Trabajos incident response en Birmingham - Page 2Crear alertas

ROLE TITLE: SOC Analyst LOCATION: flexible (can be mostly remote, must be based in UK) CLEARANCE: SC cleared, or eligible for SC clearance Salary: £35k - £41k The ideal candidate will have active SC Clearance or be eligible to undergo SC Clearance. We are actively looking to secure an SOC Analyst to join Experis. Experis Consultancy is a Global entity with a well-established team with over 1000 consultants on assignment across 20 clients globally. Our UK operation is growing and has very aggressive plans for expansion over the coming years. We form part of the Manpower group of companies that turn over $20 billion a year collectively. Experis UK have partnerships with major clients across the UK spanning multiple industries; our approach is a very personal one, with both our clients and our own employees. We are passionate about training, technology and career development. Key accountabilities of the role • A SOC Analyst will be responsible for providing Protective Monitoring Services across a range of Secure Customers., • They will be responsible for the day to day monitoring using various SIEM Tools (Qradar, Sentinel & LogRhythm). Some of the responsibilities that come along with this role include the following: Security Analytics Incident investigation, triage and escalation Threat monitoring and response Trend reporting Rule tuning and continual service improvement, • The role involves working alongside other team members including SOC engineers and Service Managers. Skills required: • Microsoft Certified: Security Operations Analyst Associate Certification (SC200) is a mandatory requirement for role fulfilment, • Experience working with SIEM technologies and security tooling, • An understanding of IT Infrastructure and Networking An understanding of vulnerability and threat management, • An understanding of the incident response lifecycle T, • he ability to work in a close team and independently, • The ability to be adaptable to a high pace changeable workload, • An interest in security and threat management Benefits Include: • Contributory pension scheme, • Employee Assistance Program, • Medical and Dental cover, • 22 days holiday + bank holidays, • Maternity Pay/Shared Parental leave and paternity leave, • Sick pay Suitable Candidates should submit CVs in the first instance.

SOC Analyst Location: Home based/ Remote – Must be Based in the United Kingdom Salary: Up to £35,000, shift based role with 24/7 coverage Qualifications: Must be eligible for SC Clearance The company An exciting opportunity has arisen at an award-winning Microsoft Partner for a SOC Analyst. The business is a fast-growing, industry-leading managed service and managed service security provider, delivering in to mid and large enterprise clients. This is a fantastic opportunity for a SOC Analyst to continue their development at an established Microsoft Partner. The business has a keen focus on developing their staff by providing support for training and earning certifications. You will also gain exposure to cutting-edge technologies, working across security operations and cyberspace. This is a predominantly remote role; you must however be based in the UK to be considered. This role will also require eligibility to gain SC Clearance due to government-based customers. About The SOC Analyst Role As a SOC Analyst, you will support the SOC Manager, acting as an escalation point and technical SME for stakeholders within multiple key clients. This is a hands-on role, that gives you the opportunity to work in a customer-facing capacity as a first point of contact between the customer and security operations centre. As SOC Analyst you will have the opportunity to develop consultancy skills, whilst offering insight into the best technical solutions to secure and report on their client technology stack. Day-to-day tasks include: • Security monitoring and first response., • Incident handling and management., • Vulnerability testing, threat hunting., • Microsoft technology stack experience. Skills and Experience Required for the SOC Analyst Role: • Minimum 2 years’ experience within a similar support based role, ideally in the managed services space across the Microsoft technology stack, • Experience in Entra ID, Intune, and Azure., • Knowledge of Sentinel, and Microsoft Defender., • Experience working within a SOC environment would be advantageous., • Demonstrable experience in forming collaborative working relationships with customers and other internal stakeholders., • Confidence in effectively communicating technical incidents or security threats to non-technical stakeholders., • Previous experience of working with SIEM and log monitoring tools., • SC-200, SC-900 or equivalent certification would be beneficial but not essential. To be considered for this role, you must be UK based and eligible for SC Clearance. JOB ID: #3107759

