Trabajos mitre en LondonCrear alertas

Company DescriptionWe’reCheckout.com. You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we’re behind many of the digital experiences you use every day. We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers. Whether you want to book a holiday, order food, renew a subscription, or check out online, there’s a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. If you want to do career-defining work, you’ve come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact. With 20 offices across six continents and London as our HQ, we’re shaping the future of fintech – and we’re just getting started.The roleYou will own and evolve the company’s threat detection and threat-hunting capability. This role defines what “good” looks like for detection and increasingly engineers it directly as capability shifts into Cyber Security.This is not an alert-triage role. You are here to understand attacker behaviour, convert it into high-fidelity detection logic, and raise the security baseline for the entire organisation.You will partner closely with Security Operations, GRC and Engineering—setting standards, direction, and expectations—while progressively taking ownership of the most complex and high-value detection and threat engineering work.What you’ll be responsible forEngineering high-fidelity threat detections across endpoint, identity, cloud, and SaaSDefining detection standards, principles, and quality thresholds for Security OperationsConducting proactive threat hunting based on attacker behaviour, not vendor alertsTranslating threat intelligence and incident learnings into durable, reusable detectionsMapping detections to MITRE ATT&CK and real-world attack pathsReducing alert fatigue through logic refinement, correlation, and contextual enrichmentAdvising and supporting during high-severity security incidents; contribute to runbooks and escalation playbooksDriving the transition of advanced detection capability into Cyber Security ownershipWhat we’re looking forProven experience in detection engineering, threat hunting, or advanced SOC rolesDeep understanding of modern attacker tradecraft and intrusion techniques across the attack lifecycleHands-on experience buidling detection logic in modern SIEM platforms (e.g Sentinel)Proficienty with scripting and programmaining (e.g. Python, KQL) to build detection pipelines and automationWillingness to challenge bad detections, weak assumptions, and vanity metricsPragmatic mindset: precision and impact beat coverage theatreExperience operating beyond traditional SOC or MSSP modelsHands-on cloud detection experience (identity, control plane, SaaS)Familiarity with threat intelligence platforms and frameworks such as PCI DSS, NIST CSF, SOC 2, ISO27001, CIS Benchmarks, and MITRE ATT&CK for Cloud.Additional InformationBring all of you to workWe create the conditions for high performers to thrive, through real ownership, fewer blockers, and work that makes a difference from day one.Here, you’ll move fast, take on meaningful challenges, and be recognized for the impact you deliver. It’s a place where ambition gets met with opportunity, and where your growth is in your hands.We work as one team, and we back each other to succeed. So whatever your background or identity, if you’re ready to grow and make a difference, you’ll be right at home here.It’s important we set you up for success and make our process as accessible as possible. So let us know in your application, or tell your recruiter directly, if you need anything to make your experience or working environment more comfortable.Life at Checkout.comWe understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.Curious about what it’s like to be part of our team? Visit ourCareers Page to learn more about our culture, open roles, and what drives us.For a closer look at daily life at Checkout.com, follow us on LinkedIn and InstagramLocationLondonEmployment TypeFull timeLocation TypeOn-siteDepartmentAll Departments

Hello. We’re Teya.Teya was founded on a simple belief: local businesses deserve better.They are the cafés, restaurants, salons, shops and entrepreneurs that bring character to our high streets, create jobs and keep communities moving. Yet for too long, financial services has made life harder for them - with clunky tools, poor support and complexity that gets in the way of running a business.Teya exists to change that.We’re building a financial platform for local businesses across Europe - one built around simple tools, thoughtful design and real human support. Our Members rely on us to help them run their business with confidence, and that responsibility shapes the way we work.We move fast. We care about quality. We stay close to the detail. And we believe great performance and genuine hospitality should go hand in hand.If you want to build meaningful products, solve real problems and make a genuine difference for local businesses, we’d love to hear from youYour MissionAs a SecOps Specialist, you protect Teya by detecting, investigating, and responding to security incidents while ensuring our security operations are reliable, scalable, and continuously improving.You will lead complex SOC investigations, provide L3 support, maintain and improve core security tooling, and build automations and integrations that increase speed, consistency, and quality across security operations.You will work closely with Security Engineering, IT, Infrastructure, Platform, Cloud, and Product teams to reduce risk and embed security effectively across the organisation.You operate across incident response, detection engineering, security tooling, vulnerability management, threat intelligence, telemetry, and automation - turning operational insight into stronger controls and better engineering outcomes.ResponsibilitiesSecurity Operations & Incident Response• Lead end-to-end investigation and response of complex security incidents.• Act as L3 escalation point for SOC analysts and MSSP.• Coordinate across Security, Engineering, IT, Cloud, Legal, and Compliance duringincidents.• Make clear, risk-based decisions under pressure with strong documentation.• Maintain playbooks, runbooks, and incident workflows.• Drive post-incident reviews and ensure improvements are implemented and follow-upscompleted.• Support incident metrics (MTTD, MTTR, recurrence, etc.)SOC Tooling & Platform Operations• Operate and improve SIEM, EDR, email security, case management, and vulnerabilitytools.• Monitor health, coverage, data quality, and integrations.• Troubleshoot ingestion, parsing, API, and configuration issues.• Build and maintain integrations between security tools and internal systems.• Manage upgrades, changes, access reviews, and documentation.• Apply engineering practices (version control, testing, peer review, rollback).• Reduce operational toil through automation and simplification.Vulnerability Management• Analyse and prioritise vulnerabilities based on risk and exploitability.• Work with Engineering and IT to drive remediation.• Track fixes, validate resolution, and escalate high-risk issues.• Improve vulnerability workflows and automation.• Identify recurring issues and recommend preventative controls.Detection Engineering• Build, test, and maintain detection rules, queries, and correlation logic.• Manage full detection lifecycle (build test tune measure retire).• Use version control and detection-as-code where possible.• Reduce false positives and improve detection quality and coverage.• Map detections to threat behaviours (e.g. MITRE ATT&CK).• Validate detections through testing, incidents, and simulations.Log & Telemetry Management• Onboard and maintain log sources across cloud, identity, endpoint, network, and SaaS.• Ensure logs are complete, reliable, and usable for detection and investigation.• Troubleshoot ingestion, parsing, schema, and data quality issues.• Build validation and monitoring for telemetry pipelines.• Offboard unused sources safely with documented impact.• Improve telemetry coverage by working with engineering teams.Threat Intelligence• Monitor threats, vulnerabilities, and attacker techniques.• Translate intelligence into detections, investigations, and remediation actions.• Assess relevance to Teya’s environment and risk profile.• Share actionable insights with relevant teams.• Improve security posture using trends and intelligence.• Gather and utilize intelligence for Shadow AI use-cases.Cross-Functional Delivery• Partner with Engineering and Platform teams on security requirements.• Manage security work in Jira with clear scope and ownership.• Support security projects (tooling, integrations, telemetry, controls).• Contribute to technical design discussions.• Produce clear technical documentation and workflows.• Communicate effectively with technical and non-technical stakeholders.Automation & Engineering• Automate SOC and security operations workflows.• Build scripts, integrations, and event-driven automations using APIs and cloud services.• Apply secure engineering practices (testing, logging, secrets management, errorhandling).• Use version control and peer review for automation and detection content.• Monitor and improve automation reliability.• Explore AI/automation opportunities to reduce manual effort.• Define and track operational and security metrics.Requirements• 7+ years in SOC, incident response, detection engineering, or security engineering.• Experience leading complex security incidents end-to-end.• Strong hands-on experience with SIEM, EDR, and security tooling.• Experience building and tuning detections and queries.• Experience with log onboarding, telemetry pipelines, and data quality issues.• Strong vulnerability management and remediation experience.• Solid understanding of attack techniques, cloud, endpoint, identity, and network security.• Hands-on scripting/automation (Python, PowerShell, Bash, etc.).• Experience with APIs, integrations, and automation workflows.• Familiarity with Git and engineering practices (testing, review, deployment).• Experience using Jira or similar tools for operational delivery.• Strong communication and documentation skills.• Ability to work independently and make decisions under pressure.Nice-to-Haves• Fintech or regulated industry experience.• AWS or cloud-native security experience.• Experience with tools like Exabeam, Splunk, CrowdStrike, Okta, etc.• SOAR or security automation experience.• Threat hunting, purple teaming, or detection-as-code experience.• CI/CD, IaC, or DevSecOps exposure.• REST APIs, OAuth, secrets management experience.• Security certifications (GCIA, GCIH, CISSP, etc.).Ways of Working• Ownership: You own outcomes, not just tasks.• Calm under pressure: You stay structured in incidents.• Risk-based thinking: You prioritise what reduces real risk.• Engineering mindset: You build scalable, maintainable solutions.• Collaboration: You work effectively across teams.• Curiosity: You dig into root causes and system behaviour.• Autonomy: You operate independently but escalate appropriately.• Impact-driven: You focus on measurable security improvement.• High craft standard: You value quality in detections, tooling, and documentation.• Reuse over reinvention: You build for scale and repeatability.• Continuous learning: You stay current with threats and technology.• AI-aware: You look for safe, practical AI first automation opportunitieThe PerksWe trust you, so we offer flexible working hours, as long it suits both you and your team;Health Insurance;Physical and mental health support through our partnership with MyFitness;25 days of Annual leave (+ Bank Holidays);Possibility to visit other Teya offices to meet colleagues in instances when travel is safe and appropriate;Friday lunch in the office;Friendly, comfortable and high-end work equipment and informal office environment;Hybrid work mode policy.Teya is proud to be an equal opportunity employer.We are committed to creating an inclusive environment where everyone regardless of race, ethnicity, gender identity or expression, sexual orientation, age, disability, religion, or background can thrive and do their best work. We believe that a diverse team leads to better ideas, stronger outcomes, and a more supportive workplace for all.If you require any reasonable adjustments at any stage of the recruitment process whether for interviews, assessments, or other parts of the application—we encourage you to let us know. We are committed to ensuring that every candidate has a fair and accessible experience with us.LocationLondon; PortoEmployment TypeFull timeDepartmentEngineering

About The Role:The Security Operations Analyst plays a central role in strengthening OCS’s cyber defence capability. The role exists to make our SecOps function measurably more effective every quarter, by improving how we detect, investigate and respond to threats, and by removing the friction that holds analysts back.We are looking for a proactive engineer who does not wait to be told where the problems are. The successful candidate will actively look for weaknesses in our detection coverage, configuration drift in our security platforms, gaps in our automation and inefficiencies in our processes. They will then propose pragmatic fixes, build them, and measure the outcomeMain Duties & Responsibilities of the Role Detection engineering and tuningBuild, test and maintain high-quality detections across our SIEM, XDR and email security platforms, mapped to the MITRE ATT&CK frameworkContinuously tune existing detections to reduce false positives and improve fidelity, using a data-driven approachIdentify gaps in detection coverage proactively and propose engineering work to close them Develop and maintain detection-as-code practices, including version control, peer review and CI/CD where appropriate Automation and toolingIdentify repetitive analyst tasks and engineer automation to remove them, using SOAR, native platform automation, scripting or low-code approachesBuild and maintain integrations between security tools and adjacent platforms such as identity, endpoint management and ticketingDevelop and maintain dashboards that give analysts and leadership a clear view of operational healthPlatform health and configurationOwn the configuration and ongoing health of assigned SecOps platforms, including SIEM, EDR, email security and identity protection Monitor for configuration drift, agent coverage gaps and ingestion failures, and resolve them at sourceLead technical onboarding of new log sources, telemetry and integrations, ensuring that data is usable, normalised and well documented Threat hunting and proactive defenceConduct regular threat hunts based on intelligence, recent incidents and known weaknesses, documenting hypotheses, methodology and findingsTranslate hunt findings into durable detections, automation or process changesContribute to purple team exercises and adversary emulation, working with internal and external partnersIncident response supportProvide deep technical support during significant incidents, including forensic data collection, log analysis and containment engineering Capture lessons learned from incidents and translate them into engineering improvements that prevent recurrenceContinuous improvementMaintain a backlog of identified weaknesses, ideas and improvements, and work with the Senior SecOps Lead to prioritise itDocument standards, runbooks and engineering decisions clearly, so that knowledge does not live only in individual heads Stay current with the threat landscape, vendor road maps and the broader security engineering community, and bring relevant ideas back into OCS Professional Qualifications required for the job (particularly for compliance purposes or technical requirements of the role) Extensive SecOps experience with a multitude of different toolsRelevant Industry Certifications Experience –previous experience –desirable/essential for technical competence of the role Demonstrable hands-on experience as a security engineer or senior SOC analyst with engineering responsibilitiesStrong working knowledge of at least one enterprise SIEM and one EDR or XDR platform, with the ability to write detections, tune content and operate at a deep technical levelSolid scripting ability, for example in Python, PowerShell or KQL, with a working understanding of APIs and integration patternsPractical understanding of common attack techniques mapped to MITRE ATT&CK, and how they manifest in telemetryA proactive mindset: the candidate must be able to point to specific examples where they have identified a problem, designed a solution and delivered it end to endStrong written communication, including the ability to document detections, runbooks and engineering decisions to a high standardPersonal Characteristics/Attributes Organisational and time management skills Strong interpersonal skillsExceptional written and verbal communication skillsAbility to work under own initiative, as well as part of a teamWillingness and ability to undertake national travel as required Confidence to stand their ground and drive a Security First environmentThe ability to learn new tools quickly and effectivelyAbout The Company:OCS UK & Ireland is a leading facilities management company with 50,000+ colleagues and a turnover in excess of 2bn. We deliver innovative, award-winning services within facilities management, hard services, cleaning, security and catering.Our mission is to make people and places the best they can be for our colleagues, customers and the communities we serve. Our commitment to doing business the right way is rooted in our TRUE values - Trust, Respect, Unity, and Empowerment.Why Work for OCS?Award-Winning Employer: Ranked 36th on Glassdoor’s Best Companies to Work For 2025 — we value and motivate our people.Digital Learning: The OCS Academy offers digital courses and resources to help you build skills and grow your career. Retail Perks With our Hapi app, you can gain access to exclusive discounts, rewards and wellbeing resources.Professional Growth: 600+ live learners across UK&I — Empowering colleagues with further development and qualifications!Flexible Pay: Access a portion of earned wages before payday with our Wagestream App! (Contract Specific)How to Apply:If you are interested in joining a business that encourages professional development, career progression and the chance to work with inspirational people then please click apply and register your interest! You can also sign up to our job alerts when registering which will notify you when other suitable vacancies are available.We are an equal opportunities employer and rely on a diverse workforce with a broad range of knowledge, skills, and backgrounds to deliver our goals. We offer an inclusive and welcoming environment and actively encourage applications from all individuals regardless of race, gender, nationality, religion, sexual orientation, disability, or age.Vacancy ID62780All LocationsLondonAll Locations is a required fieldAdvertising SalaryNot SpecifiedBusiness UnitCorporate / Central SupportHours Per Week37.5Working Days Per Week (e.g. Monday - Friday)Not SpecifiedWorking DaysMonday, Tuesday, Wednesday, Thursday, FridayWorking Days is a required fieldIs a Driving License Required?Driving licence required

Microsoft Security & Compliance Consultant\n 3-Month Rolling Contract£450/day | Outside IR35London Hybrid (3 Days Per Week) \n We're supporting a specialist consultancy engaged on a major Microsoft 365 security and compliance programme for one of its clients. They're looking for an experienced Microsoft Security & Compliance Consultant to lead the assessment, design, and implementation of security monitoring, data protection, and information governance controls across the Microsoft ecosystem. \n This is a hands-on consulting engagement requiring strong technical expertise across Microsoft Defender and Microsoft Purview, coupled with the ability to engage stakeholders, provide strategic recommendations, and deliver practical improvements. The Role\n You'll work closely with technical and business stakeholders to evaluate the current Microsoft security estate, identify gaps and risks, and design a roadmap for improving detection, response, data protection, and information lifecycle management. \n The engagement will focus on three key areas: Security Monitoring & Threat Detection\n\n • Review and assess the deployment of Microsoft Defender technologies across the organisation.\n, • Benchmark existing security configurations against Microsoft best practices and recognised industry standards.\n, • Evaluate alert quality, incident response processes, and overall monitoring effectiveness.\n, • Identify gaps in detection capability and security visibility.\n, • Assess coverage against MITRE ATT&CK techniques and tactics.\n, • Produce a prioritised remediation roadmap, balancing risk, effort, and business impact.\n, • Design alerting, escalation, and operational response processes.\nData Loss Prevention & Information Protection\n\n, • Assess how sensitive information is created, shared, stored, and transferred across the organisation.\n, • Define an information classification and sensitivity labelling framework.\n, • Design and implement Microsoft Purview DLP controls across Microsoft 365 services and endpoints.\n, • Develop a phased deployment approach, including simulation, testing, tuning, and enforcement.\n, • Establish exception management and governance processes.\n, • Integrate DLP monitoring and incidents into wider security operations.\nRetention, Governance & Compliance\n\n, • Review retention obligations and compliance requirements across Microsoft 365 workloads.\n, • Translate regulatory and business requirements into implementable Purview controls.\n, • Design retention policies, retention labels, and automated policy application.\n, • Support GDPR-related processes, including data access and data deletion workflows.\n, • Develop operational procedures and governance documentation.\n, • Ensure appropriate auditability and evidencing of policy operation.\nRequired Experience\n\n, • Extensive Microsoft 365 Security and Compliance experience.\n, • Strong hands-on Microsoft Defender expertise, including Endpoint, Identity, Office 365, Cloud Apps, and associated security controls.\n, • Microsoft Purview Information Protection and Data Loss Prevention.\n, • Purview Records Management and Retention.\n, • Microsoft Entra ID and identity security controls.\n, • Security Operations, alert management, and incident response.\n, • MITRE ATT&CK framework experience.\n, • Strong understanding of GDPR, information governance, and compliance requirements.\n, • Experience delivering security and compliance programmes within enterprise Microsoft environments.\n, • Previous consultancy or client-facing delivery experience.\nDesirable\n\n, • Microsoft Security certifications (SC-200, SC-300, SC-400, MS-102 or equivalent).\n, • Azure security experience.\n, • Experience working within regulated industries.\n, • Previous delivery of large-scale DLP, governance, or compliance transformation programmes.\nWhat's Important\n This role would suit a consultant who combines strong technical delivery capability with the ability to assess complex environments, engage senior stakeholders, and provide clear, pragmatic recommendations that improve both security posture and regulatory compliance. \n 3-Month Rolling Contract | Outside IR35 | £450/day | London Hybrid (3 Days Per Week) \n

Senior Application Security Consultant (SAST/DAST/OWASP )/ DevSecOps Security - Banking - London \n Secure SDLC | SAST | DAST | Threat Modelling | Cloud Security | CI/CD \n Location: London (Hybrid - 8 days onsite per month) \n Contract: 12 Months + extension \n Rate:£500-£550 per day (Umbrella) \n The Opportunity \n We're looking for an experienced Senior Application Security Consultant / DevSecOps Security Architect to join a high-performing Cyber Security function within a large enterprise technology environment. \n Working alongside software engineering, cloud, architecture and DevOps teams, you'll play a key role in embedding security throughout the Software Development Lifecycle, ensuring applications are designed, developed and deployed securely. \n \n This is an excellent opportunity for someone passionate about Secure-by-Design, DevSecOps and modern Application Security within a large-scale cloud environment. \n Key Responsibilities \n\n • Lead application security reviews across business-critical applications and cloud platforms.\n, • Conduct security architecture and secure design reviews.\n, • Perform application security risk assessments and define security requirements.\n, • Lead Threat Modelling workshops using STRIDE, MITRE ATT&CK or similar methodologies.\n, • Embed Secure SDLC principles into engineering teams.\n, • Integrate security tooling into CI/CD pipelines and DevSecOps processes.\n, • Review and analyse SAST, DAST and Software Composition Analysis (SCA) findings.\n, • Work closely with development teams to prioritise vulnerability remediation.\n, • Define security testing requirements and support penetration testing activities.\n, • Produce security standards, technical guidance and best practice documentation.\n, • Act as the Application Security SME across multiple technology programmes.\n\n Essential Skills \n Application Security \n\n • Secure Software Development Lifecycle (SSDLC)\n, • OWASP Top 10\n, • Secure Coding\n, • Secure Design Reviews\n, • API Security\n, • REST APIs\n, • Microservices Security\n, • Application Security Risk Assessments\n\n Threat Modelling \n\n • STRIDE\n, • MITRE ATT&CK\n, • Security Architecture\n, • Risk Assessments\n\n DevSecOps \n\n • CI/CD Security\n, • GitHub Actions\n, • GitLab\n, • Jenkins\n, • Azure DevOps\n, • Security Automation\n, • Shift Left Security\n\n Security Testing \n\n • SAST\n, • DAST\n, • SCA\n, • Vulnerability Management\n, • Penetration Testing\n\n Cloud Security \n\n • AWS, Azure or GCP\n, • Kubernetes\n, • Docker\n, • Container Security\n, • Cloud Security Best Practices\n\n Security Tooling \n Experience with one or more of: \n\n • Checkmarx\n, • Fortify\n, • SonarQube\n, • Veracode\n, • Semgrep\n, • Burp Suite\n, • OWASP ZAP\n, • Snyk\n, • Trivy\n, • Prisma Cloud\n, • Aqua\n, • Wiz\n\n Ideal Background \n You'll ideally have: \n\n • 8+ years in Cyber Security\n, • Strong Application Security or DevSecOps experience\n, • Experience working directly with software engineering teams\n, • Experience embedding security into CI/CD pipelines\n, • Strong knowledge of Secure SDLC\n, • Experience conducting Threat Modelling sessions\n, • Excellent stakeholder management and communication skills\n, • Previous experience within Banking, Financial Services, Insurance or another highly regulated enterprise environment\n\n Contract Details \n\n • 12-month contract\n, • £500-£600 per day (Umbrella)\n, • Hybrid working - 8 days onsite per month in London\n, • Immediate interview availability preferred\n\n *Rates depend on experience and client requirements

Contract - outside IR35 (3 months rolling) London/Hybrid (2-3 days onsite) \n We're seeking an experienced Microsoft Security & Purview Consultant to lead a review and enhancement of Microsoft 365 security, compliance and data governance capabilities. \n Key ResponsibilitiesReview and optimise Microsoft Defender alerting, monitoring, and detection coverage.Conduct gap analysis against security best practices and MITRE ATT&CK.Design and implement Microsoft Purview DLP policies across M365 workloads.Develop sensitivity labels, classification frameworks, and information protection controls.Deliver GDPR-aligned retention policies and lifecycle management within Purview.Produce remediation roadmaps, operational runbooks, and governance documentation. \n Required Skills & ExperienceMicrosoft Defender suite (Endpoint, Office 365, Identity, Cloud Apps).Microsoft Purview, including DLP, Information Protection, and Records Management.Sensitivity Labels, Auto-Labelling, and Data Classification.Retention Labels, Retention Policies, and Data Lifecycle Management.Detection engineering, alert tuning, incident management, and MITRE ATT&CK mapping.Microsoft 365 Security & Compliance architecture.Strong understanding of GDPR and data governance principles.Experience delivering security and compliance projects in enterprise M365 environments.Excellent stakeholder management and documentation skills.

