Vulnerability manager jobs in United Kingdom

We don’t just believe in better. We make it happen. Better content. Better products. And better careers. Working in Tech, Product or Data at Sky is about building the next and the new. From broadband to broadcast, streaming to mobile, Sky Stream to Sky Glass, we never stand still. We optimise and innovate. We turn big ideas into the products, content and services millions of people love. And we do it all right here at Sky. Role/Team overview The Technical Security Systems Manager plays a key role in keeping Sky’s physical security technology resilient, compliant and operational. Sitting within Workplace Technology and reporting to the Technical Security Operations Manager, this role leads the technical management of Sky’s electronic security systems, including access control, CCTV, intruder, intercom and integrated platforms. You’ll work closely with the Technical Security Team, internal stakeholders and specialist suppliers to support secure, reliable systems across the business. What you’ll do • Lead the implementation, management, support and innovation of Sky’s electronic security systems, including access control, CCTV, intruder, intercom and integrated platforms., • Ensure electronic security systems and associated applications remain operational, supported and available to meet business needs., • Oversee access control and CCTV platform changes to support business moves, changes and operational requirements., • Maintain accurate system data, documentation, procedures and configuration records in line with standards, stakeholder, audit and compliance requirements., • Manage system platform patching, vulnerabilities, certifications and lifecycle activities., • Generate reports, support audits and provide technical guidance to help the business manage security risk and performance. What you’ll bring Essential criteria: Degree-level qualification or equivalent technical experience in electronic security systems, technology platforms or a related discipline. • Strong technical knowledge of access control, CCTV, intruder detection, intercoms, integrated security platforms and associated physical security infrastructure., • Enterprise-level experience supporting Lenel and Genetec applications, including system configuration, maintenance and troubleshooting., • Experience in IT security, networking, server diagnostics, system hardening, patching and vulnerability management., • Experience of change management, document control, audits, reporting and maintaining accurate operational records., • Ability to analyse complex technical issues, identify risk and recommend practical mitigation options., • Strong communication and stakeholder management skills, with the confidence to work with internal teams, external suppliers and specialist contractors., • Highly motivated self-starter who can plan, organise and prioritise work effectively within a small, experienced team. Desirable skills and experience: • Experience of change management, document control, audits, reporting and maintaining accurate operational records., • Ability to analyse complex technical issues, identify risk and recommend practical mitigation options., • Strong communication and stakeholder management skills, with the confidence to work with internal teams, external suppliers and specialist contractors., • Highly motivated self-starter who can plan, organise and prioritise work effectively within a small, experienced team. Benefits and perks There's one thing people can't stop talking about when it comes to life at Sky: the perks. Here’s a taster: · Free Sky TV or NOW package, including Sky Sports and Sky Cinema • Pension package with up to 9% employer contribution, • Private healthcare with mental health support, • Aviva Digital GP and dental insurance, • Discounts on Sky products, including Sky Mobile, Sky Broadband, Sky Glass and Sky Protect · Sharesave and Tech schemes, • A range of Sky VIP rewards and experiences How you’ll work We've adopted a hybrid working approach to give more flexibility on where and how we work. The hybrid working expectations for this role are 2-3 days in the office per week. On Call is expected for this role, one week in four. Your office base Osterley will be the main office base for this role. Travel to other Sky sites will be required from time to time to support projects, audits, incidents, supplier activity and business requirements. Our Sky Group HQ. Equipped with state-of-the-art technology and workspaces, there’s plenty of space to see your big ideas come to life. Here you’ll find 13 subsidised restaurants and cafes. You can re-energise at our gym, catch the latest films at our cinema, get your car washed and even get pampered at our beauty salon. Our Osterley Campus is just a 10-minute walk from Syon Lane train station, or you can get one of our free shuttle buses from Osterley, Gunnersbury and Ealing Broadway stations. Plus, there’s free onsite parking available for cars, motorbikes and bicycles. Who we are We’re Sky, a leading media and entertainment company who connect millions with entertainment, sports, news and arts through innovative products and services. Working with us means you’ll be bringing the joy of a better experience to more people, every day. All so we can do better and deliver better for our customers, colleagues and society. We’re an equal opportunity employer and value diversity at our company. We're a Disability Confident Accredited Employer, and welcome and encourage applications from all candidates. We will look to ensure a fair and consistent experience for all and will make reasonable adjustments to support you where appropriate. Please flag any adjustments you need as early as you can. Just so you know: if your application is successful, we’ll ask you to complete a criminal record check. And depending on the role you have applied for and the nature of any convictions you may have, we might have to withdraw the offer. To be eligible for this role you are required to have the appropriate right to work in the UK. Please be aware Sky does not offer sponsorship for this position. To find out more about working with us, search #LifeAtSky on social media.

Digital Operations and Governance Manager required by an independent, global marketing services group specialising in entertainment, music, gaming and consumer brands, based in Farringdon, paying up to £80k. Hybrid, 3 days a week in the office. You will lead the Data Team, own AI adoption and governance across the agency, and lead on content security and vulnerability management. A rare chance to ... \n \n ZIPC1_UKTJ

Oliver James is partnered with a world class leading consulting group in their latest phase of cyber security growth. \n We are interested in connecting with Senior Cyber Security Strategy Manager candidates based in London. \n Oliver James is partnered with a world class leading consulting group in their latest phase of cyber security growth. \n We are interested in connecting with Senior Cyber Security Strategy Manager candidates based in London. \n This grade pays up to £120,000 basic salary plus bonuses, pension, broad benefits, professional membership costs, training & development and more. \n In addition, our client offers a clear and defined path career progression where employees have complete control of their development. \n Candidates carrying a number of the below skills would be particularly relevant:- \n\n • Strong skills in areas such as cyber strategy, cyber risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber.\n, • Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2.\n, • Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk.\n, • Desire to work with large organisations trying to solve the latest cyber security problems.\n, • Relevant certifications, such as M.Inst.ISP, CISSP, CISM, CISA or an MSc in cyber security or a related discipline.\n, • Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews.\n, • Detail oriented and strong problem-solving skills.\n, • Excellent oral and written communication skills including concisely communicating status and creating customer reports and presentations.\n

This role requires full-time presence at Aristocrat’s London office. It also supports an EMEA-wide remit and works closely with several teams.Reporting directly to the IT Service Delivery Manager, the successful candidate will deliver high-quality hands-on support across end-user services, infrastructure support, workplace technology, cloud services, endpoint management, meeting room technology, documentation, audit, and initiatives aimed at improving service quality. This is a true dual-role position suited to someone who is confident handling responsibilities involving both Service Desk and Infrastructure Support functions. The ideal applicant is encouraged to balance hands-on user support alongside broader technical duties. They will collaborate with IT teams across regions and globally to ensure local support matches global standards, processes, and service expectations. The role requires a strong customer-service approach, solid technical skills to fix issues, and attention to detail. It also needs the ability to work effectively with internal IT teams, external vendors, and business partners. \n Location and Regional Scope This role is 100% office-based and will be full-time from Aristocrat’s London location. Although London-based, the role will support EMEA-wide activities when needed. It will provide local hands-on assistance, technical input, and support for blocking issues. The role also involves documentation, audit support, and contributing to service improvements while collaborating with IT groups at regional and global scales. \n Key Responsibilities \n Service Desk and End-User Support \n\n • Provide 1st, 2nd, and where appropriate 3rd line technical support to Aristocrat users across office, remote, and hybrid working environments.\n, • Respond to incidents and service requests via ServiceNow, video call/phone, email, remote support tools, and walk-up support channels.\n, • Fix and resolve issues relating to Windows, macOS, Microsoft 365, mobile devices, printers, workplace technology, and meeting room environments, including video conferencing platforms, collaboration tools, room-based AV systems, conferencing bars, cameras, microphones, touch panels, and associated meeting room hardware.\n, • Ensure tickets are correctly logged, prioritised, updated, and resolved in line with agreed service levels.\n, • Take ownership of support issues that have been brought up, ensuring users are kept informed throughout the lifecycle of the ticket.\n, • Support joiner, mover, and leaver processes, including device preparation, account access, equipment recovery, and onboarding support.\n, • Provide support for VIP users and key business collaborators where required.\n, • Maintain a professional, helpful, and customer-focused approach at all times, ensuring users receive a positive support experience through clear communication, ownership, empathy, and timely follow-up.\n\n Modern Workplace, Cloud & Infrastructure Support \n\n • Support and administer Microsoft Intune as a key priority, including device enrolment, compliance policies, configuration profiles, application deployment, endpoint security baselines, and device lifecycle management.\n, • Support Microsoft Azure and related cloud services, including identity, access, security, infrastructure, and modern workplace services.\n, • Support endpoint management on Windows, macOS, and mobile platforms, ensuring devices are secure, compliant, patched, and accurately configured.\n, • Support Microsoft 365 services, including Teams, Exchange Online, SharePoint, OneDrive, and related collaboration tools.\n, • Assist with infrastructure-related incidents, working with existing Infrastructure, Service Desk, and specialist teams to investigate, document, bring up, and resolve issues appropriately.\n, • Collaborate with the broader Global Infrastructure group to assist with network fix activities, including TCP/IP, DNS, DHCP, VLANs, VPNs, wireless connectivity, switches, routers, and firewalls.\n, • Collaborate alongside the Global Infrastructure group to support cloud-based services, migrations, integrations, and improvement activities, ensuring local requirements and EMEA considerations are clearly understood and represented.\n, • Work alongside Infrastructure, Service Desk, and endpoint management teams to help maintain and improve device management processes, including imaging, deployment, device compliance, application packaging, software distribution, and endpoint configuration.\n, • Assist with infrastructure maintenance activities, including endpoint updates, monitoring, backup checks, patching support, operational health checks, and follow-up actions.\n, • Support disaster recovery and business continuity activities in collaboration with the worldwide infrastructure team, including documentation, testing, local validation, issue tracking, and improvement actions.\n\n Documentation, Audit and Knowledge Management \n\n • Assist with auditing the current IT environment, including hardware, software, endpoint configuration, support processes, infrastructure dependencies, asset records, and existing documentation.\n, • Identify gaps in current documentation, processes, technical standards, and support information.\n, • Build, update, and maintain clear user documentation, including support guides, process documents, endpoint build standards, infrastructure information, device configuration details, and knowledge base articles.\n, • Contribute to the creation and improvement of internal KB articles to support faster resolution, improved information access, and reduced repeat blocking issues.\n, • Ensure documentation remains accurate, accessible, and consistent with IT standards across regional and international levels.\n, • Support improvements to asset tracking, device records, ticket quality, operational reporting, and audit readiness.\n\n Projects and Continuous Improvement \n\n • Participate in IT projects, office moves, technology refreshes, infrastructure upgrades, endpoint management improvements, and regional service improvement initiatives.\n, • Support the rollout of new hardware, software, systems, and IT processes across Aristocrat locations.\n, • Identify recurring issues and suggest improvements to reduce repeat incidents and improve the user experience.\n, • Work closely alongside regional and global IT teams to guarantee support processes are consistent, scalable, and aligned with wider IT standards.\n, • Contribute to improving IT service delivery, ticket quality, asset accuracy, documentation, and operational efficiency.\n, • Support EMEA-wide initiatives as needed, offering local input, technical support, and hands-on assistance from the London office.\n\n Security, Compliance and Governance \n\n • Follow Aristocrat IT security policies, standards, and procedures.\n, • Support access management processes, ensuring user permissions are appropriate, approved, and consistent with business requirements.\n, • Assist with security-related tasks such as device compliance, patching, endpoint protection, phishing awareness, vulnerability remediation, and policy enforcement.\n, • Ensure IT assets are supervised, managed, and maintained accurately throughout their lifecycle.\n, • Support audit, compliance, and reporting requirements where required.\n, • Contribute to maintaining a secure, documented, and well-managed IT environment across the London office and wider EMEA region.\n\n Skills and Experience Required \n\n • Previous experience working in a Service Desk, Desktop Support, Infrastructure Support, Modern Workplace, or similar IT support role.\n, • Good experience in fixing issues across PC and Apple operating systems, Microsoft cloud services, handheld gadgets, conference room systems, and general business applications.\n, • Solid practical experience with Microsoft Intune, encompassing endpoint enrollment, compliance policies, application deployment, configuration profiles, endpoint security, and device management.\n, • Strong working knowledge of Microsoft Azure and cloud-based IT services.\n, • Experience supporting Microsoft 365 technologies, such as Teams and Exchange Online, SharePoint, OneDrive, and associated teamwork solutions.\n, • Good understanding of identity and access management, user permissions, security groups, conditional access concepts, and cloud-based access controls.\n, • Good knowledge of networking fundamentals, including TCP/IP, DNS, DHCP, VPN, wireless, switching, and firewall concepts.\n, • Experience supporting laptops, desktops, mobile devices, printers, meeting rooms, AV equipment, and workplace technology.\n, • Experience using ITSM tools such as ServiceNow or similar ticketing platforms.\n, • Ability to build and maintain high-quality documentation, including help center content, support processes, technical guides, audit records, and operational procedures.\n, • Experience reviewing, auditing, and documenting existing IT environments, processes, assets, and support standards.\n, • Ability to manage and prioritise multiple tickets, tasks, and support requests.\n, • Good communication skills, with capacity to explain technical information clearly to both technical and non-technical users.\n, • A proactive approach to problem solving, ownership, continuous improvement, service quality, and user experience.\n, • Capable of working independently while also collaborating closely with existing EMEA and worldwide IT teams.\n\n Desirable Skills \n\n • Experience with Jamf, Windows Autopilot, or other endpoint provisioning, deployment, and hardware administration tools.\n, • PowerShell scripting or automation experience.\n, • Experience with Zoom Rooms, Teams Rooms, AV systems, or conference room technology.\n, • Experience with backup monitoring tools, patch management, and vulnerability remediation.\n, • Knowledge of ITIL processes, including incident, request, problem, and handling updates or modifications.\n, • Microsoft, Apple, Cisco, CompTIA, VMware, or other relevant technical certifications.\n, • Background in a global enterprise IT environment.\n, • Experience supporting regional IT operations across multiple countries or business units.\n\n Personal Attributes \n\n • Customer-focused, professional, and approachable.\n, • Good sense of ownership and accountability.\n, • Calm under pressure and able to manage competing priorities.\n, • Confident working across responsibilities in both Help Desk and Infrastructure Support roles.\n, • Collaborative and able to work efficiently with colleagues across different regions and time zones.\n, • Diligent, with a solid focus on documentation, process, audit readiness, and service quality.\n, • Proactive in identifying improvements and reducing avoidable issues.\n, • Comfortable performing a hands-on, office-based support role while also contributing to broader regional and worldwide technology initiatives.\n\n This job description may have been reviewed and enhanced using AI-assisted tools to improve clarity, consistency, and inclusivity. All final content, role requirements and hiring decisions remain subject to human review and approval by Aristocrat. Compensation Philosophy\n We offer a comprehensive pay and benefits package designed to stay competitive in the market, support your wellbeing, and recognise your contribution to our success. Our approach is underpinned by a pay-for-performance belief in rewarding individual impact. Your specific compensation package will be determined by factors such as your skills, experience, qualifications, and location. \n Depending on your role and location, you may be eligible for annual bonuses and incentives, health and wellbeing benefits, paid time off, retirement plans, insurance coverage, and other local or statutory benefits. \n Specific details about compensation and benefits for this position will be discussed during the recruitment process.

Oliver James is partnered with a world class leading consulting group in their latest phase of cyber security growth. \n We are interested in connecting with Cyber Security Strategy Manager candidates based in London. \n This grade pays up to £85,000 basic salary plus bonuses, pension, broad benefits, professional membership costs, training & development and more. \n Oliver James is partnered with a world class leading consulting group in their latest phase ofcyber security growth. \n We are interested in connecting with Cyber Security Strategy Manager candidates based in London. \n This grade pays up to £85,000 basic salary plus bonuses, pension, broad benefits, professional membership costs, training & development and more. \n In addition, our client offers a clear and defined path career progression where employees have complete control of their development. \n Candidates carrying a number of the below skills would be particularly relevant:- \n\n • Strong skills in areas such as cyber strategy, cyber risk, cyber maturity, security architecture, cyber transformation and regulatory compliance for cyber.\n, • Experience of various recognised cyber security relevant standards and regulations, such as NIST CSF, CRI2.0, ISO27001, NCSC CAF, GDPR and NIS2.\n, • Experience working in a variety of environments or organisational contexts to develop cyber strategy and manage cyber risk.\n, • Desire to work with large organisations trying to solve the latest cyber security problems.\n, • Relevant certifications, such as M.Inst.ISP, CISSP, CISM, CISA or an MSc in cyber security or a related discipline.\n, • Practical experience across various areas of cyber security, such as cyber architecture, cyber GRC, cyber threat management, vulnerability management, cyber security reviews.\n, • Detail oriented and strong problem-solving skills.\n, • Excellent oral and written communication skills including concisely communicating status and creating customer reports and presentations.\n

This job is with WTW, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Description The Associate Manager - Cyber Security Incident Response will play a pivotal role within WTW’s Global Information and Cyber Security Defence (ICSD) function, leading the response to complex security incidents and driving initiatives to enhance WTW’s Cyber incident management capabilities. This mid senior-level role requires a highly experienced professional with strong expertise in incident response and cybersecurity. The individual will work as part of a global, multi-disciplined security community with strong support across the business, contributing to fostering a security-aware culture while ensuring WTW remains a great place to work. With WTW’s large global footprint, this role offers a fascinating range of work, and occasional global travel may be required. The individual will work as part of a global, multi-disciplined security community with strong support across the business, contributing to fostering a security-aware culture while ensuring WTW remains a great place to work. With WTW’s large global footprint, this role offers a fascinating range of work, and occasional global travel may be required. This role is based in London and follows a hybrid working model, with a minimum requirement of three days per month in the office. Applications are also welcome from candidates based elsewhere in the UK; however, travel to the London office will be required as and when needed to meet business demands. The Role: The Associate Manager - Cyber Security Incident Response will play a key role in managing and responding to security incidents within WTW’s Global Cyber Security Incident Response Team. Responsibilities of this role will include: Serve as the primary lead for significant security incidents, coordinating response efforts across technical and business teams to minimize impact and ensure timely resolution. Establish, refine, and maintain incident response processes, playbooks, and workflows to align with industry best practices and WTW’s organizational needs. Act as the central point of contact for incident response activities, ensuring effective communication with internal and external stakeholders, including senior leadership, Legal, HR, and Compliance teams. Leverage AI and automation to accelerate incident containment, response, and remediation — embedding AI-assisted triage, alert enrichment, and decision support into SOAR playbooks and response workflows Lead the in-depth technical investigation of security incidents escalated from the SOC, ensuring timely containment, eradication, and recovery while identifying root causes and potential impact. Adept at leading global response teams, integrating SIEM/SOAR platforms, and collaborating with MSSPs to mitigate cloud-native and supply chain attack. Work closely with SOC, Threat Hunting, CTI, Insider Threat, and Vulnerability Management teams to ensure seamless coordination and information sharing during incidents. Lead root cause analysis and post-incident reviews to identify gaps, implement lessons learned, and enhance the overall incident response program. Evaluate and prioritize incidents based on potential impact and severity, escalating issues to higher levels of management or other teams as required. Contribute to the development and maintenance of key performance indicators (KPIs) and metrics to measure the effectiveness of incident response processes. Act as a liaison between technical teams and business stakeholders, ensuring clear communication during incidents and status updates. Qualifications What you'll bring: We are looking for a candidate for Cyber Security Incident Response who has the following: Strong work experience in SOC or incident response, with a strong understanding of cybersecurity principles, frameworks, and tools. Understanding of AI/ML applications in security operations, including AI-augmented detection, triage, and response automation. Awareness of AI-specific threats and incident types (prompt injection, model/data poisoning, sensitive-data exposure via GenAI), and familiarity with OWASP LLM Top 10 / MITRE ATLAS. Hands-on cloud incident response across Azure, AWS, and/or GCP, including cloud-native log sources (Azure Activity/Entra ID sign-in logs, AWS CloudTrail) and the reality that cloud IR differs from on-prem. Proven ability to lead high-stakes security incidents and coordinate cross-functional teams effectively. Deep understanding of MITRE ATT&CK, cyber kill chain, and incident response methodologies. Exceptional verbal and written communication skills, with the ability to convey complex technical concepts to non-technical audiences, including executives. A proactive and decisive mindset with the ability to operate under pressure. Strong analytical and problem-solving skills to make informed decisions in complex situations. Collaborative and adaptable, with a passion for mentoring and developing team members. What we offer: Enjoy a benefits package designed to help you thrive, both professionally and personally. You'll receive 25 days of annual leave plus an extra WTW day to relax and recharge. Our comprehensive health and wellbeing offering includes private healthcare, life insurance, group income protection, and regular health assessments, all giving you peace of mind. Secure your future with our defined contribution pension scheme, featuring matched contributions up to 10% from the company. We support your growth and balance with hybrid working options, access to an employee assistance programme, and a fully paid volunteer day to make a difference in your community. On top of these, you can opt into a variety of additional perks including an electric vehicle car scheme, share scheme, cycle-to-work programme, dental and optical cover, critical illness protection, and much more. Start making the most of your career and wellbeing with a range of benefits tailored for you. Equal Opportunity Employer We’re committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email candidatehelpdesk@wtwco.com ]]>

Job title: Cyber Policy LeadDivision: OperationsDepartment: Cyber and Information ResilienceSalary: National (Edinburgh and Leeds) ranging from 53,800 to 70,000 and London from 59,200 to 75,000 (salary offered will be based on skills and experience)This role is graded as: Senior Associate Experience, qualification, and soft skills, have you got everything required to succeed in this opportunity Find out below. • Regulatory Your external recruitment contact is Raimonda via internal recruitment contact is Patrycja must be submitted through our online portal. Applications sent via social media or email will not be accepted.About the FCA and team We regulate financial services firms in the UK, to keep financial markets fair, thriving and effective. By joining us, you’ll play a key part in protecting consumers, driving economic growth and shaping the future of UK finance services. The Cyber and Operational Resilience directorate enables secure and resilient regulation across the FCA and PSR, supporting the protection of UK consumers and financial markets.This Senior Associate sits within the Policy & Risk team, part of the wider Governance and Human Risk function. The role focuses on the management and maintenance of the Cyber & Information Resilience Policy Framework, including associated standards, procedures and guidance. You will help to support and articulate the organisations Cyber Risk Appetite through the policy framework. You will also be a key point of contact from all areas of the FCA for queries against published requirements.You will support the Risk lead in setting and measuring controls performance and support the GHR Manager and CISO in reporting against cyber issues / non-compliance across the organisation.Role responsibilitiesManage Cyber & Information Policy and Cyber & Information Security Standards updates in line with agreed refresh periodsLook to modernise our policy & standards suite e.g. standards on a pageAct as the primary point of contact for policy-related queries, covering both BAU and project-related activitiesSupport reporting on Policy Owner compliance e.g. effectiveness of our policiesConduct policy gap analysis and provide recommendations for improvementComplete and interpret regular horizon-scanning activities to identify emerging risks, trends, and regulatory changesHelp develop and build requirements for a new self-service policy model for low-risk projects taking into account the FCA’s risk appetiteManage and modernise the Policy Waiver processProvide policy guidance and interpretation to specialist investigation teams and HR on policy requirements and specific casesSkills requiredMinimum:Experience in designing, drafting and maintaining cyber & information security policies, standards and procedures across their full lifecycleExtensive working knowledge of industry standards such as ISO 27001, NIST Cybersecurity Framework (CIS), CIS ControlsEssential:Understanding of technical security controls, including network security, cloud security, identity and access management and vulnerability managementWorking knowledge of Information Management practices and Data Privacy legislationDemonstrated experience in dealing with stakeholders at all levels (including Director level)Solid experience in delivering organisational changeRisk identification, articulation and managementBenefits25 days annual leave plus bank holidaysNon-contributory pension (8–12% depending on age) and life assurance at eight times your salaryPrivate healthcare with Bupa, income protection and 24/7 Employee Assistance35 hours of paid volunteering annuallyColleagues spend a minimum of 50% of their working time in the office each month (60% for Directors and Executive Directors) across our London, Leeds and Edinburgh offices. A flexible benefits scheme designed around your lifestyleA flexible benefits scheme designed around your lifestyleFor a full list of our benefits and our recruitment process as a whole visit our benefits page.Our values and cultureOur colleagues are the key to our success as a regulator. We are committed to fostering a diverse and inclusive culture: one that’s free from discrimination and bias, celebrates difference and supports colleagues to deliver at their best. We believe that our differences and similarities enable us to be a better organisation – one that makes better decisions, drives innovation and delivers better regulation.If you require any adjustments due to a disability or condition, your recruiter is here to help • reach out for tailored support.We welcome diverse working styles and aim to find flexible solutions that suit both the role and individual needs, including options like part-time and job sharing where applicable.Disability confident: our hiring approach We’re proud to be a Disability Confident Employer and therefore, people or individuals with disabilities and long-term conditions who best meet the minimum criteria for a role will go through to the next stage of the recruitment process. In cases of high application volumes we may progress applicants whose experience most closely matches the role’s key requirements. xrnqpay Useful information and timelinesTimeline:Job advert close: 11th November 2026 at 11:59pmCV Review/Shortlist: 13th November 2026Interview: w/c 23rd November 2026 Your Recruiter will discuss the process in detail with you during screening for the role, therefore, please make them aware if you are going to be unavailable for any date during this time.SummaryLocation: London; Leeds; EdinburghType: Full time

