ZeroFox seeks an Intelligence Analyst (Arabic Language) to join the ZeroFox Services and Analysis Team, you will collect information to identify threats, and generate intelligence to assess risk in relevance to client needs. Intelligence activities can include researching current and emerging threats issues covering physical security, cyber security, geopolitical, reputation risk and compliance issues. The Intelligence Analyst will have an investigative or analytical background and demonstrated exceptional analytic prowess in areas such as trend analysis and pattern recognition, using independent critical thinking and judgment to act, lead, initiate and/or recommend next steps. Discretion, teamwork, and creativity are a must. Key Responsibilities include: Learn and employ ZeroFox patented technology to identify and analyze relevant information collected from the Internet, based on client-specific criteria, to assemble relevant findings for daily intelligence and recurring reporting; Assist in customer care and all production aspects covering the range of assigned duties. Support and /or lead recurring deliverables and touchpoints (ad hoc / daily / weekly / monthly / quarterly and / or annual): Security/Incident Alerts Intelligence Reports Trend and summary reports Strategic assessments and reviews Client briefings Support collection enhancement with ongoing and proactive collaboration with Collection Management and 24x7 support. Dedication and willingness to provide support in response to ad hoc threats and periods of increased risk. This may entail on occasion: Ad hoc investigations and assessments Ancillary threat monitoring outside core business hours Proactive professional development through company trainings, industry certifications, and seeking new opportunities to maintain and grow relevant knowledge and skillsets. Identify and communicate enhancement opportunities and improvement ideas for the department's operations. Qualifying Requirements: Written and spoken fluency in Arabic Experience in open source and social media research, or investigations, typically obtained in 2-3 years; ability to connect the dots; Creativity in leveraging internet search techniques and methods; Ability to determine the credibility, value, significance, and relevancy of information from different data sources to produce clear, concise, and timely analytical products; Strong written and oral communication skills; comfortable with providing briefings and presentations. Experience producing short and long form reports, applying BLUF or similar models; Comfort working independently and in teams; Experience with some of the following: Social Media Platforms, blogs, IRC, Deep / Darkweb , and message boards; Ability to collect, authenticate, validate and document online evidence; Proficient with at least one online investigative tool, such as Whois, Ping, Traceroute, etc; Proficient in Google Suite of programs; Preferred Experience: Public or private sector experience as an analyst, researcher, investigator or consultant supporting a security, risk or due diligence function. Experience in conducting studies and making recommendations to identify threat vectors, threat actors, and threat trends Experience in briefing decision-makers and senior leaders; High degree of knowledge of Social Media Platforms, blogs, IRC, message boards, Deep/Darkweb; Knowledge of IPv4, IPv6, DNS records, E-mails Headers, P2P; Possession of excellent project/team leadership, development, and client relationship skills; Knowledge and familiarity with relevant threat landscapes or industry practice areas such as cybercrime, online fraud, physical/corporate security, activism, hacktivism, reputation risk, travel security, geopolitical or policy issues Bachelor's degree with relevant coursework Education / Training Requirements: Bachelor's Degree Benefits Competitive compensation Community-driven culture with employee events Generous time offComprehensive private insurance and EAP Fun, modern workspace Respectful and nourishing work environment, where every opinion is heard and everyone is encouraged to be an active part of the organizational culture Physical and Sensory Requirements: Mobility, walking, climbing, sitting, standing, reaching, bending, lifting (minimum of 10 lbs), fine eye-hand coordination, ability to read, write, listen and speak clearly, the ability to understand and follow written and oral instructions and directions, ability to travel =/
Aug 25, 2026
Full time
ZeroFox seeks an Intelligence Analyst (Arabic Language) to join the ZeroFox Services and Analysis Team, you will collect information to identify threats, and generate intelligence to assess risk in relevance to client needs. Intelligence activities can include researching current and emerging threats issues covering physical security, cyber security, geopolitical, reputation risk and compliance issues. The Intelligence Analyst will have an investigative or analytical background and demonstrated exceptional analytic prowess in areas such as trend analysis and pattern recognition, using independent critical thinking and judgment to act, lead, initiate and/or recommend next steps. Discretion, teamwork, and creativity are a must. Key Responsibilities include: Learn and employ ZeroFox patented technology to identify and analyze relevant information collected from the Internet, based on client-specific criteria, to assemble relevant findings for daily intelligence and recurring reporting; Assist in customer care and all production aspects covering the range of assigned duties. Support and /or lead recurring deliverables and touchpoints (ad hoc / daily / weekly / monthly / quarterly and / or annual): Security/Incident Alerts Intelligence Reports Trend and summary reports Strategic assessments and reviews Client briefings Support collection enhancement with ongoing and proactive collaboration with Collection Management and 24x7 support. Dedication and willingness to provide support in response to ad hoc threats and periods of increased risk. This may entail on occasion: Ad hoc investigations and assessments Ancillary threat monitoring outside core business hours Proactive professional development through company trainings, industry certifications, and seeking new opportunities to maintain and grow relevant knowledge and skillsets. Identify and communicate enhancement opportunities and improvement ideas for the department's operations. Qualifying Requirements: Written and spoken fluency in Arabic Experience in open source and social media research, or investigations, typically obtained in 2-3 years; ability to connect the dots; Creativity in leveraging internet search techniques and methods; Ability to determine the credibility, value, significance, and relevancy of information from different data sources to produce clear, concise, and timely analytical products; Strong written and oral communication skills; comfortable with providing briefings and presentations. Experience producing short and long form reports, applying BLUF or similar models; Comfort working independently and in teams; Experience with some of the following: Social Media Platforms, blogs, IRC, Deep / Darkweb , and message boards; Ability to collect, authenticate, validate and document online evidence; Proficient with at least one online investigative tool, such as Whois, Ping, Traceroute, etc; Proficient in Google Suite of programs; Preferred Experience: Public or private sector experience as an analyst, researcher, investigator or consultant supporting a security, risk or due diligence function. Experience in conducting studies and making recommendations to identify threat vectors, threat actors, and threat trends Experience in briefing decision-makers and senior leaders; High degree of knowledge of Social Media Platforms, blogs, IRC, message boards, Deep/Darkweb; Knowledge of IPv4, IPv6, DNS records, E-mails Headers, P2P; Possession of excellent project/team leadership, development, and client relationship skills; Knowledge and familiarity with relevant threat landscapes or industry practice areas such as cybercrime, online fraud, physical/corporate security, activism, hacktivism, reputation risk, travel security, geopolitical or policy issues Bachelor's degree with relevant coursework Education / Training Requirements: Bachelor's Degree Benefits Competitive compensation Community-driven culture with employee events Generous time offComprehensive private insurance and EAP Fun, modern workspace Respectful and nourishing work environment, where every opinion is heard and everyone is encouraged to be an active part of the organizational culture Physical and Sensory Requirements: Mobility, walking, climbing, sitting, standing, reaching, bending, lifting (minimum of 10 lbs), fine eye-hand coordination, ability to read, write, listen and speak clearly, the ability to understand and follow written and oral instructions and directions, ability to travel =/
Information Security & Assurance Officer Salary: up to 50,000 + 15% Project Uplift + Company Car/Car Allowance Location: Suffolk (onsite) REED Technology are recruiting for an Information Security & Assurance Officer to join a major UK infrastructure programme. This is a fantastic opportunity for an information security professional who enjoys balancing security governance, compliance and assurance with oversight of operational cyber security activities. You'll play a key role in maintaining the organisation's Information Security Management System (ISMS), ensuring compliance with recognised security frameworks, managing risk and assurance activities, and acting as a trusted adviser to both technical and non-technical stakeholders. This role would suit someone with experience in Information Security, GRC, Information Assurance or Cyber Security who is looking to develop their career within a highly regulated and complex environment. Key Responsibilities Own and maintain the Information Security Management System (ISMS) Ensure compliance with ISO 27001, GDPR and wider security governance requirements Develop and maintain security policies, standards and procedures Conduct security risk assessments and support internal and external audits Manage supplier and third-party security assurance activities Provide oversight of Microsoft 365 security controls, including identity and access management, MFA, endpoint protection and monitoring Work closely with SOC and security service providers to support incident management and response activities Produce security reports, dashboards and assurance documentation for senior stakeholders Deliver security awareness initiatives across the organisation Support continuous improvement of security controls, processes and governance frameworks About You We're interested in speaking with candidates who can demonstrate experience in: Information Security Governance, Risk and Compliance (GRC) Information Security Assurance and risk management ISO 27001 and Information Security Management Systems (ISMS) GDPR and data protection requirements Security audits, compliance reviews and assurance activities Supplier or third-party security assessments Security incident management and response processes Microsoft security technologies such as Defender, Sentinel, Entra ID or similar platforms Building strong relationships with stakeholders at all levels Desirable Experience Cyber Essentials or Cyber Essentials Plus NIST Cyber Security Framework Experience within infrastructure, utilities, energy, defence, engineering, financial services or other regulated sectors Professional certifications such as CISSP, CISM, ISO 27001 Lead Auditor/Implementer, Security+ or equivalent What's on Offer? 15% project uplift paid monthly Company car or car allowance Annual bonus Private medical insurance Life assurance Enhanced pension contributions 25 days annual leave plus bank holidays Additional holiday purchase scheme Professional memberships paid Ongoing training and development opportunities This is an excellent opportunity to join a high-profile programme where you'll have real ownership of information security governance and assurance, while contributing to the success of a nationally significant project. If you are interested, apply using the link provided.
Aug 21, 2026
Full time
Information Security & Assurance Officer Salary: up to 50,000 + 15% Project Uplift + Company Car/Car Allowance Location: Suffolk (onsite) REED Technology are recruiting for an Information Security & Assurance Officer to join a major UK infrastructure programme. This is a fantastic opportunity for an information security professional who enjoys balancing security governance, compliance and assurance with oversight of operational cyber security activities. You'll play a key role in maintaining the organisation's Information Security Management System (ISMS), ensuring compliance with recognised security frameworks, managing risk and assurance activities, and acting as a trusted adviser to both technical and non-technical stakeholders. This role would suit someone with experience in Information Security, GRC, Information Assurance or Cyber Security who is looking to develop their career within a highly regulated and complex environment. Key Responsibilities Own and maintain the Information Security Management System (ISMS) Ensure compliance with ISO 27001, GDPR and wider security governance requirements Develop and maintain security policies, standards and procedures Conduct security risk assessments and support internal and external audits Manage supplier and third-party security assurance activities Provide oversight of Microsoft 365 security controls, including identity and access management, MFA, endpoint protection and monitoring Work closely with SOC and security service providers to support incident management and response activities Produce security reports, dashboards and assurance documentation for senior stakeholders Deliver security awareness initiatives across the organisation Support continuous improvement of security controls, processes and governance frameworks About You We're interested in speaking with candidates who can demonstrate experience in: Information Security Governance, Risk and Compliance (GRC) Information Security Assurance and risk management ISO 27001 and Information Security Management Systems (ISMS) GDPR and data protection requirements Security audits, compliance reviews and assurance activities Supplier or third-party security assessments Security incident management and response processes Microsoft security technologies such as Defender, Sentinel, Entra ID or similar platforms Building strong relationships with stakeholders at all levels Desirable Experience Cyber Essentials or Cyber Essentials Plus NIST Cyber Security Framework Experience within infrastructure, utilities, energy, defence, engineering, financial services or other regulated sectors Professional certifications such as CISSP, CISM, ISO 27001 Lead Auditor/Implementer, Security+ or equivalent What's on Offer? 15% project uplift paid monthly Company car or car allowance Annual bonus Private medical insurance Life assurance Enhanced pension contributions 25 days annual leave plus bank holidays Additional holiday purchase scheme Professional memberships paid Ongoing training and development opportunities This is an excellent opportunity to join a high-profile programme where you'll have real ownership of information security governance and assurance, while contributing to the success of a nationally significant project. If you are interested, apply using the link provided.