An exciting remote-based opportunity has arisen for a Threat Intelligence Lead to join our Technology team, reporting to the Chief Information Security Officer. You will design and lead the company’s cyber threat intelligence (CTI), security testing and proactive threat-hunting programmes, helping to protect our customers, assets and brands across our global operations.Working closely with our internal and external security operations teams, you will anticipate, assess and mitigate threats. The intelligence you provide will support strategic decisions, incident response and continuous improvements to our cyber resilience. \n This pivotal Cyber Security role requires strong technical expertise, intelligence capability and commercial awareness within a regulated financial environment. \n What you will do as our Threat Intelligence Lead: \n This is an overview and not an exhaustive list of responsibilities. Collaborating with your Line Manager, you will develop your own objectives but focus on all of the following and more: \n\n • \n Lead the development of our CTI function, establishing clear governance, processes, intelligence priorities and measurable outcomes. \n • \n Represent the organisation in key external intelligence-sharing forums, including FS-ISAC, the NCSC’s CiSP and relevant industry partnerships. \n • \n Use the MITRE ATT&CK framework to identify and analyse attacker tactics, techniques and procedures and strengthen our detection capabilities. \n • \n Develop the Proactive Threat Hunting Initiative, using intelligence and security tools to identify emerging threats, attack paths and vulnerabilities and security gaps. \n • \n Oversee the collection and analysis of tactical, operational and strategic threat intelligence, with a particular focus on threats affecting insurance and financial services sectors. \n • \n Proactively search for malicious activity, anomalies and emerging threats across enterprise networks, endpoints and cloud environments. \n • \n Provide clear, actionable intelligence and threat landscaping briefings to senior leaders, Board committees and key stakeholders across the business. \n\n What are we looking for in our Threat Intelligence Lead? \n We’re looking for an experienced Cyber Threat Intelligence professional who can combine their strong technical expertise with the ability to develop our CTI capability and turn complex intelligence into clear, actionable business insights. \n\n • \n MITRE ATT&CK training/certification is essential. \n • \n Experience developing Priority Intelligence Requirements (PIRs). \n • \n Strong experience working closely with SOC, Incident Response, Vulnerability Management, Security Engineering and Risk. \n • \n Experience managing the end-to-end intelligence lifecycle. \n • \n Significant Cyber Threat Intelligence (CTI) or closely related cyber security experience. \n • \n Strong experience analysing strategic, operational, and tactical threat intelligence. \n • \n Practical experience with MITRE ATT&CK, threat actor profiling, IOC analysis, threat hunting and intelligence-led detection engineering. \n • \n Evidence of leading/developing a CTI capability. \n • \n Relevant professional certification such as GCTI, CRTIA, CPTIA, GIAC, or CISSP is desirable. \n\n In return you will be welcomed and supported by our Ardonagh family joining an organisation that cares about you as a person and your wellbeing. Some of the other benefits are: \n\n • \n Holiday entitlement of 26 days plus bank holidays, increasing with length of service \n • \n 35 hour working week \n • \n Opportunity to progress your career across the entire Ardonagh family \n • \n Award-winning learning & development offering and support to obtain professional qualifications to enhance your knowledge and career prospects \n • \n Pension scheme for when you feel it’s time to retire \n • \n 24-hour Employee Assistance support for you and your family’s physical and mental wellbeing \n • \n Corporate perks such as discounted gym memberships, cinema tickets, shopping, Eyecare vouchers, cycle to work and much more \n • \n One day paid volunteering to give back to our communities \n • \n Ardonagh Community Trust (ACT) - raising funds for charity with donation matching in your local community \n • \n The Spotlight Awards, where we celebrate the best of the Ardonagh Group and all the bright talent across our business. \n\n We offer genuine potential for both personal and professional development, come and be part of our story and help us shape our future. So, what are you waiting for? Apply today and one of our team will be in touch.#LI-HC1 \n #LI-Remote \n INDX3 \n #AIB \n Everywhen is an equal opportunities employer, with a growing and thriving diversity, equity and inclusion strategy; we are committed to a working environment that is free from discrimination, is inclusive, and empowers our people to bring their whole self to work and reach their full potential. \n If your application is successful, we will conduct relevant employment checks prior to you commencing employment with us. These will include verifying your recent employment, address, credit history and a standard criminal record check. \n As an Everywhen colleague, you will be expected to uphold our values, act professionally and respectfully towards others, and contribute to a workplace where everyone is treated with dignity and respect. We expect all colleagues to help maintain an environment free from bullying, harassment, victimisation and other inappropriate behaviours, supporting our commitment to an inclusive and high-performing culture. \n Please note: We may close a vacancy prior to the publish end date if the required quality or number of applications has been received. \n Note to recruiters and employment agencies: We will not pay for unsolicited CVs from recruiters and employment agencies unless we have a signed agreement and have requested assistance, in writing, for a specific opening.

Senior IT Security Analyst required to act as a senior technical contributor within a global cyber security team, owning selected cyber security domains end-to-end and driving practical improvements to reduce cyber risk. \n The role combines analyst and engineering responsibilities across security tools, vulnerability and exposure management, web and email security, incident response, and threat-informed remediation. \n The role works closely with infrastructure, cloud, application, identity and business teams to identify security issues, prioritise actions based on real-world attacker behaviour, and deliver measurable improvements to the organisation cyber defence posture. \n Owned or materially contributed to one or more cyber security domains, such as endpoint security, vulnerability management, identity security, network security, incident response or Microsoft 365 / Azure security. \n Used CrowdStrike or equivalent EDR tooling to investigate detections, support incident response and improve endpoint security controls. \n Used Zscaler ZIA/ZPA or equivalent secure web gateway, private access, zero trust or network access security technologies. \n Performed vulnerability assessment, exposure analysis or remediation prioritisation across enterprise technology environments. \n Applied threat intelligence, MITRE ATT&CK or exploitation-based evidence to prioritise mitigations. \n Supported or led cyber security investigations and incident response activities. \n Collaborated with infrastructure, cloud, application, identity and business teams to deliver security improvements. \n Used scripting, queries, automation or data analysis to improve security outcomes. \n\n • Strong hands-on experience administering, tuning and operationalising CrowdStrike Falcon, including endpoint protection, EDR investigations, detection analysis and response workflows.\n, • Strong hands-on experience administering and supporting Zscaler ZIA and ZPA, including policy design, access control, traffic analysis and security troubleshooting.\n, • Practical experience leading or supporting vulnerability and exposure management programmes, including vulnerability analysis, risk-based prioritisation, remediation tracking and validation of control effectiveness.\n, • Strong knowledge of real-world attacker tactics, techniques and procedures (TTPs) and the ability to translate threat intelligence, attack paths and exploitation trends into actionable security improvements.\n, • Experience conducting security investigations and incident response activities, including alert triage, root cause analysis, containment, remediation and lessons learned.\n\n This is a hybrid role working 3 days a week in the London office and 2 days remotely.

Security Engineer (SIEM) – 6 Month Fixed-Term Contract \n We are a leading international professional services organisation with a strong global presence across Europe, the Americas, the Middle East and Asia. We provide specialist advisory services to multinational organisations, financial institutions and investment firms, operating within highly regulated environments. \n We are seeking an experienced Security Engineer (SIEM) to join our Information Security Operations team on a 6-month fixed-term contract. This role will play a key part in enhancing and maturing our security monitoring and detection capabilities. The Role\n \n As a Security Engineer, you will focus on strengthening and optimising our Security Information and Event Management (SIEM) platform. You will be responsible for onboarding new log sources, improving data pipelines, developing advanced detection use cases, and supporting incident response activities. \n This is an excellent opportunity for a security professional who enjoys building scalable, high-performing security monitoring environments and working in a collaborative, fast-paced setting. \n You will report to the Information Security Operations Manager and work closely with the wider security team and internal stakeholders to improve the organisation’s overall security posture. Key Responsibilities\n \n SIEM Engineering & Optimisation \n\n • Enhance and optimise the SIEM platform to improve performance, coverage, and detection accuracy\n, • Assess SIEM architecture and recommend improvements across ingestion, parsing, correlation, and storage\n, • Implement automation and orchestration (SOAR) to streamline security operations\n\n Log Source Onboarding & Integration \n\n • Identify and onboard log sources across cloud, network, endpoint, identity, and application layers\n, • Develop custom parsers, connectors, and ingestion workflows\n, • Collaborate with internal teams and vendors to ensure high-quality telemetry\n\n Detection Engineering \n\n • Design and implement detection use cases aligned to frameworks such as MITRE ATT&CK\n, • Build and tune correlation rules, alerts, dashboards, and anomaly detections\n, • Continuously improve detection quality and reduce false positives\n\n SOC & Incident Response Support \n\n • Partner with SOC analysts to refine detection logic\n, • Support investigations through advanced SIEM querying and data analysis\n, • Provide subject matter expertise during complex security incidents\n\n Documentation & Governance \n\n • Maintain clear documentation of SIEM architecture, data models, and detection logic\n, • Ensure alignment with internal policies, compliance requirements, and industry standards\nSkills & Experience\n \n Technical Expertise \n\n • Strong hands-on experience with SIEM platforms (e.g. Splunk, Microsoft Sentinel, QRadar, Elastic, LogRhythm, ArcSight, Exabeam)\n, • Knowledge of log formats (JSON, syslog, XML, CEF) and ingestion methods (APIs, agents, Kafka, Event Hubs)\n, • Experience in detection engineering, threat modelling, and attacker behaviour analysis\n, • Familiarity with SOAR tools and automation workflows\n\n Security Knowledge \n\n • Understanding of networks, Windows/Linux systems, cloud platforms (Azure, AWS, GCP), identity systems, and endpoint security tools\n, • Knowledge of frameworks such as MITRE ATT&CK and threat hunting methodologies\n\n Essential Requirements \n\n • Degree (or equivalent experience) in a computing or related discipline\n, • Proven experience across IT infrastructure and information security\n, • Relevant certifications (e.g. GIAC, CISSP, SSCP, Microsoft SC-200/SC-100, CompTIA Security certifications)\n, • Strong scripting skills (Python, PowerShell, or similar)\n, • Excellent communication skills with the ability to engage stakeholders at all levels\n, • Proactive, self-starting approach with strong problem-solving ability\n\n Desirable Experience \n\n • Data Loss Prevention (DLP)\n, • Network security and secure remote access solutions\n, • Cloud and software-defined environments (SaaS, IaaS, PaaS, DaaS)\n, • Cyber threat intelligence and open-source intelligence tools\n, • Disaster recovery and business continuity planning\n, • Knowledge of data privacy regulations\nAdditional Information\n\n, • Some out-of-hours work may be required for planned changes or security incidents\n, • Opportunity to contribute to strategic security initiatives and service improvements\n\n If you are a motivated Security Engineer looking to make a tangible impact within a global, highly regulated environment, we would love to hear from you.

Join a well-established biotech company using large-scale genetic data and AI to predict disease risk and advance precision healthcare. \n We’re looking for a Threat Detection Engineer who thrives on innovation and technical ownership. This role is not a traditional SOC position, you’ll focus on building high-impact detection capabilities, shaping how security protects sensitive genomic and AI-driven data at scale. \n This role offers hybrid / remote working options, a salary range of £60,000 - £80,000 and benefits. \n Why This Role is Exciting \n\n • High autonomy: Lead projects from idea to deployment\n, • Innovation-driven: Develop cutting-edge detections beyond standard SIEM rules\n, • Collaborative: Work closely with internal teams and an outsourced SOC partner\n, • Mission-focused: Protect critical healthcare data that supports precision medicine\n\n Key Responsibilities \n\n • Design and develop threat-led detections using threat intelligence and threat-hunting outputs\n, • Create novel analytic techniques for incident detection\n, • Collaborate with an MSP SOC to maintain and tune the detection catalogue\n, • Build automated reporting dashboards using Microsoft Sentinel workbooks\n, • Support security initiatives including ISO 27001 activities and KQL-based tasks\n, • Ensure monitoring coverage across cloud platforms, SaaS apps, and internal systems\n, • Contribute to documentation of processes, tools, and detection logic\n\n What You’ll Bring \n Must-Have Skills & Experience: \n\n • Previously worked as a Threat Detection Engineer or in a similar role.\n, • Strong proficiency in KQL and hands-on experience with Microsoft Sentinel\n, • Familiarity with Microsoft Defender tools (Endpoint & O365)\n, • Exposure to Azure cloud logging and Kubernetes environments\n, • Knowledge of attacker TTPs and MITRE ATT&CK frameworks\n, • Proactive, collaborative, and innovative mindset\n\n Desirable / Nice-to-Have: \n\n • Experience with Python, Terraform, or CI/CD pipelines\n, • Familiarity with Microsoft Purview, Entra ID, DLP, or Insider Risk tools\n, • Understanding of ISO 27001, Agile ways of working\n, • Knowledge of statistics, data science, or AI/ML applied to cybersecurity\n, • Relevant certifications (MS-500, AZ-500, SC-series, Security+, GSOC, CCSK)\n\n Perks & Benefits \n\n • Hybrid / remote working options\n, • Flexible benefits package\n, • Opportunity to innovate and make a real impact in threat detection\n, • Work in a small, fast-paced, highly collaborative team\n, • Contribute to advancing precision healthcare using genomic data and AI\n\n Ready to build next-generation threat detection and protect life-changing data Apply today! \n Important Information: We endeavour to process your personal data in a fair and transparent manner. In applying for this role, Additional Resources will be acting in your best interest and may contact you in relation to the role, either by email, phone, or text message. For more information see our Privacy Policy on our website. It is important you are aware of your individual rights and the provisions the company has put in place to protect your data. If you would like further information on the policy or GDPR please contact us. \n Additional Resources Ltd is an Employment Business and an Employment Agency as defined within The Conduct of Employment Agencies & Employment Businesses Regulations 2003. \n Keywords: Cyber Threat Engineer, Detection & Response Engineer, SIEM Engineer, Security Detection Engineer,T hreat Hunting Engineer, Security Automation Engineer, SOC Engineer, Incident Response Engineer, Cloud Security Engineer, Network Security Engineer, Cybersecurity Analyst (Threat Focus), Threat Intelligence Analyst, Security Monitoring Engineer, Endpoint Security Engineer, Cyber Defense Engineer

SOC Analyst \n Location: London (Hybrid, 2 days a week on-site)Hours: 2PM - 10PM (Supporting US East Coast business hours)Salary: £60,000 + Benefits \n We're partnering with a leading global digital media organisation to recruit a SOC Analyst who will play a key role in protecting a large-scale, international technology environment. \n This is an excellent opportunity for a security professional with experience in SOC operations, threat detection, incident response, and threat hunting to join a mature security function that is investing heavily in its cyber capabilities. You'll work within a hybrid Security Operations model alongside an MSSP, helping to strengthen detection capabilities, improve threat visibility and drive continuous security improvement across cloud and on-premises environments. \n Your role: \n\n • Investigate, triage and respond to cyber security alerts, incidents and threats\n, • Act as the key operational contact for the Managed Security Service Provider (MSSP), ensuring effective monitoring and incident response\n, • Prioritise and manage security incidents based on business risk and impact\n, • Conduct proactive threat hunting across endpoint, network, identity and cloud environments\n, • Develop and optimise SIEM detection rules, correlation logic and monitoring use cases\n, • Investigate security activity across cloud platforms including AWS, Azure and GCP\n, • Analyse threat intelligence and emerging attack trends to enhance detection and response capabilities\n, • Identify gaps in monitoring coverage and implement improvements to strengthen security visibility\n, • Investigate and respond to DLP alerts and potential data security incidents\n, • Support vulnerability management by helping prioritise remediation activities based on risk and exploitability\n, • Contribute to SOC maturity through automation, process improvements, playbook development and post-incident reviews\n, • Support and optimise security tooling including SIEM, EDR, email security, cloud security and threat intelligence platforms\n, • Produce security reports, operational metrics and technical documentation while collaborating with technology and security teams\n\n What We're Looking For \n We're keen to speak with candidates who have: \n\n • Experience within a Security Operations Centre (SOC), Cyber Security Operations or Incident Response environment\n, • Hands-on experience investigating security alerts using SIEM, EDR and security monitoring tools\n, • A strong understanding of Modern cyber threats, attacker techniques and the MITRE ATT&CK framework\n, • Experience analysing security events across endpoint, network, identity and cloud platforms\n, • Knowledge of incident response and risk-based incident prioritisation\n, • Experience working with or alongside an MSSP\n, • Exposure to threat hunting, threat intelligence and detection engineering\n, • Strong analytical and problem-solving skills with the ability to identify root causes and recommend improvements\n, • Excellent communication skills with the ability to produce clear technical documentation and incident reports\n, • A proactive mindset and genuine passion for cyber security and continuous learning\n\n Why Apply? \n\n • Join a recognised global organisation with a large and complex technology estate\n, • Work with modern security technologies across cloud and hybrid environments\n, • Opportunity to influence detection engineering, threat hunting and SOC maturity initiatives\n, • Collaborative security culture with strong investment in cyber security\n

Job ID: 1283169101Location: London, GB, SE1 2AFJob Function: Technology ConsultingEmployer: EY Global ServicesApply by: 2026-09-13Company: EYAt EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world. Security Architect - Manager: About EY:At EY, we are committed to building a better working world. Our Cybersecurity Consulting Practice is rapidly expanding, and we are investing in our capabilities to meet the increasing demand for cybersecurity solutions. Join us and be part of a global team of over 13,000 professionals dedicated to delivering cutting-edge security transformation programs and services. The Opportunity:As a Manager in Cybersecurity, you will leverage diverse ideas and perspectives to deliver technical excellence at global scale and provide relevant insights to our clients. You will play a pivotal role in managing cybersecurity engagements, building client relationships, and leading teams to develop innovative solutions that address complex security challenges. Location - London, Manchester or Scotland Key Responsibilities Build and maintain strong client relationships and shape clear security outcomes, milestones and measures aligned to regulatory obligations. Deliver security architecture work packages and produce HLD and LLD artefacts, data flows and threat models for enterprise and IT/OT converged environments Create cloud security architecture for sitetocloud connectivity, establishing secure landing zones, segmented network connectivity, identity and secrets management. Analyse systems and networks and propose segmentation, secure access methodology and reference designs that engineering teams can implement Enhance governance and compliance by aligning solutions and controls to various frameworks and standards such as NIST 800, ISO 27001 and NIS2. Foster a positive team environment by mentoring and coaching junior staff, conducting performance reviews, and contributing to their professional development. Support business development activities, including proposal writing and impactful presentations to potential clients. Contribute to recruiting, retaining, and training cybersecurity professionals, ensuring a high-performing team. Skills and Attributes for Success: Ability to work and thrive in a fast-paced, result driven environments with the ability to establish credibility and demonstrate expertise quickly. Communication skills, both oral and written, tailored to diverse audiences. Strong team player who values collaboration and encourages open communication among team members. Experience in coaching and developing colleagues. To Qualify for the Role, You Must Have: Experience in cybersecurity with a strong track record in security architecture delivery, including IT/OT convergence Advanced Visio skills and fluency with TOGAF or equivalent architecture methods. Working knowledge of NIST CSF, IEC 62443, NCSC CAF, EU NIS2, cloud and network fundamentals Willingness to travel for client delivery (domestic and international as required). Ideally, You’ll Also Have Experience supporting security transformation programs and modernisation. Experience integrating SOC/MDR, SIEM/SOAR and familiarity with MITRE ATT&CK. Experience designing remote and local access models including PAM and ZTNA with identity integration. Familiarity with Microsoft cloud security stack including Microsoft Sentinel, Microsoft Entra ID, Microsoft Defender for Cloud and secure connectivity on Azure Advanced certifications such as CISSP, TOGAF or SABSA, Cloud Security e.g. Microsoft SC-100/AZ-500, CCNA or equivalent. Ability to obtain and maintain UK Government security clearances. Join Us: At EY, you’ll have the chance to build a meaningful and fulfilling career, supported by an inclusive culture and cutting-edge technology. Together, we can create a better working world for all. Please note: The successful candidate must undergo and pass checks in line with SC (Security Check) clearance standards after joining EY. These checks may include, but are not limited to, verification of identity, right to work in the UK, employment history, proof of address may be required and unspent criminal convictions. Candidates must be a UK national or have been a resident in the UK for a minimum of five years and ensure that they have not spent more than six months outside the UK. What we look for We’re interested in people with integrity who can collaborate with people from a diverse range of backgrounds and crucially a growth mindset. What we offer We offer a competitive remuneration package where you’ll be rewarded for your individual and team performance. Our comprehensive Total Rewards package includes support for flexible working and career development, and with FlexEY you can select benefits that suit your needs, covering holidays, health and well-being, insurance, savings and a wide range of discounts, offers and promotions. Plus, we offer: Continuous learning: You’ll develop the mindset and skills to navigate whatever comes next. Success as defined by you: We’ll provide the tools and flexibility, so you can make a meaningful impact, your way. Transformative leadership: We’ll give you the insights, coaching and confidence to be the leader the world needs. Diverse and inclusive culture: You’ll be embraced for who you are and empowered to use your voice to help others find theirs. If you can demonstrate that you meet the criteria above, please contact us as soon as possible. Apply Now TCCyberUKI2026 Cyber2026EY | Building a better working world EY is building a better working world by creating new value for clients, people, society and the planet, while building trust in capital markets.Enabled by data, AI and advanced technology, EY teams help clients shape the future with confidence and develop answers for the most pressing issues of today and tomorrow.EY teams work across a full spectrum of services in assurance, consulting, tax, strategy and transactions. Fueled by sector insights, a globally connected, multi-disciplinary network and diverse ecosystem partners, EY teams can provide services in more than 150 countries and territories.

