optimize integrations with tools such as Microsoft Defender, Purview, Symantec, CrowdStrike, or equivalent. Platform Integration & Automation: Drive automation for device onboarding, compliance validation, and health monitoring. Ensure endpoint telemetry is integrated with SIEM platforms and observability stacks. Partner with platform and infrastructure teams to enforce secure device baselines and policies. Build self-healing, zero-trust-aligned architectures for secure device management. Observability & Event Management: Implement real-time observability of endpoint health, risk exposure, and threat posture. Integrate with cybersecurity event and incident management pipelines for early detection and rapid response. Collaborate with the cyber and incident response teams to streamline investigation and containment. Ensure high-fidelity logging and alerting from all edge device sources. Compliance & Risk Management: Ensure devices meet internal policies and external regulatory standards through automation and audit-readiness. Drive policy enforcement through scalable automation and end-user experience design. Manage the lifecycle of security configuration across device fleets globally. Collaboration & Stakeholder Engagement: Work closely with IT support, mobility, infrastructure, and security operations teams. Partner with cyber, legal, and compliance stakeholders to define and enforce device governance policies. Serve as a key contributor to global security programs and strategic initiatives. Leadership & Operational Excellence: Lead a global engineering team responsible for endpoint protection tooling and device compliance. Foster a culture of security, automation, transparency, and continuous improvement. Define and track SLAs, SLOs, and KPIs related to device health, compliance, and risk. What You'll Bring Required Qualifications: 12+ years of experience in endpoint security, device management, or security engineering roles. Proven experience implementing and operating tools such as Microsoft Defender, Purview, Symantec, or CrowdStrike. Deep technical understanding of endpoint protection, mobile security, and compliance tooling. Strong background in automation, scripting, and observability practices. Experience working with large, global device fleets and BYOD models. Preferred Qualifications: Familiarity with zero-trust security models and endpoint detection and response (EDR). Certifications such as CISSP, CISM, Microsoft Security certifications, or equivalent. Experience integrating device telemetry into SIEM and SOAR platforms. Who You'll Work With Work Environment & Additional Information: Hybrid or on-site work model. Occasional travel for global alignment or vendor engagements. Ability to operate in a fast-paced, security-first engineering environment. The Director - Secure Devices plays a mission-critical role in securing BCG's edge footprint, from user laptops to mobile and unmanaged devices. By delivering high-visibility, automated, and resilient endpoint protection capabilities, this role ensures BCG maintains a strong, scalable, and adaptive defense posture aligned to the modern threat landscape. Additional info Total compensation for this role includes base salary, annual discretionary performance bonus, retirement contribution, and a market leading benefits package described below. The base salary range for this role is $181,000.00 - $221,000.00 This is an estimated range, however, specific base salaries within the range depend on various factors such as experience and skill set. It is not common for new BCG employees to be hired at the high-end of the salary range. BCG regularly reviews its ranges to ensure market competitiveness. In addition to your base salary, your total compensation will include a bonus of up to 30% and a generous retirement contribution that starts at 5% and moves to 10% after 2 years. All of our plans provide best in class coverage: Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children Low $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs Dental coverage, including up to $5,000 in orthodontia benefits Vision insurance with coverage for both glasses and contact lenses annually Reimbursement for gym memberships and other fitness activities Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month) Paid sick time on an as needed basis Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
Aug 03, 2025
Full time
Locations : Boston London Gurgaon Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Director - Secure Devices is responsible for protecting BCG's edge and endpoint environments, including laptops, mobile phones, corporate-managed, BYOD, and server-side devices. This critical role leads the engineering and enablement of endpoint protection technologies, ensuring device compliance, threat detection, and automated response capabilities. The role combines strong technical leadership, deep expertise in endpoint protection platforms, and a collaborative approach to operationalize security across all user and device touchpoints globally. Key Responsibilities: Endpoint Security Strategy & Engineering: Define and lead the secure device strategy, ensuring strong protection across all device types and operating systems. Engineer and operate scalable solutions for endpoint protection, data loss prevention (DLP), and compliance checking. Build automated controls for device posture, encryption, threat detection, and remediation. Own and optimize integrations with tools such as Microsoft Defender, Purview, Symantec, CrowdStrike, or equivalent. Platform Integration & Automation: Drive automation for device onboarding, compliance validation, and health monitoring. Ensure endpoint telemetry is integrated with SIEM platforms and observability stacks. Partner with platform and infrastructure teams to enforce secure device baselines and policies. Build self-healing, zero-trust-aligned architectures for secure device management. Observability & Event Management: Implement real-time observability of endpoint health, risk exposure, and threat posture. Integrate with cybersecurity event and incident management pipelines for early detection and rapid response. Collaborate with the cyber and incident response teams to streamline investigation and containment. Ensure high-fidelity logging and alerting from all edge device sources. Compliance & Risk Management: Ensure devices meet internal policies and external regulatory standards through automation and audit-readiness. Drive policy enforcement through scalable automation and end-user experience design. Manage the lifecycle of security configuration across device fleets globally. Collaboration & Stakeholder Engagement: Work closely with IT support, mobility, infrastructure, and security operations teams. Partner with cyber, legal, and compliance stakeholders to define and enforce device governance policies. Serve as a key contributor to global security programs and strategic initiatives. Leadership & Operational Excellence: Lead a global engineering team responsible for endpoint protection tooling and device compliance. Foster a culture of security, automation, transparency, and continuous improvement. Define and track SLAs, SLOs, and KPIs related to device health, compliance, and risk. What You'll Bring Required Qualifications: 12+ years of experience in endpoint security, device management, or security engineering roles. Proven experience implementing and operating tools such as Microsoft Defender, Purview, Symantec, or CrowdStrike. Deep technical understanding of endpoint protection, mobile security, and compliance tooling. Strong background in automation, scripting, and observability practices. Experience working with large, global device fleets and BYOD models. Preferred Qualifications: Familiarity with zero-trust security models and endpoint detection and response (EDR). Certifications such as CISSP, CISM, Microsoft Security certifications, or equivalent. Experience integrating device telemetry into SIEM and SOAR platforms. Who You'll Work With Work Environment & Additional Information: Hybrid or on-site work model. Occasional travel for global alignment or vendor engagements. Ability to operate in a fast-paced, security-first engineering environment. The Director - Secure Devices plays a mission-critical role in securing BCG's edge footprint, from user laptops to mobile and unmanaged devices. By delivering high-visibility, automated, and resilient endpoint protection capabilities, this role ensures BCG maintains a strong, scalable, and adaptive defense posture aligned to the modern threat landscape. Additional info Total compensation for this role includes base salary, annual discretionary performance bonus, retirement contribution, and a market leading benefits package described below. The base salary range for this role is $181,000.00 - $221,000.00 This is an estimated range, however, specific base salaries within the range depend on various factors such as experience and skill set. It is not common for new BCG employees to be hired at the high-end of the salary range. BCG regularly reviews its ranges to ensure market competitiveness. In addition to your base salary, your total compensation will include a bonus of up to 30% and a generous retirement contribution that starts at 5% and moves to 10% after 2 years. All of our plans provide best in class coverage: Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children Low $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs Dental coverage, including up to $5,000 in orthodontia benefits Vision insurance with coverage for both glasses and contact lenses annually Reimbursement for gym memberships and other fitness activities Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month) Paid sick time on an as needed basis Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
Are you a hands-on infrastructure leader with a passion for operational excellence, patching, and keeping the lights on? Do you thrive in a fast-paced environment where no two days are the same? If so, we want to hear from you! We're seeking anInfrastructure Operations Team Leaderto drive the performance, resilience, and scalability of our IT systems. You'll lead a skilled off-shore team, manage a diverse infrastructure estate, and play a pivotal role in shaping the future of our IT operations. What You'll Be Doing Lead and mentor a team of off-shore infrastructure engineers. Own patch and vulnerability management (Ivanti), application upgrades, and service availability. Oversee infrastructure across on-prem and cloud (Azure) environments. Act as escalation point for 2nd/3rd line incidents and out-of-hours support. Collaborate globally with internal teams and external vendors. Ensure compliance with ITIL, SOX, and audit requirements. Drive DR testing, risk mitigation, and continuous improvement initiatives. Contribute to infrastructure design, documentation, and governance. What You'll Bring Essential Skills & Experience: Proven leadership of infrastructure teams (including off-shore). Deep expertise in Windows Server, VMware, AD, DNS, DHCP, Group Policy. Experience with Exchange (2016/2019 Hybrid), Office 365, Azure, and PowerShell. Familiarity with Ivanti, Veeam, Citrix, Dell VxRail, NetApp, SQL clustering. Strong understanding of security tools (e.g. Rapid7, Crowdstrike). Excellent troubleshooting, documentation, and communication skills. Desirable: Exposure to AVD, Linux, Windows 11 build processes. Knowledge of Microsoft Entra, Azure resource management, and PRTG monitoring. Experience in financial services or regulated environments. Certifications such as MCSE, VCP, or Cisco are a plus. What You're Like Calm under pressure, with a pragmatic and proactive mindset. A natural leader who inspires and energises teams. Detail-oriented, organised, and results-driven. A strong communicator who can influence at all levels. Passionate about innovation, security, and service excellence.
