97 jobs found

Product Security Engineer Luton 6-month contract Paying up to Circa 93p/h (Inside IR35) Please note - Due to the nature of the work, you'll be required to hold a high level of UK Security Clearance Overview : As the Product Security Engineer /Lead security Engineer, you'll take responsibility for all security aspects of product design, development, verification and maintenance through all phases of the product lifecycle. The role will focus on undertaking security risk assessments, preparing security risk mitigation plans, deriving security requirements and working closely and directly with product development teams to design, implement and maintain appropriate security controls and the production of wider security artefacts. Responsibilities : Production of Security Management Plans, work package descriptions and cost estimates in support of product bids, services and proposals. Undertaking security risk assessments, risk mitigation plans, mitigation gap analysis and preparation of security management documentation for system assurance. Defining product security requirements, advising development teams on bespoke implementations for product security control implementations and overseeing product development activities. Liaison with internal and external security assurance authorities to desmontrate product compliance against recognised UK and wider frameworks. Driving collaborative working with external security authorities such as the NCSC to provide underwriting of security solutions. Understanding and management of security activities within development, testing and manufacturing environments. Advising development teams on suitable platform lockdown and configurations, and supporting penetration test activities. Analysing penetration test results and preparation of remedial action plans. Identify, communicate and drive through life security management, including but not limited to obsolescence planning, vulnerability and patch management for all products within area of responsibility. Lead security incident management teams during incident/crisis situations in conjunction with Head of Product Security for EW/FCA. Review, maintain and participate corporate product security policies. Deliver product security training to project engineering teams. Essential Skills & Experience Experience in the development of besoke product-based security solutions for a military and/or commercial products and systems. Graduate degree in relevant engineering, computing or related scientific discipline, and/or evidence of further professional study. Full membership of an NCSC recognised professional security body organisation (i.e. CIISec, ISC2 or ISACA). Recent experience and demonstratable knowledge of live and legacy UK/EU/NATO information security standards and frameworks, including the UK MOD Secure by Design framework, GovS 007, HMG IS1&2, ISO27001, NIST SP800-30/37/53, UK MOD Information Security related JSPs, EU CRA and US DoD information security policies. Practical experience of producing technical assurance documentation such as Key Management Plans, Testing Security Instructions, Security Operating Procedures and Security Cases. Knowledge of current cryptographic technologies and key management systems. Understanding of Model Based System Engineering (MBSE) and how Product Security directly inputs into the process. Knowledge and understanding of bespoke product-specific Operating Systems, Firmware and Software security controls and how to apply them. Knowledge of Quantum Cryptography & Quantum Key management. Experience or knowledge of existing threat intelligence sources. Knowledge of NATO security policy, risk management and Accreditation. Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.

IT Cyber Security Specialist / Cyber Security Engineer - CISSP, CEH, CCNA Security, Incident Response, Threat Monitoring, Vulnerability Management, Security Architecture, Azure, Windows Server Infrastructure. Permanent. London Hybrid. c.£90k - £100k + Bons +Benefits Global Law Firm seeks an experienced IT Cyber Security Specialist to join its Infrastructure Engineering team, supporting and continually improving cybersecurity across a global IT environment. Reporting to the Infrastructure Engineering Manager, you'll take ownership of cybersecurity controls and security architecture while working closely with Infrastructure Operations and other technology teams to identify vulnerabilities, respond to incidents and strengthen the firm's overall security posture. This is a hands-on technical role covering Cyber Security Engineering, Incident Response, Threat Monitoring, Vulnerability Management and Security Architecture (Infrastructure focussed) using tools such as MS Defender and MS Sentinel. You'll work across a complex infrastructure environment, identifying and mitigating security risks, supporting major cyber incidents and contributing to strategic security and infrastructure projects. You'll also help develop security awareness, business continuity capabilities and ongoing improvements to the firm's security controls. Key Responsibilities: Continuously review and improve the firm's cybersecurity posture from an infrastructure perspective and external security rating. Identify, assess and remediate vulnerabilities across hardware, software and infrastructure (Windows Server and Azure Cloud). Monitor emerging threats and lead or support Incident Response investigations and mitigation. Evaluate, test and recommend security enhancements, controls and threat prevention technologies. Identify security risks and exposures and develop measures to prevent future incidents. Lead CE+ accreditation and support security, risk and data protection requirements from a technical (Not GRC) perspective. Participate in and lead infrastructure lifecycle, security and technology projects. Provide 3rd Line / Major Incident support as a cybersecurity subject matter expert. Work with third-party suppliers and advise internal technical teams on security measures to resolve security and infrastructure issues. We're looking for experienced Cyber Security engineer with strong technical infrastructure knowledge and proven experience across incident response, threat monitoring and vulnerability management. You will possess: Extensive experience in a similar role blending Cyber Security with core Wintel Infrastructure and Azure cloud engineering. Strong knowledge of modern security architecture, threat prevention techniques and incident response. Strong Windows Server 2016/2019/2022 knowledge including Active Directory, DNS, DHCP, Intune, Group Policy, PKI, Entra and Azure SSO. Demonstrable experience across Cyber Security, Incident Response, Threat Monitoring and Vulnerability Management using tools such as MS Sentinel, MS Defender etc for threat hunting, vulnerability monitoring and security posture improvement. CISSP, CEH, CCNA Security, SC-100, SC200 or equivalent security certification. Experience designing, integrating and managing complex infrastructure and cloud solutions from a cyber security standpoint and advising technical infrastructure teams on security focussed designs and operations Strong communication skills with the ability to explain complex security issues to technical and non-technical audiences. Experience working with third-party providers across on-premise and cloud services. Strong planning skills and knowledge of ITIL processes and best practice. This is an excellent opportunity to join a highly regarded global organisation where you'll play a key role in strengthening cybersecurity across a complex international IT environment, combining hands-on security engineering, incident response and strategic infrastructure projects.

Cyber Engineering Consultant Bristol 4-month contract Paying up to Circa 79p/h (Inside IR35) Please note - Due to the nature of the work, you'll be required to hold or be eligible to obtain a high level of UK Security Clearance Responsibilities : Managing risks and services in accordance with customer, regulatory and legislative expectations. Supporting the delivery of security aspects to the company's core products to external stakeholders (inclusive of Radars, Lasers, Operational Technology, Information Technology). Engaging with engineering teams and delivery of all facets of cyber and information security related to the delivery across the engineering lifecycle - from requirements all the way through to in-service support and maintenance. Exposure to product architectures, encapsulating technologies such as electro-optics, radars, lasers. Essential Skills & Experience A degree in an engineering discipline and/or degree in a cyber security discipline, OR equivalent recognised professional cyber security certification. Proven experience operating in a Cyber/Engineering Role. Involvement in MOD accreditation and secure by design processes (ISN2023/09), associated policies and practices across the lifecycle. Experience outside of traditional enterprise IT scenarios extending to proprietary and open-source software, firmware and electronic hardware. Exposure to Operational Technology (OT) (in alignment with standards such as IEC62443). Experience working with cyber and security requirements down to the system control level. Experience conducting cyber and information security risk assessment activities including threat modelling, vulnerability analysis and analysis of mitigation's. Disclaimer: This vacancy is being advertised by either Advanced Resource Managers Limited, Advanced Resource Managers IT Limited or Advanced Resource Managers Engineering Limited ("ARM"). ARM is a specialist talent acquisition and management consultancy. We provide technical contingency recruitment and a portfolio of more complex resource solutions. Our specialist recruitment divisions cover the entire technical arena, including some of the most economically and strategically important industries in the UK and the world today. We will never send your CV without your permission. Where the role is marked as Outside IR35 in the advertisement this is subject to receipt of a final Status Determination Statement from the end Client and may be subject to change.