SOC Shift Lead - Watford, UK \n \n\n • Package of up to £78,000 Depending on Experience\n, • Full time onsite role - shift work\n, • Active SC clearance required, and you must be eligible for DV\n\n \n ABOUT THE CLIENT \n Our client is a well-established cyber security organisation delivering managed security services to customers operating within highly secure and mission critical environments. \n \n They continue to invest heavily in their Security Operations Centre capability and are now looking for an experienced SOC Shift Lead to strengthen their technical leadership team. \n \n THE BENEFITS \n\n • Opportunity to work on high-profile security operations\n, • Career progression within a growing cyber security team\n, • Ongoing technical training and certification support\n, • Exposure to enterprise and critical national infrastructure environments\n\n \n THE SOC SHIFT LEAD ROLE \n As SOC Shift Lead, you will oversee the operational delivery of a busy Security Operations Centre while remaining hands-on with technical investigations. You will act as the senior escalation point during your shift, leading incident response, mentoring analysts and ensuring high standards across investigations. \n \n You will also: \n\n • Lead Major Incident investigations and technical response activities\n, • Analyse advanced network, endpoint and cloud security events\n, • Drive improvements to detection logic and operational processes\n, • Coach and develop SOC Analysts through real-time guidance and regular feedback\n, • Work closely with engineering teams to enhance detection capabilities\n\n \n SOC SHIFT LEAD ESSENTIAL SKILLS \n\n • Previous experience as a Senior SOC Analyst, SOC Team Lead or SOC Shift Lead\n, • Strong experience leading complex cyber security investigations\n, • Commercial experience with Microsoft Sentinel and Splunk Enterprise Security\n, • Excellent understanding of MITRE ATT and CK, incident response and threat-informed defence\n, • Strong networking knowledge including TCP/IP, DNS, HTTP/S, SMTP, LDAP and VPN technologies\n, • Experience analysing Windows, Linux, endpoint, identity, network and cloud security logs\n, • Ability to mentor and develop technical teams\n, • Active SC Clearance, eligibility for DV\n\n \n TO BE CONSIDERED \n Please either apply through this advert or emailing me directly via

Artificial Intelligence. Actual Impact.At Docebo, we’re using AI to change how people learn at work—and we mean actually change it. We’re an AI-powered learning platform that helps organizations create, deliver, and manage training all in one place. But our real mission goes deeper: we help teams move faster, work smarter, and focus on the work that truly matters. Our platform is built with intelligent, time-saving tools that personalize learning, eliminate busywork, and turn training from a checkbox into a superpower. The result? Better experiences for learners and real results for businesses.We’re shaping the future of learning with a team that isn’t afraid to challenge the status quo. If you're excited by the idea of using AI to make work-life better for real people–you’ll feel right at home here. And it’s not just what we build, it’s how we show up. At Docebo, our values aren’t just posters on the wall—they guide how we work every day. We call it the Docebo Heart: trust by default, assume positive intent, and create space for different perspectives to thrive.So… what are you waiting for? Join 900+ Docebians around the world and help us reinvent the way people learn, because learning never stops.Role OverviewThe Senior Security Engineer will play a central role in securing Docebo's cloud infrastructure, with a primary focus on AWS environments. Working closely with Cloud Infrastructure & Operations, Engineering, and other security teams, this role is responsible for designing, implementing, and continuously improving cloud security controls across all layers of the stack — from infrastructure provisioning and container orchestration to runtime detection and compliance enforcement. This is a hands-on, high-ownership role for someone who thinks in terms of risk and moves quickly to reduce it. The role also includes participation in an on-call rotation for security incidents affecting Docebo systems.Responsibilities (including but not limited to):Cloud Security Architecture & Hardening: Own the security posture of Docebo's AWS environments. Define and enforce secure account structures, service control policies (SCPs), guardrails, and baseline configurations across multi-account setups. Evaluate and improve network segmentation, IAM boundaries, and data protection controls. Identify and remediate misconfigurations using CSPM tooling and manual review.Infrastructure as Code Security: Partner with Cloud Infrastructure to integrate security controls into IaC workflows. Define guardrails to catch insecure configurations before deployment. Own security scanning in CI/CD pipelines and promote a shift-left approach to cloud security across engineering teams.Incident Response & On-Call: Participate in the on-call rotation for security incidents, including triage, containment, and escalation for after-hours events. Lead investigation and root cause analysis for cloud security incidents with clear written post-mortems. Leverage automation and AI tooling to reduce mean time to detect and respond.Cloud Detection & Threat Monitoring: Build and maintain detection coverage for cloud-native threats (privilege escalation, unusual API activity, lateral movement, data exfiltration, and more). Leverage CloudTrail, GuardDuty, and SIEM integrations to maintain visibility across the AWS estate. Align detection logic with MITRE ATT&CK for Cloud.Vulnerability & Configuration Management: Own vulnerability management for cloud workloads — prioritizing findings from cloud configuration assessments, and runtime protection tools. Drive remediation with Engineering and Infrastructure teams, and build automated enforcement where manual review doesn't scale.Identity & Access Management: Define and enforce least-privilege principles across AWS IAM, service accounts, and federated identity. Review and improve IAM policies, permission boundaries, cross-account roles, and access patterns. Reduce standing access and enforce JIT access where appropriate.Development of Security Best Practices: Develop and document best practices, policies, and procedures for cloud security. Provide guidance and training to engineering and infrastructure teams to promote a security-aware culture.Vendor relationships: Maintain relationships with security vendors for technical issues, ensure smooth operations of security tools and services, and escalate problems or incidents to vendors when required.What it takes to be successful:You're a cloud security practitioner who operates with a builder's mindset. You understand AWS deeply — not just its security services, but how misconfigurations and design decisions create real risk. You're comfortable reading IaC, reviewing IAM policies, and diving into CloudTrail logs to reconstruct what happened. You know how to work with engineering and infrastructure teams as a partner, not a gatekeeper — and you can communicate risk clearly to stakeholders who don't live in the cloud console. You're comfortable being on-call and making decisions under pressure.Additionally, holding security-related certifications such as those from ISC2, ISACA, SANS, or CompTIA, and having Cloud Architecture certifications (AWS Security Specialty, AWS Solutions Architect, or equivalent) will significantly enhance your effectiveness in this role.We know great candidates don't always check every box. If you're excited about this role but don't meet 100% of the qualifications listed, we still encourage you to apply — we'd love to hear from you.Requirements:5+ years of relevant work experience in cybersecurity, with a strong focus on cloud security in production AWS environments.Deep hands-on experience with AWS security services: IAM, SCPs, CloudTrail, GuardDuty, Config, KMS, VPC security, and more.Good knowledge of Kubernetes security — including RBAC, pod security standards, network policies, admission controllers, and secrets management.Experience with cloud security posture management (CSPM) and cloud workload protection (CWPP/CNAPP) tools.Experience securing IaC pipelines (Terraform, CloudFormation) and integrating security scanning into CI/CD workflows.Good experience with container and image security — scanning, runtime protection, supply chain risk.Experience with SIEM and detection engineering — building and tuning cloud-native detection rules, threat hunting across CloudTrail and application logs.Familiarity with automation platforms and AI-driven security tools to streamline detection, enrichment, and response.Experience with Infrastructure as Code (IaC) and scripting (Python, Bash, or similar) to develop custom security tooling and automate workflows.Strong IAM fundamentals: least privilege, cross-account roles, permission boundaries, federated identity, and privileged access management.Comfortable working across Azure/GCP in addition to AWS — multi-cloud exposure is a plus.In-depth knowledge of information security principles and cybersecurity frameworks relevant to cloud environments: MITRE ATT&CK for Cloud, CIS Benchmarks, AWS Well-Architected Security Pillar, NIST CSF, SOC 2, ISO 27001.Willingness and ability to participate in an on-call rotation, including after-hours response.Ability to produce clear, comprehensive, and well-structured documentation (e.g. incident reports, architecture reviews, runbooks, and security standards) and to communicate complex technical issues effectively to non-technical stakeholders.Our Hybrid Work Philosophy Great work can happen anywhere but coming together helps us go further. Our team spends three days a week in the office (Tuesday-Thursday) to collaborate, solve problems, and learn from each other. With flexibility the rest of the week, it’s a balance designed to help everyone do their best work and keep growing.Our Total Rewards PhilosophyOur Total Rewards Philosophy centers around three core areas to reward and care for our People:Rewarding Impact: We lead with competitive pay to reward the impact, skills and traits that fuel our success.Fostering Holistic Wellbeing: We care deeply about and invest in the whole person with programs that support our people’s physical, mental, and financial well-being.Empowering Our Talent Culture: We build a culture of trust and empowerment by designing our rewards and benefits with transparency, equity, and flexibility, enabling our people to do their best work and stay for the long haul.Our Promise to You Financial Wellness: Own a piece of Docebo through our Employee Share Purchase Plan (ESPP) at a 15% discount, plus a competitive compensation package.Your Well-Being, Covered: You’ll get access to health benefits, so you can get the care you need when you need it.Rest, Relax, Repeat: Rest and recharge with paid vacation days, two company-wide Docebo Days, floating holidays for cultural celebrations, and your birthday off!Family First: We provide coverage offering you time with your little one(s) so you can soak up all those precious moments. Fun fact: we had 30 Docebian babies join the family in 2025!Connections That Count: Connect with global communities through our Employee Resource Groups (including PRIDE, DWA, BIDOC, and Green Ambassadors) and company-wide events that keep the fun rolling all year long.About DoceboAt Docebo, we create seamless, AI-powered learning experiences for over 3,000 customers worldwide. We have successfully achieved two IPOs (TSX: DCBO & NASDAQ: DCBO), been recognized as a top SaaS e-learning solution, and are growing exponentially in the process. We're a global company, with office across North America, EMEA, APAC, and beyond. Our team is guided by five core values—Grow Together Win Together, Build with Our Customer, Clear is Kind, Own Outcomes, Progress Over Perfection—that shape everything we do. If this resonates with you, now is the perfect time to join one of the fastest-growing learning technology companies in the world. Docebo is an Equal Employment Opportunity employer. We are committed to diversity and inclusion in our workforce. All qualified applicants and employees will receive consideration for employment regardless of their race, colour, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, citizenship status, age, disability, genetic information, or any other category protected under applicable law.As a federal contractor, Docebo is committed to the principles of affirmative action and equal employment opportunity for protected veterans and individuals with disabilities. Docebo does not discriminate because of protected veteran status or on the basis of disability, and Docebo takes affirmative action to employ and advance in employment qualified protected veterans and individuals with disabilities.Any individuals requiring a reasonable accommodation or would like to voluntarily disclose a disability or protected veteran status to assist with their employment application should send an e-mail to recruiting_accommodations@docebo.com. The email should also include the position you’re interested in.Compensation Range: 67.8K - 90.4KLocationLondon, UKAddress3rd Floor, 48 Gracechurch St, London, England, EC3V 0EJEmployment TypeFull timeLocation TypeHybridDepartmentInformation Technology and SecurityCompensation67.8K – 90.4K • Offers Bonus • 10%This range represents our target hiring range for this position in Italy. In addition to base pay: This position is eligible for a discretionary bonus incentive. Payouts are based on individual and company performance and are not guaranteed. The final compensation, including the specific National Collective Bargaining Agreement (CCNL) level, will be determined during the interview process based on the candidate’s background and qualifications.

Location: London (On-site Shift Pattern) \n Salary: Up to £70,000 + On-Call Allowance + Benefits \n Security Clearance: Active SC Clearance required (Must be a British National and eligible to obtain higher levels of UK security clearance) \n \n We're working with a leading organisation supporting critical national security programmes, who are looking to recruit an experienced Security Analyst to join their 24/7 Security Operations Centre (SOC) \n \n You'll play a key role in monitoring, detecting and responding to cyber security threats across complex enterprise environments, working with industry-leading technologies including Elastic and Splunk. This is an excellent opportunity for someone who thrives in a fast-paced operational environment and enjoys working on high-profile, mission-critical systems. \n \n Key Responsibilities \n\n • Monitor security alerts and events across enterprise environments using Elastic and Splunk\n, • Investigate, triage and respond to security incidents in line with established playbooks and SLAs\n, • Perform threat hunting and proactive analysis to identify malicious activity.\n, • Analyse logs from endpoints, networks, cloud services and security tools to detect suspicious behaviour\n, • Escalate incidents where appropriate and work closely with engineering and incident response teams\n, • Develop and improve SIEM detection rules and alert tuning to reduce false positives\n, • Produce clear incident reports and maintain accurate documentation\n, • Participate in the on-call rota and support major incident response when required\n, • Contribute to the continuous improvement of SOC processes, tooling and operational procedures\n\n \n Skills & Experience \n\n • Experience working within a 24/7 Security Operations Centre (SOC) or equivalent cyber security environment\n, • Strong hands-on experience using Elastic and/or Splunk for security monitoring and investigations\n, • Good understanding of SIEM technologies, log analysis and threat detections\n, • Knowledge of security frameworks such as MITRE ATT&CK and the Cyber Kill Chain\n, • Experience investigating phishing, malware, endpoint, identity and network security incidents\n, • Familiarity with Windows, Linux, Active Directory and cloud environments (AWS, Azure or Microsoft 365)\n, • Strong analytical and problem-solving skills with the ability to make decisions under pressure\n, • Excellent written and verbal communication skills\n\n \n Essential Require \n\n • Active SC Clearance\n, • British National, with eligibility to obtain higher levels of UK security clearance\n, • Willingness to work a 24/7 rotating shift pattern (4 days on rotation)\n, • Able to work from the London office as required\n

Important: you must be UK based – we are unable to provide visa sponsorship, and you must meet all 5 minimum requirements below. \n \n What we’re offering (saves you scrolling straight to the bottom): \n\n • Salary: £27,000 + overtime\n, • Holiday: 25 days paid holiday plus bank holidays (increases by 1 day per year worked up to 30 days)\n, • Flexible Working: We love getting the team together in the office, so we typically spend three days per week together in our lovely London office (39 floors up in Canary Wharf 👀). The rest of the time, you can work wherever you’re most productive.\n, • Working Hours: Monday to Friday 9:00am - 5:30pm with the potential to move to be part of a 24/7 shift rota on promotion.\n, • Training: Budget for one certification/course per year\n, • Socials: We meet regularly to have a drink, throw some axes\n, • Start Date: September/October 2026\n\n \n Minimum Requirements \n You must meet all 5 of these minimum requirements, please do not apply if you do not – your application will be rejected. \n\n • Education: You must hold a 2:1 degree (ideally in a science, mathematics or technical subject) or have completed an apprenticeship in a relevant subject area (e.g. Cyber Security, Information Security, Computer Science) studied at a UK/US/Australian/New Zealand/Canadian University or college. You must also hold grade BBB at A-Level (or equivalent) or a Merit T-Level in a relevant subject.\n, • Experience: No experience is necessary, but you should be able to clearly articulate what a role in a Cyber Security Operations Centre entails.\n, • IT literacy: highly confident using Microsoft Office 365 with some experience of other Microsoft tools such as Defender or Azure.\n, • Fluent in English: you must be highly proficient with business-level written and spoken English\n, • Location: must be within a reasonable commute of Canary Wharf, London\n\n \n About CyPro: \n\n • We are an innovative cyber security start-up united in a shared mission: to redefine cyber security for small and medium-sized businesses (SMBs).\n, • Our Founders – Jonny & Rob – spent most of their early careers delivering cyber security for large enterprises and central government. They saw a clear need for a new approach to cyber security as SMBs became increasingly targeted by cyber criminals.\n, • Together, CyPro is already setting new standards, defining innovative solutions and equipping its clients with the cyber security they need to prevent attacks, secure bigger clients and scale to new heights.\n, • We are growing quickly, and the next few years promise more of the same. Joining CyPro means becoming an integral part of our mission and joining a team of industry experts embarking on this journey.\n\n \n The Role: \n\n • This isn’t your typical SOC Analyst role where you’re pigeonholed into one narrow specialism. At CyPro, you’ll have the opportunity to get involved in a wide range of areas including monitoring, incident response, threat intelligence, detection engineering, automation and internal security operations.\n, • You’ll play a key role in our Security Operations Centre, delivering 365-day monitoring, detection and response to our growing customer base. You’ll contribute to building out our capabilities, improving tooling and processes, and shaping how we operate as the function matures.\n, • As the team grows further, you’ll have the flexibility to focus more deeply on the areas that interest you most – whether that’s advanced detection engineering, threat intelligence, incident response leadership or platform automation. If you’re ambitious and want to help shape something rather than simply follow a process, this is the right environment for you.\n\n \n Core Responsibilities: \n Client Support & Reporting \n\n • Prepare weekly and monthly SOC reports highlighting activity, incidents and trends.\n, • Join governance calls with senior analysts or managers to present SOC insights.\n, • Communicate independently with clients via email, messenger and Teams call to address queries around incidents, detection coverage and service issues.\n\n Security Monitoring & Incident Response \n\n • Monitor security alerts generated by Microsoft Sentinel, Microsoft Defender, Datadog and Elastic.\n, • Assess severity and impact of alerts, triage and investigate incidents independently.\n, • Execute containment and remediation actions using defined runbooks and playbooks.\n, • Correlate data across platforms to identify anomalies, malicious patterns and attacker behaviour.\n, • Produce detailed incident reports, RCA and after-action reviews for internal and client use.\n, • Maintain accurate incident records in JIRA Service Management.\n\n Detection Engineering \n\n • Develop and implement new detection rules in Microsoft Sentinel aligned to the MITRE ATT&CK framework.\n, • Draft and optimise KQL queries for detection and threat hunting.\n, • Refine existing detection logic based on false positive analysis and threat evolution.\n\n Threat Intelligence & Enrichment \n\n • Analyse threat intelligence feeds to identify relevant threats and vulnerabilities.\n, • Review and tag IOCs and TTPs observed in client environments.\n, • Participate in proactive threat hunting sprints to identify risks before they escalate.\n\n Internal Security Operations \n\n • Support the management of CyPro’s internal security environment.\n, • Administer and monitor identity management solutions.\n, • Manage and maintain our MDM platform to ensure secure and compliant device management.\n, • Help ensure our internal security posture reflects the same standards we deliver to clients.\n\n Process Improvement & Automation \n\n • Design and develop Logic Apps to automate incident response workflows.\n, • Contribute to evolving internal runbooks and knowledge base articles.\n, • Identify gaps in visibility, tooling or processes and propose solutions.\n\n Professional Development \n\n • Work toward and maintain relevant certifications (e.g. SC-200, AZ-500).\n, • Stay up to date with current threat trends, attacker TTPs and defensive strategies.\n, • Actively participate in ongoing training and capability development.\n\n \n Who we're looking for: \n\n • Self-Starters – we’re not a large FTSE organisation with a procedure for everything. You’ll need to operate in an environment with few guardrails and help build things as we grow.\n, • Ambitious & Driven – whether your goal is to lead a team, specialise technically or move into leadership in future, we’ll support your development.\n, • Always Improving – we’re a growing business and want our people to grow with us.\n, • Innovative – we are constantly evolving to deliver new solutions to our clients. You’ll need to be the kind of person that brings new ideas to the table and follows them through to realisation.\n\n \n What we think you need to be successful: \n Education & Experience \n\n • University educated with a degree from a UK/US/Australian/New Zealand/Canadian University, or an apprenticeship in a subject relevant area\n, • A levels (or equivalent) of grade BBB or above, or a Merit T-Level in a relevant subject\n, • An understanding of and ability to articulate what a role in the SOC entails.\n, • Ability to quickly grasp new technical tasks using a range of different tools.\n, • SC-200 certification or willingness to achieve it\n, • Within commuting distance (~1 hour) of Canary Wharf, London\n\n \n Technical Skills \n\n • Familiarity with scripting and automation development (you do not need to be fluent in any particular coding language, but you should be able to demonstrate an understanding of how scripting and other tools (such as AI agents) can be used to streamline tasks.\n, • High-level understanding of the Microsoft security stack (e.g. Defender, Sentinel, Purview, etc.)\n, • Familiarity with incident response frameworks and security best practice\n\n \n \n Soft Skills \n\n • Problem-Solving: Identify, troubleshoot and resolve complex security issues.\n, • Attention to Detail: Ensure accurate detection, analysis and documentation.\n, • Analytical Thinking: Comfortable interpreting complex security data.\n, • Communication: Clear and confident communicator, able to translate technical issues for non-technical audiences.\n, • Calm Under Pressure: Maintain composure during incidents and escalate appropriately.\n, • Accountable & Humble: Take ownership and learn from experience.\n, • Curious: Dive into data sets and problems to uncover patterns and root causes.\n\n \n Our Three-stage Hiring Process: \n\n • Video Introduction (5 mins, Remote): You will be invited to send a short video introduction telling us more about your experience and interest in Security Operations\n, • Initial Discussion (20 minutes, Remote): An initial chat to learn more about you and the role.\n, • Assessment Centre (2 hours, London): A mini project on-site (no prep required), some quick tests, followed by a final interview with the founders and our SOC Manager.\n\n\n, • Seniority Level\n\n