Senior Consultant Cybersecurity - Incident ResponseSkip to main contentWe use cookies to provide website functionality, to analyze our traffic, to personalize content and to enable social media functionality. For further information, please see our Cookie Policy. To enhance your experience, we use an AI assistant, Olivia, to help you explore roles and learn more about FTI Consulting. For access to Olivia, please accept or decline. Consultant Cybersecurity - Incident Response page is loaded Senior Consultant Cybersecurity - Incident ResponseApplyremote type: Hybridlocations: London, United Kingdomtime type: Full timeposted on: Posted Todayjob requisition id: JR2520U-TEE Who We Are FTI Consulting is the leading global expert firm for organizations facing crisis and transformation. We work with many of the world's top multinational corporations, law firms, banks and private equity firms on their most important issues to deliver impact that makes a difference. From resolving disputes, navigating crises, managing risk and optimizing performance, our teams respond rapidly to dynamic and complex situations.At FTI Consulting, you'll work side-by side with leaders who have shaped history, helping solve the biggest challenges making headlines today. From day one, you'll be an integral part of a focused team where you can make a real impact. You'll be surrounded by an open, collaborative culture that embraces diversity, recognition, professional development and, most importantly, you.Are you ready to make your impact? About The Role We help clients solve complex cyber security challenges. Our clients include some of the world's biggest brands, who we advise about some of their most sensitive cyber challenges. Discretion and confidentiality are central to how FTI operates.Our Team Leadership has national security heritage at its core; discretion and judgement are key values for our teams.Our work is varied, often for clients in distress. Our clients value our responsiveness, agility and expert-driven impact. We look for technical expertise and aptitude, and the personal skills to fit these scenarios.We operate as one global cybersecurity P&L. Collaboration, both within our team and with other parts of the business (such are Strategic Communications, Technology and Data Science), are central to how we operate. Our engagements typically draw on expertise from across our business and geographies.After a period of extensive growth, FTI is looking to build out its EMEA cybersecurity practice. We have a phased three-year plan to attract and develop the right talent to be part of this journey. We are the start of this journey, and we are looking for individuals comfortable within a "start-up" environment, within the security of an established corporate setting.We value talent. We look for aptitude. Our alumni include noble prize winners. We recognise the need to attract, retain and develop talent. We value true diversity of opinion and background. We understand the importance of working environments. We believe in providing our people continuous professional development to maintain our expert brand. What You'll Do Perform a wide range of cybersecurity engagements in a fast-paced, deadline-sensitive environment; summarising the results accurately and concisely in written reports for a sophisticated client base consisting of top-tier law firms, financial institutions and corporations; managing consultants on engagements which involve teams of investigative researchers; and providing oral reports to clients, when appropriate. Assist leadership in developing strategies to expand the portfolio of services offered and improve the efficiency and consistency of service delivery. Maintain current knowledge of industry trends, threats, methodologies and core technologies in order to assimilate client needs and design appropriate technical solutions. Lead assessment of current threat identification techniques and development of new methodologies and frameworks. Incident analysis, combining sound analytical skills with advanced knowledge of cybersecurity, digital forensics and incident response. Assess client cybersecurity postures against industry standard best practices and frameworks. Lead modification and enhancement of proposals.This role requires travel to clients and FTI offices. How You'll Grow We are committed to investing and supporting you in your professional development and we have developed a range of programs focused on fostering leadership, growth and development opportunities. We aim to promote continuous learning and individual skills development through on-the-job learning, self-guided professional development courses and certifications. You'll be assigned a dedicated coach to mentor, guide and support you through regular coaching sessions and serve as an advocate for your professional growth.As you progress through your career at FTI Consulting, we offer tailored programs for critical professional milestones to ensure you are prepared and empowered to take on your next role. What You Will Need to Succeed Analytical ability - The applicant should have experience identifying red flags, validating sources, and making judgment calls about the completeness and accuracy of open-source information. The applicant will be responsible for developing investigative plans and strategies for engagements and producing creative solutions to challenging research problems. Strategic planning and resourcefulnessBasic Qualifications Bachelor's degree or equivalent experience. Experience conducting digital forensics or incident response or a similar role. Specialised experience in cyber incident response and cyber incident management. An understanding of frameworks and standards, such as PCI, HIPAA, GDPR, CCPA, NERC CIP, ISO, NIST, etc. Experience conducting cyber framework assessments or the ability to learn. Technical hands-on experience with capturing and analyzing forensic images from different systems incuding Windows, Linux, OSX and Smartphones. Experience using tools such as Volatality, FTK Imager, Cellbrite, WireShark, EnCase, Axiom, Splunk, ELKetc. Experience documenting the technical details gathered from Forensics analysis into Incident Reports for wider consumption. Experience using EDR tools such as SentinelOne, Carbon Black etc. Knowledge of Chain of Custody procedures. Understanding of data loss / data theft prevention concepts and technologies. Threat modeling fundamentals.Preferred Qualifications Certifications related to DIFR, i.e., GCFE, GCFA, GREM, GNFA, or a willingness to obtain them. Experience in online learning such as HackTheBox Blue Team labs etc. Scripting skills in Python, Bash and PowerShell is a plus. FTI Consulting is an equal opportunity employer and does not discriminate on the basis of race, color, national origin, ancestry, citizenship status, protected veteran status, religion, physical or mental disability, marital status, sex, sexual orientation, gender identity or expression, age, or any other basis protected by law, ordinance, or regulation.
Jul 31, 2026
Full time
Senior Consultant Cybersecurity - Incident ResponseSkip to main contentWe use cookies to provide website functionality, to analyze our traffic, to personalize content and to enable social media functionality. For further information, please see our Cookie Policy. To enhance your experience, we use an AI assistant, Olivia, to help you explore roles and learn more about FTI Consulting. For access to Olivia, please accept or decline. Consultant Cybersecurity - Incident Response page is loaded Senior Consultant Cybersecurity - Incident ResponseApplyremote type: Hybridlocations: London, United Kingdomtime type: Full timeposted on: Posted Todayjob requisition id: JR2520U-TEE Who We Are FTI Consulting is the leading global expert firm for organizations facing crisis and transformation. We work with many of the world's top multinational corporations, law firms, banks and private equity firms on their most important issues to deliver impact that makes a difference. From resolving disputes, navigating crises, managing risk and optimizing performance, our teams respond rapidly to dynamic and complex situations.At FTI Consulting, you'll work side-by side with leaders who have shaped history, helping solve the biggest challenges making headlines today. From day one, you'll be an integral part of a focused team where you can make a real impact. You'll be surrounded by an open, collaborative culture that embraces diversity, recognition, professional development and, most importantly, you.Are you ready to make your impact? About The Role We help clients solve complex cyber security challenges. Our clients include some of the world's biggest brands, who we advise about some of their most sensitive cyber challenges. Discretion and confidentiality are central to how FTI operates.Our Team Leadership has national security heritage at its core; discretion and judgement are key values for our teams.Our work is varied, often for clients in distress. Our clients value our responsiveness, agility and expert-driven impact. We look for technical expertise and aptitude, and the personal skills to fit these scenarios.We operate as one global cybersecurity P&L. Collaboration, both within our team and with other parts of the business (such are Strategic Communications, Technology and Data Science), are central to how we operate. Our engagements typically draw on expertise from across our business and geographies.After a period of extensive growth, FTI is looking to build out its EMEA cybersecurity practice. We have a phased three-year plan to attract and develop the right talent to be part of this journey. We are the start of this journey, and we are looking for individuals comfortable within a "start-up" environment, within the security of an established corporate setting.We value talent. We look for aptitude. Our alumni include noble prize winners. We recognise the need to attract, retain and develop talent. We value true diversity of opinion and background. We understand the importance of working environments. We believe in providing our people continuous professional development to maintain our expert brand. What You'll Do Perform a wide range of cybersecurity engagements in a fast-paced, deadline-sensitive environment; summarising the results accurately and concisely in written reports for a sophisticated client base consisting of top-tier law firms, financial institutions and corporations; managing consultants on engagements which involve teams of investigative researchers; and providing oral reports to clients, when appropriate. Assist leadership in developing strategies to expand the portfolio of services offered and improve the efficiency and consistency of service delivery. Maintain current knowledge of industry trends, threats, methodologies and core technologies in order to assimilate client needs and design appropriate technical solutions. Lead assessment of current threat identification techniques and development of new methodologies and frameworks. Incident analysis, combining sound analytical skills with advanced knowledge of cybersecurity, digital forensics and incident response. Assess client cybersecurity postures against industry standard best practices and frameworks. Lead modification and enhancement of proposals.This role requires travel to clients and FTI offices. How You'll Grow We are committed to investing and supporting you in your professional development and we have developed a range of programs focused on fostering leadership, growth and development opportunities. We aim to promote continuous learning and individual skills development through on-the-job learning, self-guided professional development courses and certifications. You'll be assigned a dedicated coach to mentor, guide and support you through regular coaching sessions and serve as an advocate for your professional growth.As you progress through your career at FTI Consulting, we offer tailored programs for critical professional milestones to ensure you are prepared and empowered to take on your next role. What You Will Need to Succeed Analytical ability - The applicant should have experience identifying red flags, validating sources, and making judgment calls about the completeness and accuracy of open-source information. The applicant will be responsible for developing investigative plans and strategies for engagements and producing creative solutions to challenging research problems. Strategic planning and resourcefulnessBasic Qualifications Bachelor's degree or equivalent experience. Experience conducting digital forensics or incident response or a similar role. Specialised experience in cyber incident response and cyber incident management. An understanding of frameworks and standards, such as PCI, HIPAA, GDPR, CCPA, NERC CIP, ISO, NIST, etc. Experience conducting cyber framework assessments or the ability to learn. Technical hands-on experience with capturing and analyzing forensic images from different systems incuding Windows, Linux, OSX and Smartphones. Experience using tools such as Volatality, FTK Imager, Cellbrite, WireShark, EnCase, Axiom, Splunk, ELKetc. Experience documenting the technical details gathered from Forensics analysis into Incident Reports for wider consumption. Experience using EDR tools such as SentinelOne, Carbon Black etc. Knowledge of Chain of Custody procedures. Understanding of data loss / data theft prevention concepts and technologies. Threat modeling fundamentals.Preferred Qualifications Certifications related to DIFR, i.e., GCFE, GCFA, GREM, GNFA, or a willingness to obtain them. Experience in online learning such as HackTheBox Blue Team labs etc. Scripting skills in Python, Bash and PowerShell is a plus. FTI Consulting is an equal opportunity employer and does not discriminate on the basis of race, color, national origin, ancestry, citizenship status, protected veteran status, religion, physical or mental disability, marital status, sex, sexual orientation, gender identity or expression, age, or any other basis protected by law, ordinance, or regulation.
FTI Consulting is seeking a Senior Consultant to lead incident response engagements, perform digital forensics, and advise clients on cyber risk. The role requires strong analytical skills and knowledge of frameworks, with hybrid travel to client sites in London and beyond. You will work with top-tier firms and financial institutions, developing strategies, improving service delivery, and mentoring junior staff in a collaborative, high-demand cybersecurity practice.
Jul 31, 2026
Full time
FTI Consulting is seeking a Senior Consultant to lead incident response engagements, perform digital forensics, and advise clients on cyber risk. The role requires strong analytical skills and knowledge of frameworks, with hybrid travel to client sites in London and beyond. You will work with top-tier firms and financial institutions, developing strategies, improving service delivery, and mentoring junior staff in a collaborative, high-demand cybersecurity practice.