SOC Engineer Milton Keynes - Hybrid working SC Clearance Sponsorship Available £50,000 - £55,000 + Bonus We're seeking a hands-on SOC Engineer to join a growing Cyber Security Operations Centre supporting a diverse portfolio of customers across multiple sectors This is a specialist SOC Engineering position focused on building, maintaining, and optimising the tools, telemetry, detections, and automation that enable SOC Analysts to identify and respond to threats effectively. This is not a generalist cyber security role. Key Responsibilities Administer and optimise Microsoft Sentinel (or equivalent SIEM), including log ingestion, parsing, normalisation, and retention. Develop and maintain SOAR workflows and automation using Azure Logic Apps, Python, PowerShell, Bash, and KQL. Onboard and manage security telemetry from a range of data sources. Design, implement, and tune detection rules to improve alert quality and reduce false positives. Conduct proactive threat hunting using SIEM, EDR, and threat intelligence sources. Support incident investigations, containment, and response activities. Monitor and maintain the health of SOC tooling, sensors, agents, and log pipelines. Produce documentation, runbooks, and operational procedures. Skills & Experience Experience engineering and supporting SIEM platforms, ideally Microsoft Sentinel. Strong scripting and automation skills (Python, PowerShell, Bash, KQL). Experience with SOAR technologies and security automation. Knowledge of detection engineering and threat hunting. Strong understanding of Windows and Linux logging. Good networking knowledge including TCP/IP, DNS, firewalls, and proxies. Experience within a SOC, NOC, or 24/7 operational environment. Familiarity with MITRE ATT&CK, CVEs, and vulnerability management. Exposure to cloud security monitoring across Azure, AWS, or Microsoft 365. Desirable Certifications Microsoft SC-200 CompTIA Security+ / CySA+ ISC2 CC or CISSP GIAC GCIA CEH Cisco CyberOps or Fortinet certifications What's on Offer? Opportunity to work within a mature and growing SOC environment. Exposure to a wide range of customer environments and technologies. Security Clearance sponsorship available for eligible candidates. Clear opportunities to contribute to automation, detection engineering, and SOC improvement initiatives. Location: Milton Keynes (full-time onsite) Working Pattern: Shift rota including evenings, weekends, bank holidays on-call support. Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted. Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website

We are working with a client who is a global leader in consulting, technology services, and digital transformation, committed to delivering positive change through technology and human collaboration. They are looking for a Splunk SIEM Engineer with active SC Clearance in place to design, develop and improve software, utilising various engineering methodologies, that provides business, platform, and technology capabilities for our customers and colleagues. You will need to demonstrate your Multi-Platform SIEM Expertise: you need proven experience with Splunk Enterprise Security, Microsoft Sentinel, and SIEM architecture including data models, correlation rules, and administrative functions. Security Operations: Strong analytical skills in threat detection, incident response, and security event analysis with experience in large enterprise environments (10,000+ endpoints). Data Pipeline Management: Hands-on experience with log ingestion, data routing, and transformation using tools like Cribl, plus understanding of data normalisation and parsing in Splunk Enterprise. SOAR & Automation: Experience with Security Orchestration platforms, playbook development, and automated response workflows for incident management. Network Security Fundamentals: Working knowledge of network architectures, firewalls, proxies, and common attack vectors with troubleshooting expertise. Communication & Documentation: Excellent technical writing and communication skills to create runbooks, procedures, and translate complex security concepts for diverse audiences. In order to apply, you must have active SC Level Clearance in place. You must be able to evidence skills in Splunk Enterprise Admin and development. You will be proficient in Splunk Enterprise Security (SIEM) - administering, managing, and maintaining SIEM. Experienced in developing use cases/correlation searches. You will be proficient in data models. Have hands-on knowledge and understanding of Splunk Cloud. Hands-on experience of Microsoft Sentinel. Hands-on CI/CD tools like Gitlab, Jenkins etc. Proficiency in Cribl Stream is expected. Awareness/experience of the following is an advantage - Cloud Security & Modern Infrastructure: Proficiency with AWS/Azure cloud security, containerised environments, and SaaS-based security solutions. Programming & Scripting: Advanced skills in Python, PowerShell, KQL, SPL, and SQL for automation, custom integrations, and advanced analytics development. Security Certifications: Professional certifications such as CISSP, GCIH, GCFA, Splunk Certified Architect, or Microsoft Sentinel Ninja. Extended Security Stack: Experience with EDR, UBA, CASB, CSPM, vulnerability assessment tools, and threat intelligence platforms. Infrastructure as Code: Experience with Chef, Ansible, Jenkins, GitLab CI/CD for automated security tool deployment and configuration management. Compliance & Governance: Knowledge of regulatory frameworks (SOX, PCI-DSS, GDPR) and hands-on incident response/forensics experience. Please be clear that only candidates that meet the above criteria with the right to work and that are resident in the UK with active SC Level Clearance will be considered. No sponsorship is available. This role will involve hybrid working here in the UK at a site based in Cheshire - expected on site 3 days per week and 2 from home. More flexibility may be offered once in situ in the contract. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk

