Incident response jobs in GlasgowCreate job alerts

Description Job Description The Security Enterprise Solutions (SES) Operation is the cornerstone of Leidos’ comprehensive suite of fully integrated security solutions for aviation, ports, borders, and critical infrastructure customers around the world. With our new, combined portfolio, our operation has more than 24,000 products deployed across 120 countries. Leveraging this portfolio, our core technical strengths, and robust R&D initiatives, we are positioned to address emerging and evolving threats through rapid development of innovative solutions for our global customers. SES is comprised of three divisions to align with our customers’ missions and needs: • Aviation Solutions, • Ports & Borders, • Global Services Summary The Installation Integration Engineer must be a self-starter who is team oriented and focused on delivering the highest level of service excellence to Leidos customers. Responsible for providing effective, efficient, and compliant on-site technical and customer support for installation of systems at assigned airports, as determined by Leidos needs. Will install, commission, diagnose, troubleshoot, repair, and test a variety of complex X-ray or CT based electronic and electromechanical equipment, which may include computer and networking systems. Many of the systems are integrated into a larger airport systems environment including complex baggage handling systems. System types include the following but not limited to: • Check point CT systems., • Checkpoint x-ray systems., • Explosive Detection Systems (EDS), • Automatic tray return systems (ATRS), • Explosive trace detection systems (ETD), • Millimeter wave technology passenger screening (MMW). Will follow standard protocol, procedures and identified best practices to isolate and resolve problems in malfunctioning equipment or software. The position requires the ability to work independently with limited supervision. Successful applicants will have a certified trade training, with stong experience in troubleshooting and repair of; x-ray computed tomography systems, electro - mechanical equipment, PLC control systems. Please note that a 5-year UK reference period is required to obtain airside passes. Primary Responsibilities: • Responsible for providing technical and customer support for installation projects., • Install, maintain, troubleshoot/diagnose, repair, and test a wide variety of airport passenger and baggage security systems., • Perform scheduled and unscheduled Corrective Maintenance, Preventive Maintenance, and radiation surveys., • Maintain calibration on all test and radiation survey equipment., • Provide customer training assistance of installed systems and equipment., • Adhere to Leidos published maintenance and radiation survey checklists and procedures., • Report design, reliability, and system bugs to technical support., • Follow down machine escalation protocol to ensure time resolution of system failures., • Prepare RMA repairable/returnable parts for shipment and return to identified defective location. Complete all RMA paperwork and reporting requirements., • Exercise judgment within broadly defined policies and procedures in selecting methods, techniques, and evaluation criterion for obtaining results., • Assume responsibility for continued customer satisfaction and coordinate all activities with the customer; assist with customer training while representing Leidos in a professional manner., • Must be highly proficient in reporting activities, maintaining local spare parts inventory, recording travel expenses and timecard, implementing Tech Bulletins (TB’s) and using good judgment when dealing with customers., • Comply with all safety requirements and all required training, following the guidance provided in Leidos policies, procedures, manuals, and TB’s., • Comply with use of Personal Protective Equipment (PPE) where and when applicable., • Apply Lock Out – Tag Out (LOTO), following safe lifting practices and same day reporting of any accidents, near misses and unsafe conditions., • Demonstrates a pro-active approach towards safety, health, and quality in compliance with all customer facility and Leidos company guidelines and regulations., • Maintain tools and test equipment properly., • Participate in on-going product training and maintain all necessary certifications., • Provides daily written reporting on completed maintenance activities, used parts and consumables, machine faults, down times, and availability., • Responds to faults timely as per contracted response, repair times and endeavors best efforts to keep KPIs, and SLAs of the contract., • Keeps track of used parts as per procedures provides by Service Supervisor, returns the parts with RMA process., • Reports performance and availability of the machines as advised by Service Supervisor, • Identifies the Root Cause of repetitive parts failures and investigates for corrective actions to minimize parts consumption., • Solid relevant Installation Integration Engineer experience, preferably in an integrated systems technologies environment., • Experience maintaining and supporting large, complex, electromechanical systems., • Experience working with High-Voltage Equipment., • Good customer skills and the ability to work under pressure., • Must be self-starter, work well without supervision, and accept responsibility., • Must be adaptable and willing to accept changing shifts and job requirements determined by business and customer needs., • Must be able to travel both domestic and international locations., • Must be willing to work on-call and off-shift as assigned and requested by manager or supervisor., • Maintain professional appearance as prescribed by the Company., • Must work well without supervision and accept responsibility for timely completion of assigned work., • The candidate must be able to lift/carry a minimum of 25 kgs., • The candidate must be able to push/pull 90kgs.bs, • Must be able to work and freely navigate in the baggage area of the airport, where vertical ladders, crossovers, and low overhead ceilings frequently occur., • A degree in electronics technology, mechanical or electrical engineering or equivalent., • Prior experience in X-ray or computed tomography technologies, especially in the airport security environment, is a significant plus., • Working knowledge of Linux and Unix. At Leidos we are PASSIONATE about customer success, UNITED as a team and INSPIRED to make a difference. We offer meaningful and engaging careers, a collaborative culture, and support for your career goals, all while nurturing a healthy work-life balance. We provide an employment package that attracts, develops, and retains only the best in talent. Our reward scheme includes: • Contributory Pension Scheme, • Private Medical Insurance, • Generous Annual Leave (including public and privilege holidays) If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo — because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 — and moving faster than anyone else dares. For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above. £44,700.00-£57,300.00 The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. About Leidos Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit ___. Pay and Benefits Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at ___. Securing Your Data Beware of fake employment opportunities using Leidos’ name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system – never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at ___. If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the ___. Commitment to Non-Discrimination All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.

