Incident response jobs in United Kingdom

Our Mission At Palo Alto Networks® everything starts and ends with our mission: Being the cybersecurity partner of choice, protecting our digital way of life. Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are. Who We Are We take our mission of protecting the digital way of life seriously. We are relentless in protecting our customers and we believe that the unique ideas of every member of our team contributes to our collective success. Our values were crowdsourced by employees and are brought to life through each of us everyday - from disruptive innovation and collaboration, to execution. From showing up for each other with integrity to creating an environment where we all feel included. As a member of our team, you will be shaping the future of cybersecurity. We work fast, value ongoing learning, and we respect each employee as a unique individual. Knowing we all have different needs, our development and personal wellbeing programs are designed to give you choice in how you are supported. This includes our FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees, our mental and financial health resources, and our personalized learning opportunities - just to name a few! At Palo Alto Networks, we believe in the power of collaboration and value in-person interactions. This is why our employees generally work full time from our office with flexibility offered where needed. This setup fosters casual conversations, problem-solving, and trusted relationships. Our goal is to create an environment where we all win with precision. Job Description Your Career Palo Alto Networks is a world-class product management organization and continues to look for top-notch technical pro engineers to expand the team. As a Senior Technical Product Engineer at Palo Alto Networks, you will play a key role in providing detailed technical information to our partners, customers, and our employees. Be a self-starter who is eager to learn and experiment with new technologies, be able to work independently and as a teammate, identify sales challenges and address solutions as needed. As a Technical Product Engineer, you will play a key role in providing detailed technical information to our partners, customers, and our internal employees. You will be a strategic adviser to the business, driving valuable insight, guidance and feedback back into Palo Alto Networks. You will work across product teams to deliver this feedback Your Impact • Work cross-functionally with legal, sales, product management, and customer-facing teams to support innovation and execution., • Coordinate and lead projects that span multiple departments to drive alignment and deliver impactful outcomes., • Partner closely with Product Managers to provide feedback based on customer needs, field insights, and product gaps., • Drive cloud-native security innovation for the modern SOC by identifying and enabling high-value use cases., • Help design and deliver technical content for cloud security platforms, including integrations, guides, and automation examples. Create high-quality enablement materials that help customers and partners adopt, integrate, and scale security solutions effectively. Qualifications Your Experience • Proven ability to collaborate across functions, inspire teams and executives, and execute effectively in complex environments., • Strong communicator with excellent verbal and written skills, capable of engaging both technical and executive stakeholders., • 4+ years of experience with endpoint platforms, including hands-on work with forensics, EDR/SIEM, and incident response systems., • Familiarity with the security operations landscape, including SIEM, XDR, SOAR, ASM, and SOC workflows., • Experience in building SOC workflows, supporting incident response, and integrating security tools into enterprise environments., • At least 2 years of hands-on experience with one or more major cloud platforms (AWS, Azure, GCP), including knowledge of cloud-native security principles., • Experience with automation, scripting, and integration of security technologies in both cloud and on-prem environments., • Familiarity with securing cloud workloads using contextual risk signals and automated enforcement., • Knowledge of infrastructure-as-code (e.g., Terraform), CI/CD pipelines, and modern application architectures is a plus., • Demonstrated ability to manage cross-functional projects and priorities in a fast-paced, enterprise-scale setting., • Technically curious, highly motivated to master product details, and proactive in establishing best practices., • Strong work ethic, organizational skills, and a high degree of integrity. Additional Information The Team To stay ahead of the curve, it’s critical to know where the curve is, and how to anticipate the changes we’re facing. For the fastest growing cybersecurity company, the curve is the evolution of cyberattacks, and the products and services that proactively address them. Our TPE team helps us do just that. This team provides behind-the-scenes support for our products by being a source of information for our systems engineers, staying on top of the environment we sell in, and helping to implement technical solutions based on our client’s feedback and needs. As threats and technology evolve, we stay ahead to accomplish our mission. Our Commitment We’re problem solvers that take risks and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at . Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. Is role eligible for Immigration Sponsorship?: Yes

Our Mission At Palo Alto Networks® everything starts and ends with our mission: Being the cybersecurity partner of choice, protecting our digital way of life. Our vision is a world where each day is safer and more secure than the one before. We are a company built on the foundation of challenging and disrupting the way things are done, and we’re looking for innovators who are as committed to shaping the future of cybersecurity as we are. Who We Are We take our mission of protecting the digital way of life seriously. We are relentless in protecting our customers and we believe that the unique ideas of every member of our team contributes to our collective success. Our values were crowdsourced by employees and are brought to life through each of us everyday - from disruptive innovation and collaboration, to execution. From showing up for each other with integrity to creating an environment where we all feel included. As a member of our team, you will be shaping the future of cybersecurity. We work fast, value ongoing learning, and we respect each employee as a unique individual. Knowing we all have different needs, our development and personal wellbeing programs are designed to give you choice in how you are supported. This includes our FLEXBenefits wellbeing spending account with over 1,000 eligible items selected by employees, our mental and financial health resources, and our personalized learning opportunities - just to name a few! At Palo Alto Networks, we believe in the power of collaboration and value in-person interactions. This is why our employees generally work full time from our office with flexibility offered where needed. This setup fosters casual conversations, problem-solving, and trusted relationships. Our goal is to create an environment where we all win with precision. Job Description Your Career Palo Alto Networks is a world-class product management organization and continues to look for top-notch technical pro engineers to expand the team. As a Senior Technical Product Engineer at Palo Alto Networks, you will play a key role in providing detailed technical information to our partners, customers, and our employees. Be a self-starter who is eager to learn and experiment with new technologies, be able to work independently and as a teammate, identify sales challenges and address solutions as needed. As a Sr. TPE, you will play a key role in providing detailed technical information to our partners, customers, and our internal employees. You will be a strategic adviser to the business, driving valuable insight, guidance and feedback back into Palo Alto Networks. You will work across product teams to deliver this feedback Your Impact • Drive innovation within the modern Security Operations Center (SOC) by developing content and capabilities aligned with Cortex and detection-focused workflows., • Collaborate with legal, sales, product, and customer-facing teams to translate security operations needs into actionable product improvements., • Lead and coordinate cross-functional initiatives across product management, engineering, and field teams for high-impact security use cases., • Build high-quality content for the Cortex Marketplace including detection rules, parsers, dashboards, and other SOC-enabling artifacts., • Provide structured product feedback to influence roadmap decisions based on real-world SecOps challenges and opportunities., • Create detailed documentation and usage guides tailored for analysts, detection engineers, and security practitioners., • Promote operational excellence by designing scalable detection and response workflows grounded in industry best practices and threat-informed defense. Qualifications Your Experience • Ability to inspire and align teams across functions, paired with strong execution and delivery skills., • 2+ years of experience in security operations, threat detection, incident response, or detection engineering roles, • Solid understanding of SIEM, log analytics, data normalization, and detection lifecycle management (rule creation, tuning, suppression, enrichment), • Hands-on experience with XSIAM or similar platforms (Splunk, QRadar, Sentinel, etc.) is a strong plus, • Strong technical writing and communication skills, with the ability to convey complex ideas clearly to both technical and non-technical audiences, • Skilled in scripting or automation (Python, JavaScript, etc.) for detection development or incident investigation tasks, • Experience managing multiple projects or programs in dynamic, fast-paced environments with cross-functional visibility, • Familiarity with cloud infrastructure (AWS, Azure, GCP), especially as it relates to telemetry ingestion, detection engineering, or automated response — a significant advantage, • Experience with CNAPP solutions (e.g., Prisma Cloud, Wiz, Orca) and integrating cloud posture, workload protection, or entitlement data into SecOps workflows — an advantage, • Bonus: Exposure to infrastructure-as-code, CI/CD pipelines, or cloud-native services and their intersection with SecOps Additional Information The Team To stay ahead of the curve, it’s critical to know where the curve is, and how to anticipate the changes we’re facing. For the fastest growing cybersecurity company, the curve is the evolution of cyberattacks, and the products and services that proactively address them. Our TPE team helps us do just that. This team provides behind-the-scenes support for our products by being a source of information for our systems engineers, staying on top of the environment we sell in, and helping to implement technical solutions based on our client’s feedback and needs. As threats and technology evolve, we stay ahead to accomplish our mission. Our Commitment We’re problem solvers that take risks and challenge cybersecurity’s status quo. It’s simple: we can’t accomplish our mission without diverse teams innovating, together. We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at . Palo Alto Networks is an equal opportunity employer. We celebrate diversity in our workplace, and all qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines.

Harrington Starr are supporting a global financial services organisation to help them hire a Security Operations Manager to manage a hybrid in-house/ outsourced function. The role will involve providing both technical and strategic leadership. Key accountabilities involve: • Working with the CISO to help evolve the Sec Ops function, • Management of an in-house team and the outsourced provider, • Acting as the central POC\ escalation point for all major cyber incidents, • Collaborating with other cyber functions – GRC, architecture and engineering, • Working with stakeholders across the business – technical and non-technical, • Vendor management – including staying abreast of the latest tools, • A good knowledge of the current and evolving threat landscape You will need: • A good background in Security Operations\ Incident Response in a managerial or lead role, • Strong technical knowledge, • Demonstrable stakeholder management experience, • A technical background in infrastructure, security engineering or penetration testing preferred Please send your CV for immediate consideration.

The role will involve working in their global security team and will be responsible of helping develop effective security controls. Key responsibilities will include: • Working closely with the in-house security operations team to drive world class threat detection, • Building effective detection use cases within the chosen SIEM while minimizing false positives., • Utilize online resources for researching and collecting threat intelligence to enhance the SOC’s abilities to detect cyber-attacks., • Utilize telemetry available throughout the environment to build and improve detection capabilities., • Testing of existing and new detection use cases, • Participation in security incidents/ investigations Key skills needed for the role: • Experience of SIEM administration – Splunk or Exabeam preferred but other SIEM tools considered, • Broad technical information security knowledge including networking, malware analysis, incident response and, • Knowledge of information security protection, detection and authentication systems, • Understanding of tools, techniques and procedures that attackers use to compromise organizations, ideally from direct experience., • Basic python\ AWS experience Please send your CV for immediate review

Security Orchestration, Automation & Response (SOAR) Engineer | Palo Alto Cortex XSOAR, Python, Rest API's, Linux & Windows | Up to £1000 Inside | 2 Days p/ week in London We are seeking an experienced Security Orchestration, Automation & Response (SOAR) Engineer to strengthen cyber threat detection and automation capabilities within a leading financial organisation. This role combines hands-on technical expertise with strategic security automation and orchestration across modern platforms. You will work closely with detection, response, and engineering teams to design, build, and optimise security workflows — enabling faster, more effective incident response and reducing manual effort through automation. Key Responsibilities: • Develop and enhance security detections and automations across SOAR platforms (ideally Palo Alto Cortex XSOAR), • Create and maintain playbooks and integrations to improve incident response and operational efficiency, • Collaborate across teams to improve detection coverage and response workflows, • Monitor emerging threats and translate attacker TTPs into actionable detections and automated mitigations Key Skills & Experience: • Hands-on experience with Palo Alto Cortex XSOAR or other SOAR platforms, • Strong knowledge of threat detection and response engineering, • Familiarity with MITRE ATT&CK framework, • Proficiency in Python for automation and integration development, • Experience with query languages (KQL or similar), • Understanding of REST APIs and ability to develop and consume them, • Experience working in Azure environments, • Strong background in Windows, Linux, and macOS administration Security Orchestration, Automation & Response (SOAR) Engineer | Palo Alto Cortex XSOAR, Python, Rest API's, Linux & Windows | Up to £1000 Inside | 2 Days p/ week in London

Business Resilience Manager/ 3rd Party-Assurance Specialist Are you Ready to Lead Technology / Vendor Business Resilience / Third Party Governance, Risk& Assurance for my established Insurance client? Our Insurance client who are at the forefront of major transformation. With strong financial backing and a bold vision for the future, my client is continuing to invest heavily in Technology, Data, and Operational excellence. As a result, my client is looking to build a modern governance and assurance function — especially those that have strong Third Party Risk Business Resilience & Assurance expertise to help shape it. Why This Role Stands Out: Are you ready to take ownership of resilience strategy in a complex, regulated financial services environment? You will be leading the design and drive frameworks that protect operations, clients, and policyholders from disruption. Why This Role Matters: This is a high-impact opportunity to: • Lead the development and continuous improvement of Business Resilience, Business Continuity, and Third-Party Risk frameworks., • Oversee critical third-party relationships, especially in technology and enterprise services., • Deliver scenario testing, incident response, and regulatory reporting that informs senior leadership., • Collaborate with internal teams, clients, and market stakeholders to ensure preparedness and compliance. We’re looking for someone with: • Deep knowledge of FCA/PRA Operational Resilience and Third-Party Risk Management (PS21/3, SS1/21, SS2/21)., • Experience in supplier governance, continuity planning, and crisis management., • Confidence to advise senior stakeholders and lead cross-functional initiatives., • A proactive, calm approach—especially under pressure., • Experience in the Lloyd’s or wider insurance market is a plus. Next Steps If you’re looking to lead the Resilience Strategy for my forward-thinking client, then please APPLY NOW for immediate consideration!!!!

