Cyber intelligence jobs in LondonCreate job alerts

Cyber Security Analyst Location: London (Remote) Reporting to: Director of Cybersecurity Operations Employment Type: Permanent | Exempt The Opportunity We are working with a leading international law firm to recruit a Cybersecurity Analyst to join its Cybersecurity Operations Group. This role plays a critical part in protecting a complex global technology environment through continuous monitoring, threat detection, and incident response. The successful candidate will work closely with security and IT stakeholders, contributing to the organisation’s defensive capabilities while remaining at the forefront of the evolving threat landscape. Key Responsibilities • Monitor and analyse security events across networks, endpoints, and cloud environments using SIEM, EDR, and related security tools, in line with documented SLAs., • Investigate, respond to, and resolve security incidents and alerts, ensuring timely detection, containment, and remediation., • Perform triage and root cause analysis of incidents, collaborating with IT and other teams to address underlying security issues., • Conduct email threat analysis using both manual techniques and dedicated tooling., • Contribute to security programmes such as Vulnerability Management and Cyber Threat Intelligence (CTI)., • Apply strong knowledge of attack lifecycles, common vulnerabilities, cyber-attack techniques, and core networking concepts., • Maintain accurate documentation, identify process gaps, and support operational reporting and metrics., • Prioritise tasks effectively to meet deadlines while maintaining a high level of attention to detail., • Participate in an on-call rota and provide occasional weekend or holiday coverage as required., • Stay current with emerging threats, industry trends, and active threat campaigns., • Undertake additional duties as appropriate in support of the wider cybersecurity function. Skills & Experience Required • 2–3 years’ experience in an Information Security or Cybersecurity role., • Strong understanding of cyber defence practices and modern attack techniques., • Hands-on experience with security technologies such as EDR, XDR, SIEM, SOAR, IDS, and IPS., • Experience in vulnerability analysis, security alert analysis, incident response, and email threat analysis., • Ability to read and understand scripting and query languages such as PowerShell, Python, SQL, or KQL (desirable)., • Excellent analytical and critical-thinking skills, with the ability to investigate issues independently and make sound judgments., • Clear and professional written and verbal communication skills, with a strong sense of intellectual curiosity., • Proven ability to work collaboratively within a team environment while demonstrating flexibility and initiative. Qualifications • Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or a related field (optional)., • Industry certifications such as GIAC, ISACA, CompTIA, and/or ISC2 are preferred. What’s on Offer • Opportunity to join a highly skilled cybersecurity team within a global law firm., • Exposure to complex, enterprise-scale security operations., • A remote working environment with strong professional development opportunities. If you are interested in learning more or would like to apply, please submit your CV for consideration today. Due to the high volume of applications, we are not able to respond to all enquiries. If you have not received a response within 72 hours, please assume you have not been shortlisted at this stage, however thank you for taking the time to apply. Ryder Reid Legal is a recruitment specialist. For over thirty years we've been connecting legal talent with many of the leading law firms in London and internationally. Follow our LinkedIn page for the latest vacancies. https://uk.linkedin.com/company/ryder-reid-legal

🚀 Enterprise Account Executive - Cyber Security - Series funded scaleup 💰 £100k base + Double OTE + equity 📍 UK (Remote) We’re working with a fast-scaling cyber security company that’s already partnering with some of the largest global technology, financial services, and security organisations. Due to rapid growth (and a seriously strong pipeline), they’re now looking for an Enterprise Account Executive to take ownership of key accounts and drive new revenue across enterprise customers. 🔥 Why this role? • Inherit warm, high-value enterprise accounts (think global tech + major financials), • Work on deals typically £100k–£200k+ (with larger opportunities emerging), • Join at a stage where you can shape the sales function, not just follow a playbook, • Sell a highly differentiated cyber product with strong market demand, • Massive earning potential with uncapped commission (c. £200k+ OTE) 🎯 What you’ll be doing • Owning and growing enterprise relationships (5,000+ employee organisations), • Converting warm opportunities into POCs and long-term deals, • Running full-cycle sales – from first conversation to close, • Navigating complex stakeholder environments across security, engineering & procurement, • Building pipeline while expanding existing accounts ✅ What they’re looking for • Experience as an Enterprise AE in cyber security / SaaS / tech, • Background selling into:, • MSSPs / MSPs or, • Large enterprise security teams, • Strong understanding of enterprise sales cycles and methodologies (MEDDICC, etc.), • Comfortable in a high-growth / scale-up environment, • Someone who can own deals end-to-end and operate autonomously 💡 Nice to have • Start-up / scale-up experience, • Exposure to threat intelligence, malware, or advanced security tooling, • Experience building or scaling a new market / product / territory ⚡ The opportunity This is a chance to step into a role where: • The customers are already there, • The product is proven, • And the growth potential is huge Perfect for someone who wants to move beyond just hitting quota and actually help build something. Apply now!

Senior Cyber Operations Analyst Location: London (hybrid) Salary: Up to £75,000 + on-call compensation We are seeking an accomplished Senior Cyber Operations Analyst to join a high-performing Blue Team operating at the forefront of modern security operations. This is a technical role suited to an experienced analyst with strong engineering instincts, hands-on coding capabilities, and a deep understanding of incident response, detection engineering, and adversary tradecraft. This position includes approximately one week per month of on-call availability for high-priority incident response. Additional compensation is provided, and frequency may vary by client. We are looking for a senior analyst who brings curiosity, technical depth, and a proactive mindset. This role is ideal for someone who has likely grown from an engineering background and can write scripts (Python, Bash) to automate, enhance, and refine detection and response workflows. Experience with Splunk, SIEM operations, cloud endpoints, networks, and detection engineering will be highly advantageous. NOTE: Candidates for this role must be eligible for un-caveated UK SC Clearance. Key Responsibilities • Develop, maintain, and optimise detection content (primarily within Splunk SIEM) to identify threats across cloud, endpoint, and network environments., • Collaborate across security functions to identify gaps in logging, alerting, and detection coverage aligned to business risk., • Improve SecOps processes by recommending enhanced logging, identifying trends, and driving operational optimisation., • Conduct security monitoring, alert triage, and continuous improvement of detection rules (core hours 9:00–17:30 on rotation)., • Lead and support incident response investigations, ensuring high-quality documentation and escalation., • Mentor and support junior analysts, providing guidance, coaching, and technical oversight., • Serve as a technical SME on client engagements; present findings and recommendations to senior stakeholders., • Participate in alert testing, readiness exercises, and incident response tabletop sessions., • Stay current on emerging threat intelligence, attacker techniques, and relevant research. Required Experience • 5+ years experience as a Cyber Security Operations Analyst, • Familiarity with threat intelligence frameworks and methodologies, • End-to-end incident response lifecycle experience, • Detection engineering and alert development expertise., • Strong scripting or programming skills (Python, Bash, C/C++, Java)., • Solid grounding in cybersecurity fundamentals: network security, cloud security, cryptography, forensics., • Understanding of common network protocols and attacker abuse patterns., • Awareness of current APT groups and their TTPs., • Knowledge of analysis techniques for Windows and/or Linux environments. If you are a technically driven senior analyst ready to advance, apply today.