Hi All, I am looking for an AI Platform Engineer to work for a major bank in Sheffield. This will be 3 days onsite and 2 days from home. This is £600 - 650 Umbrella. Senior AI Platform Engineer Overview We are looking for a Senior AI Platform Engineer to help design, develop, and expand our internal AI platform, supporting cybersecurity analysts through intelligent workflows, automation, integrations, and AI-assisted capabilities. The role involves building scalable AI-driven services, integrating with enterprise security technologies, and contributing to the evolution of a modern platform that combines software engineering, cloud services, artificial intelligence, and cybersecurity. The ideal candidate enjoys solving complex technical problems, can work across multiple technologies, and is comfortable learning new tools and frameworks as the platform evolves. Responsibilities Design, develop, and maintain AI-driven platform capabilities. Build scalable backend services and APIs. Develop workflow orchestration and automation capabilities. Design integrations with enterprise security and operational platforms. Build connectors to third-party products and cloud services. Develop reusable components and SDKs that can be shared across multiple applications. Contribute to platform architecture, design discussions, and technical direction. Evaluate emerging AI technologies and determine how they can be incorporated into the platform. Work closely with security analysts to understand operational challenges and translate them into technical solutions. Produce maintainable, well-tested, and well-documented code. Participate in technical reviews and architectural discussions. Required Skills Software Engineering Strong software engineering fundamentals. Experience designing modular, maintainable systems. Experience building REST APIs and backend services. Experience developing reusable libraries or frameworks. Experience working with asynchronous and event-driven systems. Strong debugging and problem-solving skills. Development Strong Experience in one or more modern software development technologies, such as: Python TypeScript Go Experience learning new languages, frameworks, and technologies quickly is considered equally valuable. Artificial Intelligence Experience working with modern AI technologies, including some of the following: Large Language Models (LLMs) AI agents Retrieval Augmented Generation (RAG) Prompt engineering Structured outputs AI workflow orchestration Model evaluation AI governance and safety Experience with multiple AI providers is desirable. Cloud & Platform Engineering Experience with cloud-native development, such as Azure or AWS, including: Storage services Authentication and identity Queues or messaging Serverless or container-based workloads Monitoring and observability Secure application development API & Integration Development Experience integrating with third-party platforms using REST APIs, SDKs, or webhooks. Experience building integrations with enterprise systems is highly desirable. Security Good understanding of cybersecurity concepts, such as: SIEM SOAR Identity and Access Management Threat Detection Incident Response Authentication and Authorization Experience with offensive security techniques, adversary emulation, or penetration testing is beneficial but not required. Desirable Experience Experience with one or more of the following is beneficial: Splunk Microsoft Sentinel CrowdStrike Microsoft Defender ServiceNow SOAR platforms MITRE ATT&CK Detection Engineering Security Operations (SOC) Nice to Have Experience building AI platforms rather than standalone AI applications. Experience designing workflow engines or orchestration systems. Experience developing SDKs or internal developer platforms. Experience with vector search or semantic search. Experience working with structured data pipelines. Experience designing scalable cloud architectures. Experience contributing to technical strategy and architecture. Personal Attributes We're looking for someone who: Is naturally curious and enjoys learning new technologies. Can work independently while collaborating effectively with others. Takes ownership of technical problems from concept through implementation. Thinks beyond individual features and considers long-term platform design. Is pragmatic and balances innovation with maintainability. Communicates technical concepts clearly to both technical and non-technical stakeholders. What Success Looks Like The successful candidate will help evolve the platform by:Designing robust, reusable platform capabilities.Building high-quality integrations with enterprise technologies.Delivering AI-enabled workflows that solve real operational problems.Contributing to the long-term architecture and technical direction of the platform.Helping establish engineering standards and best practices as the platform grows.Job Title: AI Platform EngineerLocation: Sheffield, UKRate/Salary: 600.00 - 650.00 GBP DailyJob Type: ContractTrading as TEKsystems. Allegis Group Limited, Maxis 2, Western Road, Bracknell, RG12 1RT, United Kingdom. No. 2876353. Allegis Group Limited operates as an Employment Business and Employment Agency as set out in the Conduct of Employment Agencies and Employment Businesses Regulations 2003. TEKsystems is a company within the Allegis Group network of companies (collectively referred to as "Allegis Group"). Aerotek, Aston Carter, EASi, Talentis Solutions, TEKsystems, Stamford Consultants and The Stamford Group are Allegis Group brands. If you apply, your personal data will be processed as described in the Allegis Group Online Privacy Notice available at https://www.allegisgroup.com/en-gb/privacy-notices.To access our Online Privacy Notice, which explains what information we may collect, use, share, and store about you, and describes your rights and choices about this, please go to https://www.allegisgroup.com/en-gb/privacy-notices.We are part of a global network of companies and as a result, the personal data you provide will be shared within Allegis Group and transferred and processed outside the UK, Switzerland and European Economic Area subject to the protections described in the Allegis Group Online Privacy Notice. We store personal da ta in the UK, EEA, Switzerland and the USA. If you would like to exe rcise your privacy rights, please visit the "Contacting Us" section of our Online Privacy Notice at https://www.allegisgroup.com/en-gb/privacy-notices for details on how to contact us. To protect your privacy and security, we may take steps to verify your identity, such as a password and user ID if there is an account associated with your request, or identifying information such as your address or date of birth, before proceeding with your request. If you are resident in the UK, EEA or Switzerland, we will process any access request you make in accordance with our commitments under the UK Data Protection Act, EU-U.S. Privacy Shield or the Swiss-U.S. Privacy Shield.TPBN1_UKTJ

Join a leading consulting and technology team helping organisations securely adopt AI, GenAI, LLMs and agentic systems .Youll combine strong cyber security consulting with emerging AI security , advising clients on AI risks, threat modelling, secure architecture and practical security controls.Key responsibilities:Assess security across cloud, identity, applications, data and infrastructure.Threat model LLMs, AI applications and agentic workflows .Address risks including prompt injection, data leakage, excessive agency and insecure tool use.Design AI security guardrails, access controls, monitoring and human-in-the-loop controls .Help organisations safely adopt AI within SOC, GRC and incident response .Translate complex technical risks into clear business recommendations.Looking for:Strong cyber security, security architecture or risk background.Experience with cloud, IAM, application security and security operations .Understanding of GenAI/LLMs and AI security risks .Threat modelling experience.Strong stakeholder and communication skills.Knowledge of NIST AI RMF, OWASP LLM, MITRE ATLAS or ISO 27001 is desirable.Certifications such as CISSP, CISM, CCSP or GIAC are advantageous.UK security clearance may be required , with some roles requiring 5 years continuous UK residency.TPBN1_UKTJ

Knowledge of tools or technologies: Practical and demonstrable knowledge of MITRE ATT&CK, NIST CSF, ISO 27001, CIS Controls, threat-led penetration testing, vulnerability management, cloud security, IAM, SIEM/SOAR, EDR, application security, network security, and secure architecture design. Security

Alternatively, Red Team experience running adversary simulations as an operatorFamiliarity with common security testing tools: Burp Suite, nuclei, nmap, or similarWorking knowledge of OWASP Top 10 and at least some exposure to OWASP LLM Top 10 or MITRE ATLASAbility to triage findings and communicate

Senior Analyst - Tactical IntelligenceUK (Manchester, Cheltenham or London), Spain (Madrid), the Netherlands (Rijswijk)The purpose of this role is to strengthen the organisation’s cyber defence capabilities by generating high‑quality, actionable threat intelligence that informs detection, response, and strategic decision‑making. The position exists to proactively identify, analyse, and communicate emerging threats, including adversary behaviours, malware, and infrastructure, while ensuring intelligence outputs are operationally relevant, technically robust, and aligned to business and security priorities.Operating across the full intelligence lifecycle, the role transforms complex technical findings into meaningful insights for both technical and non‑technical stakeholders, enabling the organisation to anticipate adversary activity, enhance detection engineering, support incident response, and advance intelligence‑led security operations. The role also contributes to continuous improvement through research, tooling development, collaboration with wider security teams, and active participation in the broader threat intelligence community.Key ResponsibilitiesThreat Intelligence Analysis and Research:Identify, track, and document threat actors, their TTPs, infrastructure, and indicators of compromise across the full intelligence lifecycle.Monitor and analyse Command and Control (C2) infrastructures, malicious domains, and emerging campaigns, providing context-rich assessments that combine technical findings with geopolitical and regional context.Map observed threat activity to established frameworks (e.g., MITRE ATT&CK) and produce structured intelligence outputs using formats such as STIX/TAXII.Conduct technical analysis of malware samples to support intelligence assessments, including static and dynamic analysis to extract configurations, identify capabilities, and attribute activity to known threat actors.Stay current with the evolving threat landscape, proactively identifying emerging threats, novel attack vectors, and shifts in adversary tradecraft.Documentation and Reporting:Produce high-quality finished intelligence products, including threat actor profiles, campaign analyses, and technical advisories, suitable for both technical and non-technical audiences.Document and report on malware behaviour, TTPs, and indicators derived from technical analysis, leveraging internal TIP tooling to generate and disseminate IoCs.Contribute to external communications through blog posts, conference presentations, or published research that highlights significant threat intelligence findings.Respond to Requests for Information (RFIs) from internal and external stakeholders, delivering timely, actionable intelligence.Tool Development and Detection:Develop and maintain detection signatures such as YARA rules based on malware analysis and threat research. Identify network and host-based detection opportunities.Manage and optimise threat intelligence platforms, sources, and feeds to improve analysis efficiency and intelligence output quality.Develop scripts and tooling to support analysis workflows, including automation of intelligence collection, enrichment, or dissemination tasks.Evaluate and recommend new tools or platforms to strengthen the team's analytical capabilities.Collaboration and Information Sharing:Support and mentor other analysts within the GTI team, providing guidance on analytical tradecraft and technical methodology.Work closely with DFIR and SOC teams to provide threat context, malware insights, and intelligence support during investigations and incidents.Generate detection leads from intelligence and malware analysis, maintaining a structured handoff process.Contribute to intelligence-led threat hunting by producing targeted threat assessments and hypotheses for the threat hunting team, and maintaining a feedback loop on findingsPartner with external partners, information-sharing communities, and industry forums to maintain situational awareness and contribute to collective defence.Skills, Knowledge & ExpertiseCore Skills and Experience:Demonstrated experience in Cyber Threat Intelligence analysis with a strong understanding of the intelligence lifecycle, including experience in threat actor tracking, APT research, and C2 infrastructure analysis.Strong understanding of networking protocols (e.g., TCP/IP, DNS) and how adversaries leverage network infrastructure.Familiarity with frameworks such as MITRE ATT&CK and structured intelligence formats, including STIX/TAXII.Experience supporting or interfacing with DFIR and SOC teams in an operational capacity.Understanding of offensive security reconnaissance and attacker methodologies.Desirable Skills and Experience:Experience performing triage-level malware analysis, including behavioural analysis, sandbox detonation, and basic static analysis. Exposure to reverse engineering tools is beneficial but not essential.Experience developing YARA rules and other detection signatures based on technical analysis.Familiarity with programming or scripting languages such as Python for developing analysis tools, automation, and data processing.Experience with threat intelligence platforms such as OpenCTI, MISP, or similar.Exposure to geopolitical risk analysis and its impact on the cyber threat landscape.Track record of published research, blog posts, or conference presentations in the threat intelligence domain.Qualifications (desired but not required):Certifications such as SANS FOR578 (Cyber Threat Intelligence), CREST Threat Intelligence Analyst (CRTIA), GREM, or equivalent.Ways of working Focusing on Clients and Customers. Working as One NCC.Always Learning.Being Inclusive and Respectful. Delivering Brilliantly. Job BenefitsFlexible Working: Balance your work and personal life with our flexible working options.Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave.Medicash & Critical Illness SchemeFinancial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme.Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities.Green Car Scheme: Drive green and save money with our eco-friendly car scheme.Cycle Scheme: Stay fit and healthy with our cycle-to-work scheme.Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet.Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.DepartmentCyber Services and CapabilitiesEmployment TypeFull TimeWorkplace typeHybrid

NIST, OWASP, MITRE ATT&CK, PASTA, STRIDE) and standards such as FDA cybersecurity guidance Experience assessing security risks using industry standard methods (penetration test results, threat modeling, security testing) and determining residual risk after applying compensating security controls E

Threat Intelligence Specialist Location: London (hybrid) Careel Level: Specialist Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside of the UK) at the point of application. Role Description As a Threat Intelligence Specialist, you will report to the CI UKI (UK and Ireland) Lead. You will be responsible for supporting clients in deploying and configuring threat intelligence tooling- including Threat Intelligence Platforms (TIPs) and supporting capabilities. Independently or as part of a wider team, you will develop integrations between threat intelligence tooling and other client security applications; build workflows for collection, analysis, enrichment and intelligence dissemination; and support Accenture’s wider intelligence delivery activities across our client base. Who You Are You are a threat intelligence professional with experience analysing and tracking threat campaigns, adversary tooling, and infrastructure. You have experience developing, deploying, and configuring tools and capabilities that help organisations achieve their threat intelligence objectives. You enjoy working collaboratively with others, sharing knowledge, and supporting colleagues to achieve common goals. You are comfortable working independently when required, while also contributing as part of a wider team. You value diverse perspectives and recognise that strong outcomes are achieved through effective collaboration, continuous learning, and well-defined processes. You are naturally curious, proactive in solving problems, and motivated by helping clients strengthen their understanding of the threat landscape. Whether through mentoring, knowledge-sharing, or improving ways of working, you are committed to making a positive impact on both client outcomes and team success. Key Responsibilities Deploy, configure and optimise threat intelligence tooling, including Threat Intelligence Platforms (TIPs) and supporting capabilities, to meet client operational requirements. Develop and maintain integrations between threat intelligence tooling and wider client security applications to improve intelligence-driven security operations. Build and refine workflows for intelligence collection, analysis, enrichment and dissemination across client environments. Support intelligence delivery activities, including the creation of regular and ad-hoc threat intelligence deliverables for clients and internal stakeholders. Contribute to the wider intelligence function by sharing knowledge, mentoring colleagues and supporting continuous improvement through tooling, automation and process development. Basic Qualifications Degree or equivalent qualification in politics, intelligence, information technology, information security, or a related discipline; alternatively, equivalent knowledge gained through apprenticeship or vocational training. Experience working in threat intelligence or a related cyber security field, typically gained over approximately three years or more. Experience supporting the deployment, maintenance, or administration of threat intelligence tooling. Essential skills:Experience integrating Threat Intelligence Platforms (TIPs), APIs, and threat data feeds with wider security tooling and workflows. Knowledge of common threat intelligence frameworks and data models including MITRE ATT&CK, STIX and TAXII, Cyber Killchain, and threat modelling frameworks. Experience developing or enhancing intelligence processes, workflows, or playbooks. Ability to communicate threat intelligence effectively to a range of technical and non-technical audiences. Desired skills:Experience with Intelligence-Led Penetration Testing (ILPT) frameworks such as CREST STAR TI, CBEST, GBEST, TIBER-EU, CORIE, iCAST, or AASE. Technical intelligence experience, including digital footprint analysis, infrastructure analysis, or malware and binary analysis. Experience coordinating projects or supporting colleagues during client engagements. Experience delivering presentations and building client relationships. Ability to obtain and maintain UK national security clearance. About Accenture Cyber Intelligence (CI) CI is a global team that spans 13 countries and 4 continents and speaks more than 30 languages. We are passionate about delivering intelligence analysis, and providing industry-leading analytic insights, cyber context, and critical services our clients need to achieve their business-line and strategic growth initiatives. We know success is only possible by developing and supporting our most critical resources: our talented analysts, developers, and supporting team members. We value creativity and entrepreneurship in our team; where possible, we back staff initiatives with opportunities and investments. We strive to automate and innovate while working with powerful resources and vast data. Above all else, we value an egoless approach to guiding our clients as they navigate their businesses through all aspects of the cyber domain. About AccentureAccenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360 value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360 value we create for our clients, each other, our shareholders, partners and communities.Visit us at Equal Employment Opportunity Statement We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, sexual orientation, gender identity or expression, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.SummaryLocation: LondonType: Full time

We tackle the most complex problems in quantitative finance, by bringing scientific clarity to financial complexity.From our London HQ, we unite world-class researchers and engineers in an environment that values deep exploration and methodical execution - because the best ideas take time to evolve. Together we’re building a world-class platform to amplify our teams’ most powerful ideas.Security is foundational to this mission and must be delivered in a way that supports how our engineering teams build and operate complex systems at scale.Take the next step in your career.The roleAs a Senior CSIRT Analyst you will play a key role in G-Research’s Cyber Security Incident Response Team (CSIRT), specialising in cloud detection and response across AWS and hybrid environments.You will investigate, respond and proactively hunt for threats across a diverse technology landscape, including high-performance compute clusters, Kubernetes and containerised infrastructures, and corporate Windows environments.You will use cloud-native security tooling and multi-SIEM operations, such as Elastic, Azure, AWS, to strengthen detection and response capabilities. You will also participate in purple team and red team exercises, continuously validating and improving the team’s effectiveness against advanced adversaries.As a senior member of the team, you will also mentor junior analysts, contribute to automation initiatives and support the on-call escalation rota for out-of-hours response.Key responsibilities of the role include:Investigating and responding to complex security incidents across cloud, hybrid, and on-premise environmentsProactively hunting for threats and developing detection logic across SIEM and cloud security systemsParticipating in red and purple team exercises to test, validate and enhance detection and response capabilitiesDeveloping and maintaining automation workflows using tools such as Tines and PythonCollaborating with engineering teams to improve log ingestion, detection rules and platform reliabilityMentoring and supporting junior analysts through knowledge sharing and technical guidanceParticipating in the on-call escalation rota for out-of-hours incidentsImproving CSIRT processes, playbooks and threat modelsWho are we looking for?The ideal candidate will have the following skills and experience:Significant experience in cyber incident response, detection engineering or SOC and CSIRT operationsStrong cloud security expertise across AWS and Azure, including hands-on incident investigationProficiency with SIEM platforms and log analysisExperience with red and purple team exercises and adversary simulationKnowledge of containerised environments and cloud-native infrastructure securityProgramming or scripting experience, preferably in Python, and exposure to automation platformsStrong understanding of modern attack techniques, threat actors and the MITRE ATT&CK frameworkExperience mentoring or leading within a security operations environmentStrong analytical skills with the ability to investigate complex threats, identify root causes and operate effectively under pressureCollaborative approach with the ability to work across teams while supporting and developing othersProactive mindset with an interest in automation and continuously improving detection and responseWhy should you apply?Highly competitive compensation plus annual discretionary bonusLunch provided (via Just Eat for Business) and dedicated barista bar30 days’ annual leave9% company pension contributionsInformal dress code and excellent work/life balanceComprehensive healthcare and life assuranceCycle-to-work schemeMonthly company eventsG-Research is committed to cultivating and preserving an inclusive work environment. We are an ideas-driven business and we place great value on diversity of experience and opinions. We want to ensure that applicants receive a recruitment experience that enables them to perform at their best. If you have a disability or special need that requires accommodation please let us know in the relevant sectionSummaryLocation: London, UKType: Full time