Kerberos Specialist – £660/day (Inside IR35) – Hybrid, London MUST BE SC CLEARED - ACTIVE SC CLEARANCE IS REQUIRED FOR THIS ROLE!!! We’re seeking a Kerberos expert to lead authentication design, implementation, and troubleshooting across complex enterprise environments. You’ll be the go-to authority on Kerberos — able to explain, demonstrate, and optimise it with clarity and precision. Key Responsibilities • Act as the subject matter expert for all Kerberos-related topics., • Design, configure, and troubleshoot Kerberos authentication across Windows, Linux, and AD environments., • Deliver customer demos, workshops, and training, translating deep technical concepts into clear, practical insights., • Support incident response and root cause analysis for Kerberos and authentication issues., • Proven expert-level knowledge of Kerberos (SPNs, delegation, ticketing, cross-realm trust)., • Strong background in Active Directory, Windows Server security, and Linux Kerberos integration., • Confident communicator and presenter, comfortable engaging with customers and technical teams alike., • Hands-on experience with authentication troubleshooting tools (Wireshark, klist, setspn, event logs). Rate: £660 per day Status: Inside IR35 Location: London

About us Vida Bank provides competitive savings products through Vida Savings and specialist mortgage solutions through Vida Homeloans. Our mortgage business supports Buy to Let (BTL) and residential borrowers (ROO) who find themselves underserved elsewhere. Our mortgage customers range from Buy to Let investors, to the self-employed and customers with multiple jobs. Our savings proposition is delivered online via our website, and is focussed on providing savers with fair, transparent and competitive rates. Our typical customers are active savers, who tend to look beyond their current account provider for savings accounts. Our business model and strategy are underpinned by our core purpose to ‘Help More People Find a Place to call Home’. We are here to help the under-served, especially those with more nuanced personal circumstances or borrowing needs who are not able to access a mortgage from a mainstream mortgage lender. Working exclusively with intermediary partners, we combine cutting-edge technology with skilled and caring underwriting expertise to solve complex customer problems. As a fully regulated UK based bank with ambitious growth aspirations, we recognise the importance of having a clearly articulated culture strategy and the need to actively manage how it embeds in the business together with the behaviours which exemplify it. As a recognised Best Companies Top 100 mid-sized company to work for in the UK and a finalist at the Financial Reporter Women’s Recognition Awards, we take pride in our diverse workforce, championing both ethic and gender diversity through our EDI commitments. Having met the target set by being a member of the HM Treasury Women in Finance Charter we have 50% of senior management roles filled by women. With offices in London, Newcastle and Skipton, we bring our teams together regularly to collaborate and empower our colleagues to have more choice around when and where they work on the days they are not in the office, with colleagues working remotely in various locations across the UK. Our Culture We are proud to have built a culture founded on an ethos of caring, and that sits at the heart of our Vida Values, driving the way we run our business, support our customers and other stakeholders on a daily basis. We genuinely care about delivering the right outcomes for all our stakeholders who we consider through the cultural framework as our customers, colleagues, company and communities that we operate in. By Joining Vida you will have a sense of belonging in what is a diverse and collaborative environment, where you will be empowered to take responsibility for driving delivery. We embrace a diversity of backgrounds and experiences in our people, in the deeply held belief that better outcomes are achieved for customers when our colleagues are better placed to empathise with and understand their unique circumstances. From application to interview, we place inclusion at the heart of all we do. Role Overview: The Systems Developer role is a hands-on role which will work closely with the business to develop and maintain our end-to-end Mortgage Ecosystem. There will be a split between BAU activities to support the live environment and project focused development to drive product innovation. The ideal candidate will have 3+ years’ experience in technology and a minimum of 3 years of specific experience in technical development ideally within Financial Services and having worked on a Mortgage platform. This role will be comfortable working withing the full breadth of the business, working closely with stakeholders including the C-suite. Key Responsibilities: • Work closely with senior stakeholders in the business to consult on business change requests/business requirements and translate these into technical requirements., • Manage and monitor tickets incoming from the business relating to issues and requests for both the Originations Mortgage platform and the Mortgage Retentions platform., • Develop a solid understanding of the solution being designed and built., • Plan, coordinate, and execute deployments across environments, ensuring smooth transitions and minimal downtime., • Support tertiary services that integrate to the mortgage platforms, collaborating with other technical teams and 3rd parties where required., • Write and maintain technical knowledge base articles and troubleshooting guides., • Ensure consistent service quality and adherence to internal standards, including Technical Change Management and Incident Management., • Collaborate on incident response activities, ensuring timely resolution and communication., • Have a good understanding of the Change management process., • Work and collaborate with other areas of the business to help drive cross functional projects., • Maintain awareness of regulatory obligations and ensure service desk practices align with financial services standards. Requirements: • Advanced level (knowledge and experience) of programming languages and methodologies., • Extensive knowledge of MS SQL Server., • Extensive knowledge of JSON, XML., • Extensive experience of writing and using Use Cases., • Excellent ability to provide near accurate estimates and plan ahead., • Experience working in all phases of SDLC - Analyse, Design, Develop, Test, Deploy, Monitor, Optimise., • Experience in analysing system/application performance, utilising appropriate toolsets to gain insights., • Experience with incident management and change control processes., • Experience working in Agile (SCRUM) projects., • Highly numerate and literate, with the ability to produce top quality written specifications., • Experience working in Financial Services; Mortgage industry experience is highly desirable, • Excellent analytical skills. Our Values Our values are well established and recognised throughout our organisation. They provide a frame of reference for the behaviours expected from our colleagues every day. We find ways to break old conventions, especially those which cause exclusion or customer harm. We look for these qualities when hiring new talent into the organisation, and they underpin our approach to personal development and performance management for all our people. At the heart of this is the fact we care about our Customers, Our Colleagues and our Communities. We are: Visionary- We innovate and break old habits, thinking big and pushing boundaries together as one team Inclusive - We value each other’s differences and work to see people for who they really are Dynamic - We are flexible and fast, cutting through complexity and never accepting second best Authentic - We are honest and genuine, what you see is what you get Benefits We offer a comprehensive benefits package to support our employees’ professional and personal needs. Further details can be provided upon application.

CISO | Global SaaS | PE-Backed | Build & Lead Security Function A high-growth global SaaS business with 600 people worldwide (130 in Engineering) is entering a critical phase: consolidating multiple products and scaling from ~$100m ARR to ~$200m over the next three years. Backed by a leading private equity firm, this is a rare opportunity to own and build the security function from scratch, shaping strategy, operations, and security culture across the company. We’re looking for a hands-on, technically credible CISO who thrives at the intersection of strategy and execution. You’ll define the security agenda, build the team, implement robust practices across engineering and product teams, and create a culture where security is embedded into every aspect of the business. You’ll need experience scaling security in SaaS, ideally in PE-backed environments, and a track record of delivering measurable improvements across people, processes, and technology. Reporting to the CTO, you’ll take full ownership of the security function, partnering closely with Engineering, Product, and leadership to protect growth, enable innovation, and strengthen enterprise resilience. Strategic initiatives include: • Conduct a full security assessment and define a phased roadmap for remediation and long-term controls, • Implement and enforce policies, processes, and standards, ensuring compliance with ISO27001, SOC2, and contractual obligations, • Build monitoring and incident-response capabilities (SOC/MDR) for proactive detection and rapid response, • Establish operational security practices, including safe handling of production data and consistent risk management, • Drive a security-first culture across engineering and product teams, embedding accountability and awareness, • Lead resilience initiatives such as ransomware drills and compliance checks for global data residency requirements, • Serve as the main security contact for customers, providing confidence and addressing critical security questions Who we’re looking for: • Proven experience leading security in SaaS, ideally PE-backed, across multiple regions including North America, • Hands-on technical expertise in cloud and infrastructure security, incident management, penetration testing, and remediation, • Deep knowledge of ISO27001, SOC2, and data residency requirements, with experience embedding and maintaining compliance, • Skilled at modernising security culture, implementing scalable processes, and embedding accountability across distributed teams, • Comfortable in technical discussions, able to engage in architecture reviews and tooling decisions, • Proactive, curious, and outcomes-focused - able to anticipate risks, solve complex problems, and drive continuous improvement Location & Package: London HQ, hybrid (3 days in-office). Strong package with an attractive equity opportunity.

Humanoid is the first AI and robotics company in the UK, creating the world’s most advanced, reliable, commercially scalable, and safe humanoid robots. Our first humanoid robot HMND 01 is a next-gen labour automation unit, providing highly efficient services across various use cases, starting with industrial applications. Our Mission At Humanoid we strive to create the world’s leading, commercially scalable, safe, and advanced humanoid robots that seamlessly integrate into daily life and amplify human capacity. Vision In a world where artificial intelligence opens up new horizons, our faith in its potential unveils a new outlook where, together, humans and machines build a new future filled with knowledge, inspiration, and incredible discoveries. The development of a functional humanoid robot underpins an era of abundance and well-being where poverty will disappear, and people will be able to choose what they want to do. We believe that providing a universal basic income will eventually be a true evolution of our civilization. Solution As the demands on our built environment rise, labour shortages loom. With the world’s workforce increasingly moving away from undesirable tasks, the manufacturing, construction, and logistics industries critical to our daily lives are left exposed. By deploying our general-purpose humanoid robots in environments deemed hazardous or monotonous, we envision a future where human well-being is safeguarded while closing the gaps in critical global labour needs. About the Role As IT Operations Lead, you will take end-to-end ownership of Humanoid’s IT infrastructure and platforms, building the foundations of a secure, modern, and scalable environment. This is a hands-on leadership role, where you will personally drive day-to-day operations in the early stages while designing the architecture, processes, and vendor landscape to support Humanoid’s ambitious growth. As the company scales, the role will evolve into leading a high-performing operations team, setting the strategic direction for infrastructure, platforms, and productivity tooling. Working closely with the Cyber Security Lead, ITSM Lead, and the Product/Robotics teams, you will ensure IT is a true enabler of Humanoid’s mission, combining immediate reliability with long-term scalability. What You’ll Do • Infrastructure Ownership, • Manage all aspects of IT infrastructure including cloud platforms (AWS/Azure), networking, storage, endpoint management, and backup/disaster recovery., • Developer & Collaboration Platforms, • Own and help optimise developer tooling (GitHub/GitLab, CI/CD, dev/test environments) and collaboration/productivity platforms (Google Workspace, Atlassian, Slack/Chat)., • Operational Roadmap, • Define and execute a roadmap that balances immediate stability with future scalability, ensuring IT grows in lockstep with Humanoid’s trajectory., • Identity & Access, • Design and enforce IAM frameworks, device policies, and MDM solutions that provide security without compromising agility., • Cross-Functional Collaboration, • Partner with Product/Robotics teams to integrate IT requirements into design, testing, and delivery; collaborate with Cyber Security Lead to embed controls; and align with ITSM Lead to ensure smooth service delivery., • Standards & Processes, • Establish and maintain operational standards, policies, and processes that are lightweight but audit-ready, supporting both speed and compliance., • Vendor & Partner Management, • Select, negotiate with, and manage key infrastructure and SaaS vendors; optimise cost and performance., • Monitoring, Performance & Reliability, • Implement monitoring, observability, and reporting across infrastructure and platforms to ensure uptime, resilience, and scalability., • Incident Response, • Proven experience in IT operations roles within dynamic, high-growth environments., • Hands-on expertise across cloud platforms (AWS/Azure), networks, and endpoint management., • Strong track record in implementing IAM, MDM, and device policies at scale., • Experience managing collaboration/productivity tooling (Google Workspace, Atlassian, Slack/Chat) and developer platforms (CI/CD, GitHub/GitLab)., • Demonstrated ability to define and execute operational roadmaps that balance near-term needs with long-term scalability., • Strong vendor and stakeholder management skills, including contract negotiation., • Familiarity with core cyber security principles and ability to partner effectively with security specialists., • Excellent communication and influencing skills; able to bridge technical and non-technical stakeholders., • Comfortable in a start-up/scale-up environment: hands-on, adaptable, proactive, and ownership-driven., • Desirable, • Experience supporting product development environments (robotics, IoT, AI, or other R&D-heavy contexts)., • Hands-on experience effecting tangible/measurable operational efficiencies through the deployment of AI solutions, • Knowledge of ITIL or other IT service management frameworks, particularly incident/change management., • Exposure to compliance frameworks such as ISO 27001, SOC2, or NIST., • Competitive salary plus participation in our Stock Option Plan., • Work mode: office full time, Paddington district (London) – 5 min walk from Paddington station – 5 Merchant Sq, London W2 1AY, • Paid vacations., • Travel opportunities to our Vancouver and Boston offices., • Office perks: free lunches., • Freedom to influence the product and own key initiatives, • Collaboration with top‑tier engineers, researchers, and product experts in AI and robotics, • Startup culture prioritizing speed, transparency, and minimal bureaucracy.

Cyber Security and IT Manager • Location: London, UK, • Start Date: Q4 2025/ Q1 2026, • Type: Permanent An exciting opportunity has arisen for an experienced Cyber Security and IT Manager to join a major international infrastructure project that is creating the first direct power link between Europe and Great Britain. This energy initiative is one of the largest of its kind globally, and will play a vital role in enhancing energy security, integrating renewables, and supporting the European energy transition. With construction well underway, the project is now seeking a dedicated professional to lead its cyber security and IT strategy through delivery and into operations. You’ll be joining a highly motivated international team of around 30 professionals based in the UK and Germany. Key Responsibilities: • Develop and implement a comprehensive cyber security strategy aligned with regulatory requirements and best practices., • Build and maintain an ISO/IEC 27001-compliant Information Security Management System (ISMS)., • Ensure compliance with UK and German regulations including NIS/NIS2 and IT-SiKat., • Lead cyber risk management, incident response, and business continuity planning., • Oversee outsourced IT and cyber security services, including contract and SLA management., • Advise senior leadership on cyber and IT matters, reporting directly to the Chief Operating Officer., • Coordinate with regulators and ensure readiness for inspections and reporting., • Promote cyber awareness and deliver internal training across the organisation. Skills & Experience: • Strong knowledge of cyber security frameworks (e.g. ISO/IEC 27001), governance, and risk management., • Proven experience implementing ISMS and managing outsourced IT/security services., • Familiarity with NIS/NIS2 obligations and regulatory compliance in the UK and Germany., • Excellent communication skills with the ability to engage stakeholders at all levels., • Experience in the energy or utilities sector is advantageous but not essential., • Fluency in English required; German language skills are a plus. Additional Information: • The role is based in London with flexible working arrangements., • Occasional travel to UK and German sites will be required., • An on-call function may be required post-operations. This is a unique opportunity to take ownership of cyber security and IT strategy within a high-impact international energy project. You’ll be at the forefront of securing critical infrastructure, working with senior leadership, and shaping systems that support the future of European energy. If you're looking for a role that combines strategic influence with hands-on delivery in a dynamic, cross-border environment, this could be the perfect next step.

IT Security Engineer Feltham (Hybrid) £50,000 Base + Benefits Overview The IT Security Engineer is responsible for designing, implementing, and maintaining the security controls that protect the organization’s systems, networks, and data. This role works closely with IT, DevOps, and business teams to ensure that security is embedded throughout technology operations and architecture. The IT Security Engineer is key to detecting, preventing, and responding to cybersecurity threats in a proactive and efficient manner. Key Responsibilities: Security Architecture & Implementation • Design, deploy, and manage security solutions including firewalls, intrusion detection/prevention systems, endpoint protection, SIEM, and identity management platforms., • Implement secure network architecture and enforce segmentation and least-privilege access controls., • Support secure cloud environments across Azure, AWS, or GCP (e.g., IAM, security groups, encryption, KMS). Threat Detection & Incident Response • Monitor and analyze security alerts and network traffic for threats or suspicious activity., • Lead or support incident response activities: investigation, containment, eradication, recovery, and reporting., • Conduct root cause analysis and implement security hardening improvements. Vulnerability & Risk Management • Run regular vulnerability scans and penetration testing activities; track remediation of findings., • Evaluate risks and recommend security enhancements or compensating controls., • Maintain asset inventories and ensure patching and configuration baselines are followed. Security Governance & Compliance • Contribute to maintaining security standards and aligning with frameworks such as ISO 27001, NIST, CIS, or SOC 2., • Support audits, evidence collection, and compliance reporting (e.g., GDPR, PCI-DSS)., • Develop and maintain documentation for policies, procedures, architecture, and runbooks. Collaboration & Knowledge Sharing • Work with IT operations, cloud, and development teams to embed security in system and application designs., • Provide expert security guidance during solution design, procurement, and change reviews., • Support security awareness training and communicate best practices to employees. Qualifications • Education: Bachelor’s degree in information security, Computer Science, Networking, or a related field., • Experience: 3+ years’ experience in cybersecurity, network engineering, or IT infrastructure security roles., • Certifications (Preferred): CompTIA Security+, CEH, OSCP, CISSP, CCSP, Azure/AWS security certifications. Skills & Competencies • Strong knowledge of network security (TCP/IP, VPNs, DNS, firewalls)., • Experience with SIEM tools (e.g., Splunk, Sentinel, QRadar) and EDR platforms., • Familiarity with scripting or automation (PowerShell, Python, Bash)., • Understanding of secure cloud architecture and Zero Trust principles., • Ability to analyze complex technical issues and communicate clearly to technical and non-technical audiences.