Company Overview Milestone Technologies is a global IT managed services firm that partners with organizations to scale their technology, infrastructure and services to drive specific business outcomes such as digital transformation, innovation, and operational agility. Milestone is focused on building an employee-first, performance-based culture and for over 25 years, we have a demonstrated history of supporting category-defining enterprise clients that are growing ahead of the market. The company specializes in providing solutions across Application Services and Consulting, Digital Product Engineering, Digital Workplace Services, Private Cloud Services, AI/Automation, and ServiceNow. Milestone culture is built to provide a collaborative, inclusive environment that supports employees and empowers them to reach their full potential. Our seasoned professionals deliver services based on Milestone’s best practices and service delivery framework. By leveraging our vast knowledge base to execute initiatives, we deliver both short-term and long-term value to our clients and apply continuous service improvement to deliver transformational benefits to IT. With Intelligent Automation, Milestone helps businesses further accelerate their IT transformation. The result is a sharper focus on business objectives and a dramatic improvement in employee productivity. Through our key technology partnerships and our people-first approach, Milestone continues to deliver industry-leading innovation to our clients. With more than 3,000 employees serving over 200 companies worldwide, we are following our mission of revolutionizing the way IT is deployed. Job Overview Job Description We are looking for a highly skilled Technical Operations Lead to join our Cybersecurity Investigations team. This role is pivotal in managing technical operations and ensuring the integrity, confidentiality, and availability of our digital assets through proactive and reactive cybersecurity measures. The successful candidate will lead a team of skilled professionals and collaborate with our global leads and client partners to successfully deliver the UK Timezone of a global service team. This role is 100% remote, based in the U.K. with flexible hours required to support global operations. The role reports into our US-based Service Delivery team and works closely with clients based in the U.K. and and US. Key Responsibilities • Provide leadership by mentoring and developing a team of cybersecurity professionals, focusing on building a collaborative, innovative, and high-performing work environment through effective management of performance, recruitment, and ongoing training initiatives., • Actively build and develop the capabilities of team members through the design and execution of training programs, and by dedicating daily time to quality assurance activities such as reviewing individual ticket handling, providing constructive feedback, and identifying skill gaps for targeted development., • Oversee all daily technical operations within the Cybersecurity Investigations team by ensuring established client security protocols are rigorously followed., • Manage and coordinate all aspects of incident response and forensic investigations through following the client parameters while also proactively making suggestions for process improvement., • Manage long-term initiatives for the global team to include global alignment projects, development of processes and standards, change management of processes, reporting and other requests by clients., • Stay abreast of new investigation types and ensure the team has all applicable investigation skills to perform at an adequate level., • Serve as the primary technical liaison between the client team and the UK Based Cybersecurity Investigations team and other departments, facilitating communication and cooperation, preparing detailed reports and presentations on security trends, incident status, and risk mitigation for senior management., • Monitor scheduling to meet baseline standards, handle attendance, timecard tracking and ensure that team members are following applicable laws and regulations in their country., • Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field., • Certification in cybersecurity (e.g., CISSP, CISM, or equivalent)., • Minimum of 10 years of experience in cybersecurity operations or a similar role (hands-on technical experience)., • Minimum of 5 years of active investigator experience in an IR team, preferably in global enterprise environment, • Proven experience leading and managing technical teams., • Strong understanding of cybersecurity frameworks and standards (e.g., NIST, ISO/IEC 27001, IAM)., • Proficiency with cybersecurity tools and platforms (e.g., SIEM, SOAR, SAS, Sandboxes, EDR solutions and cloud technologies)., • Working of knowledge of access control principles, cloud technologies (CNAPP, CSPM), data retention, and encryption methodologies., • Excellent problem-solving, investigative mindset, and communication skills., • Experience presenting at a program level for clients and/or cross functional partners, • Demonstrated ability to work under pressure, • Preferred, active participation in cybersecurity communities or forums., • Preferred, knowledge of programming languages (including database queries), • Preferred, forensic investigation experience Compensation Estimated Pay Range: Exact compensation and offers of employment are dependent on circumstances of each case and will be determined based on job-related knowledge, skills, experience, licenses or certifications, and location. Our Commitment to Diversity & Inclusion At Milestone we strive to create a workplace that reflects the communities we serve and work with, where we all feel empowered to bring our full, authentic selves to work. We know creating a diverse and inclusive culture that champions equity and belonging is not only the right thing to do for our employees but is also critical to our continued success. Milestone Technologies provides equal employment opportunity for all applicants and employees. All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, gender, gender identity, marital status, age, disability, veteran status, sexual orientation, national origin, or any other category protected by applicable federal and state law, or local ordinance. Milestone also makes reasonable accommodations for disabled applicants and employees. We welcome the unique background, culture, experiences, knowledge, innovation, self-expression and perspectives you can bring to our global community. Our recruitment team is looking forward to meeting you.

Description Complexio is Foundational AI. This works to automate business activities by ingesting whole company data – both structured and unstructured – and making sense of it. Using proprietary models and algorithms Complexio forms a deep understanding of how humans are interacting and using it. Automation can then replicate and improve these actions independently. Complexio is a joint venture between Hafnia, in partnership with Marfin Management, C Transport Maritime, Trans Sea Transport and BW Epic Kosan and Símbolo We are looking for a Security & Compliance Speciallist to own and drive our security and compliance requirements. This role is hands-on and strategic, balancing day-to-day operations with long-term initiatives to ensure our organisation remains secure, resilient, and compliant. You will work closely with engineering, product, and leadership teams to embed security into everything we do, while also representing our security and compliance posture to customers, partners, and auditors. Requirements • Security Governance & Compliance, • Lead the company’s efforts to achieve and maintain ISO 27001 (and other frameworks as needed, e.g., SOC 2, EU AI Act readiness)., • Establish, document, and evolve security and compliance policies, ensuring they meet company needs and regulatory requirements., • Drive security and compliance initiatives across business functions, engaging senior stakeholders., • Monitor changes in relevant compliance frameworks (e.g., CIS Benchmarks, EU AI Act, GDPR) and adapt processes accordingly., • Operational Security, • Oversee day-to-day security operations, including vulnerability management, access reviews, and incident response readiness., • Provide insights and triage signals from security tooling (SAST, DAST, dependency scanning, SIEM)., • Work hands-on to perform internal security assessments or penetration testing., • Manage relationships with external pentest providers, auditors, and assessors., • Secure Development Lifecycle (SDLC), • Partner with engineering teams to embed security in the SDLC and DevSecOps practices., • Advise and guide on secure coding practices, threat modeling, and architectural reviews., • Instrument automated tooling for CI/CD pipelines to improve visibility of security signals and enforcement., • Customer & External Engagement, • Represent the company’s security, privacy, and data protection posture in customer and partner discussions., • Provide clear and confident explanations of controls, certifications, and processes during due diligence., • Contribute to security documentation for customer-facing materials., • Risk Management & Strategy, • Perform regular risk assessments and maintain the company’s risk register., • Translate technical risks into business context to enable leadership decisions., • Proven experience in a security engineering, compliance, or security leadership role., • Strong understanding of security standards and frameworks (ISO 27001, SOC 2, CIS, NIST, GDPR, EU AI Act)., • Hands-on technical skills in areas such as penetration testing, application security, or infrastructure hardening., • Familiarity with modern software development practices, DevSecOps, and cloud-native architectures (preferably Python eco-system, Kubernetes and Azure/AWS/GCP)., • Excellent communication skills with the ability to influence stakeholders and explain security to both technical and non-technical audiences., • Experience working with auditors, external assessors, and customer security teams. Nice-to-Have • Prior experience building security functions in a fast-growing SaaS or AI/ML-driven company., • Join a pioneering joint venture at the intersection of AI and industry transformation., • Work with a diverse and collaborative team of experts from various disciplines., • Opportunity for professional growth and continuous learning in a dynamic field.