Jul 29, 2025
Full time
Are you a hands-on infrastructure leader with a passion for operational excellence, patching, and keeping the lights on? Do you thrive in a fast-paced environment where no two days are the same? If so, we want to hear from you! We're seeking anInfrastructure Operations Team Leaderto drive the performance, resilience, and scalability of our IT systems. You'll lead a skilled off-shore team, manage a diverse infrastructure estate, and play a pivotal role in shaping the future of our IT operations. What You'll Be Doing Lead and mentor a team of off-shore infrastructure engineers. Own patch and vulnerability management (Ivanti), application upgrades, and service availability. Oversee infrastructure across on-prem and cloud (Azure) environments. Act as escalation point for 2nd/3rd line incidents and out-of-hours support. Collaborate globally with internal teams and external vendors. Ensure compliance with ITIL, SOX, and audit requirements. Drive DR testing, risk mitigation, and continuous improvement initiatives. Contribute to infrastructure design, documentation, and governance. What You'll Bring Essential Skills & Experience: Proven leadership of infrastructure teams (including off-shore). Deep expertise in Windows Server, VMware, AD, DNS, DHCP, Group Policy. Experience with Exchange (2016/2019 Hybrid), Office 365, Azure, and PowerShell. Familiarity with Ivanti, Veeam, Citrix, Dell VxRail, NetApp, SQL clustering. Strong understanding of security tools (e.g. Rapid7, Crowdstrike). Excellent troubleshooting, documentation, and communication skills. Desirable: Exposure to AVD, Linux, Windows 11 build processes. Knowledge of Microsoft Entra, Azure resource management, and PRTG monitoring. Experience in financial services or regulated environments. Certifications such as MCSE, VCP, or Cisco are a plus. What You're Like Calm under pressure, with a pragmatic and proactive mindset. A natural leader who inspires and energises teams. Detail-oriented, organised, and results-driven. A strong communicator who can influence at all levels. Passionate about innovation, security, and service excellence.
Cyber Security Engineer required by a London financial brokerage ( near Bank station ), paying up to 75k + bonus + benefits. Hybrid role (3 days office-based). Join a focused 3-person IT Security team, reporting to the IT Security Officer, to implement and maintain robust security across their infrastructure. Key responsibilities include managing WAF/DDoS, security gateways, SIEM/SOAR/EDR, firewalls, MFA/SSO, MDM/MAM, vulnerability scans, and incident response. Key Responsibilities: Manage WAF/DDoS, web/email security gateways, SIEM/SOAR/EDR (alert response), firewalls, MFA/SSO, MDM/MAM, vulnerability scans/remediation, security certificates, IDS/IPS, PAM, and deliver security awareness training. Remediate penetration test findings and contribute to ad-hoc projects. Experience: Strong knowledge of CrowdStrike EDR, Mimecast, Duo, Okta, Rapid7 IVM/IDR, Palo Alto Firewalls, InTune, and Entra ID/Azure AD/Group Policy. Experience: Familiarity with Imperva WAF/DDoS, Menlo, Cisco security, KnowBe4, Digicert, patching tools, web application scanners, and Kali Linux, AI, Machine Learning Candidate Profile: Relevant security certifications (CISM, MS Security, OSCP preferred). Financial services/SOC/pentesting background desirable. Strong communication and problem-solving skills. Location & Hours: London, hybrid (3 days office), shift pattern (07:30-17:30), some out-of-hours work. Salary & Benefits: Up to 75k, bonus, 25 days holiday, pension, income protection, life assurance, season ticket loan, subsidised gym. Be a key technical leader safeguarding sensitive data and systems in a collaborative environment. Apply now to make a significant impact.
Jul 22, 2025
Full time
Cyber Security Engineer required by a London financial brokerage ( near Bank station ), paying up to 75k + bonus + benefits. Hybrid role (3 days office-based). Join a focused 3-person IT Security team, reporting to the IT Security Officer, to implement and maintain robust security across their infrastructure. Key responsibilities include managing WAF/DDoS, security gateways, SIEM/SOAR/EDR, firewalls, MFA/SSO, MDM/MAM, vulnerability scans, and incident response. Key Responsibilities: Manage WAF/DDoS, web/email security gateways, SIEM/SOAR/EDR (alert response), firewalls, MFA/SSO, MDM/MAM, vulnerability scans/remediation, security certificates, IDS/IPS, PAM, and deliver security awareness training. Remediate penetration test findings and contribute to ad-hoc projects. Experience: Strong knowledge of CrowdStrike EDR, Mimecast, Duo, Okta, Rapid7 IVM/IDR, Palo Alto Firewalls, InTune, and Entra ID/Azure AD/Group Policy. Experience: Familiarity with Imperva WAF/DDoS, Menlo, Cisco security, KnowBe4, Digicert, patching tools, web application scanners, and Kali Linux, AI, Machine Learning Candidate Profile: Relevant security certifications (CISM, MS Security, OSCP preferred). Financial services/SOC/pentesting background desirable. Strong communication and problem-solving skills. Location & Hours: London, hybrid (3 days office), shift pattern (07:30-17:30), some out-of-hours work. Salary & Benefits: Up to 75k, bonus, 25 days holiday, pension, income protection, life assurance, season ticket loan, subsidised gym. Be a key technical leader safeguarding sensitive data and systems in a collaborative environment. Apply now to make a significant impact.
Job Title: Cyber Security Specialist - MSP Location: Manchester or Newbury Salary: 45,000 - 50,000 per annum Job Type: Permanent, Full Time At Netteam tX, we deliver tailored IT, cloud, cybersecurity, and automation solutions to over 120 clients across the hospitality and SME sectors. As a dynamic and people-focused MSP, we're proud of our culture built around continual learning, collaboration, and innovation. We don't just support businesses - we shape how they stay secure, agile, and competitive. We are now looking for a talented Cybersecurity Lead / Specialist to join our growing team and take ownership of our cybersecurity offering. This is a hybrid, hands-on role that blends strategy with technical implementation - ideal for someone who wants to drive real impact across both internal and client environments. You will be the primary point of expertise for all things cybersecurity at Netteam tX, bridging the gap between strategic planning and operational execution. Working closely with internal teams, clients, and our commercial function. You will be responsible for managing our cyber stack, reviewing and responding to reports and alerts, guiding the helpdesk with remediations, supporting pre-sales engagements, and ensuring we maintain best-practice security standards. Responsibilities: Cybersecurity Stack Leadership: Design, manage, and evolve a comprehensive security stack tailored for SME and hospitality clients Administer tools such as CrowdStrike Falcon, RoboShadow, Microsoft Defender, ThreatLocker Evaluate and onboard new security technologies; liaise with vendors Lead technical onboarding of cyber tools for both internal and client deployments Incident Response & Threat Management: Develop and own incident response playbooks Act as the lead escalation point for live security incidents Analyse alerts, threat intelligence, and forensic data from platforms like CrowdStrike and RoboShadow Conduct root cause analysis and manage remediation Compliance, Risk & Certification Support: Guide clients through Cyber Essentials/CE+, ISO 27001, and PCI DSS frameworks Perform regular risk assessments, policy audits, and technical documentation Ensure evidence gathering, hardening practices, and governance alignments are audit-ready Monitoring, Reporting & Visibility: Produce internal and client-facing reports detailing security posture, incidents, and improvements Track remediation tasks and present summaries during QBRs and client meetings Highlight vulnerability trends and recommend action plans Pre-Sales & Client Engagement: Support pre-sales with risk assessments, scope definition, and technical advisory Work alongside account managers to position and renew security services Deliver cyber awareness training, audits, and recommendations to clients at technical and board level Training & Internal Enablement: Act as the cybersecurity subject matter expert across the business Train the helpdesk team on triage and remediation best practices Create runbooks, SOPs, and escalation workflows About you: Essential Skills & Experience: Proven hands-on cybersecurity experience in an MSP, MSSP, or consulting environment Strong working knowledge of: CrowdStrike Falcon - policy config, triage, alerting RoboShadow or similar - vulnerability workflows Microsoft Defender, Conditional Access, MFA, Secure Score Familiarity with frameworks: Cyber Essentials Plus, ISO 27001, PCI DSS Incident response experience with real-world investigations Understanding of identity security, patch management, and user awareness training Excellent written and verbal communication - able to simplify complex concepts for clients Confident producing clear documentation and reporting Desirable Skills: Certifications: Security+, SC-200, CEH, ISO 27001 Lead Implementer, PCIP Penetration testing or red teaming exposure Experience with SIEM/SOAR platforms (e.g., Microsoft Sentinel) Familiarity with MSP toolsets (Autotask, IT Glue, Rewst) or automation experience Personal Attributes: Friendly and professional Excited about tech and thrives on developing understanding of new technologies Possesses good written and verbal communications skills and the ability to clearly communicate complex technical issues to non-technical clients Recognises the importance of frequent and clear communications Feel that every day is a day of learning Disciplined, with the ability to priortise and execute tasks under pressure Harnesses pressure to deliver results Why join us? We make work life balance a normal, not a benefit A fun and productive place to work Great team of people to work alongside Workplace Pension Comprehensive in-house and external training offered Competitive salary that reflects your skills and experience Please click on the APPLY button to send your CV and Cover Letter for this role. Candidates with experience of: ; Cybersecurity Engineer, Cybersecurity Team Lead, Cybersecurity Manager, Security Engineer, Network Security Engineer, Information Security Analyst, Security Architect, Cybersecurity Specialist, may also be considered.