Estonia is globally recognised for its digital society, startup ecosystem and frontier technology capabilities, with strong strengths in AI, cyber security, deeptech, health technologies and sustainable innovation. You’ll work with high-potential sectors including: • Technology & DeepTech (ICT, AI, Industry, Cyber, Defence), • Health & Future Technologies (e-Health, ClimateTech) In this role, you will: • Build strategic networks across the UK, • Create export and investment opportunities, • Support Estonian companies entering and scaling in the market, • Connect businesses with partners, investors and ecosystems What matters most: • Strong understanding of international business growth and market expansion with a minimum of 3 years’ experience in tech, startups, scaleups, or innovation ecosystems., • Strong networking and relationship-building skills, • Ability to identify and develop high-value business leads, • Data-driven mindset - using AI tools, open-source intelligence and market research to uncover opportunities • Strategic thinker with a hands-on approach For further information contact Head of International Advisors Department Ege Devon (ege.devon@eis.ee). Apply via LinkedIn or contact us directly hels.mikkal@eis.ee. Location: London / United Kingdom (Applicant must have legal right to work in the UK and be able to verify it). Application deadline: 31 May 2026

SOC Engineer (SIEM & SOAR) Location: London (Onsite – 5 days per week) Salary: £65,000 base + package NOTE: Candidates for this opportunity must be eligible for UK Security Clearance. We are seeking a skilled SOC Engineer with a strong focus on SIEM and SOAR technologies to join a high-performing security operations environment. This role is centred on the configuration, optimisation, and integration of enterprise-scale security platforms, with a particular emphasis on Splunk Enterprise Security and Splunk SOAR. You will play a critical role in ensuring these platforms are stable, scalable, and effectively supporting detection engineering, automation, and incident response functions across the SOC. Key Responsibilities • Configure, maintain, and optimise SIEM and SOAR platforms, specifically Splunk ES and Splunk SOAR, • Design and implement integrations between SIEM/SOAR and wider security tooling (EDR, vulnerability management, IAM, etc.), • Develop, enhance, and maintain SOAR playbooks to automate investigation and response workflows, • Support onboarding of log sources into SIEM, ensuring accurate parsing and normalisation, • Optimise search performance, data pipelines, and platform efficiency, • Troubleshoot issues across SIEM/SOAR environments (data ingestion, alerting, integrations, automation workflows), • Collaborate with Detection Engineers to operationalise detection use cases, • Implement enrichment workflows incorporating threat intelligence, asset context, and identity data, • Support incident response through effective automation and data availability, • Maintain clear and comprehensive documentation for configurations, integrations, and playbooks Required Skills & Experience • Minimum 3+ years of commercial experience in SOC, SIEM, SOAR, or security engineering roles, • Strong hands-on experience with Splunk (essential), • Solid understanding of SIEM architecture and log management principles, • Experience building integrations using APIs and scripting languages (e.g. Python, PowerShell), • Knowledge of automation and orchestration within security operations, • Familiarity with security tooling such as EDR, IAM, and network security solutions, • Strong troubleshooting and analytical problem-solving capabilities Desirable Qualifications • Bachelor’s degree in Cyber Security, IT, or a related discipline (or equivalent experience), • Splunk Enterprise Certified Admin, • Splunk SOAR Automation Developer certification, • Additional relevant vendor certifications in SIEM/SOAR or security tooling If you are a hands-on SOC Engineer with deep Splunk expertise and a passion for building scalable, automated security operations, apply today.

Strategic Project Director Location: London UK (travel required between sites) Clearance: You must hold active DV Clearance Role Overview Provide senior accountability for the consolidation of a Top Secret (TS) digital workplace, bringing desktop and deskside services from four agencies into a single, secure service model under a new contract. Working from bid stage through mobilisation and delivery, you will define the approach to integration and transition and oversee delivery of a complex, multi‑agency programme spanning technology, service operations, security, and adoption. The role focuses on stabilising, integrating, and optimising services while navigating differing security requirements, organisational cultures, and legacy environments through strong governance and assured execution. Key Responsibilities • Own the transition and transformation approach, including roadmap, governance, and Target Operating Model (TOM)., • Shape the solution and commercial model with architects, finance, and legal, ensuring delivery viability within TS constraints., • Lead executive stakeholder engagement, risk assessment, and dependency modelling., • Lead a large, cross‑functional programme covering workplace technology, service operations, cyber assurance, identity, and change., • Deliver a consolidated SIAM‑based operating model aligned to ITIL v4, integrating multiple suppliers and service towers., • Drive technology rationalisation, including:, • Windows 11 endpoint and image strategy, • Intune / Configuration Manager, • Identity and access (AD / Entra ID, PAM, MFA), • Secure collaboration, VDI, and remote access, • ITSM, CMDB, monitoring, EDR/XDR, and tooling consolidation, • Ensure TS security assurance and accreditation, working closely with cyber and accrediting authorities., • Redesign service operations to improve automation, data‑driven support, and user experience., • Lead people, culture, and adoption, aligning teams across agencies to new ways of working., • Run programme governance (Boards, Design Authorities, CABs) with strong auditability., • Track and realise benefits across cost, risk, performance, and user experience. Essential Experience • Proven large scale technology or service transformations, ideally in digital workplace or end‑user compute., • Proven delivery from bid through mobilisation, transition, transformation, and BAU handover., • Experience operating in Top Secret / DV or equivalently regulated environments (government, defence, intelligence)., • Strong executive stakeholder management, including CISOs, CTOs, COOs, and Agency leadership., • Demonstrated programme leadership delivering complex outcomes on time, on budget, and with assurance. Technical Background: • Digital workplace / EUC: Windows 10/11, image management, device hardening, VDI., • Endpoint management: Intune, Configuration Manager, MDM/MAM., • Identity & security: AD / Entra ID, Zero Trust, MFA, PAM, EDR/XDR, DLP., • Service management: ITIL v4, SIAM, ITSM platforms (e.g. ServiceNow)., • Secure cloud, collaboration, and restricted‑environment solutions.

SOC Engineer – Watford, UK • Up to £65,000 Depending on Experience, • Full time onsite role, • Must be eligible for SC clearance ABOUT THE CLIENT Our client is a highly respected technology consultancy working across complex and security critical environments. They deliver cutting edge digital and cybersecurity solutions to major public sector organisations. Due to continued growth, they are looking to appoint a SOC Engineer to strengthen their security capability. THE BENEFITS • 25 days annual leave, • Health cash plan, • Life assurance, • Pension scheme, • Structured training and development, • Career progression opportunities, • Collaborative and supportive environment THE SOC ENGINEER ROLE: As a SOC Engineer, you will play a key role in ensuring security monitoring and protective tooling is deployed and operating effectively. You will support SOC operations by enabling analysts to detect and respond to threats quickly and efficiently. • Install, configure and maintain security monitoring tools, • Ensure SOC tooling is optimised and operating effectively, • Support SIEM platforms and threat intelligence tooling, • Work with teams to assess risk and design security controls, • Apply updates, patches and follow change processes, • Stay current with emerging threats and recommend improvements SOC ENGINEER ESSENTIAL SKILLS • Strong understanding of information security fundamentals, • Experience with SIEM tools such as Sentinel or Splunk, • Familiarity with security monitoring technologies, • Analytical mindset with strong problem solving skills, • Ability to manage multiple priorities and meet deadlines, • Strong communication and collaboration skills TO BE CONSIDERED: Please either apply through this advert or email me directly to discuss. By applying for this role, you give consent for your application to be submitted to our client in connection with this vacancy. KEY SKILLS SOC Engineer, SIEM, Sentinel, Splunk, Cyber Security, Security Monitoring, Threat Detection, Azure, AWS, Network Security, NSD

• Strategy Consultant, • £60,000 – £80,000 + performance bonus, • London | Office-based (4 days) Our client is a highly specialised advisory firm working at the intersection of private equity and B2B technology. They partner with global investors and executive teams to uncover commercial opportunities across product strategy, pricing and growth. Combining deep sector expertise with proprietary data and analytics tools, the firm delivers decision-grade insight that influences high-stakes strategic outcomes. The culture is ambitious, intellectually demanding and designed for people who want rapid professional growth, real responsibility and the chance to contribute meaningfully to complex strategic decisions. The Strategy Consultant will play a central role in delivering high-impact advisory engagements, supporting investors and leadership teams as they navigate complex commercial questions. You will drive research and analysis, translate data into actionable insights and help shape strategic recommendations that influence business performance. Role Highlights – The Strategy Consultant will… – Deliver client workstreams with analytical rigour and commercial precision – Translate research and complex datasets into clear strategic insights – Use proprietary intelligence platforms to uncover pricing, product and growth opportunities – Contribute actively in client discussions, workshops and senior stakeholder meetings – Produce structured deliverables including research synthesis, modelling and recommendations You Will Need – 2–4 years’ experience in consulting, strategy, PE advisory or a similar environment – Strong analytical and problem-solving skills with structured thinking – Commercial curiosity across technology, fintech, data or cyber sectors – Clear, confident communication with the ability to influence senior stakeholders – High levels of ownership, attention to detail and resilience under pressure Why You’ll Love It – Work directly with global investors and senior leadership teams – Exposure to complex strategic questions across high-growth technology markets – Rapid professional development within a high-performance environment – Early ownership of meaningful project work and client exposure – Clear progression path toward leading engagements and senior advisory roles Apply today to grow your career with a forward-thinking employer committed to equal opportunity. We are committed to promoting equality of opportunity for all employees and job applicants. In line with the Equality Act 2010, we strive to create and maintain a working environment in which everyone is able to make the best use of their skills, free from discrimination or harassment, and in which all decisions are based on merit. Due to a high number of applicants, we are only able to respond to successful candidates

