Leaflet Distributor - Leafleting Jobs - London

hackajob is collaborating with J.P. Morgan to connect them with exceptional professionals for this role. \n JOB DESCRIPTION \n Join us to directly influence the future of technology at JPMorganChase. As a Senior Security Architect - SecOps and Vulnerability Management, you'll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real impact are valued here. Grow your skills in a dynamic environment designed for achievers. Help us build products that prioritize security from the start. \n Job Summary: \n As a Senior Security Architect - SecOps and Vulnerability Management in the Cybersecurity & Technology Controls team for International Consumer, you will proactively partner with technology and business colleagues to identify and address security issues. You will embed security culture, lead threat modeling, and drive architecture reviews to ensure our products are secure by design. Your role will be pivotal in managing emerging risks, influencing product strategy, and serving as the subject matter expert for the SecOps and Vulnerability Management strategy as well as embedding detection and response capabilities on a modern technology stack. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging technologies. \n Job Responsibilities: \n\n • Design, scale, and manage the enterprise SIEM architecture to provide centralized visibility and high-fidelity threat detection across all corporate and cloud infrastructure.\n, • Develop and influence advanced SIEM correlation rules, custom data parsers, and detection logic to significantly minimize alert fatigue for the SOC team.\n, • Architect the end-to-end SBOM lifecycle to continuously track, analyze, and mitigate open-source and third-party software supply chain risks.\n, • Design a risk-based vulnerability management platform that automatically prioritizes infrastructure and application flaws utilizing real-world exploit intelligence and asset criticality.\n, • Build and optimize SOAR playbooks to automate incident response workflows, accelerate threat containment, and streamline vulnerability ticketing.\n, • Provide senior technical escalation support during critical security incidents and drive post-incident root-cause analysis to continuously improve defensive controls.\n, • Cultivate a security-first culture across product, technology, and business teams by providing developer-friendly tooling, training, and reusable secure patterns that accelerate rather than hinder delivery.\n, • Act with urgency to manage emerging security issues, monitor risk indicators, and recommend resolutions. Serve as the escalation point for IT Risk and Cyber domains related to Cybersecurity Operations and Vulnerability Management.\n, • Partner with engineering leads, product owners, and vendors to ensure effective technology risk management, translating regulatory and policy requirements into actionable, engineer-friendly controls.\n, • Support audit, regulatory, and risk activities by providing evidence of control effectiveness and translating compliance requirements into automated, repeatable processes.\n, • Identify and address unfamiliar technology components, share best practices, and influence peers to drive continuous improvement in SecOps and Vulnerability Management maturity across the organization.\n, • Uses enterprise-authorized AI capabilities within the work environment to accelerate cybersecurity risk analysis and control assessment, validating outputs and handling data according to sensitivity and security requirements.\n, • Drives reuse-first adoption of AI-assisted security validation within SDLC/toolchain routines, improving control testing, remediation quality, and traceability/auditability in line with resiliency expectations.\n\n Required Qualifications, Capabilities, and Skills: \n\n • Hands-on experience advising and influencing enterprise SIEM platforms (e.g., Microsoft Sentinel, Splunk, Chronicle/SecOps). Must be proficient in writing/reviewing advanced detection logic (KQL, SPL, or YARA rules).\n, • Deep execution knowledge of generating, managing, and analyzing Software Bills of Materials (SBOMs using frameworks like CycloneDX or SPDX) and integrating them with tools like Dependency-Track or Snyk to track open-source vulnerabilities.\n, • Advanced threat modeling experience (e.g., STRIDE-LM) for SIEM data flows, log ingestion pipelines, and vulnerability management platforms\n, • Experience architecting vulnerability programs using tools like Tenable, Qualys, or Wiz, specifically utilizing EPSS (Exploit Prediction Scoring System) alongside CVSS to determine patching prioritisation.\n, • Ability to design and influence automated response playbooks using SOAR platforms\n, • Practical experience creating reference architectures and patterns for engineering teams.\n, • Proven ability to design and deploy automated preventive and detective guardrails at scale.\n, • Ability to solve design and functionality problems independently.\n, • Strong written and verbal communication skills.\n, • Demonstrated success in influencing peers and stakeholders.\n, • Ability to evaluate and recommend emerging technologies for future state architecture.\n, • Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity.\n, • Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.\n\n Preferred Qualifications, Capabilities, and Skills: \n\n • Experience deploying AI-native capabilities within Google SecOps, leveraging Gemini-powered intelligence and ML-based anomaly detection to enhance UEBA and accelerate SOC triage at scale.\n, • Experience partnering with Red/Purple Teams to simulate attacks and actively validate that SIEM rules fire as intended.\n, • The ability to identify thematic vulnerability trends and common denominators to drive highest-impact, lowest-effort Vulnerability remediation.\n, • Experience operating in regulated organizations with a 3LoD model.\n, • Willingness to challenge existing processes respectfully.\n, • Experience translating policy and regulatory requirements into control design for engineers and architects.\n, • Proven ability to upskill and learn modern technologies.\n, • Experience in financial services consumer businesses or Fintech organizations.\n\n #ICBCareers \n ABOUT US \n J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives. \n We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation. \n ABOUT THE TEAM \n Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.