ROLE OVERVIEW // We are seeking a proactive and detail-oriented Service Management Analyst to join our IT Service Management team within Technology. This role is pivotal in ensuring the stability and resilience of our IT services through effective Problem Management, Incident and Major Incident Management, and providing cover for our Change Management processes. You will work closely with technical teams, service owners, and stakeholders to drive root cause analysis, manage high-impact incidents, and support the governance of change activities. This is a hands-on role requiring strong analytical skills, excellent communication, and a solid understanding of ITIL practices. KEY RESPONSIBILITIES // The key responsibilities of this role are set out below and there may be others which are not listed. You may be required on occasion to work outside our normal working hours of 9:30am to 5:30pm. Problem Management • Own and manage the end-to-end Problem Management process in alignment with ITIL v4 practices., • Proactively identify and log problems based on incident trends, monitoring data, and stakeholder feedback., • Facilitate and lead Root Cause Analysis (RCA) sessions using structured methodologies (e.g., 5 Whys, Fishbone, Kepner-Tregoe)., • Maintain and update the Known Error Database (KEDB) and ensure visibility of workarounds and permanent solutions., • Collaborate with technical teams to define and implement corrective actions and preventive measures., • Monitor and report on problem resolution progress, ensuring timely closure and documentation., • Drive continual service improvement (CSI) initiatives based on problem insights and service performance data., • Ensure problems are prioritised based on business impact and risk and escalated appropriately when necessary., • Conduct regular problem reviews with stakeholders to ensure accountability and progress. Incident & Major Incident Management • Own and manage the Incident Management process to ensure swift restoration of normal service operations with minimal disruption., • Act as the primary coordinator for major incidents, ensuring structured and timely response across resolver teams., • Lead major incident bridges, ensuring clear communication, rapid decision-making, and effective stakeholder engagement., • Ensure incidents are correctly categorised, prioritised, and assigned in accordance with business impact and urgency., • Maintain high-quality incident records, including timelines, actions taken, and resolution details., • Drive post-incident reviews (PIRs) to identify root causes, document lessons learned and ensure follow-up actions are tracked and completed., • Integration with the Problem Management processes to ensure recurring incidents are investigated and addressed., • Monitor incident trends and performance metrics to identify opportunities for service improvement., • Ensure compliance with SLAs and OLAs, escalating breaches and risks appropriately., • Provide regular incident reporting and analysis to stakeholders, including dashboards and executive summaries., • Champion a customer-focused approach to incident handling, ensuring timely updates and clear communication throughout the lifecycle., • Support continual improvement of the Incident Management process, aligning with ITIL v4’s Service Value System (SVS) and guiding principles. Change Management (cover) • Provide support and cover for Change Management processes during absences or peak periods., • Review and assess change requests for risk, impact, and readiness as per the TCAB and CAB policy and process., • Participate in and lead (where required and necessary) Technical Change Authority Board (TCAB) and Change Authority Board (CAB) meetings., • Ensure changes are implemented with minimal disruption and in accordance with governance standards. CANDIDATE PROFILE // Candidates for this position must have: • Proven and demonstrable experience in an IT Service Management role, ideally within a medium-to-large enterprise (Legal)., • ITIL v4 Foundation Certification or equivalent experience (required)., • Additional ITIL modules or certifications (e.g., Problem Management, High Velocity IT) are desirable but not essential., • Strong understanding of ITIL v4 practices, particularly Problem, Incident, and Change Management., • Excellent analytical and troubleshooting skills., • Confident communicator with the ability to engage stakeholders at all levels., • Experience using ITSM tools (e.g., ServiceNow, BMC Remedy, Cherwell, TOPdesk etc.)., • Calm under pressure and able to manage multiple priorities., • Strong documentation and reporting skills., • A continuous improvement mindset with a passion for service excellence. We welcome applications irrespective of race, colour, ethnic or national origin, disability, sex, gender identity, sexual orientation, age, religion, belief or marital status.

IT Cyber Security Analyst Ref: YC46941 A highly successful IT and telecommunications services company is currently recruiting an IT Cyber Security Analyst (Threat Intelligence Analyst) to work at their clients site in London. In this role, you will be responsible for identifying, analysing, and communicating cyber threats to support proactive defence strategies. The ideal candidate should have expertise in threat intelligence analysis, collaboration across teams, familiarity with security tools, and strong analytical skills. ELIGIBLE APPLICANTS: • (O) Eligible visa: Permanent residence, Spouse, Partner, Working holiday, Graduate VISA SUPPORT: No TYPE: 6 months rolling contract, full-time WORKING HOURS: Mon-Fri 9:00-17:00 SALARY: up to £54k, depending on experience START: Nov-Dec 2025 LOCATION: London (office-based) Cyber Security Analyst Main Responsibilities: • Monitor and analyse the global threat landscape to identify emerging risks, adversary tactics, and trends relevant to the organization's business and technology environment, • Collaborate with Red Team, Blue Team, and Penetration Testing teams to integrate threat intelligence into testing scenarios using Breach & Attack Simulation (BAS) platforms and enhance defensive strategies, • Act as a liaison between threat intelligence and offensive security teams to ensure alignment on threat modelling and adversary simulation exercises, • Support threat hunting activities by providing contextual intelligence and working alongside hunt team members, • Conduct threat modelling of threat actors, including their capabilities, motivations, and potential impact, • Leverage the MITRE ATT&CK framework to map threat actor behaviours and support detection engineering, • Develop and maintain threat profiles, attack surface assessments, and adversary emulation plans, • Collaborate with global stakeholders across regions (Japan, EMEA, Americas, APAC, India) to align threat intelligence requirements, deliverables, and operational priorities, • Deliver timely, high-quality threat briefings and risk assessments to operational stakeholders, • Drive continuous improvement of threat intelligence processes, tooling, and automation, • Participate in incident response investigations, providing threat context and attribution support, • Maintain awareness of global regulatory and compliance requirements related to threat intelligence and offensive security operations, • Ad hoc requests from your line manager Cyber Security Analyst Ideal Candidate: • At least 5 years of experience in threat intelligence, cybersecurity operations, or penetration testing, • Ability to collaborate across technical teams, including Red/Blue teams and SOC, • Familiarity with threat intelligence platforms (TIPs), SIEMs, and threat data enrichment tools, • Experience using Breach and Attack Simulation (BAS) platforms, • Strong understanding of adversary tactics, techniques, and procedures (TTPs), MITRE ATT&CK framework, and threat modelling, • Hands-on experience with penetration testing tools such as Metasploit Framework, Burp Suite, Kali Linux, and Pentera, • Experience producing threat reports and briefings, • Business level fluency in English, • Japanese, Cantonese, Mandarin language would be advantageous due to the culture understanding, • Analytical and detail-oriented with a strong sense of curiosity, • Collaborative and team-focused, with a proactive approach to cross-functional engagement, • Able to work independently and manage multiple priorities in a fast-paced environment, • High integrity and discretion when handling sensitive information, • Strong cultural awareness and ability to work effectively in a global organization, • A calm approach, with the ability to perform well under pressure ** All applicants for the Cyber Security Analyst must have the right to work in the country as the Company is not able to offer visa support. *When contacting us, please include the job reference number (Ref: YC46941) at the top of your message. If your application is successful, you will be contacted within two business days. We regret that due to the high volume of applications we receive we cannot provide feedback on individual CVs.

A leading multi-strategy investment firm is seeking a Senior AI Engineer to join a high-impact Applied AI team focused on building next-generation tools that enhance decision-making across the investment lifecycle. Operating at the intersection of finance and machine intelligence, the team is responsible for developing production-grade AI systems that empower portfolio managers, analysts, and researchers with intelligent, data-driven capabilities. About the Role This is a senior-level engineering position within a cross-functional team that blends AI research, software engineering, and large-scale data integration. You'll play a key role in designing and deploying robust AI infrastructure, with a particular focus on knowledge representation, intelligent retrieval systems, and the seamless integration of AI models into production environments. You'll collaborate closely with ML researchers, frontend engineers, and stakeholders across the business to deliver scalable, high-performance applications that bridge structured and unstructured data. Key Responsibilities • Design and build intelligent data retrieval systems that power AI-driven investment tools., • Collaborate with ML researchers to prototype, develop, and deploy new AI/ML products., • Work with frontend engineers to integrate backend systems into user-facing applications., • Lead architectural decisions and contribute to the evolution of AI infrastructure., • Participate in the full software development lifecycle, from design through deployment and support., • Mentor junior engineers and contribute to a culture of technical excellence., • Support critical infrastructure through on-call rotations and incident response. Ideal Candidate Profile • 8+ years of professional software engineering experience, with at least 3 years focused on backend AI systems., • Strong Python skills and deep familiarity with ML libraries and frameworks., • Experience designing and deploying knowledge graphs and working with graph databases (e.g. Neo4j, Amazon Neptune)., • Proficient in both SQL and NoSQL databases, with a strong understanding of data modelling and integration., • Experience building APIs (REST, gRPC) and working with containerised environments (Docker, Kubernetes)., • Solid grasp of distributed systems, networking, and infrastructure-as-code practices., • Familiarity with vector databases, retrieval-augmented generation (RAG), and LLM integration is a plus., • Exposure to cloud platforms (AWS preferred) and messaging systems (Kafka, RabbitMQ) is advantageous., • Strong communication skills and the ability to work across technical and non-technical teams., • Knowledge of financial markets or investment workflows is a bonus, but not required. If you're excited by the opportunity to shape how AI is applied in a high-performance investment environment, we'd love to hear from you.

If you need support in completing the application or if you require a different format of this document, please get in touch with at or call TCS London Office number 02031552100 with the subject line: “Application Support Request”. Role: MS Purview + Entra ID SME Job Type: Permanent Location: London Are you looking to utilize your skills in Microsoft? Make a meaningful impact as a MS Purview + Entra ID SME! Careers at TCS: It means more TCS is a purpose-led transformation company, built on belief. We do not just help businesses to transform through technology. We support them in making a meaningful difference to the people and communities they serve - our clients include some of the biggest brands in the UK and worldwide. For you, it means more to make an impact that matters, through challenging projects which demand ambitious innovation and thought leadership. • Gain exposure to innovative technology., • Work with customers and identify opportunities to support their strategy and improve various processes across functions., • Gain access to endless learning opportunities. The Role As an MS Purview + Entra ID SME, you will be tasked with safeguarding digital assets by leveraging a comprehensive suite of Microsoft security technologies. To be successful in this role you should be a skilled Microsoft Security Engineer or Analyst. The ideal candidate will use Microsoft Defender XDR for managing and responding to threats, implement Microsoft Purview to ensure data compliance, and secure identities and access through Microsoft Entra ID. Your core responsibilities will include threat management, proactive hunting for vulnerabilities, data protection, security posture management, and incident response. All of these will be based on collaborating with other teams to maintain and improve the organization's overall security posture. Key responsibilities: • Design, implement, and manage Data Loss Prevention (DLP) policies to prevent unauthorized data sharing., • Configure and monitor policies to detect, investigate, and act on malicious or unintentional activities that could lead to data leakage or security incidents., • Monitor and investigate communications within the organization to detect and address potential violations of corporate policy or regulatory standards., • Manage and secure user, group, and workload identities including administering App and Enterprise App registrations and managing guest access for B2B (business-to-business) and B2C (business-to-consumer) scenarios., • Develop and manage Conditional Access (CA) policies to enforce granular access controls, including Multi-Factor Authentication (MFA), based on user, device, and location., • Implement and manage Self-Service Password Reset (SSPR) and Password Writeback to ensure seamless and secure user experience., • Work with internal IT and other security teams to ensure the effectiveness of the platform., • Serve as a point of contact for external services like Microsoft Defender Experts for proactive hunting and expert guidance., • Document incident response procedures, create reports on security posture, and provide regular briefings to leadership., • Implement policies for records management and retention to ensure that data is retained according to legal and business requirements and securely disposed of when no longer needed., • Utilize DSPM capabilities to understand data risk, identify sensitive data across the environment, and implement controls to mitigate risk including managing data security posture related to AI applications and models., • Support legal and compliance teams by utilizing Purview's eDiscovery and audit capabilities for investigations., • Act as a subject matter expert for the core components of the Defender XDR suite., • Manage endpoint protection, detection, and response across our device fleet., • Protect against email-based threats, including phishing, malicious attachments, and compromised links., • Monitor on-premises Active Directory signals to identify and investigate threats related to compromised identities., • Enforce security policies and provide threat protection across our cloud applications., • Prioritize and address critical vulnerabilities and misconfigurations based on a risk-based assessment., • Utilize Microsoft Entra ID Protection to identify and respond to compromised credentials and other identity-based risks., • Work closely with the Defender for Identity team to monitor on-premises Active Directory signals for threats., • Implement and maintain Privileged Identity Management (PIM) and Privileged Access Management (PAM) to provide just-in-time (JIT) access and enforce the principle of least privilege., • Secure Bring Your Own Device (BYOD) and other device access by implementing device-based access policies and configurations., • Ensure the proper configuration and integration of various authentication protocols, including SAML, OAuth, OIDC, and SCIM for application and service provisioning. Your Profile Essential skills/knowledge/experience: • Previous experience in a cybersecurity role, with a strong focus on Microsoft security solutions., • In-depth practical knowledge of the Microsoft security stack, including Defender XDR, Purview, and Entra ID., • Experience with scripting languages, particularly PowerShell, for automation and management., • Familiarity with common cybersecurity frameworks and attack methodologies, such as the MITRE ATT&CK framework., • Microsoft Certified: Security Operations Analyst Associate (SC-200; SC-300; SC-400)., • Certified Information Systems Security Professional (CISSP). Desirable skills/knowledge/experience: • Excellent analytical and problem-solving abilities., • Strong communication and collaboration skills to work effectively with technical and non-technical teams., • A proactive mindset and the ability to adapt to a fast-paced, evolving threat landscape. Rewards & Benefits TCS is consistently voted as a Top Employer in the UK and globally. Our competitive salary packages feature pension, health care, life assurance, laptop, phone, access to extensive training resources and discounts within the larger Tata network. We offer health & wellness initiatives and sports events; we are the proud sponsors of the London Marathon. Diversity, Inclusion and Wellbeing Tata Consultancy Services UK&I is committed to meeting the accessibility needs of all individuals in accordance with the UK Equality Act 2010 and the UK Human Rights Act 1998. We welcome and embrace diversity in race, nationality, ethnicity, disability, neurodiversity, gender identity, age, physical ability, gender reassignment, sexual orientation. We are a disability inclusive employer and encourage disabled people to apply for this role. As a Disability Confident Employer, we offer an interview to applicants with disabilities or long-term conditions who meet the minimum criteria for the role. Please email us at if you would like to opt in. If you are an applicant who needs any adjustments to the application process or interview, please contact us at with the subject line: “Adjustment Request” or call TCS London Office 02031552100 / +44 204 520 2575 to request an adjustment. We welcome requests prior to you completing the application and at any stage of the recruitment process. Beware of Fraudulent offers This is to notify you that TCS does not ask for any sort of payment or security deposit from candidates at any stage of the recruitment process. The firm never sends out job offers from free internet email services like Gmail, Yahoo Mail, and so on. TCS has not authorised any third-party company to collect money on their behalf. As a vigilant job seeker, beware of fraudulent recruitment activity and protect your interests! You can write to to report any fraudulent activity. Due to the high volume of applications, we will be unable to contact each applicant individually on the status of their application. If you have not received a direct response within 30 days, then it should be deemed unsuccessful on this occasion. Join us and do more of what matters. Apply online now.