Senior Business Development Manager – Cyber & AI Risk 📍 London / South-East | Hybrid 💰 £65,000 basic + £60,000 OTE | Uncapped Commission The Opportunity Our client is a specialist Cyber and AI Risk consultancy, part of a PE-backed group, and growing fast. With a team of around 20 experts delivering across GRC and security services, this is a pivotal hire at exactly the right moment. They are looking for a Senior BDM who can own and grow a portfolio of upper mid-market and enterprise clients across the UK, driving meaningful deals in the £20k–£150k range. You'll work across a full services mix: vCISO retainers, ISO 27001 and ISO 42001 readiness, AI risk and governance, penetration testing, Red Teaming, and assumed breach exercises. This isn't a role for someone who wants to manage warm accounts. They need a genuine hunter — someone who can self-source pipeline, build C-suite relationships, and close complex multi-stakeholder deals. What You'll Do → Build and execute a sector plan targeting upper mid-market and enterprise clients → Develop multi-year, high-value engagements across GRC and security services → Influence C-suite stakeholders and lead commercial conversations with confidence → Partner with leadership, marketing, and technical teams on go-to-market strategy → Maintain accurate pipeline forecasts and manage deals from origination to contract → Represent the business at industry events and contribute market intelligence internally What We're Looking For ✔ Direct, quota-carrying experience selling GRC consulting — ISO 27001, SOC 2, NIST, NIS2 or similar ✔ Proven track record in security testing sales: pen testing, Red Teaming, or vulnerability assessment ✔ A credible mix of self-sourced and company-supplied pipeline ✔ Gravitas and confidence in front of C-suite audiences ✔ Comfortable in a small, agile consultancy — you bring ideas and make them happen ✔ Solid technical understanding of cyber security ✔ Knowledge of the emerging AI regulatory landscape (EU AI Act, ISO 42001) ✔ Based in London or the South-East, willing to travel in region Why This Role? 🔹 Work on cutting-edge Cyber and AI risk engagements 🔹 Direct influence on strategy in a growing, PE-backed consultancy 🔹 Genuine career progression — this role scales with the business 🔹 Flexible hybrid working Interested? Apply below or send me a message directly. I'd love to hear from people who know this space.

Security Content Engineer Location: London (Full time - 5 days onsite) Salary: Up to £65,000 + bonus Clearance: Must be eligible for UK Developed Vetting (DV) clearance We are seeking an experienced Security Content Engineer to join a high-performing Security Operations Centre (SOC) environment. This role is focused on designing, developing, and optimising detection content to strengthen cyber defence capabilities and improve threat visibility across enterprise environments. You will play a critical role in enhancing detection efficacy, reducing false positives, and ensuring robust coverage against evolving threat landscapes. Key Responsibilities • Design and implement detection use cases across SIEM and SOAR platforms using threat intelligence and incident data, • Develop, map, and maintain detection logic aligned to MITRE ATT&CK frameworks, • Continuously tune and optimise correlation rules to improve signal-to-noise ratio, • Validate detection logic through simulations, threat emulation, and red team collaboration, • Work closely with SOC tooling and engineering teams to ensure efficient data ingestion and parsing, • Document detection logic, methodologies, and expected outputs for audit and operational use, • Contribute to post-incident reviews, enhancing detection coverage and response effectiveness, • Maintain and evolve a repository of use cases, KPIs, and SOC performance metrics Requirements • 3+ years of commercial experience in SOC content engineering, detection engineering, or SIEM administration, • Strong hands-on experience with SIEM platforms and query languages (e.g. SPL, KQL), • Solid understanding of detection engineering principles, data modelling, and regex, • Proven experience working with MITRE ATT&CK and threat-informed defence strategies, • Ability to design scalable and maintainable detection content in complex environments, • Strong documentation and stakeholder communication skills Desirable • Relevant certifications such as Splunk Enterprise Security, GIAC GCDA, or similar, • Experience with SOAR platforms and automation workflows, • Background in threat hunting or incident response If you are a detection-focused cyber security professional who thrives on building high-quality, intelligence-led SOC content, apply today.

About governr governr is the independent control infrastructure for AI in regulated financial services, the system of record sitting above security tools, GRC platforms and foundation models, converting raw technical signals into board-ready value and risk decisions, regulator-defensible proof of control. We're targeting the firms that can't afford to get this wrong: PE, private credit, mid-tier banks, wealth managers and insurers. The Role You open the doors. You walk into rooms at PE houses, mid-tier banks, hedge funds, asset managers and insurers and turn warm relationships into qualified meetings for the founding team. You're not carrying a closing quota, you're carrying access. The CCO and CEO close; you make sure they're sitting in front of the right COO, CRO or Head of Tech Risk in the first place. Day to day: working your existing book, generating AI Atlas sprints, attending industry events, running targeted account campaigns alongside our channel partners, and feeding intelligence back into how we sharpen the pitch for each sub-segment Who you are • 3–5 years in a field-facing role at a vendor, consultancy or boutique selling into UK/EMEA financial services, Regtech, Cyber, Data Infrastructure, Alt Data or a Big 4 / mid-tier consulting practice., • A live, callable book across mid-tier financials: buy side (PE, private credit, hedge funds, asset managers), sell side (banks, brokers), and insurance. We will ask for examples., • Comfortable getting a meeting with a CIO, COO, CTO, CRO, Head of Tech Risk or CISO without needing a referral chain three people deep., • Fluent in the language of regulated firms, operational risk, third-party risk, model risk, SMCR, DORA. You don't need to be the technical expert; you need to know which words land in which room, • Self-directed. Early-stage. No SDR sitting underneath you, no playbook handed down from a VP of Sales, you're building the motion. What we offer Founding GTM seat at a seed-stage company, a category that's genuinely new (control infrastructure for AI scaling deployments), and the regulatory tailwinds landing in 2026. Competitive base, equity, London-based with travel across EMEA. You'll be part of the founding team solving a problem that's commercially urgent and genuinely interesting. Sharp team, high trust, and direct access to founders and customers from day one.

Ready to Play a Critical Role at the Inflection Point of a Venture-Backed Cybersecurity Startup? Join Avertro, a high-growth venture-backed cybersecurity startup building a platform that empowers security leaders to manage cyber risk with confidence. We're looking for a driven Regional Sales Executive who thrives in fast-paced environments and knows what it takes to succeed in a software scale up. This isn't just another sales job, you'll play a pivotal role in shaping our presence in your region and accelerating our next stage of growth. We’re solving one of the industry’s biggest challenges. While cybersecurity is often managed as a fragmented technical activity, we're empowering leaders to treat it as a strategic business function by turning technical signals into quantifiable intelligence for decision-makers. You'll be selling into a world where Cyber Resilience is the defining imperative for business value and digital confidence. If you're looking for autonomy to own your territory and pipeline, a collaborative environment, and the chance to help shape the company's strategic direction, this could be your next big move. ✨ The Opportunity You will report to the CRO and work with the broader GTM team. There is marketing support, but this is a role that demands initiative. You must be proactive in building and advancing pipeline, shaping opportunities, and helping define our presence in the region. You’ll join us at a critical growth stage, where our platform is live with enterprise customers and focusing on scaling all aspects of our business. 🧩 What You’ll Do • Own the full sales cycle - prospect, qualify, engage stakeholders, and close deals., • Work across both partner-led and direct opportunities., • Understand and communicate the Unique Value Proposition of CyberHQ: as the Resilience Command Platform that translates technical signals into quantifiable, governance-ready intelligence, enabling customers to validate cyber effectiveness, prove defensible resilience, and optimize security-per-dollar., • Align platform capability to real operational problems faced by CISOs, compliance leads, and risk teams., • Maintain CRM discipline and provide clear, structured forecasting., • Feed market insights back into the business to shape GTM and product strategy. 🔍 What We’re Looking For • 2+ years in B2B SaaS enterprise sales, ideally in cybersecurity, GRC, or business intelligence., • Direct experience in the risk and compliance industry, with a deep understanding of governance frameworks., • Strong knowledge of business case creation for investment in cybersecurity initiatives and technologies., • Proven performance against a $1M+ annual quota, including closing $100K+ deals., • Demonstrated ability to build pipeline - from outbound, through partners, or via strategic engagement., • Experience selling to CISOs, technology leaders, and governance/risk functions., • Able to speak credibly about the cybersecurity landscape and committed to building a career in the space., • Brings structure and clarity to the sales process (e.g. MEDDPICC, Challenger, or similar)., • Passionately aligns with our mission to move cybersecurity from a fragmented technical activity to a strategic business function, backed by quantifiable data., • Be driven by mission and impact, not just the opportunity to "make lots of money through commissions". 💥 Why You’ll Love Working With Us • Be part of a venture-backed startup solving one of cybersecurity’s biggest gaps., • Join a collaborative, high-trust team that values autonomy and curiosity., • Strategic partner relationships and opportunities already in motion., • A product with clear value in regulated, high-security industries., • Access to a focused GTM team and direct support from leadership., • Flexible working hours as long as you meet your commitments., • Competitive salary package (base, OTE, stock options)., • Influence the product and strategic direction of the company., • Grow with us: Your career will progress in line with the company’s growth., • We offer team events and off-sites., • Our vibe? We get sh*t done, call it like it is, stay laser-focused on problems worth solving, obsess over our users, and work with good humans only. ✨ Interested? If you love a mission, want to be rewarded both financially and personally, solve complex problems, and want your work to have real-world impact, we’d love to hear from you. Please note, only shortlisted candidates will be contacted. No agencies please.