Our client, a well-established and highly regarded business, is looking to engage an experienced Infrastructure and Security Engineer to join their team. This is a newly created role driven by continued growth and increased cloud adoption. It’s an excellent opportunity to take ownership of Azure and Microsoft 365 security, ensuring platforms are secure, resilient, and aligned with best practice as the organisation continues to evolve its cloud strategy. In this role, you’ll work closely with the wider Infrastructure team to strengthen security across both cloud and on-prem environments. You’ll play a key part in system hardening, incident response, security improvement initiatives, and cloud migration projects. Responsibilities: • Review and remediate Microsoft 365 security configurations and Azure landing zones, • Monitor, investigate and respond to security alerts from a variety of tools, • Support incident response and disaster recovery processes, • Harden Windows Server (2019 onwards) and Azure environments in line with best practice, • Monitor network security using a range of security and monitoring tools, • Work alongside infrastructure colleagues to securely administer network hardware including routers, switches and firewalls, • Support vulnerability remediation following penetration testing and audit findings, • Contribute to infrastructure projects, acting as technical lead on cloud migration initiatives such as Azure Site Recovery, • Maintain clear documentation aligned to internal policies and external compliance standards To be considered, you’ll ideally have experience across Azure and Microsoft 365 security, along with a solid grounding in infrastructure and network principles (TCP/IP, DNS, DHCP, firewalls, IDS/IPS, VLANs). Experience with Active Directory / Entra ID, server hardening, patching, and security tooling would be advantageous. Exposure to frameworks such as ISO27001, Cyber Essentials Plus or OWASP would also be beneficial, as would Azure certifications (Security Engineer Associate, Solutions Architect, etc.) or broader security certifications such as CISSP, CISM or Security+. This role can be based in Aberdeen, Edinburgh or Glasgow, with occasional travel between offices as required. If you’re a hands-on infrastructure or cloud security professional who enjoys improving environments, solving complex security challenges, and working in a collaborative team, get in touch for a confidential discussion.

About the Role As a Server Engineer the primary focus of this role will be to provide 3rd line operational support within our IT - Platforms Infrastructure Team. You will manage and maintain the day-to-day operations of backend IT systems, as well as implementing new technologies and systems. You will work in a dynamic environment, handling both Business as Usual ( BAU ) and project-based tasks. This role reports to the Infrastructure Team Leader. Hours of work are 9:00 am - 5:30 pm, Monday to Friday, with requirements to work the On Call rota on a rotating basis. Additional overtime outside core hours and at weekends for system maintenance and other out of hours work will be required. Main Responsibilities: • Monitor, manage, and proactively optimise all servers and infrastructure applications to ensure top-tier performance and availability., • Oversee and support VMware infrastructure, ensuring seamless operation and efficiency., • Ensure the effective management and maintenance of SAN infrastructure to ensure reliable and effective data storage solutions., • Provide expert support for cloud-based solutions, ensuring smooth and efficient integration as well as effective support., • Develop and implement automation scripts and tools, taking part in automation initiatives to enhance server management and streamline maintenance tasks., • Create, update, and review infrastructure documentation in accordance with Ashurst standards, ensuring clarity and precision., • Adhere strictly to IT processes and procedures, especially regarding Change Control, Privileged Access Management, and system security, ensuring full compliance with regulatory requirements and internal policies., • Resolve all logged incidents and service requests promptly, and support major incident activities, as well as problem, change, and configuration management processes., • Collaborate with the Service Delivery team to manage escalations and resolve tickets effectively, ensuring high-quality service delivery., • Participate in operational rotas to maintain environmental stability and proactively identify and address potential issues., • Engage with vendors to provide support and guidance, enhancing service delivery and resolving technical challenges., • Work closely with the global IT - Platforms Infrastructure Team to deliver seamless support across different regions and time zones to our user community. Skills and experience • Extensive experience with Microsoft Back Office products, • Proficiency in Microsoft Active Directory 2016 and newer as well as familiarity with Entra ID., • Experience with Windows Server versions 2016 - 2022, • Knowledge of Microsoft clustering technology, • Scripting skills with a focus on automating and streamlining server management processes. (Powershell, Working with APIs, etc), • Expertise in virtualisation technologies, particularly VMware •Experience with SAN Storage solutions. (DellEMC, HPE, vSAN), • Azure and M365 experience, particularly with EntraID and cloud adoption., • Experience with configuring, supporting and optimising ADFS and SSO technologies as well as migration to Entra ID., • Understanding of network fundamentals and protocols, • Excellent communication and collaboration skills within a cross-functional team., • Experience working in agile environments, • Familiarity with ITIL principles and frameworks, experience with best practice adherence., • Experience working within security best practices and compliance requirements, • Experience working within strict change control processes Desirable skills and experience • Experience with automated deployment tools (e.g., SCCM, Intune), • Experience with scripting and automation tools beyond PowerShell (e.g., Python, IaC ), • Experience with monitoring and performance tuning tools (e.g., PRTG , SolarWinds), • Knowledge of IT governance and compliance frameworks (e.g., GDPR, Cyber Essentials), • Familiarity with incident response and disaster recovery planning Understanding of vulnerability management with experience in remediation and risk management

Our client, a well-established and highly regarded business, is looking to engage an experienced Infrastructure Engineer to join their team. This is a newly created role driven by continued growth and increased cloud adoption. It’s an excellent opportunity to take ownership of Azure and Microsoft 365 security, ensuring platforms are secure, resilient, and aligned with best practice as the organisation continues to evolve its cloud strategy. In this role, you’ll work closely with the wider Infrastructure team to strengthen security across both cloud and on-prem environments. You’ll play a key part in system hardening, incident response, security improvement initiatives, and cloud migration projects. Responsibilities: • Review and remediate Microsoft 365 security configurations and Azure landing zones, • Monitor, investigate and respond to security alerts from a variety of tools, • Support incident response and disaster recovery processes, • Harden Windows Server (2019 onwards) and Azure environments in line with best practice, • Monitor network security using a range of security and monitoring tools, • Work alongside infrastructure colleagues to securely administer network hardware including routers, switches and firewalls, • Support vulnerability remediation following penetration testing and audit findings, • Contribute to infrastructure projects, acting as technical lead on cloud migration initiatives such as Azure Site Recovery, • Maintain clear documentation aligned to internal policies and external compliance standards To be considered, you’ll ideally have experience across Azure and Microsoft 365 security, along with a solid grounding in infrastructure and network principles (TCP/IP, DNS, DHCP, firewalls, IDS/IPS, VLANs). Experience with Active Directory / Entra ID, server hardening, patching, and security tooling would be advantageous. Exposure to frameworks such as ISO27001, Cyber Essentials Plus or OWASP would also be beneficial, as would Azure certifications (Security Engineer Associate, Solutions Architect, etc.) or broader security certifications such as CISSP, CISM or Security+. This role can be based in either Edinburgh or Glasgow, with occasional travel between client offices as required. If you’re a hands-on infrastructure or cloud security professional who enjoys improving environments, solving complex security challenges, and working in a collaborative team, get in touch for a confidential discussion.