Fitch Group is currently seeking a Endpoint Engineer based out of our London office. As a leading, global financial information services provider, Fitch Group delivers vital credit and risk insights, robust data, and dynamic tools to champion more efficient, transparent financial markets. If your skills, experience, and qualifications match those in this job overview, do not delay your application. With over 100 years of experience and colleagues in over 30 countries, Fitch Group’s culture of credibility, independence, and transparency is embedded throughout its structure, which includes Fitch Ratings, one of the world’s top three credit ratings agencies, and Fitch Solutions, a leading provider of insights, data and analytics. With dual headquarters in London and New York, Fitch Group is owned by Hearst. Fitch's Technology & Data Team is a dynamic department where innovation meets impact. Our team includes the Chief Data Office, Chief Software Office, Chief Technology Office, Emerging Technology, Shared Technology Services, Technology, Risk and the Executive Program Management Office (EPMO). Driven by our investment in cutting-edge technologies like AI and cloud solutions, we’re home to a diverse range of roles and backgrounds united by a shared passion for leveraging modern technology to drive projects that matter to our organization and clients. We are also proud to be recognized by Built In as a Best Place to Work in Technology 3 years in a row. Whether you're an experienced professional or just starting your career, we offer an exciting and supportive environment where you can grow, innovate, and make a difference. Want to learn more about a career in technology and data at Fitch? Visit: About the role:The Endpoint Engineer is a key technical contributor within the global infrastructure organization, providing advanced (Tier 2/3) support, endpoint management, and platform engineering across Windows, Microsoft Intune, and related technologies. This role delivers secure, reliable, and frictionless user experiences through modern device management practices, automation, observability, and Zero Trust principles.How You’ll Make an Impact: Endpoint Platform Engineering (Windows CSP / Intune)Own the migration of legacy Group Policy configurations to modern CSP-based Intune policy, resolving conflicts to protect platform consistency and compliance posture.Design and maintain consolidated, well-governed CSP policy structures across the fleet.Hardware Fleet & Device LifecycleDrive vendor-led firmware and driver lifecycle management — including HP Image Assist and Dell Command Update automations — to improve device stability and end-user experience.Troubleshoot and remediate audio, video, and conferencing reliability issues.Perform hardware and performance testing/benchmarking to support fleet standardization decisions.Autopilot & Provisioning ModernizationModernize Windows Autopilot and provisioning workflows to reduce legacy dependencies and improve consistency.Resolve drive-mapping dependencies and CSP conflicts affecting the provisioning pipeline.Complete remaining GPO-to-CSP transitions in support of provisioning consistency.Application & Configuration ManagementPackage, test, and deploy enterprise applications using MECM/Intune and modern deployment frameworks, ensuring compliance with internal and regulatory requirements.Collaborate with engineering leadership to design, implement, and operationalize endpoint policies, configurations, and standards in support of global infrastructure initiatives.Developer Tooling & AI Workload EnablementConfigure, package, and support core developer tooling across the fleet (VS Code, Python, Git, CLI utilities), balancing developer flexibility with security and compliance standards.Define and support endpoint requirements for AI/ML workloads, including GPU driver management, containerization/WSL2, and local model runtime resource sizing.Partner with engineering and data teams to evaluate, standardize, and roll out AI-assisted developer tools (e.g., Claude Code, Copilot) within governance and device-management guardrails.Operations & SupportDeliver advanced incident and problem resolution with a strong focus on user experience and root-cause elimination.Execute recurring operational activities, including patching, vulnerability remediation, compliance reporting, and endpoint health monitoring.Partner closely with the Service Desk to drive continuous improvement, streamline workflows, and reduce recurring issues through automation or policy enhancement.Participate in an on-call rotation to support critical after-hours incidents or high-priority escalations.Documentation & Cross-Functional CollaborationCreate and maintain technical documentation, runbooks, and cross-team knowledge resources.Engage in cross-functional project work spanning cloud identity, automation, security hardening, and software lifecycle management.Act as an owner by proactively driving issues to resolution across business You May be a Good Fit if: 3–5+ years in enterprise endpoint engineering or advanced support, with hands-on experience in:Windows 11, Azure AD / Entra IDMicrosoft Intune (Endpoint Manager), MECM, and co-management servicesActive Directory and Directory Services, including Group Policy and RSAT toolsIntune configuration and compliance policy managementLAPS and least-privilege / privilege elevation models (e.g., Privilege Management)Microsoft 365 Apps deployment, configuration, and update servicingNetworking fundamentals (DNS, DHCP, VPN, Proxy)Strong experience with modern Intune management, including:Windows Autopilot (user-driven, pre-provisioning, self-deploying)Zero-touch provisioning and cloud-first imaging strategiesIntune application management (Win32, MSI, MSIX, store apps, managed apps)Settings Catalog, Compliance Policies, and Configuration ProfilesDevice Filters, Dynamic Groups, and scalable targeting strategiesEndpoint Analytics and digital experience monitoring (DEX)Hardware validation and lifecycle management, including:Hardware and performance testing/benchmarking to support fleet standardization decisionsFirmware and BIOS update management and deployment (e.g., HP, Dell)Wi-Fi driver troubleshooting and remediation across the device fleet802.1X / WPA2-Enterprise network authentication troubleshooting (EAP-TLS, RADIUS)Proficiency with Windows PowerShell, including:Running, creating, and editing PowerShell scriptsManaging system processes and services via PowerShellUnderstanding basic command syntax and parametersTroubleshooting errors using PowerShellExperience supporting Zero Trust, conditional access, and identity-based access controls.Developer tooling and AI workload support, including:Configuring and troubleshooting VS Code, Python, and common CLI/developer environmentsGit-based version control workflowsEndpoint requirements for AI/ML workloads (GPU drivers, WSL2/containers, local model runtimes, resource sizing)Applying governance and device-management guardrails to developer and AI tooling without blocking productivityAbility to collaborate effectively, communicate clearly, and produce high-quality documentation and runbooks.Demonstrated ownership mindset, with a focus on eliminating root causes and improving user experience.What Would Make You Stand Out: PowerShell App Deployment Toolkit (PSADT) — creating/modifying deployment scripts, packaging and deploying applications, customizing user prompts, troubleshooting logs, and managing detection/remediation logic.Advanced MECM collection design and query creation.Windows imaging modernization (e.g., Autopilot, zero-touch provisioning, DISM when needed).Familiarity with software packaging technologies (EXE, MSI, MSIX, INTUNEWIN).Experience with third-party patching platforms (e.g., Patch My PC).Strong PowerShell automation expertise and familiarity with Git-based workflows.Experience with vulnerability management tools and endpoint telemetry/observability platforms.Experience supporting local AI/LLM developer tooling (e.g., Claude Code, Ollama, LM Studio) and GPU-accelerated workstations.Microsoft certifications related to Endpoint, Azure, or Security.Why Choose Fitch: Hybrid Work Environment: 2 to 3 days a week in office required based on your line of business and location A Culture of Learning & Mobility: Dedicated trainings, leadership development and mentorship programs designed to ensure that your time at Fitch will be a continuous learning opportunity Investing in Your Future: Retirement planning, financial wellness and tuition reimbursement programs that empower you to achieve your short and long-term goals Promoting Health & Wellness: Comprehensive healthcare offerings that prioritize a healthy body & mind Supportive Parenting Policies: Family-first policies, including a generous global parental leave plan, designed to help you balance career and family life effectively Dedication to Giving Back: Paid volunteer days and support for community engagement initiatives At Fitch, AI is embedded in how we work every day—supporting smarter decision-making, streamlining workflows, and enabling new ways to create value for our business and clients. Intelligent solutions are increasingly part of our day-to-day operations, helping teams work more efficiently and think differently as we continue to evolve. We’re looking for colleagues who are comfortable operating in an AI-enabled environment—or who are curious, adaptable, and eager to build their AI literacy over time. We value professionals who embrace technology as part of continuous learning and who are committed to using it thoughtfully to enhance how work gets done. Fitch is committed to providing global securities markets with objective, timely, independent and forward-looking credit opinions. To protect Fitch’s credibility and reputation, our employees must take every precaution to avoid conflicts of interests or any appearance of a conflict of interest. Should you be successful in the recruitment process at Fitch Ratings you will be asked to declare any securities holdings and other potential conflicts prior to commencing employment. If you, or your immediate family, have any holdings that may conflict with your work responsibilities, you may be asked to divest yourself of them before beginning work. xrnqpay Fitch is proud to be an Equal Opportunity and Affirmative Action Employer. We evaluatequalified applicants without regard to race, color, national origin, religion, sex, sexual orientation, gender identity, disability, protected veteran status, and other statuses protected by law. #LI-HYBRID #LI-KC1

Vulnerability Management LeadAbout MillenniumMillennium is a global, diversified alternative investment firm, founded in 1989. In order to make an application, simply read through the following job description and make sure to attach relevant documents. Defined by evolution, innovation and focus, Millennium’s mission is to deliver results for our investors.Our people are empowered with both independence and support: the autonomy to pursue ideas with conviction and the backing of a global network committed to collaboration, disciplined risk management and continuous learning. With opportunities to deepen expertise and accelerate development, talent at Millennium is equipped to adapt, evolve and build lasting impact over time. Discover how transformative growth accelerates impact.Meet the TeamMillennium’s Information Technology organization supports the firm’s active, multi-manager business model through flexible, scalable technology and advanced proprietary systems. Within Infrastructure, Information Security protects the firm’s people, data, and technology across a complex global trading environment. The team combines technical expertise with pragmatic risk management and applies AI to strengthen defenses. Its Vulnerability Management team partners with technology and business stakeholders to identify, prioritize, and drive remediation of vulnerabilities across infrastructure and applications.What You'll Do • Operate vulnerability discovery and assessment tools across infrastructure, cloud, and application environments• Prioritize vulnerabilities based on risk, exploitability, and business context, partnering with asset owners to track remediation through closure• Apply cyber threat intelligence—including active exploitation, threat actor targeting, and emerging tactics, techniques, and procedures—to strengthen prioritization and risk scoring• Develop mitigation strategies for vulnerabilities that cannot be patched immediately, including compensating controls, virtual patching, and automated remediation workflows• Use AI-driven prioritization and automation to scale assessment coverage and improve remediation processes• Produce clear vulnerability metrics and reporting for technology and security leadership• Support penetration testing and red team engagements, coordinating remediation follow-up• Continuously improve discovery coverage and reduce time to remediate across the environmentWhat You Bring• Experience operating vulnerability discovery and assessment tools; five or more years of hands-on vulnerability management experience with meaningful exposure to cyber threat intelligence is preferred• Understanding of vulnerability scoring and prioritization frameworks, with experience applying MITRE ATT&CK, threat actor techniques, and exploit or CVE feeds to prioritize vulnerabilities• Ability to design and implement mitigation and remediation approaches when patching is not immediately feasible• Experience tracking remediation across distributed asset owners and building effective xrnqpay relationships across technology and the business• Strong communication skills, with the ability to explain technical risk clearly to technical and nontechnical stakeholders; experience engaging senior executives is preferred• Hands-on experience across on-premises and cloud infrastructure, Windows, Linux, macOS, containers, and scripting with Python, PowerShell, Bash, or similar languages is preferred• Experience with the secure use, deployment, and governance of AI models, tools, and frameworks, and the ability to work independently in a fast-paced environment, are preferred• A bachelor’s degree or higher in Computer Science, Computer Engineering, Cybersecurity, Information Security, or a related field—or equivalent work experience—is preferred, as are relevant certifications such as GPEN, OSCP, GCTI, or CISSP and experience in financial services or another highly regulated industryRecruiter:Ruby KazmiHiring Manager:TJ CampanaDepartment:Information Technology

About Baringa Baringa is a global consulting firm that partners with leaders to drive change and create value. If you think you are the right match for the following opportunity, apply after reading the complete description. With deep industry expertise, and enabled by advanced technology, the firm helps clients to deliver with greater confidence and certainty. With over 2,000 people across the UK, Europe, North America, Asia and Australia, the firm combines global insight with local understanding.The firm works across energy and resources, financial services, government and public sector, consumer products and retail, pharmaceuticals and life sciences, manufacturing, and technology, media and telecoms, with capabilities spanning strategy, transformation and operational excellence – all powered by advanced technology, data, AI and digital innovation.Clients value Baringa’s collaborative approach and the way its teams integrate seamlessly – all working with a shared understanding of what matters most. The firm is known for its kind, curious experts who listen closely and care deeply about client success as they help clients transform energy markets, modernise financial platforms, expand telecoms and digital networks through advanced data analytics, enable digital services in government, and unlock growth in consumer sectors.Certified as a Great Place to Work around the world, Baringa has been recognised by the Financial Times in 22 categories of its UK Leading Management Consultants rankings, and by Forbes for four consecutive years as one of the World’s Best Management Consulting Firms.Our Water practice are looking for an experienced Consultants to Senior Managers to join the team. Our Retail, Networks and Water division helps regulated utilities and adjacent organisations improve performance, deliver transformation, and strengthen outcomes for customers. We’re at the heart of these industries, driving meaningful and lasting improvement. This is an incredibly important period for our Water clients. Following final determinations, we expect a sustained period of significant transformation set against the context of rising bills and increasing customer financial vulnerability. As we already work with most of these organisations, Baringa is well positioned to help Water Retailers to successfully plan for and navigate these challenges. Within our Water practice, the Water Retail and Customer Value and Affordability team supports clients to protect their most financially vulnerable customers whilst improving value across the customer lifecycle, with a focus on billing and revenue improvement, debt and affordability, and operational effectiveness in customer-facing functions. What you will be doingHelping clients to understand their customers holistically, and how those that are most in need can be supported Work with clients on their major strategic transformation programmes to improve their customer, debt, billing and revenue outcomes through senior strategic advice and thought leadership, data-driven diagnosis, process and journey improvement. Support or lead benchmarking and performance reviews, helping clients understand how they compare to peers and where to prioritise action. Take a leading role in customer and operational transformation programmes, supporting planning, governance, risk management and senior stakeholder engagement. Develop and apply analytical insight, including segmentation, forecasting and KPI reporting, to support better decisions and track impact. Work alongside technology and system change, helping ensure business requirements are clear and operational outcomes are delivered. Contribute to business development, including proposals, client conversations, thought leadership or reusable assets in Water Retail and Customer Value Assurance. You will take on responsibility in line with your experience: as a Consultant, owning defined analysis and deliverables, with accountability for quality and detail as a Senior Consultant, owning end‑to‑end workstreams and managing day‑to‑day client delivery as a Manager or Senior Manager, leading workstreams or engagements, managing teams, and taking accountability for outcomes, quality and client relationships Your skills and experience Must HavesExperience working in customer value, debt, billing, revenue assurance or affordability , within water retail operations, with a solid understanding of the underlying processes, common issues and levers. You’ve supported or delivered billing or revenue improvement initiatives, such as identifying revenue leakage, improving collections performance, or strengthening controls and governance. Experience using data and analysis to diagnose problems, build insight, and support clear recommendations and decisions. You’ve delivered process improvement or operating model work in customer or revenue-focused functions, with an emphasis on practical, implementable change. You will have worked with a range of stakeholders across operations, finance, digital and data teams, and can communicate confidently at different levels of an organisation. You’ve produced clear, structured client-facing outputs, including analysis, slides or written recommendations, with strong attention to quality and narrative. Nice to HaveYou’ve contributed to, or led parts of, customer or operational transformation programmes, with exposure to planning, governance, risk management and delivery tracking. Experience working alongside billing, customer relationship management or collections system change, and understand how systems and operations interact. You’ve contributed to proposals, pitches or internal proposition development, helping articulate client problems, solution approaches and value. You will have experience developing others through informal coaching, review or line management (expected at Manager and Senior Manager level). What a career at Baringa will give you Putting People First. Baringa is a People First company and wellbeing is at the forefront of our culture. We recognise the importance of work-life balance and flexible working and provide our staff amazing benefits. Some of these benefits include: Generous Annual Leave Policy: We recognise everyone needs a well-deserved break. We provide our employees with 5 weeks of annual leave, fully available at the start of each year. In addition to this, we have introduced our 5-Year Recharge benefit which allows all employees an additional 2 weeks of paid leave after 5 years continuous service. Flexible Working: We know that the ‘ideal’ work-life balance will vary from person to person and change at different stages of our working lives. To accommodate this, we have implemented a hybrid working policy and introduced more flexibility around taking unpaid leave. Corporate Responsibility Days: Our world is important to us, so all our employees get 3 every year to help social and environmental causes and increase our impact on the communities that mean the most to us. Wellbeing Fund: We want to encourage all employees to take charge and prioritise their own wellbeing. We’ve introduced our annual People Fund to support this by offering every individual a fund to support and manage their wellbeing through an activity of their choice. Profit Share Scheme: All employees participate in the Baringa Group Profit Share Scheme so everyone has a stake in the company’s success. Diversity and InclusionWe are proud to be an Equal Opportunity Employer. We believe that creating an environment where everyone feels a sense of belonging is central to our culture and that diversity is paramount to driving creativity, innovation, and value for our clients and for our people.An award-winning workplaceYou can be a part of our ‘Great Place to Work’ – with our commitment to women and well-being in the workplace for all. Click here to see some of our recent awards and how we’ve achieved this.Using business as a force for good. We maintain high standards of environmental performance and transparency, which can be seen through our commitment to Net Zero with our SBTI-verified Scope 1, 2 and 3 emissions reduction targets and our support of the Better Business Act. We report our progress publicly and ensure that we are also externally assessed and scored through organisations like CDP and EcoVadis • helping us to continually identify where we can improve. We have a long legacy of supporting the communities in which we work, and offer a variety of ways to contribute, by putting people first and creating impact that lasts. Our Corporate Social Responsibility (CSR) agenda is about giving back to the communities in which we live and work by sharing our skills, talent and time. In essence, we aim to empower and encourage everyone in the firm to contribute to the things we care about, and support registered charities and organisations with a clear social or environmental purpose to increase the positive impact they can have.Join usAll applications received will be reviewed by a member of our Talent Acquisition team. We never rely solely on automated screening or AI tools to make hiring decisions. Your application will be considered for employment without regard to race, ethnicity, religion, gender, gender identity or expression, sexual orientation, nationality, disability, age, faith or social background. We do not filter applications by university background and encourage those who have taken alternative educational and career paths to apply. We would like to actively encourage applications from those who identify with less represented and minority groups. We operate an inclusive recruitment process, ensuring reasonable adjustments where needed. Please contact a member of our Recruitment Team to discuss further.Baringa Privacy NoticesFor UK & EUYour personal data will be retained by Baringa for up to two years, in accordance with our UK Recruitment Privacy Notice / EU Recruitment Privacy Notice, to evaluate your application and meet our legal and reporting obligations. In line with the General Data Protection Regulation (GDPR), you have the right to request access to, rectification, or erasure (subject to legal limitations) of your personal data. For more information, please contact us at the USAYour personal data may be retained by Baringa for up to two years, as outlined in our Recruitment Privacy Notice (AMER & APAC), to support the recruitment process and internal reporting requirements. Where applicable, and in accordance with relevant federal and state laws, you may have the right to request access to or correction of your personal information. For further details, please contact Australia & SingaporeYour personal data will be retained by Baringa for up to two years, in accordance with our Recruitment Privacy Notice (AMER & APAC), to assess your application and meet applicable reporting and legal obligations. xrnqpay In line with the Australian Privacy Act and Singapore’s Personal Data Protection Act (PDPA), you may have rights to access, correct, or request limited deletion of your personal data. For more information, please contact us at

As part of the development of our Digital Services function, we are recruiting to strengthen internal digital capability within Cyber Security, Digital Operational Services, and Digital Corporate and Shared Services. These roles are central to building sustainable in-house expertise that supports the management, development and delivery of digital solutions across the transport network. As Lead SOC Manager you will be responsible for leading and managing all activities within the Security Operations Centre (SOC), including security incident response across SOC and National Highways. You will bring together people, processes, and technology within the SOC to deliver operational excellence, while providing leadership and direction to Security Analysts. You will guide and set direction for the escalation and resolution of IT, OT, personnel, and physical security incidents. Coordinate and align SOC efforts to protect National Highways' personnel, critical assets, and sensitive information. This is a hybrid role, requiring two days per week in the office, and can be based at any National Highways office location across the UK, with some travel to attend team meetings. Successful candidates will be required to hold or be willing to obtain SC clearance before starting employment. Five years' UK residency is normally required for the vetting process, although individual circumstances will be considered as part of the recruitment process. Set the overall direction for the SOC, aligning its priorities with organisational objectives and government security standards. Represent the SOC in leadership forums and serve as the primary liaison with senior management, governance, assurance, and key stakeholders. Lead the operational day to day delivery of the hybrid SOC delivery model. Manage and lead the delivery of SOC services, providing tactical leadership and oversight for security monitoring, incident response, vulnerability management, and threat intelligence. Be a technical security Subject Mater Expert (SME). Oversee the detection, analysis, and resolution of security incidents and breaches. Act as the escalation point for major incidents, leading investigations and coordinating response and mitigation efforts. Drive security assessments, including penetration testing, vulnerability assessments, and risk evaluations, to identify and address weaknesses within National Highways' infrastructure and applications. Champion continuous improvement and enhancements to incident remediation processes and provide clear actionable recommendations to senior management to strengthen the organisation's security posture. Provide direction, guidance, and mentorship to Security Analysts. Foster collaborative culture that promotes knowledge sharing across Security Operations, GRC, third-party service providers, and Legal. About you. Proven experience managing diverse teams, including permanent staff, contractors, and third-party suppliers. Advanced experience in managing complex, high-impact security incidents and investigations and in leading incident response lifecycle activities through to post-incident reviews. Strong technical expertise and proficiency in enterprise SOC tooling including SIEM, SOAR, EDR, IDS/IPS, with experience in the integration across IT and OT estates, people and physical security. Deep knowledge of threat detection, incident response, and vulnerability management, with a foundation in security frameworks such as MITRE ATT&CK and Cyber Kill Chain. Strong operational capability, with the ability to lead SOC service delivery and coordinate security incident response across IT, OT, people and physical security. Deep knowledge of computer networking principles and security architectures for both IT and Operational Technology environments. Excellent communication and stakeholder engagement skills, including the ability to report the security posture to executives and government bodies. Confidence acting as liaison between SOC and other departments, e.g. Digital Services, Fraud teams, People and Physical security). About us. Here at National Highways, we manage and improve England's motorways and major A roads, helping our customers have safer, smoother and more reliable journeys. Our priorities are safety, customers and delivery, and at the core of this, are our values of passion, integrity, safety, teamwork and ownership. The Digital Services Directorate is helping to reshape the way National Highways operates by delivering digital, data, and technology services across all areas, from frontline to back office, in a modern and efficient manner. Our vision is to develop integrated information and technology that empowers our colleagues and provides real-time information to our customers, as well as integrating with intelligent vehicle and transport systems as they evolve, to enhance journey safety and reliability. External candidates will be offered a starting salary at the lower end of the pay scale, while current employees will be appointed in accordance with our established pay policy. We are committed to creating a diverse environment and welcome applicants from all backgrounds. TPBN1_UKTJ

This job is with Fitch Group, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly. Fitch Group is currently seeking a Endpoint Engineer based out of our London office. As a leading, global financial information services provider, Fitch Group delivers vital credit and risk insights, robust data, and dynamic tools to champion more efficient, transparent financial markets. With over 100 years of experience and colleagues in over 30 countries, Fitch Group’s culture of credibility, independence, and transparency is embedded throughout its structure, which includes Fitch Ratings, one of the world’s top three credit ratings agencies, and Fitch Solutions, a leading provider of insights, data and analytics. With dual headquarters in London and New York, Fitch Group is owned by Hearst. Fitch's Technology & Data Team is a dynamic department where innovation meets impact. Our team includes the Chief Data Office, Chief Software Office, Chief Technology Office, Emerging Technology, Shared Technology Services, Technology, Risk and the Executive Program Management Office (EPMO). Driven by our investment in cutting-edge technologies like AI and cloud solutions, we’re home to a diverse range of roles and backgrounds united by a shared passion for leveraging modern technology to drive projects that matter to our organization and clients. We are also proud to be recognized by Built In as a Best Place to Work in Technology 3 years in a row. Whether you're an experienced professional or just starting your career, we offer an exciting and supportive environment where you can grow, innovate, and make a difference. Want to learn more about a career in technology and data at Fitch? Visit: _ About the role: The Endpoint Engineer is a key technical contributor within the global infrastructure organization, providing advanced (Tier 2/3) support, endpoint management, and platform engineering across Windows, Microsoft Intune, and related technologies. This role delivers secure, reliable, and frictionless user experiences through modern device management practices, automation, observability, and Zero Trust principles. How You’ll Make an Impact: Endpoint Platform Engineering (Windows CSP / Intune) • Own the migration of legacy Group Policy configurations to modern CSP-based Intune policy, resolving conflicts to protect platform consistency and compliance posture., • Design and maintain consolidated, well-governed CSP policy structures across the fleet. Hardware Fleet & Device Lifecycle • Drive vendor-led firmware and driver lifecycle management — including HP Image Assist and Dell Command Update automations — to improve device stability and end-user experience., • Troubleshoot and remediate audio, video, and conferencing reliability issues., • Perform hardware and performance testing/benchmarking to support fleet standardization decisions. Autopilot & Provisioning Modernization • Modernize Windows Autopilot and provisioning workflows to reduce legacy dependencies and improve consistency., • Resolve drive-mapping dependencies and CSP conflicts affecting the provisioning pipeline., • Complete remaining GPO-to-CSP transitions in support of provisioning consistency. Application & Configuration Management • Package, test, and deploy enterprise applications using MECM/Intune and modern deployment frameworks, ensuring compliance with internal and regulatory requirements., • Collaborate with engineering leadership to design, implement, and operationalize endpoint policies, configurations, and standards in support of global infrastructure initiatives. Developer Tooling & AI Workload Enablement • Configure, package, and support core developer tooling across the fleet (VS Code, Python, Git, CLI utilities), balancing developer flexibility with security and compliance standards., • Define and support endpoint requirements for AI/ML workloads, including GPU driver management, containerization/WSL2, and local model runtime resource sizing., • Partner with engineering and data teams to evaluate, standardize, and roll out AI-assisted developer tools (e.g., Claude Code, Copilot) within governance and device-management guardrails. Operations & Support • Deliver advanced incident and problem resolution with a strong focus on user experience and root-cause elimination., • Execute recurring operational activities, including patching, vulnerability remediation, compliance reporting, and endpoint health monitoring., • Partner closely with the Service Desk to drive continuous improvement, streamline workflows, and reduce recurring issues through automation or policy enhancement., • Participate in an on-call rotation to support critical after-hours incidents or high-priority escalations. Documentation & Cross-Functional Collaboration • Create and maintain technical documentation, runbooks, and cross-team knowledge resources., • Engage in cross-functional project work spanning cloud identity, automation, security hardening, and software lifecycle management., • Act as an owner by proactively driving issues to resolution across business You May be a Good Fit if: 3–5+ years in enterprise endpoint engineering or advanced support, with hands-on experience in: • Windows 11, Azure AD / Entra ID, • Microsoft Intune (Endpoint Manager), MECM, and co-management services, • Active Directory and Directory Services, including Group Policy and RSAT tools, • Intune configuration and compliance policy management, • LAPS and least-privilege / privilege elevation models (e.g., Privilege Management), • Microsoft 365 Apps deployment, configuration, and update servicing, • Networking fundamentals (DNS, DHCP, VPN, Proxy) Strong experience with modern Intune management, including: • Windows Autopilot (user-driven, pre-provisioning, self-deploying), • Zero-touch provisioning and cloud-first imaging strategies, • Intune application management (Win32, MSI, MSIX, store apps, managed apps), • Settings Catalog, Compliance Policies, and Configuration Profiles, • Device Filters, Dynamic Groups, and scalable targeting strategies, • Endpoint Analytics and digital experience monitoring (DEX) Hardware validation and lifecycle management, including: • Hardware and performance testing/benchmarking to support fleet standardization decisions, • Firmware and BIOS update management and deployment (e.g., HP, Dell), • Wi-Fi driver troubleshooting and remediation across the device fleet, • 802.1X / WPA2-Enterprise network authentication troubleshooting (EAP-TLS, RADIUS) Proficiency with Windows PowerShell, including: • Running, creating, and editing PowerShell scripts, • Managing system processes and services via PowerShell, • Understanding basic command syntax and parameters, • Troubleshooting errors using PowerShell, • Experience supporting Zero Trust, conditional access, and identity-based access controls. Developer tooling and AI workload support, including: • Configuring and troubleshooting VS Code, Python, and common CLI/developer environments, • Git-based version control workflows, • Endpoint requirements for AI/ML workloads (GPU drivers, WSL2/containers, local model runtimes, resource sizing), • Applying governance and device-management guardrails to developer and AI tooling without blocking productivity, • Ability to collaborate effectively, communicate clearly, and produce high-quality documentation and runbooks., • Demonstrated ownership mindset, with a focus on eliminating root causes and improving user experience. What Would Make You Stand Out: • PowerShell App Deployment Toolkit (PSADT) — creating/modifying deployment scripts, packaging and deploying applications, customizing user prompts, troubleshooting logs, and managing detection/remediation logic., • Advanced MECM collection design and query creation., • Windows imaging modernization (e.g., Autopilot, zero-touch provisioning, DISM when needed)., • Familiarity with software packaging technologies (EXE, MSI, MSIX, INTUNEWIN)., • Experience with third-party patching platforms (e.g., Patch My PC)., • Strong PowerShell automation expertise and familiarity with Git-based workflows., • Experience with vulnerability management tools and endpoint telemetry/observability platforms., • Experience supporting local AI/LLM developer tooling (e.g., Claude Code, Ollama, LM Studio) and GPU-accelerated workstations., • Microsoft certifications related to Endpoint, Azure, or Security. Why Choose Fitch: • Hybrid Work Environment: 2 to 3 days a week in office required based on your line of business and location, • A Culture of Learning & Mobility: Dedicated trainings, leadership development and mentorship programs designed to ensure that your time at Fitch will be a continuous learning opportunity, • Investing in Your Future: Retirement planning, financial wellness and tuition reimbursement programs that empower you to achieve your short and long-term goals, • Promoting Health & Wellness: Comprehensive healthcare offerings that prioritize a healthy body & mind, • Supportive Parenting Policies: Family-first policies, including a generous global parental leave plan, designed to help you balance career and family life effectively, • Dedication to Giving Back: Paid volunteer days and support for community engagement initiatives At Fitch, AI is embedded in how we work every day—supporting smarter decision-making, streamlining workflows, and enabling new ways to create value for our business and clients. Intelligent solutions are increasingly part of our day-to-day operations, helping teams work more efficiently and think differently as we continue to evolve. We’re looking for colleagues who are comfortable operating in an AI-enabled environment—or who are curious, adaptable, and eager to build their AI literacy over time. We value professionals who embrace technology as part of continuous learning and who are committed to using it thoughtfully to enhance how work gets done. Fitch is committed to providing global securities markets with objective, timely, independent and forward-looking credit opinions. To protect Fitch’s credibility and reputation, our employees must take every precaution to avoid conflicts of interests or any appearance of a conflict of interest. Should you be successful in the recruitment process at Fitch Ratings you will be asked to declare any securities holdings and other potential conflicts prior to commencing employment. If you, or your immediate family, have any holdings that may conflict with your work responsibilities, you may be asked to divest yourself of them before beginning work. Fitch is proud to be an Equal Opportunity and Affirmative Action Employer. We evaluatequalified applicants without regard to race, color, national origin, religion, sex, sexual orientation, gender identity, disability, protected veteran status, and other statuses protected by law. #LI-HYBRID #LI-KC1

Cybersecurity Consultant, GISI Consulting GroupAbout GISI Consulting You could be just the right applicant for this job Read all associated information and make sure to apply. Group and PalladiumGISI Consulting Group (GISI CG) is a top 10 global provider of program and project management and engineering consulting services delivering outcomes and solutions for some of the most complex challenges. We deliver services in infrastructure & mobility, earth & water, and government & society segments across more than 100 countries. With over 5,000 projects annually and a global team of over 11,000 professionals, our advisory, consulting, design and program management capabilities enable us to create a safer and more sustainable world. Learn more about GISI CG at Palladium, a GISI company, works to design, develop and deliver positive impact on the lives and livelihoods of people around the globe; broaden access to health, water, power, and infrastructure; build enduring, sustainable, and transformative institutions and market systems to address global challenges; and conserve the natural world. We operate in over 90 countries and have a workforce of 2,100 talented, motivated, and diverse staff around the world. This role will be hired through Palladium, an operational platform for GISI CG.This OpportunityThe Cybersecurity Consultant will support GISI Consulting Group’s (GCG) Operating Companies (OPCOs) in strengthening their cybersecurity posture by advancing their cybersecurity maturity in alignment with GCG global security strategy, policies, and standards. The role will act as an advisor to local business and technology teams, conduct cybersecurity maturity assessments, identify gaps and risks, drive remediation initiatives, and support the implementation of security best practices across diverse business environments. The Manager will work closely with the ICT Cybersecurity and Compliance workstream teams to ensure consistent application of security controls.This consultancy is up to ten months with the possibility of an extension to one year.LocationThis role will be based remotely in the UK. To be considered for this position, you must have valid work rights in the country where the role is based. Please note that visa sponsorship is not available for this role. Reporting LinesThe Consultant will work under the direction of the SVP, IT Operations (based in the US)This role will have regular meetings with the Cybersecurity and Compliance workstream teams and key stakeholders from the OPCOsPrimary Roles and Responsibilities Partner with assigned OPCOs to assess, improve, and monitor their cybersecurity maturity and alignment with GCG’s Information Security Policies and standardsIdentify, assess, and monitor applicable local privacy, regulatory and contractual requirements for assigned OPCOs, and ensure alignment with both local obligations and GCG’s standardsDevelop and maintain remediation roadmaps and action plans to address identified security gapsSupport OPCOs in implementing security controls, standards, and procedures in accordance with GCG’s cybersecurity requirementsProvide guidance on cybersecurity governance, risk management, vulnerability management, incident response, data protection, identity and access management, and third-party risk managementDevelop SOPs, templates, checklists, and guidance documents to support consistent adoption of cybersecurity best practicesEssential CriteriaBachelor’s degree in Computer Science, Cybersecurity, or equivalent8+ years of relevant ICT experience in the field of cybersecurityStrong understanding of cybersecurity frameworks and industry best practices, including NIST CSF, CIS Controls, ISO 27001, and risk management principlesDemonstrated experience assessing and improving cybersecurity maturity programsKnowledge of security governance, compliance, vulnerability management, incident response, identity and access management, and data protectionStrong analytical and problem-solving capabilities with the ability to translate technical risks into business impactAbility to manage multiple initiatives and priorities across different operating companiesExcellent communication, presentation, stakeholder management, and relationship-building skillsStrong project management and organizational skills.Ability to work independently while collaborating effectively within a global team environmentDesired CriteriaCybersecurity certification desirableApplications will be accepted on a rolling basis. We encourage you to apply early as the position may close once a suitable candidate is found. Please note that only shortlisted candidates will be contacted.Equity, Diversity & Inclusion - Palladium is committed to embedding equity, diversity, and inclusion into everything we do. We welcome applications from all sections of society and actively encourage diversity to drive innovation, creativity, success and good practice. We positively welcome and seek to ensure we achieve diversity in our workforce; and that all job applicants and employees receive equal and fair treatment regardless of their background or personal characteristics. These include: (but are not limited to) socio-economic background, age, race, gender identity and expression, religion, ethnicity, sexual orientation, disability, nationality, veteran, marital or Indigenous status. Should you require any adjustments or accommodations to be made during the recruitment process (due to disability, neurodiversity, or for any other circumstance), please email our team at and we will be in touch to discuss.Safeguarding - We define Safeguarding as “the preventative action taken by Palladium to protect our people, clients and the communities we work with from harm”. We are committed to ensuring that all children and adults who come into contact with Palladium are treated with respect and are free from abuse. xrnqpay All successful candidates will be subject to an enhanced selection process including safeguarding-focused interviews and a rigorous due diligence process.