ServiceNow SecOps Architect - Remote (Inside IR35) - £550 per day - 6 months We're looking for a forward-thinking ServiceNow SecOps Architect to lead the design and delivery of cutting-edge security operations solutions on the ServiceNow platform. You'll play a key role in strengthening the cyber resilience of one of the UK's largest and most innovative energy companies, protecting critical infrastructure, renewable assets, and millions of customers. This is an opportunity to shape a secure and scalable platform at the crossroads of security, technology, and energy innovation. Key Responsibilities: • Lead the architecture and design of ServiceNow SecOps modules (Security Incident Response, Vulnerability Response, Threat Intelligence, etc.)., • Integrate ServiceNow with cybersecurity tools (SIEM, SOAR, EDR, CMDB, OT/ICS)., • Work with cybersecurity, IT, and engineering teams to automate and improve response workflows., • Define and deliver the SecOps roadmap and best practices for multiple business units., • Champion platform governance, scalability, and alignment with enterprise standards., • Mentor delivery teams and ensure quality, performance, and security across implementations. What You Will Ideally Bring: • Proven ServiceNow Architect experience, ideally across SecOps or IRM modules., • Strong understanding of security operations, incident response, and vulnerability management., • Hands-on expertise in ServiceNow workflows, Scripting, and integrations (REST/SOAP, MID Server)., • Experience supporting critical infrastructure (energy, utilities, or OT/ICS environments)., • Excellent stakeholder engagement and communication skills., • Familiarity with security frameworks (NIST, ISO 27001) and regulations (eg, NIS2). Contract Details: • Duration: 6 months (with potential for extension), • Day Rate: Up to £550 per day (Inside IR35), • Location: Remote, • Start Date: ASAP

NHS Associate Director of Operations – Estates | Band 8C | 3–6 Month Assignment Are you a hands-on estates leader with strong operational know-how and NHS experience? We’re working with a growing healthcare estates subsidiary in the Midlands that’s seeking an experienced interim Assistant Director of Operations to lead day-to-day estates and facilities functions. This is a practical, delivery-focused role and would be ideal for someone who’s operated at Head of Estates level or above in an NHS setting. What’s on offer: • Band 8C equivalent day rate, • 3–6 month assignment, • Full-time role, • Mostly on-site in the Midlands You’ll be responsible for operational leadership across engineering, maintenance, compliance and service contracts. This includes delivering improvements across statutory compliance, capital projects and contract performance – all while maintaining a strong safety culture and operational grip. You’ll need: • Extensive NHS Estates and Facilities leadership experience at Head of Level or above, • In-depth knowledge of building management, compliance frameworks, and HTMs, • A confident, practical approach to service delivery and incident response, • Strong communication and leadership skills, with the ability to build positive relationships with contractors and clinical colleagues alike WHY WORK WITH PRACTICUS? We’ve been supporting the NHS with the provision of senior interims since 2004. We care about what we do as much as you care about what you do. If you feel you could help my client and the many people whose lives would be improved and enriched by the successful delivery of this portfolio, then I’d absolutely love to hear from you.

🕵️ ♂️ SOC Manager – Incident Response & Threat Hunting | Fully Remote | Up to £90k + Package This one’s for the player-coach types — hands-on SOC professionals who still love getting involved in the tech but want to step up and lead. You’ll run a virtual SOC supporting critical UK operations, driving incident response, threat hunting, and detection engineering. It’s a hybrid of leadership and action — the kind of role where your technical instincts still matter as much as your management skills. 💡 What makes it stand out: • Fully remote (UK-wide) – only quarterly trips to Warrington, • Up to £90k + £6k car allowance + 10–15% bonus + full benefits, • You can start without any clearance (SC sponsored), • Dual nationals welcome, • On-call 1 week in 4 🔐 You’ll be: • Leading and mentoring a team of SOC engineers, • Acting as incident commander on major cyber events, • Hunting for advanced threats and improving detection, • Driving continuous improvement across tools and processes This suits someone who’s equally comfortable getting into the detail of incidents as they are coaching others and improving the wider SOC function. If you’ve outgrown the day-to-day analyst grind but don’t want to lose your technical edge — this is that perfect middle ground.