Senior Incident Responder (DFIR) 🚨 Location: Hybrid (UK-based) Job Type: Full-time Salary: Competitive + up to 20% annual bonus Are you a seasoned DFIR professional with a passion for digital forensics and incident response? Do you thrive in high-pressure environments and want to make a real impact in protecting one of the UK’s largest retailers? If so, Tesco Technology wants you on our team. We’re looking for a Senior Incident Responder to join our cutting-edge Digital Forensics and Incident Response (DFIR) team. You’ll play a pivotal role in investigating and responding to complex security threats across our global estate, working alongside our security operations, threat intelligence, and engineering teams. What You’ll Be Doing 🕵️ Lead Investigations: Conduct host, network, and cloud-based forensic analysis to uncover the full scope of security incidents. 🛡️ Incident Handling: Support incident managers with root cause analysis and recommend detection and prevention strategies. ⚙️ Drive Innovation: Improve and automate DFIR workflows, collaborating across teams to enhance our security capabilities. 🔍 Threat Hunting: Lead intelligence-driven hunts to identify and escalate suspicious activity, contributing to our detection engineering efforts. What We’re Looking For • 4+ years of hands-on experience in DFIR or cyber incident response, • Strong background in forensic analysis across Windows, MacOS, and Unix systems, • Experience in large-scale corporate environments, ideally with Microsoft Azure, • Proficiency in tools like EDR, SOAR, SIEM, and scripting languages (Python, PowerShell), • Calm, analytical mindset with the ability to lead technical investigations under pressure Bonus: Experience with static and dynamic file/malware triage Why Tesco? At Tesco, we’re more than just a retailer — we’re a team of problem-solvers, innovators, and collaborators. Our purpose is simple: Serving our customers, communities, and planet a little better every day. We’re proud to foster an inclusive culture where everyone feels welcome and valued. What’s In It For You? 💰 Up to 20% annual bonus 🌴 25 days holiday + personal day + bank holidays 🏥 Private medical insurance 👶 Generous parental leave policies 🧠 24/7 virtual GP & mental wellbeing support 🏡 Blended working model (office + remote) Ready to make a difference? Apply now and help us protect Tesco from the threats of tomorrow.

£550-£600pd Outside IR35 Remote - UK based applicants only 6 months A leading eCommerce brand is looking for a Data Platform Engineer to play a key role in evolving their data ecosystem. This is an exciting opportunity to shape how data is built, governed, and leveraged across the business, supporting a platform that impacts millions of users daily. THE COMPANY This brand is recognised for its innovation and community-driven approach. With data at the heart of its decision-making, they're investing heavily in scalable, modern data platforms to enable better insights, experimentation, and product development. You'll join a collaborative engineering culture that values autonomy, technical excellence, and continuous improvement. THE ROLE As a Data Platform Engineer, you'll be responsible for developing and scaling the company's core data platform, ensuring teams across the business can access, trust, and use data effectively. You'll drive initiatives that improve data quality, observability, and governance, while helping shape a platform-as-a-product mindset. Key responsibilities include: * Building and maintaining data infrastructure: Develop microservices, pipelines, and backend systems that power analytics and machine learning initiatives. * Driving platform evolution: Design and implement scalable, secure, and efficient data services using tools such as Terraform, Docker, and AWS. * Data governance and observability: Introduce and enhance tooling for data lineage, contracts, monitoring, and cataloguing. * Operational excellence: Lead automation, monitoring, and incident response to maintain high platform reliability. * Cross-functional collaboration: Work with data scientists, ML engineers, analysts, and product teams to understand and meet their data needs. * Mentorship and culture: Support the growth of peers through knowledge sharing and by championing engineering best practices. YOUR SKILLS AND EXPERIENCE The successful candidate will have: * Strong experience in Python and a solid foundation in software engineering best practices (testing, CI/CD, automation). * Proven track record of designing, building, and scaling data platforms in production environments. * Hands-on experience with big data technologies such as Airflow, DBT, Databricks, and data catalogue/observability tools (e.g. Monte Carlo, Atlan, Datahub). * Knowledge of cloud infrastructure (AWS or GCP) - including services such as S3, RDS, EMR, ECS, IAM. * Experience with DevOps tooling, particularly Terraform and CI/CD pipelines (e.g. Jenkins). * A proactive, growth-oriented mindset with a passion for modern data and platform technologies. Nice to Have: * Experience implementing data governance and observability stacks (lineage, data contracts, quality monitoring). * Knowledge of data lake formats (Delta Lake, Parquet, Iceberg, Hudi). * Familiarity with containerisation and streaming technologies (Docker, Kubernetes, Kafka, Flink). * Exposure to lakehouse or medallion architectures within Databricks.

Group IT & Security Manager | £70K - 80K | Location: Chelsea We are seeking an experienced Group IT & Security Manager to lead a technology function and oversee a small, dynamic IT team. This role is central to maintaining and evolving the organisation’s IT infrastructure, ensuring systems are secure, efficient, and aligned with the group’s strategic goals. The successful candidate will manage day-to-day IT operations, provide hands-on support to staff and clients, and drive technology initiatives that enhance performance, resilience, and data protection. About the Organisation The group operates a portfolio of innovative businesses across the property, housing, and data sectors. The group combines advanced data analytics, technology, and property expertise to deliver solutions ranging from affordable housing to real estate technology and instant home-sale services. The role involves collaborating with leadership and stakeholders across these businesses to align IT strategy and execution with their operational needs. Key Responsibilities Strategic Planning and Alignment • Identify technology needs and align IT initiatives with business strategy., • Develop and maintain a technology roadmap that supports both operational excellence and long-term growth., • Lead a small IT team as the senior point of contact for daily operations., • Allocate tasks, set priorities, and ensure high service levels., • Manage the IT budget, ensuring effective allocation across projects and operations., • Define project scope, priorities, and timelines to ensure alignment with business goals., • Maintain high service availability and meet SLAs for IT services., • Oversee helpdesk operations, supporting a distributed UK workforce of around 150 staff., • Develop, implement, and manage robust cybersecurity frameworks., • Establish and enforce IT security policies aligned with ISO27001 and NIST standards., • Conduct regular risk assessments and ensure data confidentiality and system integrity., • Evaluate and manage vendor relationships, negotiating contracts and assessing performance., • Partner with senior leadership to align technology investments with business priorities. Technical Skills and Experience • Proven experience managing IT infrastructure and systems., • Strong knowledge of cybersecurity principles and best practices., • Familiarity with cloud platforms (AWS, Azure) and data management tools., • Experience with networking (TCP/IP, LAN/WAN, firewalls) and virtualisation technologies., • Competence with Windows, Windows Server, and macOS environments., • Proficiency in Microsoft 365 (Office, Teams, etc.)., • Knowledge of IT service management frameworks (ITIL, ISO27001)., • Basic scripting or automation skills desirable. Flexibility • Hybrid role based in London, with a requirement to be onsite three days a week (including Tuesdays and Thursdays). Please apply or reach out on

Senior Infrastructure Engineer Reporting into the Head of IT, you'll be responsible for the delivery of 3rd Line support of IT Infrastructure. The primary purpose of your role will be to own the planning, design, implementation, operation and support of the company’s technology infrastructure to meet or exceed agreed availability and performance targets within approved capital and operational expenditure budgets. Leading an in-house team and third parties across architecture, security, engineering, delivery and support, you will have accountability for all infrastructure services including network and telephony, storage, hosting and server infrastructure (on-premise and cloud), infrastructure applications and end user computing. What you’ll be doing • Defining, agreeing with the Head Of IT and then owning an infrastructure strategy which is aligned with the wider IT and business strategies., • Managing internal and third party resources as required to plan, design, build and run the enterprise IT infrastructure., • Owning and validating the architectural roadmap for infrastructure services, ensuring all solutions provide the required level of availability, performance and security., • Overseeing the delivery of the infrastructure initiatives plan, ensuring all infrastructure projects are delivered within the pre-agreed parameters of time, cost, scope, risk, quality and benefits., • Ensuring all infrastructure services are managed and supported according to industry/vendor best practice, following defined processes and procedures and to meet agreed availability and performance KPIs., • Ensuring all colleague infrastructure support tickets are resolved/fulfilled in line with SLA and colleague satisfaction targets, following agreed ITSM processes., • Ensuring that all infrastructure components are managed to the appropriate level of risk with respect to security patches, software/firmware revision levels and supplier supported versions., • Proactively seeking service improvements in the areas of reliability, performance, availability, security, supportability or cost., • Overseeing the effective transition of new or updated infrastructure services ensuring operational readiness criteria are identified and achieved., • Ensuring effective DR/BCP plans exist to deliver the required RPOs and RTOs for all infrastructure services, including regular testing., • Leading, motivating, developing and managing the performance of the Infrastructure team to develop a high calibre team with the skills and capabilities needed to deliver the required results. This includes coaching team members, succession planning, and fostering a culture of continuous improvement., • Managing all third party supplier contracts for infrastructure services, ensuring agreements are in place and aligned to business requirements., • Providing periodic reporting and management information on infrastructure delivery initiatives, operational KPIs and budget management. (including KPIs such as uptime, incident response times, SLA adherence, and project delivery metrics) What we’ll expect from you • Extensive experience as a Senior infrastructure Engineer in a colleague centric, multi-site businesses, • Previous experience working in mixed on-premise/cloud environments particularly Nutanix and Azure eco systems., • Extensive experience of managing network and telephony (WAN, LAN, Wi-Fi, Voice), hosting and server infrastructure, infrastructure applications and end user devices (desktops/laptops, mobile/tablets, peripherals). Technologies required • Office 365 – ongoing management, • Nutanix, • Networking (LAN, WAN, VLAN, WiFi) preferably Juniper & Fortinet devices, • Security (ACL, Firewall, PCI, GDPR. GDP), • ISO27001 principles, • Storage, iSCSI (HP, Tegile, Nutanix), • Cloud (Azure ExressRoute, VMs,Load Balancers), • Linux, • System Centre, • Database Management

IT Risk & Resilience Lead Location: Hybrid/London Employment Type: Full-Time | Permanent Department: Risk, Governance & Compliance Level: Manager/Senior Manager The Opportunity Our client is looking for an experienced IT Risk & Resilience Lead to drive enterprise-wide initiatives in IT governance, risk, compliance, and operational resilience. In this strategic role, you'll help shape how our client anticipates, responds to, and recovers from IT-related risks, while ensuring ongoing alignment with global regulatory requirements. This is a high-impact role working across business units, third parties, and regulatory environments, ideal for someone with strong risk expertise and a deep understanding of how technology, compliance, and resilience intersect in regulated environments. What You'll Be Doing You'll be responsible for designing, maintaining, and evolving our IT risk frameworks, ensuring they meet both business needs and regulatory expectations. Your work will span seven key areas: 1. IT Governance & Compliance You'll advise governance forums, monitor compliance across internal policies and regulatory standards (e.g., DORA, GDPR, FCA, BaFin), and ensure our digital resilience strategy is fully embedded across the business. 2. IT Risk Management Own the IT Risk Management Framework, run independent control tests, assess vulnerabilities, lead risk assessments, and guide remediation across critical systems and functions. 3. Operational Resilience & Incident Oversight Coordinate post-incident analysis and response, ensure adherence to incident protocols, and enable robust service continuity in the face of technology disruptions. 4. Stress Testing & Critical Function Assurance Lead the annual IT stress testing programme and ensure continuous review of critical business functions from a technology perspective. 5. Third-Party & Supply Chain Risk Evaluate and oversee risk exposure from third-party providers and technology supply chains, ensuring controls are in place and regulatory alignment is maintained. 6. Awareness & Culture Develop and lead IT risk training initiatives that build resilience awareness across staff and partners, reinforcing policy adherence. 7. Innovation & Emerging Risk (AI Focus) Support development of the firm's approach to AI governance, implementation, and risk mitigation as new technologies are adopted. What You'll Bring * Extensive experience in IT operational risk within financial services or a similarly regulated environment. * Strong understanding of IT governance, control frameworks, digital resilience, and compliance (e.g. DORA, GDPR, FCA Operational Resilience). * Proven ability to conduct in-depth risk assessments, scenario testing, and vulnerability analysis. * Experience working across departments and engaging with senior leadership on risk strategy. * Excellent communication and stakeholder management skills. * Strong analytical mindset with a detail-oriented approach. * Proficiency with Microsoft Office; familiarity with GRC tools is advantageous. * Knowledge of enterprise and operational risk management frameworks. McGregor Boyall is an equal opportunity employer and do not discriminate on any grounds.