As an M365 Consultant/Senior Consultant, you will help transform clients' cybersecurity posture by designing and implementing advanced Microsoft Threat Protection technologies. You will work directly with clients in a consulting capacity, supporting medium to large enterprise environments and contributing to robust Cyber Defence strategies across endpoints, identities, cloud, and collaboration platforms. Key Responsibilities Design and implement AV/EDR solutions (e.g., Microsoft Defender for Endpoint) to detect and respond to cyber threats across major operating systems. Protect email, messaging, and collaboration platforms from phishing, spear phishing, BEC, and identity-related attacks. Develop and maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems. Design, implement, and integrate SIEM solutions-particularly Microsoft Sentinel-into Security Operations. Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem. Handle L2-level incidents leveraging Microsoft Sentinel and Microsoft Defender tools. Support incident response, triage, threat modelling, and vulnerability remediation within Azure-hosted environments. Create, run, and troubleshoot Azure Logic Apps, playbooks, and Sentinel automation components. Collaborate with business and security stakeholders to define and enhance security standards and improve security posture. . Technical Expertise Proven experience with Microsoft Sentinel (architecture, deployment, analytics rules, workbooks, playbooks); Microsoft Defender for Endpoint and Defender for Cloud; SIEM/SOC operations; Azure Logic Apps; vulnerability remediation; incident response. Threat Hunting & Detection Hands on experience using KQL, Microsoft Defender XDR, and threat intelligence sources to hunt threats and support investigations. Cyber Defence & Infrastructure Security Strong understanding of cyber defence concepts, infrastructure security, and troubleshooting across the Microsoft ecosystem. Methodology Familiarity with agile methodologies and backlog management. Collaboration & Communication Strong communication skills, ability to work with cross-functional teams, and experience in client-facing environments. Technologies Knowledge of Microsoft 365, Azure, Windows, Linux, and mobile operating systems. SC100 or equivalent desirable Characteristics for Success Consultative and collaborative mindset; strong relationship builder. Resilient, adaptable, intellectually curious. Passionate about Microsoft security technologies (M365 Threat Protection, Defender suite, O365, Identity). Problem solver, quality driven, self motivated, and innovative. At Avanade, we advance the world through the power of people and Microsoft. Join us to shape your skills and the future with bold ideas and innovative solutions. Our partnership with Microsoft and Accenture empowers you to unlock your full potential. Working at Avanade offers the chance to build a career path that suits your skills and interests and the freedom to be your authentic self. We are committed to your growth, well being, and success. This is where passion meets opportunity, technology meets humanity, and every challenge is a chance to make a genuine impact on colleagues, clients, and communities. Together, we do what matters.
Jul 31, 2026
Full time
As an M365 Consultant/Senior Consultant, you will help transform clients' cybersecurity posture by designing and implementing advanced Microsoft Threat Protection technologies. You will work directly with clients in a consulting capacity, supporting medium to large enterprise environments and contributing to robust Cyber Defence strategies across endpoints, identities, cloud, and collaboration platforms. Key Responsibilities Design and implement AV/EDR solutions (e.g., Microsoft Defender for Endpoint) to detect and respond to cyber threats across major operating systems. Protect email, messaging, and collaboration platforms from phishing, spear phishing, BEC, and identity-related attacks. Develop and maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems. Design, implement, and integrate SIEM solutions-particularly Microsoft Sentinel-into Security Operations. Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem. Handle L2-level incidents leveraging Microsoft Sentinel and Microsoft Defender tools. Support incident response, triage, threat modelling, and vulnerability remediation within Azure-hosted environments. Create, run, and troubleshoot Azure Logic Apps, playbooks, and Sentinel automation components. Collaborate with business and security stakeholders to define and enhance security standards and improve security posture. . Technical Expertise Proven experience with Microsoft Sentinel (architecture, deployment, analytics rules, workbooks, playbooks); Microsoft Defender for Endpoint and Defender for Cloud; SIEM/SOC operations; Azure Logic Apps; vulnerability remediation; incident response. Threat Hunting & Detection Hands on experience using KQL, Microsoft Defender XDR, and threat intelligence sources to hunt threats and support investigations. Cyber Defence & Infrastructure Security Strong understanding of cyber defence concepts, infrastructure security, and troubleshooting across the Microsoft ecosystem. Methodology Familiarity with agile methodologies and backlog management. Collaboration & Communication Strong communication skills, ability to work with cross-functional teams, and experience in client-facing environments. Technologies Knowledge of Microsoft 365, Azure, Windows, Linux, and mobile operating systems. SC100 or equivalent desirable Characteristics for Success Consultative and collaborative mindset; strong relationship builder. Resilient, adaptable, intellectually curious. Passionate about Microsoft security technologies (M365 Threat Protection, Defender suite, O365, Identity). Problem solver, quality driven, self motivated, and innovative. At Avanade, we advance the world through the power of people and Microsoft. Join us to shape your skills and the future with bold ideas and innovative solutions. Our partnership with Microsoft and Accenture empowers you to unlock your full potential. Working at Avanade offers the chance to build a career path that suits your skills and interests and the freedom to be your authentic self. We are committed to your growth, well being, and success. This is where passion meets opportunity, technology meets humanity, and every challenge is a chance to make a genuine impact on colleagues, clients, and communities. Together, we do what matters.
As an M365 Consultant/Senior Consultant, you will help transform clients' cybersecurity posture by designing and implementing advanced Microsoft Threat Protection technologies. You will work directly with clients in a consulting capacity, supporting medium to large enterprise environments and contributing to robust Cyber Defence strategies across endpoints, identities, cloud, and collaboration platforms. Key Responsibilities Design and implement AV/EDR solutions (e.g., Microsoft Defender for Endpoint) to detect and respond to cyber threats across major operating systems. Protect email, messaging, and collaboration platforms from phishing, spear phishing, BEC, and identity-related attacks. Develop and maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems. Design, implement, and integrate SIEM solutions-particularly Microsoft Sentinel-into Security Operations. Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem. Handle L2-level incidents leveraging Microsoft Sentinel and Microsoft Defender tools. Support incident response, triage, threat modelling, and vulnerability remediation within Azure-hosted environments. Create, run, and troubleshoot Azure Logic Apps, playbooks, and Sentinel automation components. Collaborate with business and security stakeholders to define and enhance security standards and improve security posture. . Technical Expertise Proven experience with Microsoft Sentinel (architecture, deployment, analytics rules, workbooks, playbooks); Microsoft Defender for Endpoint and Defender for Cloud; SIEM/SOC operations; Azure Logic Apps; vulnerability remediation; incident response. Threat Hunting & Detection Hands on experience using KQL, Microsoft Defender XDR, and threat intelligence sources to hunt threats and support investigations. Cyber Defence & Infrastructure Security Strong understanding of cyber defence concepts, infrastructure security, and troubleshooting across the Microsoft ecosystem. Methodology Familiarity with agile methodologies and backlog management. Collaboration & Communication Strong communication skills, ability to work with cross-functional teams, and experience in client-facing environments. Technologies Knowledge of Microsoft 365, Azure, Windows, Linux, and mobile operating systems. SC100 or equivalent desirable Characteristics for Success Consultative and collaborative mindset; strong relationship builder. Resilient, adaptable, intellectually curious. Passionate about Microsoft security technologies (M365 Threat Protection, Defender suite, O365, Identity). Problem solver, quality driven, self motivated, and innovative. At Avanade, we advance the world through the power of people and Microsoft. Join us to shape your skills and the future with bold ideas and innovative solutions. Our partnership with Microsoft and Accenture empowers you to unlock your full potential. Working at Avanade offers the chance to build a career path that suits your skills and interests and the freedom to be your authentic self. We are committed to your growth, well being, and success. This is where passion meets opportunity, technology meets humanity, and every challenge is a chance to make a genuine impact on colleagues, clients, and communities. Together, we do what matters.
Jul 30, 2026
Full time
As an M365 Consultant/Senior Consultant, you will help transform clients' cybersecurity posture by designing and implementing advanced Microsoft Threat Protection technologies. You will work directly with clients in a consulting capacity, supporting medium to large enterprise environments and contributing to robust Cyber Defence strategies across endpoints, identities, cloud, and collaboration platforms. Key Responsibilities Design and implement AV/EDR solutions (e.g., Microsoft Defender for Endpoint) to detect and respond to cyber threats across major operating systems. Protect email, messaging, and collaboration platforms from phishing, spear phishing, BEC, and identity-related attacks. Develop and maintain cyber defence use cases, correlation rules, and attack chain detections across disparate systems. Design, implement, and integrate SIEM solutions-particularly Microsoft Sentinel-into Security Operations. Perform threat hunting across endpoints, identities, networking, cloud, and collaboration platforms in the Microsoft ecosystem. Handle L2-level incidents leveraging Microsoft Sentinel and Microsoft Defender tools. Support incident response, triage, threat modelling, and vulnerability remediation within Azure-hosted environments. Create, run, and troubleshoot Azure Logic Apps, playbooks, and Sentinel automation components. Collaborate with business and security stakeholders to define and enhance security standards and improve security posture. . Technical Expertise Proven experience with Microsoft Sentinel (architecture, deployment, analytics rules, workbooks, playbooks); Microsoft Defender for Endpoint and Defender for Cloud; SIEM/SOC operations; Azure Logic Apps; vulnerability remediation; incident response. Threat Hunting & Detection Hands on experience using KQL, Microsoft Defender XDR, and threat intelligence sources to hunt threats and support investigations. Cyber Defence & Infrastructure Security Strong understanding of cyber defence concepts, infrastructure security, and troubleshooting across the Microsoft ecosystem. Methodology Familiarity with agile methodologies and backlog management. Collaboration & Communication Strong communication skills, ability to work with cross-functional teams, and experience in client-facing environments. Technologies Knowledge of Microsoft 365, Azure, Windows, Linux, and mobile operating systems. SC100 or equivalent desirable Characteristics for Success Consultative and collaborative mindset; strong relationship builder. Resilient, adaptable, intellectually curious. Passionate about Microsoft security technologies (M365 Threat Protection, Defender suite, O365, Identity). Problem solver, quality driven, self motivated, and innovative. At Avanade, we advance the world through the power of people and Microsoft. Join us to shape your skills and the future with bold ideas and innovative solutions. Our partnership with Microsoft and Accenture empowers you to unlock your full potential. Working at Avanade offers the chance to build a career path that suits your skills and interests and the freedom to be your authentic self. We are committed to your growth, well being, and success. This is where passion meets opportunity, technology meets humanity, and every challenge is a chance to make a genuine impact on colleagues, clients, and communities. Together, we do what matters.