Bytes is a top provider of premium IT solutions and services, working with SMEs, corporations, and public sector organizations to modernize and digitally transform their IT infrastructures. Founded in 1982, Bytes has experienced significant growth, now employing over 750 people across seven locations in the UK and Ireland, with a turnover surpassing £1.8 billion in 2023. At Bytes, we nurture talented individuals to achieve remarkable outcomes and are dedicated to supporting our employees through continuous training, guidance, and development to help you advance and fulfil your career goals. We foster a culture of innovation, collaboration, recognition and inclusivity and offer a wide range of benefits to support staff wellbeing. PURPOSE OF JOB: We are seeking an experienced Governance, Risk & Compliance (GRC) Consultant to join our growing cyber security team. You will deliver high-quality GRC services to a diverse client base, help build in-house capability for core offerings, and support the integration of GRC with our Assurance and DFIM service lines. With 3+ years’ experience in information security, data protection, risk management, enterprise IT, legal, or compliance roles, you will have a proven track record of delivering GRC consultancy across sectors. You will demonstrate strong knowledge of frameworks such as ISO, ISF, NIST CSF, NIS/NIS2, DORA, CIS, and Cyber Essentials, and the ability to explain complex requirements clearly to both technical and non-technical audiences. You will have experience engaging with enterprise clients, vendors, auditors, and regulators. Skilled at producing clear, concise reports, you will translate technical findings into business-focused recommendations that support informed decision-making. A hands-on and collaborative approach is essential, balancing strategic oversight with direct delivery. You will be confident in mentoring colleagues, influencing senior stakeholders, and working closely with sales to scope and shape new business opportunities. Reporting to the Head of Assurance Testing, you will actively contribute to client delivery while having dedicated time for professional development, including industry-recognised certifications. This role offers the opportunity to work on high-impact projects within a forward-thinking, supportive environment that values expertise, innovation, and growth. KEY RESPONSIBILITIES: • Deliver high-quality GRC services, including:, • ISO 27001, • NIST Gap Analysis, • CAF Assessments, • PCI DSS, • CSMA, ISF, and CIS Assessments, • Develop and maintain in-house methodologies, templates, and delivery playbooks for core GRC services., • Conduct client workshops, interviews, and assessments to gather requirements and provide actionable recommendations., • Produce clear, concise, and accurate reports, Statements of Work, and other deliverables., • Collaborate with internal teams to integrate GRC services into Assurance and DFIM offerings., • Support Incident Management and Assurance engagements as required., • Provide pre-sales support, including scoping engagements, defining deliverables, and contributing to proposals., • Maintain up-to-date knowledge of industry frameworks, standards, and regulatory changes., • Identify opportunities for service improvement and cross-selling. INDIVIDUAL RESPONSIBILITIES • Deliver high quality GRC consultancy services, • Ensure all deliverables meet defined quality standards and client expectations, • Actively participate in internal training, enablement sessions, and professional development activities., • Share knowledge and expertise with peers to build team capability., • Uphold the highest ethical standards in all interactions with clients, colleagues, and partners., • Manage workload effectively, balancing delivery commitments with learning and development goals. QUALIFICATIONS, EXPERIENCE, & SKILLS: Educational Requirements • Degree in Information Security, Computer Science, Risk Management, or a related field, or equivalent professional experience. - ESSENTIAL Professional Experience One or more of the following: • ISO 27001 Lead Auditor or Lead Implementer certification, • PCI DSS Qualified Security Assessor (QSA) or Internal Security Assessor (ISA), • NIST Cybersecurity Framework or CAF-related training/accreditation, • Certified Information Systems Security Professional (CISSP), • Certified Information Security Manager (CISM), • Certified Information Systems Auditor (CISA), • Certified in Risk and Information Systems Control (CRISC) Years of Experience • Minimum 3 years’ experience delivering GRC services in a consultancy or in-house security role. - ESSENTIAL, • Proven track record of managing client-facing projects from scoping through to delivery.- DESIRABLE, • Experience working across multiple sectors, including regulated industries (e.g., finance, healthcare, government). - DESIRABLE, • Experience supporting Incident Response planning, tabletop exercises, or assurance testing engagements. - DESIRABLE Other Requirements • Strong understanding of governance, risk, and compliance principles, including key frameworks and regulations such as ISO 27001, NIST CSF, CAF, PCI DSS, and GDPR. - ESSENTIAL, • Excellent written and verbal communication skills, with the ability to translate technical requirements into business language. - ESSENTIAL, • Ability to travel to client sites as required. - ESSENTIAL CORE COMPETENCIES & SKILLS • GRC Experience, • Business acumen, • Strong communicator, • Friendly and approachable, • Calm and considered, • Strong code of ethics and morals

Contract: DevOps Engineer: Up to £400PD Outside IR35: 6 months (Rolling): Mostly remote A consulting partner is seeking an experienced DevOps Engineer to join a high-profile financial services client, based out of Berlin, but operating remotely in the UK, on Berlin timezone. The successful DevOps Engineer will have a background as a Support Engineer, and will be tasked with supporting critical systems and providing technical support as well as troubleshooting, incident management and system monitoring and maintenance. You'll take ownership of complex technical issues across Linux, Windows, and cloud environments (Azure/AWS), leading incident response and ensuring systems remain stable, secure, and performant. In addition, you will be required to liaise with key stakeholders and customers, forming key relationships with both. Key skills: • 5+ years' experience in technical support or system administration, • Financial Services/Trading experience, • Strong knowledge of Linux & Windows environments, as well as AWS & Azure, • Automation & Scripting: Bash, Python, or PowerShell, • Familiar with monitoring tools (eg New Relic, Kibana), • Excellent troubleshooting and incident management skills, • (Bonus) Exposure to CI/CD, Docker/Kubernetes, Terraform or Ansible This is an exciting opportunity for an experienced DevOps Engineer to join a high profile financial services organisation and provide a support on critical systems. Contract: DevOps Engineer: Up to £400PD Outside IR35: 6 months (Rolling): Mostly remote Unfortunately, due to the high volume of applications, not all submissions will receive feedback.

Colt is the New Standard in high bandwidth network and voice services for enterprises and wholesale customers in Europe, Asia and North America’s largest business hubs. With a global reach but a deep local presence, Colt is big enough to deliver and small enough to care. Why we need this role? Colt Technology Services SOC is seeking a Tech Lead - SOC Responder. This is an opportunity to meaningfully contribute to a highly visible security operations function with global impact upon Colt, business units, partners, and customers. While working as part of this team, the successful individual will provide world class incident response functions to detect, protect, respond, and sustain operations within cyberspace. What you will do: Support SOC Manager to deliver the following • SIEM, IR tools platform management including all design, implementation and administration activities , Use cases preparation and implementation, connector deployment, maintenance & health checks, • Responsible for operational activities, Technology escalation support, Security Solution assessment, build activities , existing Service maturing and Build activities assist, • Analyse potential infrastructure security incidents to determine if incident qualifies as a legitimate security breach, • Establishing and governing the security incident response processes, investigations and security operational processes., • Maintenance and enhancement of formal service catalogue, service descriptions, targets and performance against these., • Ensure security services, tools and platforms are adequately maintained., • Monitoring of and reporting on the effectiveness of our security enforcing technologies., • Identification and ongoing monitoring of specific security risks and KPIs and production of management information to ensure Colt receives value from key security investments/services., • Contribute to design, development and maintenance of security standards and controls., • Align team's goals and plan with Colt’s long term priorities and strategy., • Develop and grow the talent and people capability within the security teams. What We're Looking For? • 6+ years Information Security Incident Response experience with a focus on detection and response to malicious activity using log data from various sources preferred., • Strong Networking and Systems experience, preferably in an Enterprise environment, • Strong understanding of Information Security and the threat landscape surrounding enterprise systems., • Strong Scripting experience (python, powershell, Unix shell), • Demonstrated experience working in all phases of the SDLC, • Deep understanding and experience using cyber security operations, security monitoring, endpoint (EDR), Network, and SIEM Tools., • Prior SOC experience a plus, • Extensive knowledge of network and server security protocols, technologies, and products., • Industry recognized certifications (CISSP, GCIH, GCFA, OSCP, etc) preferred, • Strong oral and written communication skills., • Relentless curiosity and attention to detail, • Ability to learn quickly and leverage prior experiences to effectively solve current security challenges., • Refusing to accept the status quo, • Degree in Information Technology, Engineering or similar, • SIEM management - Desirable to have some advanced Certification from SIEM vendor on products such as ArcSight , MS Sentinel or Logrhythem What We Offer You Looking to make a mark? At Colt, you’ll make a difference. Because around here, we empower people. We don’t tell you what to do. Instead, we employ people we trust, who come together across the globe to create intelligent solutions. Our global teams are full of ambitious, driven people, all working together towards one shared purpose: to put the power of the digital universe in the hands of our customers wherever, whenever and however they want. We give our people the opportunity to inspire and lead teams, and work on projects that connect people, cities, businesses, and ideas. We want you to help us change the world, for the better. Diversity and inclusion • Signed the UN Women Empowerment Principles which guide our Gender Action Plan, • Trained 60 (and growing) Colties to be Mental Health First Aiders Our benefits support you through all parts of life, for both physical and mental health. • Flexible working hours and the option to work from home., • Extensive induction program with experienced mentors and buddies., • Opportunities for further development and educational opportunities., • Global Family Leave Policy., • Employee Assistance Program., • When you join Colt you become part of our global network. We are proud of our colleagues and the stories and experience they bring – take a look at ‘Our People’ site including our Empowered Women in Tech.