Jul 18, 2025
Full time
Job Title: Cyber Security Specialist - MSP Location: Manchester or Newbury Salary: 45,000 - 50,000 per annum Job Type: Permanent, Full Time At Netteam tX, we deliver tailored IT, cloud, cybersecurity, and automation solutions to over 120 clients across the hospitality and SME sectors. As a dynamic and people-focused MSP, we're proud of our culture built around continual learning, collaboration, and innovation. We don't just support businesses - we shape how they stay secure, agile, and competitive. We are now looking for a talented Cybersecurity Lead / Specialist to join our growing team and take ownership of our cybersecurity offering. This is a hybrid, hands-on role that blends strategy with technical implementation - ideal for someone who wants to drive real impact across both internal and client environments. You will be the primary point of expertise for all things cybersecurity at Netteam tX, bridging the gap between strategic planning and operational execution. Working closely with internal teams, clients, and our commercial function. You will be responsible for managing our cyber stack, reviewing and responding to reports and alerts, guiding the helpdesk with remediations, supporting pre-sales engagements, and ensuring we maintain best-practice security standards. Responsibilities: Cybersecurity Stack Leadership: Design, manage, and evolve a comprehensive security stack tailored for SME and hospitality clients Administer tools such as CrowdStrike Falcon, RoboShadow, Microsoft Defender, ThreatLocker Evaluate and onboard new security technologies; liaise with vendors Lead technical onboarding of cyber tools for both internal and client deployments Incident Response & Threat Management: Develop and own incident response playbooks Act as the lead escalation point for live security incidents Analyse alerts, threat intelligence, and forensic data from platforms like CrowdStrike and RoboShadow Conduct root cause analysis and manage remediation Compliance, Risk & Certification Support: Guide clients through Cyber Essentials/CE+, ISO 27001, and PCI DSS frameworks Perform regular risk assessments, policy audits, and technical documentation Ensure evidence gathering, hardening practices, and governance alignments are audit-ready Monitoring, Reporting & Visibility: Produce internal and client-facing reports detailing security posture, incidents, and improvements Track remediation tasks and present summaries during QBRs and client meetings Highlight vulnerability trends and recommend action plans Pre-Sales & Client Engagement: Support pre-sales with risk assessments, scope definition, and technical advisory Work alongside account managers to position and renew security services Deliver cyber awareness training, audits, and recommendations to clients at technical and board level Training & Internal Enablement: Act as the cybersecurity subject matter expert across the business Train the helpdesk team on triage and remediation best practices Create runbooks, SOPs, and escalation workflows About you: Essential Skills & Experience: Proven hands-on cybersecurity experience in an MSP, MSSP, or consulting environment Strong working knowledge of: CrowdStrike Falcon - policy config, triage, alerting RoboShadow or similar - vulnerability workflows Microsoft Defender, Conditional Access, MFA, Secure Score Familiarity with frameworks: Cyber Essentials Plus, ISO 27001, PCI DSS Incident response experience with real-world investigations Understanding of identity security, patch management, and user awareness training Excellent written and verbal communication - able to simplify complex concepts for clients Confident producing clear documentation and reporting Desirable Skills: Certifications: Security+, SC-200, CEH, ISO 27001 Lead Implementer, PCIP Penetration testing or red teaming exposure Experience with SIEM/SOAR platforms (e.g., Microsoft Sentinel) Familiarity with MSP toolsets (Autotask, IT Glue, Rewst) or automation experience Personal Attributes: Friendly and professional Excited about tech and thrives on developing understanding of new technologies Possesses good written and verbal communications skills and the ability to clearly communicate complex technical issues to non-technical clients Recognises the importance of frequent and clear communications Feel that every day is a day of learning Disciplined, with the ability to priortise and execute tasks under pressure Harnesses pressure to deliver results Why join us? We make work life balance a normal, not a benefit A fun and productive place to work Great team of people to work alongside Workplace Pension Comprehensive in-house and external training offered Competitive salary that reflects your skills and experience Please click on the APPLY button to send your CV and Cover Letter for this role. Candidates with experience of: ; Cybersecurity Engineer, Cybersecurity Team Lead, Cybersecurity Manager, Security Engineer, Network Security Engineer, Information Security Analyst, Security Architect, Cybersecurity Specialist, may also be considered.
IT Security Engineer London (Hybrid) 55,000 - 60,000 DOE + Bonus + Benefits Join a leading London-based broker and market maker with offices worldwide! We are looking for a IT Security Engineer to play a vital role in safeguarding critical infrastructure and data, working as part of a close-knit, expert IT Security team. The Role You will be instrumental in developing, implementing, and maintaining security solutions that protect systems from ever-evolving cyber threats. You'll serve as the technical lead, drive key security initiatives, and play a pivotal role in mentoring junior team members. Key Responsibilities Monitor, manage, and respond to threats via SIEM, SOAR, and EDR platforms Conduct vulnerability scans and support remediation and risk mitigation efforts Oversee WAF, DDoS, VPN, and perimeter firewalls Manage Email and Web Security Gateways Administer MFA, SSO, PAM, MDM/MAM, and Conditional Access systems Maintain security certificates, encryption keys, and IDS/IPS systems Deliver cybersecurity awareness training and lead ad-hoc security projects Support and resolve issues identified during penetration testing Ideal Experience We're looking for someone with strong hands-on experience in most of the following technologies: Essential: CrowdStrike EDR Mimecast Duo, Okta Rapid7 IVM, Tenable IO or Nessus Palo Alto Firewalls, InTune, Entra ID, Active Directory Desirable: Imperva WAF, Menlo Security, Cisco Secure Access/Umbrella, KnowBe4, AppCheck Ivanti or Automox patching Kali Linux, Metasploit, NMAP, BurpSuite Candidate Profile Professional certifications such as CISM, MS SC100/200/900, OSCP are advantageous Background in financial services, SOC environments, or penetration testing preferred Strong interpersonal and communication skills, with the ability to engage across teams and deliver training effectively Able to manage multiple priorities and collaborate cross-functionally What's on Offer Competitive salary 25 days annual leave plus bank holidays Discretionary annual bonus scheme Contributory pension (SIPP), life assurance, income protection Interest-free season ticket loan Subsidised gym membership Ready to step into a key security leadership role with one of London's premier trading firms? Apply now and help us secure the future of global trading May & Stephens Ltd is acting as an Employment Agency in relation to this vacancy.
Jul 15, 2025
Full time
IT Security Engineer London (Hybrid) 55,000 - 60,000 DOE + Bonus + Benefits Join a leading London-based broker and market maker with offices worldwide! We are looking for a IT Security Engineer to play a vital role in safeguarding critical infrastructure and data, working as part of a close-knit, expert IT Security team. The Role You will be instrumental in developing, implementing, and maintaining security solutions that protect systems from ever-evolving cyber threats. You'll serve as the technical lead, drive key security initiatives, and play a pivotal role in mentoring junior team members. Key Responsibilities Monitor, manage, and respond to threats via SIEM, SOAR, and EDR platforms Conduct vulnerability scans and support remediation and risk mitigation efforts Oversee WAF, DDoS, VPN, and perimeter firewalls Manage Email and Web Security Gateways Administer MFA, SSO, PAM, MDM/MAM, and Conditional Access systems Maintain security certificates, encryption keys, and IDS/IPS systems Deliver cybersecurity awareness training and lead ad-hoc security projects Support and resolve issues identified during penetration testing Ideal Experience We're looking for someone with strong hands-on experience in most of the following technologies: Essential: CrowdStrike EDR Mimecast Duo, Okta Rapid7 IVM, Tenable IO or Nessus Palo Alto Firewalls, InTune, Entra ID, Active Directory Desirable: Imperva WAF, Menlo Security, Cisco Secure Access/Umbrella, KnowBe4, AppCheck Ivanti or Automox patching Kali Linux, Metasploit, NMAP, BurpSuite Candidate Profile Professional certifications such as CISM, MS SC100/200/900, OSCP are advantageous Background in financial services, SOC environments, or penetration testing preferred Strong interpersonal and communication skills, with the ability to engage across teams and deliver training effectively Able to manage multiple priorities and collaborate cross-functionally What's on Offer Competitive salary 25 days annual leave plus bank holidays Discretionary annual bonus scheme Contributory pension (SIPP), life assurance, income protection Interest-free season ticket loan Subsidised gym membership Ready to step into a key security leadership role with one of London's premier trading firms? Apply now and help us secure the future of global trading May & Stephens Ltd is acting as an Employment Agency in relation to this vacancy.
Senior IT Security Engineer London (Hybrid) 80,000 - 85,000 DOE + Bonus + Benefits Join a leading London-based broker and market maker with offices worldwide! We are looking for a Senior IT Security Engineer to play a vital role in safeguarding critical infrastructure and data, working as part of a close-knit, expert IT Security team. The Role You will be instrumental in developing, implementing, and maintaining security solutions that protect systems from ever-evolving cyber threats. You'll serve as the technical lead, drive key security initiatives, and play a pivotal role in mentoring junior team members. Key Responsibilities Monitor, manage, and respond to threats via SIEM, SOAR, and EDR platforms Conduct vulnerability scans and support remediation and risk mitigation efforts Oversee WAF, DDoS, VPN, and perimeter firewalls Manage Email and Web Security Gateways Administer MFA, SSO, PAM, MDM/MAM, and Conditional Access systems Maintain security certificates, encryption keys, and IDS/IPS systems Deliver cybersecurity awareness training and lead ad-hoc security projects Support and resolve issues identified during penetration testing Ideal Experience We're looking for someone with strong hands-on experience in most of the following technologies: Essential: CrowdStrike EDR Mimecast Duo, Okta Rapid7 IVM, Tenable IO or Nessus Palo Alto Firewalls, InTune, Entra ID, Active Directory Desirable: Imperva WAF, Menlo Security, Cisco Secure Access/Umbrella, KnowBe4, AppCheck Ivanti or Automox patching Kali Linux, Metasploit, NMAP, BurpSuite Candidate Profile Professional certifications such as CISM, MS SC100/200/900, OSCP are advantageous Background in financial services, SOC environments, or penetration testing preferred Strong interpersonal and communication skills, with the ability to engage across teams and deliver training effectively Able to manage multiple priorities and collaborate cross-functionally What's on Offer Competitive salary 25 days annual leave plus bank holidays Discretionary annual bonus scheme Contributory pension (SIPP), life assurance, income protection Interest-free season ticket loan Subsidised gym membership Ready to step into a key security leadership role with one of London's premier trading firms? Apply now and help us secure the future of global trading May & Stephens Ltd is acting as an Employment Agency in relation to this vacancy.