hackajob is collaborating with Google to connect them with exceptional professionals for this role. \n As a Security Sales Specialist for Google Cloud Fraud Defense, you will help us grow our business by building and expanding relationships with new and existing customers. In this role, you will work with customers to deliver true business value, demonstrate product functionality, and provide a comprehensive overview of key business use cases. You will lead day-to-day relationships with cross-functional team members and external customers, leading with empathy, while identifying innovative ways to multiply your impact and the impact of the team as a whole to drive overall value for Google Cloud. \n Google Cloud accelerates every organization’s ability to digitally transform its business and industry. We deliver enterprise-grade solutions that leverage Google’s cutting-edge technology, and tools that help developers build more sustainably. Customers in more than 200 countries and territories turn to Google Cloud as their trusted partner to enable growth and solve their most critical business problems. \n Individual pay is determined by factors including job-related skills, experience, and relevant education or training. \n Ireland: €118000 - €120000 (EUR) + 100% bonus target + equity + benefits \n Learn more about benefits at Google. \n Minimum qualifications: \n\n • Bachelor's degree or equivalent practical experience.\n, • 10 years of experience in a sales role in the enterprise software or cloud space.\n, • 3 years of experience in new logo/new business acquisition.\n, • Experience selling to clients in the enterprise cybersecurity or IT field.\n, • Experience managing the full business cycle (e.g., pipeline management, forecasting, reporting).\n\n Preferred qualifications: \n\n • Experience carrying and exceeding strategic business goals in a sales role.\n, • Experience working with internal/external teams, including account teams, technical leads, procurement, and legal, to inventory existing software estate, build business cases for transformation with implementation plans, and close agreements.\n, • Experience supporting long-term executive relationships, and developing territories/accounts from scratch, while ensuring customer success, adoption and expansion.\n, • Experience prioritizing, planning, and organizing solution-based sales activity within complex business cycles, including qualifying high value accounts and leveraging our partner ecosystem.\n, • Fluency in an additional European language to support customer and stakeholder engagement.\n\n Responsibilities: \n\n • Build relationships with customers as a subject matter expert and trusted advisor, managing complex business cycles, identifying solution use cases, and influencing long-term strategic direction of accounts.\n, • Deliver against quota and achieve or exceed strategic business and growth goals while forecasting and reporting your territory’s business.\n, • Work with Google accounts and cross-functional teams (e.g. Customer Engineering, Marketing, Customer Success, Product, Engineering, Channels) to develop go-to-market strategies, drive pipeline and business growth, close agreements, understand the customer, and provide excellent prospect and customer experience.\n, • Construct and execute an effective territory development plan.\n, • Work with multiple customers and opportunities simultaneously, understanding each customer’s technology footprint and strategy, growth plans, business drivers, competitors, and how they can transform their business using our technologies.\n

hackajob is collaborating with Google to connect them with exceptional professionals for this role. \n As a part of the UK Security Operations (SecOps) team in Google Public Sector, you will deliver, operate and secure private cloud services. Your aim is to provide the flexibility, reliability, and scalability of public cloud for customers with exceptionally high security requirements that can only be met in a private cloud environment. You will deliver and operate these private cloud deployments for the most critical customers, helping scale, secure and maintain the deployment whilst working closely with Google product teams to continually improve our technology. \n As a Red Team Engineer, you will play a critical role in designing, building, and managing cloud-native security platforms with a strong emphasis on Kubernetes-based environments. You will be at the intersection of security and engineering—developing scalable tooling and automating security controls to enable Red Team activities, Purple Team exercises, and comprehensive attack path reviews. You will build and maintain the platforms necessary for