• Drive performance and operational excellence across Shared Service’s Cyber Services function, • Act as a technical escalation point and line manager, • Support threat analysis, incident response, and security assurance activities, • Foster a proactive culture of cyber hygiene and continuous improvement, • Collaborate across departments to strengthen Shared Service's security posture, • Deputise for the Service Desk Manager during high workload or absence periods, • Lead cyber service operations focused on SLA attainment, incident response, and resolution quality, • Oversee daily workflow distribution and prioritise emerging threats and investigative escalations, • Ensure complex or unresolved cybersecurity issues are escalated appropriately, • Line manage Cyber Analysts, set objectives, and support development plans, • Share threat intelligence and cyber knowledge with junior colleagues, • Provide training and coaching on cyber operations tooling and security practices, • Contribute to root cause analysis and threat hunting strategies, • Ensure cyber processes are documented, reviewed, and updated, • Support reporting on security metrics, incident trends, and cyber control performance, • Collaborate on service reviews concerning cyber operations and risk assurance, • Work with the Service Desk Manager, Service Delivery Managers, Principal Cyber Analyst, and Technical Architect, • Build relationships with internal stakeholders, customers, and external security partners, • Contribute to security playbooks, standard operating procedures, and escalation pathways, • Champion a security-first mindset across Shared Service operations, • Hands-on experience in a cybersecurity or service desk environment, • Knowledge of incident response frameworks, threat detection, and mitigation strategies, • Strong leadership and communication skills with the ability to guide teams in high-pressure scenarios, • Experience working with SIEM, EDR, and vulnerability management platforms, • Understanding of risk-based prioritisation and regulatory compliance considerations, • Willingness to support out-of-hours activities based on threat levels or response needs, • Desirable: certifications such as CompTIA Security+, CISSP, or equivalent, • Desirable: coaching and mentoring experience within cyber or support teams, • Desirable: familiarity with Sentinel, Defender, Splunk, or CrowdStrike, • Desirable: experience contributing to GRC or ISO standards, • Desirable: knowledge of ITIL, NIST, or MITRE ATT&CK frameworks, • Desirable: understanding of customer impact and stakeholder management within cyber contexts, • Awareness of applicable regulations and frameworks such as NCSC, NIST, ISO27001, and Cyber Essentials Plus Demonstrates expertise in cybersecurity operations, incident response, and threat analysis while fostering a proactive culture of cyber hygiene. Capable of leading teams, managing complex cybersecurity issues, and ensuring compliance with industry standards. • Cybersecurity Operations Management, • Incident Response Frameworks, • SIEM and EDR Platforms, • Leadership and Team Guidance, • Regulatory Compliance Knowledge, • Incident Response, • Threat Detection, • Vulnerability Management, • Root Cause Analysis, • Threat Hunting Strategies, • Cybersecurity Documentation, • Security Metrics Reporting, • Cyber Operations Tooling, • Risk-Based Prioritization, • Continuous Improvement, • Strong Leadership, • Effective Communication, • Coaching and Mentoring, • Relationship Building, • Stakeholder Management, • CompTIA Security+, • CISSP, • Cyber Hygiene, • NIST, • ISO27001, • Cyber Essentials Plus, • GRC, • ITIL, • MITRE ATT&CK, • NCSC, • SIEM, • EDR, • Sentinel, • Defender, • Splunk, • CrowdStrike #J-18808-Ljbffr

Calling all DevOps Engineer with SFTPGo experience! Our client is replacing their existing Axway Managed File Transfer platform with SFTP-Go running on Red Hat OpenShift (OCP). The solution will be delivered as a shared, secure and resilient file-transfer platform for internal and external clients. You will provide hands-on platform engineering and infrastructure-as-code capability. Working as part of the SFTP-Go delivery team, you will build and automate the platform, establish GitOps and CI/CD delivery, implement onboarding pipelines, support operational readiness and assist with the controlled migration of services from Axway. • Role: DevOps Engineer (with SFTPGo experience), • Contract duration: 6 months initially (with scope to extend), • Location: Hybrid – 3/4 days in the London office, 1/2 days working from home., • Build and deploy SFTP-Go on Red Hat OpenShift across development, test and production environments., • Implement a highly available platform using PostgreSQL as the database backend and S3-compatible object storage., • Create repeatable infrastructure-as-code components for platform deployment, configuration and environment promotion., • Implement resilience, backup, restore and recovery arrangements in collaboration with Infrastructure and Database teams., • Establish GitOps delivery using Argo CD and Git-centred, pull-request-based workflows., • Ensure platform infrastructure and configuration are version controlled, reviewable, auditable and capable of automated reconciliation., • Build an onboarding repository for account and file-flow definitions, with CI validation against agreed technical and security guardrails., • Apply approved SFTP-Go configuration through Terraform, with secrets and SSH keys managed through HashiCorp Vault or External Secrets Operator., • Design and implement CI/CD pipelines for platform image builds, Helm chart linting and testing, policy validation and promotion between environments., • Automate quality, security and compliance checks within the delivery pipeline., • Develop and maintain reusable Helm charts, Terraform modules, pipeline templates and engineering standards., • Promote controlled, peer-reviewed change and minimise undocumented manual configuration., • Work with Security and Network Engineers to harden the OpenShift and SFTP-Go platform., • Implement RBAC, network policies, secrets management, TLS/PKI controls and secure connectivity patterns., • Support vulnerability remediation, image assurance, policy-as-code and the production-readiness approval process., • Ensure configuration and deployment practices meet our clients security, audit and operational-control requirements., • Integrate Prometheus metrics, dashboards, logging and alerting with approved enterprise tooling., • Implement and test PostgreSQL backup and restore processes., • Produce operational runbooks, troubleshooting procedures and recovery documentation., • Support service transition, operational acceptance, training and knowledge transfer to support teams., • Pre-stage SFTP-Go configuration for migration waves and support testing, cutover, rollback and hypercare activities., • Help translate existing Axway routing and workflow configurations into SFTP-Go Event Manager rules and actions., • Create reusable documentation, templates and golden paths that enable application teams to onboard file-transfer flows consistently., • Work with Integration Engineers and application teams to troubleshoot migration and onboarding issues., • Experience with Kubernetes and Red Hat OpenShift, • Experience supporting production workloads, including deployments, services, ingress or routes, RBAC, network policies, persistent storage and storage classes., • Practical experience authoring and maintaining non-trivial Helm charts., • Strong Terraform experience, including reusable modules, peer review and state management for production environments., • Hands-on GitOps experience using Argo CD or an equivalent tool, with Git-centred and pull-request-based workflows., • Experience designing and implementing CI/CD pipelines using tools such as GitLab CI, GitHub Actions or Tekton., • Strong Linux fundamentals and scripting or automation experience., • Experience working with containers, registries, image build processes and deployment promotion., • Working knowledge of secrets management and TLS/PKI fundamentals., • Exposure to SFTP-Go, Axway or another Managed File Transfer platform. #J-18808-Ljbffr

Checkmarx is the enterprise application securityleader and the host of Checkmarx One™ — the industry -leading cloud-native AppSec platform thathelps enterprises build #DevSecTrust . Who are we? Checkmarx is the leader in agentic application security, delivering enterprise-grade protection while helping organizations lower engineering costs and accelerate development velocity. TheCheckmarxOne platformscantrillions of lines of code each year, enabling companies to cut vulnerability density by more than half. Autonomous security agents continuously detect and counter AI-driven threats across the software development lifecycle, delivering prevention-first protection for legacy, modern, and AI-generated code at enterprise scale. We’re trusted by 1,600+ customers in 70+ countries, including some of the largest enterprises and governments in the world. Guided by research-led innovation and a developer-first mindset, we help every developer, security team, and enterprise build software that is risk-free by design. What are we looking for? We are looking for a strategic and execution-focused Senior Regional Marketing Manager to lead marketing initiatives across Northern Europe (NEUR) for our Application Security (AppSec) solutions. This role is responsible for driving pipeline growth, accelerating deal velocity, and increasing brand awareness among enterprise and mid-market customers. You will work closely with regional sales, partners, and global marketing teams to deliver high-impact campaigns tailored to technically sophisticated audiences, including CISOs, DevSecOps leaders, and developers. How will you make an impact? Field Marketing & Events • Own the end-to-end events strategy and calendar across UKI, Netherlands and Nordics, from third-party industry conferences to proprietary roundtables, executive dinners, and webinars, • Pre-event: define target account and invite lists in partnership with sales, shape agenda/speaker input, brief SDRs and sales on outreach cadences, manage budgets, vendors, and booth/sponsorship logistics, • During-event: oversee on-site execution and staffing, manage lead capture and badge-scan systems, host key customers and executives, enable real-time hot-lead handoff to sales, • Post-event: own lead scoring and routing into the MQL/SQL process, drive structured follow-up cadences with sales, report on pipeline attribution and ROI, feed learnings back into the next event's planning, • Represent the company at key cybersecurity and developer-focused events across NEUR, • Own the NEUR regional marketing strategy aligned with global priorities and revenue goals, • Translate global campaigns into regionally relevant event and field programs across UKI, Netherlands and Nordics, • Segment markets and prioritise accounts and events based on ICP, maturity, and opportunity size Demand Generation • Own regional marketing-sourced pipeline targets aligned to revenue goals, with a focus on target accounts, • Build and execute integrated campaigns (events, digital, content syndication, paid media) that drive consistent top-of-funnel volume, • Maintain clear visibility into pipeline targets and gaps, and clean handoff of MQL to SQL, • Optimise marketing funnel performance using data-driven insights and continuous testing Account Based Marketing • Lead Account-Based Marketing (ABM) initiatives for top-tier enterprise accounts, • Partner with sales to develop account-specific engagement plans and personalised campaigns, • Support deal acceleration through tailored content, executive engagement, and field programs, • Adapt global AppSec messaging for Northern European audiences with high technical expectations, • Collaborate with product marketing to refine positioning for DevSecOps and security buyers, • Support development of regional case studies, customer advocacy, and thought leadership, • Act as a trusted marketing partner to regional sales leaders on event strategy and execution, • Enable channel and technology partners with co-marketing events and MDF programs, • Align closely with SDR teams to ensure effective lead follow-up and conversion Analytics & Reporting • Track event and campaign performance, pipeline contribution, and ROI across NEUR, • Provide regular reporting and insights to regional and global stakeholders, • Use data to refine event selection, targeting, messaging, and channel effectiveness What is needed to succeed? Experience • 5+ years in B2B marketing, ideally in cybersecurity, application security, or DevSecOps, • Proven experience managing regional or field marketing in Northern Europe, • Demonstrated success in driving pipeline and supporting enterprise sales cycles Skills • Strong knowledge of IT Security, • Expertise in demand generation, ABM, and integrated campaign execution, • Strong analytical skills with experience using marketing automation and CRM tools (e.g., Salesforce, Marketo), • Excellent stakeholder management and cross-functional collaboration Languages • Additional languages are a plus Nice to Have: • Experience in high-growth SaaS or cybersecurity vendors, • Familiarity with developer ecosystems and tooling, • Background in partner/channel marketing, • Team player mindset with strong execution capabilities and project management skills, • Self Starter and having a can-do approach, • Dynamic, tenacious, high achieving attitude, • Commercial acumen and revenue focus, • Ability to engage technical and security audiences, • Strong communication and influence across matrixed organisations, • Adaptability in a fast-paced SaaS environment Checkmarx offers a great work environment, professional development, challenging careers, competitive compensation, great work-life balance, as well as great benefits and perks throughout the year. Checkmarx is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national or ethnic origin, sex, sexual orientation, gender identity or expression, age, disability, or other characteristics protected by law. #J-18808-Ljbffr

The Division IT Manager is responsible for leading the end-to-end IT transformation and operations across a globally distributed, multi-site organization, ensuring IT is a scalable enabler of growth, efficiency, and decision-making. The Division IT Manager is responsible for leading the end-to-end IT transformation and operations across a globally distributed, multi-site organization, ensuring IT is a scalable enabler of growth, efficiency, and decision-making. The role operates within a complex delivery model, managing a combination of: • Global IT leaders (Infrastructure/Cyber and Data/Applications), • Regional IT resources (Europe, China), • Multiple MSPs across regions The Division IT Manager leads a hybrid global IT team, including: • Direct / Functional Leadership, • 1 Global Infrastructure, IT Operations & Cyber Security Manager, • 1 Global Data Analyst (evolving into Data & Business Applications Lead), • Regional IT Resources, • 2 IT resources in Slovenia (applications, ERP support, operations), • 1 IT Specialist in China, • External Delivery Model with multiple MSPs and contractors across: North America, UK, Italy, Bulgaria, New Zealand and Slovenia, • Define clear roles, responsibilities, and accountability model across all resources, • Eliminate overlap and inefficiencies currently visible across IT activities, • Establish a scalable “hub-and-spoke” IT operating model, • Drive alignment between: Internal IT, Segment IT, MSP partners, • Ensure: global consistency, local responsiveness where needed, cost-efficient delivery in line with ITW principles., • IT Strategy, Governance & Operating Model, • Own the division IT strategy and ITW Front-to-Back execution roadmap, • Establish a clear IT operating model across global and regional teams, • Define governance across: data, ERP, Cyber, Infrastructure, • Implement structured reporting and performance tracking across all IT layers, • Ensure strict adherence to 80/20 prioritization discipline, • ERP Modernization Leadership (Global Accountability), • Lead the global Acumatica rollout across all sites, • Govern ERP standardization, eliminating: legacy systems, site-specific deviations, • Ensure ERP becomes:, • Single source of truth for core business processes, • Foundation for data and analytics, • Supervise execution through:, • Data/App Lead, • Regional IT resources, • Data & Business Applications Leadership (Critical Capability), • Elevate the Data Analyst role (part of the IT team) into a Data & Applications capability leader, providing direction, prioritization, and technical guidance, • Define and enforce:, • Data governance and ownership model, • Enterprise data architecture principles, • Standardized KPI and reporting framework, • Lead the design and evolution of the divisional data platform, ensuring:, • Integration of data across ERP (Acumatica), supply chain, and shop floor systems, • Elimination of siloed and spreadsheet-based reporting, • Creation of a single, reliable data foundation for decision making, • Drive adoption and standardization of key technologies:, • Power BI as the standard for data visualization and business reporting, • Modern data platforms (i.e. Microsoft Fabric, Snowflake or equivalent) for:, • Data ingestion, • Transformation, • Storage and analytics, • APIs and integration frameworks to enable scalable and maintainable system connectivity, • Python (or equivalent) for:, • Data engineering, • Automation, • Advanced analytics use cases, • Ensure the Data function delivers practical, business-relevant use cases, including:, • Forecasting improvement (ML-driven where appropriate), • Supply chain and operational visibility, • Financial and operational KPI standardization, • Act as functional leader of Data expertise, with the expectation to:, • Guide, coach, and grow a Data expert within the team, • Maintain sufficient technical understanding to challenge design decisions, • Ensure solutions remain simple, scalable, and aligned to business needs (ITW 80/20 mindset), • Infrastructure, Cyber & MSP Orchestration, • Lead through the Global Infra & Cyber Manager, ensuring:, • Consistent cyber posture across all sites, • Centralized vulnerability management, • Standardized infrastructure, • Address FTB risks:, • Cyber gaps across multiple sites, • Aging infrastructure, • Inconsistent MSP capabilities, • Drive:, • Azure migration, • AD consolidation, • Network standardization, • Rationalize MSP landscape:, • Define clear SLAs, • Remove underperforming vendors, • Standardize service delivery, • Global Delivery & Execution Model Establish clear accountability across distributed teams. • Implementing: standard project governance and consistent delivery framework, • Ensure execution discipline across: internal team and external providers, • Balance: centralization (standards, platforms) and local flexibility (business needs), • IT Operations (Right-Sized & Optimized), • Ensure stable operations across: infrastructure, applications, end-user support, • Transition non-value-added work to: MSPs and automation, • Focus internal resources on growth and transformation priorities (AA), • Financial & Vendor Management, • Own: IT budget, investment prioritization, vendor strategy, • Ensure alignment with: low-cost mindset and value-driven investments, • Leadership & Organizational Complexity, • Experience leading distributed, global IT teams, • Proven ability to manage:, • Hybrid teams (internal + MSP), • Multi-layered accountability structures, • Strong governance, prioritization, and decision-making skills, • ERP & Applications, • Strong ERP modernization experience, • Acumatica experience strongly preferred, • Experience rationalizing multi-ERP environments, • Data & Analytics, • Strong experience building and scaling:, • Data architectures and data platforms, • End-to-end data pipelines (ingestion > transformation > visualization), • Hands-on understanding (not necessarily deep execution) of:, • Power BI (data modeling, semantic layers, KPI standardization), • Modern data platforms:, • Microsoft Fabric (preferred) or, • Snowflake / equivalent cloud data platforms, • Data integration patterns, including:, • APIs, • ETL / ELT processes, • Programming and data manipulation (Python, SQL), • Proven ability to:, • Transition organizations from fragmented reporting to standardized data-driven decision making, • Drive business adoption of data, not just technical implementation, • Experience leading or managing data specialists or analytics teams, including:, • Setting priorities, • Providing architectural direction, • Ensuring alignment with business outcomes, • Cyber & Infrastructure, • Experience managing cyber risk across multiple sites and vendors, • Strong understanding of:, • Cloud transformation, • Security frameworks, • Infrastructure standardization, • Execution & Transformation - proven track record of:, • Delivering transformation in complex environments, • Driving standardization and simplification, • Strong change management capability, • Is a true orchestrator, not a hands-on technician, • Has experience in global, multi-site manufacturing environments, • Can manage complex delivery models (internal + MSP + regional IT), • Drives simplification, accountability, and measurable outcomes, • Is equally strong in ERP, Governance, and Data leadership (with sufficient technical depth to guide data architecture and engineering teams, without acting as a pure developer), • Establish a clear and scalable IT operating model, • Stabilize and progress Acumatica global rollout, • Deliver data visibility improvements across all key functions, • Improve cybersecurity coverage across all sites, • Rationalize and optimize:, • MSP landscape, • Infrastructure footprint, • Build a high-performing IT leadership layer (Infra + Data/Apps) UK 90-110k #J-18808-Ljbffr

Distributed At Cloudflare, we are on a mission to help build a better Internet. Today the company runs one of the world’s largest networks that powers millions of websites and other Internet properties for customers ranging from individual bloggers to SMBs to Fortune 500 companies. Cloudflare protects and accelerates any Internet application online without adding hardware, installing software, or changing a line of code. Internet properties powered by Cloudflare all have web traffic routed through its intelligent global network, which gets smarter with every request. As a result, they see significant improvement in performance and a decrease in spam and other attacks. Cloudflare was named to Entrepreneur Magazine’s Top Company Cultures list and ranked among the World’s Most Innovative Companies by Fast Company. At Cloudflare, we’re not looking for people who wait for a polished roadmap; we’re looking for the builders who see the cracks in the Internet that everyone else has simply learned to live with. We value candidates who have the instinct to spot a "normalized" problem and the AI-native curiosity to create a solution using the latest tools. Our culture is built on iteration, leveraging AI to ship faster today to make it better tomorrow, while ensuring that every improvement, no matter how small, is shared across the team to lift everyone up. If you’re the type of person who values curiosity over bureaucracy, and that AI is a partner in solving tough problems to keep the Internet moving forward, you’ll fit right in. New vulnerabilities can be exploited soon after public disclosure, leaving application owners little time to patch. Cloudflare can drastically reduce this exposure through managed WAF protections, ad-hoc emergency policies, and tools that help customers identify affected applications and remediate them. As Senior Product Manager for Zero-Day Protection, your goal is to help protect more than 20% of the Internet from HTTP-exploitable vulnerabilities and attacks. You will own the strategy, roadmap, execution, and customer experience for Cloudflare’s zero-day protection products, beginning with WAF Managed Rules. The role also shapes how Cloudflare helps customers identify affected applications, deploy temporary mitigations, investigate active exploitation, and remediate vulnerable software. • Own the strategy and roadmap for WAF Managed Rules and Cloudflare’s broader zero-day protection experience., • Partner with other product and engineering teams to help customers identify exposure, deploy mitigations, investigate attacks, and remediate vulnerable software., • Define how Managed Rules integrates with code scanning and exposure discovery to help customers identify applications affected by newly disclosed vulnerabilities., • Prioritize shared security primitives, telemetry, and APIs that make emergency protections easier to automate across Cloudflare’s security products., • Define workflows for creating, testing, deploying, and auditing ad-hoc emergency policies when a managed detection is not sufficient for a customer’s environment., • Partner with the Cloudflare Security Research team to turn threat intelligence, vulnerability research, and detection opportunities into product priorities. Security provide technical guidance; the PM brings customer impact and product context., • Partner with Security, Legal, and external researchers during coordinated disclosure processes to prepare customer protections and communications., • Discover and prioritize Enterprise operational needs with customers, Solutions Engineering, Support, and Engineering., • Own the end-to-end customer journey: identifying affected applications, discovering protections, deploying them safely, testing before enforcement, reviewing security events, investigating incidents, configuring exceptions and confirming remediation, • Ensure customers can understand what protections they have, what events mean, and what action to take., • Establish feedback loops with Support, Customer Success, Solutions Engineering, and customers. Turn recurring friction and unmet needs into product priorities., • Support the Cloudflare Security Research team’s vulnerability-response work by providing product context and customer perspective, • Coordinate responsible disclosure and external vulnerability communications with Security, Legal, and Communications, • Write technical posts, customer guidance, and product communications for security researchers, customers, press, and non-technical audiences, • Represent Cloudflare in the broader security community, at conferences, and online as a product and technical spokesperson for Managed Rules and HTTP application vulnerabilities, • Strong product-management experience, including strategy, roadmap ownership, discovery, prioritization, and cross-functional delivery., • Technical fluency to understand HTTP applications, vulnerabilities, exploits, and detection systems., • Ability to synthesize input from security research, engineers, customers, and commercial teams into clear product decisions., • Customer empathy and strong product judgment, especially for complex technical workflows., • Excellent written and verbal communication for technical and non-technical audiences., • Comfort operating in a fast-moving, ambiguous security environment., • Strong cross-functional leadership across Cloudflare Security Research, Engineering, Support, Customer Success, Solutions Engineering, Legal, Communications, and other product teams., • Security research, exploit-development, or detection-engineering experience., • Experience with WAFs, managed rules, security-rule rollout, false-positive management, application security, threat intelligence, security operations or vulnerability management., • Experience with Enterprise security operations, including APIs, automation, auditability, policy controls, logs, and SIEM integrations., • Experience with code scanning, software supply-chain security, or exposure discovery., • An established presence in the security research community, conference speaking, technical writing, or press engagement. Compensation may be adjusted depending on work location. • For Lisbon based hires: Estimated annual salary of 65,000 - 80,000 EURO, • For New York City based hires: Estimated annual salary of $156,000 - $216,000 This role is eligible to participate in Cloudflare's equity plan. Cloudflare offers a complete package of benefits and programs to support you and your family. Our benefits programs can help you pay health care expenses, support caregiving, build capital for the future and make life a little easier and fun! The below is a description of our benefits for employees in the United States, and benefits may vary for employees based outside the U.S. Health & Welfare Benefits • Medical/Rx Insurance, • Vision Insurance, • Flexible Spending Accounts, • Commuter Spending Accounts, • Fertility & Family Forming Benefits, • On-demand mental health support and Employee Assistance Program, • Global Travel Medical Insurance, • Short and Long Term Disability Insurance, • 401(k) Retirement Savings Plan, • Employee Stock Participation Plan Time Off • Flexible paid time off covering vacation and sick leave, • Leave programs, including parental, pregnancy health, medical, and bereavement leave We’re not just a highly ambitious, large-scale technology company. We’re a highly ambitious, large-scale technology company with a soul. Fundamental to our mission to help build a better Internet is protecting the free and open Internet. Project Galileo : Since 2014, we've equipped more than 2,400 journalism and civil society organizations in 111 countries with powerful tools to defend themselves against attacks that would otherwise censor their work, technology already used by Cloudflare’s enterprise customers--at no cost. Athenian Project : In 2017, we created the Athenian Project to ensure that state and local governments have the highest level of protection and reliability for free, so that their constituents have access to election information and voter registration. Since the project, we've provided services to more than 425 local government election websites in 33 states. 1.1.1.1 : We released 1.1.1.1 to help fix the foundation of the Internet by building a faster, more secure and privacy-centric public DNS resolver. This is available publicly for everyone to use - it is the first consumer-focused service Cloudflare has ever released. Here’s the deal - we don’t store client IP addresses never, ever. We will continue to abide by our privacy commitment and ensure that no user data is sold to advertisers or used to target consumers. Sound like something you’d like to be a part of? We’d love to hear from you! Please note that applicants who progress to the offer stage of the interview process may be asked to attend an in-person interview within one of the Cloudflare Offices or Cloudflare Hubs. More details about this will be available at that stage of the interview process. This position may require access to information protected under U.S. export control laws, including the U.S. Export Administration Regulations. Please note that any offer of employment may be conditioned on your authorization to receive software or technology controlled under these U.S. export laws without sponsorship for an export license. Cloudflare is proud to be an equal opportunity employer. We are committed to providing equal employment opportunity for all people and place great value in both diversity and inclusiveness. All qualified applicants will be considered for employment without regard to their, or any other person's, perceived or actual race, color, religion, sex, gender, gender identity, gender expression, sexual orientation, national origin, ancestry, citizenship, age, physical or mental disability, medical condition, family care status, or any other basis protected by law. We are an AA/Veterans/Disabled Employer. Cloudflare provides reasonable accommodations to qualified individuals with disabilities. Please tell us if you require a reasonable accommodation to apply for a job. Examples of reasonable accommodations include, but are not limited to, changing the application process, providing documents in an alternate format, using a sign language interpreter, or using specialized equipment. If you require a reasonable accommodation to apply for a job, please contact us via e-mail at or via mail at 101 Townsend St. San Francisco, CA 94107. #J-18808-Ljbffr