Avanade UK Limited is seeking an experienced M365 Consultant/Senior Consultant to design and implement Microsoft Defender for Endpoint, Sentinel, and related security controls within enterprise environments. You will work directly with clients in a consulting capacity, shaping cyber defence across endpoints, identities, cloud, and collaboration platforms. You will lead design and integration of SIEM solutions (Microsoft Sentinel), perform threat hunting, incident response, and contribute to
Jul 30, 2026
Full time
Avanade UK Limited is seeking an experienced M365 Consultant/Senior Consultant to design and implement Microsoft Defender for Endpoint, Sentinel, and related security controls within enterprise environments. You will work directly with clients in a consulting capacity, shaping cyber defence across endpoints, identities, cloud, and collaboration platforms. You will lead design and integration of SIEM solutions (Microsoft Sentinel), perform threat hunting, incident response, and contribute to
Lead security engagements for mid-market enterprises across Europe. You will conduct security assessments, design security architectures, and help clients build security programs that meet regulatory requirements without creating operational friction. Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response planning and tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender, or GCP Security Command Center) CISSP, OSCP, or equivalent certification Nice to Have Experience in financial services or healthcare security Red team or blue team experience in enterprise environments Familiarity with UK and EU regulatory requirements Competitive salary with annual performance bonuses Comprehensive health, dental, and vision insurance Company pension scheme with employer contribution Remote-first with optional office presence Annual learning budget for conferences, courses, and certifications Home office setup stipend Parental leave (16 weeks primary, 8 weeks secondary)
Jul 30, 2026
Full time
Lead security engagements for mid-market enterprises across Europe. You will conduct security assessments, design security architectures, and help clients build security programs that meet regulatory requirements without creating operational friction. Responsibilities Lead penetration testing and vulnerability assessment engagements Design security architectures for cloud-native and hybrid environments Develop security compliance programs (SOC 2, ISO 27001, GDPR) Conduct incident response planning and tabletop exercises Advise C-level executives on security strategy and risk management Requirements 8+ years in information security with consulting experience Deep expertise in penetration testing, vulnerability management, and threat modeling Knowledge of compliance frameworks: SOC 2, ISO 27001, GDPR, PCI-DSS Experience with cloud security (AWS Security Hub, Azure Defender, or GCP Security Command Center) CISSP, OSCP, or equivalent certification Nice to Have Experience in financial services or healthcare security Red team or blue team experience in enterprise environments Familiarity with UK and EU regulatory requirements Competitive salary with annual performance bonuses Comprehensive health, dental, and vision insurance Company pension scheme with employer contribution Remote-first with optional office presence Annual learning budget for conferences, courses, and certifications Home office setup stipend Parental leave (16 weeks primary, 8 weeks secondary)
Cyber Security Delivery Manager £80-90k Portsmouth (Hybrid) SC Clearance Eligibility essential Are you a senior cyber security professional who can lead from the front - advising at board level one day and getting hands-on with a security architecture review the next? We're recruiting on behalf of a well-regarded cyber security consultancy based in Hampshire. They work with a range of clients on complex, meaningful security challenges - and they're looking for an experienced Cyber Manager to join the senior team. This isn't a purely strategic role. You'll lead engagements, grow client relationships, and help shape the direction of the business - but you'll also roll your sleeves up when the work demands it. Salary: £ Package: Gym, private medical insurance, company pension, work from home flex Working Structure: Hybrid remote in Portsmouth (2 days onsite) Security Clearance: Active or Eligible for SC clearance. The Role: As Cyber Security Delivery Manager, you'll take ownership of client engagements from start to finish, covering risk assessments, security architecture reviews, policy development, incident response planning, and governance work. You'll be the senior point of contact on engagements, ensuring quality and consistency across everything that goes out the door. What You'll Be Doing: Leading end-to-end cyber security engagements across advisory and hands-on delivery Managing multiple projects simultaneously, ensuring delivery quality and client satisfaction Building and maintaining strong relationships with clients, including at CISO and board level Leading proposals and bids, contributing to go-to-market strategy and service development Supporting and developing junior and mid-level consultants through active mentoring Putting sensible operational processes in place and keeping day-to-day delivery on track Contributing to hiring decisions as the team grows What You'll Need: Significant experience delivering cyber security projects in a consultancy or professional services environment Strong technical knowledge across core cyber domains - risk management, security architecture, governance, assurance, or incident response CISSP, CISM, or equivalent professional certification A proven track record of leading teams and managing senior client relationships The ability to communicate complex security topics clearly to both technical and non-technical stakeholders Eligibility to obtain or active SC (Security Clearance) Self-motivated, decisive, and comfortable operating with a high degree of autonomy Desired but not essential: Experience across multiple disciplines such as GRC, penetration testing, SOC, cloud security, or OT security Familiarity with frameworks including NIST, ISO 27001, CAF, or Cyber Essentials Experience working with government, defence, or critical national infrastructure clients Additional certifications such as CREST, OSCP, or NCSC Certified Professional If this sounds like the right next step, apply now or get in touch for a confidential conversation. Candidates must be eligible to work in the UK and able to obtain Security Clearance. Oscar Associates (UK) Limited is acting as an Employment Agency in relation to this vacancy. To understand more about what we do with your data please review our privacy policy in the privacy section of the Oscar website.
May 23, 2026
Full time
Cyber Security Delivery Manager £80-90k Portsmouth (Hybrid) SC Clearance Eligibility essential Are you a senior cyber security professional who can lead from the front - advising at board level one day and getting hands-on with a security architecture review the next? We're recruiting on behalf of a well-regarded cyber security consultancy based in Hampshire. They work with a range of clients on complex, meaningful security challenges - and they're looking for an experienced Cyber Manager to join the senior team. This isn't a purely strategic role. You'll lead engagements, grow client relationships, and help shape the direction of the business - but you'll also roll your sleeves up when the work demands it. Salary: £ Package: Gym, private medical insurance, company pension, work from home flex Working Structure: Hybrid remote in Portsmouth (2 days onsite) Security Clearance: Active or Eligible for SC clearance. The Role: As Cyber Security Delivery Manager, you'll take ownership of client engagements from start to finish, covering risk assessments, security architecture reviews, policy development, incident response planning, and governance work. You'll be the senior point of contact on engagements, ensuring quality and consistency across everything that goes out the door. What You'll Be Doing: Leading end-to-end cyber security engagements across advisory and hands-on delivery Managing multiple projects simultaneously, ensuring delivery quality and client satisfaction Building and maintaining strong relationships with clients, including at CISO and board level Leading proposals and bids, contributing to go-to-market strategy and service development Supporting and developing junior and mid-level consultants through active mentoring Putting sensible operational processes in place and keeping day-to-day delivery on track Contributing to hiring decisions as the team grows What You'll Need: Significant experience delivering cyber security projects in a consultancy or professional services environment Strong technical knowledge across core cyber domains - risk management, security architecture, governance, assurance, or incident response CISSP, CISM, or equivalent professional certification A proven track record of leading teams and managing senior client relationships The ability to communicate complex security topics clearly to both technical and non-technical stakeholders Eligibility to obtain or active SC (Security Clearance) Self-motivated, decisive, and comfortable operating with a high degree of autonomy Desired but not essential: Experience across multiple disciplines such as GRC, penetration testing, SOC, cloud security, or OT security Familiarity with frameworks including NIST, ISO 27001, CAF, or Cyber Essentials Experience working with government, defence, or critical national infrastructure clients Additional certifications such as CREST, OSCP, or NCSC Certified Professional If this sounds like the right next step, apply now or get in touch for a confidential conversation. Candidates must be eligible to work in the UK and able to obtain Security Clearance. Oscar Associates (UK) Limited is acting as an Employment Agency in relation to this vacancy. To understand more about what we do with your data please review our privacy policy in the privacy section of the Oscar website.
An opportunity for an experienced Interim Cyber Security Manager to join a complex, multi-entity organisation undergoing significant transformation on an initial fractional basis, working 2 days per week. Will suit a hands-on cyber security leader who can operate at a strategic and operational level, driving security maturity while managing day-to-day risk, cyber resilience, governance, and ensuring effective security operations across the business. Client Details Michael Page are partnered once more with one of our key clients, a growing, multi-entity organisation operating in a complex technology landscape, currently investing heavily in its cyber security and risk capabilities. An environment undergoing transformation and modernisation, with a strong focus on improving governance, resilience, and operational maturity. A business that values pragmatic, outcome-driven security leadership, where contractors are empowered to deliver tangible improvements and influence at a senior level. Description As the Interim Cyber Security Manager, you will take ownership of the organisation's cyber security strategy, governance, and operational oversight. You will work closely with senior stakeholders and an outsourced Security Operations Centre (SOC) to strengthen security posture, improve resilience, and embed best practices across the business. Having a strategic input, you will define and deliver a pragmatic cyber security strategy aligned to business priorities, whilst establishing and maintaining security policies, standards, and governance frameworks. You will oversee security operations, including incident detection, response, and continuous improvement, and manage key third-party security service providers, ensuring performance and accountability. Risk management activities will be key, including assessments, mitigation planning, and reporting, whilst also providing clear security reporting and insights to senior stakeholders. You will ensure compliance with relevant regulatory and industry standards (e.g. ISO 27001, GDPR, NIS2 or equivalent), and support secure delivery of technology projects by embedding security-by-design principles. In addition, you will drive security awareness initiatives to reduce human-related risk, and oversee third-party and supplier security risk, including due diligence and ongoing assurance. The role will work on a fractional basis, 2 days per week. You will be based at the client head office in Birmingham for those days. Profile As the successful candidate for the Interim Cyber Security Manager position, you will have the following experience: Proven interim experience in a Cyber Security Manager / Lead / Security Consultant role. Strong understanding of security operations, threat detection, and incident response practices. Experience working with SIEM, EDR, and monitoring technologies in enterprise environments. Demonstrable knowledge of security frameworks, controls, and governance models. Experience managing third-party vendors or managed security services. Relevant certifications such as CISSP, CISM, or equivalent highly desirable. Excellent stakeholder engagement and communication skills. Ability to prioritise and deliver in a fast-paced, evolving environment. Job Offer Day Rate: £700 per day IR35 Status: Outside IR35 Location: Birmingham, West Midlands Duration: 4 month initial contract with strong likelihood of extension Part-Time: Fractional role, working 2 days per week This is an excellent opportunity for an experienced Interim Cyber Security Manager looking to make a significant impact within the professional services industry. We encourage all qualified candidates to apply today.
May 23, 2026
Contractor
An opportunity for an experienced Interim Cyber Security Manager to join a complex, multi-entity organisation undergoing significant transformation on an initial fractional basis, working 2 days per week. Will suit a hands-on cyber security leader who can operate at a strategic and operational level, driving security maturity while managing day-to-day risk, cyber resilience, governance, and ensuring effective security operations across the business. Client Details Michael Page are partnered once more with one of our key clients, a growing, multi-entity organisation operating in a complex technology landscape, currently investing heavily in its cyber security and risk capabilities. An environment undergoing transformation and modernisation, with a strong focus on improving governance, resilience, and operational maturity. A business that values pragmatic, outcome-driven security leadership, where contractors are empowered to deliver tangible improvements and influence at a senior level. Description As the Interim Cyber Security Manager, you will take ownership of the organisation's cyber security strategy, governance, and operational oversight. You will work closely with senior stakeholders and an outsourced Security Operations Centre (SOC) to strengthen security posture, improve resilience, and embed best practices across the business. Having a strategic input, you will define and deliver a pragmatic cyber security strategy aligned to business priorities, whilst establishing and maintaining security policies, standards, and governance frameworks. You will oversee security operations, including incident detection, response, and continuous improvement, and manage key third-party security service providers, ensuring performance and accountability. Risk management activities will be key, including assessments, mitigation planning, and reporting, whilst also providing clear security reporting and insights to senior stakeholders. You will ensure compliance with relevant regulatory and industry standards (e.g. ISO 27001, GDPR, NIS2 or equivalent), and support secure delivery of technology projects by embedding security-by-design principles. In addition, you will drive security awareness initiatives to reduce human-related risk, and oversee third-party and supplier security risk, including due diligence and ongoing assurance. The role will work on a fractional basis, 2 days per week. You will be based at the client head office in Birmingham for those days. Profile As the successful candidate for the Interim Cyber Security Manager position, you will have the following experience: Proven interim experience in a Cyber Security Manager / Lead / Security Consultant role. Strong understanding of security operations, threat detection, and incident response practices. Experience working with SIEM, EDR, and monitoring technologies in enterprise environments. Demonstrable knowledge of security frameworks, controls, and governance models. Experience managing third-party vendors or managed security services. Relevant certifications such as CISSP, CISM, or equivalent highly desirable. Excellent stakeholder engagement and communication skills. Ability to prioritise and deliver in a fast-paced, evolving environment. Job Offer Day Rate: £700 per day IR35 Status: Outside IR35 Location: Birmingham, West Midlands Duration: 4 month initial contract with strong likelihood of extension Part-Time: Fractional role, working 2 days per week This is an excellent opportunity for an experienced Interim Cyber Security Manager looking to make a significant impact within the professional services industry. We encourage all qualified candidates to apply today.