We are working with a client who is a global leader in consulting, technology services, and digital transformation, committed to delivering positive change through technology and human collaboration. They have a Cybersecurity Sciences & Analytics (CSA) team that is currently a $50m and 150 headcount function, bringing together expertise across cybersecurity, data science, AI, software and cloud engineering, governance, and programme management. This Technical Solution Architect role is a hands-on architecture and solution design specialist within the CSA Strategy and Governance team. They shape and assure end-to-end technical designs that enable CSA's cyber analytics and engineering outcomes. They define and maintain key architecture artefacts (HLDs/LLDs, reference architectures, patterns, and ADRs). They also drive technology evaluation and standardisation across an open-source, petabyte-scale data platform. They own solution designs for custom cybersecurity applications, from requirements through to production support. Partnering with engineering, platform, and central architecture/governance teams, they run design and governance forums and influence without authority. They'll bring genuine cybersecurity expertise-threat modelling, security controls, identity and access, encryption, logging, and secure SDLC-so CSA's platforms and products can be trusted in production and stand up to regulatory scrutiny. They balance target architecture with delivery realities, collaborate across geographies, and contribute hands-on when needed, including coding. The ideal candidate will possess a strong technical background, an eagerness to learn, a keen interest in Cybersecurity, the ability to work collaboratively in a fast-paced environment, and an aptitude for picking up new tools and techniques on the job, building on existing skillsets as a foundation.In this role you will be defining and maintaining architecture artefacts, including HLDs/LLDs, reference architectures, patterns, ADRs (Architecture Decision Records), and reusable templates. Contributing to the design and evolution of a petabyte-scale data platform built on open-source technologies. Evaluate technologies and drive standardisation: assess OSS components and vendors, run PoCs, document trade-offs, and promote reusable patterns to reduce fragmentation. Own the end-to-end solution design for custom-built applications that support our client's cybersecurity ambitions. Provide architecture and design input to software engineering and platform teams to support implementation and delivery. Partner with central architecture and governance teams to ensure solutions align with the client's controls, policies, standards, and guardrails. Help ensure solutions remain compliant, operationally supportable, and within agreed cost boundaries.In order to apply for this role, you must have demonstrable experience designing, deploying, and operating big data platforms at scale. You will have hands-on experience with OSS data ecosystems (e.g., Spark, Trino, Airflow, Apache Superset, and similar technologies). You will have knowledge of cloud platforms and traditional on-premise hosting; hands-on experience with Azure, AWS and/or GCP is beneficial. You will also have proven security architecture expertise, including: Threat modelling and secure-by-design practices. IAM (RBAC/ABAC), privileged access concepts, and service-to-service authentication. Encryption in transit/at rest, key management, secrets management. Secure logging/telemetry, auditability, and evidence-driven control assurance. Secure SDLC, vulnerability management, and dependency/supply-chain risk controls. Proven experience delivering end-to-end solution designs, from requirements through to production operations and support.Please be clear that only candidates that meet the above criteria with the right to work and that are resident in the UK will be considered. No sponsorship is available. This role will involve hybrid working here in the UK at a site based in Sheffield in South Yorkshire - expected on site 3 days per week and 2 from home. More flexibility may be offered once in situ in the contract. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk

Outline of the role: Provide onsite 1st and 2nd line IT support to customers, primarily covering end-user support, M365, endpoint, account and device administration, basic server/network incident triage, security alert and vulnerability/patch status checks, and initial incident response. All tasks must be delivered in a professional and timely manner to ensure a very high level of customer experience. Complex server, network and security design/build activities, SOC operations, and large-scale IT project management are outside the scope of this role and should be escalated to other specialist teams or the relevant vendors as appropriate. Job Description Provide onsite 1st and 2nd line support to customers via face-to-face support, email, telephone, remote access and chat tools. Use he IT support ticketing system to record, manage, update and close support cases in a timely and accurate manner. Support daily administration of Microsoft 365, user accounts, endpoint devices and related IT services within the agreed operational scope with the customer. Perform routine Windows Server administration and initial fault isolation during incidents; escalate complex server issues to other specialist teams or relevant vendors. Perform initial triage for network and server incidents, including basic checks, information gathering and escalation to specialist teams or vendors when required. Support security operations at an operational level, including checking security alerts, vulnerability status and patch status, and assisting with tools Provide first response during security or IT incidents, including initial investigation, containment support, evidence collection and escalation according to the agreed process Support day-to-day IT element configuration and service delivery activities within the customer environment. Prepare, deploy, replace and support PCs, mobile phones, peripheral devices and standard end-user IT equipment. Install, configure and test approved software on PCs and mobile devices in accordance with customer and the company's procedures. Support basic testing and deployment of end-user devices, software and IT services; this does not include enterprise IT design or proof-of-concept ownership. Communicate with support vendors and internal specialist teams until case closure where escalation or vendor support is required. Attend operational meetings with the customer when required and maintain a professional working relationship with the customer. Maintain secure operations and keep the working environment tidy and compliant with customer and the company's requirements. Maintain clear documentation for operational procedures, configuration changes, implementation records and support activities. Create reports for the customer and internal manager/director when required. Provide temporary or long-term customer support at their office, if required. Participate in early shift coverage and support outside of normal hours when required. Perform ad hoc tasks assigned by the line manager, provided they are consistent with the agreed operational support scope. Occasional international travel may be required. Requirements: Proven customer service experience in an onsite IT support or helpdesk environment Experience providing 1st and 2nd line support for end users, including PCs, mobile phones, peripherals and standard business applications. Familiarity with Microsoft 365 administration, user/account management and endpoint/device administration. Familiarity with Microsoft Active Directory or Entra ID user administration, Microsoft Windows 11, Microsoft Office, antivirus/endpoint security tools and standard corporate software. Basic knowledge of Windows Server administration and incident triage; advanced design, build or architecture experience is not required. Basic knowledge of network products such as routers, switches and firewalls is advantageous for initial fault isolation and escalation. Awareness of security alert handling, vulnerability/patch status checking and operational tools such as Prisma and Microsoft Defender is advantageous. ITIL Foundation, Microsoft or endpoint support certifications are preferred but not mandatory. Business level written and verbal communication skills in English; Japanese is preferable Business level documentation skills, including meeting minutes, work procedures and customer/internal reports. Strong work ethic, punctuality, time management and reliability. Customer-focused mindset and ability to escalate appropriately to internal specialist teams or relevant vendors Conditions: 1 year contract to start with Salary - £39,000 per annum Working hour - 35 hours per week, Monday to Friday Location - London Competitive benefits - Travel expense (within London), pension, annual leave Access Appointments Consultancy Ltd is a recruitment agency based in London. Please note that we're afraid that due to the high volume of applications we receive, we may not be able to provide feedbacks on individual CVs. Also we can only consider candidates who are eligible to work in the UK and are able to provide relevant supporting documentation such as passport/visas when required. Thank you for your time and cooperation