Glasgow West Housing Association Ltd is a voluntary, not for profit organisation and a registered charity. With history dating back to 1978, we have a vision of shaping thriving communities. We own over 1500 rented properties; and through our trading subsidiary (Glasgow West Enterprises Ltd), we provide property factoring services to just over 600 domestic and commercial properties. Senior Technical Officers (x2 posts) EVH GRADE 8: £51,075 - £55,259 (effective 01/04/26) Permanent CLOSING DATE: MONDAY 23 MARCH 2026, 12 NOON INTERVIEW DATE: THURSDAY 02 APRIL 2026 2nd INITERVIEW (if required): MONDAY 13 APRIL 2026 We are seeking to appoint two experienced, highly motivated and enthusiastic Senior Technical Officers to join our Technical Division, supporting our ambitious investment plans across component replacement, major fabric repairs (including preventative maintenance and incident response, and common repairs), net-zero initiatives and cyclical maintenance projects with a view to ensuring Scottish Housing Quality Standards (SHQS) compliance, enhancing the quality of our homes, ensuring resident satisfaction, improving our neighbourhoods and preservation of our tenemental heritage. These are dynamic, hands-on roles involving site visits, stakeholder engagement, procurement activity, and collaborative working across multiple partners and disciplines. You will act as client representative in contract management, ensure regulatory and health & safety compliance, and deliver high standards of customer service and performance. The key tasks identified in the respective role profiles are reflective of a dual focus and service need. A relevant professional or vocational qualification (HND/SCQF level 8 or above) is desirable. In return, GWHA offer generous EVH Terms and Conditions including: • 25 days annual leave and 15 public holidays, with additional leave purchase option., • Flexible working practices including flexi time, home working, enhanced occupational maternity, paternity and shared parental leave, • Defined contribution pension scheme, • Ongoing professional development & training opportunities, • Cycle to work scheme, • Travel to work loan scheme & discounted bus travel, • Specific GWHA benefits including; annual service commitment award, long service award and additional festive leave, • Death in Service Benefit Post subject to satisfactory Disclosure Check. If you are interested in applying for either of these roles, please refer to the Role Profiles and send the following information to our recruitment mailbox: 1. CV, 2. Completed Candidate Declaration and Supporting Statement Form We reserve the right to close this job at any time, therefore early application is recommended. Promoting Equality Registered as a Scottish Charity NO. SCO01667

SThree are pleased to announce we’re recruiting for a talented Lead Cyber Security Engineer to join & guide our excellent team based in our fantastic office space located in the Cadworks Building, Glasgow. The Cyber Security Engineering Lead acts as the technical authority across all domains of cloud and endpoint security, taking full ownership of hardening, automation, and threat mitigation. The role is not managerial in the traditional sense it exists to drive technical capability, mentor through engineering leadership, and deliver resilient, scalable defences. This role is hands-on, outcome-focused, and instrumental in building, automating, and scaling secure architectures and controls across the digital estate. About us SThree is the global STEM-specialist talent partner that connects sought-after specialists in life sciences, technology, engineering and mathematics with innovative organisations across the world. We are the number one destination for talent in the best STEM markets: Recruiting highly skilled professionals and discovering life-changing jobs for the unsung heroes who will positively shape our future. What are the day-to-day tasks? Security Engineering & Automation • Architect and implement security controls across Microsoft 365, Azure, Dynamics 365, Kubernetes (AKS), and AI/ML workloads., • Lead the design and deployment of conditional access, Defender for Cloud, Purview DLP, Azure Firewall, and related services., • Integrate security into DevOps pipelines, CI/CD, infrastructure-as-code, and container workflows., • Automate threat detection and response using Microsoft Sentinel SOAR, custom playbooks, and telemetry pipelines. Platform Security Oversight • Own and optimise endpoint security through Intune, ensuring device compliance and integration with Zero Trust., • Harden AKS clusters and cloud-native apps through role-based access control (RBAC), secrets management, and runtime protection., • Secure data pipelines and models in AI workloads, implementing guardrails for model integrity and prompt injection defence. Cloud & Network Security • Engineer secure access and posture for Cisco Meraki infrastructure and Umbrella SWG services., • Enforce network segmentation, micro-perimeter security, and policy-based routing for hybrid network models., • Oversee DNS, web access, and remote gateway protection at the edge., • Security Operations & Threat Defence, • Act as the technical escalation point for complex threat investigations and incident response., • Lead red-teaming simulations, vulnerability assessments, and threat hunting activities., • Support proactive telemetry monitoring and improvement of detection logic and alert fidelity. Leadership & Mentoring • Provide engineering mentorship to junior analysts and engineers; lead by doing., • Shape and communicate the security engineering roadmap in alignment with the Cyber Security Strategy. What skills and knowledge are we looking for? • Deep hands-on knowledge of Microsoft security stack (M365 Defender, Sentinel, Intune, Azure Policy, PIM)., • Proven experience deploying Cisco Meraki and Umbrella in enterprise environments., • Experience in securing Kubernetes, cloud-native infrastructure, and containerised apps., • 5+ years in a senior security engineering or architect role., • Experience leading technical teams or acting as a technical lead on security initiatives., • Certifications such as AZ-500, CISSP, CCSP, GIAC, or similar highly advantageous., • Engineer-first mentality: solves security problems through systems thinking and automation., • Strategic, yet pragmatic: balances best practice with business context., • Proactive, communicative, and passionate about elevating security posture through innovation., • MS Engineer & MS Data Scientist Associate, • Ability to exercise independent judgment and act on it. Benefits for our U.K. teams include: • The choice to work flexibly from home and the office, in line with our hybrid working principles, • Bonus linked to company and personal performance, • Generous 28 days holiday allowance, plus public holidays, • Annual leave purchase scheme, • Five days paid Caregiver/Dependant leave per annum, • Five paid days off per year for volunteering `, • Private healthcare, discounted dental insurance and health care cashback scheme, • Opportunity to participate in the company share scheme, • Access to a range of retail discounts and saving What we stand for... We’re committed to ensuring for our colleagues, candidates and communities, that all processes are equitable, and everyone is treated with fairness and dignity where everyone belongs, is valued and is connected. If you need any assistance or reasonable adjustments in submitting your application, please let us know, and we’ll be happy to help.