The SOC Level 3 (L3) Analyst is responsible for leading the investigation, coordination and resolution of complex security incidents. Acting as a senior technical specialist, the role provides expert guidance on threat detection, incident response, and security operations while supporting the development of SOC capabilities and team expertise. The L3 Analyst maintains high standards of documentation and produces clear, concise communications tailored to both technical and non-technical stakeholders. During major security incidents, the role serves as the Incident Commander and primary point of contact, ensuring effective coordination, stakeholder engagement, and timely decision-making. In addition to operational responsibilities, the L3 Analyst contributes to the continuous improvement of SOC processes, use cases, and detection capabilities. The role requires strong automation and scripting skills to streamline repetitive tasks, enhance operational efficiency, and improve overall security outcomes. Reporting to the SOC Manager, the L3 Analyst is expected to demonstrate a deep understanding of emerging cyber security threats, technologies, and industry’s best practices. The role contributes to the organization’s cyber security strategy, roadmap, and continuous improvement initiatives, helping to ensure that security operations remain effective, resilient, and aligned with business objectives. • Lead complex and high-severity cyber security investigations and incident response activities within a 24x7 Security Operations Centre (SOC), acting as a senior technical escalation point, taking ownership of investigations, and driving incidents through containment, eradication, recovery, and closure., • Act as Technical Incident Lead or Incident Commander, as appropriate, during major cyber security incidents, coordinating technical response activities, assessing risk, making informed decisions in ambiguous situations, and communicating effectively with technical teams, leadership, and business stakeholders., • Conduct proactive threat hunting, advanced investigations, and forensic triage across endpoint, network, cloud, identity, and other enterprise environments to identify malicious activity, attacker persistence, and previously undetected compromise, while ensuring appropriate preservation and handling of investigative evidence., • Analyze adversary tactics, techniques, and procedures (TTPs), threat intelligence, emerging threats, vulnerabilities, and investigation findings to develop hunting hypotheses, identify detection gaps, and continuously strengthen the organization’s defensive capabilities., • Develop, tune, test, and continuously improve security detections, analytics, use cases, investigation methodologies, playbooks, and response procedures, including validating detection coverage against realistic adversary behaviors and the MITRE ATT&CK framework., • Drive automation and orchestration across security operations, using security queries, scripting, and automation to analyze data, accelerate investigations, reduce repetitive manual activities, and improve the consistency and effectiveness of response., • Lead incident response exercises, tabletop scenarios, post-incident reviews, and continuous-improvement activities, translating lessons learned into measurable improvements to SOC processes, controls, detection capabilities, operational readiness, and cyber resilience., • Collaborate with Security Engineering, Threat Intelligence, Vulnerability Management, Digital Forensics, IT, cloud and identity teams, and other stakeholders, while mentoring SOC analysts, producing high-quality technical and executive communications, supporting SOC metrics and SLAs, and participating in on-call/out-of-hours response for major incidents when required., • Incident investigation and response., • Detection engineering and continuous improvement., • Threat hunting., • Security projects, Automation and security engineering., • Mentoring and technical leadership., • Demonstrable experience within a 24x7 Security Operations Centre (SOC) or Incident Response environment, ideally supporting a global organisation., • Proven track record of improving threat detection, monitoring, incident response, and SOC operational maturity at scale., • Strong hands‑on experience with SIEM platforms, threat intelligence solutions, security orchestration and automation (SOAR), and enterprise security monitoring technologies., • Good understanding of networking and Internet protocols, together with broad knowledge across multiple security domains and technologies., • Strong analytical, problem‑solving, and communication skills, with the ability to engage effectively with both technical and non‑technical stakeholders., • Demonstrates integrity, accountability, curiosity, adaptability, and a commitment to continuous learning and professional development., • Relevant industry certifications (e.g., CISSP, GCIH, GCFA, GCIA, Security+, Azure Security, or equivalent) would be a plus., • Incident Management, Curiosity, Critical thinking, Problem‑solving, Technical Writing, Continuous improvement, Communication, Mentoring/Coaching., • Advanced threat investigation, Threat actor TTP analysis (MITRE ATT&CK), Threat Hunting., • Agentic AI., • Malware analysis., • Digital forensics and evidence preservation. Explore the rewards and benefits that help you thrive – at every stage of your life and your career. Enjoy competitive salaries, employee rewards and a brilliant range of benefits you can tailor to suit your own health, wellbeing, financial and lifestyle choices. Make the most of a myriad of opportunities for training and professional development to grow your skills and expertise. And combine our hybrid working culture and flexible holiday allowances to balance a great job and fulfilling personal life. We’re AtkinsRéalis, a world‑class engineering services and nuclear organization. We connect people, data and technology to transform the world’s infrastructure and energy systems. Together, with our industry partners and clients, and our global team of consultants, designers, engineers and project managers, we can change the world. We’re committed to leading our clients across our various end markets to engineer a better future for our planet and its people. This role may require security clearance and offers of employment will be dependent on obtaining the relevant level of clearance. If this is necessary, it will be discussed with you at interview. The vetting process is delivered by United Kingdom Security Vetting (UKSV) and may require candidates to provide proof of residency in the UK of 5 years or longer. If applying to this role please do not make reference to (in conversation) or include in your application or CV, details of any current or previously held security clearance. We are committed to creating a culture where everyone feels that they belong - a place where we can all be ourselves, thrive and develop to be the best we can be. So, we offer a range of family friendly, inclusive employment policies, flexible working arrangements and employee resource groups to support all employees. As an Equal Opportunities Employer, we value applications from all backgrounds, cultures and ability.As a Disability Confident Leader, we are committed to offering an interview to all applicants who have a disability and meet the essential criteria. If you would like to be considered under this commitment, please let us know at the application stage. Employee Regular At AtkinsRéalis, we seek to hire individuals with diverse characteristics, backgrounds and perspectives. We strongly believe that world‑class talent makes no distinctions based on gender, ethnic or national origin, sexual identity and orientation, age, religion or disability, but enriches itself through these differences. #J-18808-Ljbffr

Marex Group plc (NASDAQ: MRX) is a diversified global financial services platform providing essential liquidity, market access and infrastructure services to clients across energy, commodities and financial markets. The group provides comprehensive breadth and depth of coverage across four core services: clearing, agency and execution, market making, and hedging and investment solutions. It has a leading franchise in many major metals, energy and agricultural products, with access to 60 exchanges. The group provides access to the world's major commodity markets, covering a broad range of clients that include some of the largest commodity producers, consumers and traders, banks, hedge funds and asset managers. With more than 40 offices worldwide, the group has over 3,000 employees across Europe, Asia and the Americas. For more information visit Vacancy Number: VN3168 Marex has unique access across markets with significant share globally both on and off exchange. The depth of knowledge amongst its teams and divisions provides its customers with clear advantage, and its technology-led service provides access to all major exchanges, order-flow management via screen, voice and DMA, plus award-winning data, insights and analytics. The Technology Department delivers differentiation, scalability and security for the business. Technology provides digital tools, software services and infrastructure globally to all business groups. Software development and support teams work in agile 'streams' aligned to specific business areas. Our other teams work enterprise-wide to provide critical services including our global service desk, network and system infrastructure, IT operations, security, enterprise architecture and design. The Information Security team reports to the CISO and is responsible for protecting Marex data and assets, as well as providing security advice. The team is relatively small; therefore, its members have a chance to experience various areas of security. The Security Engineer will work within the Cyber Security team, reporting to the Cyber Security Manager, and will be responsible for engineering, administering, and continually improving security capabilities across the Marex Group, with a primary focus on Identity Protection, Privileged Access Management, and associated access control environments. The role will support the secure management of privileged accounts, access workflows, credential rotation, platform onboarding, incident response, control monitoring, and operational governance relating to privileged access. In addition, the role will contribute to broader identity security capabilities, including secrets management, certificate and PKI-related controls, and the improvement of identity-related security processes. Beyond its core identity and PAM responsibilities, the role will support wider cyber security engineering activities, including security platform operations, automation, tooling enhancements, threat detection improvements, and response to security incidents as business and security priorities evolve. • Engineer security products to be production ready., • Configure security toolset and controls to identify anomalies, potential incidents, network intrusions, and malware events, etc., ensuring confidentiality, integrity, and availability of Marex's critical systems, • Find gaps in architecture, define objective and areas of improvement, engineer products to fit the gaps for an effective Threat detection and response., • Developing and documenting cyber security standards and procedures, • Collaborates with technology teams for incident handling, patching disciplines, and system hardening frameworks, • Collaborates with the Information Technology team on deployment, operation, and continual improvements of security solutions, • Automation of tasks and creation of analytical tools, • Keeping up to date with security news and trends, • Threat Intelligence and Hunting, • Responding and investigating security incidents and exceptionsProviding relevant KPI and KRI metrics., • Ensuring compliance with the company's regulatory requirements under the FCA, NFA, AMF, AFM, MAS., • Adhere to the operational risk framework for your role ensuring that all regulatory or company determined parameters are complied with., • Role model for demonstrating highest level standards of integrity and conduct and reflecting Company Values., • At all times complying with the FCA's Code of Conduct, • To ensure that you are fully aware of and adhere to internal policies that relate to you, your role or any other activities for which you have any level of responsibility, • To report any breaches of policy to Compliance and/ or your supervisor as required, • To elevate risk events immediately, • To provide input to risk management processes, as required., • A minimum of 5 years' experience in Information Security., • Comprehensive knowledge of identity security and access control technologies, including Entra ID, Identity Protection, Privileged Access Management, Secrets Management, Key Management, PKI, and Certificate Management., • Strong hands-on experience administering and supporting Privileged Access Management solution (tools such as CyberArk or equivalent), including account onboarding, safes, platforms, policies, credential rotation, session management, access workflows, operational troubleshooting, and control monitoring., • Strong hands-on experience with Windows, Linux, cloud platforms, databases, directory services, and service accounts from an identity security perspective., • Experience around Secrets & Key management tools such as Hashicorp vault or Conjour or equivalent., • Strong experience around PKI management tools such as Venafi or Digicert or equivalent., • Experience with Identity & privileged access governance, least privilege, break-glass processes, access reviews, privileged account lifecycle management, and audit evidence production., • Experience producing operational metrics, control reporting, and audit evidence for identity - PAM, Secrets Management controls., • Knowledge of security processes such as vulnerability management, penetration testing, incident response, and security control assurance., • Knowledge of security standards and frameworks such as CIS and NIST., • Experience supporting or improving security platforms, automation, tooling integrations, detection capabilities, or operational security processes., • Excellent communication skills, with the ability to engage effectively with technical teams, control owners, auditors, and wider business stakeholders. ** Candidates with less than 5 years' experience will still be considered • A collaborative team player, approachable, self-efficient and influences a positive work environment, • Demonstrates curiosity, • Resilient in a challenging, fast-paced environment, • Ability to take a high level of responsibility in a fast pace and high-volume environment, • Excels at building relationships, networking and influencing others, • Strategic collaborator with insight and agility, able to anticipate future challenges, ensuring operational effectiveness You must: • Act with integrity, • Act with due skill, care and diligence, • Be open and cooperative with the FCA, the PRA and other regulators, • Pay due regard to the interests of customers and treat them fairly, • Observe proper standard of market conduct, • Act to deliver good outcomes for retail customers Be collaborative - by working together across the organisation, we foster teamwork, can better respond to challenges and successfully deliver for our clients Act with integrity - we pride ourselves on our honesty and high ethical standards. We apply these values when working with all our clients, colleagues and other stakeholders Be adaptable and entrepreneurial - we embrace change as markets evolve to constantly increase our efficiency and create innovative solutions for our clients. We are interested in the world around us and inquisitive about understanding the challenges and opportunities our clients face. Be respectful - how we treat each other, and our clients says everything about who we are. We always act respectfully and treat people fairly in everything we do. Nurture talent - we aim to grow our own talent and make Marex the place ambitious, hardworking and talented people choose to build their career. This means giving and taking stretch opportunities, taking risks, and committing to career development and support - for ourselves, and our teams. Marex is fully committed to being an inclusive employer and providing an inclusive and accessible recruitment process for all. We will provide reasonable adjustments to remove any disadvantage to you being considered for this role. We value the differences that a diverse workforce brings to the company. We welcome applications from candidates returning to the workforce. Also, Marex is committed to avoiding circumstances in which the appearance or possibility of conflicts of interest may exist within the hiring process. If you would like to receive any information in a different way or would like us to do anything differently to help you, please include it in your application. #J-18808-Ljbffr

Salary: £47,000 - 87,000 per year • We have deep expertise with AWS at scale, including EKS (Automode), Lambda, EC2, RDS/Aurora, multi-region networking, and security services such as IAM, KMS, Secrets Manager, SCPs, Security Hub, and GuardDuty., • We have proven ownership of a production-grade EKS platform with zero-downtime deployments, including ArgoCD, Istio, blue/green, and canary strategies., • We are Terraform experts who have set IaC standards for a team., • We have strong CI/CD expertise, with a focus on automating fast, secure, seamless deployments and improving developer experience., • We have experience embedding AI into SDLC workflows., • We have hands-on disaster recovery experience, including automated backup, multi-region or multi-AZ failover, AWS FIS testing, and formal DR exercises with defined RTO/RPO targets., • We are familiar with working in compliant environments and are comfortable with security audits, risk conversations, and tools such as CrowdStrike, Rapid7, and SIEM/SOC platforms., • We have observability ownership experience with Datadog or equivalent, including defining SLOs, dashboards, and alerting culture., • We have experience leading or mentoring a DevOps team and growing engineers., • We are comfortable with Python, Bash, Ansible, Helm, and GitHub Actions., • Own the end-to-end reliability, stability, performance, security posture, and resilience of our production platform., • Enforce platform SLAs across availability, security posture, and resilience, and define incident response standards., • Run and maintain our multi-region, zero-downtime platform, including deployment strategies, traffic management, and failover patterns., • Own our platform security controls end to end, including networking, IAM, KMS, secrets management, vulnerability management, and compliance., • Participate in disaster recovery strategy, automation, execution, and continuous improvement., • Drive our platform total cost of ownership strategy, including cost visibility, rightsizing, tagging, and architecture decisions., • Set and maintain our Infrastructure as Code and CI/CD standards using Terraform and Terragrunt., • Own our observability strategy using Datadog, including SLO/SLA dashboards, alerting thresholds, runbooks, and feedback loops., • Lead and grow our DevOps engineers through technical direction, design reviews, mentoring, and development., • Lead our adoption of AI-assisted operations across CI/CD, runbook automation, incident response, and developer tooling., • AI, • AWS, • Lambda, • Ansible, • ArgoCD, • Bash, • CI/CD, • Datadog, • DevOps, • EC2, • GitHub, • Helm, • IAM, • Istio, • Network, • Python, • Security, • Terraform, • Cloud, • API, • Architect, • Firewall, • Support, • Kubernetes, • LESS, • Serverless, • WAF We are Collinson, a global privately owned company helping the world travel with ease and confidence. We provide airport experiences, loyalty and customer engagement, and insurance solutions to over 400 million consumers, and we operate Priority Pass, the worlds leading airport experiences programme. Our network includes 1,500+ lounges and travel experiences across more than 650 airports in 148 countries, and we work with leading payment networks, banks, airlines, and hotel groups worldwide. We have a strong culture of innovation, purpose-driven impact, and continuous improvement, supported by a diverse global team of over 2,200 colleagues. We are hiring a Lead DevOps Engineer for a hands-on leadership role focused on a modern AWS platform at scale, and we are committed to an inclusive workplace, strong values, and meaningful work. last updated 36 week of 2026 #J-18808-Ljbffr

Mistral provides full-stack AI solutions: from frontier models to developer tools, applications, and compute. We partner with enterprises tackling the hardest problems—across high-stakes industries like finance, manufacturing, defense, healthcare, and the public sector—co-creating customized AI systems that they can run on their terms. We are a dynamic, collaborative team passionate about AI and its potential to transform society. Our diverse workforce thrives in competitive environments and is committed to driving innovation. Our teams are distributed between Europe, North America, Asia and the Middle East. We are creative, low-ego and team-spirited. As an AI Deployment Strategist, you will drive the adoption and deployment of Mistral’s AI solutions, working closely with customers from strategic vision to production implementation. This role sits at the intersection of business strategy, AI innovation, and hands‑on deployment, ensuring our customers achieve transformative outcomes. You will partner with senior executives to design AI roadmaps, collaborate with the Applied AI team to deliver solutions in production, and ensure seamless transitions from presales to postsales. Your work will directly contribute to customer success, bridging the gap between strategy and execution. This role is ideal for those who thrive in a fast‑paced environment, enjoy solving complex business challenges, and are passionate about turning AI potential into real‑world impact. • Lead executive-level workshops with CISOs and security teams to identify cybersecurity challenges and opportunities where Mistral's AI can drive step‑change improvements (e.g., threat intelligence, SOC automation, vulnerability management, incident response)., • Co‑create AI‑powered cybersecurity adoption roadmaps with customers, articulating the "art of the possible" and a clear path to value in securing their digital assets., • Architect end‑to‑end AI solutions tailored to cybersecurity use cases, integrating Mistral's models and platform into customer security workflows, SOC environments, and technical infrastructure., • Partner with the Applied AI team to design, prototype, and deploy AI‑driven cybersecurity solutions in production (e.g., automated threat detection, intelligent alert triage, security log analysis, phishing detection, compliance automation)., • Own the execution of pilot projects and proofs‑of‑value within cybersecurity contexts, demonstrating the potential of our technology and paving the way for full‑scale deployment., • Ensure deployed solutions meet security, privacy, and regulatory standards (e.g., NIS2, DORA, ISO 27001, SecNumCloud)., • Serve as a trusted advisor to cybersecurity customers, guiding their AI strategy for security operations and ensuring they maximize the value of their investment in Mistral., • Monitor key performance indicators (KPIs) tied to security outcomes (e.g., mean time to detect, mean time to respond, false positive reduction, analyst productivity)., • Proactively identify expansion opportunities within accounts, building on initial cybersecurity successes to drive long‑term partnerships across broader security and defense use cases., • Act as the bridge between cybersecurity customers and Mistral's internal teams, synthesizing domain‑specific feedback to influence product and research roadmaps for security‑oriented features., • Develop reusable assets, best practices, and playbooks specific to cybersecurity deployments to scale go‑to‑market efforts and ensure consistent delivery excellence., • Stay current on the evolving threat landscape, emerging cyber regulations and AI‑for‑security trends to maintain credibility and thought leadership., • Travel (~30‑60%) to foster deep client relationships and support on‑site deployment, primarily within France and Europe., • 6+ years in a client‑facing strategic and technical role within the cybersecurity or defense sector (e.g., cybersecurity consulting, security engineering, SOC operations, or technical sales in cyber)., • You hold a degree in a relevant scientific field (e.g., Computer Science, Cybersecurity, Data Science, Engineering, etc.)., • Strong cybersecurity domain expertise: solid understanding of security operations (SOC, SIEM, SOAR), threat intelligence, incident response, vulnerability management, and/or compliance frameworks., • Foundational knowledge of AI/ML/Data Science, with the credibility to advise both security‑focused and non‑technical audiences on AI‑driven security solutions., • Hands‑on experience building and deploying AI or data‑driven applications (Python) to demonstrate value in security contexts., • Familiarity with French and European cybersecurity regulations and frameworks (e.g., ANSSI guidelines, NIS2, DORA, SecNumCloud, ISO 27001)., • Strong business acumen and problem‑solving skills, with the ability to structure ambiguous security challenges into actionable solutions., • Executive presence and communication skills to influence senior security stakeholders (CISO, VP Security, C-level)., • Resilient, results‑driven, and comfortable leading through influence in a collaborative environment., • Fluent in English., • Experience with sales qualification frameworks (e.g., MEDDPICC) and value‑based selling is a plus., • Prior experience with defense or sovereign cloud environments is a plus. You will play a pivotal role in shaping how enterprises adopt and deploy AI, ensuring Mistral’s solutions deliver measurable impact. By partnering with the Applied AI team, you’ll help turn strategic visions into production‑ready solutions, making Mistral an indispensable partner for our customers. • Talent Acquisition screening call, • 30min Hiring Manager Interview, • 45min Business Acumen Interview, • 60min Technical Deep Dive on LLMs, • Panel (Home Prep & Restitution), • 30min Value Talk, • Reference check We offer a comprehensive benefits package designed to support your well‑being, growth, and work‑life balance. Benefits vary by country and may include healthcare coverage, parental leave, retirement plans, relocation support, wellness programs, meal and transportation allowances, and other location‑specific perks. For the most up‑to‑date details on benefits available in your location, please refer to our Benefits page. Your privacy matters to us. You can learn more about how we handle your personal data in our Applicant Privacy Policy. #J-18808-Ljbffr

UFORCE exists to make aggression unaffordable. Founded in Ukraine and headquartered in London, UFORCE is a defence-technology company with operations across Europe, the United States and Asia. UFORCE builds uncrewed vessels, ground robotics and aircraft, autonomy software, and the command-and-control layer that operates them together. Each platform is deployable on its own, and stronger as part of the system. Its product lines include the MAGURA family of uncrewed surface vessels, the NEMESIS family of strike platforms, the LIUT family of ground robotic platforms, and counter-UAS systems. We are looking for a hands-on Head of Platform / Senior Platform Manager to own the architecture, automation and operation of our secure infrastructure capability. You will solve a distinctive engineering challenge: enabling customers to deploy, operate, monitor and recover our platform independently, including in environments where UFORCE has no direct access to systems. You will combine deep technical execution with platform leadership, establishing repeatable deployment patterns today and helping shape the team as the function grows. Design and deliver secure, repeatable infrastructure for air-gapped, on-premise, customer-hosted and cloud environments. Build infrastructure-as-code capable of standing up isolated environments reliably on reference hardware. Provision and operate Kubernetes across cloud and bare-metal infrastructure. Develop automated configuration, deployment, upgrade and recovery processes. Create platforms that customers can install, monitor, maintain and troubleshoot independently. Own core infrastructure foundations across identity, networking, compute, storage, secrets, CI/CD and observability. Translate security, assurance and accreditation requirements into automated, auditable platform controls. Establish service ownership, SLOs, incident response, problem management and resilience practices. Partner with Security, Product and Delivery teams to balance assurance requirements with delivery velocity. Provide technical leadership, set engineering standards and help grow the platform capability over time. Proven experience deploying cloud-style infrastructure onto customer-owned, on-premise or bare-metal systems. Experience designing for air-gapped, disconnected, sovereign or similarly restricted production environments. Experience leading a substantial high-assurance audit or compliance programme, such as SOC 2 Type 2, PCI DSS, DEFSTAN 05-138 or FedRAMP. Strong Linux, Kubernetes, infrastructure automation and troubleshooting expertise. The ability to write code and scripts, configure infrastructure primitives and personally debug complex platform issues. Experience designing systems that remain supportable when vendor engineers have limited or no access to the customer environment. Strong technical leadership and the ability to align senior engineers and cross-functional partners. Experience navigating the technical, security and certification constraints associated with highly regulated deployments. Experience in defence, government, banking, critical national infrastructure or another highly regulated sector. Experience designing or operating secure R&D and software-development enclaves. Familiarity with FIPS 140-3, DEFSTAN 05-138, STANAG, NIST or Cyber Essentials Plus. Practical knowledge of zero-trust access, bastion or jump-host workflows, immutable logging and automated vulnerability management. Experience coaching engineers, leading a small team or building a platform function. Experience working in a start-up, scale-up or urgent operational environment. You will work across: Kubernetes: K3s, RKE2 and OpenShift Infrastructure as code: Terraform, Pulumi or comparable IaC tooling Configuration management: Ansible or equivalent Linux administration: Ubuntu and RHEL Bare-metal provisioning: PXE, MAAS, IPMI/Redfish or similar technologies Container tooling: Docker, containerd and Helm The nature of combat has changed. Tomorrow’s battlefield success depends on autonomy, speed, and adaptability. And UFORCE is ready. Are You? #J-18808-Ljbffr