developing and deploying proof-of-concept (PoC) exploits and validations, ensuring detection and response capabilities across cloud infrastructure. \n In this engineering-centric role, you will require deep technical expertise in cloud environments, Kubernetes security, and platform automation. You will work closely with Incident Response, Platform Engineering and Security Architects to ensure that security validation and defensive hardening are seamlessly integrated into infrastructure and operational workflows. Your role will require participation in a rotating on-call schedule outside of core business hours and over the weekend to ensure security incidents and critical operations can be supported. \n Minimum qualifications: \n\n • Bachelor's degree in Computer Science, Information Security, a related field, or equivalent practical experience.\n, • 5 years of experience in security engineering, offensive security (Red Team/Purple Team), or platform engineering roles.\n, • Experience with infrastructure-as-code and GitOps (e.g., Terraform, Helm, ArgoCD) and cloud-native security orchestration.\n, • Experience with Kubernetes security (e.g., workload isolation, RBAC, network policies) and container orchestration.\n, • Experience in scripting and development languages (e.g., Python, Go) for building custom security tooling, automation, and exploit Proof-of-Concept (PoCs).\n, • Active, or the ability to obtain, a Developed Vetting (DV) UK security clearance.\n\n Preferred qualifications: \n\n • Advanced offensive security certifications (e.g., OSCP, OSEP, OSCE, GXPN).\n, • Experience in conducting full-scope Red Team engagements and Purple Team exercises in cloud-native environments.\n, • Experience developing custom exploits, adversary emulation scenarios, or security automation frameworks for internal testing.\n, • Knowledge of cloud-native logging, monitoring, and Security Information and Event Management (SIEM) integration for detecting sophisticated adversary tactics.\n, • Understanding of Kubernetes attack surfaces, including container escapes, privilege escalation, and lateral movement techniques.\n, • Current and active UK Developed Vetting (DV) Security Clearance.\n\n Responsibilities: \n\n • Design, develop, and maintain the automation platforms and tooling required to execute Red Team operations, Purple Team exercises, and comprehensive attack path reviews.\n, • Create and deploy Proof-of-Concept (PoC) exploits and validations to proactively test and harden cloud infrastructure security.\n, • Collaborate with security engineering and platform teams to build scalable security validation frameworks that integrate seamlessly into CI/CD pipelines.\n, • Analyse complex cloud and Kubernetes architectures to identify and document potential attack vectors, mapping them against threat models to prioritise security improvements.\n, • Support defensive hardening efforts by providing actionable insights and telemetry from security validation exercises, ensuring continuous improvement of detection and response capabilities.\n\n Must be a British citizen to meet compliance and security clearance requirements. Office location can either be a satellite site in Wiltshire, or London. This is an on-site position, requiring a standard five day per week schedule in the office

hackajob is collaborating with J.P. Morgan to connect them with exceptional professionals for this role. \n JOB DESCRIPTION \n Lead Software Engineer - Proxy/SSE Network Security \n As a Lead Software Engineer at JPMorganChase within the Corporate Sector - Enterprise Technology, you are an integral part of an agile team that works to enhance, build, and deliver trusted market-leading technology products in a secure, stable, and scalable way. As a core technical contributor, you are responsible for conducting critical technology solutions across multiple technical areas within various business functions in support of the firm's business objectives. \n Job responsibilities \n\n • Executes creative Network security software solutions, design, development, and technical troubleshooting with ability to think beyond routine or conventional approaches to build solutions or break down technical problems\n, • Develops secure high-quality production code, and reviews and debugs code written by others\n, • Architect and implement Zero Trust Network Access (ZTNA) patterns for user-to-app and user-to-internet access, minimizing implicit trust and reducing lateral movement.\n, • Build and operate an Identity-Aware Proxy (IAP) / policy enforcement point for web and application access, enforcing identity, device, and context-based policy decisions.