Job Title: Senior Technical Lead Pay of £75,026, plus 28.97% employer pension contributions, hybrid working, flexible hours, and great work life balance. DWP. Digital with Purpose. Are you a technical lead with strong ServiceNow development expertise and solid knowledge of SecOps or ITSM frameworks and practices? We're looking for an engaging leader with strong ServiceNow development expertise and a background in either Security or IT Service Management. As we expand our team we're seeking experienced consultants with knowledge across security areas such as incident response vulnerability and threat intelligence or IT operations including incident management CSDM and CMDB. As a ServiceNow Senior Technical Lead, you'll lead the design, development and delivery of secure high-performing solutions that support DWP's cybersecurity and service performance ecosystems. You'll combine advanced technical skills with knowledge of security, automation, risk or IT operations to build resilient and compliant enterprise applications. Working closely with Architecture, Security and Engineering teams, you'll shape the platform roadmap, drive technical standards and ensure secure-by-design principles are embedded throughout. What skills, knowledge and experience will you need? Solid understanding of cyber security or IT operations controls, with the ability to design solutions that enable defence-in-depth, embedded security or AI-driven automation. Proven track record of delivering and implementing ServiceNow Security Operations (SecOps) or IT Operations modules in enterprise environments. Strong analytical and problem-solving skills, with the ability to lead technical discovery, manage complex and ambiguous requirements and develop clear, actionable recommendations for improvement. Extensive experience designing, delivering and supporting security solutions across on-prem and cloud environments, aligned with security standards and architecture. You and your role As a ServiceNow Senior Technical Lead (Developer), you will provide expert-level ServiceNow capability alongside deep knowledge of either cybersecurity or IT operations, supporting project teams with complex platform implementations, integrations and design decisions. You will build and maintain strong relationships with both internal and external stakeholders, ensuring alignment on priorities and agreeing approaches to ServiceNow development, tooling and strategic improvements. In this role, you will offer clear and pragmatic guidance on challenges arising from ServiceNow programmes, including the implementation of new security, risk or IT operational capabilities, helping teams navigate complexity and deliver effective solutions. You will be responsible for managing delivery against the ServiceNow technical roadmap within your area, ensuring all activity aligns with platform architecture, security standards and agreed technical principles. You will also advise senior stakeholders on the ongoing evolution of the ServiceNow platform, including feasibility of enhancements, delivery approaches and timelines while working closely with production, security and infrastructure teams to ensure solutions are secure, resilient and scalable. Details. Wages. Perks. Location: You'll join us in one of our brilliant digital hubs in Birmingham, Blackpool, Leeds, Manchester, Newcastle or Sheffield Hybrid Working: We work a hybrid model - you'll spend some time working at home and some time collaborating face to face in a hub. Pay: Pay for this role is from £75,026 to £92,522. The maximum salary for the grade is £80,267, however a Digital Allowance of up to £12,255 per annum subject to our assessment of your capability at interview Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth £21,735 per year. Holidays: A generous leave package starting at 25 days rising to 30 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Flexible working including flexible hours and flex-friendly policies Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Sports and social activities Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable so our application and selection process is just two stages: Apply: complete your application on Civil Service Jobs. There'll be full instructions when you click through. Interview: a single stage interview online. CLICK APPLY for more information and to start your application.
May 13, 2026
Full time
Job Title: Senior Technical Lead Pay of £75,026, plus 28.97% employer pension contributions, hybrid working, flexible hours, and great work life balance. DWP. Digital with Purpose. Are you a technical lead with strong ServiceNow development expertise and solid knowledge of SecOps or ITSM frameworks and practices? We're looking for an engaging leader with strong ServiceNow development expertise and a background in either Security or IT Service Management. As we expand our team we're seeking experienced consultants with knowledge across security areas such as incident response vulnerability and threat intelligence or IT operations including incident management CSDM and CMDB. As a ServiceNow Senior Technical Lead, you'll lead the design, development and delivery of secure high-performing solutions that support DWP's cybersecurity and service performance ecosystems. You'll combine advanced technical skills with knowledge of security, automation, risk or IT operations to build resilient and compliant enterprise applications. Working closely with Architecture, Security and Engineering teams, you'll shape the platform roadmap, drive technical standards and ensure secure-by-design principles are embedded throughout. What skills, knowledge and experience will you need? Solid understanding of cyber security or IT operations controls, with the ability to design solutions that enable defence-in-depth, embedded security or AI-driven automation. Proven track record of delivering and implementing ServiceNow Security Operations (SecOps) or IT Operations modules in enterprise environments. Strong analytical and problem-solving skills, with the ability to lead technical discovery, manage complex and ambiguous requirements and develop clear, actionable recommendations for improvement. Extensive experience designing, delivering and supporting security solutions across on-prem and cloud environments, aligned with security standards and architecture. You and your role As a ServiceNow Senior Technical Lead (Developer), you will provide expert-level ServiceNow capability alongside deep knowledge of either cybersecurity or IT operations, supporting project teams with complex platform implementations, integrations and design decisions. You will build and maintain strong relationships with both internal and external stakeholders, ensuring alignment on priorities and agreeing approaches to ServiceNow development, tooling and strategic improvements. In this role, you will offer clear and pragmatic guidance on challenges arising from ServiceNow programmes, including the implementation of new security, risk or IT operational capabilities, helping teams navigate complexity and deliver effective solutions. You will be responsible for managing delivery against the ServiceNow technical roadmap within your area, ensuring all activity aligns with platform architecture, security standards and agreed technical principles. You will also advise senior stakeholders on the ongoing evolution of the ServiceNow platform, including feasibility of enhancements, delivery approaches and timelines while working closely with production, security and infrastructure teams to ensure solutions are secure, resilient and scalable. Details. Wages. Perks. Location: You'll join us in one of our brilliant digital hubs in Birmingham, Blackpool, Leeds, Manchester, Newcastle or Sheffield Hybrid Working: We work a hybrid model - you'll spend some time working at home and some time collaborating face to face in a hub. Pay: Pay for this role is from £75,026 to £92,522. The maximum salary for the grade is £80,267, however a Digital Allowance of up to £12,255 per annum subject to our assessment of your capability at interview Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth £21,735 per year. Holidays: A generous leave package starting at 25 days rising to 30 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Flexible working including flexible hours and flex-friendly policies Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Sports and social activities Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable so our application and selection process is just two stages: Apply: complete your application on Civil Service Jobs. There'll be full instructions when you click through. Interview: a single stage interview online. CLICK APPLY for more information and to start your application.
Job Title: Senior Technical Lead Pay of £75,026, plus 28.97% employer pension contributions, hybrid working, flexible hours, and great work life balance. DWP. Digital with Purpose. Are you a technical lead with strong ServiceNow development expertise and solid knowledge of SecOps or ITSM frameworks and practices? We're looking for an engaging leader with strong ServiceNow development expertise and a background in either Security or IT Service Management. As we expand our team we're seeking experienced consultants with knowledge across security areas such as incident response vulnerability and threat intelligence or IT operations including incident management CSDM and CMDB. As a ServiceNow Senior Technical Lead, you'll lead the design, development and delivery of secure high-performing solutions that support DWP's cybersecurity and service performance ecosystems. You'll combine advanced technical skills with knowledge of security, automation, risk or IT operations to build resilient and compliant enterprise applications. Working closely with Architecture, Security and Engineering teams, you'll shape the platform roadmap, drive technical standards and ensure secure-by-design principles are embedded throughout. What skills, knowledge and experience will you need? Solid understanding of cyber security or IT operations controls, with the ability to design solutions that enable defence-in-depth, embedded security or AI-driven automation. Proven track record of delivering and implementing ServiceNow Security Operations (SecOps) or IT Operations modules in enterprise environments. Strong analytical and problem-solving skills, with the ability to lead technical discovery, manage complex and ambiguous requirements and develop clear, actionable recommendations for improvement. Extensive experience designing, delivering and supporting security solutions across on-prem and cloud environments, aligned with security standards and architecture. You and your role As a ServiceNow Senior Technical Lead (Developer), you will provide expert-level ServiceNow capability alongside deep knowledge of either cybersecurity or IT operations, supporting project teams with complex platform implementations, integrations and design decisions. You will build and maintain strong relationships with both internal and external stakeholders, ensuring alignment on priorities and agreeing approaches to ServiceNow development, tooling and strategic improvements. In this role, you will offer clear and pragmatic guidance on challenges arising from ServiceNow programmes, including the implementation of new security, risk or IT operational capabilities, helping teams navigate complexity and deliver effective solutions. You will be responsible for managing delivery against the ServiceNow technical roadmap within your area, ensuring all activity aligns with platform architecture, security standards and agreed technical principles. You will also advise senior stakeholders on the ongoing evolution of the ServiceNow platform, including feasibility of enhancements, delivery approaches and timelines while working closely with production, security and infrastructure teams to ensure solutions are secure, resilient and scalable. Details. Wages. Perks. Location: You'll join us in one of our brilliant digital hubs in Birmingham, Blackpool, Leeds, Manchester, Newcastle or Sheffield Hybrid Working: We work a hybrid model - you'll spend some time working at home and some time collaborating face to face in a hub. Pay: Pay for this role is from £75,026 to £92,522. The maximum salary for the grade is £80,267, however a Digital Allowance of up to £12,255 per annum subject to our assessment of your capability at interview Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth £21,735 per year. Holidays: A generous leave package starting at 25 days rising to 30 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Flexible working including flexible hours and flex-friendly policies Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Sports and social activities Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable so our application and selection process is just two stages: Apply: complete your application on Civil Service Jobs. There'll be full instructions when you click through. Interview: a single stage interview online. CLICK APPLY for more information and to start your application.
May 13, 2026
Full time
Job Title: Senior Technical Lead Pay of £75,026, plus 28.97% employer pension contributions, hybrid working, flexible hours, and great work life balance. DWP. Digital with Purpose. Are you a technical lead with strong ServiceNow development expertise and solid knowledge of SecOps or ITSM frameworks and practices? We're looking for an engaging leader with strong ServiceNow development expertise and a background in either Security or IT Service Management. As we expand our team we're seeking experienced consultants with knowledge across security areas such as incident response vulnerability and threat intelligence or IT operations including incident management CSDM and CMDB. As a ServiceNow Senior Technical Lead, you'll lead the design, development and delivery of secure high-performing solutions that support DWP's cybersecurity and service performance ecosystems. You'll combine advanced technical skills with knowledge of security, automation, risk or IT operations to build resilient and compliant enterprise applications. Working closely with Architecture, Security and Engineering teams, you'll shape the platform roadmap, drive technical standards and ensure secure-by-design principles are embedded throughout. What skills, knowledge and experience will you need? Solid understanding of cyber security or IT operations controls, with the ability to design solutions that enable defence-in-depth, embedded security or AI-driven automation. Proven track record of delivering and implementing ServiceNow Security Operations (SecOps) or IT Operations modules in enterprise environments. Strong analytical and problem-solving skills, with the ability to lead technical discovery, manage complex and ambiguous requirements and develop clear, actionable recommendations for improvement. Extensive experience designing, delivering and supporting security solutions across on-prem and cloud environments, aligned with security standards and architecture. You and your role As a ServiceNow Senior Technical Lead (Developer), you will provide expert-level ServiceNow capability alongside deep knowledge of either cybersecurity or IT operations, supporting project teams with complex platform implementations, integrations and design decisions. You will build and maintain strong relationships with both internal and external stakeholders, ensuring alignment on priorities and agreeing approaches to ServiceNow development, tooling and strategic improvements. In this role, you will offer clear and pragmatic guidance on challenges arising from ServiceNow programmes, including the implementation of new security, risk or IT operational capabilities, helping teams navigate complexity and deliver effective solutions. You will be responsible for managing delivery against the ServiceNow technical roadmap within your area, ensuring all activity aligns with platform architecture, security standards and agreed technical principles. You will also advise senior stakeholders on the ongoing evolution of the ServiceNow platform, including feasibility of enhancements, delivery approaches and timelines while working closely with production, security and infrastructure teams to ensure solutions are secure, resilient and scalable. Details. Wages. Perks. Location: You'll join us in one of our brilliant digital hubs in Birmingham, Blackpool, Leeds, Manchester, Newcastle or Sheffield Hybrid Working: We work a hybrid model - you'll spend some time working at home and some time collaborating face to face in a hub. Pay: Pay for this role is from £75,026 to £92,522. The maximum salary for the grade is £80,267, however a Digital Allowance of up to £12,255 per annum subject to our assessment of your capability at interview Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth £21,735 per year. Holidays: A generous leave package starting at 25 days rising to 30 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Flexible working including flexible hours and flex-friendly policies Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Sports and social activities Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable so our application and selection process is just two stages: Apply: complete your application on Civil Service Jobs. There'll be full instructions when you click through. Interview: a single stage interview online. CLICK APPLY for more information and to start your application.