Job Description Fitch Group is currently seeking a Endpoint Engineer based out of our London office. As a leading, global financial information services provider, Fitch Group delivers vital credit and risk insights, robust data, and dynamic tools to champion more efficient, transparent financial markets. With over 100 years of experience and colleagues in over 30 countries, Fitch Group's culture of credibility, independence, and transparency is embedded throughout its structure, which includes Fitch Ratings, one of the world's top three credit ratings agencies, and Fitch Solutions, a leading provider of insights, data and analytics. With dual headquarters in London and New York, Fitch Group is owned by Hearst. Fitch's Technology & Data Team is a dynamic department where innovation meets impact. Our team includes the Chief Data Office, Chief Software Office, Chief Technology Office, Emerging Technology, Shared Technology Services, Technology, Risk and the Executive Program Management Office (EPMO). Driven by our investment in cutting‑edge technologies like AI and cloud solutions, we're home to a diverse range of roles and backgrounds united by a shared passion for leveraging modern technology to drive projects that matter to our organization and clients. We are also proud to be recognized by Built In as a Best Place to Work in Technology 3 years in a row. Whether you're an experienced professional or just starting your career, we offer an exciting and supportive environment where you can grow, innovate, and make a difference. The Endpoint Engineer is a key technical contributor within the global infrastructure organization, providing advanced (Tier 2/3) support, endpoint management, and platform engineering across Windows, Microsoft Intune, and related technologies. This role delivers secure, reliable, and frictionless user experiences through modern device management practices, automation, observability, and Zero Trust principles. Endpoint Platform Engineering (Windows CSP / Intune) • Own the migration of legacy Group Policy configurations to modern CSP-based Intune policy, resolving conflicts to protect platform consistency and compliance posture., • Design and maintain consolidated, well‑governed CSP policy structures across the fleet. Hardware Fleet & Device Lifecycle • Drive vendor‑led firmware and driver lifecycle management - including HP Image Assist and Dell Command Update automations - to improve device stability and end‑user experience., • Troubleshoot and remediate audio, video, and conferencing reliability issues., • Perform hardware and performance testing/benchmarking to support fleet standardization decisions. Autopilot & Provisioning Modernization • Modernize Windows Autopilot and provisioning workflows to reduce legacy dependencies and improve consistency., • Resolve drive‑mapping dependencies and CSP conflicts affecting the provisioning pipeline., • Complete remaining GPO‑to‑CSP transitions in support of provisioning consistency. Application & Configuration Management • Package, test, and deploy enterprise applications using MECM/Intune and modern deployment frameworks, ensuring compliance with internal and regulatory requirements., • Collaborate with engineering leadership to design, implement, and operationalize endpoint policies, configurations, and standards in support of global infrastructure initiatives. Developer Tooling & AI Workload Enablement • Configure, package, and support core developer tooling across the fleet (VS Code, Python, Git, CLI utilities), balancing developer flexibility with security and compliance standards., • Define and support endpoint requirements for AI/ML workloads, including GPU driver management, containerization/WSL2, and local model runtime resource sizing., • Partner with engineering and data teams to evaluate, standardize, and roll out AI‑assisted developer tools (e.g., Claude Code, Copilot) within governance and device‑management guardrails. Operations & Support • Deliver advanced incident and problem resolution with a strong focus on user experience and root‑cause elimination., • Execute recurring operational activities, including patching, vulnerability remediation, compliance reporting, and endpoint health monitoring., • Partner closely with the Service Desk to drive continuous improvement, streamline workflows, and reduce recurring issues through automation or policy enhancement., • Participate in an on‑call rotation to support critical after‑hours incidents or high‑priority escalations. Documentation & Cross‑Functional Collaboration • Create and maintain technical documentation, runbooks, and cross‑team knowledge resources., • Engage in cross‑functional project work spanning cloud identity, automation, security hardening, and software lifecycle management., • Act as an owner by proactively driving issues to resolution across business 3-5+ years in enterprise endpoint engineering or advanced support, with hands‑on experience in: • Windows 11, Azure AD / Entra ID, • Microsoft Intune (Endpoint Manager), MECM, and co‑management services, • Active Directory and Directory Services, including Group Policy and RSAT tools, • Intune configuration and compliance policy management, • LAPS and least‑privilege / privilege elevation models (e.g., Privilege Management), • Microsoft 365 Apps deployment, configuration, and update servicing, • Networking fundamentals (DNS, DHCP, VPN, Proxy) Strong experience with modern Intune management, including: • Windows Autopilot (user‑driven, pre‑provisioning, self‑deploying), • Zero‑touch provisioning and cloud‑first imaging strategies, • Intune application management (Win32, MSI, MSIX, store apps, managed apps), • Settings Catalog, Compliance Policies, and Configuration Profiles, • Device Filters, Dynamic Groups, and scalable targeting strategies, • Endpoint Analytics and digital experience monitoring (DEX) Hardware validation and lifecycle management, including: • Hardware and performance testing/benchmarking to support fleet standardization decisions, • Firmware and BIOS update management and deployment (e.g., HP, Dell), • Wi‑Fi driver troubleshooting and remediation across the device fleet, • 802.1X / WPA2‑Enterprise network authentication troubleshooting (EAP‑TLS, RADIUS) Proficiency with Windows PowerShell, including: • Running, creating, and editing PowerShell scripts, • Managing system processes and services via PowerShell, • Understanding basic command syntax and parameters, • Troubleshooting errors using PowerShell, • Experience supporting Zero Trust, conditional access, and identity‑based access controls. Developer tooling and AI workload support, including: • Configuring and troubleshooting VS Code, Python, and common CLI/developer environments, • Git‑based version control workflows, • Endpoint requirements for AI/ML workloads (GPU drivers, WSL2/containers, local model runtimes, resource sizing), • Applying governance and device‑management guardrails to developer and AI tooling without blocking productivity, • Ability to collaborate effectively, communicate clearly, and produce high‑quality documentation and runbooks., • Demonstrated ownership mindset, with a focus on eliminating root causes and improving user experience., • PowerShell App Deployment Toolkit (PSADT) - creating/modifying deployment scripts, packaging and deploying applications, customizing user prompts, troubleshooting logs, and managing detection/remediation logic., • Advanced MECM collection design and query creation., • Windows imaging modernization (e.g., Autopilot, zero‑touch provisioning, DISM when needed)., • Familiarity with software packaging technologies (EXE, MSI, MSIX, INTUNEWIN)., • Experience with third‑party patching platforms (e.g., Patch My PC)., • Strong PowerShell automation expertise and familiarity with Git‑based workflows., • Experience with vulnerability management tools and endpoint telemetry/observability platforms., • Experience supporting local AI/LLM developer tooling (e.g., Claude Code, Ollama, LM Studio) and GPU‑accelerated workstations., • Microsoft certifications related to Endpoint, Azure, or Security., • Hybrid Work Environment: 2 to 3 days a week in office required based on your line of business and location, • A Culture of Learning & Mobility: Dedicated trainings, leadership development and mentorship programs designed to ensure that your time at Fitch will be a continuous learning opportunity, • Investing in Your Future: Retirement planning, financial wellness and tuition reimbursement programs that empower you to achieve your short and long‑term goals, • Promoting Health & Wellness: Comprehensive healthcare offerings that prioritize a healthy body & mind, • Supportive Parenting Policies: Family‑first policies, including a generous global parental leave plan, designed to help you balance career and family life effectively, • Dedication to Giving Back: Paid volunteer days and support for community engagement initiatives At Fitch, AI is embedded in how we work every day‑supporting smarter decision‑making, streamlining workflows, and enabling new ways to create value for our business and clients. Intelligent solutions are increasingly part of our day‑to‑day operations, helping teams work more efficiently and think differently as we continue to evolve. We're looking for colleagues who are comfortable operating in an AI‑enabled environment‑or who are curious, adaptable, and eager to build their AI literacy over time. We value professionals who embrace technology as part of continuous learning and who are committed to using it thoughtfully to enhance how work gets done. Fitch is committed to providing global securities markets with objective, timely, independent and forward‑looking credit opinions. To protect Fitch's credibility and reputation, our employees must take every precaution to avoid conflicts of interests or any appearance of a conflict of interest. Should you be successful in the recruitment process at Fitch Ratings you will be asked to declare any securities holdings and other potential conflicts prior to commencing employment. If you, or your immediate family, have any holdings that may conflict with your work responsibilities, you may be asked to divest yourself of them before beginning work. Fitch is proud to be an Equal Opportunity and Affinity Action Employer. We evaluatequalified applicants without regard to race, color, national origin, religion, sex, sexual orientation, gender identity, disability, protected veteran status, and other statuses protected by law. #LI-HYBRID #LI-KC1 #J-18808-Ljbffr

If you need support in completing the application or if you require a different format of this document, please get in touch with at or call TCS London Office number / with the subject line: “Application Support Request”. Job Type: Permanent Location: London / Newcastle Ready to utilize your skills in DevOps? Make a meaningful impact as a Lead DevOps. Careers at TCS: It means more TCS is a purpose-led transformation company, built on belief. We do not just help businesses to transform through technology. We support them in making a meaningful difference to the people and communities they serve - our clients include some of the biggest brands in the UK and worldwide. For you, it means more to make an impact that matters, through challenging projects which demand ambitious innovation and thought leadership. • Shape the future of TCS, • Be part of an exciting team who challenge themselves every day, • Grow your career, while being exposed to new technologies The Role As a Lead DevOps Engineer, you will be driving cloud transformation, leading multiple high-performance DevOps teams to build secure, scalable, and cost-efficient cloud solutions. You will be provided with access to cutting-edge cloud technologies, including AWS serverless computing, Kubernetes orchestration, AI-driven observability, and security automation, keeping you at the forefront of innovation. Your responsibilities: • Implement and manage highly available, scalable, and secure applications hosted on AWS Cloud, leveraging multi-region deployment strategies, • Enforce AWS security best practices to safeguard data, applications, and systems, including IAM policy design, access management, encryption standards, and compliance audits, • Design, implement, and manage various DevOps tools and technologies, including CI/CD platforms (Jenkins, GitLab CI), configuration management tools (Ansible, Puppet), and containerization technologies (Docker, ECS, Kubernetes), • Monitor system performance, identify bottlenecks, and implement optimizations to improve reliability and efficiency, • Develop and maintain Infrastructure as Code (IaC) using Terraform, Ansible, AWS CloudFormation, ensuring consistency, repeatability, and compliance, • Identify and automate application deployment, scaling, and security processes, reducing manual effort and improving reliability, • Work with cross-functional teams, ensuring seamless collaboration between DevOps, development, security, and operations teams, • Troubleshoot complex system issues, analyze logs and performance metrics, and provide actionable recommendations, • Document and refine DevOps practices, maintaining version control, release management workflows, and configuration documentation Your Profile Essential skills/knowledge/experience: • AWS Security & Compliance Expertise: Deep understanding of AWS Security, Identity, and Compliance services, including IAM, AWS Organizations, SCPs, Secrets Manager, AWS Config, GuardDuty, Security Hub, CloudTrail, and AWS KMS for encryption, ensuring robust cloud security, • Threat Detection & Compliance: Implementation of AWS security tools like Amazon Detective, AWS Shield, WAF, AWS Firewall Manager, enforcing security compliance standards such as ISO 27001, SOC2, GDPR, and NIST frameworks, • Collaborate with Solution Architects: Work closely with solution architects to design scalable, secure, and cost-efficient cloud systems/applications, ensuring DevOps methodologies align with business objectives, • Lead DevOps Team & Define Best Practices: Take ownership of designing and implementing DevOps frameworks, optimizing CI/CD pipelines, IaC standards, security policies, and guiding DevOps engineers in modern cloud strategies., • Serverless Security & Architecture: Design and implement secure AWS Serverless solutions using ECS Fargate, Lambda, SNS, SQS, API Gateway, enforcing IAM execution roles, API authentication, encrypted messaging, and network isolation strategies, • Networking & Cloud Security: Deep expertise in TCP/IP, DNS, Load Balancers, network firewalls, SSL/TLS/mTLS, along with AWS Shield for DDoS protection, AWS WAF for web security, VPC segmentation, and automated vulnerability scanning, • Container Security & Orchestration: Expertise in Docker, ECS, EKS, Kubernetes, implementing security best practices like image vulnerability scanning, Kubernetes RBAC, IAM Roles for Service Accounts (IRSA), Pod Security Policies, and automated compliance enforcement, • Infrastructure Automation & Security: Strong experience in IaC tools (Terraform, CloudFormation, Ansible), applying least privilege IAM policies, role-based access controls (RBAC), automated compliance checks, and zero-trust security principles, • Monitoring, Logging & Alerting: Expertise in building centralized logging solutions, integrating ELK Stack, Prometheus, Grafana, Splunk, and AWS-native security monitoring tools such as CloudWatch, Security Hub, SIEM integrations, • CI/CD Security & Automation: Proficient in Jenkins, Git, GitHub Actions, ensuring secure CI/CD pipelines with artifact encryption, automated security scanning, and DevSecOps best practices, • Cloud-Based Database Security: Experience managing Amazon RDS, DynamoDB, ElastiCache, enforcing database encryption (KMS), automated backups, fine-grained access controls, and data integrity monitoring, • Cost Optimization & FinOps: Drive cloud cost optimization strategies using AWS Cost Explorer, Compute Savings Plans, Reserved Instances, AutoScaling efficiencies, and rightsizing workloads to maximize cost savings, • Problem-solving & Leadership: Strong ability to troubleshoot security vulnerabilities, enforce DevSecOps methodologies, and lead teams to adopt best practices in AWS cloud optimization and governance, • AWS Certifications (AWS Certified Security – Specialty, AWS Certified Solutions Architect, AWS DevOps Professional), • Container orchestration and Security Knowledge, • CI/CD & Security Automation, • Cloud Cost Optimization & FinOps (AWS Trusted Advisor, Compute Savings Plans, cost forecasting strategies), • AWS-native Security Services (Macie for sensitive data discovery, Inspector for vulnerability scanning, GuardDuty for threat detection), • Programming & Scripting (proficiency in Python and Shell Scripting for automation, cloud resource management, and infrastructure monitoring), • AWS Database Expertise, • AWS Networking Expertise (strong knowledge of VPC design, Subnetting, Route Tables, NAT Gateways, Transit Gateway, VPC Peering, Direct Connect, PrivateLink, ALB/NLB/CLB Load Balancers, AWS WAF & Shield, VPN connectivity, and network security group management) TCS is consistently voted a Top Employer in the UK and globally. Our competitive salary packages feature pension, health care, life assurance, laptop, phone, access to extensive training resources and discounts within the larger Tata network. We offer health & wellness initiatives and sports events; we are the proud sponsor of the London Marathon. Diversity, Inclusion and Wellbeing Tata Consultancy Services UK&I is committed to meeting the accessibility needs of all individuals in accordance with the UK Equality Act 2010 and the UK Human Rights Act 1998. We welcome and embrace diversity in race, nationality, ethnicity, disability, neurodiversity, gender identity, age, physical ability, gender reassignment, sexual orientation. We are a disability inclusive employer and encourage disabled people to apply for this role. As a Disability Confident Employer, we offer an interview to applicants with disabilities or long-term conditions who meet the minimum criteria for the role. Please email us at if you would like to opt in. If you are an applicant who needs any adjustments to the application process or interview, please contact us at with the subject line: “Adjustment Request” or call TCS London Office / to request an adjustment. We welcome requests prior to you completing the application and at any stage of the recruitment process. Next Steps: Application Process • Online application: You can apply directly through LinkedIn by uploading your CV. In case you wish to submit your application via another format like audio/video, please, contact -, • Skill-Based discussion: This will be a level 1 interview with the project team, it can be via video or in-person. Details will be confirmed by your recruiter., • Managerial discussion: This discussion will focus on behavioral aspects and person-organization fit., • HR Discussion: This will be with one of the members of the HR team and will cover your career journey, aspirations for growth, compensation and any other questions you may have. Beware of Fraudulent offers This is to notify you that TCS does not ask for any sort of payment or security deposit from candidates at any stage of the recruitment process. The firm never sends out job offers from free internet email services like Gmail, Yahoo Mail, and so on. TCS has not authorised any third-party company to collect money on their behalf. As a vigilant job seeker, beware of fraudulent recruitment activity and protect your interests! You can write to to report any fraudulent activity. Due to the high volume of applications, we will be unable to contact each applicant individually on the status of their application. If you have not received a direct response within 30 days, then it should be deemed unsuccessful on this occasion. Join us and do more of what matters. Apply online now. • Associate, • Full-time, • Information Technology, • IT Services and IT Consulting Referrals increase your chances of interviewing at Tata Consultancy Services by 2x Get notified about new DevOps Manager jobs in London Area, United Kingdom. London, England, United Kingdom 2 weeks ago Greater London, England, United Kingdom 4 weeks ago Greater London, England, United Kingdom 3 weeks ago London, England, United Kingdom 2 days ago London, England, United Kingdom 6 days ago London, England, United Kingdom 2 weeks ago London, England, United Kingdom 1 week ago London, England, United Kingdom 2 weeks ago London, England, United Kingdom 5 days ago London, England, United Kingdom 6 months ago London, England, United Kingdom 4 weeks ago Greater London, England, United Kingdom 2 days ago Greater London, England, United Kingdom 6 days ago London, England, United Kingdom 1 week ago London, England, United Kingdom 1 week ago London, England, United Kingdom 1 week ago London, England, United Kingdom 1 week ago London, England, United Kingdom 6 days ago London, England, United Kingdom 1 month ago London, England, United Kingdom 2 days ago London, England, United Kingdom 2 days ago We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI. #J-18808-Ljbffr

The Cybersecurity Senior Manager will play a key role in strengthening and maturing Innocent's cybersecurity capabilities by leading the delivery of the cybersecurity roadmap, driving security improvement initiatives, and embedding secure practices across the organization. This role combines technical cybersecurity expertise with leadership, program management, and stakeholder engagement. The successful candidate will be responsible for driving security engineering and operational security activities while ensuring that governance, risk, and compliance requirements are effectively managed. This role operates within The Coca-Cola Company's Global Cybersecurity function and works closely with security, technology, and business leaders across innocent, other wholly owned entities, and the broader Coca-Cola system to advance cybersecurity strategy, risk management, and security engineering capabilities. • Support the development and execution of Innocent's cybersecurity strategy and roadmap., • Lead cybersecurity improvement programs and initiatives from concept through implementation., • Drive the adoption of security best practices across technology and business teams., • Identify opportunities to enhance security capabilities through process improvement, automation, and technology optimization., • Track and report on cybersecurity objectives, milestones, risks, and performance metrics., • Translate cybersecurity risks into business impact and actionable recommendations for leadership., • Partner with business leaders to align cybersecurity investments with organizational objectives and risk priorities., • Provide cybersecurity input into strategic initiatives, digital transformation programs, and third-party engagements., • Lead and support the implementation of security technologies and controls across cloud and on-premise environments., • Partner with technology teams to promote secure architecture, secure development, and security-by-design principles., • Manage and enhance cloud security capabilities, including cloud security posture management and security monitoring solutions., • Support vulnerability management activities, including identification, prioritization, remediation tracking, and reporting., • Provide technical guidance on cybersecurity standards, controls, and emerging security threats., • Maintain awareness of evolving threat landscapes and recommend appropriate defensive measures., • Support cybersecurity governance activities, including policy, standards, and procedure development., • Conduct and facilitate cybersecurity risk assessments and remediation planning., • Support internal and external audits and cybersecurity assurance activities., • Ensure compliance with applicable corporate policies, regulatory requirements, and industry standards., • Contribute to third-party cybersecurity risk management processes where required., • Produce meaningful reporting and metrics to communicate cybersecurity risks and programs effectiveness., • Build strong relationships with business and technology stakeholders across Innocent and Coca-Cola., • Influence secure decision-making through effective communication and risk-based recommendations., • Act as a trusted cybersecurity advisor to project teams and business leaders., • Provide leadership and direction for cybersecurity initiatives, coordinating resources across multiple teams., • Mentor colleagues and contribute to the development of cybersecurity awareness and capability across the organization., • Provide leadership and coordination for cybersecurity incident response activities and major security events., • Lead and oversee vulnerability management processes, including prioritization, remediation governance, and risk reporting., • Experience within FMCG, manufacturing, supply chain, or consumer goods environments., • Hands-on experience with Microsoft Azure security technologies., • Experience with SIEM, SOAR, threat intelligence, and security monitoring platforms., • Professional certifications such as CISSP, CISM, AZ-500, SC-100, SC-200, CRISC, or equivalent industry-recognized security certifications are desirable., • Experience supporting ISO 27001, NIST CSF, CIS Controls, or similar security frameworks. Experience working with third-party suppliers and cybersecurity assessments. Experience leading or supporting security incident investigations. We are taking deliberate action to nurture an inclusive culture that is grounded in our company purpose, to refresh the world and make a difference. We act with a growth mindset, take an expansive approach to what's possible and believe in continuous learning to improve our business and ourselves. We focus on four key behaviors - curious, empowered, inclusive and agile - and value how we work as much as what we achieve. We believe that our culture is one of the reasons our company continues to thrive after 130+ years. Visit Our Purpose and Vision to learn more about these behaviors and how you can bring them to life in your next role at Coca-Cola. #J-18808-Ljbffr

SOC L3 Analyst# Career Opportunities## SOC L3 AnalystApply: GB.Epsom.Woodcote Grove: Full time: Posted Today: R-167004### Job Description## OverviewThe SOC Level 3 (L3) Analyst is responsible for leading the investigation, coordination and resolution of complex security incidents. Acting as a senior technical specialist, the role provides expert guidance on threat detection, incident response, and security operations while supporting the development of SOC capabilities and team expertise.The L3 Analyst maintains high standards of documentation and produces clear, concise communications tailored to both technical and non-technical stakeholders. During major security incidents, the role serves as the Incident Commander and primary point of contact, ensuring effective coordination, stakeholder engagement, and timely decision-making.In addition to operational responsibilities, the L3 Analyst contributes to the continuous improvement of SOC processes, use cases, and detection capabilities. The role requires strong automation and scripting skills to streamline repetitive tasks, enhance operational efficiency, and improve overall security outcomes.Reporting to the SOC Manager, the L3 Analyst is expected to demonstrate a deep understanding of emerging cyber security threats, technologies, and industry’s best practices. The role contributes to the organization’s cyber security strategy, roadmap, and continuous improvement initiatives, helping to ensure that security operations remain effective, resilient, and aligned with business objectives.## Your role Lead complex and high-severity cyber security investigations and incident response activities within a 24x7 Security Operations Centre (SOC), acting as a senior technical escalation point, taking ownership of investigations, and driving incidents through containment, eradication, recovery, and closure. Act as Technical Incident Lead or Incident Commander, as appropriate, during major cyber security incidents, coordinating technical response activities, assessing risk, making informed decisions in ambiguous situations, and communicating effectively with technical teams, leadership, and business stakeholders. Conduct proactive threat hunting, advanced investigations, and forensic triage across endpoint, network, cloud, identity, and other enterprise environments to identify malicious activity, attacker persistence, and previously undetected compromise, while ensuring appropriate preservation and handling of investigative evidence. Analyze adversary tactics, techniques, and procedures (TTPs), threat intelligence, emerging threats, vulnerabilities, and investigation findings to develop hunting hypotheses, identify detection gaps, and continuously strengthen the organization’s defensive capabilities. Develop, tune, test, and continuously improve security detections, analytics, use cases, investigation methodologies, playbooks, and response procedures, including validating detection coverage against realistic adversary behaviors and the MITRE ATT&CK framework. Drive automation and orchestration across security operations, using security queries, scripting, and automation to analyze data, accelerate investigations, reduce repetitive manual activities, and improve the consistency and effectiveness of response. Lead incident response exercises, tabletop scenarios, post-incident reviews, and continuous-improvement activities, translating lessons learned into measurable improvements to SOC processes, controls, detection capabilities, operational readiness, and cyber resilience. Collaborate with Security Engineering, Threat Intelligence, Vulnerability Management, Digital Forensics, IT, cloud and identity teams, and other stakeholders, while mentoring SOC analysts, producing high-quality technical and executive communications, supporting SOC metrics and SLAs, and participating in on-call/out-of-hours response for major incidents when required.A typical day Incident investigation and response. Detection engineering and continuous improvement. Threat hunting. Security projects, Automation and security engineering. Mentoring and technical leadership.## About you Demonstrable experience within a 24x7 Security Operations Centre (SOC) or Incident Response environment, ideally supporting a global organisation. Proven track record of improving threat detection, monitoring, incident response, and SOC operational maturity at scale. Strong hands-on experience with SIEM platforms, threat intelligence solutions, security orchestration and automation (SOAR), and enterprise security monitoring technologies. Good understanding of networking and Internet protocols, together with broad knowledge across multiple security domains and technologies. Strong analytical, problem-solving, and communication skills, with the ability to engage effectively with both technical and non-technical stakeholders.* Demonstrates integrity, accountability, curiosity, adaptability, and a commitment to continuous learning and professional development.Required skills Relevant industry certifications (e.g., CISSP, GCIH, GCFA, GCIA, Security+, Azure Security, or equivalent) would be a plus. Incident Management, Curiosity, Critical thinking, Problem-solving, Technical Writing, Continuous improvement, Communication, Mentoring/Coaching.* Advanced threat investigation, Threat actor TTP analysis (MITRE ATT&CK), Threat Hunting.Desirable Agentic AI. Malware analysis.* Digital forensics and evidence preservation.## Rewards & benefitsExplore the rewards and benefits that help you thrive – at every stage of your life and your career. Enjoy competitive salaries, employee rewards and a brilliant range of benefits you can tailor to suit your own health, wellbeing, financial and lifestyle choices. Make the most of a myriad of opportunities for training and professional development to grow your skills and expertise. And combine our hybrid working culture and flexible holiday allowances to balance a great job and fulfilling personal life.Rewards and benefits – Careers at AtkinsRéalis## About AtkinsRéalis We're AtkinsRéalis, a world-class engineering services and nuclear organization. We connect people, data and technology to transform the world's infrastructure and energy systems. Together, with our industry partners and clients, and our global team of consultants, designers, engineers and project managers, we can change the world. We're committed to leading our clients across our various end markets to engineer a better future for our planet and its people.Find out more.## Additional informationSecurity clearanceThis role may require security clearance and offers of employment will be dependent on obtaining the relevant level of clearance. If this is necessary, it will be discussed with you at interview. The vetting process is delivered by United Kingdom Security Vetting (UKSV) and may require candidates to provide proof of residency in the UK of 5 years or longer. If applying to this role please do not make reference to (in conversation) or include in your application or CV, details of any current or previously held security clearance.We are committed to creating a culture where everyone feels that they belong - a place where we can all be ourselves, thrive and develop to be the best we can be. So, we offer a range of family friendly, inclusive employment policies, flexible working arrangements and employee resource groups to support all employees. As an Equal Opportunities Employer, we value applications from all backgrounds, cultures and ability.As a Disability Confident Leader, we are committed to offering an interview to all applicants who have a disability and meet the essential criteria. If you would like to be considered under this commitment, please let us know at the application stage.### Worker TypeEmployee### Job TypeRegularAt AtkinsRéalis, we seek to hire individuals with diverse characteristics, backgrounds and perspectives. We strongly believe that world-class talent makes no distinctions based on gender, ethnic or national origin, sexual identity and orientation, age, religion or disability, but enriches itself through these differences. #J-18808-Ljbffr

Look at the latest headlines and you will see something Ki insures. Think space shuttles, world tours, wind farms, and even footballers' legs. Ki's mission is simple. Digitally disrupt and revolutionise a 335-year-old market. Working with Google and UCL, Ki has created a platform that uses algorithms, machine learning and large language models to give insurance brokers quotes in seconds, rather than days. Ki is proudly the biggest global algorithmic insurance carrier. It is the fastest growing syndicate in the Lloyd's of London market, and the first ever to make $100m in profit in 3 years. Ki's teams have varied backgrounds and work together in an agile, cross-functional way to build the very best experience for its customers. Ki has big ambitions but needs more excellent minds to challenge the status-quo and help it reach new horizons. As our Senior Application Security Engineer, you'll empower our engineering and product teams to safely adopt AI and embed robust technical security controls directly into our services and workflows. By designing cloud-native security guardrails and automating processes, you'll make the secure path the easiest path for our builders. Your work will span our entire development lifecycle, protecting everything from agentic LLM integrations to the everyday tools we use. You'll act as a trusted subject matter expert, collaborating closely across our product groups to foster a proactive, risk-conscious security culture. Through continuous mentorship and forward-thinking threat modelling, you'll help us securely scale and drive a digital revolution in the global insurance market. • Provide practical implementation advice and guidance on securing AI-powered applications, aligning with frameworks like OWASP ASVS and the OWASP Top 10 for LLM Applications., • Lead threat modelling sessions for AI and agentic systems during the technical design phase using STRIDE and AI-specific frameworks., • Establish secure guardrails, allowlists, telemetry, and safe-by-default configurations for developer AI tooling., • Manage security testing workflows in the SDLC, utilizing scanners to check for standard and AI-specific risks such as prompt injection and data leakage., • Coordinate regular penetration tests, vulnerability triage, and cloud security posture management across GCP and Azure platforms., • Automate security tasks by contributing code to infrastructure and security tooling around our cloud platforms., • Foster secure practices by facilitating the Security Champions network, organizing security discussions, and delivering AI tooling safety training., • Share expertise, document processes, and mentor team members to build security capability across engineering., • Provide constructive feedback on Ki's architecture and lead technical security discussions., • Strong ability to write and review code (preferably in Python, TypeScript, Kotlin and Terraform), with a background in software development, SRE, DevOps, or practical security engineering., • In-depth understanding of securing AI/LLM applications, agentic tooling, and developer AI tools, including prompt injection mitigation, model integration risks, guardrails, telemetry, and the use of frontier models via APIs or locally., • Practical experience with agentic development using coding harnesses is essential., • Solid knowledge of major public cloud providers (preferably Google Cloud Platform, with Azure or AWS as beneficial) and network infrastructure., • Solid understanding of the Kubernetes ecosystem, Docker, and container security., • Experience implementing and managing security testing programs (SCA, SAST, DAST) within pipelines like GitHub Actions, alongside release packaging and artifact management., • Capability to develop secure, automated infrastructure using Terraform., • You enjoy learning about both the offensive and defensive aspects of security., • Ability to work collaboratively within enterprise-wide agile development environments., • Outstanding communication skills (both written and verbal), with the ability to explain complex vulnerabilities to technical teams and business stakeholders, share knowledge, and mentor colleagues. You'll get a highly competitive remuneration and benefits package. This is kept under constant review to make sure it stays relevant. We understand the power of saying thank you and take time to acknowledge and reward extraordinary effort by teams or individuals. • Initial recruiter screening call, • Interview with hiring manager, • Technical Interview (this may vary depending on the role), • Values Interview #J-18808-Ljbffr