Principal Network Security Engineer (DDoS / BGP) – French Speaking Location: UK or Ireland (Remote) | Travel Required Our client is a global leader in DDoS protection, traffic intelligence, and network visibility, protecting critical infrastructure and helping organisations maintain the availability of large-scale networks during cyberattacks and performance disruptions. Their platforms deliver packet and flow-level visibility across internet-scale networks, enabling service providers, enterprises, and public sector organisations to detect threats, analyse traffic patterns, and mitigate attacks in real time. Role Overview: They are seeking an experienced Principal Network Security Engineer to support customers deploying advanced network security and traffic visibility platforms. Working closely with customer engineering and operations teams, you will act as a technical subject matter expert, helping troubleshoot, optimise, and support complex routing and security environments. This role is remote-based in the UK with travel, supporting customers across Europe. Fluency in French and English is essential. Responsibilities: • Act as the technical Subject Matter Expert (SME) for customers deploying network security and traffic visibility platforms, • Troubleshoot, diagnose, and resolve complex networking and infrastructure issues, • Support DDoS detection and mitigation activities, including preparation, live attack response, and post-incident analysis, • Replicate customer environments and configurations in lab environments to identify and resolve issues, • Recreate and track software defects reported in customer environments, • Assist with platform optimisation and tuning within customer networks, • Create and test Method of Procedure (MOP) documentation for upgrades and maintenance activities, • Deliver technical guidance and training to customer engineering teams, • Work closely with engineering, product management, and support teams to resolve escalations, • Participate in on-call support for critical incidents when required Qualifications • 5–8+ years’ experience in network engineering, technical support, or professional services roles Required Skills: • Strong networking knowledge including TCP/IP and BGP routing, • Experience with network security technologies, particularly DDoS detection and mitigation, • Familiarity with traffic visibility and analysis technologies such as NetFlow, • Experience working within service provider, telecom, or large enterprise network environments, • Experience with Linux systems and scripting, • Strong troubleshooting skills within complex network infrastructures Additional Skills (Prefered): • Experience with network testing platforms such as IXIA or Spirent, • Strong customer-facing communication and stakeholder management skills, • Experience supporting large-scale or internet-facing network environments For more information, please feel free to get in touch.

Senior Software Engineer Reference: BH-376p Working Hours: Full-time Job Type: Permanent Salary: Competitive Location: Remote or Hybrid - London office About The Client: Our client is a rapidly growing Infrastructure-as-a-Service (IaaS) provider driving digital transformation. Key Responsibilities: Architecture & System Design • Design and evolve scalable backend services and product components., • Make sound architectural decisions across APIs, services, and data layers., • Lead delivery from design through production operation. Full-Stack Development • Build backend systems primarily in Python., • Develop secure, performant APIs supporting AI workflows., • Contribute to modern web applications where required (e.g., Next.js). Reliability & Performance • Improve monitoring, observability, and system resilience., • Optimise performance and support production stability. Engineering Leadership • Maintain high coding standards and test coverage., • Contribute to code reviews and documentation., • Mentor engineers and support technical growth. Collaboration • Work closely with Product and Design to deliver scalable solutions., • Communicate technical trade-offs and manage cross-team dependencies. Essential skills and requirements: • Strong experience building production backend systems and APIs in Python (Flask or similar)., • Proven ownership of asynchronous or compute-intensive workflows., • Experience delivering full-stack features (e.g., Next.js)., • Practical understanding of AI lifecycle workflows (training, evaluation, deployment, inference)., • Solid system design knowledge including API design, SQL/NoSQL data systems, and security., • Experience managing systems in production (monitoring, debugging, incident response)., • Familiarity with Git, CI/CD, Docker, and Kubernetes. Desirable Skills: • Exposure to LLMs or generative AI platforms., • Experience with model lifecycle management or AI observability., • Understanding of GPU-based or distributed systems., • Experience building developer platforms or workflow orchestration tools. What’s on Offer: • Competitive salary + bonus, • Flexible remote or hybrid working, • Wellbeing benefits, • Clear progression in a high-growth environment, • Strong ownership and collaborative culture

Title: Senior SOAR Engineer Type: Contract - 6 months initial Location: Remote / Occasional travel to Site Rate: £500 per day Inside IR35 Overview We are seeking a senior SOAR security engineer on behalf of our client. You will join the Security Orchestration, Automation and Response (SOAR) team to design, develop, and implement automated detection and response solutions within the Splunk platform. The role focuses on leveraging advanced analytics, scripting, and automation to support incident response and threat management, protecting critical national infrastructure from cyber disruption. Responsibilities · Collaborate with incident response teams to identify and implement automation opportunities. · Develop and deploy SOAR automations for detection and response. · Serve as a subject matter expert in security automation and data analytics. · Produce system analytics and document changes per Change Management best practices. · Recommend, develop, and release new use cases to optimize SOAR capabilities. · Mentor junior team members and perform quality assurance on automation work. · Participate in special projects and contribute to continuous improvement initiatives. Requirements · Strong experience with Splunk, Splunk Enterprise Security, Splunk SOAR, and Splunk UBA. · Solid understanding of security incident response and security frameworks (MITRE ATT&CK, NIST) · Experience with scripting/programming (Python, Java, Perl, etc.) and big data analytics. · Familiarity with Windows, Linux/UNIX systems, databases, and multi-petabyte data lakes. · Excellent analytical, communication, and organizational skills.