Senior IT Security Consultant • Job Location: Mostly Remote, UK (There will be occasional expectation to visit London clients & attend essential meetings in London / South England locations. Up to a couple of times a month), • Salary Range: £75,000 to £84,000 (based on candidate experience), • Bonus & Package: Strong bonus structure & Excellent employee benefits, • Employment Type: Permanent Are you a cloud security expert ready to make your mark in a leading organisation? Join one of the most exciting organisations in the IT Sector as part of their newly developing & rapidly expanding Cyber Security division. This highly respected organisation is renowned as one of the top places to work in the IT sector, and is well known for its best-in-class work culture and job satisfaction. They promote a culture of upskilling and training internal talent; supporting professional growth and providing limitless opportunity to gain promotion within the company. Role Overview: As Senior Security Consultant you will join the company as a respected figure within the organisation. Your Security designs and recommendations will have strong influence in this new department. Bringing your ideas & innovations to the table will be highly encouraged and supported, making this an amazing opportunity to make your mark in a major organisation, and take a leap in your career development. What You'll Do: • Provide outstanding Security consultation on strategy and innovation throughout major greenfield projects both internally and externally, • Play a key role in delivering large scale Security Projects, • Produce innovative design and architecture on large, exciting projects, • Interact with clients, supporting consultancy on their Security posture, and assess potential sales opportunity etc., • Championing a constantly evolving security function within the company, bringing your ideas to the table and improving security processes., • Supporting Principal Consultants and other Senior members of the security department and areas of the organisation., • Architecture, designing and documenting secure architectures aligned with modern frameworks (NCSC, CIS, and ISO 27001), • Contribute to the development of advisory service offerings, templates, and best practices., • Collaborate with team members and other departments to improve overall security posture., • Stay informed on emerging threats and security best practices. Required Skills & Qualifications: • 5+ years’ experience in Security with strong experience Consulting & Architectural design, • Professional background in IT Services / IT Consultancy / MSP, • Strong experience of contributing to development & architecture on major projects., • Strong technical knowledge of Azure and AWS security services, controls, and architectures., • Deep understanding of IAM, networking, encryption, monitoring, and incident response in cloud environments., • Familiarity with cloud-native security tooling (Purview, MS Defender, AWS Security Hub, GuardDuty, etc.)., • Strong understanding of Identity functions & Related tools, EntraID / Purview / CrowdStrike etc., • Solid knowledge of Zero Trust / Data Classification / hybrid connectivity – and producing related architecture., • Knowledge of common frameworks and standards (NIST, CIS Benchmarks, ISO 27001, CSA CCM). Services offered by Computappoint Limited are those of an Employment Business and/or Employment Agency in relation to this vacancy

We are seeking an experienced VDI Engineer to maintain and support a high-performance Virtual Desktop Infrastructure (VDI) environment for our End Clients Trading Desk and Front Office users. The ideal candidate will have deep expertise in low-latency systems, Citrix or VMware Horizon platforms, and a strong understanding of financial trading workflows. This role requires close collaboration with traders, application teams, and infrastructure engineers to ensure a seamless, secure, and performant end-user experience. Key Responsibilities • Maintain VDI environments (Citrix / VMware Horizon / Azure Virtual Desktop) optimized for high-performance trading applications., • Assist with VDI Design and build., • Onsite Support for incident response and problem management., • Monitor, troubleshoot, and tune VDI performance to minimize latency and maximize reliability., • Provide Tradefloor support for Trader Users., • Laise with network, storage, and systems teams to optimize backend infrastructure supporting virtual desktops., • Deploy and maintain images, applications, and profiles for traders., • Laise with information security team to ensure compliance with internal and regulatory standards., • Maintain documentation of VDI architecture, configurations, and operational procedures., • Participate in on-call rotation and provide support during market hours., • W2 Employment with 40 hours per week., • Our end client in a multinational investment Bank based in New York City. Required Qualifications • Bachelor’s degree in computer science, Information Technology, or equivalent experience., • 5+ years of experience managing VDI environments (Citrix Virtual Apps/Desktops, VMware Horizon, or Azure Virtual Desktop)., • Strong understanding of Windows 10/11, Windows Server, Active Directory, Group Policy., • Experience with Bloomberg, Reuters, Eikon, and custom trading applications., • Exposure to real-time market data systems and FIX protocol environments., • Knowledge of cloud-hosted VDI (Azure, AWS WorkSpaces).

Senior Software Engineer (Python / AWS) 📍 Location: London or Manchester 💼 Employment Type: Full-time, Permanent About the Role We’re looking for a Senior Software Engineer with deep experience in Python and AWS to help design, build, and scale distributed, data-driven Ad-Tech systems. You’ll lead the delivery of cross-service features within a modern cloud platform, making pragmatic architectural choices and setting high standards for engineering quality, reliability, and performance. You’ll play a key role in shaping technical direction, mentoring engineers, and ensuring the systems you build are secure, observable, and resilient. Key Responsibilities • Lead complex delivery: Drive the end-to-end design and implementation of Python-based microservices and cloud-native solutions hosted on AWS., • Architect and optimise systems: Define service boundaries, data ownership, and failure-recovery patterns for scalable, high-availability systems., • Raise engineering quality: Champion best practices for testing, observability, and security. Review critical PRs and guide technical decisions across the team., • Operate and improve production systems: Monitor performance, reliability, and cost efficiency. Lead incident response and drive continuous improvement., • Mentor and grow others: Support engineers through pairing, feedback, and documentation to strengthen technical capability across the team., • Contribute to technical roadmap: Collaborate with Product, Design, and Data teams to align on priorities and ensure value is delivered incrementally. Core Tech Stack • Languages: Python (FastAPI, Flask, or Django), • Cloud: AWS (Lambda, ECS/Fargate, S3, DynamoDB, CloudWatch, API Gateway), • Data & Messaging: PostgreSQL, Redis, Kafka or SQS, • CI/CD & Infrastructure: Docker, Terraform, GitHub Actions, CloudFormation, • Monitoring & Observability: Prometheus, Grafana, OpenTelemetry, • Testing: Pytest, integration and load testing frameworks Key Skills & Expertise • Proven experience designing and delivering production systems using Python on AWS., • Strong understanding of distributed systems, API design, and event-driven architectures., • Deep knowledge of system observability, logging, and performance optimisation., • Familiarity with modern security and data-privacy best practices., • Excellent communicator who can document and articulate technical trade-offs clearly. Behaviours & Attributes • Ownership: Takes full responsibility for systems from design to operation., • Pragmatism: Balances long-term architecture with delivery velocity., • Influence: Raises standards and mentors others across engineering disciplines., • Growth Mindset: Continuously improves processes, tools, and team capability. Success Indicators • Reliable delivery of complex Python/AWS initiatives., • Reduction in latency, error rates, and infrastructure spend., • Strong incident management and operational excellence., • Documented technical decisions and clear architectural rationale., • Evident impact through mentoring and team enablement.

Harrington Starr are seeking a Senior Security Analyst with experience of working with OT\ Scada based systems to work for a small specialist security team to play a key role in securing their critical infrastructure systems within the energy sector (renewables). This role will offer excellent scope to play a key role for a global company from botha technical and strategic perspective. Key day to day duties will include: • OT & IT Security Monitoring: Continuously monitor the security of both OT and IT environments, including SCADA systems and Industrial Control System (ICS), • Governance and compliance of all OT systems - NIST 800-82, IEC 62443, OG86, NERC-CIP, SOCI, NIST-CSF, NIS2, • Taking a proactive role in threat hunting, incident response from a, • Collaborating with the IT Security team and wider technology teams, • User training/ awareness Key skills needed are: • 3+ years in a cyber security role with a good level of exposure to OT security, • Knowledge of NIST and IEC 62443 OT frameworks, • Knowledge of the Microsoft security stack and wider IT security experience highly desirable, • Knowledge of NERC CIP and/or SOCI standards desirable Role is based in central London with three days in the office. Please send your CV for immediate consideration

Job Title: Data Privacy Manager Location: West London Hybrid - UK Only please. Overview:This is NOT a legal role. We are seeking a highly organised and detail-oriented Data Privacy Manager to lead and manage core administrative privacy functions. This role is critical in ensuring our organisation's compliance with data protection regulations, particularly the GDPR, and in fostering a culture of privacy awareness. Key Responsibilities:Data Protection Impact Assessments (DPIAs): Coordinate and conduct DPIAs for new projects, systems, and processes involving personal data. Data Subject Requests (DSRs): Manage and respond to data subject access requests, rectification, erasure, and portability requests within regulatory timeframes. Records of Processing Activities (RoPA): Maintain and update the organisation's RoPA in accordance with Article 30 of the GDPR. Data Breach Management: Oversee the incident response process for data breaches, including documentation, assessment, notification, and remediation. Privacy Training & Awareness: Develop and deliver privacy training programs for staff, tailored to roles and responsibilities. Policies & Procedures: Draft, review, and update privacy policies, procedures, and guidelines to reflect regulatory changes and business needs. Stakeholder Engagement: Collaborate with internal teams (Legal, IT, HR, etc.) to embed privacy by design and default into business operations. Monitoring & Reporting: Track compliance metrics, prepare reports for senior management, and support audits and regulatory enquiries. Qualifications:CIPP/E certification is required. Proven experience in data protection or privacy compliance roles. Strong understanding of GDPR and other relevant data protection laws. Excellent communication, organisational, and analytical skills. Ability to manage multiple priorities and work independently. Preferred Skills:Experience with privacy management software/tools. Familiarity with ISO 27701 or other privacy frameworks. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk

Senior Platform Engineer £500-£600 per day Outside IR35 6-months Join one of the UK's leading online retailers as they evolve their next-generation data platform. This is an opportunity to shape the backbone of a modern data ecosystem, empowering analysts, ML engineers, and data scientists to deliver smarter, faster insights at scale. The Role You'll play a key role in designing and engineering platform services that treat data as a core product. This means building scalable, secure, and observable systems that help teams confidently leverage data across the business. You'll work closely with a wide range of technical and non-technical partners to deliver resilient infrastructure, champion data governance, and mentor others in engineering excellence. In this role, you will: * Shape the data platform roadmap: Introduce modern observability, quality, and governance frameworks that elevate how teams access and trust data. * Build and scale infrastructure: Develop services, APIs, and data pipelines using modern cloud tooling and automation-first principles. * Drive engineering best practices: Implement CI/CD pipelines, testing frameworks, and container-based deployments to ensure reliability and repeatability. * Lead cross-functional initiatives: Collaborate with product engineers, data scientists, and ML practitioners to understand their workflows and deliver high-impact platform solutions. * Champion operational reliability: Proactively monitor system performance, automate incident response, and strengthen platform resilience. What You'll Bring * Strong proficiency in Python (or a similar high-level language) with a deep understanding of software engineering best practices - testing, automation, clean code, and CI/CD. * Proven track record building and maintaining scalable data platforms in production, enabling advanced users such as ML and analytics engineers. * Hands-on experience with modern data stack tools - Airflow, DBT, Databricks, and data catalogue/observability solutions like Monte Carlo, Atlan, or DataHub. * Solid understanding of cloud environments (AWS or GCP), including IAM, S3, ECS, RDS, or equivalent services. * Experience implementing Infrastructure as Code (Terraform) and CI/CD pipelines (e.g., Jenkins, GitHub Actions). * A mindset focused on continuous improvement, learning, and staying at the forefront of emerging technologies. Nice to Have * Experience rolling out data governance and observability frameworks, including lineage tracking, SLAs, and data quality monitoring. * Familiarity with modern data lake table formats such as Delta Lake, Iceberg, or Hudi. * Background in stream processing (Kafka, Flink, or similar ecosystems). * Exposure to containerisation and orchestration technologies such as Docker and Kubernetes.

If you thrive on transforming metrics into meaningful insights and want to play a key role in service quality and compliance, this role puts you at the heart of operational transparency for a regulated financial services environment. • Location: London (Bank/Monument), primarily remote., • Rate: c. £350 per day outside IR35., • Immediate start available. Global fast paced environment. You’ll be responsible for producing high-impact reports, dashboards, and analytics that inform service reviews, incident trends, change success rates, SLA adherence, and control compliance. Working closely with Service Owners, IT Operations, Risk & Compliance, and senior stakeholders, you’ll ensure data is accurate, actionable, and aligned to regulatory frameworks. What you’ll be responsible for • Develop and maintain service performance reports across Incident, Change, Problem, and Request Fulfilment, • Monitor SLAs, KPIs, and OLAs to reflect service health and operational commitments, • Build dashboards and visualisations using tools like Power BI, Excel, and ServiceNow Performance Analytics, • Analyse service delivery trends to identify recurring issues and improvement opportunities, • Support service reviews and senior stakeholder meetings with actionable insights, • Ensure data accuracy and completeness within the ITSM platform (e.g., ServiceNow), • Validate and reconcile data for regulatory and audit reporting (PCI DSS, DORA, ACPR, GDPR), • Assist in control evidence and audit response materials related to ITSM process adherence, • Support process owners with ad-hoc reporting, metrics tracking, and trend analysis, • Contribute to post-incident reviews, change reviews, and CSI initiatives What you’ll bring • 2–4 years’ experience in ITSM reporting, operations, or service analytics, • Bachelor’s degree in IT, Business Analytics, Computer Science, or related field, • Working knowledge of ITIL (Foundation certification preferred), • Proficiency in ITSM reporting., • Strong skills in Excel (pivot tables, lookups), Power BI, and data visualisation, • Attention to detail and ability to present complex data to technical and non-technical audiences Bonus points if you have • Experience in financial services or regulated industries (banking, fintech, insurance), • Familiarity with operational risk reporting or audit processes, • Understanding of cloud-based service operations and performance monitoring

Senior Cloud Security Consultant Up to £85,000 + Bonus + Benefits + Training Hybrid (London, UK) Company & Role This is an opportunity to join a people first, values led $1B global technology services provider that delivers end to end IT outsourcing and cyber defence services to clients across the UK and internationally. Its Security Advisory team sits at the core of the organisation’s Cyber Defence practice, helping clients build secure, compliant and resilient cloud environments. Working across Azure and AWS, the team designs cloud security architectures, performs risk assessments and drives secure cloud transformation for enterprise and public sector customers. As a Senior Cloud Security Consultant, you will act as a trusted advisor to clients, helping them assess, strengthen and optimise their cloud security posture. You will lead cloud security reviews, design secure architectures and advise on governance, compliance and risk, ensuring that cloud adoption and innovation happen safely and strategically. You will also collaborate with internal SOC, Engineering and Governance teams to ensure alignment between architecture, detection and operations. Why This Role Stands Out • Join a $1B global technology provider with a rapidly growing Cyber Defence and Security Advisory practice, • Deliver consultancy that defines how major organisations secure their cloud environments, • Influence technical direction and help shape the future of cloud security service offerings, • Up to £85,000 base salary plus bonus, comprehensive benefits and continuous learning support, • Hybrid working, flexible hours and a culture built on trust, inclusion and professional growth What You’ll Be Doing • Leading cloud security consultancy engagements across Microsoft Azure and AWS, • Conducting cloud security posture assessments, architecture reviews and gap analyses, • Designing and documenting secure cloud architectures aligned with NCSC, CIS and ISO 27001 frameworks, • Advising clients on identity, access management, encryption, monitoring and network security, • Leading workshops to define cloud security strategy, governance models and control frameworks, • Supporting incident response and remediation activities related to cloud environments, • Collaborating with SOC and Engineering teams to strengthen detection, telemetry and visibility, • Providing compliance guidance aligned to ISO 27001, NIST, Cyber Essentials Plus and NHS DSPT, • Mentoring junior consultants and contributing to the development of cloud security methodologies What You’ll Bring • 4 or more years of experience in cloud security consulting, architecture or engineering, • Deep technical understanding of Azure and AWS security services, controls and architecture design, • Proven experience delivering cloud security assessments and secure cloud solution design, • Strong knowledge of IAM, networking, encryption, monitoring and incident response in cloud environments, • Familiarity with Microsoft Defender for Cloud, AWS Security Hub, GuardDuty and other native tools, • Experience applying frameworks such as NIST, CIS Benchmarks, ISO 27001 and CSA CCM, • Excellent stakeholder engagement and communication skills with the ability to bridge technical and business needs, • Experience supporting clients in regulated industries such as Finance, Healthcare or Public Sector, • Understanding of hybrid connectivity, zero trust architecture and secure cloud migration Desirable Experience • Experience with DevSecOps practices, CI/CD security and Infrastructure as Code using Terraform, ARM or CloudFormation, • Multi cloud exposure including GCP What You’ll Get • Salary up to £85,000 plus bonus, • Hybrid working and flexible hours, • Funded training, certifications and career mentoring, • Access to leading tools, labs and cloud learning platforms, • Private healthcare, pension and wellbeing support, • Collaborative, inclusive culture built around growth, innovation and trust If you are ready to take the next step in your cloud security career and want to do it in a company that invests in your development, values your expertise and celebrates success together, this is your opportunity to make a meaningful impact securing enterprise cloud environments across the UK and beyond.