DigiCert is a global leader in intelligent trust. We protect the digital world by ensuring the security, privacy, and authenticity of every interaction. Our AI-powered DigiCert ONE platform unifies PKI, DNS, and certificate lifecycle management, to secure infrastructure, software, devices, messages, AI content and agents. Learn why more than 100,000 organizations, including 90% of the Fortune 500, choose DigiCert to stop today’s threats and prepare for a quantum-safe future at www.digicert.com As a Technical Solutions Engineer, you will play a pivotal role in combining technical expertise with strong sales acumen to identify, qualify, and close new business opportunities across a defined portfolio of customer and partner accounts. Your day-to-day responsibilities will involve close collaboration with customers, partners, and Account Managers to deliver business value, conduct demos and POC/Vs, and contribute to the success of bids and tenders. You will provide end-to-end technical and business value guidance before and during the sales cycle ensuring customer requirements are met with tailored, innovative solutions. Acting as a trusted technical advisor, you will be a key point of contact for clients, offering strategic insight and hands-on support. You’ll also work closely with cross-functional teams to align solutions with customer needs and organizational goals. Expected Travel is 20-25% • Customer Engagement and Technical Discovery, • Conduct technical discovery calls to understand customer requirements, pain points, and existing infrastructure., • Lead or participate in product demonstrations, showing how solutions meet client-specific needs., • Translate complex customer requirements into actionable technical solutions or configurations., • Assist with scoping customer environments to recommend best-fit products or services., • Create technical documentation, architecture diagrams, and integration guides for customer engagements., • Deliver engaging technical presentations that deliver business value to external stakeholders and customers., • Design customized technical solutions based on client needs, often involving product configuration, integration planning, and API usage., • Collaborate with product and engineering teams to validate feasibility or elevate edge-case needs., • Produce architecture diagrams, technical proposals, or proof-of-concept (PoC) plans., • Support the preparation and delivery of RFP/RFI responses, technical questionnaires, and bid documentation., • Partner with Account Executives and Customer Success Managers to align technical value with customer goals., • Liaise with Product Managers to share customer feedback and advocate for feature enhancements or roadmap items. Educational Background: • Degree in Computer Information Systems, Computer Science, Cybersecurity, or a related technical field. Technical Skills & Experience: • 5+ years’ experience as an SE or technical salesperson, or equivalent and applicable experience as a product manager, engineer, tech support agent or administrator of enterprise-grade or IT/IS software, • General knowledge or background in IT (ideally server administration, server OS configuration, TCP/IP networking hardware, protocols, LAN and WAN technologies & configurations, and network design) and/or IS (ideally PKI, firewall management, IDS & IPS, vulnerability management, and network scanners), in engineering, administration or support roles, • Familiarity with cryptographic principles, digital certificates, and PKI concepts., • Knowledge of cloud platforms (AWS, Azure, Google Cloud, Oracle Cloud) and container technologies like Kubernetes., • Experience or familiarity with ServiceNow, GitHub, and REST API integrations., • Hands-on exposure to scripting and automation using Bash, PowerShell, Python, or similar languages., • Experience with DevOps and infrastructure automation tools (e.g., Terraform, Ansible, Puppet, Chef), • Self-motivated with ability to self-direct in strategic alignment with sales counterparts, • Technical, organized and analytical, with ability to eliminate sales obstacles through creative/innovative thinking, • Passion for continuous learning and applying innovative solutions to complex challenges., • Situational awareness and business acumen skills to support self-held critical values of professionalism, humility, and customer-focus, • Basic project management skills to accomplish role requirements, • Strong communications, interpersonal and presentation skills, in both written and verbal formats, • Fluency in English To protect candidate information and maintain a secure hiring process, all applications must be submitted through our careers portal. Resumes or CVs sent directly via email will not be reviewed or considered. #LI-MG1 The total on-target earnings (OTE) for this role, including base salary and variable incentive compensation (at 100% target performance), are outlined below. Each candidate’s compensation offer will be determined based on factors including experience, skills, qualifications, performance expectations, business needs, and location. Actual earnings may vary based on individual performance. This role may also be eligible for additional compensation and benefits, which will be discussed during the hiring process. We are committed to fair and transparent pay practices and comply with all applicable pay transparency requirements. If you would like more information about compensation or benefits, we are happy to provide additional details during the hiring process. For more information regarding our comprehensive benefits, see the benefits section. #J-18808-Ljbffr

Job title: Cyber Policy Lead Salary: National (Edinburgh and Leeds) ranging from £53,800 to £70,000 and London from £59,200 to £75,000 (salary offered will be based on skills and experience) This role is graded as: Senior Associate - Regulatory We regulate financial services firms in the UK, to keep financial markets fair, thriving and effective. By joining us, you’ll play a key part in protecting consumers, driving economic growth and shaping the future of UK finance services. The Cyber and Operational Resilience directorate enables secure and resilient regulation across the FCA and PSR, supporting the protection of UK consumers and financial markets. This Senior Associate sits within the Policy & Risk team, part of the wider Governance and Human Risk function. The role focuses on the management and maintenance of the Cyber & Information Resilience Policy Framework, including associated standards, procedures and guidance. You will help to support and articulate the organisations Cyber Risk Appetite through the policy framework. You will also be a key point of contact from all areas of the FCA for queries against published requirements. You will support the Risk lead in setting and measuring controls performance and support the GHR Manager and CISO in reporting against cyber issues / non-compliance across the organisation. • Manage Cyber & Information Policy and Cyber & Information Security Standards updates in line with agreed refresh periods, • Look to modernise our policy & standards suite e.g. standards on a page, • Act as the primary point of contact for policy-related queries, covering both BAU and project-related activities, • Support reporting on Policy Owner compliance e.g. effectiveness of our policies, • Conduct policy gap analysis and provide recommendations for improvement, • Complete and interpret regular horizon-scanning activities to identify emerging risks, trends, and regulatory changes, • Help develop and build requirements for a new self-service policy model for low-risk projects taking into account the FCA’s risk appetite, • Manage and modernise the Policy Waiver process, • Provide policy guidance and interpretation to specialist investigation teams and HR on policy requirements and specific cases, • Minimum: Experience in designing, drafting and maintaining cyber & information security policies, standards and procedures across their full lifecycle, • Extensive working knowledge of industry standards such as ISO 27001, NIST Cybersecurity Framework (CIS), CIS Controls, • Essential: Understanding of technical security controls, including network security, cloud security, identity and access management and vulnerability management, • Working knowledge of Information Management practices and Data Privacy legislation, • Demonstrated experience in dealing with stakeholders at all levels (including Director level), • Solid experience in delivering organisational change, • Risk identification, articulation and management, • 25 days annual leave plus bank holidays, • Non-contributory pension (8–12% depending on age) and life assurance at eight times your salary, • Private healthcare with Bupa, income protection and 24/7 Employee Assistance, • 35 hours of paid volunteering annually, • Colleagues spend a minimum of 50% of their working time in the office each month (60% for Directors and Executive Directors) across our London, Leeds and Edinburgh offices., • A flexible benefits scheme designed around your lifestyle, • A flexible benefits scheme designed around your lifestyle, • For a full list of our benefits and our recruitment process as a whole visit our benefits page. Our colleagues are the key to our success as a regulator. We are committed to fostering a diverse and inclusive culture: one that’s free from discrimination and bias, celebrates difference and supports colleagues to deliver at their best. We believe that our differences and similarities enable us to be a better organisation – one that makes better decisions, drives innovation and delivers better regulation. If you require any adjustments due to a disability or condition, your recruiter is here to help - reach out for tailored support. We welcome diverse working styles and aim to find flexible solutions that suit both the role and individual needs, including options like part‑time and job sharing where applicable. Disability confident: our hiring approach. We’re proud to be a Disability Confident Employer and therefore, people or individuals with disabilities and long-term conditions who best meet the minimum criteria for a role will go through to the next stage of the recruitment process. In cases of high application volumes we may progress applicants whose experience most closely matches the role’s key requirements. Timeline: Job advert close: 11th November 2026 at 11:59pm CV Review/Shortlist: 13th November 2026 Interview: w/c 23rd November 2026 Your Recruiter will discuss the process in detail with you during screening for the role, therefore, please make them aware if you are going to be unavailable for any date during this time. At the FCA, we’re creating a fair and more resilient financial system. We’re establishing more transparent relationships between financial services and their customers, building trust in financial markets and protecting vulnerable consumers. #J-18808-Ljbffr

An exciting opportunity has arisen for an experienced Managed Services Manager to lead a high-performing technical operations team delivering exceptional support, engineering and infrastructure services to a portfolio of demanding, technology-focused clients. You will be responsible for leading approximately 25 technical professionals across support, engineering and field services, creating a culture of accountability, ownership and customer focus. Working closely with Service Delivery, Account Management, Security and Professional Services teams, you will ensure clients receive a world-class service experience while driving automation, standardisation and operational efficiencies across the business. This role is ideal for a proven Managed Services leader who enjoys developing people, improving processes and building trusted relationships with both clients and internal stakeholders. • Lead and develop Service Desk, Field Engineering and Third-Line Engineering teams., • Coach and mentor team leaders to drive performance, accountability and continuous improvement., • Create a high-performing culture focused on service excellence, collaboration and customer satisfaction., • Manage recruitment, onboarding, performance management and succession planning., • Build clear development pathways for technical staff and future leaders., • Own day-to-day service performance across incidents, requests, escalations and problem management., • Ensure SLA performance, ticket ownership and customer communications remain at the highest standards., • Act as the senior escalation point for priority incidents and complex customer issues., • Lead major incident management and service recovery activities., • Chair operational change governance and ensure effective risk management across customer environments., • Maintain strong operational control over ticket queues, backlogs, resource planning and service delivery., • Drive a proactive service model focused on preventative maintenance, risk reduction and customer outcomes., • Lead initiatives around automation, self-service and AI-enabled workflows., • Implement structured continual service improvement programmes., • Use operational data and trends to identify recurring issues and opportunities for optimisation., • Support the development of scalable, standardised and repeatable service delivery practices., • Proven experience managing multi-disciplinary Managed Services or IT Support teams., • Strong leadership experience across Service Desk, Infrastructure, Field Engineering or Technical Support functions., • Demonstrable success improving service quality, operational performance and customer satisfaction., • Excellent people management and coaching skills., • Strong understanding of IT Service Management processes, including Incident, Problem, Change and Major Incident Management., • Experience managing escalations and engaging with senior client stakeholders., • Good knowledge of Microsoft 365, Azure and Modern Workplace technologies., • Strong analytical and decision-making capabilities, with a data-driven approach to improvement., • Commercial awareness and an understanding of balancing service quality, customer outcomes and operational efficiency., • ITIL v4 certification (Foundation minimum)., • Experience within a Managed Services Provider (MSP) environment., • Experience with automation, AI-enabled service delivery and self-service technologies., • Knowledge of ISO 27001, ISO 9001 and Cyber Essentials frameworks., • Experience with service reporting, RMM, PSA and endpoint management platforms. Exposure to security operations, vulnerability management or proactive technical service programmes. This position does require you onsite 5 days a week. #J-18808-Ljbffr

A career at Janus Henderson is more than a job, it’s about investing in a brighter future together. We will do this by protecting and growing our core business, amplifying our strengths and diversifying where we have the right. Clients Come First - Always | Execution Supersedes Intention | Together We Win | Diversity Improves Results | Truth Builds Trust If our mission, values, and purpose align with your own, we would love to hear from you! Your opportunity This is a hands‑on security engineering role for people who are deep in cybersecurity and serious about AI. You will secure the AI systems we are building — AI‑enabled applications, models, agents, and the platforms beneath them, across their full lifecycle — acting as a trusted advisor who helps define and evolve the firm’s AI security standards, patterns, and guardrails. The objective is not to create additional process, but to ensure our existing security capabilities evolve alongside AI adoption and remain effective at enterprise scale. Janus Henderson is undertaking a firm‑wide AI transformation to become the most technologically sophisticated asset manager in the industry. Our AI capability sits in a single centralised function under the Head of AI, and AI Technology builds and runs it. This role sits in Information Security and reports to the Head of Security Engineering, while your day‑to‑day work is directed by AI Technology and prioritised against their roadmap. That split is deliberate: security policy, security architecture approval, and security risk acceptance stay with Infosec, and you are the person who exercises them for AI — close enough to the engineering to be useful, independent enough to say no. You will secure Nexus, our agentic workspace where employees and citizen developers build and run AI applications, agents, and shared skills; Accio, our centralised MCP server, which consumes other MCP servers and presents enterprise datasets through one governed interface; the AI model gateway and its routes to external model providers; and our Copilot services. Accio and Nexus matter most: both propagate permissions and data on a user’s or an agent’s behalf, so their trust boundaries have to hold when a request crosses several hops. Throughout, you will balance effective risk management against the velocity needed to deliver AI solutions that drive business value and growth. A secondary focus of the role is partnering with the wider Security function to identify opportunities to leverage AI and automation to improve efficiency, effectiveness, and risk reduction across security operations, engineering, assurance, and governance — so that the controls you design are enforced and evidenced automatically rather than through review meetings. • Security is designed into AI systems rather than appended. Engineers reach for an approved pattern instead of asking for a bespoke review., • The controls you define are implemented as code and secure defaults by AI Engineering and AI Platforms, and you can show they are operating., • AI‑specific attacks are anticipated and tested for, and you can demonstrate what the firm is and is not exposed to., • New models, tools, and Copilot features reach a security decision quickly through a repeatable risk‑based path, and when an AI incident happens the lesson lands in a platform default rather than a report., • Risk reduction and control effectiveness are evidenced through agreed KPIs, KRIs, and reporting rather than asserted. Your responsibilities, • Act as security design authority for AI systems, leading threat modelling, architecture review, and risk assessment for agentic applications, the model gateway, Accio, Nexus, and any novel or high‑risk AI initiative, applying STRIDE, PASTA, MITRE ATT&CK, and MITRE ATLAS as appropriate., • Define and evolve AI security standards, guardrails, governance controls, and secure‑by‑design patterns aligned with enterprise requirements and the firm’s risk appetite — co‑designed with the Principal AI Architect as reusable, implementable guardrails, and implemented as code and secure defaults by AI Engineering and AI Platforms, working with the AI Governance Implementation Lead, who owns how they land on the platform., • Design identity, entitlement, and secrets patterns for non‑human identities — agents, tools, MCP servers, connectors, and service principals — with the Senior AI Platform Engineer and enterprise IAM, covering scoped permissions, credential lifetime, rotation, and least privilege across multi‑hop requests., • Set the trust boundaries and data‑egress controls for the AI estate, including what may reach external model providers, and work with data protection owners on classification, DLP enforcement, privacy, and data governance obligations., • Run adversarial testing and AI red teaming against models, prompts, agents, and tool chains, covering prompt injection and indirect injection, model manipulation and hijacking, excessive agency, function‑call abuse, data leakage from LLM outputs, and privilege escalation between agents., • Build detections, security analytics, and telemetry for AI‑specific abuse — anomalous tool invocation, credential misuse by agents, unusual data access, and exfiltration through model responses — and integrate them into the firm’s monitoring estate., • Support security incident response for AI systems: triage, containment, forensics across prompts, tool calls, and agent decisions, and root cause, feeding each lesson back into platform defaults and evaluation suites., • Own security testing in the AI delivery lifecycle, including static analysis, dependency and container scanning, secrets detection, and security gates in CI/CD, so issues surface before release., • Co‑own the risk‑based security gate for onboarding new AI products, model providers, versions, and platform features with the Senior AI Platform Engineer and the AI Governance Implementation Lead, conducting security due diligence and risk assessment of AI vendors, platforms, and models — provenance, open‑source components, tenancy and data‑use terms, security advisories — and testing platform updates before rollout., • Decide with the Senior AI Platform Engineer and the Principal AI Architect which Copilot features are released and to whom, withholding capability until the required controls are evidenced; review the solutions Forward Deployed Engineering builds and the platforms built with Percepta so neither reaches production without a security position; and set the guardrails for citizen developers and Copilot Studio makers with AI Enablement., • Support Risk and Internal Audit with security evidence, exercise Infosec’s security‑control approval and risk‑acceptance position for AI, and elevate where residual risk exceeds appetite., • Identify and deliver opportunities to apply AI and automation across security operations, engineering, assurance, and governance, building automation with code, APIs, scripting, orchestration platforms, or low‑code technologies to automate response workflows, enrich incident data, assist with triage, and drive risk‑based vulnerability management., • Define and report the KPIs, KRIs, dashboards, and reporting that demonstrate risk reduction, control effectiveness, and operational improvement., • Mentor security engineers on AI security and build enough AI literacy across Infosec that this role is not a single point of knowledge., • Hybrid working and reasonable accommodations, • Generous Holiday policies, • Excellent Health and Wellbeing benefits including corporate membership to Wellhub, • Paid volunteer time to step away from your desk and into the community, • Support to grow through professional development courses, tuition/qualification reimbursement and more, • Maternal/paternal leave benefits and family services, • All employee events including networking opportunities and social activities, • Lunch allowance for use within our subsidized onsite canteen Must have skills, • Strong cybersecurity experience across security engineering, application security, product security, cloud security, or security architecture, with a hands‑on engineering background, a track record of protections that reached production, and a solid grasp of security engineering fundamentals — common attack vectors, defence techniques, and threat modelling., • Hands‑on experience assessing and securing GenAI, LLM, machine learning, agentic AI, and AI‑enabled solutions throughout their lifecycle., • Proven ability to lead threat modelling, architecture reviews, and risk assessments for complex technology platforms and services., • Strong understanding of AI‑specific threats, threat modelling methodologies, adversary frameworks, and risk assessment approaches, including prompt injection, model manipulation, excessive agency, STRIDE, PASTA, MITRE ATT&CK, MITRE ATLAS, and equivalent industry practices., • Experience defining and evolving AI security standards, guardrails, governance controls, and secure‑by‑design patterns aligned with enterprise requirements and risk appetite., • Experience securing AI agents, MCP integrations, permissions, non‑human identities, autonomous workflows, and AI platform integrations., • Cloud security depth, ideally Azure — identity and access management, service principals and workload identity, secrets management, RBAC, network controls, and logging — and experience securing application delivery, including secure SDLC, CI/CD controls, and code and dependency scanning., • Practical experience with AI and LLM systems — prompt engineering, retrieval‑augmented generation, function calling, agent‑based tools — and proven ability to build and deploy automation using code, APIs, scripting, orchestration platforms, or low‑code technologies such as Python, workflow engines, or SOAR, integrating security logs, AI models, and platform components into cohesive pipelines., • Metrics‑driven mindset, with experience defining KPIs, KRIs, dashboards, and reporting to demonstrate risk reduction, control effectiveness, and operational improvement., • Strong stakeholder engagement and influencing skills, with the ability to translate technical risk into business impact, pragmatic controls, and informed risk decisions — and the independence to hold a security position under delivery pressure. Nice to have skills, • Familiarity with AI security and governance frameworks including NIST AI RMF, the OWASP Top 10 for LLM applications, MITRE ATLAS, ISO/IEC 42001, and the security provisions of the EU AI Act., • AI red teaming, adversarial testing, adversarial machine learning, model validation, or offensive security assessments applied to models and tool chains., • Experience securing enterprise AI platforms, model gateways, AI development environments, and AI engineering ecosystems., • Knowledge of AI security posture management, runtime protection, model monitoring, and AI governance tooling., • Knowledge of identity security, including IAM, PAM, identity governance, privileged access management, non‑human identities, and workload identities., • Experience applying AI and automation to vulnerability management, detection engineering, threat detection, or security operations at scale, including risk‑based threat prioritisation., • Knowledge of security analytics, monitoring, and detection capabilities for AI systems and supporting infrastructure., • Understanding of privacy, data governance, regulatory, and responsible AI considerations, including Microsoft Purview, DLP policy design, or data classification across a Microsoft 365 estate., • Securing agentic workflows, including scoped permissions, approval patterns, and guarding against configuration drift caused by AI assistants., • Third‑party or model supply‑chain risk assessment; financial services or asset management experience; or a certification such as CISSP, GIAC, OSCP, or a cloud security qualification. Supervisory responsibilities No. This is an individual‑contributor role reporting into Information Security, with its work directed by AI Technology. It carries security design authority for AI systems and mentors security engineers, but does not line‑manage. • Mentoring, • Leadership development programs, • Regular training, • Career development services, • Continuing education courses At Janus Henderson Investors we’re committed to an inclusive and supportive environment. We believe diversity improves results and we welcome applications from candidates from all backgrounds. Don’t worry if you don’t think you tick every box, we still want to hear from you! We understand everyone has different commitments and while we can’t accommodate every flexible working request, we’re happy to be asked about work flexibility and our hybrid working environment. If you need any reasonable accommodations during our recruitment process, please get in touch and let us know at . Annual Bonus Opportunity: Position may be eligible to receive an annual discretionary bonus award from the profit pool. The profit pool is funded based on Company profits. Individual bonuses are determined based on Company, department, team and individual performance. Benefits: Janus Henderson is committed to offering a comprehensive total rewards package to eligible employees that includes competitive compensation, pension/retirement plans, and various health, wellbeing and lifestyle benefits. To learn more about our offerings please visit the Why Join Us section on the career page here. Janus Henderson Investors is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. All applications are subject to background checks. Janus Henderson (including its subsidiaries) will not maintain existing or sponsor new industry registrations or licences where not supported by an employee’s job functions (as determined by Janus Henderson at its sole discretion). You should be willing to adhere to the provisions of the Investment Advisory Code of Ethics related to personal securities activities and other disclosure and certification requirements, including past political contributions and political activities. Applicants’ past political contributions or activity may impact applicants’ eligibility for this position. You will be expected to understand the regulatory obligations of the firm, and abide by the regulated entity requirements and JHI policies applicable for your role. #J-18808-Ljbffr

We believe in better. And we make it happen. Better content. Better products. And better careers. Working in Tech, Product or Data at Sky is about building the next and the new. From broadband to broadcast, streaming to mobile, SkyQ to Sky Glass, we never stand still. We optimise and innovate. We turn big ideas into the products, content and services millions of people love. And we do it all right here at Sky. Our products, platforms and technologies are constantly evolving that's why keeping Sky safe from cyber-attacks is one of our top priorities. Our Cyber Security team helps the business grow while protecting our customers, colleagues and partners from increasingly sophisticated cyber threats. Our team includes Cyber Fusion Centre, Security Services, Risk and Compliance, Programme Delivery and Business Security, and we work across the UK, Italy and Germany. Join us and you'll get involved in tackling challenges and future threats in an ever-changing cyber landscape. • Show proficiency in managing your workload independently and familiarise yourself with industry business practices and procedures while taking ownership of your development pathway alongside your line manager and colleagues., • Work towards achieving a defined set of objectives identified between yourself and your line manager, tailoring to your goals and completing a pentesting certification., • Conduct penetration test engagements for both applications and complex infrastructure setups, as well as retests, to gain a deep understanding of how we conduct cyber security assessments across a wide range of systems and services here at Sky., • Use AI-assisted tools to support research, vulnerability analysis and reporting while applying appropriate validation and professional judgement. Develop an understanding of the security risks associated with AI and LLM-based applications, and contribute to the assessment of these technologies during security testing., • Independently attend meetings where infrastructure and application scopes are defined, document the respective engagement terms, conduct and support cyber security assessments. This includes appropriately documenting and sharing all findings., • Work with various areas of the business to scope projects and advise teams on remediation of identified vulnerabilities., • Gain a good understanding of how to conduct advanced infrastructure and advanced web application penetration tests., • Develop an understanding of modern security testing methodologies covering applications, infrastructure, mobile platforms and emerging technologies, including AI-enabled systems., • Conduct research into emerging technologies, security threats and testing methodologies, including the responsible use of AI-assisted tooling to improve the efficiency and quality of security testing., • A passion for cyber security and a positive outlook and approach to the work we do., • Practical experience with penetration testing which can be substituted for a relevant degree or equivalent qualification or completion of the Sky Cyber Graduate Scheme., • A proven and demonstrable interest in Artificial Intelligence (AI) and its application within cyber security, with an awareness of AI-assisted security tooling and the security considerations of AI-enabled applications., • Demonstrate curiosity and a continuous learning mindset, proactively exploring new technologies, attack techniques and security research to develop technical expertise., • Knowledge of common infrastructure and application pen test security tools., • Live the Sky Values and demonstrate enthusiasm and a can-do attitude., • Good time management and organisational skills to meet strict deadlines., • Be proactive and able to work independently as well as part of a team., • Excellent teamwork skills to collaborate, share and support colleagues., • Ethical integrity to be trusted with confidential information., • OSCP (Offensive Security Certified Professional), • PNPT (Practical Network Penetration Tester), • CPTS (Certified Penetration Testing Specialist), • CREST CRT, • Burp Suite Certified Practitioner (BSCP), • AI/ML or GenAI certification (e.g. Microsoft, AWS, Google, SANS/GIAC or equivalent), or demonstrable practical experience using AI/LLMs to automate or enhance security testing., • There's one thing people can't stop talking about when it comes to life at Sky: the perks. Here's a taster:, • Free Sky TV or NOW package, including Sky Sports and Sky Cinema, • Pension package with up to 9% employer contribution, • Private healthcare with mental health support, • Aviva Digital GP and dental insurance, • Discounts on Sky products, including Sky Mobile, Sky Broadband, Sky Glass and Sky Protect, • Share save and Tech schemes, • A range of Sky VIP rewards and experiences We've adopted a hybrid working approach to give more flexibility on where and how we work. The hybrid working expectations for this role are 2 days in the office per week. Our Sky Group HQ. Equipped with state-of-the-art technology and workspaces, there's plenty of space to see your big ideas come to life. Here you'll find 13 subsidised restaurants and cafes. You can re-energise at our gym, catch the latest films at our cinema, get your car washed and even get pampered at our beauty salon. Our Osterley Campus is just a 10-minute walk from Syon Lane train station, or you can get one of our free shuttle buses from Osterley, Gunnersbury and Ealing Broadway stations. Plus, there's free onsite parking available for cars, motorbikes and bicycles. We're Sky, a leading media and entertainment company who connect millions with entertainment, sports, news and arts through innovative products and services. Working with us means you'll be bringing the joy of a better experience to more people, every day. All so we can do better and deliver better for our customers, colleagues and society. We're an equal opportunity employer and value diversity at our company. We're a Disability Confident Accredited Employer, and welcome and encourage applications from all candidates. We will look to ensure a fair and consistent experience for all and will make reasonable adjustments to support you where appropriate. Please flag any adjustments you need as early as you can. Just so you know: if your application is successful, we'll ask you to complete a criminal record check. And depending on the role you have applied for and the nature of any convictions you may have, we might have to withdraw the offer. To be eligible for this role you are required to have the appropriate right to work in the UK. Please be aware Sky does not offer sponsorship for this position. To find out more about working with us, search #LifeAtSky on social media. #J-18808-Ljbffr

Location: Hybrid - primarily remote, with travel to FI centres as required Contract Type: Permanent, Full-Time First Intuition (FI) is a fast-growing, innovative accountancy training provider committed to delivering outstanding learning experiences. At FI, our commitment to excellence is driven by our core driving principle of putting people first. We take pride in nurturing talent, fostering growth, and providing unparalleled support to our students, clients, and team members, ensuring they can thrive personally and professionally. Our success is due to our approach to training and our links with businesses. We work closely with organisations to precisely understand their needs and incorporate these into innovative course designs, where the interaction with students is tailored, personal and reflects their specific circumstances. This approach has led to First Intuition being awarded an ‘Outstanding’ rating by Ofsted. We are seeking a hands-on Security Engineer with a strong vulnerability management focus to help reduce organisational cyber risk through effective vulnerability management, security automation and continuous improvement of security controls. This is an excellent opportunity to join a growing security function and play a key role in protecting our rapidly expanding organisation. You will manage the technical vulnerability lifecycle from identification and validation through risk-based prioritisation, remediation and verification. You will also support security operations by improving the tooling, integrations and automated processes used by the SOC to identify and respond to security threats. This role suits an engineer who enjoys turning security findings into measurable risk reduction, automating repeatable security processes and working across Security, Infrastructure, IT Operations and application teams. • Operate and continuously improve the end-to-end vulnerability management lifecycle across endpoints, servers, networks, cloud services and applications., • Run and review authenticated vulnerability assessments using Qualys, validate findings and reduce false positives., • Prioritise vulnerabilities using exploitability, threat intelligence, internet exposure, asset criticality, business impact and technical severity rather than relying on CVSS alone., • Translate findings into clear remediation plans with defined owners, target dates and verification criteria., • Work with system and application owners to remediate vulnerabilities through patching, configuration changes, hardening, upgrades or compensating controls., • Develop security automation, preferably using Python, to improve vulnerability triage, remediation workflows, data enrichment and fix validation., • Test, coordinate and validate security patches and configuration changes while balancing security risk and operational impact., • Support the SOC from an engineering perspective by improving security tooling, integrations, alert enrichment and automated response processes., • Assist with security investigations where vulnerabilities, insecure configurations or missing patches may have contributed to an event., • Use threat intelligence to provide context for vulnerability prioritisation, security alerts and emerging threats., • Apply Zero Trust principles when implementing or improving endpoint, identity, network and cloud security controls., • Review network-device configurations and firewall rule sets using Nipper Studio or comparable security auditing tools., • Track vulnerabilities, exceptions and remediation progress through to verified closure., • Produce security metrics and dashboards covering exposure, vulnerability ageing, remediation performance and residual risk., • Maintain technical documentation, remediation playbooks and security automation code., • Carry out tasks as delegated by the Information Systems Security Manager from time to time., • Two to three years’ experience in cyber security, security engineering, infrastructure engineering, IT operations or a related technical role., • Hands-on experience with vulnerability scanning, assessment and remediation using Qualys or a comparable enterprise platform., • Demonstrable ability to analyse, validate and prioritise vulnerabilities using technical and business risk factors., • Practical experience driving remediation across Windows, Linux, endpoints, networks, cloud services or applications., • Scripting capability for security automation. Either Python or PowerShell is strongly preferred, particularly for automating vulnerability identification, triage, remediation and validation procedures., • An understanding of CVEs, CVSS, known exploited vulnerabilities, threat intelligence, attack paths, security hardening and compensating controls., • An understanding of security operations, including security monitoring, alert investigation and incident response processes., • A practical understanding of Zero Trust security principles., • The ability to manage multiple remediation activities and maintain momentum from identification through to verified closure., • Strong written and verbal communication skills, with the ability to explain technical risks and remediation requirements to technical and non-technical stakeholders., • Right to live and work in the UK and ability to travel, when required, to centres., • Experience with Microsoft 365 E5/A5 security technologies, including Defender for Endpoint Plan 2 and Defender for Office 365 Plan 2., • Experience with vulnerability assessment and management tools, preferably Qualys., • Experience with firewall and network-security auditing tools, preferably Nipper Studio., • Experience supporting security operations, SIEM, threat intelligence or incident investigations., • Experience with Microsoft Intune, Entra ID, Azure or AWS security., • Relevant certifications, such as Microsoft SC-900 or CompTIA Security+., • Vulnerabilities are accurately identified, risk-ranked, assigned and remediated within agreed service levels., • Critical and actively exploited vulnerabilities receive rapid, intelligence-led attention., • Remediation is technically verified and recurring vulnerabilities are reduced., • Python automation shortens vulnerability triage and remediation cycles and reduces repetitive manual work., • The SOC benefits from reliable security tooling, useful integrations and improved automation., • Reporting provides a clear view of material exposure, remediation performance and residual risk., • Security, Infrastructure, IT Operations and application teams share accountability for reducing security risk., • 25 days annual leave (based on full-time hours) PLUS bank holidays., • 3 FI Days per year., • Hybrid working available, equipment provided for homeworking., • Flexible-working positive employer with a range of family-friendly policies, • Employee Assistance Programme: 24-hour confidential access to counselling and support services, • Competitive Pension, • Private Medical Insurance, • Training and development opportunities, • Long term career prospects in a growing company, • Employee perks including a range of discounts to suit your lifestyle. First Intuition are dedicated to safeguarding children, young people, and vulnerable adults. All roles require reference checks, an enhanced DBS, and online searches in line with KCSIE guidelines. This post is exempt from the rehabilitation of Offenders Act 1974. First Intuition is committed to safeguarding and promoting the welfare of children and vulnerable adults. All staff are expected to share this commitment and adhere to our Safeguarding and Prevent Policy, which can be viewed here. We are a disability confident employer, committed to equal opportunities for all applicants. If you need reasonable adjustments during the recruitment process, please let us know #J-18808-Ljbffr