About the client The organisation is an employee-owned defence-focused digital services consultancy. A vendor-agnostic UK Crown Commercial Services accredited supplier, they have delivered over 120 cloud-hosted digital services across the public sector, working in partnership with clients to research and develop outcomes and services spanning artificial intelligence, data science, low code and complex code software engineering, cyber security, cloud engineering, and user-centred design. Their technology values drive everything they do. They are committed to open, contemporary and secure solutions that put users first, and embrace cutting-edge technologies while ensuring interoperability, resilience and ethical innovation. By prioritising transparency, adaptability and security, they enable organisations to build future-proof digital services that deliver real impact. About the role The Innovation Director is responsible for translating novel technology opportunities into great solutions for clients. Your mission is to lead early lifecycle/ pre-sales engagements, architecting the high-level technical strategies that win bids and set the delivery teams up for success. You will be both proactive and reactive. Proactive in interpreting government strategy, world events and delivery priority from primes into solutions that bring pace, precision and productivity. Reactive in shaping and responding to customer requirements through informal conversations and more substantive solution design for RFPs. A thorough understanding of the deployment of cutting-edge technology into the real world and the pace of change of new technology is essential What you’ll be doing Technical Pre-Sales & Bid Architecture • Solution Design: Lead the architecture for major tenders, ensuring proposals are innovative yet rooted in the reality of HMG delivery, • Win Strategy: Partner with the Sales lead to identify the win strategy that differentiates the organisation. You own the technical narrative of the bid, from executive summaries to deep-dive methodology chapters, drawing in experts as required., • Prototyping & Demos: If needed oversee the creation of proof of concepts (PoCs) or technical demos that make the vision tangible for clients during the discovery phase., • Service Offering Design: Work with Practice Leads to package technical services into repeatable service offerings or accelerators that can be sold to multiple clients. Strategic Client Engagement & Thought Leadership • Trusted Advisor: Act as the technical anchor for C-suite government stakeholders, helping them navigate their digital roadmaps before a formal tender is even released., • Market Presence: Represent the organisation at industry events and in white papers. You are the face of the organisation’s technical go to market positioning the firm as a thought leader in high-consequence digital transformation., • Handover Governance: Ensure a seamless transition from bidding to delivery briefing the Delivery Director and Practice Leads on the technical vision and client expectations. What you will bring • Experience: A proven track record of winning multi-million pound contracts within the UK Government or Defence sectors., • Skill: Deep familiarity with the Digital, Data and Technology (DDaT) framework. You understand the language of Government and how to navigate the complexities of public sector frameworks and commercial models., • Experience: Background in modern engineering practices but with a clear commercial nose. A thorough understanding of the deployment of cutting edge technology into the real world and the pace of change of new technology is essential, • Skill: The ability to spot an opportunity for innovation where others see a routine problem. You should be able to estimate technical effort accurately, ensuring innovative solutions are also profitable and deliverable Your personal qualities • Persuasive Writing: The ability to draft compelling, high-scoring technical responses for formal tenders., • Outcome-Obsessed: You care more about the client's mission success than the specific tool used to get there., • Intellectual Curiosity: A natural early adopter who is genuinely excited by solving complex problems with unconventional solutions., • The Relatable Expert: You can explain high-level technical concepts to non-technical stakeholders without losing the business value in the jargon., • Entrepreneurial Spirit: You thrive in a smaller, agile environment where you need to be both the strategist and the person who gets the prototype over the line., • Ethical & Compliant Mindset: You champion Innovation by Design, ensuring all new ventures respect UK GDPR, ethical AI guidelines, and inclusivity standards. If this role sounds like you, please apply with your resume.

An exciting opportunity has arisen for an experienced Cyber & AI Security Sales Lead to play a pivotal role in driving growth across an expanding Digital Services capability. This position is suited to an experienced presales, sales leadership or business development professional with a strong understanding of cyber security and emerging AI security solutions. The successful candidate will create market visibility, generate demand and lead strategic presales activity across Cyber & AI Security offerings. Acting as the bridge between customers, product teams and service delivery functions, they will help transform market insight into commercial opportunities and successful outcomes. This is a senior, hands-on role requiring someone who is comfortable leading complex security sales cycles from opportunity identification through to proposal and customer engagement, while engaging confidently with senior stakeholders across cyber security, AI security and cloud security domains.The role offers the opportunity to shape strategy, influence product direction and help establish a market-leading Cyber & AI Security capability. Key Responsibilities Go-to-Market Strategy, Brand Visibility and Thought Leadership • Develop and deliver internal and external go-to-market strategies and campaigns for Cyber & AI Security offerings., • Create compelling and differentiated value propositions across security services, products and accelerators., • Drive thought leadership initiatives through webinars, industry events, conferences, articles and community engagement., • Ensure marketing collateral, online presence and customer-facing materials effectively showcase the breadth of Cyber & AI Security capabilities and success stories., • Build awareness and market credibility to generate qualified demand and pipeline growth. Presales Leadership and Bid Management • Leading end-to-end proposal activity for Cyber & AI Security opportunities., • Shaping compelling customer solutions and coordinating inputs from product, technical and service teams., • Developing and maintaining high-quality sales collateral, proposal assets, case studies and reusable bid content., • Contributing Cyber & AI Security expertise into larger cross-functional and multi-sector opportunities., • Collaborating with architects and engineers to incorporate technical depth while retaining ownership of the overall sales narrative and customer proposition. Pipeline Development and Opportunity Management • Build and maintain visibility across the Cyber & AI Security sales pipeline., • Partner with account teams and business development leads to identify opportunities for growth, upselling and cross-selling., • Facilitate regular opportunity review sessions to drive progression and remove barriers to success., • Analyse customer feedback and market trends to identify emerging themes and opportunities for future services and products. Strategic Partnerships and Microsoft Engagement • Managing strategic relationships with Microsoft and other technology partners., • Supporting co-sell initiatives, partner programmes and collaborative marketing activities., • Leveraging partner ecosystems and marketplaces to generate additional pipeline opportunities., • Working closely with internal stakeholders to maximise partner-led growth initiatives. Customer Engagement and Commercial Growth • Building trusted relationships with senior customer stakeholders., • Acting as a key point of contact throughout presales and early delivery phases., • Identifying additional growth opportunities within existing customer engagements., • Translating successful outcomes into compelling customer stories, case studies and reference materials., • Feeding customer insight, market intelligence and win/loss analysis into future strategy development. Skills and Experience Essential Skills and Experience The successful candidate will demonstrate: • Significant experience within technical presales, sales leadership or business development roles across cyber security consulting, platforms or services., • Strong knowledge of Cyber Security, AI Security and Cloud Security principles., • A practical understanding of areas such as:, • Cloud platforms including AWS and Azure, • Application and platform security, • Security threats and attack vectors including OWASP Top 10, • Security frameworks and standards including NCSC, NIST, CIS, PCI DSS, GDPR, OWASP ASVS and SOC2, • Strong commercial awareness with a clear understanding of revenue generation, sales pipelines, risk and delivery models., • Proven experience leading and converting complex bids and proposals., • Excellent stakeholder engagement, communication and influencing skills, with the ability to engage executive audiences and technical teams alike., • Experience working across multiple sectors and collaborating with Sales, Marketing and technical delivery functions., • The ability to effectively work with and mentor technical specialists within presales environments. Desirable Experience The following would be advantageous: • Experience working with Microsoft or other major cloud and security providers within co-sell or partner-led models., • Previous involvement in thought leadership activities including industry speaking engagements, blogs or webinars., • Experience operating within Agile delivery environments., • An understanding of how presales decisions impact delivery capability, utilisation and workforce planning.