Job Title: Senior Technical Lead Pay of £75,026, plus 28.97% employer pension contributions, hybrid working, flexible hours, and great work life balance. DWP. Digital with Purpose. Are you a technical lead with strong ServiceNow development expertise and solid knowledge of SecOps or ITSM frameworks and practices? We're looking for an engaging leader with strong ServiceNow development expertise and a background in either Security or IT Service Management. As we expand our team we're seeking experienced consultants with knowledge across security areas such as incident response vulnerability and threat intelligence or IT operations including incident management CSDM and CMDB. As a ServiceNow Senior Technical Lead, you'll lead the design, development and delivery of secure high-performing solutions that support DWP's cybersecurity and service performance ecosystems. You'll combine advanced technical skills with knowledge of security, automation, risk or IT operations to build resilient and compliant enterprise applications. Working closely with Architecture, Security and Engineering teams, you'll shape the platform roadmap, drive technical standards and ensure secure-by-design principles are embedded throughout. What skills, knowledge and experience will you need? Solid understanding of cyber security or IT operations controls, with the ability to design solutions that enable defence-in-depth, embedded security or AI-driven automation. Proven track record of delivering and implementing ServiceNow Security Operations (SecOps) or IT Operations modules in enterprise environments. Strong analytical and problem-solving skills, with the ability to lead technical discovery, manage complex and ambiguous requirements and develop clear, actionable recommendations for improvement. Extensive experience designing, delivering and supporting security solutions across on-prem and cloud environments, aligned with security standards and architecture. You and your role As a ServiceNow Senior Technical Lead (Developer), you will provide expert-level ServiceNow capability alongside deep knowledge of either cybersecurity or IT operations, supporting project teams with complex platform implementations, integrations and design decisions. You will build and maintain strong relationships with both internal and external stakeholders, ensuring alignment on priorities and agreeing approaches to ServiceNow development, tooling and strategic improvements. In this role, you will offer clear and pragmatic guidance on challenges arising from ServiceNow programmes, including the implementation of new security, risk or IT operational capabilities, helping teams navigate complexity and deliver effective solutions. You will be responsible for managing delivery against the ServiceNow technical roadmap within your area, ensuring all activity aligns with platform architecture, security standards and agreed technical principles. You will also advise senior stakeholders on the ongoing evolution of the ServiceNow platform, including feasibility of enhancements, delivery approaches and timelines while working closely with production, security and infrastructure teams to ensure solutions are secure, resilient and scalable. Details. Wages. Perks. Location: You'll join us in one of our brilliant digital hubs in Birmingham, Blackpool, Leeds, Manchester, Newcastle or Sheffield Hybrid Working: We work a hybrid model - you'll spend some time working at home and some time collaborating face to face in a hub. Pay: Pay for this role is from £75,026 to £92,522. The maximum salary for the grade is £80,267, however a Digital Allowance of up to £12,255 per annum subject to our assessment of your capability at interview Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth £21,735 per year. Holidays: A generous leave package starting at 25 days rising to 30 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Flexible working including flexible hours and flex-friendly policies Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Sports and social activities Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable so our application and selection process is just two stages: Apply: complete your application on Civil Service Jobs. There'll be full instructions when you click through. Interview: a single stage interview online. CLICK APPLY for more information and to start your application.
May 13, 2026
Full time
Job Title: Senior Technical Lead Pay of £75,026, plus 28.97% employer pension contributions, hybrid working, flexible hours, and great work life balance. DWP. Digital with Purpose. Are you a technical lead with strong ServiceNow development expertise and solid knowledge of SecOps or ITSM frameworks and practices? We're looking for an engaging leader with strong ServiceNow development expertise and a background in either Security or IT Service Management. As we expand our team we're seeking experienced consultants with knowledge across security areas such as incident response vulnerability and threat intelligence or IT operations including incident management CSDM and CMDB. As a ServiceNow Senior Technical Lead, you'll lead the design, development and delivery of secure high-performing solutions that support DWP's cybersecurity and service performance ecosystems. You'll combine advanced technical skills with knowledge of security, automation, risk or IT operations to build resilient and compliant enterprise applications. Working closely with Architecture, Security and Engineering teams, you'll shape the platform roadmap, drive technical standards and ensure secure-by-design principles are embedded throughout. What skills, knowledge and experience will you need? Solid understanding of cyber security or IT operations controls, with the ability to design solutions that enable defence-in-depth, embedded security or AI-driven automation. Proven track record of delivering and implementing ServiceNow Security Operations (SecOps) or IT Operations modules in enterprise environments. Strong analytical and problem-solving skills, with the ability to lead technical discovery, manage complex and ambiguous requirements and develop clear, actionable recommendations for improvement. Extensive experience designing, delivering and supporting security solutions across on-prem and cloud environments, aligned with security standards and architecture. You and your role As a ServiceNow Senior Technical Lead (Developer), you will provide expert-level ServiceNow capability alongside deep knowledge of either cybersecurity or IT operations, supporting project teams with complex platform implementations, integrations and design decisions. You will build and maintain strong relationships with both internal and external stakeholders, ensuring alignment on priorities and agreeing approaches to ServiceNow development, tooling and strategic improvements. In this role, you will offer clear and pragmatic guidance on challenges arising from ServiceNow programmes, including the implementation of new security, risk or IT operational capabilities, helping teams navigate complexity and deliver effective solutions. You will be responsible for managing delivery against the ServiceNow technical roadmap within your area, ensuring all activity aligns with platform architecture, security standards and agreed technical principles. You will also advise senior stakeholders on the ongoing evolution of the ServiceNow platform, including feasibility of enhancements, delivery approaches and timelines while working closely with production, security and infrastructure teams to ensure solutions are secure, resilient and scalable. Details. Wages. Perks. Location: You'll join us in one of our brilliant digital hubs in Birmingham, Blackpool, Leeds, Manchester, Newcastle or Sheffield Hybrid Working: We work a hybrid model - you'll spend some time working at home and some time collaborating face to face in a hub. Pay: Pay for this role is from £75,026 to £92,522. The maximum salary for the grade is £80,267, however a Digital Allowance of up to £12,255 per annum subject to our assessment of your capability at interview Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth £21,735 per year. Holidays: A generous leave package starting at 25 days rising to 30 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Flexible working including flexible hours and flex-friendly policies Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Sports and social activities Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable so our application and selection process is just two stages: Apply: complete your application on Civil Service Jobs. There'll be full instructions when you click through. Interview: a single stage interview online. CLICK APPLY for more information and to start your application.
Job Title: Senior Technical Lead Pay of £75,026, plus 28.97% employer pension contributions, hybrid working, flexible hours, and great work life balance. DWP. Digital with Purpose. Are you a technical lead with strong ServiceNow development expertise and solid knowledge of SecOps or ITSM frameworks and practices? We're looking for an engaging leader with strong ServiceNow development expertise and a background in either Security or IT Service Management. As we expand our team we're seeking experienced consultants with knowledge across security areas such as incident response vulnerability and threat intelligence or IT operations including incident management CSDM and CMDB. As a ServiceNow Senior Technical Lead, you'll lead the design, development and delivery of secure high-performing solutions that support DWP's cybersecurity and service performance ecosystems. You'll combine advanced technical skills with knowledge of security, automation, risk or IT operations to build resilient and compliant enterprise applications. Working closely with Architecture, Security and Engineering teams, you'll shape the platform roadmap, drive technical standards and ensure secure-by-design principles are embedded throughout. What skills, knowledge and experience will you need? Solid understanding of cyber security or IT operations controls, with the ability to design solutions that enable defence-in-depth, embedded security or AI-driven automation. Proven track record of delivering and implementing ServiceNow Security Operations (SecOps) or IT Operations modules in enterprise environments. Strong analytical and problem-solving skills, with the ability to lead technical discovery, manage complex and ambiguous requirements and develop clear, actionable recommendations for improvement. Extensive experience designing, delivering and supporting security solutions across on-prem and cloud environments, aligned with security standards and architecture. You and your role As a ServiceNow Senior Technical Lead (Developer), you will provide expert-level ServiceNow capability alongside deep knowledge of either cybersecurity or IT operations, supporting project teams with complex platform implementations, integrations and design decisions. You will build and maintain strong relationships with both internal and external stakeholders, ensuring alignment on priorities and agreeing approaches to ServiceNow development, tooling and strategic improvements. In this role, you will offer clear and pragmatic guidance on challenges arising from ServiceNow programmes, including the implementation of new security, risk or IT operational capabilities, helping teams navigate complexity and deliver effective solutions. You will be responsible for managing delivery against the ServiceNow technical roadmap within your area, ensuring all activity aligns with platform architecture, security standards and agreed technical principles. You will also advise senior stakeholders on the ongoing evolution of the ServiceNow platform, including feasibility of enhancements, delivery approaches and timelines while working closely with production, security and infrastructure teams to ensure solutions are secure, resilient and scalable. Details. Wages. Perks. Location: You'll join us in one of our brilliant digital hubs in Birmingham, Blackpool, Leeds, Manchester, Newcastle or Sheffield Hybrid Working: We work a hybrid model - you'll spend some time working at home and some time collaborating face to face in a hub. Pay: Pay for this role is from £75,026 to £92,522. The maximum salary for the grade is £80,267, however a Digital Allowance of up to £12,255 per annum subject to our assessment of your capability at interview Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth £21,735 per year. Holidays: A generous leave package starting at 25 days rising to 30 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Flexible working including flexible hours and flex-friendly policies Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Sports and social activities Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable so our application and selection process is just two stages: Apply: complete your application on Civil Service Jobs. There'll be full instructions when you click through. Interview: a single stage interview online. CLICK APPLY for more information and to start your application.