Jul 15, 2025
Full time
Senior IT Security Engineer London (Hybrid) 80,000 - 85,000 DOE + Bonus + Benefits Join a leading London-based broker and market maker with offices worldwide! We are looking for a Senior IT Security Engineer to play a vital role in safeguarding critical infrastructure and data, working as part of a close-knit, expert IT Security team. The Role You will be instrumental in developing, implementing, and maintaining security solutions that protect systems from ever-evolving cyber threats. You'll serve as the technical lead, drive key security initiatives, and play a pivotal role in mentoring junior team members. Key Responsibilities Monitor, manage, and respond to threats via SIEM, SOAR, and EDR platforms Conduct vulnerability scans and support remediation and risk mitigation efforts Oversee WAF, DDoS, VPN, and perimeter firewalls Manage Email and Web Security Gateways Administer MFA, SSO, PAM, MDM/MAM, and Conditional Access systems Maintain security certificates, encryption keys, and IDS/IPS systems Deliver cybersecurity awareness training and lead ad-hoc security projects Support and resolve issues identified during penetration testing Ideal Experience We're looking for someone with strong hands-on experience in most of the following technologies: Essential: CrowdStrike EDR Mimecast Duo, Okta Rapid7 IVM, Tenable IO or Nessus Palo Alto Firewalls, InTune, Entra ID, Active Directory Desirable: Imperva WAF, Menlo Security, Cisco Secure Access/Umbrella, KnowBe4, AppCheck Ivanti or Automox patching Kali Linux, Metasploit, NMAP, BurpSuite Candidate Profile Professional certifications such as CISM, MS SC100/200/900, OSCP are advantageous Background in financial services, SOC environments, or penetration testing preferred Strong interpersonal and communication skills, with the ability to engage across teams and deliver training effectively Able to manage multiple priorities and collaborate cross-functionally What's on Offer Competitive salary 25 days annual leave plus bank holidays Discretionary annual bonus scheme Contributory pension (SIPP), life assurance, income protection Interest-free season ticket loan Subsidised gym membership Ready to step into a key security leadership role with one of London's premier trading firms? Apply now and help us secure the future of global trading May & Stephens Ltd is acting as an Employment Agency in relation to this vacancy.
Locations : Boston Canary Wharf Gurgaon Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Director - Secure Devices is responsible for protecting BCG's edge and endpoint environments, including laptops, mobile phones, corporate-managed, BYOD, and server-side devices. This critical role leads the engineering and enablement of endpoint protection technologies, ensuring device compliance, threat detection, and automated response capabilities. The role combines strong technical leadership, deep expertise in endpoint protection platforms, and a collaborative approach to operationalize security across all user and device touchpoints globally. Key Responsibilities: Endpoint Security Strategy & Engineering: Define and lead the secure device strategy, ensuring strong protection across all device types and operating systems. Engineer and operate scalable solutions for endpoint protection, data loss prevention (DLP), and compliance checking. Build automated controls for device posture, encryption, threat detection, and remediation. Own and optimize integrations with tools such as Microsoft Defender, Purview, Symantec, CrowdStrike, or equivalent. Platform Integration & Automation: Drive automation for device onboarding, compliance validation, and health monitoring. Ensure endpoint telemetry is integrated with SIEM platforms and observability stacks. Partner with platform and infrastructure teams to enforce secure device baselines and policies. Build self-healing, zero-trust-aligned architectures for secure device management. Observability & Event Management: Implement real-time observability of endpoint health, risk exposure, and threat posture. Integrate with cybersecurity event and incident management pipelines for early detection and rapid response. Collaborate with the cyber and incident response teams to streamline investigation and containment. Ensure high-fidelity logging and alerting from all edge device sources. Compliance & Risk Management: Ensure devices meet internal policies and external regulatory standards through automation and audit-readiness. Drive policy enforcement through scalable automation and end-user experience design. Manage the lifecycle of security configuration across device fleets globally. Collaboration & Stakeholder Engagement: Work closely with IT support, mobility, infrastructure, and security operations teams. Partner with cyber, legal, and compliance stakeholders to define and enforce device governance policies. Serve as a key contributor to global security programs and strategic initiatives. Leadership & Operational Excellence: Lead a global engineering team responsible for endpoint protection tooling and device compliance. Foster a culture of security, automation, transparency, and continuous improvement. Define and track SLAs, SLOs, and KPIs related to device health, compliance, and risk. What You'll Bring Required Qualifications: 12+ years of experience in endpoint security, device management, or security engineering roles. Proven experience implementing and operating tools such as Microsoft Defender, Purview, Symantec, or CrowdStrike. Deep technical understanding of endpoint protection, mobile security, and compliance tooling. Strong background in automation, scripting, and observability practices. Experience working with large, global device fleets and BYOD models. Preferred Qualifications: Familiarity with zero-trust security models and endpoint detection and response (EDR). Certifications such as CISSP, CISM, Microsoft Security certifications, or equivalent. Experience integrating device telemetry into SIEM and SOAR platforms. Who You'll Work With Work Environment & Additional Information: Hybrid or on-site work model. Occasional travel for global alignment or vendor engagements. Ability to operate in a fast-paced, security-first engineering environment. The Director - Secure Devices plays a mission-critical role in securing BCG's edge footprint, from user laptops to mobile and unmanaged devices. By delivering high-visibility, automated, and resilient endpoint protection capabilities, this role ensures BCG maintains a strong, scalable, and adaptive defense posture aligned to the modern threat landscape. Additional info Total compensation for this role includes base salary, annual discretionary performance bonus, retirement contribution, and a market leading benefits package described below. The base salary range for this role is $181,000.00 - $221,000.00 This is an estimated range, however, specific base salaries within the range depend on various factors such as experience and skill set. It is not common for new BCG employees to be hired at the high-end of the salary range. BCG regularly reviews its ranges to ensure market competitiveness. In addition to your base salary, your total compensation will include a bonus of up to 30% and a generous retirement contribution that starts at 5% and moves to 10% after 2 years. All of our plans provide best in class coverage: Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children Low $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs Dental coverage, including up to $5,000 in orthodontia benefits Vision insurance with coverage for both glasses and contact lenses annually Reimbursement for gym memberships and other fitness activities Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month) Paid sick time on an as needed basis Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
Jul 14, 2025
Full time
Locations : Boston Canary Wharf Gurgaon Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Director - Secure Devices is responsible for protecting BCG's edge and endpoint environments, including laptops, mobile phones, corporate-managed, BYOD, and server-side devices. This critical role leads the engineering and enablement of endpoint protection technologies, ensuring device compliance, threat detection, and automated response capabilities. The role combines strong technical leadership, deep expertise in endpoint protection platforms, and a collaborative approach to operationalize security across all user and device touchpoints globally. Key Responsibilities: Endpoint Security Strategy & Engineering: Define and lead the secure device strategy, ensuring strong protection across all device types and operating systems. Engineer and operate scalable solutions for endpoint protection, data loss prevention (DLP), and compliance checking. Build automated controls for device posture, encryption, threat detection, and remediation. Own and optimize integrations with tools such as Microsoft Defender, Purview, Symantec, CrowdStrike, or equivalent. Platform Integration & Automation: Drive automation for device onboarding, compliance validation, and health monitoring. Ensure endpoint telemetry is integrated with SIEM platforms and observability stacks. Partner with platform and infrastructure teams to enforce secure device baselines and policies. Build self-healing, zero-trust-aligned architectures for secure device management. Observability & Event Management: Implement real-time observability of endpoint health, risk exposure, and threat posture. Integrate with cybersecurity event and incident management pipelines for early detection and rapid response. Collaborate with the cyber and incident response teams to streamline investigation and containment. Ensure high-fidelity logging and alerting from all edge device sources. Compliance & Risk Management: Ensure devices meet internal policies and external regulatory standards through automation and audit-readiness. Drive policy enforcement through scalable automation and end-user experience design. Manage the lifecycle of security configuration across device fleets globally. Collaboration & Stakeholder Engagement: Work closely with IT support, mobility, infrastructure, and security operations teams. Partner with cyber, legal, and compliance stakeholders to define and enforce device governance policies. Serve as a key contributor to global security programs and strategic initiatives. Leadership & Operational Excellence: Lead a global engineering team responsible for endpoint protection tooling and device compliance. Foster a culture of security, automation, transparency, and continuous improvement. Define and track SLAs, SLOs, and KPIs related to device health, compliance, and risk. What You'll Bring Required Qualifications: 12+ years of experience in endpoint security, device management, or security engineering roles. Proven experience implementing and operating tools such as Microsoft Defender, Purview, Symantec, or CrowdStrike. Deep technical understanding of endpoint protection, mobile security, and compliance tooling. Strong background in automation, scripting, and observability practices. Experience working with large, global device fleets and BYOD models. Preferred Qualifications: Familiarity with zero-trust security models and endpoint detection and response (EDR). Certifications such as CISSP, CISM, Microsoft Security certifications, or equivalent. Experience integrating device telemetry into SIEM and SOAR platforms. Who You'll Work With Work Environment & Additional Information: Hybrid or on-site work model. Occasional travel for global alignment or vendor engagements. Ability to operate in a fast-paced, security-first engineering environment. The Director - Secure Devices plays a mission-critical role in securing BCG's edge footprint, from user laptops to mobile and unmanaged devices. By delivering high-visibility, automated, and resilient endpoint protection capabilities, this role ensures BCG maintains a strong, scalable, and adaptive defense posture aligned to the modern threat landscape. Additional info Total compensation for this role includes base salary, annual discretionary performance bonus, retirement contribution, and a market leading benefits package described below. The base salary range for this role is $181,000.00 - $221,000.00 This is an estimated range, however, specific base salaries within the range depend on various factors such as experience and skill set. It is not common for new BCG employees to be hired at the high-end of the salary range. BCG regularly reviews its ranges to ensure market competitiveness. In addition to your base salary, your total compensation will include a bonus of up to 30% and a generous retirement contribution that starts at 5% and moves to 10% after 2 years. All of our plans provide best in class coverage: Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children Low $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs Dental coverage, including up to $5,000 in orthodontia benefits Vision insurance with coverage for both glasses and contact lenses annually Reimbursement for gym memberships and other fitness activities Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month) Paid sick time on an as needed basis Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