Job DescriptionWe areWe are a global collective of innovators applying the New every day to improve the way the world works and lives. Help us show the world what’s possible as you partner with clients to unlock hidden value and deliver innovative solutions. Empowered with innovative tools, continuous learning, and a global community of diverse talent and perspectives, we drive success in a new business architecture that disrupts conventional practices. Our expertise spans 40+ industries across 120+ countries and impacts millions of lives every day. We turn ideas into reality.Accenture Security helps organizations prepare, protect, detect, respond to, and recover, at all points of the security lifecycle. We hire the very best security talent and arm them with the coolest tools and latest tech so they can help our clients build resilience as we create integrated, customized turnkey solutions. We blend risk strategy, digital identity, cyber defense, application security and managed service solutions to rethink the entire security lifecycle.You ArePassionate about security, you love what you do and have a genuine desire to outsmart the bad guys. You have experience in leading discovery conversations with client security teams (CISO, SOC leads, architects) to understand the current state, identify gaps, and map Falcon platform capabilities to business outcomes. You have designed and deliveredcompelling technical demonstrations of the Falcon platform, including NG-SIEM, Exposure Management (CTEM), Identity Protection, Cloud Security, and Charlotte AI, tailored to the client's environment and priorities. You excel at the development and presentation of solution proposals, architecture diagrams, and business value assessments (BVAs) that articulate clear value outcomes and benefits.The WorkWe are expanding our team in search of experienced professionals to grow our Cyber Defense and Resilience practice, helping our clients modernize to an AI-powered defense posture. Accenture provides the opportunity to support world-class cybersecurity programs for some of the largest organizations in the world, through a focus on rapid threat identification, incident response, cyber threat intelligence infusion, and mitigations to ensure defensive resiliency.You will work alongside Accenture's CrowdStrike Business Group as a trusted technical expert, supporting pre-sales engagements with deep platform knowledge and experience in hands-on delivery of CrowdStrike Falcon platform implementations for enterprise clients. You will work at the intersection of Accenture's consulting expertise and CrowdStrike's technology leadership, helping clients transform their security operations, consolidate tools onto the Falcon platform, and realize measurable outcomes.You will be part of a specialized team that advises our clients on how to manage their cyber risk and solve hard security problems through a combination of strategic vision and operational expertise. You will contribute to the development and market positioning of Accenture CrowdStrike specific offerings and position those offerings at the core of opportunity pipeline acceleration support activities.Travel may be required for this role. The amount of travel will vary from 0 to 100% depending on business need and client requirements.Job QualificationsHere's what you need Minimum 5 years solutions architecture, or technical delivery role within the cybersecurity industryMinimum 3 years hands-on experience with the CrowdStrike Falcon platform (endpoint protection, EDR, or adjacent modules), either in a vendor, partner, or customer capacityMinimum 5 years technical experience with at least two of the following: SIEM platforms (Splunk, QRadar, Elastic, Sentinel, Chronicle), endpoint security, identity threat detection, cloud security posture management, or vulnerability/exposure managementMinimum 5 years experience with enterprise security architectures, including identity infrastructure, cloud environments (AWS, Azure, GCP), OT/ICS environments, or hybrid data centerBachelor's degree or equivalent (minimum 12 years) work experience. (If Associate Degree, must have minimum 6 years work experience)Bonus points in you haveStrong written and verbal communication skills; able to translate complex technical concepts into business outcomes for executive audiencesActive CrowdStrike certification(s): CCFA, CCSE, or CrowdStrike Champions Professional/ExpertDirect experience with CrowdStrike NG-SIEM: migration delivery, parser development, CQL, or LogScale administrationExperience delivering managed security services or working within an MSSP/MDR environmentExperience leading or collaborating with global teamsExperience with CTEM (Cyber Threat Exposure Management), vulnerability prioritization platforms (Qualys, Tenable, Rapid7), or attack surface managementWorking knowledge of compliance frameworks: NIST CSF, SOC 2, ISO 27001, DORA, HIPAA, or FedRAMPFamiliarity with threat intelligence operationalization (CrowdStrike CAO/Intel, MITRE ATT&CK, adversary tracking)#LI-EUAbout AccentureAccenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360 value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360 value we create for our clients, each other, our shareholders, partners and communities.Visit us at Equal Employment Opportunity Statement We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, sexual orientation, gender identity or expression, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.SummaryLocation: LondonType: Full time

Why work for us?A career at Janus Henderson is more than a job, it’s about investing in a brighter future together. Our Mission at Janus Henderson is to help clients define and achieve superior financial outcomes through differentiated insights, disciplined investments, and world-class service. We will do this by protecting and growing our core business, amplifying our strengths and diversifying where we have the right.Our Values are key to driving our success, and are at the heart of everything we do:Clients Come First - Always | Execution Supersedes Intention | Together We Win | Diversity Improves Results | Truth Builds TrustIf our mission, values, and purpose align with your own, we would love to hear from you!Your opportunity The AI & Automation Security Engineer is a hands-on role for engineers passionate about both AI and cybersecurity. This position has a dual focus: first, securing business AI systems including AI-enabled applications, LLM models, agents, and supporting platforms across their full lifecycle. Second, leveraging AI and automation to transform and scale the security function, through risk-based vulnerability management, alert enrichment, workflow orchestration, and CI/CD checks. Whether your background is in security engineering with AI experience or as an AI engineer eager to deepen your security expertise, you will collaborate across teams, applying and expanding your skills to deliver robust, production-ready protections and innovative security solutions at scale, with an emphasis on business impact and responsible practices.What to expect when you join our firmHybrid working and reasonable accommodationsGenerous Holiday policiesExcellent Health and Wellbeing benefits including corporate membership to WellhubPaid volunteer time to step away from your desk and into the communitySupport to grow through professional development courses, tuition/qualification reimbursement and moreMaternal/paternal leave benefits and family servicesAll employee events including networking opportunities and social activitiesLunch allowance for use within our subsidized onsite canteenMust have skills Solid grasp of security engineering fundamentals and familiar with common attack vectors and defence techniques.Proven ability to build and deploy automation using code, APIs, and orchestration tools (e.g., Python, workflow engines, SOAR platforms).Practical experience with AI/LLM systems and automation, including prompt engineering, retrieval augmented generation (RAG), function-calling, or agent-based tools.Skilled at integrating security logs, AI models, and platform components into cohesive pipelines.Effective communicator and collaborator, able to prioritise security risks based on business impact.Demonstrated initiative, ownership, and adaptability in fast-paced, evolving environments.Ability to work with senior stakeholders across infrastructure, engineering and risk to translate AI risks into actionable controls and standards.Leading design reviews, threat modelling and targeted implementation for critical AI initiativesNice to have skills Experience with vulnerability management or risk-based threat prioritisation.Knowledge of securing AI agents or agentic workflows, including scoped permissions and approval processes.Able to identify and put guardrails to prevent AI-specific security risks such as prompt injection, model hijacking, data leakage from LLM outputs, or configuration drift caused by AI assistants.Ability to automate response workflows, enrich incident data, and assist with triage.Awareness of frameworks like NIST AI RMF, OWASP for GenAI, or MITRE ATLAS.Mentor security engineers on AI-related security challenges based on existing and emerging AI risk.Supervisory responsibilitiesNoPotential for growthMentoringLeadership development programsRegular trainingCareer development servicesContinuing education coursesYou will be expected to understand the regulatory obligations of the firm, and abide by the regulated entity requirements and JHI policies applicable for your role. At Janus Henderson Investors we’re committed to an inclusive and supportive environment. We believe diversity improves results and we welcome applications from candidates from all backgrounds. Don’t worry if you don’t think you tick every box, we still want to hear from you! We understand everyone has different commitments and while we can’t accommodate every flexible working request we’re happy to be asked about work flexibility and our hybrid working environment. If you need any reasonable accommodations during our recruitment process, please get in touch and let us know at recruiter@janushenderson.com#LI-LN2 #LI-HYBRIDAnnual Bonus Opportunity: Position may be eligible to receive an annual discretionary bonus award from the profit pool. The profit pool is funded based on Company profits. Individual bonuses are determined based on Company, department, team and individual performance. Benefits: Janus Henderson is committed to offering a comprehensive total rewards package to eligible employees that includes; competitive compensation, pension/retirement plans, and various health, wellbeing and lifestyle benefits. To learn more about our offerings please visit the Why Join Us section on the career page here.Janus Henderson Investors is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability or veteran status. All applications are subject to background checks.Janus Henderson (including its subsidiaries) will not maintain existing or sponsor new industry registrations or licenses where not supported by an employee’s job functions (as determined by Janus Henderson at its sole discretion).You should be willing to adhere to the provisions of our Investment Advisory Code of Ethics related to personal securities activities and other disclosure and certification requirements, including past political contributions and political activities. Applicants’ past political contributions or activity may impact applicants’ eligibility for this position.You will be expected to understand the regulatory obligations of the firm, and abide by the regulated entity requirements and JHI policies applicable for your role.

Role: Cyber Security Analyst Location: London/Manchester/Bristol Salary: Competitive salary and package dependent on experience Career Level: Specialist Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which typically requires 5 years continuous UK address history usually including no periods of 30 consecutive days or more spent outside of the UK and declaration of being a British passport holder with no dual nationalism at the point of application. Note: The above information relates to a specific client requirement Our Cyber Practice is a fast-growing community of industry leading experts. The practice covers Assurance, Compliance, Security Operations (SecOps), Offensive Security and Security Research. It is critical that the relevance and quality of the services that we provide is maintained and augmented and that the team members have every opportunity to grow and learn with the organisation. As part of our Blue Team, you’ll use the latest intelligence and tooling to analyse information systems to ensure effective incident detection and response. Job Description If you are looking to make your mark on a rapidly growing SecOps team with some very exciting clients, look no further. We are searching for a passionate and enthusiastic Cyber Security Analyst to join our Blue Team. The ideal candidate will be a self-starter with an inquisitive nature and a keen interest when it comes to technical cybersecurity topics such as threat hunting, attacker tactics and techniques, monitoring and alerting, threat intelligence, and incident readiness and response. Key responsibilities of the role are summarised below: · Security monitoring and incident response · Detection engineering - Develop, maintain, and enhance security detection content primarily for the Splunk SIEM, to enable the detection of threats across diverse platforms (e.g. cloud, endpoints, and networks) · Use frameworks like MITRE ATT&CK to map detection rules and maximise threat coverage · Use analytical platforms to query high volume datasets to identify trends and spot unusual behaviours, indicative of malicious activity · Proactive threat hunting using available client data · Collection and/or interpretation of different sources of threat intelligence · Incident response · Automation of SecOps processes using scripting Desirable Attributes The successful candidate should have experience in some of the following areas: • Core cybersecurity concepts such as network security, cryptography, cloud security, forensics, • Understanding of network protocols and how they can be abused by attackers, • Knowledge of the most prevalent APTs and their TTPs, • Ability to understand client-specific challenges and tailor solutions accordingly, • Commitment to staying abreast of emerging threats, technologies, and methodologies in cybersecurity, • Creative and resourceful in finding solutions to complex cyber challenges, • Knowledge of common analysis techniques associated with Windows and/or Linux, • Experience with Scripting and Programming – e.g. Python/Bash/c/c++/Java Note: This role requires an approximately 1-week per month on-call availability for high priority incidents. Please note there is additional compensation for this and the frequency is client-dependent. Don’t worry if you don’t tick every box – we’d still love to hear from you! If you’re excited about the role and think you could make a difference, please get in touch. What’s in it for you At Accenture in addition to a competitive basic salary, you will also have an extensive benefits package which includes up to 25 days of vacation per year, private medical insurance and three days leave per year for charitable work of your choice! Flexibility and mobility are required to deliver this role to deliver the first-class services we are known for. Closing Date for Applications: 31/08/2026 Accenture reserves the right to close the role prior to this date should a suitable applicant be found.

We recruiting for an exciting opportunity within a highly regulated environment. We're looking for SOC Engineers (both Junior and Senior levels) to join a growing Cyber Security team, engineering and optimising Microsoft Sentinel, Defender XDR, and SOAR capabilities. This isn't a pure triage/analyst role we need engineers who can build, tune, automate, and scale our detection platform. What you'll be doing: Engineering and maintaining Microsoft Sentinel , Defender XDR , and Log Analytics platforms Onboarding and normalising log sources across hybrid/cloud environments Writing and tuning KQL detection rules and analytics logic Building SOAR playbooks (Logic Apps, automation workflows) to reduce manual effort Managing telemetry ingestion, parsers, and data retention for cost optimisation Producing platform health reports and identifying coverage gaps Mentoring junior engineers and contributing to team development Acting as technical SME during incidents What we're looking for: Deep experience with Microsoft Sentinel , Defender suite , and KQL Strong scripting/automation skills ( PowerShell, Python, Logic Apps ) Solid understanding of MITRE ATT&CK , NCSC CAF , NIST CSF Stakeholder management able to translate technical complexity to non-technical audiences Degree in Computer Science, Cyber Security, or equivalent Desirable: SC-200 / AZ-500, ServiceNow SecOps, regulated sector experience (nuclear/defence/CNI). What's in it for you: 30 days annual leave (+ bank holidays) Hybrid working - flexible on-site Opportunity to shape SOC engineering strategy in a critical environment Clear progression pathway (Junior ? Senior ? Lead) Certifications and training budget (SC-200, AZ-500, etc.) Work with cutting-edge Microsoft security tech TPBN1_UKTJ

Threat Hunting & Detection Engineering Analyst Location: UK (Hybrid) Salary: Competitive + Excellent Benefits Threat Hunting & Detection Engineering Analyst A leading global technology consultancy is looking to hire a Threat Hunting & Detection Engineering Analyst to join its growing Cyber Security practice. This is an exciting opportunity to work at the forefront of cyber defence, helping enterprise clients improve their detection capabilities through advanced threat hunting, detection engineering and SOC content development. Working alongside Threat Intelligence teams, Security Operations Centres and client stakeholders, you'll play a key role in strengthening organisations' ability to identify and respond to emerging cyber threats. The Role As a Threat Hunting & Detection Engineering Analyst, you'll be responsible for designing, developing and optimising threat detection capabilities while proactively hunting for malicious activity across complex enterprise environments. You'll work with a collaborative team of cyber specialists, contributing to innovative detection strategies that help clients stay ahead of evolving threats. Key Responsibilities Design, develop and maintain threat detection use cases aligned to real-world attack scenarios Build and tune detection logic using industry frameworks such as MITRE ATT&CK Conduct proactive, hypothesis-led threat hunting across client environments Analyse telemetry, threat intelligence and security data to identify suspicious activity Develop, test and optimise detection content throughout its lifecycle Produce clear technical documentation, reports and recommendations Maintain detection playbooks, SOPs and operational documentation Collaborate with SOC teams, Threat Intelligence specialists and client stakeholders to continuously improve detection coverage Share technical knowledge and contribute to continuous improvement initiatives across the wider security function. About You We're looking for security professionals with experience in threat detection, SOC operations or cyber defence who are passionate about identifying sophisticated threats and improving security operations. You'll ideally have experience with: Threat Hunting Detection Engineering Security Operations Centres (SOC) SIEM technologies MITRE ATT&CK Framework Threat Intelligence Detection rule creation and tuning Security telemetry analysis Incident detection and investigation Writing detection use cases and playbooks Developing and maintaining security content Working with enterprise security tooling Strong stakeholder communication and collaboration skills What's on Offer You'll join one of the world's largest technology and consulting organisations, working alongside industry-leading cyber security experts on high-profile transformation programmes. You'll benefit from ongoing technical training, exposure to cutting-edge security technologies and clear opportunities for career progression within a globally recognised cyber practice. The package includes a competitive salary, comprehensive benefits, private medical insurance, generous annual leave and opportunities to work with clients across a wide range of industries. TPBN1_UKTJ

Senior Consultant in Unit 42, working across proactive cyber security domains including Cloud Security, Security Operations, Cyber Risk Management and Artificial Intelligence in cyber security. We are seeking an individual who is passionate about cyber security, curious with a demonstrated track record of continuous learning, and has the technical acumen to embrace data, technological and innovative approaches to deliver the best consulting outcomes for clients as they address today’s cyber threat landscape. As a Senior Consultant in Unit 42 you will have the opportunity to work across a number of proactive cyber security domains including Cloud Security, Security Operations, Cyber Risk Management and Artificial Intelligence in cyber security. We are seeking an individual who is passionate about cyber security, curious with a demonstrated track record of continuous learning, and has the technical acumen to embrace data, technological and innovative approaches to deliver the best consulting outcomes for clients, as they work to address the challenges associated with today’s cyber threat landscape. • SOC Advisory, • 4+ years of consulting experience in SOC, security engineering, SIEM administration, and incident management with demonstrable success serving large, multinational organisations in designing and implementing an organisation’s security operations program, organisational structures, and capabilities, • Deep technical knowledge in SIEM, SOAR, EDR/XDR, Next Gen Firewalls, Threat Intelligence and Hunting platforms, • Defensive Security Skills (desired), • Experience in security operations design, engineering and/or analysis and investigations in complex environments with correlations across cloud, network, endpoint, and logs, • Ability to assess, identify improvements, and recommend enhancements to protect, detect and rapidly respond to modern threats, • Experience improving security operations capabilities such as asset visibility, threat detection, automation, case management, and compliance support, • Threat hunting and/or compromise assessments to identify IoCs or unknown threats, • Certifications including GIAC GDSA, GCIA, GMON, CISSP, • Understanding of frameworks such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC, • Principal Cloud Security, • 4+ years of cloud security advisory and risk assessment experience, • Hands-on experience with AWS, Azure, GCP or similar, • Experience with Cloud Access Security Broker solutions (e.g., MCAS, Netskope), • Knowledge of CASBs, Cloud Platforms and related dependencies (WAF, SSO, API Security, Cloud Security Posture Management), • Experience with cloud migrations (cloud to cloud or on-prem to cloud), • CLI or scripting knowledge in cloud environments is a plus, • Cloud Security skills (desired), • Secure software development practices (SecDevOps), • Knowledge of OWASP, MITRE ATT&CK & D3FEND, CIS, NIST CSF, CSA CCM & ISO 27107, • Certifications such as CSCP, • Understanding of cyber risk frameworks such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC, • Cyber Risk Management, • Experience in cyber security threat & risk assessments to support strategy and roadmaps, • Proficiency in cyber risk, threat and control assessments, secure software practices, penetration testing, vulnerability assessments, • Knowledge of privacy, security, and compliance laws/regulations and related standards, • Familiarity with MITRE ATT&CK & D3FEND, CIS, NIST CSF, CSA CCM, • Strong communication and presentation skills, • Cyber Risk Management skills (desired), • Threat modelling & application security risk assessments, secure software practices including SecDevOps, • FAIR Open-certified and experience applying FAIR for cyber risk quantification, • Certifications such as CISSP, CISM, CISA, • Understanding of risk frameworks such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC Your Experience • 4+ years of experience performing cyber security consulting in at least two of the three domains above, with SME experience in one domain, • Track record in strengthening existing and developing new client relationships, • Ability to thrive in a startup environment, • Ability to travel as needed, • Potential to contribute across the practice and PANW product knowledge; ability to collaborate across internal and external stakeholders, • Bachelor’s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security or equivalent professional experience The Team Unit 42 Consulting is Palo Alto Network's security advisory team. Our vision is to create a more secure digital world by providing the highest quality incident response, cyber risk management, and digital forensics services to clients of all sizes. Our team is composed of recognized experts with deep technical expertise and experience in investigations, data breach response, digital forensics, and information security. We have a track record of delivering mission-critical cybersecurity solutions with incident response, readiness, and remediation plans, focusing on long-term security improvements. Our Commitment We’re problem solvers that take risks and challenge cybersecurity’s status quo. We’re committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability, please contact us at accommodations@paloaltonetworks.com. Palo Alto Networks is an equal opportunity employer. We celebrate diversity and all qualified applicants will receive consideration regardless of age, ancestry, color, family or medical leave, gender identity or expression, genetic information, marital status, medical condition, national origin, disability, political affiliation, protected veteran status, race, religion, sex, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. • Associate, • Full-time, • Consulting, • Industries: Computer and Network Security #J-18808-Ljbffr