MTI MTI provides award-winning, end-to-end technology solutions and services in cyber security and data centre for over 35 years. MTI has 250+ staff, with offices across the UK, France and Germany. MTI was acquired by Ricoh in 2020 as part of their transformation into a global digital services company. As part of the Ricoh family, MTI benefits from access to a much broader set of specialist IT services and significant technical resources available on a global scale. More information can be found at mti.com The Role Job Title: SOC Analyst (L2) Location: Hybrid Worker - Staines Job Type: Full-Time Reporting To: SOC Manager Job Summary As a Level 2 SOC Analyst, you will play a key role in the detection and response lifecycle within our Security Operations Centre. You will be responsible for triaging, investigating, and responding to cybersecurity incidents across customer environments using tools such as Microsoft Sentinel and Defender XDR. The role requires strong analytical skills, attention to detail, and the ability to execute response actions such as endpoint isolation, IOC blocking, malware scans, and user containment. Note: Experience working in an MSSP/MSP setting supporting multiple clients is essential Key Responsibilities Threat Monitoring and Detection: • Monitor security alerts and events from SIEM platforms, EDR solutions, and other security tools., • Analyse logs, network traffic, and endpoint data to identify potential security incidents., • Tune and optimize detection rules to reduce false positives and improve threat detection accuracy. Threat Intelligence and Hunting: • Leverage threat intelligence feeds and platforms to stay informed about emerging threats and attack techniques., • Proactively hunt for threats and anomalies within client environments using advanced tools and techniques., • Develop and share actionable threat intelligence with clients and internal teams. SOAR and Automation: • Create/update SOAR workflows for common incidents., • Recommend automation improvements. Platform Administration: • Maintain and fine-tune Sentinel and Defender components., • Ensure consistent log ingestion and rule coverage. Required Skills and Qualifications • Hands-on experience with Microsoft Sentinel, Defender for Endpoint, and other XDR platforms., • Strong proficiency in KQL for threat hunting and detection tuning., • Solid understanding of the MITRE ATT&CK framework and common threat actor behaviours., • Preferred - Microsoft Certified: Security Operations Analyst Associate (SC-200), • Preferred - CompTIA Security+, CySA+ Required Experience • Minimum of 2 years of experience in a SOC environment., • Experience working in an MSSP/MSP setting supporting multiple clients. Required Soft Skills • Strong communicator and collaborator., • Comfortable working in fast-paced, dynamic environments., • Desire to learn and grow in the cybersecurity field. As part of the Ricoh family, MTI benefits from access to a much broader set of specialist IT services and significant technical resources available on a global scale. As a key constituent in Ricoh’s IT services growth and investment strategy, the MTI group of companies are developing an expanded and enhanced portfolio of services aimed at gaining market share while helping their customers accelerate and de-risk their own transformation plans. MTI has capabilities and services that support a wide range of technologies and customer objectives. MTI is one of the most technically accredited solutions providers across with highly experienced consultants and project managers to ensure excellent project outcomes as well as offering a set of well-resourced and scalable managed services. By employing proven methodologies, best practices and adopting a consultative approach, underpinned with operational excellence gained through thousands of client engagements. MTI helps its customers solve business challenges, by providing secure, compliant management of their applications, data, infrastructure, and systems environments.

Senior Business Development Manager – Cyber & AI Risk. Represent the business at industry events and contribute market intelligence internally. Genuine career progression — this role scales with the business.

🚀 Enterprise Account Executive - Cyber Security - Series funded scaleup 💰 £100k base + Double OTE + equity 📍 UK (Remote) We’re working with a fast-scaling cyber security company that’s already partnering with some of the largest global technology, financial services, and security organisations. Due to rapid growth (and a seriously strong pipeline), they’re now looking for an Enterprise Account Executive to take ownership of key accounts and drive new revenue across enterprise customers. 🔥 Why this role? • Inherit warm, high-value enterprise accounts (think global tech + major financials), • Work on deals typically £100k–£200k+ (with larger opportunities emerging), • Join at a stage where you can shape the sales function, not just follow a playbook, • Sell a highly differentiated cyber product with strong market demand, • Massive earning potential with uncapped commission (c. £200k+ OTE) 🎯 What you’ll be doing • Owning and growing enterprise relationships (5,000+ employee organisations), • Converting warm opportunities into POCs and long-term deals, • Running full-cycle sales – from first conversation to close, • Navigating complex stakeholder environments across security, engineering & procurement, • Building pipeline while expanding existing accounts ✅ What they’re looking for • Experience as an Enterprise AE in cyber security / SaaS / tech, • Background selling into:, • MSSPs / MSPs or, • Large enterprise security teams, • Strong understanding of enterprise sales cycles and methodologies (MEDDICC, etc.), • Comfortable in a high-growth / scale-up environment, • Someone who can own deals end-to-end and operate autonomously 💡 Nice to have • Start-up / scale-up experience, • Exposure to threat intelligence, malware, or advanced security tooling, • Experience building or scaling a new market / product / territory ⚡ The opportunity This is a chance to step into a role where: • The customers are already there, • The product is proven, • And the growth potential is huge Perfect for someone who wants to move beyond just hitting quota and actually help build something. Apply now!

CLS is seeking a highly motivated, self-driven Cyber Threat Intelligence Senior Analyst to join a global threat intelligence team. Bachelor’s Degree in Cybersecurity studies, Intelligence Studies, International Relations, Economics, Computer Science, or related discipline. Threat Intelligence, Sec

Join us to spearhead efforts to transform how public sector organisations leverage public data with AI to deliver intelligence and situational awareness across the physical and cyber domains.This role can be based in the UK or Germany.AI Innovation at DataminrWorking at Dataminr you’ll have th

Join us to spearhead efforts to transform how public sector organisations leverage public data with AI to deliver intelligence and situational awareness across the physical and cyber domains.This is a UK-based role covering the UK, Ireland & the EU.AI Innovation at DataminrWorking at Dataminr yo

A leading recruitment agency is seeking a Cyber Threat Intelligence Analyst in London.This role involves identifying and mitigating advanced cyber threats, producing intelligence for various stakeholders, and requires 3+ years of experience in cyber threat intelligence.The ideal candidate will have

NOTE: Candidates for this opportunity must be eligible for UK Security Clearance. We are seeking a skilled SOC Engineer with a strong focus on SIEM and SOAR technologies to join a high-performing security operations environment. This role is centred on the configuration, optimisation, and integration of enterprise-scale security platforms, with a particular emphasis on Splunk Enterprise Security and Splunk SOAR. You will play a critical role in ensuring these platforms are stable, scalable, and effectively supporting detection engineering, automation, and incident response functions across the SOC. Key Responsibilities Configure, maintain, and optimise SIEM and SOAR platforms, specifically Splunk ES and Splunk SOAR Design and implement integrations between SIEM/SOAR and wider security tooling (EDR, vulnerability management, IAM, etc.) Develop, enhance, and maintain SOAR playbooks to automate investigation and response workflows Support onboarding of log sources into SIEM, ensuring accurate parsing and normalisation Optimise search performance, data pipelines, and platform efficiency Troubleshoot issues across SIEM/SOAR environments (data ingestion, alerting, integrations, automation workflows) Collaborate with Detection Engineers to operationalise detection use cases Implement enrichment workflows incorporating threat intelligence, asset context, and identity data Support incident response through effective automation and data availability Maintain clear and comprehensive documentation for configurations, integrations, and playbooks Required Skills & Experience Minimum 3+ years of commercial experience in SOC, SIEM, SOAR, or security engineering roles Strong hands‑on experience with Splunk (essential) Solid understanding of SIEM architecture and log management principles Experience building integrations using APIs and scripting languages (e.g. Python, PowerShell) Knowledge of automation and orchestration within security operations Familiarity with security tooling such as EDR, IAM, and network security solutions Strong troubleshooting and analytical problem‑solving capabilities Desirable Qualifications Bachelor’s degree in Cyber Security, IT, or a related discipline (or equivalent experience) * Additional relevant vendor certifications in SIEM/SOAR or security tooling If you are a hands‑on SOC Engineer with deep Splunk expertise and a passion for building scalable, automated security operations, apply today. J-18808-Ljbffr