\n, • Implement or integrate Secure Gateway / Secure Web Gateway (SWG) capabilities (URL filtering, TLS inspection where approved, malware protection, sandboxing, egress controls, DNS security).\n, • Experience with other SaaS based Secure Gateway vendor e.g. Zscaler, Netskope, paloalto, Broadcom ProxySG etc\n, • Drives team adoption of enterprise-authorized AI-assisted engineering practices within the work environment to improve code quality, delivery speed, and operational outcomes (e.g., AI-assisted code review/refactoring, test strategy acceleration, incident/root-cause analysis support), while establishing consistent validation standards (secure coding, peer review, automated testing) and promoting reuse of effective patterns across the team.\n, • Applies knowledge of tools within the Software Development Life Cycle toolchain, including enterprise-authorized AI-assisted development and automation capabilities, to improve the value realized by automation.\n, • Good understanding of network infrastructure, network security concepts and application layer protocols (http/https) and vulnerability mitigation\n, • Identifies opportunities to eliminate or automate remediation of recurring issues to improve overall operational stability of software applications and systems\n, • Own the US perimeter, proxy, and SSE/SASE engineering roadmap and execution, including intake, prioritization, dependency management, delivery governance, and stakeholder alignment across cybersecurity, network services, operations, and application and platform teams.\n, • Define and operationalize standards, reference architectures, and reusable engineering patterns for perimeter and egress controls, including forward proxy and secure web gateway patterns, access brokering and identity-aware access concepts where applicable, enterprise egress enforcement, segmentation and policy patterns, and design considerations such as TLS inspection and traffic steering, expressed at a pattern and control-integration level.\n, • Provide engineering leadership across edge and connectivity adjacencies that materially impact perimeter posture and service delivery, including Cisco and Arista edge environments, colocation and interconnect ecosystems (including Equinix Fabric), and cloud adjacency patterns including AWS Direct Connect and AWS PrivateLink, with awareness of multi-cloud interconnect considerations.\n, • Establish and run governance mechanisms that accelerate remediation while preserving strong controls, including backlog governance, exception handling, risk acceptance and closure workflows, traceability and auditability requirements, and reporting that ties delivery milestones to risk reduction and resilience outcomes.\n, • Drive operational excellence at scale for perimeter, proxy, and SSE services in the US, including incident, change, and problem management rigor, observability and resiliency validation practices, automation to improve repeatability and evidence quality, reduction of client and partner impact, and execution of Technology Lifecycle Management (TLM) and modernization outcomes tied to stability and risk reduction.\n\n Required qualifications, capabilities, and skills \n\n • 5+ years in network security / SASE/ SSE/ identity security / security engineering (or equivalent depth).\n, • Strong understanding of Zero Trust principles, policy-based access, segmentation, and secure egress.\n, • Hands-on experience with proxy/gateway architectures (forward proxy, reverse proxy, IAP patterns) and secure internet access controls.\n, • Deep knowledge of SAML, OIDC, OAuth 2.0 concepts, JWT (signing, verification, JWKs, rotation, scopes/claims, replay protection).\n, • Demonstrated experience leading effective use of approved AI-assisted software development tools (e.g., for coding, code review, test acceleration, troubleshooting) with the ability to set team expectations for validating AI outputs for correctness, performance, and security.\n, • Strong understanding of responsible AI use in engineering workflows, including data sensitivity considerations, secure handling of inputs/outputs, and adherence to resiliency and security expectations; experience coaching engineers on safe, compliant adoption within delivery practices\n, • Demonstrated experience delivering regional execution ownership in the US (or North America) for infrastructure and/or security platforms, including prioritization, cross-team coordination, and sustained accountability for operational and delivery outcomes.\n, • Experience supervising engineers and delivering cross-team remediation, modernization, and platform programs with clear scope, dependency management, delivery milestones, and measurable outcomes.