Data Protection & Compliance Manager | GDPR, PECR & Privacy Frameworks | Greenfield FinTech Build | US + EU Data Strategy • UK-Remote - (optional London office), • £60k-£75k + Bonus This is an opportunity to join the technology and product team of a globally trusted media brand that has recently expanded into the financial comparison space (think CompareTheMarket or MoneySupermarket). The platform is live and growing quickly, particularly across the US market. What the organisation doesn’t yet have is a formal Privacy & Data Protection function. This role exists to establish and lead that function — setting standards, defining frameworks, and building a scalable approach across multiple regions. You’ll work closely with Product, Engineering and Marketing to ensure the platform’s data practices are compliant, transparent and grounded in practical, real-world execution. The Role You’ll be responsible for designing and running the Privacy & Data Protection framework across multiple international markets, with a heavier operational focus on US data regulation and consent management, while maintaining appropriate GDPR/PECR compliance across the UK & EU markets. Your day-to-day will involve: • Design, implement and own the Data Protection & Privacy Framework (policies, workflows, governance, reporting)., • Lead and manage DPIAs, DSARs, incident triage, data mapping, and processor/vendor reviews end-to-end., • Audit and document data flows across product, marketing automation, analytics, tracking and ad-tech., • Review and optimise cookie/consent behaviour, including identifying 1st/3rd party trackers and regional consent logic differences., • Maintain and improve privacy tooling (e.g., OneTrust or similar CMP)., • Ensure compliance with:, • GDPR & PECR obligations (e.g., unsubscribe/opt-out hygiene, Article 30)., • US State-level legislation (e.g., CCPA/CPRA) — especially UI/consent design exceptions., • ASA / CMA requirements for advertising fairness and price transparency., • Partner cross-functionally to embed privacy-by-design in new products and features., • Train teams and act as the primary internal point of contact for privacy matters., • You will initially operate as the function, with the autonomy to shape and mature it over time. What They’re Looking For (Non-Negotiables) • Proven experience in a Data Protection / Privacy Management role within a digital, product-led or data-driven organisation., • Hands-on ownership of DPIAs, DSARs, incident response and privacy workflow design., • Demonstrated experience building or establishing privacy frameworks (not just “supporting” them)., • Ability to interpret legislation, assess practical implications, prioritise risks, and implement real changes., • Comfortable working with cookie & tracking behaviour, consent logic and data flow mapping. Nice to Haves • Experience in comparison, fintech, or other high-traffic / data-rich environments., • Exposure to ISO 27001 / SOC 2 frameworks., • Experience supporting or working alongside security or DevOps teams. Why Join / Projects • Greenfield ownership: You are defining the privacy foundation, not inheriting one., • Work directly with senior leadership and have real influence on product direction., • A modern, practical approach to compliance (no checkbox theatre)., • A genuinely collaborative environment that values clarity, autonomy and progress. Employee Benefits • 10% performance bonus, • 100% remote (UK-based) – optional London office, • Private health cover, • Unlimited holiday, • Generous corporate benefits package Data Protection & Compliance Manager | GDPR, PECR & Privacy Frameworks | Greenfield FinTech Build | US + EU Data Strategy

Cloud Platform Manager Reports To: Director of Technology Platforms Role Summary The Cloud Platform Owner, will be responsible for owning and optimising the enterprise cloud environment (Azure C Azure local), ensuring its alignment with the firm’s broader technology and business strategies. This is a leadership role in a highly modernising legal technology environment but still remaining hands on with Cloud Azure Engineering, with a clear remit to support AI enablement, centralised integration, automation, and a mobile-first strategy across a global footprint. Key Responsibilities Platform Ownership s Strategy • Act as the primary owner for the Azure cloud environment, including governance, cost management, architecture, and operations., • Develop and maintain a scalable, secure, and resilient cloud platform aligned with the firm’s digital transformation goals., • Drive and implement the roadmap for infrastructure upgrades and simplification of cloud services, on-premservices and all our environments., • Align team capacity and structure with business needs, ensuring roles, responsibilities, and workflows are well defined., • Represent the team in strategic planning forums and contribute to organisational leadership decisions. Leadership The successful candidate will be expected to uphold a high standard of operational excellence and personal accountability. This includes taking full ownership of the cloud platform’s stability and performance. • While the role primarily operates within standard business hours, there is an expectation of flexibility and responsiveness during critical incidents., • Lead by example, setting clear expectations and holding individuals and teams accountable for high performance and ethical conduct., • Provide direct line management of individuals where appropriate, ensuring clear direction, regular development conversations, and alignment with team and business goals., • patch compliance and vulnerability management. Beyond operational stability, the role demands a continuous improvement mindset - proactively evaluating the platform and driving enhancements to optimise efficiency, resilience, and user experience., • Manage incident response, problem management, and change management processes in collaboration with other platform teams., • Ensure effective monitoring, health checks, and proactive maintenance across services all Cloudinfrastructure services (including on-prem services)., • Ensure we have Disaster Recovery environments that are fit for purpose and regularly tested., • Take ownership of major incidents related to cloud infrastructure, including root cause analysis and corrective actions., • Be available outside of standard working hours if required for high-priority incidents, demonstrating a commitment to seeing critical issues through to resolution, regardless of the time of day., • Oversee and hold third-party cloud service providers (e.g., managed service partners, platform vendors) to account, ensuring they meet agreed SLAs, security standards, and deliver consistent value to the business. Engineering s Projects • Lead a team of platform engineers and third-party partners responsible for configuration, automation, deployment, and enhancement of the platform., • Oversee delivery of projects related to the Cloud platform, including upgrades, new capabilities, and digital transformation initiatives., • Ensure effective use of tools such as SolarWinds, Azure, Tenable., • Enforce patch management processes and ensure the environment is compliant., • Evaluate and pilot emerging capabilities such as Microsoft Copilot and AI-driven productivity tools., • Oversee the operational integrity, performance, and availability of core data platforms and pipelines that support reporting, analytics, and AI readiness across the firm., • Collaborate closely with the Data C AI teams to ensure cloud infrastructure supports scalable, secure, and reliable data ingestion, transformation, and delivery. Budgeting s Licensing • Own and manage the platform budget, ensuring efficient use of resources and cost optimisation., • Manage and forecast consumption charges, ensuring compliance and maximising license utilisation., • Liaise with procurement, finance, and vendors for renewals and cost planning. Governance, Risk s Compliance • Define and enforce policies for workload management and governance across our cloud estate., • Maintain compliance with internal policies and regulatory requirements., • Collaborate with business units, Technology senior leadership team, and product teams to gather requirements and improve platform services., • Champion change management initiatives that drive behavioural adoption of digital tools across the firm., • Act as an evangelist for Modern cloud tools, driving user adoption and digital workplace maturity., • Proven experience in managing enterprise-scale Microsoft Cloud environments., • Expert knowledge of Windows Server, with a deep understanding of Microsoft Azure, Conditional Access, Entra ID, Microsoft Defender, and related technologies., • Hands-on experience with cloud management, collaboration tools, and identity/security best practices., • Disaster Recovery Planning and Implementation, • Experience managing budgets, licensing agreements, and vendor relationships., • Strong leadership and communication skills, with the ability to lead cross-functional teams and projects., • Knowledge of ITIL practices and service management methodologies., • Strong problem-solving and analytical abilities. Behavioural skills • Presents ideas and concepts to non-discipline colleagues and management in a manner that is respectful and understandable., • Objective of job is to motivate others to act; understanding, developing, motivating, negotiating, mediating conflict with technical staff and third parties., • Creates an environment in which quality information flows freely between self and others; encourages open expression of ideas and opinions; builds effective teams, • Excellent communication skills (both written and verbal) and the ability to interact across different cultures and time zones., • Expected to have regular interaction with management and counterparts in multiple businesses and countries., • Demonstrates ability to handle abstract problems with no known solutions., • Adapts to multiple/changing demands readily., • Can see applications for practices from different industries that could benefit our business, and successfully implements them., • Microsoft Certified: Azure Solutions Architect Expert

Leading Consultancy continues to expand its EMEA presence and seek an Associate Director to join. As an Associate Director, you’ll lead technical investigations involving cybersecurity breaches, digital forensics, and eDiscovery. Your work will span both hands-on investigation and strategic leadership. You’ll contribute to business development by helping shape service offerings, writing thought leadership pieces, and supporting marketing efforts. This role is open in background but you must have strong experience across DFIR investigation work, and have a brilliant technical acumen coupled with strong communication skills. This is a hybrid role – London based, offering up to £100k on the base. For immediate consideration – please

Service Management Analyst - London (3 days) - Permanent - Up to £62k A fantastic opportunity has arisen for an Service Management Analyst to join our London based law firm on a permanent basis. Key Responsibilities • Own and manage the full problem management process, aligned with ITIL v4, • Identify and investigate root causes through structured RCA sessions, • Maintain the Known Error Database and implement preventative measures, • Drive continual service improvement based on insights and trends, • Act as primary coordinator for major incidents and lead incident response, • Facilitate incident bridges, ensuring timely resolution and effective communication, • Conduct Post-Incident Reviews and ensure follow-up actions are tracked, • Monitor incident trends and produce regular reporting for stakeholders, • Support change management processes including risk/impact assessments, • Participate in CAB/TCAB meetings and ensure adherence to governance standards, • Help ensure changes are implemented with minimal disruption to services Key Experience & Skills Required • Proven experience in IT Service Management, ideally within legal or large enterprise, • Strong knowledge of ITIL v4 (Foundation certificate essential), • Familiarity with Problem, Incident & Change Management best practices, • Hands-on experience using ITSM tools (e.g. ServiceNow, BMC Remedy, Cherwell), • Excellent analytical, communication, and stakeholder engagement skills, • Calm under pressure, highly organised, and confident leading in fast-paced environments, • Strong reporting/documentation skills and a continuous improvement mindset Service Management Analyst - London (3 days) - Permanent - Up to £62k

At BW: Workplace Experts, we deliver high-performing workplaces across Central London with a relentless focus on our Sauce values: Big Ambitions, Grounded Confidence, Integrity and 0% Ego. With over 300 people, we’re proud to be a trusted partner to leading clients, working together to create inspiring, sustainable, and inclusive spaces. Technology is central to how we work. From digital collaboration through Procore, to data-driven decision-making in Microsoft Fabric, to on-site innovation with tools like OpenSpace, Qflow, HammerTech, and Plucky (our robotic assistant), we are shaping the future of fit-out through smarter, safer and more sustainable delivery. As part of our Data & Intelligence Strategy, our Technology team is expanding to ensure we continue to set the pace in our industry. Purpose Own the day-to-day running of BW’s IT service desk and field support function, ensuring every employee receives rapid, expert help with the hardware, software, networks, and security controls they rely on. Key Responsibilities Service Desk & Incident Control • Operate a friendly and professional helpdesk: monitor tickets, calls and walk-ups., • Triage, troubleshoot, resolve or assign cases promptly., • Proactively follow up on tickets and CSAT surveys., • Analyse service trends against SLA targets., • Build, patch and support Windows laptops, macOS devices, iOS/iPadOS mobiles and tablets via Intune/Autopilot/Kandji., • Enforce MFA, conditional access, vulnerability patching and CIS-aligned baselines., • Run phishing simulations, incident playbooks and device-compliance audits., • Collaborate with the IT Manager on threat monitoring, investigations and ISO 27001 compliance., • Plan and execute application upgrades, Intune policy changes and security updates with minimal user disruption., • Provide on-site support to project locations across Central London., • Maintain a living knowledge base, SOPs and runbooks in FreshService., • Lead, develop and inspire junior members of the team through technical walkthroughs, mentoring and shadowing., • Balance multiple open cases against business impact., • Use ticket analytics to identify automation opportunities, drive shift-left initiatives, and improve service delivery., • Act as a champion for smarter ways of working, leveraging data, AI and automation to deliver better outcomes for BW and our clients. Skills & Experience • Technical expertise across Microsoft 365, Azure Active Directory, Intune, Autopilot, and Windows/macOS environments., • Strong knowledge of networking (LAN/WAN, switching, firewalls, VPN) and troubleshooting connectivity issues., • Familiarity with cloud storage and collaboration platforms such as Egnyte, SharePoint, and Microsoft Teams., • Understanding of SQL databases (Azure SQL, Supabase) and their integration into reporting tools such as Power BI., • Experience supporting mobile device management (iOS/iPadOS, rugged devices)., • Hands-on understanding of cybersecurity frameworks (ISO 27001:2022, ISO 22301, Cyber Essentials Plus, CIS controls)., • Proven ability to manage service desks, incidents, and SLAs using ITIL best practices., • Strong communication and coaching skills — able to support colleagues at all levels and contribute to BW’s culture of Big Ambitions, Grounded Confidence, Integrity, and 0% Ego., • A proactive approach to automation, AI adoption and process improvement in support of BW’s wider Data & Intelligence Strategy.

Cantor Fitzgerald’s Global Information Security team is seeking an Information Security Identity Engineer. The successful candidate will need to be able to work in a fast-paced environment, planning, coordinating, and executing all facets of our program. Responsibilities will include: • Strong experience with authentication systems such as LDAP, MS Active Directory, Kubernetes, and Microsoft Entra including OIDC, OAuth, and SAML 2.0 protocols. Experience with Microsoft Authentication Libraries (MSAL) a plus. Experience with B2C configurations also a plus., • Experience with privileged access management solutions (PAM) such as CyberArk, Keeper, etc., • Experience with Identity Governance solutions like SailPoint, IBM, Oracle, etc., • Partner with DevSecOps teams to embed IAM best practices into CI/CD pipelines, automating identity governance and access controls., • Define and enforce security and identity policies across cloud platforms. (AWS, Azure, GCP), • Document system configurations, standards, and procedures in a centralized location., • Support Incident Response on security incidents globally, including contributing to table-top security incident exercises., • Advise project teams, application owners, infrastructure services, and other digital Information Technology teams on information security controls., • Continually improve team documentation, including solution run books, architecture, knowledge base articles, FAQs, SharePoint., • Provide evidentiary support for Audit and Compliance teams., • Manage the remediation process including tracking and resolutions of findings from internal and/or external audit findings, risk assessments, and other control assessments., • Develop and maintain a strong partnership with relevant regional business and technical leaders and teams, including 3rd parties and affiliate businesses., • Monitoring, collecting, analyzing and reporting of security metrics and indicators to ensure the proper operations of our regional systems and services., • Regional security incident response and management point of contact and drive incident postmortems to find the root cause and track action items to completion., • Experience working with Service Management, Incident Management, and Change Management required. Qualifications and Skills: Education • Bachelor's Degree (or equivalent work experience)., • At least five+ years of identity and access management experience in IT and/or Information Security combined. Must-Have Skills • Manage Identity Providers such Microsoft Entra (formerly AAD), Okta, Ping One, Auth0, etc., • Strong experience with authentication protocols including OAuth, OIDC, SAML, etc., • Experience with PAM and Remote Desktop Solutions (CyberArk, Keeper, Venn, Zscaler, Global Protect, etc.), • IGA solutions and deployments (SailPoint, Saviynt, Oracle, etc.), • Integrating security systems via API, etc., • Experience with ticket management solutions: Dynamics 365, ServiceNow, Remedy, etc., • Experience with PMO tools such as Smartsheet, Monday.com, etc., • Microsoft O365 products (Excel, PowerPoint, etc.), • Collaboration and communication skills across multiple teams and businesses. Good-to-Have Skills • Palo Alto Firewall, F5 LTM, F5 GTM, • SIEM and SOAR tools (Splunk, Cribl, PAN Cortex), • Powershell, • Python Scripting, • Power BI and Power Automate.