Locations : Boston Canary Wharf Gurgaon Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Director - Secure Devices is responsible for protecting BCG's edge and endpoint environments, including laptops, mobile phones, corporate-managed, BYOD, and server-side devices. This critical role leads the engineering and enablement of endpoint protection technologies, ensuring device compliance, threat detection, and automated response capabilities. The role combines strong technical leadership, deep expertise in endpoint protection platforms, and a collaborative approach to operationalize security across all user and device touchpoints globally. Key Responsibilities: Endpoint Security Strategy & Engineering: Define and lead the secure device strategy, ensuring strong protection across all device types and operating systems. Engineer and operate scalable solutions for endpoint protection, data loss prevention (DLP), and compliance checking. Build automated controls for device posture, encryption, threat detection, and remediation. Own and optimize integrations with tools such as Microsoft Defender, Purview, Symantec, CrowdStrike, or equivalent. Platform Integration & Automation: Drive automation for device onboarding, compliance validation, and health monitoring. Ensure endpoint telemetry is integrated with SIEM platforms and observability stacks. Partner with platform and infrastructure teams to enforce secure device baselines and policies. Build self-healing, zero-trust-aligned architectures for secure device management. Observability & Event Management: Implement real-time observability of endpoint health, risk exposure, and threat posture. Integrate with cybersecurity event and incident management pipelines for early detection and rapid response. Collaborate with the cyber and incident response teams to streamline investigation and containment. Ensure high-fidelity logging and alerting from all edge device sources. Compliance & Risk Management: Ensure devices meet internal policies and external regulatory standards through automation and audit-readiness. Drive policy enforcement through scalable automation and end-user experience design. Manage the lifecycle of security configuration across device fleets globally. Collaboration & Stakeholder Engagement: Work closely with IT support, mobility, infrastructure, and security operations teams. Partner with cyber, legal, and compliance stakeholders to define and enforce device governance policies. Serve as a key contributor to global security programs and strategic initiatives. Leadership & Operational Excellence: Lead a global engineering team responsible for endpoint protection tooling and device compliance. Foster a culture of security, automation, transparency, and continuous improvement. Define and track SLAs, SLOs, and KPIs related to device health, compliance, and risk. What You'll Bring Required Qualifications: 12+ years of experience in endpoint security, device management, or security engineering roles. Proven experience implementing and operating tools such as Microsoft Defender, Purview, Symantec, or CrowdStrike. Deep technical understanding of endpoint protection, mobile security, and compliance tooling. Strong background in automation, scripting, and observability practices. Experience working with large, global device fleets and BYOD models. Preferred Qualifications: Familiarity with zero-trust security models and endpoint detection and response (EDR). Certifications such as CISSP, CISM, Microsoft Security certifications, or equivalent. Experience integrating device telemetry into SIEM and SOAR platforms. Who You'll Work With Work Environment & Additional Information: Hybrid or on-site work model. Occasional travel for global alignment or vendor engagements. Ability to operate in a fast-paced, security-first engineering environment. The Director - Secure Devices plays a mission-critical role in securing BCG's edge footprint, from user laptops to mobile and unmanaged devices. By delivering high-visibility, automated, and resilient endpoint protection capabilities, this role ensures BCG maintains a strong, scalable, and adaptive defense posture aligned to the modern threat landscape. Additional info Total compensation for this role includes base salary, annual discretionary performance bonus, retirement contribution, and a market leading benefits package described below. The base salary range for this role is $181,000.00 - $221,000.00 This is an estimated range, however, specific base salaries within the range depend on various factors such as experience and skill set. It is not common for new BCG employees to be hired at the high-end of the salary range. BCG regularly reviews its ranges to ensure market competitiveness. In addition to your base salary, your total compensation will include a bonus of up to 30% and a generous retirement contribution that starts at 5% and moves to 10% after 2 years. All of our plans provide best in class coverage: Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children Low $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs Dental coverage, including up to $5,000 in orthodontia benefits Vision insurance with coverage for both glasses and contact lenses annually Reimbursement for gym memberships and other fitness activities Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month) Paid sick time on an as needed basis Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
Jul 13, 2025
Full time
Locations : Boston Canary Wharf Gurgaon Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Director - Secure Devices is responsible for protecting BCG's edge and endpoint environments, including laptops, mobile phones, corporate-managed, BYOD, and server-side devices. This critical role leads the engineering and enablement of endpoint protection technologies, ensuring device compliance, threat detection, and automated response capabilities. The role combines strong technical leadership, deep expertise in endpoint protection platforms, and a collaborative approach to operationalize security across all user and device touchpoints globally. Key Responsibilities: Endpoint Security Strategy & Engineering: Define and lead the secure device strategy, ensuring strong protection across all device types and operating systems. Engineer and operate scalable solutions for endpoint protection, data loss prevention (DLP), and compliance checking. Build automated controls for device posture, encryption, threat detection, and remediation. Own and optimize integrations with tools such as Microsoft Defender, Purview, Symantec, CrowdStrike, or equivalent. Platform Integration & Automation: Drive automation for device onboarding, compliance validation, and health monitoring. Ensure endpoint telemetry is integrated with SIEM platforms and observability stacks. Partner with platform and infrastructure teams to enforce secure device baselines and policies. Build self-healing, zero-trust-aligned architectures for secure device management. Observability & Event Management: Implement real-time observability of endpoint health, risk exposure, and threat posture. Integrate with cybersecurity event and incident management pipelines for early detection and rapid response. Collaborate with the cyber and incident response teams to streamline investigation and containment. Ensure high-fidelity logging and alerting from all edge device sources. Compliance & Risk Management: Ensure devices meet internal policies and external regulatory standards through automation and audit-readiness. Drive policy enforcement through scalable automation and end-user experience design. Manage the lifecycle of security configuration across device fleets globally. Collaboration & Stakeholder Engagement: Work closely with IT support, mobility, infrastructure, and security operations teams. Partner with cyber, legal, and compliance stakeholders to define and enforce device governance policies. Serve as a key contributor to global security programs and strategic initiatives. Leadership & Operational Excellence: Lead a global engineering team responsible for endpoint protection tooling and device compliance. Foster a culture of security, automation, transparency, and continuous improvement. Define and track SLAs, SLOs, and KPIs related to device health, compliance, and risk. What You'll Bring Required Qualifications: 12+ years of experience in endpoint security, device management, or security engineering roles. Proven experience implementing and operating tools such as Microsoft Defender, Purview, Symantec, or CrowdStrike. Deep technical understanding of endpoint protection, mobile security, and compliance tooling. Strong background in automation, scripting, and observability practices. Experience working with large, global device fleets and BYOD models. Preferred Qualifications: Familiarity with zero-trust security models and endpoint detection and response (EDR). Certifications such as CISSP, CISM, Microsoft Security certifications, or equivalent. Experience integrating device telemetry into SIEM and SOAR platforms. Who You'll Work With Work Environment & Additional Information: Hybrid or on-site work model. Occasional travel for global alignment or vendor engagements. Ability to operate in a fast-paced, security-first engineering environment. The Director - Secure Devices plays a mission-critical role in securing BCG's edge footprint, from user laptops to mobile and unmanaged devices. By delivering high-visibility, automated, and resilient endpoint protection capabilities, this role ensures BCG maintains a strong, scalable, and adaptive defense posture aligned to the modern threat landscape. Additional info Total compensation for this role includes base salary, annual discretionary performance bonus, retirement contribution, and a market leading benefits package described below. The base salary range for this role is $181,000.00 - $221,000.00 This is an estimated range, however, specific base salaries within the range depend on various factors such as experience and skill set. It is not common for new BCG employees to be hired at the high-end of the salary range. BCG regularly reviews its ranges to ensure market competitiveness. In addition to your base salary, your total compensation will include a bonus of up to 30% and a generous retirement contribution that starts at 5% and moves to 10% after 2 years. All of our plans provide best in class coverage: Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children Low $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs Dental coverage, including up to $5,000 in orthodontia benefits Vision insurance with coverage for both glasses and contact lenses annually Reimbursement for gym memberships and other fitness activities Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month) Paid sick time on an as needed basis Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