Job Responsibilities Identifies and assess complex global and industry-specific cyber threats Analyses cybersecurity intelligence and threat assessment data to inform risk management Partners with incident response teams to share findings and collaborate on investigations Develops and implem

An online learning platform in the UK is seeking an Associate Lecturer in Computing to focus on Cyber Security and Artificial Intelligence.

JPMorganChase is seeking a Cyber Intelligence Direct to join the EMEA Threat Intelligence team in the Greater London area. In this role, you will assess cyber threats and drive innovation in cybersecurity strategies. The ideal candidate will have expert-level experience in cybersecurity and be comfo

Cyber Threat Intelligence develops overall strategies and promotes the integration of intelligence activities to facilitate and inform decisions, plans, and operations to provide threat intelligence support to cyber security operations, and conducts sharing and collaboration with government, sector,

Our client, a Global Management Consultancy, is looking for a Recruiter to join their Cyber Security Team. Qualifications * Recruiting in Cyber Security, Architecture, Big Data or Applied Intelligence.

Cyber Services and Capabilities.As a Senior DFIR Consultant, your focus will be delivering high quality incident response to our clients alongside collaborating with various individuals and divisions within our business including the Threat Intelligence teams, Security Operations Centre teams, and o

As our Threat Intelligence Analyst, your primary responsibility will be to support the reduction of Post Office’s cyber risk exposure by assisting in the collection, analysis, and dissemination of cyber threat intelligence. Sign in to set job alerts for “Threat Intelligence Analyst” roles. Ass

A leading cybersecurity firm in London is looking for an experienced Sales Executive to drive growth through Enterprise sales and client acquisition. This role involves managing relationships within the Partner Network, developing a sales pipeline, and delivering tailored intelligence solutions. Can

Provide specialist advice on cyber threat intelligence, threat modelling, security architecture, and incorporating security by design into technology solutions. Deep knowledge of a specialist area of cyber security and / or cyber threat intelligence as a recognised and certified subject matter exper

A leading global intelligence organization is seeking a Cybersecurity Engineer responsible for protecting organizational systems and networks from cyber threats. The role involves conducting security breaches response, penetration testing, and implementing cybersecurity measures.

We bring innovation to our clients using proven and emerging technologies, agile delivery processes and our deep expertise across the breadth of space, defence, intelligence, aerospace and maritime, all underpinned by our end-to-end cyber capability. Experience in the Space Domain Awareness domain;

MI6, also known as the Secret Intelligence Service (SIS), protects the security and economic well‑being of the UK from overseas threats such as regional instability, terrorism and cyber attacks. Working across the globe and in close partnership with MI5 and GCHQ, we help the Government counter the

A leading cyber intelligence firm in Greater London is seeking a skilled professional to deploy and maintain their Splunk environment.The ideal candidate will have over 3 years of SIEM appliance experience and strong problem-solving skills.Responsibilities include managing security threats and colla

Join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare. We’re looking for a Threat Detection Engineer who thrives on innovation and technical ownership. This role is not a traditional SOC position, you’ll focus on building high-impact detection capabilities, shaping how security protects sensitive genomic and AI-driven data at scale. This role offers hybrid / remote working options, a salary range of £60,000 - £80,000 and benefits. Why This Role is Exciting High autonomy: Lead projects from idea to deployment Innovation-driven: Develop cutting-edge detections beyond standard SIEM rules Collaborative: Work closely with internal teams and an outsourced SOC partner Mission-focused: Protect critical healthcare data that supports precision medicine Key Responsibilities Design and develop threat-led detections using threat intelligence and threat-hunting outputs Create novel analytic techniques for incident detection Collaborate with an MSP SOC to maintain and tune the detection catalogue Build automated reporting dashboards using Microsoft Sentinel workbooks Support security initiatives including ISO 27001 activities and KQL-based tasks Ensure monitoring coverage across cloud platforms, SaaS apps, and internal systems Contribute to documentation of processes, tools, and detection logic What You’ll Bring Must-Have Skills & Experience: Previously worked as a Threat Detection Engineer or in a similar role. Strong proficiency in KQL and hands-on experience with Microsoft Sentinel Familiarity with Microsoft Defender tools (Endpoint & O365) Exposure to Azure cloud logging and Kubernetes environments Knowledge of attacker TTPs and MITRE ATT&CK frameworks Proactive, collaborative, and innovative mindset Desirable / Nice-to-Have: Experience with Python, Terraform, or CI/CD pipelines Familiarity with Microsoft Purview, Entra ID, DLP, or Insider Risk tools Understanding of ISO 27001, Agile ways of working Knowledge of statistics, data science, or AI/ML applied to cybersecurity Relevant certifications (MS-500, AZ-500, SC-series, Security+, GSOC, CCSK) Perks & Benefits Hybrid / remote working options Flexible benefits package Opportunity to innovate and make a real impact in threat detection Work in a small, fast-paced, highly collaborative team Contribute to advancing precision healthcare using genomic data and AI Ready to build next-generation threat detection and protect life-changing data Apply today! Important Information: We endeavour to process your personal data in a fair and transparent manner. In applying for this role, Additional Resources will be acting in your best interest and may contact you in relation to the role, either by email, phone, or text message. For more information see our Privacy Policy on our website. It is important you are aware of your individual rights and the provisions the company has put in place to protect your data. If you would like further information on the policy or GDPR please contact us. Additional Resources Ltd is an Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Employment Businesses Regulations 2003. Keywords: Cyber Threat Engineer, Detection & Response Engineer, SIEM Engineer, Security Detection Engineer,T hreat Hunting Engineer, Security Automation Engineer, SOC Engineer, Incident Response Engineer, Cloud Security Engineer, Network Security Engineer, Cybersecurity Analyst (Threat Focus), Threat Intelligence Analyst, Security Monitoring Engineer, Endpoint Security Engineer, Cyber Defense Engineer