We are seeking a skilled and motivated SQL Database Administrator (DBA) to join our Database Services team. The successful candidate will be responsible for the administration, maintenance, performance optimization, and security of Microsoft SQL Server environments. The role requires experience supporting production databases, troubleshooting complex issues, implementing database changes, and ensuring high availability and data integrity.The ideal candidate combines strong technical expertise with a proactive approach to problem-solving and effective collaboration with application, infrastructure, and support teams.Key ResponsibilitiesDatabase Administration Administer, maintain, and support Microsoft SQL Server environments. Perform database installations, configuration, upgrades, patching, and migrations. Manage databases, instances, security settings, users, roles, and permissions. Ensure database availability, reliability, and operational stability. Performance & Optimization Monitor and optimize database performance. Investigate and resolve performance bottlenecks, locking issues, and query-related problems. Analyze execution plans and implement indexing strategies. Support application teams in SQL query tuning and database optimization. Backup, Recovery & High Availability Design, implement, and maintain backup and recovery strategies. Perform database restores and disaster recovery testing. Support and maintain High Availability (HA) and Disaster Recovery (DR) solutions such as: Always On Availability Groups Log Shipping Replication Database Mirroring (where applicable) Incident & Problem Management Troubleshoot and resolve database incidents within agreed service levels. Conduct root cause analysis for recurring issues. Participate in on-call support rotations when required. Collaborate with cross-functional teams to ensure timely issue resolution. Security & Compliance Implement database security best practices. Ensure compliance with organizational security standards and policies. Perform regular audits, vulnerability assessments, and access reviews. Support data protection and regulatory compliance initiatives. Documentation & Continuous Improvement Maintain accurate technical documentation, procedures, and operational runbooks. Develop and enhance automation scripts for routine DBA activities. Identify opportunities to improve database performance, availability, and operational efficiency. Contribute to process improvement and technical standards. Required QualificationsEducation Bachelor's degree in Computer Science, Information Technology, Engineering, or equivalent practical experience. Experience 3-5 years of hands-on experience as a SQL Server DBA. Experience managing production SQL Server environments. Proven experience with backup/recovery, database upgrades, migrations, and performance tuning. Technical Skills Microsoft SQL Server Administration (2016/2019/2022 preferred). T-SQL development and troubleshooting. Performance monitoring and tuning. Backup and recovery solutions. High Availability and Disaster Recovery technologies. SQL Server Management Studio (SSMS). Database security and access management. Windows Server fundamentals. PowerShell or scripting for automation. Nice-to-Have Skills Experience with Azure SQL Database, Managed Instance, or SQL Server on Azure VM. Knowledge of PostgreSQL, Oracle, or MySQL administration. Experience with monitoring tools such as SCOM, SolarWinds, Redgate, or SQL Sentry. Exposure to DevOps, Infrastructure as Code, or CI/CD practices. Microsoft SQL certifications. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk

Cyber Security Operations Specialist Rate - £500 - £550 Inside IR35 Duration - 6 months Location - Bristol - twice a week on site A major organisation is seeking a Cyber Security Operations Specialist to join its Security Operations team. This is a hands on role focused on incident response, threat detection, vulnerability management and continuous improvement across enterprise technology environments. You'll be expected to hit the ground running, managing security alerts, investigations, tickets and operational queues while helping improve the effectiveness of the security tooling estate. The Role Monitor, investigate and respond to cyber security incidents. Manage and triage security alerts, tickets and operational queues. Lead or support incident response activities through to resolution. Support vulnerability management and remediation activities. Apply threat intelligence to strengthen detection and response capabilities. Develop and optimise SIEM detections, alerting rules and response workflows. Improve the performance and effectiveness of security platforms rather than simply operating them. Produce clear incident reports and recommendations. Work closely with teams across the business to explain risks, security controls and operational blockers. Build strong relationships with both technical and non technical stakeholders to drive security improvements. Technology Environment Experience with the following is highly desirable: Microsoft Defender Microsoft Sentinel Microsoft Purview Proofpoint SIEM, EDR and related security technologies About You You'll have a strong background in Security Operations and Incident Response, with hands on experience working with Microsoft security technologies and enterprise security tooling. You'll be comfortable managing multiple priorities, working through investigations and security queues, and responding effectively to incidents as they arise. We're looking for someone who can quickly become a key contributor to the team, bringing experience in vulnerability management, threat intelligence and detection engineering. You'll enjoy improving platforms, processes and controls, identifying opportunities to strengthen security capability and driving measurable improvements across the environment. Strong communication skills are essential. You'll be confident engaging with stakeholders at all levels, translating technical issues into business language and helping teams understand security requirements without creating unnecessary friction. This is an excellent opportunity for a security professional who combines strong technical capability with a collaborative approach and a genuine passion for improving cyber security operations. Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.

IT Security Manager- Cyber Security Manager - PCI-DSS Location: Luton, 2 days per week on-site. Our client, a national organisation with offices near Luton, are seeking an experienced IT Security Manager to lead and enhance their security landscape while owning their Tier 1 PCI-DSS compliance programme. This is a fantastic opportunity for a hands-on security specialist who enjoys operating at both strategic and technical levels, working closely with senior stakeholders to drive security best practice across the organisation. Reporting to the Head of Technical Delivery, you will be the go-to expert for all aspects of cyber security, governance, risk, and compliance. This is a standalone role offering significant ownership and influence, making it ideal for someone who enjoys autonomy and genuinely shaping an organisation's security strategy. Key Responsibilities Cyber Security: Develop and continuously improve the organisation's cyber security strategy, controls, and policies. Monitor emerging threats and ensure effective protection across endpoint, network, cloud, and identity environments. Lead security incident response activities, investigations, and remediation efforts. Drive vulnerability management and penetration testing programmes through to successful resolution. Act as the internal cyber security subject matter expert. PCI-DSS Compliance & Audit: Take ownership of end-to-end PCI-DSS compliance activities. Lead annual audit and attestation processes, working closely with external assessors. Manage compliance documentation, evidence gathering, and control frameworks. Coordinate with technical and business teams to embed compliance requirements into day-to-day operations. Provide compliance reporting and updates to senior stakeholders. Governance, Risk & Compliance: Support wider compliance initiatives including ISO 27001, Cyber Essentials, and GDPR. Maintain security policies, standards, and procedures. Conduct risk assessments and manage the security risk register. Deliver security awareness initiatives across the business. Manage relationships with third-party suppliers, security vendors, and auditors. Essential Skills & Experience Proven experience within IT or Cyber Security with ownership of PCI-DSS compliance in a Tier 1 environment. Strong understanding of security frameworks, controls, and governance practices. Experience managing security incidents, vulnerability remediation, and audit activities. Ability to engage confidently with senior stakeholders and external auditors. Comfortable working independently and taking ownership of a broad security remit. Desirable CISSP, CISM, CISA, PCI ISA, or similar industry certifications. Experience within retail, hospitality, payments, or other highly regulated environments. Knowledge of Azure, AWS, and modern SOC/SIEM technologies. If you're an experienced IT Security Manager, Cyber Security Manager, Information Security Manager, or PCI Compliance Specialist looking for your next challenge, we'd love to hear from you.