Colt is the New Standard in high bandwidth network and voice services for enterprises and wholesale customers in Europe, Asia and North America’s largest business hubs. With a global reach but a deep local presence, Colt is big enough to deliver and small enough to care. Why we need this role? As the Lead - SOC Incident Manager, your role will encompass communicating cybersecurity incidents to key partners across the enterprise as well as being the main interface between the Colt business units and the cybersecurity groups. You will be the subject matter expert responsible for coordinating cyber security incidents across the enterprise. What you will do: You will play a key role within the SOC to manage incidents: • Lead and coordinate response efforts to cyber security incidents caused by internal and external threats to reduce the impact of these incidents to Colt and its customers., • Act as the bridge between the SOC incident responders, IT support teams and business groups to ensure a consistently execution of incident triage and remediation., • Build and manage cyber incident tabletop exercises to ensure Colt is prepared to deal with cybersecurity incidents., • Perform post incident analysis, identifying lessons learned throughout Fidelity with applicable teams for tactical and strategic remediation. What We're Looking For? • Bachelor’s degree (or foreign education equivalent) in Computer Science, Engineering, Information Technology, Information Systems, Mathematics, Physics, Business Administration, or a closely related field, • Solid understanding of common threats, penetration/intrusion techniques and attack vectors., • Lead under pressure and act as the command and control in managing critical cyber incidents. Experienced in handling cyber security incidents as well as other business or IT recovery incidents., • An ability to explain sophisticated topics to a varied audience of people who work in both IT and non-IT roles., • Proficient with commonly used incident response tools, logging, and SIEM technologies., • In-depth knowledge of and experience in security concepts such as cyber-attacks and techniques, risk management, incident management, threat management, etc. What We Offer You Looking to make a mark? At Colt, you’ll make a difference. Because around here, we empower people. We don’t tell you what to do. Instead, we employ people we trust, who come together across the globe to create intelligent solutions. Our global teams are full of ambitious, driven people, all working together towards one shared purpose: to put the power of the digital universe in the hands of our customers wherever, whenever and however they want. We give our people the opportunity to inspire and lead teams, and work on projects that connect people, cities, businesses, and ideas. We want you to help us change the world, for the better. Diversity and inclusion • Signed the UN Women Empowerment Principles which guide our Gender Action Plan, • Trained 60 (and growing) Colties to be Mental Health First Aiders Our benefits support you through all parts of life, for both physical and mental health. • Flexible working hours and the option to work from home., • Extensive induction program with experienced mentors and buddies., • Opportunities for further development and educational opportunities., • Global Family Leave Policy., • Employee Assistance Program., • When you join Colt you become part of our global network. We are proud of our colleagues and the stories and experience they bring – take a look at ‘Our People’ site including our Empowered Women in Tech.

⚠️ This role is based in the UK and we unfortunately are not able to provide visa sponsorship. ⚠️ ⚠️ Also, this is an experienced hire role. Please do not apply if you are seeking your first role in cyber security - look out for our Graduate SOC Analyst roles instead ⚠️ What we’re offering (saves you scrolling straight to the bottom): • Salary: £40,000–46,000 depending on experience, • Shares: We operate an EMI scheme and you will earn over time a slice of the CyPro pie., • Holiday: 25 days paid holiday plus bank holidays (increases by 1 day per year worked up to 30 days), • Flexible Working: We love getting the team together in the office, so we typically spend three days per week together in our lovely London office (39 floors up in Canary Wharf 👀). The rest of the time, you can work wherever you’re most productive., • Working Hours: 4 days on, 4 days off, rotating day/night shifts, • Training: Budget for one certification/course per year, • Socials: We meet regularly to have a drink, throw some axes, • Start Date: ASAP About CyPro: • We are an innovative cyber security start-up united in a shared mission: to redefine cyber security for small and medium-sized businesses (SMBs)., • Our Founders – Jonny & Rob – spent most of their early careers delivering cyber security for large enterprises and central government. They saw a clear need for a new approach to cyber security as SMBs became increasingly targeted by cyber criminals. By 2022, SMBs accounted for 75% of attacks, largely due to being easy targets., • Together, CyPro is already setting new standards, defining innovative solutions and equipping its clients with the cyber security they need to prevent attacks, secure bigger clients and scale to new heights., • We are growing quickly, and the next few years promise more of the same. Joining CyPro means becoming an integral part of our mission and joining a team of industry experts embarking on this journey. The Role: • This isn’t your typical SOC Analyst role where you’re pigeonholed into one narrow specialism. At CyPro, you’ll have the opportunity to get involved in a wide range of areas including monitoring, incident response, threat intelligence, detection engineering, automation and internal security operations., • You’ll play a key role in our Security Operations Centre, delivering 365-day monitoring, detection and response to our growing customer base. You’ll contribute to building out our capabilities, improving tooling and processes, and shaping how we operate as the function matures., • As the team grows further, you’ll have the flexibility to focus more deeply on the areas that interest you most – whether that’s advanced detection engineering, threat intelligence, incident response leadership or platform automation. If you’re ambitious and want to help shape something rather than simply follow a process, this is the right environment for you. Core Responsibilities:Security Monitoring & Incident Response • Monitor security alerts generated by Microsoft Sentinel, Microsoft Defender, Datadog and Elastic., • Assess severity and impact of alerts, triage and investigate incidents independently., • Execute containment and remediation actions using defined runbooks and playbooks., • Correlate data across platforms to identify anomalies, malicious patterns and attacker behaviour., • Produce detailed incident reports, RCA and after-action reviews for internal and client use., • Develop and implement new detection rules in Microsoft Sentinel aligned to the MITRE ATT&CK framework., • Draft and optimise KQL queries for detection and threat hunting., • Analyse threat intelligence feeds to identify relevant threats and vulnerabilities., • Review and tag IOCs and TTPs observed in client environments., • Prepare weekly and monthly SOC reports highlighting activity, incidents and trends., • Join governance calls with senior analysts or managers to present SOC insights., • Support the management of CyPro’s internal security environment., • Administer and monitor identity management solutions., • Manage and maintain our MDM platform to ensure secure and compliant device management., • Design and develop Logic Apps to automate incident response workflows., • Contribute to evolving internal runbooks and knowledge base articles., • Work toward and maintain relevant certifications (e.g. SC-200, AZ-500)., • Stay up to date with current threat trends, attacker TTPs and defensive strategies., • Actively participate in ongoing training and capability development. Who we're looking for: • Self-Starters – we’re not a large FTSE organisation with a procedure for everything. You’ll need to operate in an environment with few guardrails and help build things as we grow., • Ambitious & Driven – whether your goal is to lead a team, specialise technically or move into leadership in future, we’ll support your development., • Always Improving – we’re a growing business and want our people to grow with us. What we think you need to be successful: Education & Experience • University educated with a degree in computer science, information security or equivalent, • At least one year of experience in a SOC environment monitoring and responding to incidents, • Microsoft Sentinel and Defender hands-on expertise, • SC-200 certification or willingness to achieve it, • Strong KQL skills for threat hunting and incident forensics, • Experience with SIEM, IDS/IPS and threat intelligence platforms, • Familiarity with incident response frameworks and security best practice, • Problem-Solving: Identify, troubleshoot and resolve complex security issues., • Attention to Detail: Ensure accurate detection, analysis and documentation., • Analytical Thinking: Comfortable interpreting complex security data., • Communication: Clear and confident communicator, able to translate technical issues for non-technical audiences., • Calm Under Pressure: Maintain composure during incidents and escalate appropriately., • Accountable & Humble: Take ownership and learn from experience., • Curious: Dive into data sets and problems to uncover patterns and root causes. Our Two-stage Hiring Process: • Intro Discussion (20 minutes, Remote): An initial chat to learn more about you and the role., • Assessment Centre (2 hours, London): A mini project on-site (no prep required), some quick tests, followed by a final interview with the founders and our SOC Manager.

Leading Sustainable E-Commerce | 35 Million Users | Mid & Senior Back End Engineers | TypeScript/Node/AWS | Up to £100K + Bonus | REMOTE (UK) or 1 Day Per Week (LDN) Company Our client is an extremely well known, digital marketplace focused on sustainable ecommerce. With over 35 million of active users globally, they’re redefining how people buy and sell second-hand fashion, aiming to make the future of style both circular and accessible. The company has offices in UK, EU and US and experienced significant growth especially around the US market and now operates as part of a leading global e-commerce group. They pride themselves on fostering inclusivity, creativity, and innovation and values that extend to both their community and their teams. The organisation champions diversity, equal opportunity, and flexible working. They offer a progressive benefits package designed to support wellbeing, learning, and work-life balance. Role & Responsibilities ->Work closely with engineering managers, product managers, product designers, and other engineers to understand problems and design pragmatic solutions. ->Write high-quality, well-structured, maintainable code that powers production systems. ->Take ownership of product development from discovery through implementation and delivery. ->Provide end-to-end application support, including participating in incident response and post-incident reviews. ->Embrace agile and user-centred development practices. ->Contribute to a culture of continuous improvement via architecture reviews, blameless post-mortems, and engineering guilds. ->Collaborate daily with cross-functional teams to solve problems and ship features. ->Own the lifecycle of your code, systems, and data — from design and deployment to monitoring and maintenance. What you will bring to the table as a Engineer at Leading Sustainable E-Commerce | 35 Million Users | Mid & Senior Back End Engineers | TypeScript/Node/AWS | Up to £100K + Bonus | REMOTE (UK) or 1 Day Per Week (LDN)... ->Strong software engineering experience (Nodejs/TypeScript, Scala, Java, or Python). -> Experience building scalable, resilient systems and APIs. ->Solid database knowledge (SQL & NoSQL). ->Product-focused mindset — solving real business challenges, not just writing code. ->Bonus if you’ve worked with AWS, Terraform, Docker, or event-driven systems like Kafka or RabbitMQ. What they can offer engineers at Leading Sustainable E-Commerce | 35 Million Users | Mid & Senior Back End Engineers | TypeScript/Node/AWS | Up to £100K + Bonus | REMOTE (UK) or 1 Day Per Week (LDN)... ->Private health and mental wellbeing coverage, including access to counselling and coaching. ->Salary Ranges: Senior (Up to £100k + Bonus) , Mid Level (Up to £78k + Bonus) ->25 days annual leave, plus additional company-wide rest days and volunteer leave. ->Flexible hybrid working, with the option to work abroad for limited periods. ->Generous parental, IVF, and carer leave policies. ->Learning and development budgets for conferences, mentorship, and skills growth. ->Pension matching, life insurance, and recognition for service milestones. If you are interested in the Leading Sustainable E-Commerce | 35 Million Users | Mid & Senior Back End Engineers | TypeScript/Node/AWS | Up to £100K + Bonus | REMOTE (UK) or 1 Day Per Week (LDN) - drop over your CV and we will give you a call if we think you are a good fit :) .

Job Title: Identity & Access Management (IAM) Specialist – (Active Directory, Entra, Okta, SailPoint, CyberArk) Location: Hybrid SC Clearance Mandatory for this role. Overview: Join a dynamic Identity & Access Management team supporting both IT and Operational Technology systems within a critical utilities environment. This role focuses on implementing and managing corporate and operational identity solutions, ensuring compliance with relevant security frameworks, and supporting the transition of IAM services to third-party partners. We are seeking a seasoned IAM professional with deep expertise in Active Directory, Entra ID (Azure AD), and Okta, along with experience or familiarity in SailPoint or CyberArk. The ideal candidate will support both Identity Governance & Administration (IGA) and Privileged Access Management (PAM) initiatives while enabling secure hybrid identity integrations across IT and OT platforms. Key Responsibilities: Project Delivery & Implementation: • Support deployment of identity solutions for third-party smart access systems., • Assist in designing IT and OT identity frameworks, identifying limitations, and resolving system inconsistencies., • Facilitate smooth transitions across IT and OT environments, including hypercare and process adaptations., • Investigate and resolve IAM security incidents, access anomalies, and authentication issues., • Review and monitor Identity Threat Detection & Response (ITDR) systems., • Collaborate with SOC teams to detect privileged account misuse and insider threats. Identity & Access Management (IAM): • Design, implement, and maintain IAM solutions leveraging Active Directory, Entra ID, Okta, SailPoint, and CyberArk., • Configure Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Conditional Access Policies for OT integration with existing IT tooling., • Define and enforce Role-Based Access Control (RBAC) and least privilege principles across enterprise and industrial systems. Identity Governance & Administration (IGA) – SailPoint: • Implement and manage automated provisioning, deprovisioning, and access certifications via SailPoint., • Build workflows for user lifecycle management, identity reconciliation, and compliance reporting., • Integrate SailPoint with Active Directory, Entra ID, SAP, ServiceNow, and other enterprise systems. Privileged Access Management (PAM) – CyberArk: • Administer CyberArk PAS for privileged account security., • Manage Privileged Session Manager (PSM), Vault, and Endpoint Privilege Manager (EPM)., • Monitor privileged access, enforce Just-In-Time (JIT) access, and generate compliance reports. Hybrid Identity & Security: • Implement hybrid identity solutions connecting on-prem Active Directory with Azure AD, Okta, and SailPoint for OT environments., • Ensure IAM solutions adhere to CAF, eCAF, NIST, and other regulatory frameworks., • Conduct access audits, identity risk assessments, and compliance reporting., • Work closely with cybersecurity, risk, and compliance teams to align IAM strategies with regulatory requirements. Collaboration & Documentation: • Partner with OT, cybersecurity, compliance, and risk teams to define policies and access controls., • Develop IAM runbooks, playbooks, and conduct user access reviews., • Provide IAM training and awareness for employees and technical teams. Technical Skills & Experience: • Directory Services: Active Directory (AD DS, AD FS, Group Policy, LDAP, Kerberos, NTLM); Microsoft Entra ID (Azure AD), Conditional Access, Identity Protection., • IAM Platforms: Okta Identity Cloud – SSO, MFA, API integrations, identity governance., • OT/ICS Knowledge: SCADA, ICS, and OT identity management., • Identity Governance: SailPoint IdentityNow/IdentityIQ – access reviews, lifecycle automation, compliance workflows, and enterprise application integration., • Privileged Access Management: CyberArk – Vault administration, credential rotation, JIT access, session monitoring, compliance reporting., • Security & Compliance: CAF, eCAF, NIST frameworks; IAM controls for critical infrastructure; incident response and threat detection. Preferred Certifications: • Microsoft Certified: Identity and Access Administrator Associate, • Okta Certified Administrator/Professional, • SailPoint IdentityNow/IdentityIQ Engineer, • CyberArk Defender/Guardian, • CISSP or Certified Identity and Access Manager (CIAM) Preferred Industry Experience: • OT cybersecurity best practices, • Hybrid cloud identity management for Azure & AWS Please note - Candidate must have SC Clearance for this position.