\n, • Strong knowledge of network and perimeter security architecture and controls, including segmentation, routing and policy considerations, encryption and access control patterns, and defense-in-depth design principles.\n, • Experience designing, delivering, or operating proxy and/or SSE capabilities at enterprise scale, including the ability to translate security requirements into deployable patterns and operational guardrails.\n, • Strong experience translating security requirements into deployable edge and perimeter-adjacent connectivity patterns, including Cisco and Arista environments, and the ability to align engineering decisions to operational and control requirements.\n, • Working knowledge of interconnect and colocation connectivity models (including Equinix Fabric) and cloud adjacency patterns including AWS Direct Connect and AWS PrivateLink, with the ability to incorporate these into perimeter and egress designs without compromising stability or controls.\n\n Preferred qualifications, capabilities, and skills \n\n • Experience integrating US delivery requirements and stakeholder needs into global standards, reference architectures, and governance models while maintaining a consistent global risk posture.\n, • Experience leading AI-threat-informed remediation programs, including adapting standards and engineering patterns to account for high-velocity reconnaissance, rapid technique iteration, and automation-driven exploitation attempts, without sacrificing control integrity or operational stability.\n, • Experience building enterprise-scale governance programs for security engineering, including controls-by-design, exception frameworks, audit-ready traceability, and measurable risk reduction reporting.\n, • Experience with large-scale operations for externally facing or security enforcement services, including observability strategy, resilience testing, incident response alignment, and reduction of repeat incidents and client-impacting events.\n, • Experience designing and operating hybrid edge architectures and cloud interconnect patterns across multiple cloud providers.\n, • Security certifications such as CISSP, CCSP, or comparable credentials.\n\n Employer Description \n JPMorganChase, one of the oldest financial institutions, offers innovative financial solutions to millions of consumers, small businesses and many of the world's most prominent corporate, institutional and government clients under the J.P. Morgan and Chase brands. Our history spans over 200 years and today we are a leader in investment banking, consumer and small business banking, commercial banking, financial transaction processing and asset management. \n We offer a competitive total rewards package including base salary determined based on the role, experience, skill set and location. Those in eligible roles may receive commission-based pay and/or discretionary incentive compensation, paid in the form of cash and/or forfeitable equity, awarded in recognition of individual achievements and contributions. We also offer a range of benefits and programs to meet employee needs, based on eligibility. These benefits include comprehensive health care coverage, on-site health and wellness centers, a retirement savings plan, backup childcare, tuition reimbursement, mental health support, financial coaching and more. Additional details about total compensation and benefits will be provided during the hiring process. \n We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation. \n JPMorgan Chase & Co. is an Equal Opportunity Employer, including Disability/Veterans \n Organization Description \n Our Global Technology Infrastructure group is a team of innovators who love technology as much as you do. Together, you'll use a disciplined, innovative and a business focused approach to develop a wide variety of high-quality products and solutions. You'll work in a stable, resilient and secure operating environment where you - and the products you deliver - will thrive. \n High Risk Roles (HRR) are sensitive roles within the technology organization that require high assurance of the integrity of staff by virtue of 1) sensitive cybersecurity and technology functions they perform within systems or 2) information they receive regarding sensitive cybersecurity or technology matters. Users in these roles are subject to enhanced pre-hire screening which includes both criminal and credit background checks (as allowed by law). The enhanced screening will need to be successfully completed prior to commencing employment or assignment. \n ABOUT US \n J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives. \n We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation. \n ABOUT THE TEAM \n Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.