Customer Service Advisor Red Recruitment is recruiting Customer Service Advisors in Leeds city centre to join our client, an award-winning customer management company that has achieved GOLD awards from both Investors in People and Investors in Customers. In this role, you will provide telephone support to enforcement agents attending customers properties in relation to outstanding utility debt. You will complete structured fact-finding checks, review account information and ensure the correct legal, regulatory and operational procedures have been followed before any action is taken. You will help ensure every case is handled fairly, accurately and with appropriate consideration for the customer s individual circumstances. Benefits and Package for a Customer Service Advisor: Salary: £26,227.50 per annum Hours: Full-time, Monday to Friday, working hours between 8am and 6pm Contract Type: Permanent Location: Leeds city centre Free parking Health and wellbeing programme Monthly bonus scheme Internal recognition schemes with financial awards 33 days annual leave, including bank holidays and your birthday Social events, including Summer and Christmas parties Full support and training provided Career progression opportunities Key Responsibilities of a Customer Service Advisor: Provide telephone and operational support to enforcement agents attending customers properties Complete a structured fact-finding process with agents during live property visits Review customer accounts, outstanding debt information and previous actions taken Check that the relevant legal, regulatory and company procedures have been followed correctly Confirm that all required notices, documentation and warrant-related checks have been completed Identify factors that could affect how a case should proceed, including vulnerability, affordability concerns or a change of occupier Provide guidance to field agents on the appropriate next steps in line with company procedures Stop or escalate cases where information is incomplete, procedures have not been followed or additional support is required Monitor live cases and provide operational support to help visits progress safely and appropriately Escalate complex, sensitive or high-risk cases to specialist teams when required Key Skills and Experience of a Customer Service Advisor: Previous experience in customer service, contact centre, operations support, collections or a regulated environment Experience supporting vulnerable customers or handling sensitive situations would be advantageous Strong questioning and fact-finding skills, with the confidence to obtain accurate information Excellent verbal communication skills and the ability to provide clear guidance over the telephone Strong attention to detail and the ability to follow structured procedures accurately Good judgement, with the confidence to challenge, stop or escalate a case when necessary Strong problem-solving and decision-making abilities Experience within utilities, debt recovery, revenue protection, financial services or another regulated sector would be beneficial If you are interested in this position and have the relevant skills and experience required, please apply now! Red Recruitment (Agency)

Salary is competitive and commensurate with experience, plus a 14.5% pension contribution and a relocation package where applicable. Shape the future of information security for one of the world's most important organisations supporting biomedical research. At UK Biobank, information security isn't simply about protecting systems, it's about safeguarding one of the world's most valuable health research resources. Our data is trusted by more than 22,000 approved researchers across over 60 countries, helping advance our understanding of cancer, dementia, cardiovascular disease, mental health and hundreds of other conditions. Protecting that trust while enabling scientific discovery is fundamental to everything we do. We're entering one of the most significant periods of technology transformation in our history. As we continue to invest in modern cloud platforms, AI-enabled services, new digital capabilities and our £127.6 million headquarters at Manchester Science Park, we're looking for a Director of Information Security to lead the next phase of our information security maturity. This isn't a role focused on maintaining an established security function. It's an opportunity to shape and define a world-class capability Can you do it? As Director of Information Security, you'll report directly to our Chief Technology Officer and provide strategic leadership for information security across UK Biobank. You'll be responsible for ensuring our governance, cyber security, identity management, business continuity, and risk management capabilities continue to evolve alongside an increasingly complex threat landscape. Working closely with colleagues across Data and Technology, Legal, and the wider organisation, you'll embed security into organisational decision-making, providing confidence that our platforms remain secure, resilient, and compliant while continuing to support innovation and world-leading research. This is a unique opportunity to build on the strong foundations already in place while leading the next phase of UK Biobank's security maturity. As we continue our wider technology transformation, you'll shape the organisation's security strategy, strengthen operational capability, and help embed security into every aspect of our cloud platforms, digital services, AI initiatives, and future technologies. You'll lead a growing Information Security function, with the opportunity to develop capability, evolve the team, and foster a positive security culture across the organisation. Working at both strategic and operational levels, you'll influence Executive Leadership and Board discussions while providing the leadership needed to respond to emerging threats, manage organisational risk, and ensure security enables innovation rather than becoming a barrier to it. This is a unique and rare opportunity to shape the future of information security within one of the world's leading biomedical research organisations, protecting data that supports thousands of researchers across the globe while helping deliver the next generation of scientific discovery. You will be responsible for Developing, implementing, and creating a comprehensive information security strategy, providing direction and support to ensure effective implementation of security controls. Conducting regular risk assessments, audits, tests, and modelling to identify and evaluate vulnerabilities and potential threats. Providing regular updates to the executive leadership team and represent information security at board, audit, and governance committees Establishing metrics and enforcing information security policies, procedures, and guidelines aligned with standards and frameworks, particularly ISO27001 and the NCSC Cyber Assessment Framework, as well as regulatory requirements and industry best practices. Ensuring that critical data and assets have been identified, classified, and subject to appropriate controls, including for handling, ownership, and destruction. Leading the organisation's response to major cyber incidents, including providing out-of-hours and crisis-level support when required. Promoting and communicating a culture of security awareness so all staff understand their role in maintaining information security. Managing the Information Security budget, setting investment priorities, and contributing to financial planning. Is this 'you'? To be successful, you will have: Significant experience in information security management, with a proven track record of leadership in the field. Relevant industry certifications, preferably CISSP, CISM, or CCISO. Strong knowledge of information security standards, frameworks, and best practices. Previous experience of ISO270001 is a key requirement. A clear understanding of the laws and regulations associated with controlling and processing personal data, directing organisation responses to cyber incidents. Strong knowledge and understanding of the cyber threat landscape. Experience securing cloud environments with a knowledge of the vulnerability detection tools and security services available in AWS and /or MS Azure. Experience of deploying controls across networking, end-user compute, identity and access management, software development, and business operations to minimise the likelihood of security incidents. Experience of recruiting specialist staff, building teams, and developing existing colleagues through training, coaching and mentoring. Working hours are 35 hours per week, Monday to Friday, with 3 days onsite and hybrid working available. The role will be based at Greenheys, Manchester Science Park's headquarters. Our passion for diversity and equality means creating a work environment for all employees that is welcoming, respectful, engaging, and enriched with opportunities for personal and professional development. We actively welcome applications from people with disabilities, long-term health conditions, neurodivergent candidates, and those with diverse thinking styles. We are committed to making reasonable adjustments throughout our recruitment process and in the workplace so that everyone can perform at their best. If you require any adjustments during the recruitment process, please contact Tommy Wilson at so we can support you. Your Wellbeing Matters to Us Colleagues at UK Biobank often highlight feeling supported, included, and connected to meaningful work, with wellbeing and work-life balance genuinely valued across teams. We're proud to offer a benefits package that supports your health, financial security, and development from day one: Currently 14.5% employer contribution to the USS Pension Scheme Healthcare Cash Plan to help cover everyday healthcare costs ️ 30 days' annual leave, plus bank holidays Buy up to 5 additional days' annual leave through our Holiday Buy Scheme A paid day off for your birthday Enhanced maternity, paternity, adoption and shared parental pay Hybrid and flexible working for many office-based roles Up to 6 months' full sick pay ️ Free on-site gym Subsidised lunch when working on site ️ Life Assurance Cycle to Work Scheme Season Ticket Loan Training and development opportunities, including a £500 annual personal development allowance Paid professional subscriptions, where applicable ️ Employee Discounts Portal Wellbeing support, including an Employee Assistance Programme Free annual flu vaccination and Hepatitis B vaccination, where applicable An active social committee with regular social events Free on-site parking Payroll Giving (Give As You Earn) The job advert closing date may change, so early applications are encouraged. About UK Biobank UK Biobank is a large-scale biomedical database and research resource containing in-depth genetic and health information from half a million UK participants. The database, the largest and most comprehensive of its kind in the world, is anonymised and made widely accessible by UK Biobank to global researchers who use it to find new scientific discoveries about common and life-threatening diseases - such as cancer, heart disease and stroke which strike in mid-later life. UK Biobank is an innovative organisation with over 350 staff across four sites in the UK that fosters an engaging environment and supports the development of our staff. Our dedicated teams work alongside the world's leading biomedical scientists in our joint mission to improve public health.