We are looking for a Vice President of Cyber Security reporting to the Regional CISO, UK & Ireland. You will act as a senior cyber advisor across the bank, working with business, technology, risk, compliance, and Global Cybersecurity teams to identify practical security improvements and drive change that strengthens cyber resilience. The successful candidate will bring strong technical credibility utilising a breadth of knowledge from offensive security, cyber risk, and security solution architecture experience. You will be comfortable reviewing complex technology and control issues, challenging proposed approaches constructively, and translating technical risk into clear, actionable decisions for senior stakeholders. The team you will be joining is part of the Regional CISO organization within Global Cybersecurity (GCS), a key function to the bank because it connects global cyber capabilities with regional business, regulatory, legal entity, and client priorities. This is a vital role to determine technical cyber requirements for the regional to global stakeholder and provide implementation guidance. Helping the bank remain secure in a rapidly evolving threat landscape. In this role, you will: • Provide senior cyber advisory and constructive challenge to business, technology, and cyber teams on cyber security matters., • Review complex cyber issues and support solution design, including findings from offensive security testing, vulnerability management, incident lessons learned, and architecture reviews., • Translate security insights into practical risk based remediation plans that reduce risk exposure for the organization., • Lead or materially contribute to regulatory alignment activities, including impact assessments, evidence reviews, responses to supervisory queries, readiness reviews, and remediation tracking., • Drive change across the bank by identifying recurring control weaknesses, root causes, and opportunities to simplify or improve cyber processes, governance, metrics, and accountability., • Prepare clear briefings, papers, risk narratives, and executive updates for senior stakeholders, governance forums, legal entity committees, and Regional CISO leadership., • Act as a regional point of orchestration for cross-functional cyber activities, ensuring issues are owned, prioritised, and progressed through to measurable outcomes., • Support client, business, and external engagement where specialist cyber input is required, presenting the bank's cyber posture and improvement activity in a clear and credible manner. These skills will help you succeed in this role: • We are looking for a strong technical candidate with hands-on experience who is able to translate complex technical solutions to both senior technology and business stakeholders, • Technical cyber knowledge with the credibility to engage senior engineers, architects, offensive security specialists, risk teams, and senior business stakeholders., • Practical offensive security awareness, including attack paths, common enterprise weaknesses, penetration testing outputs, red/purple team findings, exploitability, and risk-based remediation., • Security solution architecture knowledge across cloud, identity and access management, network security, application security, endpoint, data protection, third-party connectivity, and resilience controls., • Strong influencing and change leadership skills, with the confidence to challenge constructively and bring teams together around executable solutions., • Ability to convert regulatory expectations and audit findings into pragmatic implementation plans that work in a complex banking environment., • Excellent written and verbal communication skills, including the ability to explain technical risk in concise, business-relevant language., • Sound judgement, ownership mindset, and the ability to balance risk reduction, regulatory expectations, business delivery, and operational practicality., • Degree: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, Risk Management, or a related discipline preferred; equivalent industry experience will always be considered., • Years of experience: Typically 10-15 years of experience in cyber security, technology risk, security architecture, offensive security, cyber consulting, operational resilience, or a related financial services role., • Certifications: Relevant certification to support relevant experience such as CISSP, CISM, CRISC, OSCP, CREST, GIAC/SANS, SABSA and vendor specific certification., • Knowledge of tools or technologies: Practical and demonstrable knowledge of MITRE ATT&CK, NIST CSF, ISO 27001, CIS Controls, threat-led penetration testing, vulnerability management, cloud security, IAM, SIEM/SOAR, EDR, application security, network security, and secure architecture design., • Some travel may be required for regional stakeholder, client, industry, or regulatory engagement., • The role may occasionally support urgent cyber, regulatory, or incident-related activity outside standard working hours., • The candidate must be able to handle confidential and sensitive information appropriately., • Hybrid Work Requirement: London-based hybrid working arrangement, with regular presence in the London office in line with business and team requirements., • Shift Timings: UK business hours, with flexibility required to support global stakeholders and time-sensitive cyber or regulatory matters. Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future. As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law. As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law. Discover more information on jobs at StateStreet.com/careers Read our CEO Statement Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future. As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law. Discover more information on jobs at StateStreet.com/careers Read our CEO Statement Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future. As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law. Discover more information on jobs at StateStreet.com/careers Read our CEO Statement #J-18808-Ljbffr

We are looking for a Vice President of Cyber Security reporting to the Regional CISO, UK & Ireland. You will act as a senior cyber advisor across the bank, working with business, technology, risk, compliance, and Global Cybersecurity teams to identify practical security improvements and drive change that strengthens cyber resilience. The team you will be joining is part of the Regional CISO organization within Global Cybersecurity (GCS), a key function to the bank because it connects global cyber capabilities with regional business, regulatory, legal entity, and client priorities. This is a vital role to determine technical cyber requirements for the regional to global stakeholder and provide implementation guidance. Helping the bank remain secure in a rapidly evolving threat landscape. In this role, you will: • Provide senior cyber advisory and constructive challenge to business, technology, and cyber teams on cyber security matters., • Review complex cyber issues and support solution design, including findings from offensive security testing, vulnerability management, incident lessons learned, and architecture reviews., • Translate security insights into practical risk based remediation plans that reduce risk exposure for the organization., • Lead or materially contribute to regulatory alignment activities, including impact assessments, evidence reviews, responses to supervisory queries, readiness reviews, and remediation tracking., • Drive change across the bank by identifying recurring control weaknesses, root causes, and opportunities to simplify or improve cyber processes, governance, metrics, and accountability., • Prepare clear briefings, papers, risk narratives, and executive updates for senior stakeholders, governance forums, legal entity committees, and Regional CISO leadership., • Act as a regional point of orchestration for cross-functional cyber activities, ensuring issues are owned, prioritised, and progressed through to measurable outcomes., • Support client, business, and external engagement where specialist cyber input is required, presenting the bank's cyber posture and improvement activity in a clear and credible manner. These skills will help you succeed in this role: • We are looking for a strong technical candidate with hands-on experience who is able to translate complex technical solutions to both senior technology and business stakeholders, • Technical cyber knowledge with the credibility to engage senior engineers, architects, offensive security specialists, risk teams, and senior business stakeholders., • Practical offensive security awareness, including attack paths, common enterprise weaknesses, penetration testing outputs, red/purple team findings, exploitability, and risk-based remediation., • Security solution architecture knowledge across cloud, identity and access management, network security, application security, endpoint, data protection, third-party connectivity, and resilience controls., • Strong influencing and change leadership skills, with the confidence to challenge constructively and bring teams together around executable solutions., • Ability to convert regulatory expectations and audit findings into pragmatic implementation plans that work in a complex banking environment., • Excellent written and verbal communication skills, including the ability to explain technical risk in concise, business-relevant language., • Sound judgement, ownership mindset, and the ability to balance risk reduction, regulatory expectations, business delivery, and operational practicality. Degree: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Risk Management, or a related discipline preferred; equivalent industry experience will always be considered. Years of experience: Typically 10-15 years of experience in cyber security, technology risk, security architecture, offensive security, cyber consulting, operational resilience, or a related financial services role. Certifications: Relevant certification to support relevant experience such as CISSP, CISM, CRISC, OSCP, CREST, GIAC/SANS, SABSA and vendor specific certification. Knowledge of tools or technologies: Practical and demonstrable knowledge of MITRE ATT&CK, NIST CSF, ISO 27001, CIS Controls, threat-led penetration testing, vulnerability management, cloud security, IAM, SIEM/SOAR, EDR, application security, network security, and secure architecture design. Additional language requirements: N/A. Role Experience: Experience in senior roles at Financial Services or Critical National Infrastructure organizations is preferred but not required. Ability to demonstrate work in complex and advanced cyber security environments is a benefit. Additional requirements for this role include: Some travel may be required for regional stakeholder, client, industry, or regulatory engagement. The role may occasionally support urgent cyber, regulatory, or incident-related activity outside standard working hours. The candidate must be able to handle confidential and sensitive information appropriately. Hybrid Work Requirement: London-based hybrid working arrangement, with regular presence in the London office in line with business and team requirements. Shift Timings: UK business hours, with flexibility required to support global stakeholders and time-sensitive cyber or regulatory matters. Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you'll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future. As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law. Discover more information on jobs at StateStreet.com/careers Read our CEO Statement #J-18808-Ljbffr

We are looking for a Vice President of Cyber Security reporting to the Regional CISO, UK & Ireland. You will act as a senior cyber advisor across the bank, working with business, technology, risk, compliance, and Global Cybersecurity teams to identify practical security improvements and drive change that strengthens cyber resilience. We are looking for a Vice President of Cyber Security reporting to the Regional CISO, UK & Ireland. You will act as a senior cyber advisor across the bank, working with business, technology, risk, compliance, and Global Cybersecurity teams to identify practical security improvements and drive change that strengthens cyber resilience. The successful candidate will bring strong technical credibility utilising a breadth of knowledge from offensive security, cyber risk, and security solution architecture experience. You will be comfortable reviewing complex technology and control issues, challenging proposed approaches constructively, and translating technical risk into clear, actionable decisions for senior stakeholders. The team you will be joining is part of the Regional CISO organization within Global Cybersecurity (GCS), a key function to the bank because it connects global cyber capabilities with regional business, regulatory, legal entity, and client priorities. This is a vital role to determine technical cyber requirements for the regional to global stakeholder and provide implementation guidance. Helping the bank remain secure in a rapidly evolving threat landscape. • Provide senior cyber advisory and constructive challenge to business, technology, and cyber teams on cyber security matters., • Review complex cyber issues and support solution design, including findings from offensive security testing, vulnerability management, incident lessons learned, and architecture reviews., • Translate security insights into practical risk based remediation plans that reduce risk exposure for the organization., • Lead or materially contribute to regulatory alignment activities, including impact assessments, evidence reviews, responses to supervisory queries, readiness reviews, and remediation tracking., • Drive change across the bank by identifying recurring control weaknesses, root causes, and opportunities to simplify or improve cyber processes, governance, metrics, and accountability., • Prepare clear briefings, papers, risk narratives, and executive updates for senior stakeholders, governance forums, legal entity committees, and Regional CISO leadership., • Act as a regional point of orchestration for cross-functional cyber activities, ensuring issues are owned, prioritised, and progressed through to measurable outcomes., • Support client, business, and external engagement where specialist cyber input is required, presenting the bank's cyber posture and improvement activity in a clear and credible manner., • We are looking for a strong technical candidate with hands-on experience who is able to translate complex technical solutions to both senior technology and business stakeholders, • Technical cyber knowledge with the credibility to engage senior engineers, architects, offensive security specialists, risk teams, and senior business stakeholders., • Practical offensive security awareness, including attack paths, common enterprise weaknesses, penetration testing outputs, red/purple team findings, exploitability, and risk-based remediation., • Security solution architecture knowledge across cloud, identity and access management, network security, application security, endpoint, data protection, third-party connectivity, and resilience controls., • Strong influencing and change leadership skills, with the confidence to challenge constructively and bring teams together around executable solutions., • Ability to convert regulatory expectations and audit findings into pragmatic implementation plans that work in a complex banking environment., • Excellent written and verbal communication skills, including the ability to explain technical risk in concise, business-relevant language., • Sound judgement, ownership mindset, and the ability to balance risk reduction, regulatory expectations, business delivery, and operational practicality. Degree: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, Risk Management, or a related discipline preferred; equivalent industry experience will always be considered. Years of experience: Typically 10-15 years of experience in cyber security, technology risk, security architecture, offensive security, cyber consulting, operational resilience, or a related financial services role. Certifications: Relevant certification to support relevant experience such as CISSP, CISM, CRISC, OSCP, CREST, GIAC/SANS, SABSA and vendor specific certification. Knowledge of tools or technologies: Practical and demonstrable knowledge of MITRE ATT&CK, NIST CSF, ISO 27001, CIS Controls, threat-led penetration testing, vulnerability management, cloud security, IAM, SIEM/SOAR, EDR, application security, network security, and secure architecture design. Additional language requirements: N/A. Role Experience: Experience in senior roles at Financial Services or Critical National Infrastructure organizations is preferred but not required. Ability to demonstrate work in complex and advanced cyber security environments is a benefit. Additional requirements for this role include: Some travel may be required for regional stakeholder, client, industry, or regulatory engagement. The role may occasionally support urgent cyber, regulatory, or incident-related activity outside standard working hours. The candidate must be able to handle confidential and sensitive information appropriately. Hybrid Work Requirement: London-based hybrid working arrangement, with regular presence in the London office in line with business and team requirements. Shift Timings: UK business hours, with flexibility required to support global stakeholders and time-sensitive cyber or regulatory matters. Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future. As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law. Job ID: R-795097 #J-18808-Ljbffr

Senior Consultant in Unit 42, working across proactive cyber security domains including Cloud Security, Security Operations, Cyber Risk Management and Artificial Intelligence in cyber security. We are seeking an individual who is passionate about cyber security, curious with a demonstrated track record of continuous learning, and has the technical acumen to embrace data, technological and innovative approaches to deliver the best consulting outcomes for clients as they address today’s cyber threat landscape. As a Senior Consultant in Unit 42 you will have the opportunity to work across a number of proactive cyber security domains including Cloud Security, Security Operations, Cyber Risk Management and Artificial Intelligence in cyber security. We are seeking an individual who is passionate about cyber security, curious with a demonstrated track record of continuous learning, and has the technical acumen to embrace data, technological and innovative approaches to deliver the best consulting outcomes for clients, as they work to address the challenges associated with today’s cyber threat landscape. • SOC Advisory, • 4+ years of consulting experience in SOC, security engineering, SIEM administration, and incident management with demonstrable success serving large, multinational organisations in designing and implementing an organisation’s security operations program, organisational structures, and capabilities, • Deep technical knowledge in SIEM, SOAR, EDR/XDR, Next Gen Firewalls, Threat Intelligence and Hunting platforms, • Defensive Security Skills (desired), • Experience in security operations design, engineering and/or analysis and investigations in complex environments with correlations across cloud, network, endpoint, and logs, • Ability to assess, identify improvements, and recommend enhancements to protect, detect and rapidly respond to modern threats, • Experience improving security operations capabilities such as asset visibility, threat detection, automation, case management, and compliance support, • Threat hunting and/or compromise assessments to identify IoCs or unknown threats, • Certifications including GIAC GDSA, GCIA, GMON, CISSP, • Understanding of frameworks such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC, • Principal Cloud Security, • 4+ years of cloud security advisory and risk assessment experience, • Hands-on experience with AWS, Azure, GCP or similar, • Experience with Cloud Access Security Broker solutions (e.g., MCAS, Netskope), • Knowledge of CASBs, Cloud Platforms and related dependencies (WAF, SSO, API Security, Cloud Security Posture Management), • Experience with cloud migrations (cloud to cloud or on-prem to cloud), • CLI or scripting knowledge in cloud environments is a plus, • Cloud Security skills (desired), • Secure software development practices (SecDevOps), • Knowledge of OWASP, MITRE ATT&CK & D3FEND, CIS, NIST CSF, CSA CCM & ISO 27107, • Certifications such as CSCP, • Understanding of cyber risk frameworks such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC, • Cyber Risk Management, • Experience in cyber security threat & risk assessments to support strategy and roadmaps, • Proficiency in cyber risk, threat and control assessments, secure software practices, penetration testing, vulnerability assessments, • Knowledge of privacy, security, and compliance laws/regulations and related standards, • Familiarity with MITRE ATT&CK & D3FEND, CIS, NIST CSF, CSA CCM, • Strong communication and presentation skills, • Cyber Risk Management skills (desired), • Threat modelling & application security risk assessments, secure software practices including SecDevOps, • FAIR Open-certified and experience applying FAIR for cyber risk quantification, • Certifications such as CISSP, CISM, CISA, • Understanding of risk frameworks such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC Your Experience • 4+ years of experience performing cyber security consulting in at least two of the three domains above, with SME experience in one domain, • Track record in strengthening existing and developing new client relationships, • Ability to thrive in a startup environment, • Ability to travel as needed, • Potential to contribute across the practice and PANW product knowledge; ability to collaborate across internal and external stakeholders, • Bachelor’s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security or equivalent professional experience The Team Unit 42 Consulting is Palo Alto Network's security advisory team. Our vision is to create a more secure digital world by providing the highest quality incident response, cyber risk management, and digital forensics services to clients of all sizes. Our team is composed of recognized experts with deep technical expertise and experience in investigations, data breach response, digital forensics, and information security. We have a track record of delivering mission-critical cybersecurity solutions with incident response, readiness, and remediation plans, focusing on long-term security improvements. Our Commitment We’re problem solvers that take risks and challenge cybersecurity’s status quo. We’re committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability, please contact us at accommodations@paloaltonetworks.com. Palo Alto Networks is an equal opportunity employer. We celebrate diversity and all qualified applicants will receive consideration regardless of age, ancestry, color, family or medical leave, gender identity or expression, genetic information, marital status, medical condition, national origin, disability, political affiliation, protected veteran status, race, religion, sex, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. • Associate, • Full-time, • Consulting, • Industries: Computer and Network Security #J-18808-Ljbffr

Security Consultant - H&PSLocation Flexible: UK (With Client Travel)Career Level: ConsultantSalary: Competitive Salary & Package (Dependent on Experience)Please Note: Any offer of employment is subject to satisfactory BPSS and SC security clearance which requires 5 years continuous UK address history (typically including no periods of 30 consecutive days or more spent outside of the UK) at the point of application. This role also requires full British Nationality at point of application. Note: The above information relates to a specific client requirementAs a team:You'll work on innovative projects with colleagues to drive collaboration from strategy through to implementation. You will be using the latest technologies with clients to help them get to the next level. Do you want to work in an environment where you will be part of a thriving team working on the most complex security challenges in the UK health, public sector, Defence and Central Government. You'll learn, grow and advance in an innovative culture that thrives on shared success, diverse ways of thinking and enables boundaryless opportunities that can drive your career in new and exciting ways.If you’re looking for a challenging career working in a vibrant environment with access to training and a global network of experts, this could be the role for you. As part of our global team, you'll be working with cutting-edge technologies and will have the opportunity to develop a wide range of new skills on the job.Responsibilities:Reduce cyber risk within technology projects by ensuring appropriate security requirements, controls, monitoring, and assurance activities are identified, specified, and evidenced throughout the project lifecycle.Conduct threat modelling activities, including alignment with frameworks such as MITRE ATT&CK, to identify credible threats and define proportionate security controls.Define monitoring and logging requirements to detect control failures, security incidents, or compromises in live operational environments.Support procurement activities by developing security requirements and contractual security schedules.Maintain traceability and evidence linking security obligations, threats, requirements, controls, testing outcomes, risks, and decision-making.Provide assurance evidence to support risk owners' go-live and in-service risk decisions.Interpret relevant laws, policies, standards, and regulatory requirements and translate them into practical security requirements for project teams.Support compliance and governance activities by ensuring security requirements are understood, implemented, and evidenced throughout delivery.Work collaboratively with project teams to embed security controls and risk management practices into technology solutions from design through to operation. We are looking for experience in the following skills:Strong technical knowledge in at least one of the following areas:Public cloudApplication securityNetworkingOn-premises infrastructureUnderstanding of threat modelling, security controls, and risk analysis principles.Ability to assess risks and recommend proportionate security controls and monitoring measures, rather than relying solely on templates or standard security checklists.Experience working across cloud, hybrid, third-party, and non-standard technology environments.Familiarity with at least one recognised security frameworkAbility to validate security assumptions through evidence-based activities, including:Security testingConfiguration reviewsTechnical investigationsStrong analytical and problem-solving skills, with the ability to make informed security recommendations based on technical evidence.Ability to translate technical security concepts into practical guidance for delivery teams and stakeholders.Comfortable working within varying levels of service complexity and autonomy, aligned to SFIA levels 3–5.What’s in it for youAt Accenture in addition to a competitive basic salary, you will also have an extensive benefits package which includes 25 -- 30 days’ vacation per year, private medical insurance and 3 extra days leave per year for charitable work of your choice!Flexibility and mobility are required to deliver this role as there may be requirements to spend time onsite with our clients and partners to enable delivery of the first-class services we are known for. #LI-EUAbout AccentureAccenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services—creating tangible value at speed and scale. We are a talent- and innovation-led company with approximately 791,000 people serving clients in more than 120 countries. Technology is at the core of change today, and we are one of the world’s leaders in helping drive that change, with strong ecosystem relationships. We combine our strength in technology and leadership in cloud, data and AI with unmatched industry experience, functional expertise and global delivery capability. Our broad range of services, solutions and assets across Strategy & Consulting, Technology, Operations, Industry X and Song, together with our culture of shared success and commitment to creating 360 value, enable us to help our clients reinvent and build trusted, lasting relationships. We measure our success by the 360 value we create for our clients, each other, our shareholders, partners and communities.Visit us at Equal Employment Opportunity Statement We believe that no one should be discriminated against because of their differences. All employment decisions shall be made without regard to age, race, creed, color, religion, sex, national origin, ancestry, disability status, sexual orientation, gender identity or expression, marital status, citizenship status or any other basis as protected by applicable law. Our rich diversity makes us more innovative, more competitive, and more creative, which helps us better serve our clients and our communities.SummaryLocation: LondonType: Full time