hackajob is collaborating with Actica Consulting to connect them with exceptional professionals for this role. \n Senior Cyber Security Consultant \n As a Senior Cyber Security Consultant at Actica, you will have the opportunity to provide support to a wide range of high-profile UK public sector, critical national infrastructure and defence organisations. Your help will enable them to protect their ICT investments, and in doing so play a key role in nationally critical projects which make a real difference to people’s everyday lives. \n \n We are a National Cyber Security Centre Assured Cyber Security Consultancy. \n Locations: London, Guildford, Bristol, M4 corridor \n Roles and Responsibilities \n Working either individually or as part of a larger Actica team, you will undertake a number of varying consultancy assignments. Due to the potential variety in assignments your responsibilities may well depend on your own breadth of experience. \n \n Other responsibilities could include: \n\n • Providing security expertise for major system procurements and Agile programmes;\n, • Identifying, analysing and evaluating information risks across a range of programmes, projects and systems;\n, • Explaining to risk owners and other stakeholders the causes, likelihood and potential business impacts of information risks throughout the information system lifecycle;\n, • Authoring and/or supporting the development of security assurance documentation in accordance with risk management frameworks;\n, • Developing or reviewing new security architectures that mitigate the risks posed by new technologies and business practices;\n, • Scoping security testing activities, and explaining the results and required remediation.\n\n Your level of experience will determine the amount or responsibility given to you, as a result you may also have the opportunity to lead assignments and be responsible for supervising direct reports whilst ensuring the overall success of the engagement. \n You will be given the opportunity to undertake a variety of roles throughout the project lifecycle, working across a wide-ranging set of clients and cutting-edge technologies. \n Skills, Knowledge and Expertise \n It is essential that you have the following experience: \n\n • Experience of complex ICT systems in a technical delivery or consulting capacity;\n, • A good understanding of enterprise information and communications technology;\n, • The ability to present and justify conclusions to project teams and business stakeholders;\n, • Proven abilities in delivering to client expectations and requirements;\n, • Strong verbal and written communications skills.\n\n Knowledge of or a desire to learn more about the following would be beneficial for the role: \n\n • Experience in the UK Defence, Critical National Infrastructure and Public Sectors, particularly in ICT and enterprise solutions, is highly desirable .\n, • Structured security frameworks, such as HMG SPF and ISO27001;\n, • Security, technical and enterprise architecture methods such as TOGAF and SABSA;\n, • Technical risk assessments;\n, • Enterprise security packages;\n, • Software development and delivery;\n, • ICT service delivery, including ITIL.\n\n The fast-moving nature of the ICT environment, together with the need to resource multiple, ad-hoc assignments, also requires our consultants to be quick thinkers, proactive and self-motivated – with the ability to apply a structured approach to often unfamiliar subject matter. \n Additional Requirements: \n\n • Must be eligible and willing to obtain UK Government Security Clearance.\n\n Key Attributes for Success: \n\n • Ability to engage effectively with stakeholders, including resolving issues and identifying new opportunities.\n, • Strong interpersonal and influencing skills.\n, • Adaptability to a fast-paced, ever-changing environment.\n\n Working Arrangements: \n\n • Hybrid working model, with an office base in Guildford, Surrey and access to our other offices in London, Swindon and Cheltenham.\n, • Typical working week might involve 2-3 days working at clients’ premises or other locations and the remainder at home or at one of our offices.\n, • Some projects may require up to 5 days per week on-site with colleagues.\n, • The practicalities of some project work means that individuals may need to stay away from home during the working week\n, • Team-based project environment with opportunities to participate in internal initiatives.\n\n Career Development \n You will have the opportunity to further your career in consulting, specialising in the application of information assurance and cyber security expertise to a wide range of business problems. \n \n We provide substantial training leading to nationally recognised certifications, such as chartered or principal status with the UK Cyber Security Council, or certifications such as CompTIA, NIST, PCiIAA, CISMP, CISSP, CREST, ISO27001 Lead Implementer/Auditor, SABSA, and TOGAF. \n \n A Mentor will be on hand to provide support and guidance throughout your journey with Actica. You will also work with a Performance and Development Manager, often outside of your project line of control, who will conduct regular reviews based on project feedback to set career objectives and identify training courses which are both relevant to your current project work, and aligned with your planned career progression. \n Our Commitment to Diversity \n \n Actica aims to nurture a diverse workforce through inclusive working practices, promoting equality in our recruitment activities, and by employing candidates on the basis of merit. Discrimination against individuals on the grounds of protected characteristics is not permitted and we take steps to ensure that our staff are made aware of their legal responsibilities when making hiring decisions. \n We offer a competitive suite of benefits