ABOUT US ___, part of Capgemini, tackles the hardest work in data for the world’s largest organizations. We combine intelligent software with deep data expertise to help the Fortune2000 tackle complex data challenges and drive measurable business outcomes with business-ready data. Syniti’s Data First strategy transforms data from an afterthought into a strategic asset—unlocking insights, reducing risk, and fueling growth. With over 5,000 successful projects, we support the full data lifecycle through a unified platform for migration, quality, replication, matching, master data management, analytics, governance, and strategy. Operating globally across industries, Syniti’s award-winning software, expert consultants give enterprises a unique edge in managing and maximizing their data. Syniti’s cloud-native platform sets new standards in enterprise data management, combining powerful SaaS solutions with deep domain expertise. Designed for agility and scale, our technology helps customers accelerate digital transformation, drive innovation, and make confident decisions with trusted data. Every product enhancement is built to solve real business challenges—empowering organizations to unlock value from their data faster and more effectively. THE ROLE We are seeking a Principal Cloud Network Security Architect with a strong background in SaaS cloud operations, AWS networking and security, and regulatory compliance. This role will be instrumental in designing and securing our cloud network infrastructure while aligning security strategies across teams. The ideal candidate is a technical leader, well-spoken, and experienced in pre-sales discussions with customers on networking and security topics. WHAT YOU WILL DO • Cloud Network and Security Architecture: Design, implement, and optimize secure, scalable network architectures in AWS for a high-performance SaaS environment., • Private Cloud and On-Prem Network and Security: Work with customers to resolve complex communication challenges across heterogeneous networks with technology issues related to networking, routing, VPN and Layer 4-7 security filtering at variousappliances in a customer’s topology, • Regulatory Compliance Leadership: Ensure security controls align with SOC 2, NIST 800-53, FedRAMP, and other regulatory frameworks., • Advanced Security Technologies: Deploy and manage PAM (Privileged Access Management), NGFW (Next-Generation Firewalls), WAF (Web Application Firewalls), IPS (Intrusion Prevention Systems), and other security technologies to protect the cloud infrastructure., • Cross-Team Collaboration: Work across teams—including DevOps, Compliance, and Product—to drive security best practices and new processes in a way that aligns with all stakeholders., • Pre-Sales Security Consultation: Engage with customers to explain security architecture, best practices, and risk management strategies during sales and onboarding discussions., • Security Process Development: Define and refine security operations, incident response, and infrastructure-as-code security automation strategies. WHAT IT TAKES • 14+ years of experience in networking and security, with strong AWS security expertise., • SaaS cloud operations experience, managing security and compliance at scale., • 8+ years of network security technologies (PAM, NGFW, WAF, IPS, SIEM, etc.)., • 6+ years of Deep knowledge in AWS networking (VPC, Transit Gateway, Direct Connect, Route 53, Global Accelerator) and security services (Security Hub, GuardDuty, Macie, AWS WAF, Shield, IAM, etc.)., • 5+ years of expertise in leading the implementation and management of regulatory and compliance frameworks (SOC 2, NIST 800-53, FedRAMP, ISO 27001)., • 5+ years of Linux administration, • Proven ability to develop processes, drive adoption of new security strategies, and align security initiatives across teams., • Strong communication skills with the ability to engage with technical and non-technical stakeholders, including executives and customers., • Pre-sales experience in security discussions with customers is highly desirable., • Certifications: AWS Certified Security – Specialty, CISSP, CCSP, or equivalent preferred. Be Curious - Be a lifelong learner. Seek out new ideas to serve customers. Understand our competition and the world. Be permanently dissatisfied with the status quo. Challenge preconceptions. Focus on the future rather than yesterday. Take Action - Be the first. Don’t wait. Take accountability. Inspire others by doing. Fail fast and learn from mistakes. Make a difference every day. Stronger Together - Respect, trust, and look out for each other. Celebrate diverse perspectives. Listen. Build connections and belonging. Act with integrity. Give back. One Syniti family. WHAT WE OFFER • Trust in your talent. At Syniti you will find a supportive environment and access to learning tools, but micromanagement is not our style., • Growth. We are growing rapidly and steadily solving the biggest challenges enterprise companies are faced with today. There was never a better time to join and grow with us. Most importantly you will have the chance to shape our journey and share in our success story., • Support. We all rely on each other and enable each other to be successful. You won’t stand alone., • Curiosity and genuine interest in you. We all have our different stories, all equally fascinating with each depicting a different journey and we want to hear them all., • Recognition. We are the sum of individual achievements, and we always take the time to celebrate them., • An open organisation. Titles don’t define access at Syniti. We stay humble regardless of where we sit in the organisation. We want to hear every voice, listen to all the ideas and make sure everyone’s work is seen and valued. OUR COMMITMENT TO INCLUSION At Syniti, we’re committed to creating a respectful, inclusive, and fair workplace where everyone belongs and thrives. We believe that diverse perspectives make us stronger — and we value the unique backgrounds, experiences, and voices each person brings to our team. We welcome applicants based on their skills and potential, and we’re dedicated to ensuring equal opportunities for all, regardless of personal background. If you need accommodations during the hiring process, please let us know — we’re here to support you.