Locations : Boston Canary Wharf Gurgaon Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Director - Secure Devices is responsible for protecting BCG's edge and endpoint environments, including laptops, mobile phones, corporate-managed, BYOD, and server-side devices. This critical role leads the engineering and enablement of endpoint protection technologies, ensuring device compliance, threat detection, and automated response capabilities. The role combines strong technical leadership, deep expertise in endpoint protection platforms, and a collaborative approach to operationalize security across all user and device touchpoints globally. Key Responsibilities: Endpoint Security Strategy & Engineering: Define and lead the secure device strategy, ensuring strong protection across all device types and operating systems. Engineer and operate scalable solutions for endpoint protection, data loss prevention (DLP), and compliance checking. Build automated controls for device posture, encryption, threat detection, and remediation. Own and optimize integrations with tools such as Microsoft Defender, Purview, Symantec, CrowdStrike, or equivalent. Platform Integration & Automation: Drive automation for device onboarding, compliance validation, and health monitoring. Ensure endpoint telemetry is integrated with SIEM platforms and observability stacks. Partner with platform and infrastructure teams to enforce secure device baselines and policies. Build self-healing, zero-trust-aligned architectures for secure device management. Observability & Event Management: Implement real-time observability of endpoint health, risk exposure, and threat posture. Integrate with cybersecurity event and incident management pipelines for early detection and rapid response. Collaborate with the cyber and incident response teams to streamline investigation and containment. Ensure high-fidelity logging and alerting from all edge device sources. Compliance & Risk Management: Ensure devices meet internal policies and external regulatory standards through automation and audit-readiness. Drive policy enforcement through scalable automation and end-user experience design. Manage the lifecycle of security configuration across device fleets globally. Collaboration & Stakeholder Engagement: Work closely with IT support, mobility, infrastructure, and security operations teams. Partner with cyber, legal, and compliance stakeholders to define and enforce device governance policies. Serve as a key contributor to global security programs and strategic initiatives. Leadership & Operational Excellence: Lead a global engineering team responsible for endpoint protection tooling and device compliance. Foster a culture of security, automation, transparency, and continuous improvement. Define and track SLAs, SLOs, and KPIs related to device health, compliance, and risk. What You'll Bring Required Qualifications: 12+ years of experience in endpoint security, device management, or security engineering roles. Proven experience implementing and operating tools such as Microsoft Defender, Purview, Symantec, or CrowdStrike. Deep technical understanding of endpoint protection, mobile security, and compliance tooling. Strong background in automation, scripting, and observability practices. Experience working with large, global device fleets and BYOD models. Preferred Qualifications: Familiarity with zero-trust security models and endpoint detection and response (EDR). Certifications such as CISSP, CISM, Microsoft Security certifications, or equivalent. Experience integrating device telemetry into SIEM and SOAR platforms. Who You'll Work With Work Environment & Additional Information: Hybrid or on-site work model. Occasional travel for global alignment or vendor engagements. Ability to operate in a fast-paced, security-first engineering environment. The Director - Secure Devices plays a mission-critical role in securing BCG's edge footprint, from user laptops to mobile and unmanaged devices. By delivering high-visibility, automated, and resilient endpoint protection capabilities, this role ensures BCG maintains a strong, scalable, and adaptive defense posture aligned to the modern threat landscape. Additional info Total compensation for this role includes base salary, annual discretionary performance bonus, retirement contribution, and a market leading benefits package described below. The base salary range for this role is $181,000.00 - $221,000.00 This is an estimated range, however, specific base salaries within the range depend on various factors such as experience and skill set. It is not common for new BCG employees to be hired at the high-end of the salary range. BCG regularly reviews its ranges to ensure market competitiveness. In addition to your base salary, your total compensation will include a bonus of up to 30% and a generous retirement contribution that starts at 5% and moves to 10% after 2 years. All of our plans provide best in class coverage: Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children Low $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs Dental coverage, including up to $5,000 in orthodontia benefits Vision insurance with coverage for both glasses and contact lenses annually Reimbursement for gym memberships and other fitness activities Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month) Paid sick time on an as needed basis Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
Jul 13, 2025
Full time
Locations : Boston Canary Wharf Gurgaon Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Director - Secure Devices is responsible for protecting BCG's edge and endpoint environments, including laptops, mobile phones, corporate-managed, BYOD, and server-side devices. This critical role leads the engineering and enablement of endpoint protection technologies, ensuring device compliance, threat detection, and automated response capabilities. The role combines strong technical leadership, deep expertise in endpoint protection platforms, and a collaborative approach to operationalize security across all user and device touchpoints globally. Key Responsibilities: Endpoint Security Strategy & Engineering: Define and lead the secure device strategy, ensuring strong protection across all device types and operating systems. Engineer and operate scalable solutions for endpoint protection, data loss prevention (DLP), and compliance checking. Build automated controls for device posture, encryption, threat detection, and remediation. Own and optimize integrations with tools such as Microsoft Defender, Purview, Symantec, CrowdStrike, or equivalent. Platform Integration & Automation: Drive automation for device onboarding, compliance validation, and health monitoring. Ensure endpoint telemetry is integrated with SIEM platforms and observability stacks. Partner with platform and infrastructure teams to enforce secure device baselines and policies. Build self-healing, zero-trust-aligned architectures for secure device management. Observability & Event Management: Implement real-time observability of endpoint health, risk exposure, and threat posture. Integrate with cybersecurity event and incident management pipelines for early detection and rapid response. Collaborate with the cyber and incident response teams to streamline investigation and containment. Ensure high-fidelity logging and alerting from all edge device sources. Compliance & Risk Management: Ensure devices meet internal policies and external regulatory standards through automation and audit-readiness. Drive policy enforcement through scalable automation and end-user experience design. Manage the lifecycle of security configuration across device fleets globally. Collaboration & Stakeholder Engagement: Work closely with IT support, mobility, infrastructure, and security operations teams. Partner with cyber, legal, and compliance stakeholders to define and enforce device governance policies. Serve as a key contributor to global security programs and strategic initiatives. Leadership & Operational Excellence: Lead a global engineering team responsible for endpoint protection tooling and device compliance. Foster a culture of security, automation, transparency, and continuous improvement. Define and track SLAs, SLOs, and KPIs related to device health, compliance, and risk. What You'll Bring Required Qualifications: 12+ years of experience in endpoint security, device management, or security engineering roles. Proven experience implementing and operating tools such as Microsoft Defender, Purview, Symantec, or CrowdStrike. Deep technical understanding of endpoint protection, mobile security, and compliance tooling. Strong background in automation, scripting, and observability practices. Experience working with large, global device fleets and BYOD models. Preferred Qualifications: Familiarity with zero-trust security models and endpoint detection and response (EDR). Certifications such as CISSP, CISM, Microsoft Security certifications, or equivalent. Experience integrating device telemetry into SIEM and SOAR platforms. Who You'll Work With Work Environment & Additional Information: Hybrid or on-site work model. Occasional travel for global alignment or vendor engagements. Ability to operate in a fast-paced, security-first engineering environment. The Director - Secure Devices plays a mission-critical role in securing BCG's edge footprint, from user laptops to mobile and unmanaged devices. By delivering high-visibility, automated, and resilient endpoint protection capabilities, this role ensures BCG maintains a strong, scalable, and adaptive defense posture aligned to the modern threat landscape. Additional info Total compensation for this role includes base salary, annual discretionary performance bonus, retirement contribution, and a market leading benefits package described below. The base salary range for this role is $181,000.00 - $221,000.00 This is an estimated range, however, specific base salaries within the range depend on various factors such as experience and skill set. It is not common for new BCG employees to be hired at the high-end of the salary range. BCG regularly reviews its ranges to ensure market competitiveness. In addition to your base salary, your total compensation will include a bonus of up to 30% and a generous retirement contribution that starts at 5% and moves to 10% after 2 years. All of our plans provide best in class coverage: Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children Low $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs Dental coverage, including up to $5,000 in orthodontia benefits Vision insurance with coverage for both glasses and contact lenses annually Reimbursement for gym memberships and other fitness activities Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month) Paid sick time on an as needed basis Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
Locations : Boston Canary Wharf Gurgaon Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Director - Secure Devices is responsible for protecting BCG's edge and endpoint environments, including laptops, mobile phones, corporate-managed, BYOD, and server-side devices. This critical role leads the engineering and enablement of endpoint protection technologies, ensuring device compliance, threat detection, and automated response capabilities. The role combines strong technical leadership, deep expertise in endpoint protection platforms, and a collaborative approach to operationalize security across all user and device touchpoints globally. Key Responsibilities: Endpoint Security Strategy & Engineering: Define and lead the secure device strategy, ensuring strong protection across all device types and operating systems. Engineer and operate scalable solutions for endpoint protection, data loss prevention (DLP), and compliance checking. Build automated controls for device posture, encryption, threat detection, and remediation. Own and optimize integrations with tools such as Microsoft Defender, Purview, Symantec, CrowdStrike, or equivalent. Platform Integration & Automation: Drive automation for device onboarding, compliance validation, and health monitoring. Ensure endpoint telemetry is integrated with SIEM platforms and observability stacks. Partner with platform and infrastructure teams to enforce secure device baselines and policies. Build self-healing, zero-trust-aligned architectures for secure device management. Observability & Event Management: Implement real-time observability of endpoint health, risk exposure, and threat posture. Integrate with cybersecurity event and incident management pipelines for early detection and rapid response. Collaborate with the cyber and incident response teams to streamline investigation and containment. Ensure high-fidelity logging and alerting from all edge device sources. Compliance & Risk Management: Ensure devices meet internal policies and external regulatory standards through automation and audit-readiness. Drive policy enforcement through scalable automation and end-user experience design. Manage the lifecycle of security configuration across device fleets globally. Collaboration & Stakeholder Engagement: Work closely with IT support, mobility, infrastructure, and security operations teams. Partner with cyber, legal, and compliance stakeholders to define and enforce device governance policies. Serve as a key contributor to global security programs and strategic initiatives. Leadership & Operational Excellence: Lead a global engineering team responsible for endpoint protection tooling and device compliance. Foster a culture of security, automation, transparency, and continuous improvement. Define and track SLAs, SLOs, and KPIs related to device health, compliance, and risk. What You'll Bring Required Qualifications: 12+ years of experience in endpoint