Description Ripjar specialises in the development of software and data products that help governments and organisations combat serious financial crime. Our technology is used to identify criminal activity such as money laundering and terrorist financing, and enables organisations to enforce sanctions at scale to help combat rogue entities and state actors. Team mission: Our team enables the delivery of high-quality software to a variety of environments through technical skills, process implementation and software management, anchored in a continuous innovation culture What you’ll be doing: As a DevOps Engineer at Ripjar you will be responsible for ensuring the reliability and security of the infrastructure that underpins our development and operational services. You will play an active role in supporting and continuously improving our core infrastructure offering, providing a solid foundation upon which we can deliver cutting-edge solutions to our customer Key tasks: • Automate the deployment, operation and maintenance of systems in a hybrid cloud environment using Infrastructure as Code and Configuration Management tooling., • Administer systems and applications hosted on Linux-based systems, • Design, deploy and maintain IP networks., • Create robust automated solutions to allow development teams to self-serve routine infrastructure requests., • Improve code security by integrating security testing tools into build and deployment pipelines., • Implement effective monitoring of the reliability and security of applications and infrastructure services. Requirements: The successful candidate should have these skills: ilWe recognise that demonstrable skills in all these technologies is not easy to find. Don’t let that stop you from applying! We can work in partnership to identify your strengths and provide you with the training necessary to fill any gaps. • Strong experience of administering and securing Linux hosts on both virtual and physical infrastructure., • Extensive experience using Infrastructure as Code and Configuration Management tooling, e.g. Ansible, Terraform, Helm., • Experience of configuring, managing and securing public cloud infrastructure, e.g. AWS, Azure., • Experience of administering containerised applications using Kubernetes and Docker., • Experience of administering IP networking in a corporate environment., • Experience of automating tasks using languages and tools such as Bash, Python, JavaScript, and GitHub Actions, • Knowledge of how to effectively use security testing and monitoring tooling, e.g. SAST and SIEM products. Candidates with the following background will be of particular interest: • Experience contributing to incident response across a complex microservice-based application., • Application Security best practice including identifying potential threats and vulnerabilities in applications, designing secure software systems, and implementing robust security measures. Benefits: Why we think you’ll love it here: • Base Salary of up to £75,000 per year dependent on skills and experience, • 25 days annual leave + Birthdays off, rising to 30 days after 5 years of service, • Fully remote working with occasional travel to Cheltenham., • Private Family Healthcare, • Life Assurance., • Employee Assistance Programme, • Company contributions to your pension, • Enhanced maternity/paternity pay, • The latest tech including a top of the range MacBook, • There is a well-stocked pantry with food, snacks and drinks when in the office