AI-Augmented Cyber Security Engineer We are seeking an experienced Cyber Security Engineer to join a growing security function within a confidential technology-focused organisation. This role is designed for an engineer who thrives at the intersection of cyber security, data, and emerging AI technologies. You will play a central role in designing, implementing, and continuously improving security capabilities that are increasingly enhanced by AI-driven detection, automation, and intelligent decision support. The position combines deep technical security engineering with forward-looking exploration of AI-enabled security systems, detection engineering, and autonomous or semi-autonomous security workflows. You will help shape how AI is used to improve security visibility, accelerate investigation, and continuously adapt to evolving threats. Working across multiple teams, you will be responsible for building scalable, intelligent, and adaptive security systems that evolve alongside both cyber threats and AI-enabled attack techniques. Core Skills Strong foundation in modern cyber security engineering and detection engineering principles. Experience with security monitoring platforms, SIEM systems, and alerting/detection pipelines. Strong understanding of identity and access management, endpoint security, logging, network security, and vulnerability management. Knowledge of security architecture principles and secure-by-design methodologies. Experience building automation and security workflows using Python, PowerShell, or similar tooling. Familiarity with AI-assisted security tools, machine learning concepts for detection, or data-driven security analytics. Understanding of how AI can be applied to threat detection, anomaly detection, investigation support, and security operations automation. Awareness of emerging AI-driven attack techniques, including adversarial AI and automated exploitation methods. Familiarity with security frameworks and standards such as NIST, CIS, ISO 27001, and GDPR. Strong analytical thinking with a structured, risk-based approach. Excellent communication skills with the ability to translate technical and AI-driven insights into actionable decisions.Responsibilities Design, implement, and continuously improve AI-enhanced security controls across enterprise environments. Design, implement, and continuously improve detection engineering pipelines, leveraging both traditional and AI-assisted approaches. Build and evolve intelligent monitoring systems that combine rule-based detection with behavioural and AI-driven analytics. Develop automation and AI-assisted workflows to improve alert triage, investigation speed, and operational efficiency. Work closely with engineering and security teams to integrate AI-enabled security capabilities into operational processes. Support incident investigations using advanced analytics, AI-assisted tooling, and structured threat analysis techniques. Conduct threat modelling and security architecture reviews with a focus on emerging AI-enabled risks and system complexity. Identify vulnerabilities and continuously improve remediation strategies using data-driven insights. Evaluate emerging cyber threats, including AI-generated attacks, autonomous malware, and adversarial machine learning techniques. Research, prototype, and implement AI-driven security capabilities to improve detection, response, and resilience. Design and maintain security standards, engineering patterns, and documentation for AI-enabled security systems. Support compliance and governance activities through automated evidence generation and control monitoring. Contribute to the long-term strategy for AI-driven security transformation and intelligent security operations.Experience & Qualifications Minimum 5+ years of experience in cyber security engineering, detection engineering, security operations, or related technical security disciplines. Proven experience designing, implementing, and continuously improving security controls in complex environments. Bachelor's degree in Cyber Security, Computer Science, Information Technology, or equivalent practical experience. Familiarity with AI/ML concepts applied to security use cases is highly desirable. Experience working with or building automation, analytics, or data-driven security solutions is strongly preferred. Relevant certifications are beneficial, such as CISSP, CCSP, GSEC, GIAC certifications, Security+, or equivalent. Experience in regulated or high-assurance environments is advantageous. Demonstrated curiosity and interest in AI, intelligent automation, and next-generation security technologies.The Team The Cyber Security team is responsible for protecting systems, digital assets, users, and data while enabling the organisation to operate securely at scale and speed. The team focuses on designing, implementing, and continuously improving intelligent security capabilities that integrate automation and AI to enhance visibility, detection quality, and response efficiency. Security is treated as an important and evolving system—continuously evolving through data, automation, and AI-assisted decision-making—rather than a static set of controls. We are a collaborative and forward-thinking organisation that values technical excellence, curiosity, and innovation. We believe the strongest security outcomes are achieved by combining human expertise with intelligent systems, automation, and AI-driven insights. What you'll be doing Designing and implementing AI-enhanced security and detection capabilities Continuously improving detection quality through data, automation, and machine intelligence Reducing manual effort through intelligent workflows and AI-assisted operations Strengthening visibility across complex environments using modern analytics approaches Building a security function that evolves alongside emerging AI-driven threats and technologiesInterested? Please apply now! Eligo Recruitment is acting as an Employment Business in relation to this vacancy. Eligo is proud to be an equal opportunity employer dedicated to fostering diversity and creating an inclusive and equitable environment for employees and applicants. We actively celebrate and embrace differences, including but not limited to race, colour, religion, sex, sexual orientation, gender identity, national origin, veteran status, and disability. We encourage applications from individuals of all backgrounds and experiences and all will be considered for employment without discrimination. At Eligo Recruitment diversity, equity and inclusion is integral to achieving our mission to ensure every workplace reflects the richness of human diversity

Strategic Project Director Location: London UK (travel required between sites) Clearance: You must hold active DV Clearance Role Overview Provide senior accountability for the consolidation of a Top Secret (TS) digital workplace, bringing desktop and deskside services from four agencies into a single, secure service model under a new contract. Working from bid stage through mobilisation and delivery, you will define the approach to integration and transition and oversee delivery of a complex, multi‑agency programme spanning technology, service operations, security, and adoption. The role focuses on stabilising, integrating, and optimising services while navigating differing security requirements, organisational cultures, and legacy environments through strong governance and assured execution. Key Responsibilities Own the transition and transformation approach, including roadmap, governance, and Target Operating Model (TOM). Shape the solution and commercial model with architects, finance, and legal, ensuring delivery viability within TS constraints. Lead executive stakeholder engagement, risk assessment, and dependency modelling. Lead a large, cross‑functional programme covering workplace technology, service operations, cyber assurance, identity, and change. Deliver a consolidated SIAM‑based operating model aligned to ITIL v4, integrating multiple suppliers and service towers. Drive technology rationalisation, including: Windows 11 endpoint and image strategy Intune / Configuration Manager Identity and access (AD / Entra ID, PAM, MFA) Secure collaboration, VDI, and remote access ITSM, CMDB, monitoring, EDR/XDR, and tooling consolidation Ensure TS security assurance and accreditation, working closely with cyber and accrediting authorities. Redesign service operations to improve automation, data‑driven support, and user experience. Lead people, culture, and adoption, aligning teams across agencies to new ways of working. Run programme governance (Boards, Design Authorities, CABs) with strong auditability. Track and realise benefits across cost, risk, performance, and user experience. Essential Experience Proven large scale technology or service transformations, ideally in digital workplace or end‑user compute. Proven delivery from bid through mobilisation, transition, transformation, and BAU handover. Experience operating in Top Secret / DV or equivalently regulated environments (government, defence, intelligence). Strong executive stakeholder management, including CISOs, CTOs, COOs, and Agency leadership. Demonstrated programme leadership delivering complex outcomes on time, on budget, and with assurance.Technical Background: Digital workplace / EUC: Windows 10/11, image management, device hardening, VDI. Endpoint management: Intune, Configuration Manager, MDM/MAM. Identity & security: AD / Entra ID, Zero Trust, MFA, PAM, EDR/XDR, DLP. Service management: ITIL v4, SIAM, ITSM platforms (e.g. ServiceNow). Secure cloud, collaboration, and restricted‑environment solutions

DevOps Engineer – SC cleared Permanent | Flexible | AWS | Terraform | SC Cleared At Peregrine, we’re always seeking Specialist Talent that have the ideal mix of skills, experience, and attitude, to place with our vast array of clients. From Business Analysts in large government organisations to Software Developers in the private sector – we are always in search of the best talent to place, now. The role: We are seeking an SC cleared DevOps Engineer to work as a forward deployed engineer, embedded within the Cyber Capability Unit. The role will support the design, build and deployment of AI powered solutions that strengthen cyber security and fraud prevention capabilities. You will work closely with engineers, product owners and stakeholders to understand operational needs, develop prototypes and deploy secure, reliable solutions within approved platforms and environments. This role directly supports the Cyber Resilience Centre’s mission and contributes to the wider security strategy by delivering practical, governed AI solutions that provide measurable operational value. Responsibilities: Cloud and Platform Integration • Design and deploy solutions in AWS cloud environments, • Use infrastructure as code to ensure repeatable and compliant deployments, • Ensure all solutions meet organisational governance, security and compliance standards CI/CD and Automation • Configure, manage and maintain GitLab CI pipelines, • Automate testing, build and deployment of infrastructure, applications and services, • Promote best practice DevOps ways of working across environments Testing and Quality • Implement unit, integration and performance testing for all components, • Ensure solutions are reliable, reproducible and stable across releases, • Support continuous improvement of testing practices Monitoring and Incident Response • Implement observability and monitoring tooling, • Track system performance and detect anomalies, • Support incident response, troubleshooting and root cause analysis in live environments Collaboration and Delivery • Work closely with engineers, analysts and stakeholders, • Translate requirements into working technical solutions, • Support deployment, handover and ongoing optimisation of delivered capabilities Skills & Experience: • Active SC clearance, • Strong experience deploying and operating solutions in AWS, • Infrastructure as code using Terraform, • CI/CD pipeline development using GitLab CI, • Experience with monitoring, logging and alerting tools, • Understanding of secure DevOps practices in regulated environments, • Experience working with large data stores or big data platforms Desirable skills: • Experience supporting AI or data driven platforms, • Knowledge of cyber security or fraud prevention domains, • Experience working within government or critical national infrastructure environments About Peregrine We build workforces that deliver tech and change programmes at leading UK organisations. By combining data science from Peregrine Intelligence, our industry-accredited Peregrine Academy, and market-leading attraction and diversity initiatives, we bridge capability gaps at all levels in public and private sector organisations. We work closely with our clients to understand their challenges and deliver flexible, long-term solutions that make a real difference. When you join Peregrine, you become part of a team that’s focused on growth, both yours, our clients’, and the sectors we support. You’ll also get access to a full range of benefits alongside your salary. How Specialist Talent Works As a permanent employee at Peregrine, you’ll be part of our Specialist Talent team. That means you’ll work on-site or remotely with our clients, supporting them on complex, high-impact projects in Data, Digital and Business Transformation. You’ll get the variety and challenge of consultancy work, with the stability and support of a permanent role. You’re not a contractor - you’re a valued member of our team, with access to all the same benefits, learning opportunities, and community. Find out more: peregrine.global or check out our LinkedIn page: peregrine-resourcing