May 13, 2026
Full time
Job Title: Senior Technical Lead Pay of £75,026, plus 28.97% employer pension contributions, hybrid working, flexible hours, and great work life balance. DWP. Digital with Purpose. Are you a technical lead with strong ServiceNow development expertise and solid knowledge of SecOps or ITSM frameworks and practices? We're looking for an engaging leader with strong ServiceNow development expertise and a background in either Security or IT Service Management. As we expand our team we're seeking experienced consultants with knowledge across security areas such as incident response vulnerability and threat intelligence or IT operations including incident management CSDM and CMDB. As a ServiceNow Senior Technical Lead, you'll lead the design, development and delivery of secure high-performing solutions that support DWP's cybersecurity and service performance ecosystems. You'll combine advanced technical skills with knowledge of security, automation, risk or IT operations to build resilient and compliant enterprise applications. Working closely with Architecture, Security and Engineering teams, you'll shape the platform roadmap, drive technical standards and ensure secure-by-design principles are embedded throughout. What skills, knowledge and experience will you need? Solid understanding of cyber security or IT operations controls, with the ability to design solutions that enable defence-in-depth, embedded security or AI-driven automation. Proven track record of delivering and implementing ServiceNow Security Operations (SecOps) or IT Operations modules in enterprise environments. Strong analytical and problem-solving skills, with the ability to lead technical discovery, manage complex and ambiguous requirements and develop clear, actionable recommendations for improvement. Extensive experience designing, delivering and supporting security solutions across on-prem and cloud environments, aligned with security standards and architecture. You and your role As a ServiceNow Senior Technical Lead (Developer), you will provide expert-level ServiceNow capability alongside deep knowledge of either cybersecurity or IT operations, supporting project teams with complex platform implementations, integrations and design decisions. You will build and maintain strong relationships with both internal and external stakeholders, ensuring alignment on priorities and agreeing approaches to ServiceNow development, tooling and strategic improvements. In this role, you will offer clear and pragmatic guidance on challenges arising from ServiceNow programmes, including the implementation of new security, risk or IT operational capabilities, helping teams navigate complexity and deliver effective solutions. You will be responsible for managing delivery against the ServiceNow technical roadmap within your area, ensuring all activity aligns with platform architecture, security standards and agreed technical principles. You will also advise senior stakeholders on the ongoing evolution of the ServiceNow platform, including feasibility of enhancements, delivery approaches and timelines while working closely with production, security and infrastructure teams to ensure solutions are secure, resilient and scalable. Details. Wages. Perks. Location: You'll join us in one of our brilliant digital hubs in Birmingham, Blackpool, Leeds, Manchester, Newcastle or Sheffield Hybrid Working: We work a hybrid model - you'll spend some time working at home and some time collaborating face to face in a hub. Pay: Pay for this role is from £75,026 to £92,522. The maximum salary for the grade is £80,267, however a Digital Allowance of up to £12,255 per annum subject to our assessment of your capability at interview Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth £21,735 per year. Holidays: A generous leave package starting at 25 days rising to 30 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Flexible working including flexible hours and flex-friendly policies Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Sports and social activities Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable so our application and selection process is just two stages: Apply: complete your application on Civil Service Jobs. There'll be full instructions when you click through. Interview: a single stage interview online. CLICK APPLY for more information and to start your application.
Job Title: Senior Technical Lead Pay of £75,026, plus 28.97% employer pension contributions, hybrid working, flexible hours, and great work life balance. DWP. Digital with Purpose. Are you a technical lead with strong ServiceNow development expertise and solid knowledge of SecOps or ITSM frameworks and practices? We're looking for an engaging leader with strong ServiceNow development expertise and a background in either Security or IT Service Management. As we expand our team we're seeking experienced consultants with knowledge across security areas such as incident response vulnerability and threat intelligence or IT operations including incident management CSDM and CMDB. As a ServiceNow Senior Technical Lead, you'll lead the design, development and delivery of secure high-performing solutions that support DWP's cybersecurity and service performance ecosystems. You'll combine advanced technical skills with knowledge of security, automation, risk or IT operations to build resilient and compliant enterprise applications. Working closely with Architecture, Security and Engineering teams, you'll shape the platform roadmap, drive technical standards and ensure secure-by-design principles are embedded throughout. What skills, knowledge and experience will you need? Solid understanding of cyber security or IT operations controls, with the ability to design solutions that enable defence-in-depth, embedded security or AI-driven automation. Proven track record of delivering and implementing ServiceNow Security Operations (SecOps) or IT Operations modules in enterprise environments. Strong analytical and problem-solving skills, with the ability to lead technical discovery, manage complex and ambiguous requirements and develop clear, actionable recommendations for improvement. Extensive experience designing, delivering and supporting security solutions across on-prem and cloud environments, aligned with security standards and architecture. You and your role As a ServiceNow Senior Technical Lead (Developer), you will provide expert-level ServiceNow capability alongside deep knowledge of either cybersecurity or IT operations, supporting project teams with complex platform implementations, integrations and design decisions. You will build and maintain strong relationships with both internal and external stakeholders, ensuring alignment on priorities and agreeing approaches to ServiceNow development, tooling and strategic improvements. In this role, you will offer clear and pragmatic guidance on challenges arising from ServiceNow programmes, including the implementation of new security, risk or IT operational capabilities, helping teams navigate complexity and deliver effective solutions. You will be responsible for managing delivery against the ServiceNow technical roadmap within your area, ensuring all activity aligns with platform architecture, security standards and agreed technical principles. You will also advise senior stakeholders on the ongoing evolution of the ServiceNow platform, including feasibility of enhancements, delivery approaches and timelines while working closely with production, security and infrastructure teams to ensure solutions are secure, resilient and scalable. Details. Wages. Perks. Location: You'll join us in one of our brilliant digital hubs in Birmingham, Blackpool, Leeds, Manchester, Newcastle or Sheffield Hybrid Working: We work a hybrid model - you'll spend some time working at home and some time collaborating face to face in a hub. Pay: Pay for this role is from £75,026 to £92,522. The maximum salary for the grade is £80,267, however a Digital Allowance of up to £12,255 per annum subject to our assessment of your capability at interview Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth £21,735 per year. Holidays: A generous leave package starting at 25 days rising to 30 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Flexible working including flexible hours and flex-friendly policies Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Sports and social activities Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable so our application and selection process is just two stages: Apply: complete your application on Civil Service Jobs. There'll be full instructions when you click through. Interview: a single stage interview online. CLICK APPLY for more information and to start your application.
May 13, 2026
Full time
Job Title: Senior Technical Lead Pay of £75,026, plus 28.97% employer pension contributions, hybrid working, flexible hours, and great work life balance. DWP. Digital with Purpose. Are you a technical lead with strong ServiceNow development expertise and solid knowledge of SecOps or ITSM frameworks and practices? We're looking for an engaging leader with strong ServiceNow development expertise and a background in either Security or IT Service Management. As we expand our team we're seeking experienced consultants with knowledge across security areas such as incident response vulnerability and threat intelligence or IT operations including incident management CSDM and CMDB. As a ServiceNow Senior Technical Lead, you'll lead the design, development and delivery of secure high-performing solutions that support DWP's cybersecurity and service performance ecosystems. You'll combine advanced technical skills with knowledge of security, automation, risk or IT operations to build resilient and compliant enterprise applications. Working closely with Architecture, Security and Engineering teams, you'll shape the platform roadmap, drive technical standards and ensure secure-by-design principles are embedded throughout. What skills, knowledge and experience will you need? Solid understanding of cyber security or IT operations controls, with the ability to design solutions that enable defence-in-depth, embedded security or AI-driven automation. Proven track record of delivering and implementing ServiceNow Security Operations (SecOps) or IT Operations modules in enterprise environments. Strong analytical and problem-solving skills, with the ability to lead technical discovery, manage complex and ambiguous requirements and develop clear, actionable recommendations for improvement. Extensive experience designing, delivering and supporting security solutions across on-prem and cloud environments, aligned with security standards and architecture. You and your role As a ServiceNow Senior Technical Lead (Developer), you will provide expert-level ServiceNow capability alongside deep knowledge of either cybersecurity or IT operations, supporting project teams with complex platform implementations, integrations and design decisions. You will build and maintain strong relationships with both internal and external stakeholders, ensuring alignment on priorities and agreeing approaches to ServiceNow development, tooling and strategic improvements. In this role, you will offer clear and pragmatic guidance on challenges arising from ServiceNow programmes, including the implementation of new security, risk or IT operational capabilities, helping teams navigate complexity and deliver effective solutions. You will be responsible for managing delivery against the ServiceNow technical roadmap within your area, ensuring all activity aligns with platform architecture, security standards and agreed technical principles. You will also advise senior stakeholders on the ongoing evolution of the ServiceNow platform, including feasibility of enhancements, delivery approaches and timelines while working closely with production, security and infrastructure teams to ensure solutions are secure, resilient and scalable. Details. Wages. Perks. Location: You'll join us in one of our brilliant digital hubs in Birmingham, Blackpool, Leeds, Manchester, Newcastle or Sheffield Hybrid Working: We work a hybrid model - you'll spend some time working at home and some time collaborating face to face in a hub. Pay: Pay for this role is from £75,026 to £92,522. The maximum salary for the grade is £80,267, however a Digital Allowance of up to £12,255 per annum subject to our assessment of your capability at interview Pension: You'll get a brilliant civil service pension with employer contributions of 28.97%, worth £21,735 per year. Holidays: A generous leave package starting at 25 days rising to 30 days over time. You can also take up to 3 extra days off a month on flexi-time. You'll also get all the usual public holidays. We have a broad benefits package built around your work-life balance which includes: Flexible working including flexible hours and flex-friendly policies Time off volunteering and charitable giving Bring your authentic self to work with 'I Can Be Me in DWP' Discounts and savings on shopping, fun days out and more Interest-free loans to buy a bike or a season ticket, so it's even easier for you to get to work and start making a difference Sports and social activities Professional development, coaching, mentoring and career progression opportunities. And we have an award-winning environment and culture: DWP have been recognised as 2024 Diversity Employer of the Year at the Computing Women in Tech Excellence awards Diverse and Inclusive Leadership at Digital Leaders Awards 2024 Commended as Best Place to Work in Digital category in the Computing Digital Technology Leaders awards 2025 Recognised as one of the Best Public Sector Employers at 2025 Women In Tech Employer Awards Process: We know your time is valuable so our application and selection process is just two stages: Apply: complete your application on Civil Service Jobs. There'll be full instructions when you click through. Interview: a single stage interview online. CLICK APPLY for more information and to start your application.
Xpertex Xpertex, part of the larger Exponential-e Group, are an information and data cyber security company that have been providing high-security services and solutions to the public and private sector since 2006. With over 15 years' experience Xpertex is a leader in cyber security, solving complex security problems across Government, Industry and Commerce. Through our experience, knowledge and expertise we have developed trusted relationships with high profile clients; giving them the best solutions that deliver high security Networks, enhanced Cyber Security and quality Information Assurance. People are the cornerstone of everything we do and Xpertex offers fantastic career opportunities for those motivated to become experts in their field. If you are a passionate individual and enjoy the challenge of a fun, fast-paced work environment connect with us today. Job Description Overall purpose of the job: The role provides direct DevOps support and business consulting to Xpertex customers, based 5 days a week on customer site. The role sits within a DevOps Managed Service team offering IT Development, IT Security, IT Operations as well as assurance to Xpertex's customer systems. The post-holder will be skilled and experienced professional operating at the SFIA band specified The post-holder will be an active contributor to the development of the lines of service to which it relates for the reporting period Key responsibilities for this job: Functional, Technical, support and optimisation of the technical systems within the Managed Service Technical Consultancy on multiple customer engagements at customer sites and remote support Development, Test & Release and Support of customer products Management of all planned outages and deployments of new services, software or capabilities - this includes upgrades, major changes and periods of special interest Engage with business development stakeholders to support growth in the relevant line-of-service. Provide subject-matter-expertise in 2nd and 3rd Line support in response to queries received by peers and colleagues or managers Producing project artefacts, technical designs and support documentation that is reviewed, managed and stored appropriately in line with best practice, e.g. Prince2, TOGAF, ISO, AGILE etc. Attendance at Daily Scrum or checkpoint meetings - including any associated documentation, managing incidents, escalations or upcoming upgrades Providing progress updates to relevant stakeholders including identification of risks and issues. Researching market approaches To hold active security clearance Knowledge and experience required: This role will require you to hold an active high level of DV security clearance prior to starting the role Experience working in DevOps related engagements or related field Knowledge of information technology practices and products to provide objective and credible opinions and guidance Experience of Linux/RHEL v6x, 7x and 8x JavaScript, SQL, Java, Python and Unix coding Scripting knowledge AGILE JIRA Communicate with impact and empathy and adapt style to suit the situation OpenText Service Manager and/or ServiceNow report creation knowledge Ability to provide written reports to a high standard with the appropriate caveats and guidance (internal and external facing material) AWS infrastructure support and migration experience Desirable knowledge and experience: AWS accreditation Knowledge of COTS products (including but not limited to; Elasticsearch, NiFi, Rabbit, Kafka, MongoDB, Hadoop, Ansible, Git and Kubernetes) Development of dashboards for monitoring and alerting through Grafana, Splunk, Prometheus and OpenText Om and Ops Bridge On prem to cloud application migration Full, current UK Driving license and provision of vehicle for business purposes Our People Our people are what makes Exponential-e Group the company it is today. This year's employee survey highlighted that 81% of employees who took the survey, would recommend a friend to work for our organisation. Learning and development are fundamental parts of daily life at Exponential-e. From their first day at the company, everyone is provided ample opportunities to develop their skills and broaden their horizons, with our own L&D team running a range of bespoke courses, based on the latest innovations and challenges across the digital landscape. Exponential-e Group is committed to providing equal opportunities in employment and treating all employees with respect and dignity. The company respects and values the diversity of its staff, striving to maintain an environment where there is opportunity for everyone to feel valued, their talents to be utilised and for both personal and organisational aspirations to be met. Every employee plays a vital role in helping to create an inclusive working environment by understanding and harnessing difference in a positive way.