About the job Established in 1982, Bytes has grown rapidly and now employs over 800+ people across 6 locations in the UK and Ireland. Our turnover in Financial Year 2024 was in excess of £2bn. We work with SME’s, corporates and public sector organisations to modernise and digitally transform their IT infrastructures. We invest in our employees through on-going support, training and advice to help them achieve their career aspirations, rewarding success both financially and personally. There is opportunity to grow and move internally which can be seen through our long-standing employees who have developed existing and new skills to move into senior positions in the organisation leaving space for new team members to begin their journey. Why Bytes? • Over 800 staff (plans to double in size over the next 5 years), • Operating from modern, hybrid working environments with offices in Leatherhead, Reading, London, Manchester, Port Solent and Dublin., • Winners of an array of industry awards, • Sunday Times Top 100 Best Places to Work, • Excellent training and career prospects offered, • Fantastic office with gym, canteen, open plan, smart casual dress code, regular incentives and company events, • Supporters of 85+ charities with strong commitment to diversity and sustainability PURPOSE OF JOB: As a Microsoft Cloud Security Specialist, you will play a pivotal role in driving the growth of our Microsoft Security business. This is a strategic sales overlay role focused on supporting our sales teams in positioning, differentiating, and closing opportunities across Microsoft’s security portfolio - including Microsoft Defender XDR, Sentinel, Entra, Purview, and Defender for Cloud. You will act as a subject matter expert and trusted advisor, helping customers understand the value of Microsoft’s integrated security solutions and how they can reduce risk, improve compliance, and accelerate secure digital transformation. A key part of your remit will be to lead sales of our Microsoft Security Managed Service, including managed SOC. You will collaborate closely with internal sales teams, Microsoft account teams, and Bytes stakeholders to align with the Microsoft FY26 solution plays and partner incentives. Your success will be measured by pipeline growth, deal velocity, and the expansion of our managed security services footprint. RESPONSIBILITIES: Sales Enablement & Technical Pre-Sales • Collaborate with account executives and solution architects to position Microsoft security solutions effectively during customer engagements., • Translate customer security requirements into solution architectures using Microsoft technologies., • Assist in crafting proposals, RFP responses, and statements of work with a security focus. Customer Engagement & Solution Design • Design tailored security solutions leveraging Microsoft’s cloud-native tools and services., • Advise customers on best practices for cloud security posture management, threat detection, data governance, and compliance. Product Expertise & Evangelism • Maintain deep technical expertise in Microsoft Sentinel, Defender for Cloud, Purview, and related security offerings., • Stay current with Microsoft’s security roadmap, product updates, and licensing changes., • Act as a trusted advisor to customers and internal teams on Microsoft’s security capabilities and integrations. Managed Security Services Support • Support the positioning and onboarding of customers into your Security Managed Service., • Collaborate with service delivery teams to ensure smooth transitions from pre-sales to implementation., • Provide input into service development and enhancement based on customer feedback and market trends. Training & Knowledge Sharing • Educate sales teams on Microsoft security products and how to identify opportunities., • Create and deliver internal enablement sessions, playbooks, and reference architectures., • Share insights from customer engagements to improve sales strategies and technical offerings. Cross-Team Collaboration • Work closely with Microsoft account teams, partner managers, and technical specialists., • Coordinate with compliance, identity, and infrastructure teams to deliver holistic security solutions., • Support marketing and events by contributing to webinars, blogs, and customer success stories. QUALIFICATIONS, EXPERIENCE, & SKILLS: Educational Qualifications: • Educated to A Level standard, equivalent or higher (ESSENTIAL) Professional Qualifications • Microsoft 365 Fundamentals (MS-900) DESIRABLE, • Microsoft Azure Fundamentals (AZ-900) DESIRABLE, • Microsoft Security Compliance & Identity Fundamentals (SC-900) ESSENTIAL, • Microsoft Cybersecurity Architect (SC-100) DESIRABLE Years of Experience: • Minimum 3 years working with Microsoft Cloud technologies ESSENTIAL Other requirements: • Proven experience with Microsoft Sentinel, Microsoft Defender for Cloud, and Microsoft Purview in real-world environments., • Strong understanding of cloud security architecture, SIEM/SOAR, compliance frameworks (e.g., ISO 27001, NIST, GDPR), and data protection., • Familiarity with Azure, Microsoft 365, and hybrid cloud environments., • Understanding of security operations, incident response, and threat intelligence. CORE COMPETENCIES & SKILLS • Proven experience with Microsoft Sentinel, Microsoft Defender for Cloud, and Microsoft Purview, • Understanding of security operations, incident response, and threat intelligence., • Ability to translate technical concepts into business value for non-technical stakeholders, • Strong presentation, demo, and proposal-writing skills., • Comfortable engaging with C-level executives, security teams, and IT leadership

An exciting opportunity for a SOC Manager to lead and mentor a high-performing Tier 3 Security and Incident Response team within a dynamic Security Operations Centre (SOC). This critical, technical leadership role drives advanced incident response (IR), digital forensics (DFIR), and threat hunting operations across a diverse customer base. The SOC manager will act as the technical authority for complex investigations, dramatically enhancing cyber resilience and refining detection capabilities. Key Responsibilities • Lead & Develop: Mentor and lead senior SOC analysts in effective IR and threat hunting., • Incident Ownership: Oversee and coordinate as a SOC Manager & Lead on high-severity IR, acting as incident lead and guiding cross-functional teams., • Technical Expertise: Provide expert oversight, ensuring rapid containment and detailed documentation for complex security incidents., • Threat Intelligence: Drive the maturity of the Cyber Threat Intelligence (CTI) capability, making intelligence actionable., • Proactive Defence: Design and lead advanced threat hunting exercises leveraging deep knowledge of adversary TTPs (Tactics, Techniques, and Procedures)., • Stakeholder Reporting: Deliver comprehensive incident reports and recommendations., • Training: Develop and deliver in-house training, including tabletop exercises and forensic challenges as the SOC Manager. Essential Skills & Experience • Proven leadership in SOC IR, SOC Manager role and Threat Hunting functions., • Strong technical expertise in DFIR (security event analysis, malware investigation, forensic methodologies)., • Demonstrated ability to manage high-pressure incidents and coordinate stakeholders., • Strong communication and leadership, able to explain complex findings to all audiences., • Analytical, detail-oriented, with an agile mindset and focus on continuous improvement. Whats in it for you? • £80k - £90k + up to 15% bonus + £6k car allowance, • Generous pension with double-matched contributions, • 25 days holiday plus bank holidays, • Private medical insurance and flexible benefits