Site Reliability Engineer (SRE) – eDV Cleared Location: London (On-site) Salary: Up to £75,000 + Clearance Bonus + Company Bonus Clearance: eDV (Enhanced Developed Vetting) required Are you an experienced Site Reliability Engineer (SRE) with active eDV Clearance? Do you want to work on mission-critical systems that directly support UK National Security? Join a leading UK consultancy at the forefront of secure technology delivery for Government clients. You’ll be working alongside some of the brightest minds in the industry, ensuring the reliability, scalability and performance of complex, high-assurance systems that protect the nation. The Role: As a key member of the SRE team, you’ll design, build and maintain reliable infrastructure and automation solutions to keep vital services running smoothly. You’ll drive continuous improvement across monitoring, deployment, and incident response for highly secure environments. Key Responsibilities: • Maintain and improve mission-critical infrastructure for national security programmes., • Develop and support CI/CD pipelines and automation tools., • Ensure system reliability, availability, and performance through proactive monitoring., • Collaborate with developers, platform engineers, and security teams to optimise service delivery., • Drive operational excellence through observability and robust incident management practices. Required Skills & Experience: • Active eDV Clearance (essential)., • Strong background in Linux or Cloud-native environments., • Hands-on experience with tools such as Terraform, Ansible, Kubernetes, or Docker., • Knowledge of CI/CD pipelines, monitoring, and logging tools., • A passion for automation, scalability, and continuous improvement. What’s on Offer: • Base salary up to £75,000., • Clearance bonus + company performance bonus., • Opportunity to work on high-impact, national security projects., • Career development within one of the UK’s most respected secure consultancies. If you’re an SRE with eDV clearance looking to make a real impact in a secure and rewarding environment, we’d love to hear from you. 📩 Apply now or reach out directly to Dominic Barbet at

Head of Information Security - FinTech - £100K+ Our client is one of the country’s fastest growing FinTechs. Based in central London, hybrid working, they’re looking for a Head of InfoSec to join them, champion security and take the lead across DevSecOps, application security, ops and governance. You’ll have the chance to own security for the company and drive it forwards, leading a team of exceptional engineers. You’ll be able to drive AppSec and secure development practices, overseeing SOC and lead GRC and Risk Management along with IT Ops and Platform teams. This is an incredible opportunity to head up InfoSec for a growing, cutting-edge FinTech – Not something to miss! Requirements: • Great AppSec experience and experience owning an Application Security program, • Strong knowledge of running Security Operations, monitoring, incident response etc, • Excellent GRC knowledge – GDPR, ISO etc, • Proven communication skills, • Experience of leadership around risk, • Track record of building a team and developing people, • Strong knowledge of modern IT tools and trends – Cloud, DevSecOps, AI etc

Lead Cyber Security Engineer We're partnered with a global law firm who are looking to build a next-generation Security Operations (SecOps) function. They are looking for a Lead Cyber Security Engineer to drive innovation, strengthen resilience, and champion a zero-trust approach across their global network. What You’ll Do • Build the SecOps team from the ground up and manage/mentor the team., • Lead the implementation, optimisation, and management of cutting-edge security tools like CrowdStrike, Palo Alto, and Mimecast., • Take ownership of our cyber defence posture from incident response and vulnerability management to WAFs, DDoS protection, and encryption., • Mentor junior engineers, elevate best practices, and help us on our journey to ISO 27001 certification. What You Bring • Deep hands-on expertise across EDR, SIEM, NAC, MFA, PAM, and cloud security environments., • Proven experience with security frameworks such as ISO 27001, NIST, CIS, and PCI-DSS., • Certifications like CISSP, CPSA, or Palo Alto Certified Security Operations Professional., • A collaborative mindset, a passion for innovation, and the confidence to take the lead in a high-trust environment. Please get in touch if you are keen!

Head of Security Operations • Hybrid 3x per week in the office Our client a global insurance business are looking for a Head of Security to join them on a permanent basis. You will help to establish and lead local security operations capability across European offices, providing strategic technical leadership in incident response, cyber threat visibility, and security resilience. This role will bridge the gap between our centralized corporate security services and regional business needs. Key Responsibilities Incident Response & Security Operations • Lead and mature security incident response capabilities across the organisation, • Oversee incident investigations, alert triage, and threat hunting activities, • Develop and execute tabletop exercises and incident response playbooks, • Provide expert technical guidance during security incidents and recovery efforts, • Partner with third-party security service providers and managed services, • Enhance detection and monitoring capabilities aligned to NIS2/NIST frameworks, • Drive continuous improvement of security tools, processes, and procedures, • Ensure appropriate balance between local autonomy and corporate alignment, • Contribute to broader security strategy and roadmap development Essential Requirements Technical Expertise • Demonstrable expertise in security incident investigation, detection, response, and recovery (NIST/NIS2 frameworks), • Strong foundation in security operations, but with strategic vision beyond SOC alert handling, • Experience with security telemetry, SIEM platforms, and threat detection technologies, • Proven track record maturing incident response and tabletop exercise programs, • Experience working alongside third-party security service providers and corporate security teams If you have the desired skills and experience and would like to find out more please apply to this advert by following the link below and attaching a copy of your most recent CV. If successful we will be in touch to discuss the role in more detail.

Position: Security Lead / Security Architect Type: Permanent Location: London 2 days p/week; 3 days remote Salary: £84K - £94K DOE Looking for your next step in security leadership? This is a great opportunity for an experienced security professional to take ownership of an organisation’s technology security strategy - driving best practice, influencing culture, and embedding security at the heart of delivery. The Role As the Security Lead /Security Architect, you’ll be the go-to person for all things security across global engineering teams. You’ll shape strategy, improve governance, and guide technical teams to build secure, resilient systems. This role blends hands-on technical insight with strategic influence - perfect for someone who enjoys both detail and direction. What You’ll Be Doing • Lead the organisation’s security posture across technology and engineering., • Set and deliver security strategy and best practice frameworks (ISO 27001, NIST, AWS Well-Architected)., • Oversee incident response, risk assessments, and vulnerability management., • Drive a positive security culture across technical and non-technical teams., • Partner with senior stakeholders to ensure security priorities align with business goals. What We’re Looking For • Proven experience in senior-level security positions, combining both hands-on and strategic exposure., • Strong stakeholder management skills - comfortable influencing at all levels., • Experience leading or mentoring teams in secure design and engineering practices., • Knowledge of modern cloud environments and security frameworks., • A pragmatic, collaborative approach - you know how to balance business needs with strong security. Why Apply? You’ll have real autonomy to shape security direction, work with modern tech, and influence global teams - all while helping build a mature, forward-thinking security culture.

Attribution Search is partnering with a leading Multi-Strat Global Hedge Fund to hire a Production Engineer within its London office. The fund manages over $15bn with a long track record for stable, year-on-year performance. This is an opportunity to join a growing team, while working alongside senior partners who have been there since its launch. The Role: You'll join the fund's global technology team, where you will focus on the resilience, automation and observability of production systems that power a mission-critical quantitative trading platform. The role forms part of a follow-the-sun global support model. Primary Duties: • Build and maintain automated tools to support system deployments, monitoring, alerting, and operational workflows., • Monitor health of trading systems with a goal of proactive failure prevention., • Take ownership of, and improve incident response, root cause analysis, and blameless post-mortems., • Partner with developers to build scalable, testable, and efficient deployment pipelines., • Collaborate with trading, operations, and quant teams, as well as external vendors, to troubleshoot and optimise production environments Experience Required: • 3+ years’ experience in a production-facing engineering or reliability role within financial services or another high-availability technology environment., • Strong track record in automation, monitoring, and incident response for distributed or mission-critical systems., • Proficiency in scripting and systems programming., • Hands-on experience with configuration management, containerisation, and orchestration tools. Tech Stack + Tools: • Programming & Scripting: Strong proficiency in Python (core requirement), with additional experience using T-SQL and Bash., • Infrastructure & Systems: Exposure to Linux and Windows environments, with working knowledge of Docker containers and AWS cloud services., • Monitoring & Observability: Familiarity with DataDog, Grafana, and other internal or custom monitoring solutions., • Automation & CI/CD: Experience using Git, TeamCity, and configuration management tools such as Ansible or Terraform., • Databases: Hands-on experience with Microsoft SQL Server and Snowflake. Candidates with relevant experience are encouraged to apply to find out more.

Cantor Fitzgerald’s Global Information Security team is seeking an Information Security Operations Engineer with background and knowledge of Linux systems and Cloud infrastructure. The successful candidate will need to be able to work in a fast-paced environment, planning, coordinating, and executing all facets of our program and will play a critical role in detecting, responding to, and mitigating security threats across enterprise environment. Responsibilities will include: • Monitor, analyze, and respond to security events and incidents using SIEM and other security tools., • Develop and maintain detection rules, playbooks, and automation scripts to improve incident response efficiency., • Perform threat hunting and forensic investigations across IT environment., • Collaborate with infrastructure and application teams to ensure secure configurations and compliance., • Maintain and improve endpoint protection, intrusion detection/prevention systems., • Document incident response procedures and contribute to post-incident reviews., • Create network diagrams and as-built documents., • Develop and maintain a strong partnership with relevant global businesses and technical leaders and teams, including 3rd parties and affiliate businesses., • Stay current with emerging threats, vulnerabilities, and security technologies. Qualifications and Skills: Education • Bachelor's Degree in MIS, CIS, Cybersecurity or similar., • At least five years of Security Operations., • At least three years of Linux Administration., • At least two years of Cloud (AWS or Azure) Administration. Must-Have Skills • Linux and Windows OS., • DNS., • Certificate Management: Digicert, AppViewX., • Experience with ticket management solutions: Dynamics 365, ServiceNow, Remedy, etc., • Experience with PMO tools such as Jira, Smartsheet, Monday.com, etc., • Microsoft O365 products (Excel, PowerPoint, etc.)., • SEIM and SOAR technologies (Splunk, Cribl, Azure Sentinel)., • Configure and troubleshoot EDR/ Microsoft Defender for Endpoint, vulnerability management, and threat detection systems, with focus on Linux OS., • Azure Security Center and Office365 Compliance Portal., • AWS and Azure (IAM, IaaS, PaaS)., • Knowledge in KQL queries in Sentinel and/or SPL in Splunk for developing use cases, dashboards, custom rules, custom parsers., • Intermediate Understanding of services and protocols commonly used in hosting environments: web servers, database servers, active directory protocols., • Understanding of network packet analysis using tools such as Wireshark and TCPDump., • Collaboration and communication skills across multiple teams and businesses. Good-to-Have Skills • Relevant certifications such as AWS Security Specialty, CISA, CISM, GIAC, Security+, or CISSP., • Palo Alto Firewall, F5 LTM/GTM., • Palo Alto Cortex suite of tools., • Network technologies: switching, routing, wireless., • PowerShell and Python Scripting., • Power BI and Power Automate., • Integrating security systems via API, etc.

Information Security Analyst Hyrbrid Working Offered Note Preference will be given to candidates from a financial services / banking environments Salary: Up to £65,000 Purpose of the Role Supporting the organisation’s Information Security function by helping to develop, operate, and improve its Information Security Management System (ISMS). The role is responsible for providing advice, assurance, and oversight to reduce risks that could compromise the confidentiality, integrity, and availability of business systems and data. Experience in designing and monitoring security controls is essential, supporting compliance with industry standards and regulation, and ensuring alignment with group-wide information security practices. Key Responsibilities • Carry out assurance activities to measure compliance with security policies and control objectives, identifying gaps and opportunities for improvement within the first line of defence., • Record, track, and report on findings from security reviews, audits, and incidents, including the preparation of management information and risk reporting., • Develop, update, and deliver information security awareness training to ensure all employees understand their obligations and responsibilities., • Respond to security-related queries arising from audits and group-level oversight., • Contribute to vendor risk assessments with a focus on information security requirements., • Draft and maintain guidance on security controls for both business and IT stakeholders., • Monitor security alerts, logs, and related tools, escalating issues where required., • Support the coordination of incident response activities and participate in simulation exercises., • Perform information security duties as outlined in corporate policies and procedures., • Stay current with emerging practices, threats, and technologies to maintain the knowledge required for the role., • Provide support to senior information security leadership as required., • Undertake other tasks related to information security or IT as directed. Qualifications and Experience • Experience in managing or supporting an Information Security Management System (ISMS) based on frameworks such as ISO 27001, NIST, or SOC2., • Professional certification in information security governance and management (e.g., CISSP, CISM, CISA) preferred., • Minimum of 2 years’ experience in information security, including carrying out reviews and supporting improvements across technical and procedural controls., • Strong skills in documentation, analysis, and reporting., • Technical knowledge of cybersecurity concepts and practices., • (Desirable) Familiarity with SIEM, vulnerability assessment, incident detection, and system hardening., • (Desirable) Exposure to tools such as Microsoft Sentinel, Darktrace, Carbon Black, or Qualys., • General IT knowledge, with an understanding of IT operations and risks., • Awareness of regulatory environments, ideally with some exposure to financial services or another highly regulated sector.

Senior SecOps Engineer Location – London (4 days per week in London) Salary - £80-90k + Bonus + Benefits Currently working with a global InsureTech firm who are looking to hire a Senior SecOps Engineer to compliment their established yet growing internal Cyber Defence capability. This is a wide ranging role where you’ll be responsible for both Engineering and Analysis; monitoring and responding to incidents whilst also developing new detection rules and enhancing their monitoring infrastructure and tooling. This is a cloud-native SOC capability, based in Azure with a big emphasis on the Microsoft E5 suite of security monitoring and detection tooling. Experience configuring, fine-tuning and managing this tooling will be essential, as well as the ability to enhance and automate where possible using KQL. This is an incredible opportunity for an experienced SecOps specialist with experience of both SecOps Analysis and Engineering to join an established yet growing firm at a crucial point as they completely build out their Information and Cyber Security capability. Key Responsibilities: • Act as a lead and technical escalation point on the most complex incidents and investigations., • Develop and engineer new detection rules, automating monotonous tasks where possible., • Proactively research emerging and potential threat actors as a way of developing rules to safeguard against potential future threats., • Mentor and train junior team members through complex incident response investigations. Key Requirements: • Significant experience working in a SOC environment (5 years minimum), dealing with and responding to escalated and most high profile incidents., • Comprehensive knowledge and experience utilising/fine-tuning the Microsoft E5 Security stack – Defender, Sentinel, KQL, etc., • Experience working in hybrid-cloud SOC environments – Azure preferably., • Ability to articulate specific projects that you have built, developed or led on, specific to SecOps Engineering and Automation. If you’re an experienced SecOps Specialist, looking to shape how one of the most innovative HealthTech firms build out their cyber defence capability and leave a lasting impact on one of the most reputable organisations whilst working alongside a team of genuine Cyber Security SMEs, click the to apply or get in touch directly –