Lead Full-Stack Developer Location: Remote-first Type: Full-time Start: ASAP About Couch Heroes At Couch Heroes, we’re exploring new ground for the MMO genre. In a world where fantasy and ancient technology intertwine, players explore shattered realms, grapple across verticality, solve puzzles, and push back corruption, with progression driven by player expression and discovery. We envision bridging generations of gamers, creating a space where both coexist and journey together. We’re developing in Unreal Engine, in early production, with a team spanning multiple countries. We’re remote-first, based in the UK, and scaling to support a multi-year live-service roadmap. We value autonomy, curiosity, and collaborative ownership, and we’re looking for creators who want to help build something from the ground up. Sound like your kind of thing? We should talk. About the Job The web and platform layer of an MMO is what players interact with outside the game client: account systems, social features, community tools, content delivery, and the services that tie the live experience together. We need a Lead Full-Stack Developer who can own the architecture of these systems and build the engineering team that delivers them. You will report to the CTO and manage a growing team of web and platform engineers. You will make architectural decisions, stay hands-on with code, and represent the web engineering discipline across the studio in production planning and resourcing decisions. We are in early production. The studio has been running for three years, and core platform infrastructure is being built alongside the game itself. You will be making foundational choices about stack architecture, service boundaries, deployment pipelines, and data models that the team builds on for years to come. This is not a maintenance role. You are building systems from the ground up. Your Role People Leadership and Team Development • Manage a growing team of engineers as the team scales through production: set priorities, assign work, balance workload, and run regular 1:1s focused on progress, career development, and honest feedback., • Lead performance reviews and goal setting aligned to production milestones and individual development plans. Identify skill gaps and address them through coaching, stretch assignments, or training., • Represent the web engineering discipline in cross-discipline leads meetings, production planning, and resourcing conversations. Advocate for team needs and capacity., • Foster a team culture of code quality, shared ownership, and continuous improvement., • Support hiring as the team grows: contribute to job descriptions, review technical submissions, and participate in interview loops. Technical Leadership and Architecture • Architect and lead the development of backend microservices using TypeScript, Node.js, and Express, with MongoDB for persistent storage and Redis for caching, session management, and pub/sub messaging., • Design scalable, well-bounded services that support the throughput and reliability demands of a live-service MMO: player accounts, social systems, marketplace, mail, inventory, and platform integrations., • Own CI/CD pipelines using Azure Pipelines, with Docker and Kubernetes on Azure for container orchestration and deployment. Establish deployment practices that support rapid iteration without compromising stability., • Make architectural decisions about service boundaries, data models, caching strategies, and API design that balance immediate delivery needs with long-term scalability., • Establish monitoring, alerting, and incident response practices using Grafana and Uptime Kuma or equivalent observability tools. Frontend Engineering • Build polished, responsive, and accessible interfaces using TypeScript, React, and Next.js, with Redux for state management and Zod for schema validation., • Collaborate with UI/UX design to ensure clean design-to-implementation handoff and user-centric workflows across platform features., • Ensure frontend systems are built for internationalisation, accessibility, and performance from the start. Platform Integration • Work with gameplay engineering and online services to define how web platform systems integrate with the game client: authentication, account management, social features, content delivery, and analytics., • Collaborate with production to manage scope, schedules, and task breakdowns for web engineering work. Contribute to milestone planning, sprint scoping, and capacity forecasting. Must-Haves • Proven experience in software development, with at least one shipped product or live service., • Proven experience in a senior or lead role with hands-on team leadership experience: running 1:1s, setting goals, conducting reviews, and developing team members., • Strong backend experience with TypeScript, Node.js, and Express for API development., • Production experience with MongoDB and Redis in a services environment., • Strong frontend experience with React and Next.js., • Working knowledge of Docker, Kubernetes, and CI/CD pipeline design., • Experience with Azure Cloud services or equivalent cloud platform., • Strong communication skills and a collaborative working style, with proven experience making architectural decisions in cross-functional teams. Nice-to-Haves • Experience building backend services for games, social platforms, or real-time multiplayer applications., • Experience with Redux, Zod, or equivalent state management and validation libraries., • Familiarity with real-time communication systems: WebSocket at scale, pub/sub architectures, or event-driven service design., • Experience with Grafana, Uptime Kuma, or equivalent observability and monitoring tools., • Experience with OAuth2/JWT authentication flows and identity management., • Experience with Golang or additional backend languages., • Contributions to open-source projects or technical writing that demonstrates systems thinking. About You • You lead by example. You are hands-on when needed and empowering always., • You build systems that last and take pride in readable, maintainable code., • You are comfortable translating product vision into technical decisions and explaining technical constraints to non-technical stakeholders., • You are comfortable working through ambiguity. Early production means not everything is defined yet, and you see that as an opportunity to shape the right architecture., • You balance engineering ideals with delivery pragmatism. You know when to build for the future and when to ship what works., • You work autonomously in a remote environment, proactively keeping your team aligned and your stakeholders informed., • We are committed to making our hiring process accessible. If you require reasonable adjustments at any stage, please let us know. Couch Heroes have partnered with Skillsearch on this hire. Jack is leading the search directly with the studio leadership, so feel free to reach out to him at . He will be your point of contact throughout. Looking forward to connecting! Equal Opportunities Couch Heroes is an equal opportunities employer. We celebrate diversity and are committed to creating an inclusive environment for all employees. We welcome applications from all backgrounds and do not discriminate on the basis of age, disability, gender identity or expression, marriage or civil partnership, pregnancy or maternity, race, religion or belief, sex, sexual orientation, or any other protected characteristic. Privacy and data We process your personal data as part of the recruitment process. Couch Heroes and Skillsearch both act as data controllers in relation to your application. For details on how your information is collected, used, stored, and your rights under UK GDPR, please review the relevant Privacy Policies below: Couch Heroes: ___ Skillsearch: ___