Who are we? Airportr is re-architecting the way baggage moves through the world. We’re building the digital rails for baggage, transforming a legacy, manual process into a seamless, data driven network that connects passengers, airlines, airports, and logistics partners in real time. Headquartered in London, we partner with some of the world’s leading airlines to deliver Baggage-as-a-Service, fully integrated into their booking and check-in journeys. Our platform is live across multiple European markets and expanding rapidly through strategic global partnerships that enable deployment across hundreds of airports and carriers. Airportr sits at the intersection of travel technology, logistics, and automation, combining deep operational know-how with modern engineering to solve one of air travel’s hardest problems at global scale. We’re on a mission to make baggage handling invisible: intelligent, automated, and effortlessly connected from doorstep to destination. What are we looking for? We’re looking for a brilliant, highly experienced Software Engineering Manager to ignite and lead our distributed tech function. You will be responsible for ensuring our teams are delivering high quality, scalable software that powers our global logistics operation. Reporting directly to our CTO, you'll be the pivotal operational leader for engineering, translating technical vision into tangible success and accelerating our ambitious business goals. Your primary mission will be to empower, support, and develop our Tech Leads, fostering their growth and ensuring our engineering squads thrive. We need a proactive, hands-on leader, someone who dives in, takes initiative and gets stuck in to make extraordinary things happen. We understand that some people value a highly structured, predictable environment. If that's your preference, we probably aren't the right company for you. Our pace is rapid, our priorities are agile, and our roadmap often shifts based on opportunity. We're looking for individuals who see this dynamic environment as an opportunity to contribute, innovate, and grow, not a challenge to stability. If you are passionate about deep collaboration and bringing ingenuity to solve problems on the fly, then we may be a match! Key Responsibilities • Cultivate an unwavering obsession with quality, delivery speed, and flawless execution. You'll refine our Agile processes to empower high-performing remote teams, ensuring we ship quickly, predictably, and with excellence., • Collaborate closely with the CTO and Product team to transform visionary technical strategies into clear, actionable plans and inspiring quarterly goals. You'll orchestrate scoping, resource allocation, and manage dependencies across all squads, driving collective success., • Become a master of foresight, spotting and swiftly resolving technical and process bottlenecks across the entire development pipeline. You won't wait for problems to emerge—you'll proactively solve them, keeping our momentum unstoppable., • Embrace continuous innovation, constantly refining our software architecture as we achieve key milestones and push the boundaries of what's possible., • Act as the senior technical voice who gets stuck in to help Tech Leads troubleshoot complex decisions or unblock critical issues. You will provide direct, practical mentorship required by a lean team., • Instil a culture of accountability for technical quality, coding standards, and security. You'll ensure that speed never compromises the stability and regulatory compliance of our critical airline and logistics systems—because excellence is non-negotiable., • You’ll be brilliant at getting the best out of our distributed (offshore) teams. This includes setting up clear communication strategies and maintaining high morale and culture across different time zones., • Build strong, trusting relationships with all internal teams, including Product, Operations, Commercial, and Customer Experience. You will ensure tech priorities perfectly support urgent business goals and operational reality., • Champion platform stability, overseeing uptime, latency, and incident response. You'll establish robust monitoring and on-call procedures, ensuring our teams are always prepared and responsive. How we will measure impact Your impact will be measured by clear, quantifiable improvements in delivery velocity and predictability, ensuring the on-time achievement of strategic goals. You will directly elevate engineering quality and platform stability, evidenced by improved uptime, lower latency, and a reduction in critical incidents. Crucial metrics will also include your leadership in the successful execution of architectural roadmaps, proactive resolution of technical bottlenecks, and the demonstrable growth and high retention of our distributed engineering teams. What will we need from you? • A proven track record in software engineering management, ideally within a scaling, fast-growth organisation where you've made a significant impact., • Proven experience driving and maturing Agile methodologies to significantly improve team processes and velocity in a dynamic, fast-paced environment., • Highly analytical, data-driven and inquisitive, constantly seeking insights and opportunities for improvement., • Solid grasp of modern cloud infrastructure and our stack: MS Azure, .NET, React, Angular, Micro-services and Service-bus., • Proven technical expertise in intricate, highly available and distributed systems, preferably within travel tech or regulated industries., • Exceptional communication and written skills, enabling you to articulate complex ideas with clarity and impact., • Expertise in leading and scaling remote-first, global, or offshore engineering teams, inspiring them to achieve greatness regardless of location., • The exceptional ability to communicate clear execution status and technical trade-offs to all levels of the organisation, fostering transparency and alignment., • Masterful prioritisation skills, allowing you to expertly balance competing requests and laser-focus on high-impact work that drives our mission forward. This is a remote with requirement to travel to London office for meetings/team days monthly. Our salaries are determined by experience and location and are benchmarked at the 75th percentile.

As Head of IT Security Incident and Threat Management, you will shape and lead the organization’s global response to cyber threats — ensuring they stay one step ahead of emerging risks. Head of IT Security Incident and Threat Management Package to £117k DOE + 15% Bonus + Benefits

Trainee Cyber Security Course Programme Job Guarantee Included Complete online training designed to take you from zero experience to your first Cyber Security role. Study part-time, build fundamental skills, and get dedicated job placement support until you're hired. Flexible financing options available, with payment plans starting from as low as 142 per month. The Programme Complete this 8-10 week online training with just 2 hours per day of study time. You will learn industry-recognised methodologies, network security, threat detection, vulnerability management, and incident response, while building practical experience with Live Labs. The programme includes earning CompTIA certifications (A+, Network+, Security+) recognised by UK employers, expert tutor support throughout your studies, dedicated job placement support with CV rewrite, interview preparation, and access to exclusive job opportunities. The Outcome 93% of graduates secure cyber security roles within 3 months. Starting salaries: 28,000 38,000+ Who This Is For The programme is completely beginner-friendly, so no experience is needed. Career changers are welcome, and you can study at your own pace. *This programme is available to UK-based learners only. Ready to start earning in Cyber Security? Limited spaces available. Apply now for the next available cohort.

Trainee Cyber Security Course Programme Job Guarantee Included Complete online training designed to take you from zero experience to your first Cyber Security role. Study part-time, build fundamental skills, and get dedicated job placement support until you're hired. Flexible financing options available, with payment plans starting from as low as 142 per month. The Programme Complete this 8-10 week online training with just 2 hours per day of study time. You will learn industry-recognised methodologies, network security, threat detection, vulnerability management, and incident response, while building practical experience with Live Labs. The programme includes earning CompTIA certifications (A+, Network+, Security+) recognised by UK employers, expert tutor support throughout your studies, dedicated job placement support with CV rewrite, interview preparation, and access to exclusive job opportunities. The Outcome 93% of graduates secure cyber security roles within 3 months. Starting salaries: 28,000 38,000+ Who This Is For The programme is completely beginner-friendly, so no experience is needed. Career changers are welcome, and you can study at your own pace. *This programme is available to UK-based learners only. Ready to start earning in Cyber Security? Limited spaces available. Apply now for the next available cohort.

Trainee Cyber Security Course Programme Job Guarantee Included Complete online training designed to take you from zero experience to your first Cyber Security role. Study part-time, build fundamental skills, and get dedicated job placement support until you're hired. Flexible financing options available, with payment plans starting from as low as 142 per month. The Programme Complete this 8-10 week online training with just 2 hours per day of study time. You will learn industry-recognised methodologies, network security, threat detection, vulnerability management, and incident response, while building practical experience with Live Labs. The programme includes earning CompTIA certifications (A+, Network+, Security+) recognised by UK employers, expert tutor support throughout your studies, dedicated job placement support with CV rewrite, interview preparation, and access to exclusive job opportunities. The Outcome 93% of graduates secure cyber security roles within 3 months. Starting salaries: 28,000 38,000+ Who This Is For The programme is completely beginner-friendly, so no experience is needed. Career changers are welcome, and you can study at your own pace. *This programme is available to UK-based learners only. Ready to start earning in Cyber Security? Limited spaces available. Apply now for the next available cohort.