hackajob is collaborating with Version 1 to connect them with exceptional professionals for this role. \n Company Description \n Version 1 has celebrated 30 years in business and continues to be trusted by global brands to deliver technology and transformation solutions that drive customer success. Our deep expertise enables our customers to navigate the rapidly evolving technology landscape. We foster strong partnerships with global technology leaders including Microsoft, AWS, Oracle, Red Hat, OutSystems, Snowflake, ensuring that our customers are provided with the highest quality solutions and services. \n We’re an award-winning employer reflecting how our employees are at the very heart of what we do: \n\n • UK & Ireland's premier AWS, Microsoft & Oracle partner \n, • 3300+ strong, €350/£300m revenue business \n, • 10+ years as a Great Place to Work in Ireland & UK \n, • Best Workplace for Women in the UK & Ireland by GPTW \n, • Best Workplace for Wellbeing in the UK by GPTW \n\n We’re a core values driven company, we hire people who share our values, and we reward those who display and foster them, it’s deeply embedded within our DNA. Invest in us and we’ll invest in you!. \n Job Description \n A hands-on technical leader who owns the security operations function - threat detection, incident response, phishing response, vulnerability management, and identity and access management and the day-to-day defense of the organisation's systems and data. \n Acts as the internal owner of security operations while coordinating with an outsourced/managed SOC provider and manages reporting on risk posture to leadership. \n Responsibilities: \n\n • Lead and coordinate security operations strategy; act as primary internal liaison with the managed SOC provider (escalations, tuning requests, SLA management)\n, • Own incident response end-to-end: detection, triage, containment, post-incident review whether initiated internally or escalated by the SOC provider\n, • Lead phishing detection and response: triage reported emails, coordinate takedowns, run awareness/simulation programs, and refine email security controls\n, • Build and tune detection rules and hunting queries in Microsoft Sentinel and Defender XDR using KQL\n, • Administer and optimize Microsoft Defender suite (Endpoint, Cloud, Identity, Office 365)\n, • Run vulnerability management lifecycle using Tenable for scanning and ServiceNow Vulnerability Response for remediation tracking and SLAs\n, • Manage Palo Alto firewall policies, rule hygiene, and log integration\n, • Oversee EDR/NDR coverage and correlate alerts across endpoint and network telemetry\n, • Write and maintain PowerShell scripts/automation for response actions and operational efficiency\n, • Coordinate with IT, engineering, and compliance on audits, controls, and architecture reviews\n, • Report metrics, incident summaries, and risk posture to leadership\n\n Qualifications \n Required Skills \n\n • Strong grounding in security operations - SIEM platforms (Sentinel), EDR/XDR (Defender), and SOAR tooling\n, • KQL skills for Sentinel analytics, hunting, and workbooks\n, • Microsoft Defender suite (XDR, endpoint, identity, cloud) administration\n, • Phishing analysis and response (headers, URLs, attachments) and email security tooling\n, • Identity and access management - Entra ID (Azure AD), conditional access, MFA, PIM, identity governance\n, • Vulnerability management tools (Tenable, Defender)\n, • ServiceNow Vulnerability Response for workflow\n, • PowerShell scripting for automation and incident response actions\n, • NDR concepts and cross-telemetry correlation\n, • Experience managing/coordinating a third-party or outsourced SOC\n, • Incident response methodology ( NIST 800-61)\n, • People management + executive communication\n, • Calm, decisive under incident pressure\n, • Familiarity with frameworks like MITRE ATT&CK, NIST CSF, and ISO 27001\n, • Palo Alto Networks firewall policy administration desirable\n\n Certifications: \n\n • Microsoft SC-100, SC-200, SC-300, SC-100, SC-500/AZ-500\n, • CISSP, GCIH\n\n Experience: \n 5-8+ years in SecOps/IR with hands-on Microsoft security stack experience, demonstrated experience managing or working alongside a managed SOC/MSSP, 1-3+ years in a lead role preferred \n Additional Information \n Why Version 1? \n At Version 1, we believe in providing our employees with a comprehensive benefits package that prioritises their wellbeing, professional growth, and financial stability. \n\n • Share in our success with our Quarterly Performance-Related Profit Share Scheme, where employees collectively benefit from a share of our company's profits \n, • Strong Career Progression & mentorship coaching through our Strength in Balance & Leadership schemes with a dedicated quarterly Pathways Career Development programme \n, • Flexible/remote working, Version 1 is tremendously understanding of life events and people’s individual circumstances and offer flexibility to help achieve a healthy work life balance \n, • Financial Wellbeing initiatives including; Pension, Private Healthcare Cover, Life Assurance, Financial