Working with a global financial services organisation who are looking for a Network Security Engineer to help deliver a high-profile project. The Senior Network Security Engineering Lead oversees the design, operation, and ongoing enhancement of enterprise network security capabilities across data centre, campus, WAN, cloud, and hybrid infrastructure environments. Details Location - LondonHybrid - 2-3 days / week in officeDuration - Initially 12 monthsRate - £750-£850 / day Inside IR35 via Umbrella Skills and Experience Required Strong understanding of network security principles, including security boundaries, network segmentation, micro-segmentation, and Zero Trust architectures. Extensive hands-on experience designing, implementing, and managing Palo Alto and FortiGate firewalls , along with F5 BIG-IP load balancing solutions. Proven expertise in deploying and maintaining proxy services and secure web gateway technologies. Advanced troubleshooting capabilities across Layers 2-7, combined with significant experience leading to major incident response and resolution activities. Demonstrated ability to architect secure data centre and wide area network (WAN) environments with robust segmentation and micro-segmentation strategies. Practical experience working with Cisco ACI , including security frameworks, policy enforcement, and network automation models. Strong track record in vulnerability management, remediation programmes, and coordinating security incidents and risk mitigation efforts across multiple teams. Experience operating within highly regulated industries, such as financial services, with a focus on audit compliance and maintaining comprehensive documentation. The organisation operates a Cisco-based networking infrastructure supplemented by security technologies such as Palo Alto and FortiGate. Candidates should possess strong expertise in network routing protocols, secure network architecture, and modern security frameworks, including Zero Trust and network segmentation methodologies. Core Competencies: Firewall experience Security Design Ideally, financial services experience or investment bankingIf you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.If this job isn't quite right for you, but you are looking for a new position, please contact us for a confidential discussion about your career. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk

As part of our growth, we are looking for a skilled and dedicated Damp, Mould and Disrepair Surveyor to join our Compliance Team here at Freebridge Community Housing. Taking operational responsibility for the surveying of damp and mould across our domestic properties and communal areas. You will lead and manage a team of in-house operatives, oversee work programmes to resolve issues effectively, and support the delivery of our disrepair service - liaising with legal and contractor specialists where required. With a data-driven approach and strong reporting skills, you will play a key role in ensuring our residents live in safe, well-maintained homes. Our Freebridge Community Housing goal is to provide affordable, safe, and quality homes for current and future generations, for those who need a place to call home. Freebridge was set up in 2006, to receive the transfer of the Borough Council of King's Lynn and West Norfolk's housing stock. We now have over 7500 properties across West and North Norfolk, in addition to building new homes for social and affordable rent, and to support those who want to move into shared home ownership. We've had numerous achievements, including delivering our customers' promises and bringing homes to the Decent Homes Standard, affording our customers a much better quality of living. At Freebridge, we live by our values: Belong, Own It, Think Customer, One Team One Purpose, and Be the Change. Requirements Outline of key responsibilities Support the Damp, Mould and Disrepair Manager in ensuring the service meets all statutory, regulatory and best practice requirements, including completion of damp and mould assessments in line with Awaab's Law Undertake building surveys across domestic properties and communal areas, taking responsibility for implementing all work streams to resolve damp and mould issues through contractual or in-house works Provide day-to-day management and guidance to the damp, mould and disrepair in-house operatives, ensuring compliance with health and safety regulations and quality standards Liaise with contractors to monitor performance and ensure services are delivered in accordance with contractual requirements, taking prompt action to resolve any issues Maintain clear and proactive communication with residents, keeping them informed of resolutions, work programmes and expected timescales throughout their case journey Maintain data integrity across all damp, mould and disrepair cases, ensuring operational and data management systems are kept accurate and up to date Profile root cause information to implement service improvements and prevent reoccurrence, monitoring the impact of corrective actions to ensure lasting resolution We are looking for someone who has Demonstrable expertise in damp, mould and disrepair, including a thorough knowledge of statutory and regulatory requirements such as Awaab's Law, legal disrepair protocol and best practice - with a proven ability to implement corrective action and drive service improvements Experience of undertaking root cause analysis, diagnosing the cause of moisture damage and structural defects, and using specialist equipment including moisture testing devices, hygrometers and thermal imaging cameras Experience of managing a high-performing team within a repairs, damp, mould or disrepair environment, with a track record of delivering results through effective leadership and contractor management A good understanding of project coordination and task prioritisation, with the ability to manage competing demands and respond appropriately to urgency and resident vulnerability Strong analytical skills, with the ability to analyse numerical and property data, produce meaningful KPIs and use insight to monitor performance and inform service improvement Experience of working within social housing or a related sector, an HNC in Building Construction or equivalent qualification A full UK driving licence and access to their own vehicle Benefits What's in it for you? At Freebridge, we're appreciative of our team and you can enjoy the following benefits from joining us, among many more: An Annual Salary of: £50,186.31 plus a car allowance of £1,500.00 Generous Holiday Leave: Enjoy 25 days holiday, plus bank holidays, increasing to 30 days after 5 years of service Exclusive Employee Discounts: Access amazing deals through our Reward Gateway Comprehensive Leave Policies: Enjoy 6 months full pay for maternity leave and 2 weeks full pay for paternity leave Health and Wellbeing Support: Access physio and counselling services, along with an employee assistance programme Charitable Leave: One day per year to volunteer for a cause you care about Discounted Gym Membership: Stay fit with discounted membership at Alive Leisure Pension Scheme: A great pension scheme with generous employer contributions (up to 12%) Diversity & Inclusion: Diversity is key to our values and culture. We create a workplace where every voice is heard and respected, embracing diverse perspectives to drive innovation. Our inclusive environment empowers colleagues, ensuring equal opportunities for all. We don't discriminate against employees or potential employees based on protected characteristics. We're happy to accommodate reasonable adjustments during the recruitment process to enable you to perform your best. As part of this commitment, we also offer accessibility tours for candidates to help ensure an inclusive and welcoming experience from the outset.