Principal DevSecOps Engineer - Permanent London | Hybrid - 3 days per week on-site £110,000-£125,000 + 5-10% bonus + pension + benefits | Permanent ?? Build secure, scalable platforms that enable transformation We're looking for a Principal DevSecOps Engineer to lead the adoption and continuous improvement of DevSecOps practices across complex technology transformation programmes. You'll combine hands-on engineering with technical leadership, embedding security, automation, governance and reliability throughout the path to live. What you'll do Design and continuously improve secure, automated CI/CD and GitOps pipelines Embed security scanning, vulnerability management and secrets management into delivery workflows Establish secure-by-design engineering practices and enforce security and technical standards Lead Infrastructure as Code (IaC) practices across teams and environments Drive observability, monitoring, logging and audit controls Support incident response, patching, compliance reporting and technical debt remediation Partner with developers and delivery teams to improve engineering quality and security Document security processes, controls and operational runbooks Provide technical leadership and help establish effective DevSecOps ways of working What we're looking for You'll be an experienced DevSecOps Lead or Principal Engineer with strong hands-on engineering and technical leadership experience across: CI/CD & GitOps: GitHub Actions, Argo CD, Argo Rollouts Security & Compliance: Trivy, vulnerability management, HashiCorp Vault, cert-manager Containers & Cloud: Docker, AWS EKS, AWS IAM, S3 and network policies Infrastructure as Code: Terraform Observability: Grafana, Loki Automation: Python and Bash Experience delivering within the UK Government Digital Service (GDS) lifecycle on a public sector engagement ?? Why join? You'll work on complex, high-impact transformation programmes where engineering, security and technology come together. You'll have access to extensive learning and development opportunities, professional certifications and flexible hybrid working, with the opportunity to shape DevSecOps practices across a growing technology environment. ?? Security Clearance Security Check (SC) clearance is required. Candidates must meet the relevant eligibility requirements, including continuous UK residency for the last five years. This role requires candidates to be sole UK nationals. Ready to shape the future of secure engineering? If you're a senior DevSecOps professional who enjoys solving complex technical challenges, leading from the front and building secure engineering practices that scale, we'd love to hear from you. Apply now. TPBN1_UKTJ

Neighbourhood Manager Peterborough and surrounding areas £43,066 (in probation) rising to £45,332 plus car allowance Monday – Friday 0900-1700 with occasional evening and weekend work Up to £45,332 per annum + Car Allowance The Cross Keys Homes Neighbourhood Management team is expanding! We are therefore looking to recruit resident focused, outcome driven, neighbourhood managers to work in a defined neighbourhood area. You will Improve the quality of life for residents through a proactive and solutions focused approach, ensuring compliance with tenancy agreements. You will also visit all properties annually for tenancy and condition reviews to ensure standards within the property are maintained to an acceptable level as part of a preventative approach to our service. If you want to have direct responsibility for effective case management, make decisions regarding breaches of tenancy and be responsible for the resident satisfaction in your area and have the skills and knowledge described below we want to hear from you! Our neighbourhood areas are within an hour's radius of our base in Peterborough and more than 10% of our homes are now located in Milton Keynes, Bedfordshire, Huntingdonshire and Cambridgeshire. Key Responsibilities To develop positive landlord/ tenant relationships with CKH households living in a defined neighbourhood patch; being a visible and contactable for residents regarding tenancy and estate related matters. To manage all matters relating to the life cycle of a tenancy ensuring compliance with the tenancy agreement, dealing with breaches of tenancy, tenancy management, tenancy sustainment, prompt investigation of suspected sub-letting, abandonment, non-occupation, and eviction processes through to satisfactory resolution. To carry out regular target-based visits to properties where a concern has been raised through internal/external stakeholders and tackle any concerns of poor property conditions promptly. Working with colleagues and external agencies in managing complex cases with tenants suffering from mental ill health or physical disability. To proactively manage and ensure that tenancy processes and procedures are carried out in accordance with legal requirements, statutory timescales, Cross Keys Homes' policies, meeting specific Key Performance indicators thereby ensuring the best use of CKH stock, maximising income, & reducing void costs. To proactively safeguard children and adults by assessing needs and making decisions about timely referrals to statutory agencies where vulnerability has been identified and to work in partnership with statutory agencies to implement safeguarding procedures; including representing CKH at safeguarding meetings and ensuring swift completion of appropriate and agreed actions. To be contactable by residents via regular surgeries in the community to understand and support residents to have a voice about their home and community; taking a proactive, solution focused approach with internal and external partners to manage any emerging/ current issues. Support CKH's area panels with local intelligence to direct and prioritise resource. To take ownership for the management and resolution of emergencies across CKH housing stock including fires, floods, structural issues, repairs, and emergency decants, liaising closely with affected tenants, CKHPL team, contractors, and external agencies to achieve a resolution. To investigate reports of noise transference between properties and liaise with asset management where the property may be attributed to the cause, and also support residents in resolving the issues including facilitating mediation. Knowledge & Experience Comprehensive knowledge and implementation of the Housing Act 1996 where the interpretation of legislation is likely to relate to housing and the tenant/landlord relationship. Comprehensive knowledge of all types of tenancy agreements relevant to the management of CKH housing stock. Knowledge and experience of applying basic child protection and adult safeguarding principles. Experience of dealing with the public in person, via telephone and in writing, in challenging and sensitive situations. Experience of multi-agency working to achieve positive outcomes for individuals and families Experience of working with and supporting vulnerable people with demonstrable achievement of positive outcomes. Experience of working with a diverse customer base where English is not always the first language. Demonstrates an understanding of equality and diversity principles relating to service provision. Experience of successful complaint management and resolution. Experience of working on own initiative, managing a busy workload and appropriate delegation of tasks in an office environment. Experience of working in a performance driven service, successfully achieving set targets and objectives. Skills Ability to make sound decisions about tenancy-related matters under pressure within the context of the wider business needs and applying flexibility where appropriate. Ability to effectively communicate in a patient, sympathetic and tactful way by telephone, in person and in writing with tenants, and corporate colleagues. Ability to understand KPI outputs and evidence demonstrable and measurable outputs. Competent use of IT systems including Housing Management systems and Microsoft applications. Ability to use resident feedback to reflect on performance and demonstrate continuous improvement, including tangible changes that improves residents' lives To meet deadlines, prioritise work and respond positively to changing service requirements, often at short notice. The ability to deliver effective high quality customer care in a pressurised environment . Keeps up to date with housing legislation and has a commitment to personal development through regular training. Enhanced DBS Required Full UK driving licence and access to a suitably insured vehicle for business use required We reserve the right to close this advert early if sufficient interest is received. Therefore, if you are interested in the role, we encourage you to apply without delay! TPBN1_UKTJ

Clearance: Active SC Clearance Required We are currently recruiting for an experienced Senior Mac Support Engineer to join a specialist End User Computing (EUC) team supporting secure, large-scale IT environments across the UK public sector. This is an excellent opportunity for a highly skilled Apple specialist to take on a senior technical role, providing advanced 3rd line support, contributing to endpoint solution design and helping to shape the ongoing development of Mac device management and security. Working within a collaborative technical team, you will play a key role in maintaining and improving enterprise Apple environments, supporting critical services and driving best practice across endpoint management, automation and security. Key Responsibilities Provide expert 3rd line technical support and act as the escalation point for complex macOS issues. Design, implement and optimise Unified Endpoint Management (UEM) solutions, primarily using VMware Workspace ONE, alongside legacy Jamf Pro environments. Support the configuration, deployment, management and security of Apple devices across large-scale enterprise environments. Mentor and provide technical guidance to junior Mac Support Engineers, promoting knowledge sharing and best practice. Contribute to endpoint architecture, technical solution design and the wider EUC technology roadmap. Develop and maintain Bash scripts and automation to improve operational efficiency and reduce manual processes. Support endpoint security initiatives, including Zero Trust principles, access controls and vulnerability management. Participate in major technology projects, including device migrations, hardware refreshes and UEM deployments. Identify opportunities for continuous service improvement, ensuring reliable, secure and user-focused IT services. Essential Skills & Experience Extensive experience providing senior-level macOS support within large enterprise or public sector environments. Strong hands-on experience with Workspace ONE and Jamf Pro, including device configuration, deployment and troubleshooting. In-depth knowledge of Apple Business Manager (ABM), Automated Device Enrolment (ADE), Volume Purchase Programme (VPP) and Apple device lifecycle management. Proven experience providing 3rd line support and resolving complex technical incidents. Strong Bash scripting skills, with experience automating endpoint management processes. Good understanding of endpoint security, Zero Trust architecture, access management and vulnerability remediation. Experience supporting large-scale endpoint migrations, deployments or hardware refresh programmes. Ability to mentor junior engineers and provide technical leadership within a wider EUC team. Excellent troubleshooting, communication and stakeholder management skills. Current, active SC clearance is essential. Desirable Skills Jamf 300 or Jamf 400 certification. Experience integrating systems and automating processes using APIs. Relevant Microsoft or VMware certifications. Experience working within ISO 27001-compliant or similarly security-focused environments. Previous experience supporting government or other highly regulated organisations. Why Apply? This is an opportunity to work in a technically challenging environment supporting business-critical services, with the chance to influence endpoint management strategy and contribute to ongoing technology improvements. You'll be joining an experienced team where your technical expertise, problem-solving abilities and leadership skills will have a direct impact. Interested? If you're an experienced Senior Mac Support Engineer with strong Workspace ONE and Jamf expertise and active SC clearance, we'd love to hear from you. Apply today or get in touch with Skillsbay to discuss the opportunity in more detail

Calling all DevOps Engineer with SFTPGo experience! Our client is replacing their existing Axway Managed File Transfer platform with SFTP-Go running on Red Hat OpenShift (OCP). The solution will be delivered as a shared, secure and resilient file-transfer platform for internal and external clients. You will provide hands‑on platform engineering and infrastructure‑as‑code capability. Working as part of the SFTP-Go delivery team, you will build and automate the platform, establish GitOps and CI/CD delivery, implement onboarding pipelines, support operational readiness and assist with the controlled migration of services from Axway. • Role: DevOps Engineer (with SFTPGo experience), • Day rate: £500 per day (inside IR35), • Pay framework: Umbrella Company, • Start date: ASAP, • Contract duration: 6 months initially (with scope to extend), • Location: Hybrid - 3/4 days in the London office, 1/2 days working from home, • Build and deploy SFTP-Go on Red Hat OpenShift across development, test and production environments., • Implement a highly available platform using PostgreSQL as the database backend and S3-compatible object storage., • Create repeatable infrastructure‑as‑code components for platform deployment, configuration and environment promotion., • Implement resilience, backup, restore and recovery arrangements in collaboration with Infrastructure and Database teams., • Establish GitOps delivery using Argo CD and Git‑centred, pull‑request‑based workflows., • Ensure platform infrastructure and configuration are version controlled, reviewable, auditable and capable of automated reconciliation., • Build an onboarding repository for account and file‑flow definitions, with CI validation against agreed technical and security guardrails., • Apply approved SFTP-Go configuration through Terraform, with secrets and SSH keys managed through HashiCorp Vault or External Secrets Operator., • Design and implement CI/CD pipelines for platform image builds, Helm chart linting and testing, policy validation and promotion between environments., • Automate quality, security and compliance checks within the delivery pipeline., • Develop and maintain reusable Helm charts, Terraform modules, pipeline templates and engineering standards., • Promote controlled, peer‑reviewed change and minimise undocumented manual configuration., • Work with Security and Network Engineers to harden the OpenShift and SFTP-Go platform., • Implement RBAC, network policies, secrets management, TLS/PKI controls and secure connectivity patterns., • Support vulnerability remediation, image assurance, policy‑as‑code and the production‑readiness approval process., • Ensure configuration and deployment practices meet our clients security, audit and operational‑control requirements., • Integrate Prometheus metrics, dashboards, logging and alerting with approved enterprise tooling., • Implement and test PostgreSQL backup and restore processes., • Produce operational runbooks, troubleshooting procedures and recovery documentation., • Support service transition, operational acceptance, training and knowledge transfer to support teams., • Pre‑stage SFTP-Go configuration for migration waves and support testing, cutover, rollback and hypercare activities., • Help translate existing Axway routing and workflow configurations into SFTP-Go Event Manager rules and actions., • Create reusable documentation, templates and golden paths that enable application teams to onboard file‑transfer flows consistently., • Work with Integration Engineers and application teams to troubleshoot migration and onboarding issues., • Experience with Kubernetes and Red Hat OpenShift, • Experience supporting production workloads, including deployments, services, ingress or routes, RBAC, network policies, persistent storage and storage classes., • Practical experience authoring and maintaining non‑trivial Helm charts., • Strong Terraform experience, including reusable modules, peer review and state management for production environments., • Hands‑on GitOps experience using Argo CD or an equivalent tool, with Git‑centred and pull‑request‑based workflows., • Experience designing and implementing CI/CD pipelines using tools such as GitLab CI, GitHub Actions or Tekton., • Strong Linux fundamentals and scripting or automation experience., • Experience working with containers, registries, image build processes and deployment promotion., • Working knowledge of secrets management and TLS/PKI fundamentals, • Exposure to SFTP-Go, Axway or another Managed File Transfer platform. #J-18808-Ljbffr

DXC Technology is seeking a Security Risk Manager to refresh and manage the security risk program across both heritage and digital IT estates in the London Markets account. You will assess risk posture, ensure coverage, and deliver actionable risk reports, aligning findings with remediation plans and driving continual improvement. The role collaborates with Vulnerability and Remediation Managers and requires leading risk management initiatives, reporting to leadership, and maintaining governance #J-18808-Ljbffr

Soros Fund Management LLC (SFM) is a global asset manager and family office founded by George Soros in 1970. With $28 billion in assets under management (AUM), SFM serves as the principal asset manager for the Open Society Foundations, one of the world’s largest charitable foundations dedicated to advancing justice, human rights, and democracy. Distinct from other investment platforms, SFM thrives on agility, acting decisively when conviction is high and exercising patience when it’s not. With permanent capital, a select group of major clients, and an unconstrained mandate, we invest opportunistically with a long‑term view in a wide range of strategies and asset classes, including public and private equity and credit, fixed income, foreign exchange, and alternative assets. Our teams operate with autonomy, while cross‑team collaboration strengthens our conviction and empowers us to capitalize on market dislocations. At SFM, we foster an ownership mindset, encouraging professionals to challenge the status quo, innovate, and take initiative. We prioritize development, enabling team members to push beyond their roles, voice bold ideas, and contribute to our long‑term success. This culture of continuous growth and constructive debate fuels innovation and drives efficiencies. Our impact is measured by both the returns we generate and the values we uphold, from environmental stewardship to social responsibility. Operating as a unified team across geographies and mandates, we remain committed to our mission, ensuring a meaningful, lasting impact. Headquartered in New York City with offices in Greenwich, Garden City, London, and Dublin, SFM employs 200 professionals. Reports To: Head of Cloud SRE & DevOps Engineering Other Key Relationships: Cybersecurity analysts, Software Development engineers We are seeking a mid‑to‑senior level engineer to join our Cloud SRE & DevOps Engineering team in London, focused on building, operating, and evolving the cloud infrastructure and delivery platforms that support our trading and investment systems. This role sits at the intersection of Cloud Engineering, SRE, DevOps, Platform Engineering, and Production Engineering, and is designed for individuals who take ownership of systems running in production. You will be responsible for designing and operating resilient, scalable environments across AWS and Kubernetes, while enabling engineering teams through modern DevOps and GitOps practices. The position reflects a strong Site Reliability Engineering (SRE) mentality, with emphasis on reliability, observability, automation, and operational excellence. You will play a key role in advancing the firm’s cloud transformation strategy, ensuring systems are built for performance, stability, and scale. This is a hands‑on role requiring deep technical expertise, accountability for production systems, and a mindset oriented toward continuous improvement, risk management, and engineering efficiency. The role also contributes to evolving platform capabilities supporting AI and data‑driven workloads. You will work closely with software engineering, cybersecurity, and data teams to deliver secure, scalable, and high‑performing systems, while improving developer experience and platform maturity across the organization. • Design, build, and operate scalable AWS‑based infrastructure supporting trading systems., • Work across hybrid or multi‑cloud environments (AWS and Azure)., • Manage and optimize Kubernetes environments (EKS), ensuring resilience, scalability, and performance., • Utilize Kubernetes ecosystem tooling (e.g., Helm) to support application deployment and lifecycle management., • Develop reusable infrastructure using Terraform and infrastructure as code principles., • Manage the automated delivery of Snowflake configurations through CI/CD pipelines., • Help administer Microsft SQLServer, Snowflake, and AWS Aurora., • Design and maintain CI/CD pipelines using tools such as GitHub Actions., • Promote Git‑based workflows and support GitOps practices (e.g., ArgoCD)., • Improve deployment reliability, consistency, and engineering velocity., • Own and operate business‑critical production systems with a strong focus on uptime, performance, and risk mitigation., • Troubleshoot and resolve complex issues across distributed systems, cloud infrastructure, and Kubernetes environments., • Implement and enhance monitoring, logging, and alerting using tools such as Datadog, AWS CloudWatch, Geneos, and LogicMonitor., • Apply cloud security best practices, including IAM, secrets management, and vulnerability scanning., • Support and optimize relational database systems (e.g., PostgreSQL, MySQL, SQL Server, Aurora), ensuring performance and high availability., • Contribute to backup, recovery, and resilience strategies across infrastructure and data layers., • Drive improvements aligned with SRE principles, including reliability, observability, and operational maturity., • Improve developer experience through automation, standardization, and self‑service capabilities., • Partner with engineering teams to streamline development and deployment workflows., • Support infrastructure for AI/ML and data‑driven workloads, including scalable compute and data processing patterns., • Enable deployment patterns for modern, data‑intensive applications., • Evaluate emerging technologies relevant to AI‑enabled platforms., • Strong hands‑on experience with AWS in production environments., • Experience working in hybrid or multi‑cloud environments (AWS and Azure)., • Deep experience with Kubernetes and containerized systems (Docker, EKS)., • Strong familiarity with Kubernetes tooling, including Helm., • Proven experience with infrastructure as code (Terraform preferred)., • Strong experience building and managing CI/CD pipelines (GitHub Actions or similar)., • Proficiency in Python, Shell, or PowerShell for automation., • Strong understanding of distributed systems, networking, and cloud architecture., • Experience operating and supporting production systems with high availability and performance requirements., • Experience diagnosing and resolving complex production incidents in distributed environments., • Experience supporting relational databases (e.g., PostgreSQL, MySQL, SQL Server, Aurora) in cloud environments., • Hands‑on experience with observability tools such as Datadog, AWS CloudWatch, Geneos, or LogicMonitor., • Strong grounding in DevOps methodologies, including automation, continuous delivery, and infrastructure standardization., • Experience working with Git‑based workflows and modern software engineering practices., • Ability to balance speed, stability, and risk in production environments., • Strong analytical and troubleshooting skills., • Ability to operate effectively in high‑performance, time‑sensitive environments., • Clear communication across technical and non‑technical stakeholders., • Ownership mindset with accountability for critical systems., • Experience supporting AI/ML workloads or data platforms., • Familiarity with LLM APIs, vector databases, or GPU‑based environments., • Exposure to modern data platforms such as Databricks, Google BigQuery, or Amazon Redshift., • Experience supporting trading or investment systems., • Understanding of trading workflows (OMS, order entry, trade booking), market data, or FIX protocol., • Bachelor’s degree in Engineering, Computer Science, Information Systems, or equivalent experience., • Hands‑on experience with cloud platforms such as AWS, Azure, and Snowflake, with a solid understanding of IaaS, PaaS, and SaaS in hybrid environments., • Experience in cloud infrastructure or server‑side development, with a fundamental understanding of containerization and Kubernetes., • Proficiency in programming languages like PowerShell and Python, with experience in DevOps tools such as Terraform, Docker, and Kubernetes., • Deep understanding of CI/CD tools (e.g., Octopus, Bamboo, Azure DevOps, GitHub Actions) and configuration management., • Expertise in automation scripting, infrastructure as code (IaC), and immutable infrastructure using tools like AWS CloudFormation or Terraform., • Familiarity with observability frameworks (Datadog, OpenSearch, and LogicMonitor)., • Familiarity with networking, storage, and database concepts., • Ability to craft clear, effective communications for both technical and non‑technical audiences., • Strong analytical and troubleshooting skills, attention to detail, ability to multitask, and work effectively in a fast‑paced environment., • Proficiency in writing scripts using Python, PowerShell, Bash, and experience with technologies like Docker, Lambda functions, and Kubernetes., • Hands‑on experience with Terraform, Packer, Git, and Jira is considered a plus., • Integration with JIRA and GitHub is a plus., • Experience in designing, developing, and implementing ETL/ELT processes using Snowflake and related technologies. In all respects, candidates need to reflect the following SFM core values: Integrity // Teamwork // Smart risk‑taking // Owner’s Mindset // Humility. Discover how SFM continues to drive impactful investments and supports the global mission of the Open Society Foundations. Base salary plus discretionary year‑end bonus. #J-18808-Ljbffr

We’re looking for a Senior DevOps Engineer to own and evolve our Windows-based infrastructure running in AWS. This role is focused on operational excellence, security, automation, and developer enablement. You’ll work closely with product engineering teams to ensure systems are secure, reliable, and easy to deploy, while driving improvements in CI/CD, monitoring, and infrastructure automation. • Manage and operate Windows Server environments in AWS (EC2), ensuring high availability and performance, • Own patching, vulnerability management, and system hardening processes across Windows workloads, • Monitor and respond to security events, working closely with security teams to remediate risks, • Build and maintain CI/CD pipelines to support consistent, reliable application deployments, • Implement and improve Infrastructure as Code (IaC) using Terraform or similar tools, • Develop automation using PowerShell and scripting to reduce manual operational overhead, • Design and maintain monitoring, alerting, and logging systems to ensure system health, • Partner with product engineering teams to troubleshoot application and infrastructure issues, • Support releases and ensure smooth deployment processes across environments, • Participate in on-call rotations and act as an escalation point for production incidents, • Lead or contribute to incident response and post-mortems, driving long-term improvements, • Extensive experience in DevOps, Cloud Engineering, or Systems Engineering, • Strong hands‑on experience with AWS in production environments, • Proven experience managing Windows Server infrastructure (preferably in AWS), • Experience with patching, vulnerability remediation, and security event handling, • Strong experience building and maintaining CI/CD pipelines, • Experience with Infrastructure as Code (Terraform strongly preferred), • Strong scripting skills in PowerShell, • Experience with monitoring, alerting, and troubleshooting production systems, • Ability to collaborate closely with engineering teams and support production workloads, • You prioritise automation, reliability, and repeatability in everything you build, • You take ownership of systems and drive issues through resolution, • You’re comfortable working in production environments and handling incidents, • You collaborate effectively with engineering and security teams, • You continuously look for ways to reduce toil and improve system stability, • Experience with Active Directory integration in AWS (Managed AD, AD Connector), • Familiarity with Sitecore CMS, other .NET applications and IIS in production, • Experience with AWS Systems Manager (SSM) for patching and automation, • Exposure to containerisation (Docker/Kubernetes), • Experience with Datadog or OpenTelemetry-based observability, • Understanding of FinOps and cloud cost optimisation We believe that great things happen when people connect face-to-face. That's why we work in-person with each other, or with customers and partners, three days a week or more. When you’re not spending time together in one of our offices or other workplaces – like at an Informa event – you get the flexibility and support to work from home or remotely. a welcoming culture with in-person and online social events, our fantastic Walk the World charity day and active diversity and inclusion networks take up to four days per year to volunteer, with charity match funding available too the opportunity to develop your career with bespoke training and learning, mentoring platforms and on-demand access to thousands of courses on LinkedIn Learning. When it’s time for the next step, we encourage and support internal job moves annual leave, birthday leave and the chance to work from (almost!) anywhere for up to four weeks a year • A flexible range of personal benefits to choose from, plus company funded private medical cover, • A ShareMatch scheme that allows you to become an Informa shareholder with free matching shares, • Strong wellbeing support through EAP assistance, mental health first aiders, a healthy living subsidy, access to health apps and more, • Recognition for great work, with global awards and kudos programmes, • The chance to collaborate with teams around the world #J-18808-Ljbffr