Head of Information Security London (Hybrid – 2–3 days onsite) £90,000 - £95,000 + Generous bonus & benefits We’re looking for an experienced Head of Information Security to lead and mature our cyber and information security capability at a strategic level. This is a senior leadership role for someone already operating at Head of InfoSec level, with the confidence to shape strategy, influence stakeholders, and deliver pragmatic security outcomes in a growing organisation. The Role As Head of Information Security, you will own the organisation’s information and cyber security posture end‑to‑end. You’ll assess current maturity, define a clear security strategy, and lead its implementation across people, process, and technology. Working closely with senior leadership, small internal teams, and trusted third‑party vendors, you’ll ensure security is embedded, proportionate, and aligned to business objectives. Key Responsibilities Lead cybersecurity maturity assessments and define a clear, actionable roadmap for improvement Develop, implement, and continuously improve the Information Security strategy, policies, and standards Develop and Implement governance gaurdrails for AI usage. Act as the senior subject matter expert for information and cyber security across the organisation Manage and optimise third‑party security relationships, including suppliers, MSPs, and assurance partners Oversee security governance, risk management, and compliance activities Provide leadership and direction to a small internal team, supported by external vendors Engage with senior stakeholders to translate security risk into clear business impact and priorities Support audits, certifications, and assurance activities (e.g. ISO 27001, Cyber Essentials Plus) About You You’ll be a confident, hands‑on security leader who is comfortable operating at both strategic and operational levels. Essential experience: Currently operating (or recently operated) at Head of Information Security level Strong background in cybersecurity, strategy development, and delivery Experience managing small teams and coordinating work with external security vendors Proven track record managing third‑party security and supplier risk Strong stakeholder management skills, with the ability to influence at senior level ISO 27001 certification experience and/or Cyber Essentials Plus Broad security background rather than a narrow technical specialism Experience in professional services environments advantageous Artificial Intelligence in Security - How to utilise it and how to protect against it - GRC, Guardrails etc Why Join? Senior leadership role with genuine influence over security direction Hybrid working model with flexibility Competitive salary of up to £95,000 plus a generous bonus and benefits package Opportunity to shape and mature a security function rather than simply maintain one This is a fantastic opportunity with a truly awesome organisation and an opportunity not to be missed

A Head of Cyber Defend is required for this CNI organisation based in the Midlands. Practitioner CERT capabilities and several team management experience is required – meaning you will be technically capable and experienced within Incident Response & Detection, Threat Intelligence & Hunting, Vulnerability Management, Attack Surface Reduction, Cyber Analysis, etc. You will also have large team leadership and motivation experience in some of or all of the above areas. You will also have experience in strategic responsibilities – further developing and massaging strategy, including updating policies, procedures, and playbooks to respond to cyber threats. Develop and maintain cyber strategy, capabilities to stay ahead of emerging threats. Lead the Cyber Defence response for the organisation when under cyber-attack. Lead and manage multiple cyber security teams. Engage with stakeholders, report to snr management and collaborate with external partners. Lead the CSOC in monitoring and detecting cyber security threats and incidents in real-time. Collaborate with teams to conduct incident investigations and develop response plans. Lead proactive threat hunting initiatives. Manage vulnerability assessments and penetration testing programs. Develop and maintain threat intelligence capabilities. Essential experience includes: Extensive experience in managing cyber security teams and programs. In-depth knowledge of incident response, threat detection, and threat intelligence. Proficiency in cyber security tools, technologies and standards. Strong leadership, project management and communication skills. Analytical thinking, problem-solving, and decision-making abilities. Experience in red teaming, threat modelling and advanced adversarial simulation. Familiarity with national and international cyber security standards. Knowledge of cloud security, IoT security, and emerging technologies. Extensive experience in cyber security leadership and management. Proven experience in leading multiple cyber security teams and programs. Ideally familiar with CNI and OT technology, including SCADA, ICS, and PLC systems

When vulnerability volumes spike, organisations either react quickly or get exposed. This Cyber Security Vulnerability Analyst role sits right at the centre of that response - helping a major financial services environment identify risk, prioritise remediation, and strengthen enterprise-wide security controls across complex infrastructure and cloud platforms. We’re looking for 2 experienced contractors to support a large-scale vulnerability management programme following a major assessment phase. You’ll work across infrastructure, cloud, endpoints and applications, partnering with technical teams to reduce exposure and improve security posture in a fast-moving environment. What’s in it for you £600 per day OUTSIDE IR35 contract Long-term programme work within a complex financial services environment High-impact role supporting enterprise-wide cyber security initiatives Flexible London/remote working model Exposure to cloud, infrastructure, endpoint and application security operations Opportunity to work with leading management technologies including Qualys, Defender and ServiceNow Vulnerability Response Module Your responsibilities as Cyber Security Vulnerability Analyst Conduct scanning and analysis across infrastructure, cloud environments and applications using Qualys and related tools Assess, validate and prioritise vulnerabilities based on severity, exploitability and business impact Work closely with Infrastructure, Engineering, Cloud and DevOps teams to support remediation activity Track remediation progress, validate fixes and maintain accurate records Produce technical reports, metrics and executive summaries on remediation status and trends Integrate threat intelligence insights into vulnerability prioritisation and continuous improvement activities What we’re looking for in a Cyber Security Vulnerability Analyst Previous experience in vulnerability management within enterprise environments Strong technical knowledge of Qualys, Microsoft Defender and ServiceNow Vulnerability Response Module Experience working across endpoints, servers, Azure, AWS and application environments Ability to assess technical risk and support remediation planning across multiple technology teams Strong reporting and stakeholder communication capability within security-focused environments Working hours: Monday to Friday, standard business hours If you’re an experienced Cyber Security Vulnerability Analyst looking for a high-impact contract within a large-scale security programme, apply now. Candidate Source Ltd is an advertising agency. Once you have submitted your application it will be passed to the third party Recruiter who is responsible for processing your application. This will include holding and sharing your personal data, our legal basis for this is legitimate interest subject to your declared interest in a job. Our privacy policy can be found on our website and we can be contacted to confirm who your application has been forwarded to

Learning & Development Data Analyst.At Barchester Healthcare, we are committed to developing our people and creating a culture of continuous learning across our organisation.We are looking for a Learning & Development Data Analyst to join our L&D team and play a key role in ensuring the accuracy, in

Remote based - occasional travel to Hampshire offices.An exciting opportunity has opened for a Senior BI Analyst to join a growing and forward-thinking team.Following new leadership within the technology team and a number of upcoming projects, this is a great time to join a business investing in its

Data Analyst Course Programme – Job Guarantee Included Complete online training designed to take you from zero experience to your first data analyst role.Study part-time, build fundamental skills, and get dedicated job placement support until you're hired.Flexible financing options available, wit

A leading SaaS company in Greater London is seeking an Insights Analyst to join their team.This role involves extracting and analyzing data to support client campaigns and provide actionable insights.The ideal candidate will possess strong analytical skills, excellent attention to detail, and profic

Data Analyst Course Programme – Job Guarantee Included Complete online training designed to take you from zero experience to your first data analyst role.Study part-time, build fundamental skills, and get dedicated job placement support until you're hired.Flexible financing options available, wit

Trainee Cyber Security Course Programme – Job Guarantee Included Complete online training designed to take you from zero experience to your first Cyber Security role. The Outcome 93% of graduates secure cyber security roles within 3 months. Ready to start earning in Cyber Security? Limited spaces