Trainee Cyber Security Course Programme Job Guarantee Included Complete online training designed to take you from zero experience to your first Cyber Security role. Study part-time, build fundamental skills, and get dedicated job placement support until you're hired. Flexible financing options available, with payment plans starting from as low as 142 per month. The Programme Complete this 8-10 week online training with just 2 hours per day of study time. You will learn industry-recognised methodologies, network security, threat detection, vulnerability management, and incident response, while building practical experience with Live Labs. The programme includes earning CompTIA certifications (A+, Network+, Security+) recognised by UK employers, expert tutor support throughout your studies, dedicated job placement support with CV rewrite, interview preparation, and access to exclusive job opportunities. The Outcome 93% of graduates secure cyber security roles within 3 months. Starting salaries: 28,000 38,000+ Who This Is For The programme is completely beginner-friendly, so no experience is needed. Career changers are welcome, and you can study at your own pace. *This programme is available to UK-based learners only. Ready to start earning in Cyber Security? Limited spaces available. Apply now for the next available cohort.

Trainee Cyber Security Course Programme Job Guarantee Included Complete online training designed to take you from zero experience to your first Cyber Security role. Study part-time, build fundamental skills, and get dedicated job placement support until you're hired. Flexible financing options available, with payment plans starting from as low as 142 per month. The Programme Complete this 8-10 week online training with just 2 hours per day of study time. You will learn industry-recognised methodologies, network security, threat detection, vulnerability management, and incident response, while building practical experience with Live Labs. The programme includes earning CompTIA certifications (A+, Network+, Security+) recognised by UK employers, expert tutor support throughout your studies, dedicated job placement support with CV rewrite, interview preparation, and access to exclusive job opportunities. The Outcome 93% of graduates secure cyber security roles within 3 months. Starting salaries: 28,000 38,000+ Who This Is For The programme is completely beginner-friendly, so no experience is needed. Career changers are welcome, and you can study at your own pace. *This programme is available to UK-based learners only. Ready to start earning in Cyber Security? Limited spaces available. Apply now for the next available cohort.

Trainee Cyber Security Course Programme Job Guarantee Included. Complete online training designed to take you from zero experience to your first Cyber Security role. You will learn industry-recognised methodologies, network security, threat detection, vulnerability management, and incident response

Trainee Cyber Security Course Programme Job Guarantee Included. Complete online training designed to take you from zero experience to your first Cyber Security role. You will learn industry-recognised methodologies, network security, threat detection, vulnerability management, and incident response

Trainee Cyber Security Course Programme Job Guarantee Included Complete online training designed to take you from zero experience to your first Cyber Security role. Study part-time, build fundamental skills, and get dedicated job placement support until you're hired. Flexible financing options available, with payment plans starting from as low as 142 per month. The Programme Complete this 8-10 week online training with just 2 hours per day of study time. You will learn industry-recognised methodologies, network security, threat detection, vulnerability management, and incident response, while building practical experience with Live Labs. The programme includes earning CompTIA certifications (A+, Network+, Security+) recognised by UK employers, expert tutor support throughout your studies, dedicated job placement support with CV rewrite, interview preparation, and access to exclusive job opportunities. The Outcome 93% of graduates secure cyber security roles within 3 months. Starting salaries: 28,000 38,000+ Who This Is For The programme is completely beginner-friendly, so no experience is needed. Career changers are welcome, and you can study at your own pace. *This programme is available to UK-based learners only. Ready to start earning in Cyber Security? Limited spaces available. Apply now for the next available cohort.

Trainee Cyber Security Course Programme Job Guarantee Included Complete online training designed to take you from zero experience to your first Cyber Security role. Study part-time, build fundamental skills, and get dedicated job placement support until you're hired. Flexible financing options available, with payment plans starting from as low as 142 per month. The Programme Complete this 8-10 week online training with just 2 hours per day of study time. You will learn industry-recognised methodologies, network security, threat detection, vulnerability management, and incident response, while building practical experience with Live Labs. The programme includes earning CompTIA certifications (A+, Network+, Security+) recognised by UK employers, expert tutor support throughout your studies, dedicated job placement support with CV rewrite, interview preparation, and access to exclusive job opportunities. The Outcome 93% of graduates secure cyber security roles within 3 months. Starting salaries: 28,000 38,000+ Who This Is For The programme is completely beginner-friendly, so no experience is needed. Career changers are welcome, and you can study at your own pace. *This programme is available to UK-based learners only. Ready to start earning in Cyber Security? Limited spaces available. Apply now for the next available cohort.

This role requires a seasoned professional with a deep understanding of cybersecurity, incident response an threat management within a FTSE 100 environment. Extensive experience in incident response, threat management, and cybersecurity within a large organization. Head of IT Security Incident and T

Extensive experience in incident response, threat management, and cybersecurity within a large organization. Head of IT Security Incident and Threat Management - Solihull. We are seeking a highly skilled and experienced Head of IT Security Incident and Threat Management to join our team.

Recommend improvements to enhance security posture and promote a security-first culture. Information Security Engineer / Analyst. This hands-on role will require technical expertise in cybersecurity practices, security administration, vulnerability assessments, and incident response.

Coordinate remediation and containment activities as advised by the SOC or Incident Response Team. Using your background in SOC Service Delivery and experience, you will:.

Conduct security audits and vulnerability assessments to strengthen defences. This is an exciting opportunity to take a strategic leadership role at the forefront of cybersecurity. As Head of IT Security Incident and Threat Management, you will shape and lead the organization's global response to cy

Monitor and manage IT security infrastructure.Conduct vulnerability assessments and penetration tests.Lead incident response and mitigation.Implement security policies and procedures.Ensure compliance with GDPR, ISO27001.Work with SIEM tools for threat detection.Manage access controls and firewalls.