Senior Consultant in Unit 42, working across proactive cyber security domains including Cloud Security, Security Operations, Cyber Risk Management and Artificial Intelligence in cyber security. We are seeking an individual who is passionate about cyber security, curious with a demonstrated track record of continuous learning, and has the technical acumen to embrace data, technological and innovative approaches to deliver the best consulting outcomes for clients as they address today’s cyber threat landscape. As a Senior Consultant in Unit 42 you will have the opportunity to work across a number of proactive cyber security domains including Cloud Security, Security Operations, Cyber Risk Management and Artificial Intelligence in cyber security. We are seeking an individual who is passionate about cyber security, curious with a demonstrated track record of continuous learning, and has the technical acumen to embrace data, technological and innovative approaches to deliver the best consulting outcomes for clients, as they work to address the challenges associated with today’s cyber threat landscape. • SOC Advisory, • 4+ years of consulting experience in SOC, security engineering, SIEM administration, and incident management with demonstrable success serving large, multinational organisations in designing and implementing an organisation’s security operations program, organisational structures, and capabilities, • Deep technical knowledge in SIEM, SOAR, EDR/XDR, Next Gen Firewalls, Threat Intelligence and Hunting platforms, • Defensive Security Skills (desired), • Experience in security operations design, engineering and/or analysis and investigations in complex environments with correlations across cloud, network, endpoint, and logs, • Ability to assess, identify improvements, and recommend enhancements to protect, detect and rapidly respond to modern threats, • Experience improving security operations capabilities such as asset visibility, threat detection, automation, case management, and compliance support, • Threat hunting and/or compromise assessments to identify IoCs or unknown threats, • Certifications including GIAC GDSA, GCIA, GMON, CISSP, • Understanding of frameworks such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC, • Principal Cloud Security, • 4+ years of cloud security advisory and risk assessment experience, • Hands-on experience with AWS, Azure, GCP or similar, • Experience with Cloud Access Security Broker solutions (e.g., MCAS, Netskope), • Knowledge of CASBs, Cloud Platforms and related dependencies (WAF, SSO, API Security, Cloud Security Posture Management), • Experience with cloud migrations (cloud to cloud or on-prem to cloud), • CLI or scripting knowledge in cloud environments is a plus, • Cloud Security skills (desired), • Secure software development practices (SecDevOps), • Knowledge of OWASP, MITRE ATT&CK & D3FEND, CIS, NIST CSF, CSA CCM & ISO 27107, • Certifications such as CSCP, • Understanding of cyber risk frameworks such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC, • Cyber Risk Management, • Experience in cyber security threat & risk assessments to support strategy and roadmaps, • Proficiency in cyber risk, threat and control assessments, secure software practices, penetration testing, vulnerability assessments, • Knowledge of privacy, security, and compliance laws/regulations and related standards, • Familiarity with MITRE ATT&CK & D3FEND, CIS, NIST CSF, CSA CCM, • Strong communication and presentation skills, • Cyber Risk Management skills (desired), • Threat modelling & application security risk assessments, secure software practices including SecDevOps, • FAIR Open-certified and experience applying FAIR for cyber risk quantification, • Certifications such as CISSP, CISM, CISA, • Understanding of risk frameworks such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC Your Experience • 4+ years of experience performing cyber security consulting in at least two of the three domains above, with SME experience in one domain, • Track record in strengthening existing and developing new client relationships, • Ability to thrive in a startup environment, • Ability to travel as needed, • Potential to contribute across the practice and PANW product knowledge; ability to collaborate across internal and external stakeholders, • Bachelor’s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security or equivalent professional experience The Team Unit 42 Consulting is Palo Alto Network's security advisory team. Our vision is to create a more secure digital world by providing the highest quality incident response, cyber risk management, and digital forensics services to clients of all sizes. Our team is composed of recognized experts with deep technical expertise and experience in investigations, data breach response, digital forensics, and information security. We have a track record of delivering mission-critical cybersecurity solutions with incident response, readiness, and remediation plans, focusing on long-term security improvements. Our Commitment We’re problem solvers that take risks and challenge cybersecurity’s status quo. We’re committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability, please contact us at accommodations@paloaltonetworks.com. Palo Alto Networks is an equal opportunity employer. We celebrate diversity and all qualified applicants will receive consideration regardless of age, ancestry, color, family or medical leave, gender identity or expression, genetic information, marital status, medical condition, national origin, disability, political affiliation, protected veteran status, race, religion, sex, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. • Associate, • Full-time, • Consulting, • Industries: Computer and Network Security #J-18808-Ljbffr

We are looking for a Vice President of Cyber Security reporting to the Regional CISO, UK & Ireland. You will act as a senior cyber advisor across the bank, working with business, technology, risk, compliance, and Global Cybersecurity teams to identify practical security improvements and drive change that strengthens cyber resilience. We are looking for a Vice President of Cyber Security reporting to the Regional CISO, UK & Ireland. You will act as a senior cyber advisor across the bank, working with business, technology, risk, compliance, and Global Cybersecurity teams to identify practical security improvements and drive change that strengthens cyber resilience. The successful candidate will bring strong technical credibility utilising a breadth of knowledge from offensive security, cyber risk, and security solution architecture experience. You will be comfortable reviewing complex technology and control issues, challenging proposed approaches constructively, and translating technical risk into clear, actionable decisions for senior stakeholders. The team you will be joining is part of the Regional CISO organization within Global Cybersecurity (GCS), a key function to the bank because it connects global cyber capabilities with regional business, regulatory, legal entity, and client priorities. This is a vital role to determine technical cyber requirements for the regional to global stakeholder and provide implementation guidance. Helping the bank remain secure in a rapidly evolving threat landscape. • Provide senior cyber advisory and constructive challenge to business, technology, and cyber teams on cyber security matters., • Review complex cyber issues and support solution design, including findings from offensive security testing, vulnerability management, incident lessons learned, and architecture reviews., • Translate security insights into practical risk based remediation plans that reduce risk exposure for the organization., • Lead or materially contribute to regulatory alignment activities, including impact assessments, evidence reviews, responses to supervisory queries, readiness reviews, and remediation tracking., • Drive change across the bank by identifying recurring control weaknesses, root causes, and opportunities to simplify or improve cyber processes, governance, metrics, and accountability., • Prepare clear briefings, papers, risk narratives, and executive updates for senior stakeholders, governance forums, legal entity committees, and Regional CISO leadership., • Act as a regional point of orchestration for cross-functional cyber activities, ensuring issues are owned, prioritised, and progressed through to measurable outcomes., • Support client, business, and external engagement where specialist cyber input is required, presenting the bank's cyber posture and improvement activity in a clear and credible manner., • We are looking for a strong technical candidate with hands-on experience who is able to translate complex technical solutions to both senior technology and business stakeholders, • Technical cyber knowledge with the credibility to engage senior engineers, architects, offensive security specialists, risk teams, and senior business stakeholders., • Practical offensive security awareness, including attack paths, common enterprise weaknesses, penetration testing outputs, red/purple team findings, exploitability, and risk-based remediation., • Security solution architecture knowledge across cloud, identity and access management, network security, application security, endpoint, data protection, third-party connectivity, and resilience controls., • Strong influencing and change leadership skills, with the confidence to challenge constructively and bring teams together around executable solutions., • Ability to convert regulatory expectations and audit findings into pragmatic implementation plans that work in a complex banking environment., • Excellent written and verbal communication skills, including the ability to explain technical risk in concise, business-relevant language., • Sound judgement, ownership mindset, and the ability to balance risk reduction, regulatory expectations, business delivery, and operational practicality. Degree: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, Risk Management, or a related discipline preferred; equivalent industry experience will always be considered. Years of experience: Typically 10-15 years of experience in cyber security, technology risk, security architecture, offensive security, cyber consulting, operational resilience, or a related financial services role. Certifications: Relevant certification to support relevant experience such as CISSP, CISM, CRISC, OSCP, CREST, GIAC/SANS, SABSA and vendor specific certification. Knowledge of tools or technologies: Practical and demonstrable knowledge of MITRE ATT&CK, NIST CSF, ISO 27001, CIS Controls, threat-led penetration testing, vulnerability management, cloud security, IAM, SIEM/SOAR, EDR, application security, network security, and secure architecture design. Additional language requirements: N/A. Role Experience: Experience in senior roles at Financial Services or Critical National Infrastructure organizations is preferred but not required. Ability to demonstrate work in complex and advanced cyber security environments is a benefit. Additional requirements for this role include: Some travel may be required for regional stakeholder, client, industry, or regulatory engagement. The role may occasionally support urgent cyber, regulatory, or incident-related activity outside standard working hours. The candidate must be able to handle confidential and sensitive information appropriately. Hybrid Work Requirement: London-based hybrid working arrangement, with regular presence in the London office in line with business and team requirements. Shift Timings: UK business hours, with flexibility required to support global stakeholders and time-sensitive cyber or regulatory matters. Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future. As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law. Job ID: R-795097 #J-18808-Ljbffr

We are looking for a Vice President of Cyber Security reporting to the Regional CISO, UK & Ireland. You will act as a senior cyber advisor across the bank, working with business, technology, risk, compliance, and Global Cybersecurity teams to identify practical security improvements and drive change that strengthens cyber resilience. We are looking for a Vice President of Cyber Security reporting to the Regional CISO, UK & Ireland. You will act as a senior cyber advisor across the bank, working with business, technology, risk, compliance, and Global Cybersecurity teams to identify practical security improvements and drive change that strengthens cyber resilience. The successful candidate will bring strong technical credibility utilising a breadth of knowledge from offensive security, cyber risk, and security solution architecture experience. You will be comfortable reviewing complex technology and control issues, challenging proposed approaches constructively, and translating technical risk into clear, actionable decisions for senior stakeholders. The team you will be joining is part of the Regional CISO organization within Global Cybersecurity (GCS), a key function to the bank because it connects global cyber capabilities with regional business, regulatory, legal entity, and client priorities. This is a vital role to determine technical cyber requirements for the regional to global stakeholder and provide implementation guidance. Helping the bank remain secure in a rapidly evolving threat landscape. • Provide senior cyber advisory and constructive challenge to business, technology, and cyber teams on cyber security matters., • Review complex cyber issues and support solution design, including findings from offensive security testing, vulnerability management, incident lessons learned, and architecture reviews., • Translate security insights into practical risk based remediation plans that reduce risk exposure for the organization., • Lead or materially contribute to regulatory alignment activities, including impact assessments, evidence reviews, responses to supervisory queries, readiness reviews, and remediation tracking., • Drive change across the bank by identifying recurring control weaknesses, root causes, and opportunities to simplify or improve cyber processes, governance, metrics, and accountability., • Prepare clear briefings, papers, risk narratives, and executive updates for senior stakeholders, governance forums, legal entity committees, and Regional CISO leadership., • Act as a regional point of orchestration for cross-functional cyber activities, ensuring issues are owned, prioritised, and progressed through to measurable outcomes., • Support client, business, and external engagement where specialist cyber input is required, presenting the bank's cyber posture and improvement activity in a clear and credible manner., • We are looking for a strong technical candidate with hands-on experience who is able to translate complex technical solutions to both senior technology and business stakeholders, • Technical cyber knowledge with the credibility to engage senior engineers, architects, offensive security specialists, risk teams, and senior business stakeholders., • Practical offensive security awareness, including attack paths, common enterprise weaknesses, penetration testing outputs, red/purple team findings, exploitability, and risk-based remediation., • Security solution architecture knowledge across cloud, identity and access management, network security, application security, endpoint, data protection, third-party connectivity, and resilience controls., • Strong influencing and change leadership skills, with the confidence to challenge constructively and bring teams together around executable solutions., • Ability to convert regulatory expectations and audit findings into pragmatic implementation plans that work in a complex banking environment., • Excellent written and verbal communication skills, including the ability to explain technical risk in concise, business-relevant language., • Sound judgement, ownership mindset, and the ability to balance risk reduction, regulatory expectations, business delivery, and operational practicality. Degree: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, Risk Management, or a related discipline preferred; equivalent industry experience will always be considered. Years of experience: Typically 10-15 years of experience in cyber security, technology risk, security architecture, offensive security, cyber consulting, operational resilience, or a related financial services role. Certifications: Relevant certification to support relevant experience such as CISSP, CISM, CRISC, OSCP, CREST, GIAC/SANS, SABSA and vendor specific certification. Knowledge of tools or technologies: Practical and demonstrable knowledge of MITRE ATT&CK, NIST CSF, ISO 27001, CIS Controls, threat-led penetration testing, vulnerability management, cloud security, IAM, SIEM/SOAR, EDR, application security, network security, and secure architecture design. Additional language requirements: N/A. Role Experience: Experience in senior roles at Financial Services or Critical National Infrastructure organizations is preferred but not required. Ability to demonstrate work in complex and advanced cyber security environments is a benefit. Additional requirements for this role include: Some travel may be required for regional stakeholder, client, industry, or regulatory engagement. The role may occasionally support urgent cyber, regulatory, or incident-related activity outside standard working hours. The candidate must be able to handle confidential and sensitive information appropriately. Hybrid Work Requirement: London-based hybrid working arrangement, with regular presence in the London office in line with business and team requirements. Shift Timings: UK business hours, with flexibility required to support global stakeholders and time-sensitive cyber or regulatory matters. Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future. As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law. Job ID: R-795097 #J-18808-Ljbffr

We are looking for a Vice President of Cyber Security reporting to the Regional CISO, UK & Ireland. You will act as a senior cyber advisor across the bank, working with business, technology, risk, compliance, and Global Cybersecurity teams to identify practical security improvements and drive change that strengthens cyber resilience. We are looking for a Vice President of Cyber Security reporting to the Regional CISO, UK & Ireland. You will act as a senior cyber advisor across the bank, working with business, technology, risk, compliance, and Global Cybersecurity teams to identify practical security improvements and drive change that strengthens cyber resilience. The successful candidate will bring strong technical credibility utilising a breadth of knowledge from offensive security, cyber risk, and security solution architecture experience. You will be comfortable reviewing complex technology and control issues, challenging proposed approaches constructively, and translating technical risk into clear, actionable decisions for senior stakeholders. The team you will be joining is part of the Regional CISO organization within Global Cybersecurity (GCS), a key function to the bank because it connects global cyber capabilities with regional business, regulatory, legal entity, and client priorities. This is a vital role to determine technical cyber requirements for the regional to global stakeholder and provide implementation guidance. Helping the bank remain secure in a rapidly evolving threat landscape. • Provide senior cyber advisory and constructive challenge to business, technology, and cyber teams on cyber security matters., • Review complex cyber issues and support solution design, including findings from offensive security testing, vulnerability management, incident lessons learned, and architecture reviews., • Translate security insights into practical risk based remediation plans that reduce risk exposure for the organization., • Lead or materially contribute to regulatory alignment activities, including impact assessments, evidence reviews, responses to supervisory queries, readiness reviews, and remediation tracking., • Drive change across the bank by identifying recurring control weaknesses, root causes, and opportunities to simplify or improve cyber processes, governance, metrics, and accountability., • Prepare clear briefings, papers, risk narratives, and executive updates for senior stakeholders, governance forums, legal entity committees, and Regional CISO leadership., • Act as a regional point of orchestration for cross-functional cyber activities, ensuring issues are owned, prioritised, and progressed through to measurable outcomes., • Support client, business, and external engagement where specialist cyber input is required, presenting the bank's cyber posture and improvement activity in a clear and credible manner., • We are looking for a strong technical candidate with hands-on experience who is able to translate complex technical solutions to both senior technology and business stakeholders, • Technical cyber knowledge with the credibility to engage senior engineers, architects, offensive security specialists, risk teams, and senior business stakeholders., • Practical offensive security awareness, including attack paths, common enterprise weaknesses, penetration testing outputs, red/purple team findings, exploitability, and risk-based remediation., • Security solution architecture knowledge across cloud, identity and access management, network security, application security, endpoint, data protection, third-party connectivity, and resilience controls., • Strong influencing and change leadership skills, with the confidence to challenge constructively and bring teams together around executable solutions., • Ability to convert regulatory expectations and audit findings into pragmatic implementation plans that work in a complex banking environment., • Excellent written and verbal communication skills, including the ability to explain technical risk in concise, business-relevant language., • Sound judgement, ownership mindset, and the ability to balance risk reduction, regulatory expectations, business delivery, and operational practicality. Degree: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, Engineering, Risk Management, or a related discipline preferred; equivalent industry experience will always be considered. Years of experience: Typically 10-15 years of experience in cyber security, technology risk, security architecture, offensive security, cyber consulting, operational resilience, or a related financial services role. Certifications: Relevant certification to support relevant experience such as CISSP, CISM, CRISC, OSCP, CREST, GIAC/SANS, SABSA and vendor specific certification. Knowledge of tools or technologies: Practical and demonstrable knowledge of MITRE ATT&CK, NIST CSF, ISO 27001, CIS Controls, threat-led penetration testing, vulnerability management, cloud security, IAM, SIEM/SOAR, EDR, application security, network security, and secure architecture design. Additional language requirements: N/A. Role Experience: Experience in senior roles at Financial Services or Critical National Infrastructure organizations is preferred but not required. Ability to demonstrate work in complex and advanced cyber security environments is a benefit. Additional requirements for this role include: Some travel may be required for regional stakeholder, client, industry, or regulatory engagement. The role may occasionally support urgent cyber, regulatory, or incident-related activity outside standard working hours. The candidate must be able to handle confidential and sensitive information appropriately. Hybrid Work Requirement: London-based hybrid working arrangement, with regular presence in the London office in line with business and team requirements. Shift Timings: UK business hours, with flexibility required to support global stakeholders and time-sensitive cyber or regulatory matters. Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you’ll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future. As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law. Job ID: R-795097 #J-18808-Ljbffr

We are looking for a Vice President of Cyber Security reporting to the Regional CISO, UK & Ireland. You will act as a senior cyber advisor across the bank, working with business, technology, risk, compliance, and Global Cybersecurity teams to identify practical security improvements and drive change that strengthens cyber resilience. The team you will be joining is part of the Regional CISO organization within Global Cybersecurity (GCS), a key function to the bank because it connects global cyber capabilities with regional business, regulatory, legal entity, and client priorities. This is a vital role to determine technical cyber requirements for the regional to global stakeholder and provide implementation guidance. Helping the bank remain secure in a rapidly evolving threat landscape. In this role, you will: • Provide senior cyber advisory and constructive challenge to business, technology, and cyber teams on cyber security matters., • Review complex cyber issues and support solution design, including findings from offensive security testing, vulnerability management, incident lessons learned, and architecture reviews., • Translate security insights into practical risk based remediation plans that reduce risk exposure for the organization., • Lead or materially contribute to regulatory alignment activities, including impact assessments, evidence reviews, responses to supervisory queries, readiness reviews, and remediation tracking., • Drive change across the bank by identifying recurring control weaknesses, root causes, and opportunities to simplify or improve cyber processes, governance, metrics, and accountability., • Prepare clear briefings, papers, risk narratives, and executive updates for senior stakeholders, governance forums, legal entity committees, and Regional CISO leadership., • Act as a regional point of orchestration for cross-functional cyber activities, ensuring issues are owned, prioritised, and progressed through to measurable outcomes., • Support client, business, and external engagement where specialist cyber input is required, presenting the bank's cyber posture and improvement activity in a clear and credible manner. These skills will help you succeed in this role: • We are looking for a strong technical candidate with hands-on experience who is able to translate complex technical solutions to both senior technology and business stakeholders, • Technical cyber knowledge with the credibility to engage senior engineers, architects, offensive security specialists, risk teams, and senior business stakeholders., • Practical offensive security awareness, including attack paths, common enterprise weaknesses, penetration testing outputs, red/purple team findings, exploitability, and risk-based remediation., • Security solution architecture knowledge across cloud, identity and access management, network security, application security, endpoint, data protection, third-party connectivity, and resilience controls., • Strong influencing and change leadership skills, with the confidence to challenge constructively and bring teams together around executable solutions., • Ability to convert regulatory expectations and audit findings into pragmatic implementation plans that work in a complex banking environment., • Excellent written and verbal communication skills, including the ability to explain technical risk in concise, business-relevant language., • Sound judgement, ownership mindset, and the ability to balance risk reduction, regulatory expectations, business delivery, and operational practicality. Degree: Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, Risk Management, or a related discipline preferred; equivalent industry experience will always be considered. Years of experience: Typically 10-15 years of experience in cyber security, technology risk, security architecture, offensive security, cyber consulting, operational resilience, or a related financial services role. Certifications: Relevant certification to support relevant experience such as CISSP, CISM, CRISC, OSCP, CREST, GIAC/SANS, SABSA and vendor specific certification. Knowledge of tools or technologies: Practical and demonstrable knowledge of MITRE ATT&CK, NIST CSF, ISO 27001, CIS Controls, threat-led penetration testing, vulnerability management, cloud security, IAM, SIEM/SOAR, EDR, application security, network security, and secure architecture design. Additional language requirements: N/A. Role Experience: Experience in senior roles at Financial Services or Critical National Infrastructure organizations is preferred but not required. Ability to demonstrate work in complex and advanced cyber security environments is a benefit. Additional requirements for this role include: Some travel may be required for regional stakeholder, client, industry, or regulatory engagement. The role may occasionally support urgent cyber, regulatory, or incident-related activity outside standard working hours. The candidate must be able to handle confidential and sensitive information appropriately. Hybrid Work Requirement: London-based hybrid working arrangement, with regular presence in the London office in line with business and team requirements. Shift Timings: UK business hours, with flexibility required to support global stakeholders and time-sensitive cyber or regulatory matters. Across the globe, institutional investors rely on us to help them manage risk, respond to challenges, and drive performance and profitability. We keep our clients at the heart of everything we do, and smart, engaged employees are essential to our continued success. We are committed to fostering an environment where every employee feels valued and empowered to reach their full potential. As an essential partner in our shared success, you'll benefit from inclusive development opportunities, flexible work-life support, paid volunteer days, and vibrant employee networks that keep you connected to what matters most. Join us in shaping the future. As an Equal Opportunity Employer, we consider all qualified applicants for all positions without regard to race, creed, color, religion, national origin, ancestry, ethnicity, age, disability, genetic information, sex, sexual orientation, gender identity or expression, citizenship, marital status, domestic partnership or civil union status, familial status, military and veteran status, and other characteristics protected by applicable law. Discover more information on jobs at StateStreet.com/careers Read our CEO Statement #J-18808-Ljbffr