security, device management, or security engineering roles. Proven experience implementing and operating tools such as Microsoft Defender, Purview, Symantec, or CrowdStrike. Deep technical understanding of endpoint protection, mobile security, and compliance tooling. Strong background in automation, scripting, and observability practices. Experience working with large, global device fleets and BYOD models. Preferred Qualifications: Familiarity with zero-trust security models and endpoint detection and response (EDR). Certifications such as CISSP, CISM, Microsoft Security certifications, or equivalent. Experience integrating device telemetry into SIEM and SOAR platforms. Who You'll Work With Work Environment & Additional Information: Hybrid or on-site work model. Occasional travel for global alignment or vendor engagements. Ability to operate in a fast-paced, security-first engineering environment. The Director - Secure Devices plays a mission-critical role in securing BCG's edge footprint, from user laptops to mobile and unmanaged devices. By delivering high-visibility, automated, and resilient endpoint protection capabilities, this role ensures BCG maintains a strong, scalable, and adaptive defense posture aligned to the modern threat landscape. Additional info Total compensation for this role includes base salary, annual discretionary performance bonus, retirement contribution, and a market leading benefits package described below. The base salary range for this role is $181,000.00 - $221,000.00 This is an estimated range, however, specific base salaries within the range depend on various factors such as experience and skill set. It is not common for new BCG employees to be hired at the high-end of the salary range. BCG regularly reviews its ranges to ensure market competitiveness. In addition to your base salary, your total compensation will include a bonus of up to 30% and a generous retirement contribution that starts at 5% and moves to 10% after 2 years. All of our plans provide best in class coverage: Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children Low $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs Dental coverage, including up to $5,000 in orthodontia benefits Vision insurance with coverage for both glasses and contact lenses annually Reimbursement for gym memberships and other fitness activities Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month) Paid sick time on an as needed basis Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
Jul 12, 2025
Full time
Locations : Boston Canary Wharf Gurgaon Who We Are Boston Consulting Group partners with leaders in business and society to tackle their most important challenges and capture their greatest opportunities. BCG was the pioneer in business strategy when it was founded in 1963. Today, we help clients with total transformation-inspiring complex change, enabling organizations to grow, building competitive advantage, and driving bottom-line impact. To succeed, organizations must blend digital and human capabilities. Our diverse, global teams bring deep industry and functional expertise and a range of perspectives to spark change. BCG delivers solutions through leading-edge management consulting along with technology and design, corporate and digital ventures-and business purpose. We work in a uniquely collaborative model across the firm and throughout all levels of the client organization, generating results that allow our clients to thrive. What You'll Do The Director - Secure Devices is responsible for protecting BCG's edge and endpoint environments, including laptops, mobile phones, corporate-managed, BYOD, and server-side devices. This critical role leads the engineering and enablement of endpoint protection technologies, ensuring device compliance, threat detection, and automated response capabilities. The role combines strong technical leadership, deep expertise in endpoint protection platforms, and a collaborative approach to operationalize security across all user and device touchpoints globally. Key Responsibilities: Endpoint Security Strategy & Engineering: Define and lead the secure device strategy, ensuring strong protection across all device types and operating systems. Engineer and operate scalable solutions for endpoint protection, data loss prevention (DLP), and compliance checking. Build automated controls for device posture, encryption, threat detection, and remediation. Own and optimize integrations with tools such as Microsoft Defender, Purview, Symantec, CrowdStrike, or equivalent. Platform Integration & Automation: Drive automation for device onboarding, compliance validation, and health monitoring. Ensure endpoint telemetry is integrated with SIEM platforms and observability stacks. Partner with platform and infrastructure teams to enforce secure device baselines and policies. Build self-healing, zero-trust-aligned architectures for secure device management. Observability & Event Management: Implement real-time observability of endpoint health, risk exposure, and threat posture. Integrate with cybersecurity event and incident management pipelines for early detection and rapid response. Collaborate with the cyber and incident response teams to streamline investigation and containment. Ensure high-fidelity logging and alerting from all edge device sources. Compliance & Risk Management: Ensure devices meet internal policies and external regulatory standards through automation and audit-readiness. Drive policy enforcement through scalable automation and end-user experience design. Manage the lifecycle of security configuration across device fleets globally. Collaboration & Stakeholder Engagement: Work closely with IT support, mobility, infrastructure, and security operations teams. Partner with cyber, legal, and compliance stakeholders to define and enforce device governance policies. Serve as a key contributor to global security programs and strategic initiatives. Leadership & Operational Excellence: Lead a global engineering team responsible for endpoint protection tooling and device compliance. Foster a culture of security, automation, transparency, and continuous improvement. Define and track SLAs, SLOs, and KPIs related to device health, compliance, and risk. What You'll Bring Required Qualifications: 12+ years of experience in endpoint security, device management, or security engineering roles. Proven experience implementing and operating tools such as Microsoft Defender, Purview, Symantec, or CrowdStrike. Deep technical understanding of endpoint protection, mobile security, and compliance tooling. Strong background in automation, scripting, and observability practices. Experience working with large, global device fleets and BYOD models. Preferred Qualifications: Familiarity with zero-trust security models and endpoint detection and response (EDR). Certifications such as CISSP, CISM, Microsoft Security certifications, or equivalent. Experience integrating device telemetry into SIEM and SOAR platforms. Who You'll Work With Work Environment & Additional Information: Hybrid or on-site work model. Occasional travel for global alignment or vendor engagements. Ability to operate in a fast-paced, security-first engineering environment. The Director - Secure Devices plays a mission-critical role in securing BCG's edge footprint, from user laptops to mobile and unmanaged devices. By delivering high-visibility, automated, and resilient endpoint protection capabilities, this role ensures BCG maintains a strong, scalable, and adaptive defense posture aligned to the modern threat landscape. Additional info Total compensation for this role includes base salary, annual discretionary performance bonus, retirement contribution, and a market leading benefits package described below. The base salary range for this role is $181,000.00 - $221,000.00 This is an estimated range, however, specific base salaries within the range depend on various factors such as experience and skill set. It is not common for new BCG employees to be hired at the high-end of the salary range. BCG regularly reviews its ranges to ensure market competitiveness. In addition to your base salary, your total compensation will include a bonus of up to 30% and a generous retirement contribution that starts at 5% and moves to 10% after 2 years. All of our plans provide best in class coverage: Zero dollar ($0) health insurance premiums for BCG employees, spouses, and children Low $10 (USD) copays for trips to the doctor, urgent care visits and prescriptions for generic drugs Dental coverage, including up to $5,000 in orthodontia benefits Vision insurance with coverage for both glasses and contact lenses annually Reimbursement for gym memberships and other fitness activities Fully vested Profit Sharing Retirement Fund contributions made annually, whether you contribute or not, plus the option for employees to make personal contributions to a 401(k) plan Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement Generous paid time off including 12 holidays per year, an annual office closure between Christmas and New Years, and 15 vacation days per year (earned at 1.25 days per month) Paid sick time on an as needed basis Boston Consulting Group is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, age, religion, sex, sexual orientation, gender identity / expression, national origin, disability, protected veteran status, or any other characteristic protected under national, provincial, or local law, where applicable, and those with criminal histories will be considered in a manner consistent with applicable state and local laws. BCG is an E - Verify Employer. Click here for more information on E-Verify.
Security Engineer (Senior) is required by a Financial Brokerage based in the heart of the city of London, by Bank station paying up to 75k + Bonus + Bens - Hybrid role, 3 days min to be office based This Senior IT Security Engineer role offers a unique chance to shape and enhance the security landscape of a forward-thinking organisation. Working closely with the Chief Information Security Officer (CISO) and a dedicated team of 3, this position allows you to make a tangible impact on security strategy and implementation. Why This Role Stands Out: - Influence and Ownership: Take charge of critical aspects of cybersecurity, from network monitoring to cloud security design, and make strategic decisions that drive the company's security posture forward. - Professional Growth: Engage with cutting-edge technologies and methodologies, including AI, machine learning, and advanced analytics, ensuring you stay at the forefront of the cybersecurity field. - Collaborative Environment: Work alongside a team of skilled professionals and security partners, fostering a culture of continuous improvement and shared expertise. - Comprehensive Benefits: Enjoy a competitive salary, professional development opportunities, and a supportive work environment that values work-life balance. Key Responsibilities: - Maintain and monitor network and devices, ensuring robust security patching and vulnerability management. - Develop and implement information security policies, including business continuity and disaster recovery plans. - Provide hands-on expertise in cloud-based technologies (Azure, AWS) with a focus on security, performance, and scalability. - Design and conduct security testing and training for employees. - Perform risk assessments and analyse current security solutions, recommending enhancements. - Support the adoption of new security technologies and best practices. - Stay abreast of the latest cybersecurity threats, trends, and technologies. Qualifications: - Bachelor's degree in Technology, Cyber Security, IT, or a related field. - Over 4 years of experience in a cybersecurity engineering role. - Technical certifications such as CISSP, CISM, CEH preferred; AWS/Azure certifications highly desirable. - In-depth knowledge of network systems, security products, and solutions (e.g., SentinelOne, Crowdstrike, M365). - Proficiency in risk assessment tools and techniques. - Experience with firewalls, VPN solutions, and IDS. - Familiarity with cybersecurity frameworks and standards (NIST CSF, ISO 27001, PCI DSS, Mitre ATT&CK). - Strong problem-solving skills and the ability to work under pressure. - Effective communication and documentation skills. - Ability to manage multiple tasks in a fast-paced environment and work both independently and as part of a team. This role is more than just a job; it's a platform to make a significant impact in the cybersecurity domain. If you have the expertise and drive to excel in this dynamic field, consider this your next big career move.