May 12, 2026
Full time
Xpertex Xpertex, part of the larger Exponential-e Group, are an information and data cyber security company that have been providing high-security services and solutions to the public and private sector since 2006. With over 15 years' experience Xpertex is a leader in cyber security, solving complex security problems across Government, Industry and Commerce. Through our experience, knowledge and expertise we have developed trusted relationships with high profile clients; giving them the best solutions that deliver high security Networks, enhanced Cyber Security and quality Information Assurance. People are the cornerstone of everything we do and Xpertex offers fantastic career opportunities for those motivated to become experts in their field. If you are a passionate individual and enjoy the challenge of a fun, fast-paced work environment connect with us today. Job Description Overall purpose of the job: The role provides direct DevOps support and business consulting to Xpertex customers, based 5 days a week on customer site. The role sits within a DevOps Managed Service team offering IT Development, IT Security, IT Operations as well as assurance to Xpertex's customer systems. The post-holder will be skilled and experienced professional operating at the SFIA band specified The post-holder will be an active contributor to the development of the lines of service to which it relates for the reporting period Key responsibilities for this job: Functional, Technical, support and optimisation of the technical systems within the Managed Service Technical Consultancy on multiple customer engagements at customer sites and remote support Development, Test & Release and Support of customer products Management of all planned outages and deployments of new services, software or capabilities - this includes upgrades, major changes and periods of special interest Engage with business development stakeholders to support growth in the relevant line-of-service. Provide subject-matter-expertise in 2nd and 3rd Line support in response to queries received by peers and colleagues or managers Producing project artefacts, technical designs and support documentation that is reviewed, managed and stored appropriately in line with best practice, e.g. Prince2, TOGAF, ISO, AGILE etc. Attendance at Daily Scrum or checkpoint meetings - including any associated documentation, managing incidents, escalations or upcoming upgrades Providing progress updates to relevant stakeholders including identification of risks and issues. Researching market approaches To hold active security clearance Knowledge and experience required: This role will require you to hold an active high level of DV security clearance prior to starting the role Experience working in DevOps related engagements or related field Knowledge of information technology practices and products to provide objective and credible opinions and guidance Experience of Linux/RHEL v6x, 7x and 8x JavaScript, SQL, Java, Python and Unix coding Scripting knowledge AGILE JIRA Communicate with impact and empathy and adapt style to suit the situation OpenText Service Manager and/or ServiceNow report creation knowledge Ability to provide written reports to a high standard with the appropriate caveats and guidance (internal and external facing material) AWS infrastructure support and migration experience Desirable knowledge and experience: AWS accreditation Knowledge of COTS products (including but not limited to; Elasticsearch, NiFi, Rabbit, Kafka, MongoDB, Hadoop, Ansible, Git and Kubernetes) Development of dashboards for monitoring and alerting through Grafana, Splunk, Prometheus and OpenText Om and Ops Bridge On prem to cloud application migration Full, current UK Driving license and provision of vehicle for business purposes Our People Our people are what makes Exponential-e Group the company it is today. This year's employee survey highlighted that 81% of employees who took the survey, would recommend a friend to work for our organisation. Learning and development are fundamental parts of daily life at Exponential-e. From their first day at the company, everyone is provided ample opportunities to develop their skills and broaden their horizons, with our own L&D team running a range of bespoke courses, based on the latest innovations and challenges across the digital landscape. Exponential-e Group is committed to providing equal opportunities in employment and treating all employees with respect and dignity. The company respects and values the diversity of its staff, striving to maintain an environment where there is opportunity for everyone to feel valued, their talents to be utilised and for both personal and organisational aspirations to be met. Every employee plays a vital role in helping to create an inclusive working environment by understanding and harnessing difference in a positive way.
Principal Consultant - Incident Response Salary: Up to £85,000 + cash benefits Location: London, Cardiff, Manchester, Birmingham or Edinburgh Working pattern: Hybrid - 2-3 days per week in the office About the Role Our client is seeking an experienced Principal Consultant to join their Incident Response practice. This is a senior, client-facing role within a highly regarded cyber security team, delivering proactive incident readiness engagements. You will work closely with organisations to strengthen their preparedness. This includes reviewing and developing incident response plans, facilitating tabletop exercises, running simulated attack scenarios, and advising on preventative engineering and operational readiness. The focus is on ensuring clients are not only able to respond effectively in a crisis, but are proactively building resilience into their environments. This role offers the opportunity to work on complex and high-profile cyber incidents, while also shaping how organisations think about planning, governance and technical response capability. The Role As a Principal Consultant, you will: Lead and deliver technical incident response engagements, helping clients respond, remediate and recover from cyber security incidents. Conduct high-quality forensic and technical analysis to determine root cause, scope and impact of security breaches. Produce clear, well-structured outputs ranging from executive briefings to detailed technical investigation reports. Act as the technical lead on small to medium-sized incidents, overseeing team members and ensuring technical excellence throughout delivery. Support detection engineering and SecOps enhancement initiatives, including identifying coverage gaps in EDR/SIEM tooling and contributing to orchestration and automation playbooks. Work directly with client technical teams, acting as a trusted advisor and primary point of contact during engagements. Scope and design both emergency response and preparatory readiness engagements. In addition to reactive incident work, you will: Assess and improve clients' incident response plans and protocols. Facilitate tabletop exercises and simulated attack scenarios to test organisational readiness. Deliver incident preparedness services, including playbook development, runbook design and capability gap analysis. Provide threat briefings and strategic guidance to help organisations strengthen their preventative and detection capabilities. Mentor and develop junior consultants within the practice. About You Our client is looking for an experienced incident responder with strong technical depth and the ability to engage confidently with stakeholders at all levels. You will have recent hands-on experience in at least two of the following areas: Digital forensics and technical incident response Enterprise security operations tooling and processes Detection engineering within EDR/SIEM environments, including addressing ATT&CK TTP coverage gaps Enterprise IT networks and Active Directory Cloud platforms such as Microsoft 365, Azure, AWS or GCP You will also demonstrate: A strong understanding of threat actors and the techniques used to compromise organisations. The ability to analyse complex technical problems and communicate findings clearly to both technical and non-technical audiences. Experience leading investigations and managing client-facing engagements. Familiarity with incident readiness and preparedness services, including tabletop exercises, playbook development and response planning. The ability to build strong working relationships with clients and internal stakeholders. A commitment to mentoring and developing others within the team. This is an excellent opportunity for an experienced incident response professional who enjoys both the intensity of live incident work and the strategic value of helping organisations strengthen their cyber resilience before an attack occurs. Apply now for immediate review! Principal Consultant Incident Response, Incident Response Manager, Principal Consultant Incident Response, Incident Response Consultant, Principal Consultant Incident Response, Incident Response, Principal Consultant Incident Response, Incident Readiness Circle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter and LinkedIn - Circle Recruitment.
May 03, 2026
Full time
Principal Consultant - Incident Response Salary: Up to £85,000 + cash benefits Location: London, Cardiff, Manchester, Birmingham or Edinburgh Working pattern: Hybrid - 2-3 days per week in the office About the Role Our client is seeking an experienced Principal Consultant to join their Incident Response practice. This is a senior, client-facing role within a highly regarded cyber security team, delivering proactive incident readiness engagements. You will work closely with organisations to strengthen their preparedness. This includes reviewing and developing incident response plans, facilitating tabletop exercises, running simulated attack scenarios, and advising on preventative engineering and operational readiness. The focus is on ensuring clients are not only able to respond effectively in a crisis, but are proactively building resilience into their environments. This role offers the opportunity to work on complex and high-profile cyber incidents, while also shaping how organisations think about planning, governance and technical response capability. The Role As a Principal Consultant, you will: Lead and deliver technical incident response engagements, helping clients respond, remediate and recover from cyber security incidents. Conduct high-quality forensic and technical analysis to determine root cause, scope and impact of security breaches. Produce clear, well-structured outputs ranging from executive briefings to detailed technical investigation reports. Act as the technical lead on small to medium-sized incidents, overseeing team members and ensuring technical excellence throughout delivery. Support detection engineering and SecOps enhancement initiatives, including identifying coverage gaps in EDR/SIEM tooling and contributing to orchestration and automation playbooks. Work directly with client technical teams, acting as a trusted advisor and primary point of contact during engagements. Scope and design both emergency response and preparatory readiness engagements. In addition to reactive incident work, you will: Assess and improve clients' incident response plans and protocols. Facilitate tabletop exercises and simulated attack scenarios to test organisational readiness. Deliver incident preparedness services, including playbook development, runbook design and capability gap analysis. Provide threat briefings and strategic guidance to help organisations strengthen their preventative and detection capabilities. Mentor and develop junior consultants within the practice. About You Our client is looking for an experienced incident responder with strong technical depth and the ability to engage confidently with stakeholders at all levels. You will have recent hands-on experience in at least two of the following areas: Digital forensics and technical incident response Enterprise security operations tooling and processes Detection engineering within EDR/SIEM environments, including addressing ATT&CK TTP coverage gaps Enterprise IT networks and Active Directory Cloud platforms such as Microsoft 365, Azure, AWS or GCP You will also demonstrate: A strong understanding of threat actors and the techniques used to compromise organisations. The ability to analyse complex technical problems and communicate findings clearly to both technical and non-technical audiences. Experience leading investigations and managing client-facing engagements. Familiarity with incident readiness and preparedness services, including tabletop exercises, playbook development and response planning. The ability to build strong working relationships with clients and internal stakeholders. A commitment to mentoring and developing others within the team. This is an excellent opportunity for an experienced incident response professional who enjoys both the intensity of live incident work and the strategic value of helping organisations strengthen their cyber resilience before an attack occurs. Apply now for immediate review! Principal Consultant Incident Response, Incident Response Manager, Principal Consultant Incident Response, Incident Response Consultant, Principal Consultant Incident Response, Incident Response, Principal Consultant Incident Response, Incident Readiness Circle Recruitment is acting as an Employment Agency in relation to this vacancy. Earn yourself a referral bonus if you refer somebody else who fills the role! We also offer an iPad if you refer a new client to us and we recruit for them. Follow us on Facebook - Circle Recruitment , Twitter and LinkedIn - Circle Recruitment.