IT Support Engineer (1st / 2nd Line) Location: Hoddesdon Salary: Competitive Contract: Permanent, Full Time Travel: Occasional travel to sites across UK&I Yolk Recruitment is supporting a growing organisation with the recruitment of an IT Support Engineer to join its internal IT team. This is a hands-on 1st and 2nd line role supporting users across a multi-site environment. You'll take ownership of incidents from initial triage through to resolution, working across Microsoft 365, Active Directory / Entra ID, endpoint security and general desktop support. What you'll be doing Providing 1st and 2nd line support across desktops, laptops, mobiles, printers and peripherals Managing and resolving support tickets in line with SLAs Supporting Microsoft 365 including Outlook, Teams, OneDrive and SharePoint Managing users and access through Active Directory / Entra ID Supporting MFA, Conditional Access and Microsoft Defender Deploying and managing devices through Microsoft Intune / Endpoint Manager Supporting joiners, movers and leavers Assisting with patching, vulnerability remediation and endpoint security Supporting IT asset, licence and subscription management Troubleshooting basic networking and connectivity issues Maintaining IT documentation and knowledge base articles What you'll bring You'll have previous experience within an IT Support, Helpdesk or Desktop Support position, alongside: Strong Windows desktop support experience Good working knowledge of Microsoft 365 Experience with Active Directory / Entra ID Exposure to Microsoft Defender / Advanced Threat Protection Basic networking knowledge Experience supporting remote or multi-site users Strong troubleshooting and communication skills Experience with Microsoft Intune, Azure, Dynamics 365 Business Central, Power Platform, Paxton, Time & Attendance systems or Splicecom PBX would be advantageous, but isn't essential. What's in it for you? You'll join a collaborative IT team operating in a modern Microsoft-first environment, with exposure to cloud, security and endpoint management technologies. There's also genuine scope to develop towards senior support, infrastructure or specialist positions. Ready to Apply? Contact Jack Winder to find out more. Please apply with a CV and a cover letter outlining why you're perfect for the role.Know someone great for the job? We offer a referral scheme-just get in touch! Note: We do our best to respond to every application, but due to volume, we can't always guarantee it. If you haven't heard back within 7 days, unfortunately, you haven't been successful this time. Keep an eye on our site for new opportunities!

ASB and Tenancy Management Coordinator Location: Didsbury, Manchester Salary 42,084 Full time 35 hours per week Permanent About Us Southway owns over 6,500 homes in Greater Manchester and is a community-focused housing association with a vision to provide excellent customer service and quality homes, where communities thrive. Southway strives for continuous improvement led by customers, communities and colleagues. It is a member of the Greater Manchester Good Employment Charter and is guided by its REACH values of Respect, Equity, Ambition, Compassion and Honesty. About the role This specialist role is responsible for leading and coordinating Southway's response to anti-social behaviour, tenancy breaches and community safety issues. Working across the organisation, you will provide expert advice and support to colleagues, helping to protect customers and communities while ensuring tenancy breaches are addressed fairly, proportionately and effectively. You will oversee complex and high-risk cases, including serious anti-social behaviour, tenancy fraud, unlawful occupation, cuckooing and other tenancy breaches. Working closely with statutory agencies and community partners, you will coordinate interventions that support victims, tackle harm and deliver sustainable outcomes. The role will also support service development by promoting best practice in anti-social behaviour and tenancy management, embedding early intervention approaches, strengthening partnership working. What you'll be doing Lead on complex and high-risk anti-social behaviour and tenancy enforcement cases. Provide specialist advice and support to Housing Officers and managers. Coordinate investigations into anti-social behaviour, tenancy fraud, cuckooing and other serious tenancy breaches. Manage legal case preparation, evidence gathering and liaison with solicitors and partner agencies. Work closely with Greater Manchester Police, Local Authorities and other partners to resolve complex cases and improve community safety. Represent Southway at court hearings, ASB Case Reviews and multi-agency meetings where appropriate. Deliver training, guidance and best practice support to colleagues across the organisation. Produce reports, performance information and learning to support service improvement and quality assurance. About you We are looking for a resilient and customer-focused professional with significant experience of managing anti-social behaviour, tenancy enforcement, community safety or complex housing management cases. You will have a strong understanding of housing and anti-social behaviour legislation and be confident managing risk, making sound decisions and leading complex investigations. Experience of preparing legal cases, working with solicitors and coordinating enforcement action is essential. You will be skilled at building effective relationships with customers, colleagues and partner agencies and able to influence, challenge and collaborate to achieve positive outcomes. A good understanding of safeguarding, vulnerability and trauma-informed practice is also important. You will be highly organised, able to manage competing priorities and maintain accurate case records. Experience of delivering training, working in multi-agency environments and supporting service improvement activities would be advantageous. In return, we offer a 35-hour working week, a competitive salary, an excellent contributory pension scheme, and 25 days' annual leave, increasing to 30 days over time. You will be part of a supportive, values-led organisation that is committed to helping its customers and colleagues thrive. Closing Date: Wednesday 19 August 2026 Interview Date: Wednesday 2 September 2026 For an informal discussion please contact Lee Isherwood on (phone number removed), or e-mail . We are committed to equality of opportunity and welcome applications from suitably skilled people from all sectors of the community. All applicants who have a disability or are ex armed forces that meet the minimum essential criteria for the post will be invited to interview. If you have a disability or are ex armed forces, please tell us about this on your application form and please let us know about any special arrangements you would like us to make if you are invited in for an interview.

We are seeking a Penetration Tester to join a growing Offensive Security team within a specialist cyber security consultancy. This is an exciting opportunity to join at a time of significant investment and growth, helping to strengthen existing testing services while contributing to the development of new capabilities across areas such as Red Teaming, Operational Technology (OT), Threat-Led Security Testing and emerging technologies. The successful candidate will play a key role in delivering penetration testing engagements, supporting process improvement initiatives, and helping to build a scalable and mature testing function. This position offers excellent opportunities for professional development, certification support and future progression into senior or leadership positions. JOB ROLE - PENETRATION TESTER LOCATION - LONDON (OCCASIONAL ON-SITE WORK) SALARY - £40,000-£45,000 + BENEFITS Key Responsibilities Conduct vulnerability assessments and penetration testing engagements across: Internal infrastructure External infrastructure Web applications Networks and systems Perform configuration and build reviews using recognised security frameworks and benchmarks. Produce clear, concise and actionable technical reports detailing findings, risk ratings and remediation recommendations. Utilise industry-standard security testing tools including Burp Suite, Nessus, Metasploit, Nmap, Wireshark and related technologies. Work directly with clients and stakeholders, presenting findings and providing remediation guidance where required. Support the continuous improvement of testing methodologies, processes and documentation. Assist in creating and maintaining standard operating procedures, testing guides and knowledge-sharing materials. Collaborate with wider cyber security teams to support service development and research initiatives. Contribute to research and development activities across new security testing disciplines and technologies. Participate in occasional out-of-hours and on-site engagements where client requirements dictate. Required Skills & Experience Minimum 2 years' experience in penetration testing, vulnerability assessment or offensive security. Experience conducting: Internal and external infrastructure testing Web application security testing Security assessments and audits Vulnerability identification and validation Strong understanding of networking concepts, protocols, routing and firewall technologies. Experience working with Windows, Linux and macOS environments. Familiarity with security assessment tools such as: Burp Suite Nessus Metasploit Nmap Wireshark Experience producing high-quality technical reports and client-facing documentation. Excellent communication and stakeholder management skills. Strong organisational skills and ability to manage workload independently. Comfortable working in a consultancy or client-facing environment. Eligible to obtain UK Security Clearance. Desirable Skills & Certifications CREST CRT, CPSA, CCT or equivalent certification. OSCP or similar offensive security qualification. Cyber Scheme accreditation. CHECK Team Member status.