About Baringa Baringa is a global consulting firm that partners with leaders to drive change and create value. With deep industry expertise, and enabled by advanced technology, the firm helps clients to deliver with greater confidence and certainty. With over 2,000 people across the UK, Europe, North America, Asia and Australia, the firm combines global insight with local understanding. About Baringa Baringa is a global consulting firm that partners with leaders to drive change and create value. With deep industry expertise, and enabled by advanced technology, the firm helps clients to deliver with greater confidence and certainty. With over 2,000 people across the UK, Europe, North America, Asia and Australia, the firm combines global insight with local understanding. The firm works across energy and resources, financial services, government and public sector, consumer products and retail, pharmaceuticals and life sciences, manufacturing, and technology, media and telecoms, with capabilities spanning strategy, transformation and operational excellence – all powered by advanced technology, data, AI and digital innovation. Clients value Baringa’s collaborative approach and the way its teams integrate seamlessly – all working with a shared understanding of what matters most. The firm is known for its kind, curious experts who listen closely and care deeply about client success as they help clients transform energy markets, modernise financial platforms, expand telecoms and digital networks through advanced data analytics, enable digital services in government, and unlock growth in consumer sectors. Certified as a Great Place to Work around the world, Baringa has been recognised by the Financial Times in 22 categories of its UK Leading Management Consultants rankings, and by Forbes for four consecutive years as one of the World’s Best Management Consulting Firms. Our Water practice are looking for an experienced Consultants to Senior Managers to join the team. Our Retail, Networks and Water division helps regulated utilities and adjacent organisations improve performance, deliver transformation, and strengthen outcomes for customers. We’re at the heart of these industries, driving meaningful and lasting improvement. This is an incredibly important period for our Water clients. Following final determinations, we expect a sustained period of significant transformation set against the context of rising bills and increasing customer financial vulnerability. As we already work with most of these organisations, Baringa is well positioned to help Water Retailers to successfully plan for and navigate these challenges. Within our Water practice, the Water Retail and Customer Value and Affordability team supports clients to protect their most financially vulnerable customers whilst improving value across the customer lifecycle, with a focus on billing and revenue improvement, debt and affordability, and operational effectiveness in customer-facing functions. What you will be doing • Helping clients to understand their customers holistically, and how those that are most in need can be supported, • Work with clients on their major strategic transformation programmes to improve their customer, debt, billing and revenue outcomes through senior strategic advice and thought leadership, data-driven diagnosis, process and journey improvement., • Support or lead benchmarking and performance reviews, helping clients understand how they compare to peers and where to prioritise action., • Take a leading role in customer and operational transformation programmes, supporting planning, governance, risk management and senior stakeholder engagement., • Develop and apply analytical insight, including segmentation, forecasting and KPI reporting, to support better decisions and track impact., • Work alongside technology and system change, helping ensure business requirements are clear and operational outcomes are delivered., • Contribute to business development, including proposals, client conversations, thought leadership or reusable assets in Water Retail and Customer Value Assurance., • You will take on responsibility in line with your experience:, • as a Consultant, owning defined analysis and deliverables, with accountability for quality and detail, • as a Senior Consultant, owning end‑to‑end workstreams and managing day‑to‑day client delivery, • as a Manager or Senior Manager, leading workstreams or engagements, managing teams, and taking accountability for outcomes, quality and client relationships Your Skills And Experience Must Haves • Experience working in customer value, debt, billing, revenue assurance or affordability , within water retail operations, with a solid understanding of the underlying processes, common issues and levers., • You’ve supported or delivered billing or revenue improvement initiatives, such as identifying revenue leakage, improving collections performance, or strengthening controls and governance., • Experience using data and analysis to diagnose problems, build insight, and support clear recommendations and decisions., • You’ve delivered process improvement or operating model work in customer or revenue-focused functions, with an emphasis on practical, implementable change., • You will have worked with a range of stakeholders across operations, finance, digital and data teams, and can communicate confidently at different levels of an organisation., • You’ve produced clear, structured client-facing outputs, including analysis, slides or written recommendations, with strong attention to quality and narrative. Nice to Have • You’ve contributed to, or led parts of, customer or operational transformation programmes, with exposure to planning, governance, risk management and delivery tracking., • Experience working alongside billing, customer relationship management or collections system change, and understand how systems and operations interact., • You’ve contributed to proposals, pitches or internal proposition development, helping articulate client problems, solution approaches and value., • You will have experience developing others through informal coaching, review or line management (expected at Manager and Senior Manager level). What a career at Baringa will give you PuttingPeopleFirst. Benefits Baringa is a People First company and wellbeing is at the forefront of our culture. We recognise the importance of work-life balance and flexible working and provide our staff amazing benefits. Some of these benefits include: • Generous Annual Leave Policy:We recognise everyone needs a well-deserved break. We provide our employees with 5 weeks of annual leave, fully available at the start of each year. In addition to this, we have introduced our 5-Year Recharge benefit which allows all employees an additional 2 weeks of paid leave after 5 years continuous service., • Flexible Working:We know that the ‘ideal’ work-life balance will vary from person to person and change at different stages of our working lives. To accommodate this, we have implemented a hybrid working policy and introduced more flexibility around taking unpaid leave., • Corporate Responsibility Days:Our world is important to us, so all our employees get 3 every year to help social and environmental causes and increase our impact on the communities that mean the most to us., • Wellbeing Fund:We want to encourage all employees to take charge and prioritise their own wellbeing. We’ve introduced our annual People Fund to support this by offering every individual a fund to support and manage their wellbeing through an activity of their choice., • Profit Share Scheme:All employees participate in the Baringa Group Profit Share Scheme so everyone has a stake in the company’s success. Diversity and Inclusion We are proud to be an Equal Opportunity Employer. We believe that creating an environment where everyone feels a sense of belonging is central to our culture and that diversity is paramount to driving creativity, innovation, and value for our clients and for our people. An award-winning workplace You can be a part of our ‘Great Place to Work’ – with our commitment to women and well-being in the workplace for all.Click hereto see some of our recent awards and how we’ve achieved this. Using business as a force for good. We maintain high standards of environmental performance and transparency, which can be seen through our commitment to Net Zero with our SBTI-verified Scope 1, 2 and 3 emissions reduction targets and our support of the Better Business Act. We report our progress publicly and ensure that we are also externally assessed and scored through organisations like CDP and EcoVadis - helping us to continually identify where we can improve. We have a long legacy of supporting the communities in which we work, and offer a variety of ways to contribute, by putting people first and creating impact that lasts. Our Corporate Social Responsibility (CSR) agenda is about giving back to the communities in which we live and work by sharing our skills, talent and time. In essence, we aim to empower and encourage everyone in the firm to contribute to the things we care about, and support registered charities and organisations with a clear social or environmental purpose to increase the positive impact they can have. Join us All applications received will be reviewed by a member of our Talent Acquisition team. We never rely solely on automated screening or AI tools to make hiring decisions. Your application will be considered for employment without regard to race, ethnicity, religion, gender, gender identity or expression, sexual orientation, nationality, disability, age, faith or social background. We do not filter applications by university background and encourage those who have taken alternative educational and career paths to apply. We would like to actively encourage applications from those who identify with less represented and minority groups. We operate an inclusive recruitment process, ensuring reasonable adjustments where needed. Please contact a member of our Recruitment Team to discuss further. Baringa Privacy Notices For UK & EU Your personal data will be retained by Baringa for up to two years, in accordance with our UK Recruitment Privacy Notice / EU Recruitment Privacy Notice, to evaluate your application and meet our legal and reporting obligations. In line with the General Data Protection Regulation (GDPR), you have the right to request access to, rectification, or erasure (subject to legal limitations) of your personal data. For more information, please contact us at For the USA Your personal data may be retained by Baringa for up to two years, as outlined in our Recruitment Privacy Notice (AMER & APAC), to support the recruitment process and internal reporting requirements. Where applicable, and in accordance with relevant federal and state laws, you may have the right to request access to or correction of your personal information. For further details, please contact For Australia & Singapore Your personal data will be retained by Baringa for up to two years, in accordance with our Recruitment Privacy Notice (AMER & APAC), to assess your application and meet applicable reporting and legal obligations. In line with the Australian Privacy Act and Singapore’s Personal Data Protection Act (PDPA), you may have rights to access, correct, or request limited deletion of your personal data. For more information, please contact us at #J-18808-Ljbffr

Do you want to develop your career and make an impact in the fast-growth, fast-moving B2B technology space? At Informa TechTarget, you’ll collaborate and grow alongside some of the industry’s most respected experts. You’ll work with leading brands and be exposed to world-shaping innovations. You’ll apply your energy and intellect to helping clients be faster to market and faster to revenue. We’re a vibrant community of world-class practitioners – over 2000 colleagues strong – with offices in 19 locations around the world. We’re traded on Nasdaq and also part of Informa PLC, a global leader in business-to-business events, digital services, and academic research in the FTSE 100. About Informa TechTarget Informa TechTarget (Nasdaq: TTGT) informs, influences and connects the world’s technology buyers and sellers, to accelerate growth from R&D to ROI. With an unparalleled reach of over 220 highly targeted technology-specific websites and more than 50 million permissioned first-party audience members, Informa TechTarget has a unique understanding of and insight into technology markets. Underpinned by those audiences and their data, we offer expert-led, data-driven, and digitally enabled services that deliver significant impact and measurable outcomes to our clients. We provide our customers with: • Trusted information that shapes the industry and informs investment, • Intelligence and advice that guides and influences strategy, • Advertising that grows reputation and establishes thought leadership, • Custom content that engages and prompts action, • Intent and demand generation that more precisely targets and converts Our organization is committed to sustainability, diversity, wellbeing, and ethical working practices. Visit informatechtarget.com and follow us on LinkedIn. This role is based in our 240 Blackfriars, London office. We’re looking for a Senior DevOps Engineer to own and evolve our Windows-based infrastructure running in AWS. This role is focused on operational excellence, security, automation, and developer enablement. You’ll work closely with product engineering teams to ensure systems are secure, reliable, and easy to deploy, while driving improvements in CI/CD, monitoring, and infrastructure automation. What You’ll Do • Manage and operate Windows Server environments in AWS (EC2), ensuring high availability and performance, • Own patching, vulnerability management, and system hardening processes across Windows workloads, • Monitor and respond to security events, working closely with security teams to remediate risks, • Build and maintain CI/CD pipelines to support consistent, reliable application deployments, • Implement and improve Infrastructure as Code (IaC) using Terraform or similar tools, • Develop automation using PowerShell and scripting to reduce manual operational overhead, • Design and maintain monitoring, alerting, and logging systems to ensure system health, • Partner with product engineering teams to troubleshoot application and infrastructure issues, • Support releases and ensure smooth deployment processes across environmentsParticipate in on-call rotations and act as an escalation point for production incidents, • Lead or contribute to incident response and post-mortems, driving long-term improvements Core Tech Stack AWS (Primary) • CloudWatch (or integration with tools like Datadog) Infrastructure & Automation • Terraform (preferred) or CloudFormation, • CI/CD: GitLab CI, GitHub Actions, Jenkins, or similar Microsoft / Windows • Windows Server administration, • MS SQL Server (standalone and AWS RDS), • Active Directory / identity integration, • IIS and .NET application hosting, • PowerShell scripting and automation Observability & Operations • Monitoring and alerting platforms (Datadog, CloudWatch, etc.), • Logging and incident response tooling What We’re Looking For • Extensive experience in DevOps, Cloud Engineering, or Systems Engineering, • Strong hands‑on experience with AWS in production environments, • Proven experience managing Windows Server infrastructure (preferably in AWS)Experience with patching, vulnerability remediation, and security event handling, • Strong experience building and maintaining CI/CD pipelines, • Experience with Infrastructure as Code (Terraform strongly preferred), • Strong scripting skills in PowerShell, • Experience with monitoring, alerting, and troubleshooting production systems, • Ability to collaborate closely with engineering teams and support production workloads Nice to Have • Experience with Active Directory integration in AWS (Managed AD, AD Connector), • Familiarity with Sitecore CMS, other .NET applications and IIS in production, • Experience with AWS Systems Manager (SSM) for patching and automation, • Exposure to containerisation (Docker/Kubernetes), • Experience with Datadog or OpenTelemetry-based observability, • Understanding of FinOps and cloud cost optimisation What Makes You Successful • You prioritise automation, reliability, and repeatability in everything you build, • You take ownership of systems and drive issues through resolution, • You’re comfortable working in production environments and handling incidents, • You collaborate effectively with engineering and security teams, • You continuously look for ways to reduce toil and improve system stability We believe that great things happen when people connect face-to-face. That's why we work in-person with each other, or with customers and partners, three days a week or more. When you’re not spending time together in one of our offices or other workplaces – like at an Informa event – you get the flexibility and support to work from home or remotely. TechTarget, Inc., doing business as Informa TechTarget, including its subsidiaries is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws. We strictly prohibit and do not tolerate discrimination against employees, applicants, or any other covered persons because of race, color, sex (including pregnancy), age, national origin or ancestry, ethnicity, religion, creed, sexual orientation, gender identity or expression, status as a veteran, and basis of disability or any other federal, state or local protected class. This policy applies to all terms and conditions of employment, including, but not limited to, hiring, training, promotion, discipline, compensation, benefits, and termination of employment. If you would like to request reasonable adjustments or accommodations to assist your participation in the hiring process and, or in the advertised position, please inform the appropriate Talent Acquisition Partner for the role once they have been in touch. Your request will be reviewed and considered in confidence. Informa TechTarget complies with the Americans with Disabilities Act (ADA), as amended by the ADA Amendments Act, and all applicable federal, state or local law. Our benefits include: • Great community:a welcoming culture with in-person and online social events, our fantastic Walk the World charity day and active diversity and inclusion networks, • Broader impact:take up to four days per year to volunteer, with charity match funding available too, • Career opportunity:the opportunity to develop your career with bespoke training and learning, mentoring platforms and on-demand access to thousands of courses on LinkedIn Learning. When it’s time for the next step, we encourage and support internal job moves, • Time out:annual leave, birthday leave and the chance to work from (almost!) anywhere for up to four weeks a year, • A flexible range of personal benefits to choose from, plus company funded private medical cover, • A ShareMatch scheme that allows you to become an Informa shareholder with free matching shares, • Strong wellbeing support through EAP assistance, mental health first aiders, a healthy living subsidy, access to health apps and more, • Recognition for great work, with global awards and kudos programmes, • As an international company, the chance to collaborate with teams around the world By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply #J-18808-Ljbffr

Tokio Marine Kiln (TMK) are looking for an Infrastructure Specialist to join our IT Infrastructure team. This role plays a key part in operating, maintaining and continually improving secure, resilient and automated infrastructure services across on-premises, cloud and hybrid environments. Reporting to the Infrastructure Operations Manager, you will work closely with colleagues across IT, Security, Applications, Service Management and third-party suppliers to support business-critical services, deliver infrastructure improvements and ensure the ongoing reliability, security and performance of TMK's technology estate. • Design, implement and support infrastructure services across on-premises, Microsoft Azure, AWS and hybrid environments (Assist in the planning, design, development and deployment of new infrastructure services and enhancements across multiple environments.), • Maintain and continually improve infrastructure platforms supporting monitoring, backup, disaster recovery, cyber recovery and security patching., • Develop and manage Infrastructure as Code and configuration automation using tools such as Terraform, Ansible and Git., • Build and enhance monitoring and observability capabilities using metrics, logs, traces and service dependency information to support proactive issue detection and resolution., • Provide 3rd line support for infrastructure services and lead the diagnosis and resolution of major and complex incidents., • Review infrastructure performance, resilience, capacity and cost, identifying opportunities for optimisation and continual improvement., • Maintain secure infrastructure configurations, supporting vulnerability management, identity and access controls, encryption and compliance requirements., • Support disaster recovery and cyber recovery testing activities, ensuring recovery procedures remain effective and documented., • Perform preventative maintenance, lifecycle management and technical debt remediation across infrastructure platforms., • Create and maintain high-quality technical documentation, operational procedures, runbooks and knowledge articles., • Collaborate with internal technology teams and external suppliers to deliver infrastructure projects and service improvements., • Participate in the on-call rota and provide support for planned changes and critical incidents outside normal business hours when required., • Strong experience supporting enterprise infrastructure environments across on-premises and cloud platforms., • Excellent knowledge of Microsoft technologies including Windows Server, Active Directory, Entra ID and Microsoft 365., • Strong knowledge of Microsoft Azure and AWS, including compute, storage, networking, identity, monitoring, governance, backup and resilience., • Knowledge of Infrastructure as Code, automation and source control technologies such as Terraform, Ansible and Git., • Strong troubleshooting, analytical and problem-solving skills, with experience resolving complex technical issues., • Understanding of infrastructure security principles, including Zero Trust, least privilege and vulnerability management., • Experience of virtualisation, storage and networking technologies; VMware experience would be advantageous., • Knowledge of observability and monitoring solutions such as Azure Monitor, CloudWatch or LogicMonitor would be beneficial., • Experience with enterprise backup and recovery technologies and disaster recovery processes., • Excellent communication skills with the ability to engage effectively with both technical and non-technical stakeholders. You'll join a collaborative and forward-thinking technology team where innovation, automation and continuous improvement are actively encouraged. You'll have the opportunity to work with modern cloud platforms, infrastructure automation, observability tooling and emerging AI-assisted operational technologies, while supporting business-critical services across a global organisation. This role offers excellent exposure to enterprise infrastructure, cloud transformation and service reliability initiatives, making it an outstanding opportunity to further develop your technical expertise while contributing to the ongoing success of TMK. The successful candidate will be welcomed into the TMK family to help us further our purpose of enabling our clients to fulfil their ambitions whilst benefiting society and our people. We are committed to ensuring a safe, open, inclusive and empowering environment in which all of our people can thrive. All employees have the opportunity to join one or more inclusion network groups or take part in CSR and charitable activities. TMK is signed up to the Disability Confident Employer Scheme and we also accommodate flexible working, subject to the TMK flexible working policy. As an underwriting firm with over 140 years’ experience of protecting clients from changing risks we put our confidence in the ability and talent of our people. We aim to be a Good Company and this means being a great and inclusive company to do business with and being a great place to work. Our culture is founded on our core values of empowerment, inclusion, excellence, integrity, teamwork and innovation. We seek to recruit the best talent by endeavouring to reach diverse talent pools, offering dynamic working arrangements and investing in development. We pride ourselves on our high-calibre workforce and we recognise that the success of our business is dependent on our ability to attract, develop, motivate and retain a diverse and talented group of people. #J-18808-Ljbffr

Location: Remote (London) Employment Type: Full-time, Permanent Rhymetec was founded in New York City in 2015, growing steadily in the areas of compliance, cybersecurity and data privacy. Our mission is to ensure our clients are compliant faster, so they can focus on their core business and less on the complexities of building effective and compliant infosec programs. We are seeking a Cyber Security Analyst (CSA) to join our growing team in the UK! The CSA will be responsible for supporting the development and implementation of solutions that help Rhymetec's clients achieve, manage and measure security metrics and compliance requirements. The role will work closely with their Security Program Manager to help design and deliver security and compliance objectives and have the ability to help drive foundational changes in internal cloud platforms to enhance their security posture. The ideal candidate will have a team first mentality and fit within the core values and culture at Rhymetec. This person will be responsive to both customers and team members with communications, be detail oriented, and hold a high level of autonomy to complete work on time and with quality. • Prepare agendas and supporting materials for client business., • Conduct meetings with clients regularly., • Configure performance monitoring alarms in AWS, Azure, GCP, Datadog and other cloud infrastructures., • Configure Security alarms and Intrusion Detection Systems in AWS, GCP, Azure., • Set up supporting security applications., • Set up mobile device management applications such as Jamf, Jumpcloud, Microsoft Endpoint manager, Hexnode, etc., • Configure and maintain compliance monitoring platforms., • Conduct internal audits, risk assessments, and generate reports., • Conduct Incident Response Tabletop exercises with clients., • Conduct Business Continuity and Disaster recovery tabletop exercises with clients., • Support clients in mapping frameworks/controls such as SOC 2 Type 2, ISO 27001, GDPR, and DORA into actionable items for clients., • Conduct employee access reviews, SaaS vendor security assessments, and Gap assessments., • Triage bug/vulnerability reports from security researchers., • Complete security questionnaires on behalf of clients., • Draft supporting documents for clients’ information security management systems and information security policies., • Gather & maintain evidence of compliance for various frameworks., • Lead engagements with auditors on behalf of clients., • Communicate tasks to clients’ employees and educate clients on security best practices., • Knowledge of compliance and regulatory frameworks (PCI, ISO/IEC, SOC 2, DORA, GDPR), • Strong logical security skills, with experience in cloud security, • Understanding of cloud environments (AWS, GCP, Azure) and integrating security controls through DevOps and Infrastructure as a Service (IaaS) techniques, • Experience in customer service and ability to develop professional relationships with customers, • Bachelor's degree or equivalent experience related to the technology or cyber security field, • 2 + years of work experience in technology or cybersecurity., • Ability to flex and adapt to innovative and changing work demands., • Travel up to 2 weeks out of the calendar year., • Comprehensive, company-funded private medical insurance for employees., • Dental and vision benefits., • Generous annual leave package., • Workplace pension., • Company-paid life assurance., • Wellbeing Support: An annual subscription to TalkSpace, our online counselling and therapy service. Rhymetec is committed to creating a diverse environment and is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment regardless of race, colour, religion, gender, gender identity or expression, sexual orientation, national origin, genetic background, disability, age, or veteran status. #J-18808-Ljbffr

Pay: Up to 750£ per day Umbrella Cyber assurance is an umbrella term for several processes aimed at ensuring individual system components can adequately protect themselves from attacks. Doing so requires not just a one-time effort but spans the complete system lifecycle in a changing environment as security posture may evolve over time adapting to emerging threats or changing systems utilisation. The Cyber Assurance Lead role holder is responsible to ensure that assurance is carried out professionally fulfils its role as last line of defence. They will oversee cyber security controls implementation, from definition in line with risks assessments to operation and maintenance. The Cyber Assurance Lead post holder will conduct assessments and audits, sharing findings and mitigations actions with the relevant stakeholders and teams. The Digital & IT directorate sits within the PMO Unit which in turn sits within the overall delivery department. Digital & IT is accountable for providing Enterprise IT infrastructure and application to the business and to a subset of Tier 1 contract partners. The role holder is given Cyber Assurance services ownership by the Head of IT Operations / IT Operations Manager. The boundaries of the role are typically defined by the SZC Digital & IT's governance structure including policies and procedures related to data management, technology procurement, and project management. The Cyber Assurance Lead post holder operates within these boundaries to ensure that their function aligns with regulatory requirements and industry standards. • Verifying that the specified cyber security controls have been implemented in accordance with the risk management plan, with assessments of threats and vulnerabilities., • Produce detailed plans for cyber security audits., • Assure the implementation, operation and maintenance of security controls., • Write formal reports, and sometimes deliver oral briefings, on the findings of audits and compliance reviews. Results are presented clearly so that both technical staff and general management understand the key points. Present findings to colleagues and managers, in both cyber security and general roles., • Assess the correctness of cyber security risk assessments and risk management plans, taking account of the organisation's business goals., • Review compliance with legal and regulatory requirements, • Provide expert advice on audit, assurance and risk management., • Use specific auditing tools to conduct efficient assessments., • Convince stakeholders of the importance of audit, assurance and security., • Formal method or standards, such as COBIT 5 or ISO27001 and associated best practices., • Legal and regulatory standards on data protection and privacy., • Knowledge across a range of Security technologies: Azure identify management and networking, Windows security controls and firewall technologies., • Security Hardening and Testing., • Vulnerability Management., • Cyber Security Risk Management and Governance in line with Law and Regulations (incl. SNI and export control)., • Knowledge on Privacy and Online Rights., • Familiar with Adversarial Behaviours., • Track record of conducting Cyber Security Risk Assessments within a regulated environment, preferably the nuclear industry., • Experience in Cyber Security Risk Management Plan implementation management., • Previous experience of leading Cyber Assurance audits and overseeing the mitigation actions and controls implementation., • Cyber Security Experience within an Azure Cloud Computing work environment, • CCISP / CCISM (or similar)., • Lead Security Auditor., • Certified Ethical Hacker (CEH). We celebrate and support diversity and are committed to ensuring equal opportunities for both employees and applicants. Rullion celebrates and supports diversity and is committed to ensuring equal opportunities for both employees and applicants. • Field Engineer Bridgwater, Somerset £350 - £475 per day + PAYE/Umbrella • Cyber Project Manager City of London, London £650 - £800 per day • Asset Engineer City of London, London £350 - £351 per hour #J-18808-Ljbffr

As the Security Operations Lead, you will take strategic and operational ownership of Lendable’s internal SecOps capability and serve as the technical relationship owner of our external Managed Security Service Provider (MSSP). You will act as our primary incident responder, with a strategic view on how Lendable’s operational defence should mature as we grow. • Incident Command & Advanced Analysis, • Serve as the primary Incident Commander for high‑severity security escalations, coordinating cross‑functional response efforts. You will have on‑call responsibilities, shared with the wider team., • Act as the escalation point for technical investigations triggered by the MSSP first‑line team., • Maintain and evolve Lendable’s Security Crisis Management plan, running regular tabletop exercises to ensure business‑wide readiness for systemic and supply‑chain risks., • Vendor Governance & Operational Architecture, • Serve as the ultimate authority over our external MSSP. Define KRIs/KPIs, run rigorous service reviews, and hold the provider to strict detection quality standards., • Own Lendable's detection engineering roadmap. Ensure comprehensive, high‑fidelity log ingestion pipelines across all corporate and cloud assets, focusing on minimising false positives and alert fatigue., • Oversee the vulnerability management lifecycle, partnering with IT and Engineering to drive automated remediation workflows over manual tracking spreadsheets., • Capability Architecture & Strategic Maturity, • Develop a Threat Intelligence capability that translates external threats into actionable, proactive defences., • Take operational security ownership across foundational tech stacks such as EDR, Email Security, DLP, and IAM to prevent data exfiltration and identity‑based attacks., • Drive the technical roadmap for SecOps maturity, systematically closing visibility gaps, optimising operational metrics, and integrating AI‑augmented capabilities., • Design the future‑state roadmap for the SecOps function, architecting team expansion requirements in line with operational maturity., • Extensive experience in modern Security Operations, specifically acting as an Incident Commander or Lead Responder in high‑stakes environments., • Clear, modern philosophy on how a SecOps function should run, prioritising automation and vendor optimisation over linear headcount growth., • Familiarity with modern tech stacks (AWS, Kubernetes, CI/CD pipelines) and ability to leverage automation (Python, scripting, or automation platforms) to optimise analyst workflows., • High comfort executing as a senior IC on day one, with leadership maturity to transition into a team manager., • Flexible working: tailored approach per role with hybrid or fully remote options and opportunities for in‑person connection., • Socials & connection: events and opportunities to network beyond the office walls., • Health coverage: support for physical and mental wellbeing, including private health cover., • Retirement & savings: long‑term financial wellbeing through retirement savings plans., • Employee referral programme: earn a competitive bonus for successful referrals., • Office meals & snacks: stocked kitchen and complimentary lunches on in‑office days at select locations., • Sustainable commuting: cycle‑to‑work and electric vehicle salary sacrifice schemes in select locations. #J-18808-Ljbffr

We are supporting a leading international financial services organisation seeking an experienced CyberArk PAM Support Engineer (L2) to join its Identity and Access Management (IAM) Operations team. This is a hands-on technical support position focused on maintaining, troubleshooting and improving an enterprise CyberArk Privileged Access Management (PAM) environment. The successful candidate will have strong CyberArk administration and troubleshooting experience, with a particular focus on PVWA, CPM, PSM and Vault, alongside a genuine interest in production support, incident resolution and BAU operations. This is not primarily an architecture or implementation role. We are looking for someone who enjoys investigating technical issues, resolving incidents and ensuring the stability and security of critical PAM services. Provide second-line (L2) technical support for the CyberArk PAM platform, ensuring service availability, stability and security. Investigate, troubleshoot and resolve incidents involving CyberArk components, including PVWA, CPM, PSM and Vault. Diagnose password rotation failures, reconciliation issues, privileged session connectivity problems and authentication errors. Support privileged account onboarding, safes administration, access permissions and platform configuration. Monitor CyberArk platform health, investigate recurring incidents and contribute to root cause analysis. Manage incidents, service requests, problems and changes through ServiceNow in accordance with ITIL processes. Support vulnerability remediation, security patching, platform upgrades and production releases. Collaborate with third-line engineering, infrastructure, application and security teams to resolve complex technical issues. Maintain operational documentation, troubleshooting guides, knowledge articles and standard operating procedures. Support Active Directory and LDAP integrations within the PAM environment. Contribute to continuous improvement initiatives to enhance service reliability, operational efficiency and security. Participate in on-call support arrangements if required. Approximately 3-5 years of relevant IT/security experience, ideally including 2-3 years working with PAM technologies. Strong hands-on experience administering and supporting CyberArk in a production environment. Practical knowledge of core CyberArk components: PVWA: Privileged access administration, authentication and troubleshooting. CPM: Password management, rotation, reconciliation and incident resolution. PSM: Privileged session management, connection troubleshooting and operational support. Vault: Privileged credential storage, safes management and platform administration. Familiarity with CyberArk Application Access Manager (AAM). Experience investigating and resolving L2 incidents rather than solely processing access requests. Strong knowledge of Active Directory, LDAP and privileged access management principles. Experience using ServiceNow or a comparable IT service management platform. Understanding of incident, problem, change and vulnerability management processes. Experience supporting production environments, including patching, upgrades and release activities. Strong analytical, troubleshooting and communication skills. Experience with SailPoint or other Identity Governance and Administration (IGA) solutions. Knowledge of Microsoft Entra ID / Azure Active Directory. Experience supporting PAM platforms within banking, financial services or other regulated environments. Familiarity with mainframe environments or financial market infrastructure. CyberArk certifications or relevant security qualifications. Scripting or automation experience using PowerShell or similar technologies. We are particularly interested in speaking with CyberArk engineers who: Enjoy hands-on technical troubleshooting and resolving complex production issues. Have practical experience supporting CyberArk within a live enterprise environment. Are comfortable taking ownership of L2 incidents and working with L3 teams when required. Understand the importance of operational stability, security and service continuity. Want to develop their expertise within CyberArk operations rather than move immediately into architecture or project delivery. Rates depend on experience and client requirements #J-18808-Ljbffr