advice and an Employee Discount scheme \n, • Employee Wellbeing schemes including Gym Discounts, Bike to Work, Fitness classes, Mindfulness Workshops, Employee Assistance Programme and much more. Generous holiday allowance, enhanced maternity/paternity leave, marriage/civil partnership leave and special leave policies \n, • Educational assistance, incentivised certifications, and accreditations, including AWS, Microsoft, Oracle, and Red Hat \n, • Reward schemes including Version 1’s Annual Excellence Awards & ‘Call-Out’ platform. \n, • Environment, Social and Community First initiatives allow you to get involved in local fundraising and development opportunities as part of fostering our diversity, inclusion and belonging schemes. \n\n And many more exciting benefits… drop us a note to find out more. \n Version 1 is an equal opportunities employer. \n We are committed to building a diverse, inclusive and respectful workplace where everyone feels valued and able to thrive. We welcome applications from people of all backgrounds, identities and lived experiences, and we value the different perspectives people bring including those shaped by disability and neurodiversity. \n We want every candidate to have a positive and accessible recruitment experience. If you need reasonable adjustments at any stage of the process, please contact your recruiter at Version 1. We will consider all requests carefully, respectfully and confidentially. \n Video links: https://www.youtube.com/watch?v=F_d3ELTH5zo

hackajob is collaborating with J.P. Morgan to connect them with exceptional professionals for this role. \n JOB DESCRIPTION \n Quantitative Trading & Research (QTR) is an expert group in J.P.Morgan specializing in statistical modelling, data analytics, balance sheet optimization and other quantitative methods to support the Commercial and Investment Bank (CIB). The QTR Securities Services and Payments team applies cutting-edge AI/ML techniques to fundamentally transform the way we do business by enabling business revenue growth and efficiency within the CIB organization. \n Job Summary \n As an Associate or a Vice President in the Quantitative Trading & Research (QTR) Securities Services and Payments, you will support the business in tackling their most technically complex business problems to optimize revenue and manage risks. This could range from developing AI/ML applications that make business-critical predictions such as client pricing, to handling vast data sets using the J.P.Morgan's Cloud capabilities or optimal hedging policies for interest rate risk management. You will be in tight partnership with the business in identifying their most pressing pain points and iterating towards a solution that really works for them. If you are passionate about solving real-world problems using your quantitative background and experience, this may be just the team for you. \n Job responsibilities \n\n • Work with business leads to develop AI/ML-driven analytics and automation that support their business goals.\n, • Build up a scalable data architecture to handle the large volume of transaction data\n, • Automate existing manual processes and build tools to enable the business to optimize their decision making and deposit management\n, • Build sequential decision making tools to optimize the net interest income of the business under various liquidity, capital and balance sheet constraints\n, • Drive projects end-to-end, from brainstorming, prototyping, data processing, data analysis to model development\n, • Make real-world, commercial recommendations through effective presentations to various stakeholders\n, • Leverage data visualization to communicate quantitative insights to help business decision-making\n, • Work closely with colleagues in Quantitative Research, CIB Treasury, Chief Investment Office, Technology and the Chief Data and Analytics Office (CDAO) to drive the CIB data strategy forward\n\n Required qualifications, capabilities, and skills \n\n • Advanced degree (PhD or MS) or equivalent in a quantitative field: Physics, Mathematics, Computer Science, Engineering, etc\n, • Robust understanding of Machine Learning, Statistics, and Mathematics, both in fundamentals as well as in application\n, • Experience in tackling real world data science problems, end-to-end from prototype to production, using Python\n, • Excellent communication skills (both verbal and written) and the ability to present findings to a non-technical audience\n, • Passion for learning, sharing knowledge, building collaborations, and getting things done\n\n Preferred qualifications, capabilities, and skills \n\n • Participation in KDD/Kaggle competition, Hackathons or contribution to GitHub\n, • You demonstrate hands-on experience in solving sequential decision making problems\n, • Experience in applying LLMs and/or deep learning methods to solve business problems\n, • Experience in working with Cloud and/or HPC environments\n\n ABOUT US \n J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives. \n We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation. \n ABOUT THE TEAM \n J.P. Morgan's Commercial & Investment Bank is a global leader across banking, markets, securities services and payments. Corporations, governments and institutions throughout the world entrust us with their business in more than 100 countries. The Commercial & Investment Bank provides strategic advice, raises capital, manages risk and extends liquidity in markets around the world.