Penetration Testing Specialist Permanent - 71k - 82k + strong benefits Location: Hybrid - South Wales Your new company: I am looking to recruit a Penetration Testing Specialist to join a leader in the utilities space. The business has been investing into their cyber security and IT estate and are continuing to grow and enhance their security posture. The company has a strong reputation, and we have placed numerous people into careers there, with strong feedback. The role responsibilities: This is an interesting time to join the company. Lots of investment into their IT, OT, and Cyber Security functions over the last few years, with ongoing investment and growth happening. This is a key role. They're looking for someone who's inquisitive, experienced, and willing to safely get access into almost anything. Key parts of the role: Define and manage the penetration testing schedule. Conduct internal penetration testing of applications and systems Manage external vendors providing penetration services and arrange and schedule their work. Proactively research vulnerabilities in external and internal-facing systems and infrastructure (IT and OT) Social engineering Proactively research internal and external information leakage that may assist malicious actors in preparing for or executing an attack Prepare detailed reporting on vulnerabilities and the remedial actions recommended Accurately quantify discovered vulnerabilities in risk terms. You will need: Strong understanding of penetration testing principles, methodologies and tooling with proven experience of delivering infrastructure and application penetration tests safely and efficiently Strong understanding of safe approaches required for OT testing and proven experience of OT security assurance testing Strong understanding of attacker TTPs & vulnerability assessment Strong understanding of security risk assessment and risk management concepts and approaches Ability to work on your own initiative and to think "outside the box" Experience with operational technology in the utilities sector or other industrial CNI environments will be highly advantageous Excellent communication and interpersonal skills. Ability to obtain UK Security Clearance CREST / CHECK certification (essential) What you'll get in return: Salary of between 71k- 82k Hybrid working 2/3 days in South Wales per week Possible bonus 5% pension contribution from you, the company pays 10% Enhanced pay for parental leave And more! Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at (url removed)

Cyber Security Engineer/Specialist Permanent Up to £80,000 (+ Benefits) Hybrid Working (2 3 days per week Onsite) Surrey Help Shape Enterprise Cyber Security on a Global Scale We're looking for an experienced Cyber Security Engineer/Specialist to join a global organisation where security is a genuine business priority, not simply a compliance exercise. This is an opportunity to play a key role in protecting a complex enterprise environment, helping to identify, assess and mitigate sophisticated cyber threats while influencing the organisation's long-term security strategy. Working alongside infrastructure, architecture and operational teams, you'll strengthen enterprise security capabilities, improve cyber resilience and help safeguard critical business systems across an international environment. If you're looking for a role where you can make a real impact while continuing to develop your career within a stable organisation, we'd love to hear from you. The Role This is an enterprise Cyber Security position focused on proactive threat mitigation, security improvement and risk reduction rather than purely operational support. You'll be responsible for strengthening the organisation's security posture through threat assessment, vulnerability management, incident response and continuous security improvement initiatives. Key responsibilities include: Enterprise Threat Management Identify, assess and mitigate cyber threats across enterprise infrastructure and business systems Conduct proactive threat assessments and vulnerability analysis Develop and implement security controls and remediation strategies Monitor emerging threats and recommend appropriate defensive measures Enhance threat detection, monitoring and incident response capabilities Develop and maintain incident response playbooks and operational procedures Work closely with third-party security providers during incidents and security assessments Security Engineering & Risk Support enterprise security architecture and secure design initiatives Contribute to cyber risk management and governance activities Assess third-party and supply chain security risks Support penetration testing, vulnerability management and security assurance programmes Produce meaningful security metrics and KPI reporting for stakeholders Ensure alignment with recognised security frameworks and regulatory requirements Security Improvement Collaborate with infrastructure, cloud and engineering teams to embed security best practice Participate in Red Team / Blue Team exercises and cyber resilience testing Support business continuity and disaster recovery planning Champion continuous improvement across the organisation's security capability Communicate technical security risks clearly to both technical and business stakeholders What You'll Bring We're looking for someone who enjoys solving complex security challenges within large enterprise environments. You'll ideally have: A minimum of 5 years' experience in Cyber Security or Information Security Strong experience protecting enterprise environments against modern cyber threats Experience designing and implementing security controls to reduce organisational risk Excellent knowledge of enterprise security technologies and security operations Experience with SIEM platforms, incident response and threat detection Strong understanding of vulnerability management and security remediation Experience working with recognised security frameworks including: NIST ISO 27001 CIS Controls Cyber Essentials Knowledge of MITRE ATT&CK, Cyber Kill Chain and modern threat intelligence methodologies Excellent analytical, troubleshooting and stakeholder management skills Technical Environment Experience with several of the following technologies would be advantageous: Microsoft Defender Splunk Qualys Azure Security AWS Microsoft 365 Security PowerShell Python Kubernetes Windows Server Linux SOAR platforms Data Loss Prevention (DLP) DevSecOps practices Experience with AI-driven threat detection technologies would also be beneficial. Qualifications Ideally you'll hold one of the following: CISSP (preferred) CISM GIAC Certification CEH However, we recognise that exceptional enterprise Cyber Security experience is just as valuable. If you've developed your expertise through hands-on experience and hold certifications such as CompTIA Security+ , we'd still be keen to hear from you. Ideal Background We'd particularly like to speak with professionals currently working as: Senior Cyber Security Engineer Cyber Security Engineer Information Security Engineer Security Operations Engineer Threat Detection Engineer Cyber Defence Engineer Blue Team Engineer Senior SOC Engineer Security Consultant Experience within large enterprise or global organisations would be highly desirable. Why Join? You'll become part of a collaborative Cyber Security team within a business that continues to invest heavily in technology and security. In return, you'll benefit from: Competitive salary up to £80,000 (+ benefits) Hybrid working (2 3 days onsite in Surrey) Exposure to enterprise-scale security technologies Opportunities to influence security strategy Ongoing investment in professional development and certifications Long-term career progression within a stable global organisation A supportive and collaborative working culture Ready to Make an Impact? If you're passionate about enterprise Cyber Security, enjoy solving complex security challenges and want to help shape the future of Cyber Security within a global organisation, we'd love to hear from you. If you are passionate about cybersecurity, threat management and strengthening enterprise security capabilities, we would love to hear from you.