Mar 08, 2025
Full time
Security Engineer (Senior) is required by a Financial Brokerage based in the heart of the city of London, by Bank station paying up to 75k + Bonus + Bens - Hybrid role, 3 days min to be office based This Senior IT Security Engineer role offers a unique chance to shape and enhance the security landscape of a forward-thinking organisation. Working closely with the Chief Information Security Officer (CISO) and a dedicated team of 3, this position allows you to make a tangible impact on security strategy and implementation. Why This Role Stands Out: - Influence and Ownership: Take charge of critical aspects of cybersecurity, from network monitoring to cloud security design, and make strategic decisions that drive the company's security posture forward. - Professional Growth: Engage with cutting-edge technologies and methodologies, including AI, machine learning, and advanced analytics, ensuring you stay at the forefront of the cybersecurity field. - Collaborative Environment: Work alongside a team of skilled professionals and security partners, fostering a culture of continuous improvement and shared expertise. - Comprehensive Benefits: Enjoy a competitive salary, professional development opportunities, and a supportive work environment that values work-life balance. Key Responsibilities: - Maintain and monitor network and devices, ensuring robust security patching and vulnerability management. - Develop and implement information security policies, including business continuity and disaster recovery plans. - Provide hands-on expertise in cloud-based technologies (Azure, AWS) with a focus on security, performance, and scalability. - Design and conduct security testing and training for employees. - Perform risk assessments and analyse current security solutions, recommending enhancements. - Support the adoption of new security technologies and best practices. - Stay abreast of the latest cybersecurity threats, trends, and technologies. Qualifications: - Bachelor's degree in Technology, Cyber Security, IT, or a related field. - Over 4 years of experience in a cybersecurity engineering role. - Technical certifications such as CISSP, CISM, CEH preferred; AWS/Azure certifications highly desirable. - In-depth knowledge of network systems, security products, and solutions (e.g., SentinelOne, Crowdstrike, M365). - Proficiency in risk assessment tools and techniques. - Experience with firewalls, VPN solutions, and IDS. - Familiarity with cybersecurity frameworks and standards (NIST CSF, ISO 27001, PCI DSS, Mitre ATT&CK). - Strong problem-solving skills and the ability to work under pressure. - Effective communication and documentation skills. - Ability to manage multiple tasks in a fast-paced environment and work both independently and as part of a team. This role is more than just a job; it's a platform to make a significant impact in the cybersecurity domain. If you have the expertise and drive to excel in this dynamic field, consider this your next big career move.
Managed Service Provider IT support would be preferred for this role! The Second Line Engineer embodies a role characterised by diversity and complexity, encompassing elements of 1st, 2nd, and 3rd Line support. This position fosters the development of a seasoned and reliable professional with exceptional teamwork skills, setting a prime example for newcomers in the Service Desk team. This senior role serves as a pivotal point for exploring numerous career avenues, including, but not restricted to, advanced 3rd line support, specialised skill development, consulting, sales, or management. Primary Role Responsibilities Technical ability to resolve issues/requests through the Freshservice portal and support 1st & 2nd line engineers and infrastructure Leadership skills, which encompass the capacity to encourage junior peers, and set a leading example Document Handling skills in writing procedures and work instructions Assisting in Problem Management Incident Management Overview of Tasks and Responsibilities: Provide any supporting reports to stake holders and staff as and when required; Provide guidance, mentorship, and training to junior IT support engineers to enhance their technical skills and promote professional growth; Act as an escalation point for complex technical issues and assist junior colleagues in troubleshooting and resolving them effectively; Lead by example and demonstrate strong leadership qualities by setting high standards for teamwork, problem-solving, and customer service within the 2nd Line team; To maintain a high degree of customer service for all support queries and adhere to all service; management principles and SLA; To arrange for external technical support where problems cannot be resolved in house; Maintain a log of any software or hardware problems detected; To take ownership of user problems and be proactive when dealing with user issues; Support users in the use of computer equipment as and when needed; Maintaining IT SaaS infrastructure and security systems Be able to support 1st line engineers when they need to escalate a request or incident; To allocate more complex service issues to the 3rd line IT Infrastructure Engineers. Knowledge in monitoring/maintaining of Endpoint detection and response platforms (EDR) (Example: BitDefender, Carbon Black, Sentinel One, CrowdStrike); To act at the customer service point of contact between 3rd line and the client. Respond to enquiries from clients and help them resolve any hardware or software problems; Skills & Experience Must have worked in a customer-facing IT support role for 2+ years; Be familiar with ticket systems, logging and remote management and monitoring processes; Excellent Customer Service Skills; Deep working knowledge of the Microsoft stack of technology at administrator level, including Windows Server, Microsoft365 Admin Centres including Azure Entra ID, Office 365, Compliance, Exchange, etc. Additionally, exposure to Azure Virtual Desktop is desirable. Highly technical around networking (TCP/IP, DNS, DHCP etc.), voice and data communications; Demonstrate strong leadership abilities, including the ability to motivate and inspire junior colleagues, delegate tasks effectively, and lead by example; Display excellent problem-solving skills and the ability to think critically to resolve technical issues and implement process improvements; Possess project management skills, including planning, execution, and monitoring, to manage IT projects effectively; Have the ability to address and resolve conflicts within the team, ensuring a harmonious and productive work environment; Identify areas for process improvement within the 2nd Line team and work on implementing enhancements to increase efficiency and service quality; ITIL process aware and be able to create and maintain operational support documentation; In addition, any of the following would be advantageous: Previous experience working for an IT managed services provider (MSP) Microsoft Google Workspace ITIL 4 Foundation certification
Mar 08, 2025
Full time
Managed Service Provider IT support would be preferred for this role! The Second Line Engineer embodies a role characterised by diversity and complexity, encompassing elements of 1st, 2nd, and 3rd Line support. This position fosters the development of a seasoned and reliable professional with exceptional teamwork skills, setting a prime example for newcomers in the Service Desk team. This senior role serves as a pivotal point for exploring numerous career avenues, including, but not restricted to, advanced 3rd line support, specialised skill development, consulting, sales, or management. Primary Role Responsibilities Technical ability to resolve issues/requests through the Freshservice portal and support 1st & 2nd line engineers and infrastructure Leadership skills, which encompass the capacity to encourage junior peers, and set a leading example Document Handling skills in writing procedures and work instructions Assisting in Problem Management Incident Management Overview of Tasks and Responsibilities: Provide any supporting reports to stake holders and staff as and when required; Provide guidance, mentorship, and training to junior IT support engineers to enhance their technical skills and promote professional growth; Act as an escalation point for complex technical issues and assist junior colleagues in troubleshooting and resolving them effectively; Lead by example and demonstrate strong leadership qualities by setting high standards for teamwork, problem-solving, and customer service within the 2nd Line team; To maintain a high degree of customer service for all support queries and adhere to all service; management principles and SLA; To arrange for external technical support where problems cannot be resolved in house; Maintain a log of any software or hardware problems detected; To take ownership of user problems and be proactive when dealing with user issues; Support users in the use of computer equipment as and when needed; Maintaining IT SaaS infrastructure and security systems Be able to support 1st line engineers when they need to escalate a request or incident; To allocate more complex service issues to the 3rd line IT Infrastructure Engineers. Knowledge in monitoring/maintaining of Endpoint detection and response platforms (EDR) (Example: BitDefender, Carbon Black, Sentinel One, CrowdStrike); To act at the customer service point of contact between 3rd line and the client. Respond to enquiries from clients and help them resolve any hardware or software problems; Skills & Experience Must have worked in a customer-facing IT support role for 2+ years; Be familiar with ticket systems, logging and remote management and monitoring processes; Excellent Customer Service Skills; Deep working knowledge of the Microsoft stack of technology at administrator level, including Windows Server, Microsoft365 Admin Centres including Azure Entra ID, Office 365, Compliance, Exchange, etc. Additionally, exposure to Azure Virtual Desktop is desirable. Highly technical around networking (TCP/IP, DNS, DHCP etc.), voice and data communications; Demonstrate strong leadership abilities, including the ability to motivate and inspire junior colleagues, delegate tasks effectively, and lead by example; Display excellent problem-solving skills and the ability to think critically to resolve technical issues and implement process improvements; Possess project management skills, including planning, execution, and monitoring, to manage IT projects effectively; Have the ability to address and resolve conflicts within the team, ensuring a harmonious and productive work environment; Identify areas for process improvement within the 2nd Line team and work on implementing enhancements to increase efficiency and service quality; ITIL process aware and be able to create and maintain operational support documentation; In addition, any of the following would be advantageous: Previous experience working for an IT managed services provider (MSP) Microsoft Google Workspace ITIL 4 Foundation certification