Principal Data Engineer Location: United Kingdom Our Client They are a global content solutions company, powered by technology and human expertise. They help organisations grow the value of their ideas, data, and content by enabling them to be understood - everywhere. With over 45 AI patents, industry-leading technology, and expert talent, they support more than 80 of the world’s top 100 brands. Their teams operate across 60+ locations worldwide, delivering solutions that accelerate time-to-market, deepen customer engagement, and unlock new global opportunities. Role Overview As Principal Data Engineer, you will be a senior technical leader responsible for shaping the architecture, scalability, and evolution of the enterprise data platform. This role goes far beyond delivery. You will define technical strategy, design scalable data systems, mentor senior engineers, and partner closely with product, engineering, analytics, and business leaders to transform strategic goals into robust, data-driven solutions. You will have significant autonomy to influence architectural decisions, introduce best practices, and create a lasting technical legacy across the global data ecosystem. Key Responsibilities • Lead the design and evolution of scalable, secure, and reliable data architectures supporting BI, analytics, and ML workloads., • Define and drive data engineering standards, architecture patterns, and best practices across teams., • Influence technical strategy across engineering, product, and analytics through clear communication and stakeholder collaboration., • Anticipate future data needs, balancing long-term vision with pragmatic delivery., • Own reliability, performance, and observability of critical data systems, including SLO definition and operational resilience., • Mentor and develop senior data engineers through architecture reviews, technical coaching, and knowledge sharing., • Champion data quality, governance, monitoring, incident response, and cost optimisation., • Evaluate emerging tools and technologies, guiding adoption where they deliver genuine business value. Skills & Experience • Extensive experience designing and operating large-scale, cloud-based data platforms., • Deep expertise in data engineering fundamentals: data modelling, pipeline orchestration, distributed systems, and performance optimisation., • Strong architectural judgement, balancing technical excellence with business outcomes., • Proven leadership and influence across cross-functional teams., • Demonstrated success mentoring senior engineers and scaling team effectiveness., • Exceptional communication skills, including technical writing, documentation, and executive presentations., • Strong business acumen with the ability to connect technical decisions to measurable ROI. Desirable Experience • Hands-on experience with Google Cloud Platform (Big Query, Data form, Cloud Composer)., • Metadata management and data cataloguing (e.g., DataHub, Alation)., • Modern orchestration platforms (Airflow, Prefect, Dagster)., • Cloud-native architectures, including Kubernetes, serverless, and Infrastructure as Code., • Data mesh or decentralised data architecture implementations., • Model Context Protocol (MCP) for data assets., • Open-source contributions or active participation in the data engineering community.

ABOUT THE COMPANY: OAG is a leading data platform for the global travel industry, offering an industry-first single source for supply, demand, and pricing data. We empower the global travel industry with high-quality, relevant datasets that cover the entire journey, from planning through customer experience. Headquartered in the UK, with operations in the USA, Denmark, France, Germany, Singapore, Japan, China, and Lithuania. For more information, visit ABOUT THE TEAM: You will join a diverse, global team of DevOps engineers who support the migration, deployment, and reliability of systems in a cloud-first environment, using automation and best practices to deliver scalable, high-performing infrastructure. The role exists to improve service delivery, support customer-facing applications, and introduce Site Reliability Engineering (SRE) and Infrastructure as Code (IaC) techniques into daily operations. The role is open to candidates located anywhere in Lithuania. YOU WILL: • Work as part of a global DevOps team to migrate and optimise systems for Azure cloud and hybrid environments., • Deploy and manage applications using CI/CD pipelines and automate infrastructure and support processes., • Build, support and optimise 24x7 production environments, rapidly learn existing systems to ensure high availability., • Introduce and apply IaC practices, collaborate with developers and other technical teams to improve observability, reliability, and efficiency., • Will take part in developing and improving the Kubernetes platform., • Participate in rostered on-call support and troubleshooting, ensuring timely incident response and system recovery. ESSENTIAL: • Experience implementing CI/CD and version-control practices using Azure DevOps, GitHub Actions, or similar tools, • Practical knowledge of Windows Server and/or CentOS, Azure Cloud, networking, Docker and Kubernetes, • Practical knowledge of IaC tools (e.g., Terraform, PowerShell, Helm charts), • Practical knowledge of at least one observability tool (preferably Datadog, Grafana, ELK stack, or Azure monitoring, etc.), • Security-minded person with some exposure to security tools (OWASP, Sonarcloud or similar), • Strong troubleshooting and problem-solving skills, with a strong sense of ownership and quality-first mindset, • Clear communicator and effective team player WE WILL OFFER YOU: • A dynamic work environment at OAG, fostering innovation in a progressive, non-hierarchical culture, where passionate tech enthusiasts continuously develop new products and solutions with a focus on improvement for the aviation industry., • Flexible working arrangements that allow remote work or office attendance., • An attractive compensation and benefits package, including private health insurance, a company bonus scheme, and voluntary participation in a company-supported retirement scheme., • A generous annual leave policy, growing with each year of service, and a day off during your birthday month., • Participation in team-building activities, team workshops, and group learning sessions. OAG is an Equal Opportunity Employer. We ensure all applicants are considered for employment without discrimination.

👋 This offer is listed in the volunteer category. It is not a hiring position, participation is voluntary and unpaid We’re looking for SecOps professionals interested in testing and shaping an AI assistant built for cybersecurity operations. Askeal is designed to support daily SecOps tasks, from threat intelligence gathering and security analysis to incident response. The testing phase starts in early 2026, and testers will get free early access. The goal is to try Askeal in real operational contexts, such as: 🧠 Threat intelligence gathering 🕵️ Security analysis 🔗 Data correlation 🚨 Incident triage & response …and to uncover new ones along the way! We’ll be gathering feedback and ideas in a private subreddit dedicated to the program. If you’re interested, apply to this offer and we’ll add you to the community where you’ll get more details. What’s in it for you • Free early access to Askeal (testing program launching early 2026), • Direct impact on the development of an AI tool designed for SecOps professionals Additional information • Participation is voluntary and unpaid, • Privacy is at the core of our solution (full details shared before onboarding), • Flexible involvement: test when and how you want If you’re passionate about cybersecurity and want to help shape a tool built for simplifying your daily operations, we’d love to have you in the Beta Tester group. 👉 Apply to this offer, and we’ll reach out with details to join our private tester community.

Proven track record in leading cross-functional engineering teams, mentoring engineers, and delivering projects using Agile/Kanban methodologies. To apply software engineering techniques, automation, and best practices in incident response, to ensure the reliability, availability, and scalability of

A leading security services provider is seeking a Security Team Leader in Glasgow to oversee a multifunctional team and deliver exceptional customer service. The ideal candidate will display strong leadership and communication skills, ensuring high service standards at all times. The role involves s

Lead real-time response to cyber threats, managing cybersecurity incidents and investigations through to resolution. Principal Cyber Security Consultant - Security Leadership. Lead Cyber Security Consultant – Security Leadership.

A leading cybersecurity organization is looking for an experienced Lead SOC Analyst to join their team in Glasgow on a 12-month contract. This role involves overseeing SIEM tools, leading a team in incident response, and maintaining security documentation.

Principal Consultant - Incident Response Salary: Up to £85,000 + £4,700 cash benefits Location: London, Cardiff, Manchester, Birmingham or Edinburgh Working pattern: Hybrid - 2-3 days per week in the officeAbout the RoleOur client is seeking an experienced Principal Consultant to join their Incide

A UK-based IT solutions provider is seeking a Governance, Risk & Compliance (GRC) Consultant to deliver consultancy projects to clients in both public and corporate sectors.The ideal candidate will possess a strong track record in consultancy and be comfortable with customer interaction.Key responsi

This role involves troubleshooting security issues and developing robust incident response plans. A financial services firm in the United Kingdom is seeking a Cyber Security professional to maintain security controls, manage incidents, and support teams through training.

Candidates should have a minimum of 3 years in cybersecurity operations, focusing on threat detection and incident response.

A leading energy company in Glasgow is seeking a Senior Security Operations Analyst specializing in cyber incident response. The successful candidate will lead incident responses and develop cybersecurity capabilities while working in a hybrid model, balancing on-site and remote work. Required quali

Security Operations Centers (SOC), Product Security Incident Response Teams (PSIRT), and Computer Security Incident Response Teams (CSIRT). Act as an incident commander to drive incidents through the entire response lifecycle. Design and maintain a portfolio of security alerts, automated actions, pl

You will lead incident response activities, monitoring and analysing threat data, managing alerts and guiding incidents from identification through containment, eradication and recovery, all while following established playbooks and industry best practices. You"ll bring experience in cyber incident

A global satellite operator situated in the UK is seeking a Security Operations Analyst to provide 24/7 incident response support. Candidates should have over 3 years of experience in cybersecurity, incident response, and knowledge of SIEM tools.

Ideal candidates possess a Bachelor's degree in Computer Science, relevant certifications, and significant experience in incident response. A global technology firm in the United Kingdom is seeking a skilled Global Security Incident Response Engineer. The role involves managing live incidents, condu

The role involves incident management, collaboration across security functions, and applying threat modeling.

A leading insurance company in the United Kingdom is seeking a Senior Cyber Incident Manager to drive the incident response lifecycle for serious cyber incidents. The successful candidate will help enhance incident response capabilities, manage high severity incidents, and provide continuous service

A leading cybersecurity firm in the United Kingdom is seeking an experienced Level 3 SOC Analyst to spearhead advanced investigations and incident responses.

Incident Response type roles that performed event investigations. Solid understanding of cybersecurity principles, including incident response, policy governance, and compliance requirements. The Incident Response Lead is responsible for driving the containment and eradication of threats during cybe

We are both reactive and proactive, leading security investigations, incident response support and response resolution, through to cyber threat analysis and detection and response engineering. Lead security incident response in our 24/7 global rotation, managing incidents from detection through cont

Ideal candidates will have significant experience in Cyber Security Operations and Incident Response, along with relevant certifications. A leading live entertainment company is seeking an Incident Response Lead to drive the containment and eradication of threats during cybersecurity events.

You will develop incident management processes, collaborate across teams, and improve detection capabilities.

A leading housing association in London is seeking an experienced Communications Manager (Incident Response) for a 3 to 6-month contract. You will support residents affected by a significant estate incident, leading empathetic and clear communications.

This role involves acting as the primary point of contact for customers, handling incidents through calls and emails, and ensuring compliance with SLAs.

As Communications Manager (Incident Response), you will play a pivotal role in supporting residents through a significant and ongoing estate incident. We are seeking an experienced Communications Manager (Incident Response) to join our Corporate Affairs function on a 3 to 6-month fixed term contract

The Security Team is responsible for providing key security capabilities covering application, cloud and enterprise security, incident response, detection and GRC. We are looking for an experienced, hands-on security practitioner to drive the adoption of modern security processes and tooling, with a

This role focuses on managing end-to-end incident response operations and enhancing capabilities through mentoring, tooling, and process development. Candidates should have 6-7 years in incident response with strong skills in forensic investigations and EDR technology.

A leading UK tech company is looking for a Senior SOC Analyst to lead major security incident responses and enhance the overall SOC capability. The role involves incident response, threat hunting, malware analysis, and producing high-quality reports.

The role involves leading incident response activities, designing cybersecurity capabilities, and collaborating with security teams.

Analyst for their Falcon Complete team, focusing on incident handling and malware analysis.

A leading technology firm in the United Kingdom is seeking an experienced IT Security professional to manage and implement robust security strategies across cloud environments and applications.The ideal candidate will have 3–5 years of experience in IT security or SecOps, strong knowledge of cloud

Incident Response – Manage and review responses to live incidents, document findings and implement suitable remediation actions. Linux/Unix technical experience including creation and modification, administration, troubleshooting, and/or forensic and incident response experience. Provide expert te

This role requires a minimum of 3 years of experience in cybersecurity operations, focusing on threat detection and incident response. Responsibilities include monitoring security infrastructure, conducting investigations, and developing response playbooks.

This role focuses on ensuring high availability and reliability of production systems, managing incident responses, and contributing to automation with Python.

A global technology company in the UK is seeking an Incident Responder to manage security incidents and ensure the integrity of its products. The ideal candidate will have over 5 years of hands-on experience in security operations, knowledge of incident management systems, and excellent communicatio

You will focus exclusively on cyber breach response matters, particularly around insurance claims following these incidents. The work will include both contentious and advisory elements, such as:Leading and managing end-to-end cyber incident response matters. Managing regulatory exposure and strateg