Senior Consultant in Unit 42, working across proactive cyber security domains including Cloud Security, Security Operations, Cyber Risk Management and Artificial Intelligence in cyber security. We are seeking an individual who is passionate about cyber security, curious with a demonstrated track record of continuous learning, and has the technical acumen to embrace data, technological and innovative approaches to deliver the best consulting outcomes for clients as they address today’s cyber threat landscape. As a Senior Consultant in Unit 42 you will have the opportunity to work across a number of proactive cyber security domains including Cloud Security, Security Operations, Cyber Risk Management and Artificial Intelligence in cyber security. We are seeking an individual who is passionate about cyber security, curious with a demonstrated track record of continuous learning, and has the technical acumen to embrace data, technological and innovative approaches to deliver the best consulting outcomes for clients, as they work to address the challenges associated with today’s cyber threat landscape. • SOC Advisory, • 4+ years of consulting experience in SOC, security engineering, SIEM administration, and incident management with demonstrable success serving large, multinational organisations in designing and implementing an organisation’s security operations program, organisational structures, and capabilities, • Deep technical knowledge in SIEM, SOAR, EDR/XDR, Next Gen Firewalls, Threat Intelligence and Hunting platforms, • Defensive Security Skills (desired), • Experience in security operations design, engineering and/or analysis and investigations in complex environments with correlations across cloud, network, endpoint, and logs, • Ability to assess, identify improvements, and recommend enhancements to protect, detect and rapidly respond to modern threats, • Experience improving security operations capabilities such as asset visibility, threat detection, automation, case management, and compliance support, • Threat hunting and/or compromise assessments to identify IoCs or unknown threats, • Certifications including GIAC GDSA, GCIA, GMON, CISSP, • Understanding of frameworks such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC, • Principal Cloud Security, • 4+ years of cloud security advisory and risk assessment experience, • Hands-on experience with AWS, Azure, GCP or similar, • Experience with Cloud Access Security Broker solutions (e.g., MCAS, Netskope), • Knowledge of CASBs, Cloud Platforms and related dependencies (WAF, SSO, API Security, Cloud Security Posture Management), • Experience with cloud migrations (cloud to cloud or on-prem to cloud), • CLI or scripting knowledge in cloud environments is a plus, • Cloud Security skills (desired), • Secure software development practices (SecDevOps), • Knowledge of OWASP, MITRE ATT&CK & D3FEND, CIS, NIST CSF, CSA CCM & ISO 27107, • Certifications such as CSCP, • Understanding of cyber risk frameworks such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC, • Cyber Risk Management, • Experience in cyber security threat & risk assessments to support strategy and roadmaps, • Proficiency in cyber risk, threat and control assessments, secure software practices, penetration testing, vulnerability assessments, • Knowledge of privacy, security, and compliance laws/regulations and related standards, • Familiarity with MITRE ATT&CK & D3FEND, CIS, NIST CSF, CSA CCM, • Strong communication and presentation skills, • Cyber Risk Management skills (desired), • Threat modelling & application security risk assessments, secure software practices including SecDevOps, • FAIR Open-certified and experience applying FAIR for cyber risk quantification, • Certifications such as CISSP, CISM, CISA, • Understanding of risk frameworks such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC Your Experience • 4+ years of experience performing cyber security consulting in at least two of the three domains above, with SME experience in one domain, • Track record in strengthening existing and developing new client relationships, • Ability to thrive in a startup environment, • Ability to travel as needed, • Potential to contribute across the practice and PANW product knowledge; ability to collaborate across internal and external stakeholders, • Bachelor’s Degree in Information Security, Computer Science, Digital Forensics, Cyber Security or equivalent professional experience The Team Unit 42 Consulting is Palo Alto Network's security advisory team. Our vision is to create a more secure digital world by providing the highest quality incident response, cyber risk management, and digital forensics services to clients of all sizes. Our team is composed of recognized experts with deep technical expertise and experience in investigations, data breach response, digital forensics, and information security. We have a track record of delivering mission-critical cybersecurity solutions with incident response, readiness, and remediation plans, focusing on long-term security improvements. Our Commitment We’re problem solvers that take risks and challenge cybersecurity’s status quo. We’re committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability, please contact us at accommodations@paloaltonetworks.com. Palo Alto Networks is an equal opportunity employer. We celebrate diversity and all qualified applicants will receive consideration regardless of age, ancestry, color, family or medical leave, gender identity or expression, genetic information, marital status, medical condition, national origin, disability, political affiliation, protected veteran status, race, religion, sex, or other legally protected characteristics. All your information will be kept confidential according to EEO guidelines. • Associate, • Full-time, • Consulting, • Industries: Computer and Network Security #J-18808-Ljbffr

We’re seeking an Assistant Marketing Manager to help bring our campaigns to life across social channels, content creation and activations, while supporting the wider Brand team. You will own day-to-day social execution, build the Mitre community, monitor trends and develop marketing toolkits and a

Cyber Security Contractors (Multiple Opportunities) | SC Cleared | £594/day | Remote UK Location: UK Remote (occasional client-site visits required) Contract: Inside IR35 Rate: £594 per day (Umbrella) Duration: Until March 2027 Security Clearance: Active SC Clearance Required We are supporting a major, long-term Cyber Security Programme and are seeking experienced SC-cleared professionals across several specialist disciplines. These are excellent opportunities to join a high-profile programme delivering critical security services within a complex environment. Opportunities Available Security Architect (Cloud Security) Key responsibilities include: Cloud security architecture and design assurance Security assessments and risk reviews Development and implementation of security standards, patterns, and best practices Collaboration with technical and business stakeholders to ensure secure-by-design solutions Experience required: Strong cloud security architecture background Experience with enterprise cloud platforms (AWS, Azure, or GCP) Security design and assurance expertise Knowledge of security frameworks and standards Security Operations Analyst Key responsibilities include: Security operations monitoring and analysis Cyber threat intelligence assessment Threat modelling and risk identification Incident investigation and security event analysis Experience required: Security Operations Centre (SOC) or cyber defence experience Hands-on threat intelligence and analysis capability Threat modelling expertise Strong understanding of cyber security technologies and processes Threat Intelligence Analyst Key responsibilities include: Production of threat intelligence reports and assessments Analysis of Indicators of Compromise (IOCs) and Tactics, Techniques & Procedures (TTPs) Tracking emerging cyber threats and threat actors Supporting security architecture and operational security decision-making Experience required: Proven cyber threat intelligence background Experience analysing threat actor activity and attack methodologies Strong reporting and stakeholder engagement skills Knowledge of intelligence frameworks such as MITRE ATT&CK Information Assurance Consultant Key responsibilities include: Information Assurance (IA) and Governance, Risk & Compliance (GRC) activities Quality assurance and quality management support Business Continuity and Disaster Recovery (BCDR) planning and assessment Policy, controls, and compliance reviews Experience required: Strong IA/GRC experience Knowledge of security governance frameworks Experience in quality management and assurance activities BCDR planning and implementation expertise Essential Requirements Active SC Clearance (mandatory) Proven experience within the relevant cyber security discipline Ability to work effectively in complex stakeholder environments Strong communication and reporting skills

Security Engineer Job Type: Fixed-Term Contract (6 months) Working Arrangement: Hybrid – 2 days in the office per week Office Location: City of London Full Job Description This is an exciting opportunity to play a pivotal role in delivering and advancing security engineering initiatives within a globally recognised law firm. You will join a fast-paced and dynamic environment where you'll contribute to a variety of security projects, helping to strengthen the firm's security capabilities while supporting key business objectives. This is not a traditional SOC role. Whilst SIEM engineering and integration experience remain essential, the focus is firmly on security engineering, project delivery, platform improvements, and business engagement. We're looking for someone who can successfully balance multiple priorities, adapt quickly to changing requirements, and drive security initiatives forward with minimal supervision. The Role As a Security Engineer, you will: Lead and contribute to a range of security engineering and improvemeant projects across the business. Enhance, optimise, and integrate security technologies, with a particular focus on SIEM platforms and associated tooling. Identify, onboard, and integrate new log sources across cloud, on-premise, network, endpoint, and identity environments. Design, build, and implement security solutions that improve the organisation's detection, monitoring, and response capabilities. Develop and refine detection use cases, dashboards, workflows, and automation initiatives. Support the design and execution of security-related change and build activities. Work closely with technical teams, security stakeholders, and business users to deliver successful outcomes. Provide subject matter expertise and technical guidance across security platforms and projects. Produce and maintain high-quality technical and operational documentation. What We're Looking For Essential Experience Proven experience working in a Security Engineering role rather than a purely SOC or analyst-focused position. Strong hands-on SIEM engineering and integration experience with platforms such as Microsoft Sentinel, Splunk, Exabeam, QRadar, or Elastic. Experience delivering security-related projects, change initiatives, and platform enhancements. Strong understanding of log ingestion technologies and formats including JSON, Syslog, CEF, and XML. Experience building and tuning detections, correlation rules, dashboards, and security workflows. Scripting and automation experience using tools such as Python, PowerShell, or similar technologies. Ability to manage multiple projects and competing priorities within a fast-paced environment. Excellent communication and stakeholder management skills, with the confidence to engage directly with both technical and non-technical audiences. Strong business English, both written and verbal. Highly Desirable Previous experience working within a law firm, professional services organisation, or consultancy environment. Experience working in client-facing or business-facing security roles. Knowledge of MITRE ATT&CK, threat detection, security operations, and security architecture principles. Familiarity with SOAR platforms and security automation. Relevant certifications such as CISSP, SSCP, Microsoft SC-200/SC-100, or GIAC certifications. A Level 4 qualification or higher in a computing-related discipline, or equivalent commercial experience. Who Will Succeed in This Role? We're looking for a high-energy, proactive individual who thrives in a fast-moving environment. You'll be comfortable operating autonomously, driving initiatives forward, and adapting to changing business priorities. This role will suit someone who enjoys building relationships across the organisation, can communicate effectively with a wide range of stakeholders, and has a track record of delivering successful security engineering outcomes. Services offered by Computappoint Limited are those of an Employment Business and/or Employment Agency in relation to this vacancy. Computappoint do not use AI to filter or assess candidates. We use experienced and dedicated recruiters who focus on matching the best people with the right opportunities

Senior Application Security Consultant (SAST/DAST/OWASP )/ DevSecOps Security - Banking - London Secure SDLC | SAST | DAST | Threat Modelling | Cloud Security | CI/CD Location: London (Hybrid - 8 days onsite per month) Contract: 12 Months + extension Rate: £500-£550 per day (Umbrella) The Opportunity We're looking for an experienced Senior Application Security Consultant / DevSecOps Security Architect to join a high-performing Cyber Security function within a large enterprise technology environment. Working alongside software engineering, cloud, architecture and DevOps teams, you'll play a key role in embedding security throughout the Software Development Lifecycle, ensuring applications are designed, developed and deployed securely. This is an excellent opportunity for someone passionate about Secure-by-Design, DevSecOps and modern Application Security within a large-scale cloud environment. Key Responsibilities Lead application security reviews across business-critical applications and cloud platforms. Conduct security architecture and secure design reviews. Perform application security risk assessments and define security requirements. Lead Threat Modelling workshops using STRIDE, MITRE ATT&CK or similar methodologies. Embed Secure SDLC principles into engineering teams. Integrate security tooling into CI/CD pipelines and DevSecOps processes. Review and analyse SAST, DAST and Software Composition Analysis (SCA) findings. Work closely with development teams to prioritise vulnerability remediation. Define security testing requirements and support penetration testing activities. Produce security standards, technical guidance and best practice documentation. Act as the Application Security SME across multiple technology programmes.Essential Skills Application Security Secure Software Development Lifecycle (SSDLC) OWASP Top 10 Secure Coding Secure Design Reviews API Security REST APIs Microservices Security Application Security Risk AssessmentsThreat Modelling STRIDE MITRE ATT&CK Security Architecture Risk AssessmentsDevSecOps CI/CD Security GitHub Actions GitLab Jenkins Azure DevOps Security Automation Shift Left SecuritySecurity Testing SAST DAST SCA Vulnerability Management Penetration TestingCloud Security AWS, Azure or GCP Kubernetes Docker Container Security Cloud Security Best PracticesSecurity Tooling Experience with one or more of: Checkmarx Fortify SonarQube Veracode Semgrep Burp Suite OWASP ZAP Snyk Trivy Prisma Cloud Aqua WizIdeal Background You'll ideally have: 8+ years in Cyber Security Strong Application Security or DevSecOps experience Experience working directly with software engineering teams Experience embedding security into CI/CD pipelines Strong knowledge of Secure SDLC Experience conducting Threat Modelling sessions Excellent stakeholder management and communication skills Previous experience within Banking, Financial Services, Insurance or another highly regulated enterprise environmentContract Details 12-month contract £500-£600 per day (Umbrella) Hybrid working - 8 days onsite per month in London Immediate interview availability preferred*Rates depend on experience and client requirements

Job Description Job Title Interim Cyber Security Officer (Senior Cyber Security Engineer) Contract Details • Contract Length: 6 Months, • Start Date: March 2026, • Location: London (Hybrid/On-site as required), • IR35 Status: Inside IR35, • Daily Rate: Up to £500 per day (Umbrella) Overview We are seeking an experienced Senior Cyber Security Engineer to join a Cyber Security team on an interim contract. This role will provide senior technical expertise to support and optimise an outsourced Security Operations Centre (SOC), ensuring the organisation maximises its investment in security technologies while strengthening its cyber defence capabilities. The successful candidate will have extensive hands-on experience with CrowdStrike Falcon and Splunk Enterprise Security, with the ability to enhance security monitoring, improve incident response processes, support threat hunting activities, and mentor internal team members. Key Responsibilities Lead the deployment, configuration, administration, and ongoing optimisation of the CrowdStrike Falcon platform, ensuring endpoint security policies are effectively implemented and maintained. Work closely with the outsourced Security Operations Centre to develop and enhance Splunk dashboards, alerts, data models, and monitoring capabilities, enabling the identification and investigation of sophisticated cyber threats. Act as the senior technical escalation point for complex and high-priority cyber security incidents, utilising Endpoint Detection and Response (EDR) and Security Information and Event Management (SIEM) technologies to support rapid investigation, containment, and remediation. Design, develop, and improve Security Orchestration, Automation and Response (SOAR) workflows to reduce manual effort, improve operational efficiency, and accelerate incident response. Conduct proactive threat hunting activities using advanced search techniques and security telemetry to identify malicious activity that may have evaded automated detection. Support vulnerability assessment activities and contribute to security testing initiatives, including exposure to penetration testing and web application security assessments. Develop and maintain cyber security policies, standards, and technical documentation to support governance and operational best practice. Provide technical guidance, mentoring, and knowledge transfer to existing cyber security team members, strengthening internal capability across CrowdStrike, Splunk, and security operations. Collaborate with internal stakeholders and external partners to continuously improve cyber security monitoring, detection, and response capabilities. Maintain awareness of emerging cyber threats, vulnerabilities, and industry best practices to ensure security controls remain effective and up to date. Essential Requirements Applicants must have a minimum of five years' experience working in a dedicated Cyber Security Engineering or SOC Tier 3 environment. Extensive hands-on experience administering and supporting CrowdStrike Falcon, including Falcon Prevent, Falcon Insight, and Falcon Discover, is essential. Strong experience working with Splunk Enterprise Security, including writing complex Search Processing Language (SPL) queries, developing dashboards, alerts, reports, and managing security data. Experience supporting Security Operations Centres, incident response, endpoint detection and response, security monitoring, and threat hunting activities. Excellent understanding of network protocols, cyber attack methodologies, security monitoring techniques, and the MITRE ATT&CK Framework. Good knowledge of cloud security principles across Microsoft Azure and/or AWS environments. Strong analytical, troubleshooting, communication, and stakeholder management skills with the ability to work independently and manage multiple priorities. Desirable Experience performing vulnerability assessments using recognised vulnerability management tools. Exposure to penetration testing and web application security testing. Experience creating and maintaining cyber security policies, standards, and governance documentation. Professional cyber security certifications such as CompTIA Security+, Network+, CySA+, GSEC, CISSP, GCIH, GCIA, or CCSP. CrowdStrike certifications including CCFA, CCFR, or CCSE. Splunk Certified Cybersecurity Defense Engineer certification

4 x Carpenters Required – Plumstead, London Location: Plumstead, London Start Date: Monday, 10th August ⏰ Hours: Monday – Friday | 07:30 – 16:30 (8.5 hours paid) Duration: 2 Weeks Requirements: Blue CSCS Card Duties: Fitting 2 Howdens kitchens Installing 4 toilet backs (IPS panels) Fitting skirting throughout Installing window boards Fitting stair stringers (4 staircases in total) Essential Tools: Plunge saw Mitre saw Nail gun Hand tools (impact driver, combi drill, hammer drill, skill saw, square, etc.) Class H dust extractor Interested? WhatsApp Betim: (phone number removed) ☎️ Or call our office: (phone number removed) and speak to one of our recruitment team. Please have your CV and Blue CSCS Card ready when applying

Security Operations Analyst £594 per day (Umbrella) | Inside IR35 Remote with occasional client site visits Active SC Clearance Required Contract until March 2027 Security Operations Analyst | Cyber Threat Intelligence | Threat Modelling We are looking for an experienced Security Operations Analyst to join a long-term cybersecurity programme supporting critical enterprise and government-facing environments. This is an excellent opportunity for a security professional with expertise in Cybersecurity Operations, Cyber Threat Intelligence, and Threat Modelling to play a key role in identifying, assessing, and mitigating cyber risks while enhancing the overall security posture of complex organisations. Working alongside Security Architects, Threat Intelligence teams, SOC analysts, engineers, and key stakeholders, you will help defend critical systems through intelligence-led security operations and proactive threat analysis. The Role As a Security Operations Analyst, you will be responsible for monitoring and assessing the cyber threat landscape, analysing security events, supporting threat modelling activities, and providing actionable intelligence to strengthen security controls and operational resilience. You will contribute to both strategic and operational cybersecurity initiatives, helping organisations anticipate, identify, and respond to evolving threats. This role is primarily remote, although candidates must be willing to attend client sites when required. Key Responsibilities Monitor, analyse, and assess cyber threats, vulnerabilities, and security incidents. Support security operations activities through threat detection, investigation, and analysis. Collect, analyse, and interpret cyber threat intelligence from multiple internal and external sources. Identify emerging threats, attack techniques, and threat actor behaviours. Produce intelligence reports, threat assessments, and actionable recommendations. Conduct threat modelling exercises to identify potential attack vectors and security weaknesses. Support security strategy initiatives by providing intelligence-led insights and risk assessments. Collaborate with security teams to improve detection, response, and mitigation capabilities. Support incident investigations and provide intelligence to assist with response activities. Assist in the development and enhancement of security controls, processes, and operational procedures. Work with technical and non-technical stakeholders to communicate cyber risks and security recommendations. Contribute to continuous improvement initiatives across security operations and threat management functions. Essential Skills & Experience Proven experience as a Security Operations Analyst, Cyber Security Analyst, SOC Analyst, or similar cybersecurity role. Strong understanding of cybersecurity principles, threat landscapes, and security operations. Hands-on experience in Cyber Threat Intelligence analysis and reporting. Experience conducting Threat Modelling exercises and risk assessments. Knowledge of threat actor tactics, techniques, and procedures (TTPs). Understanding of common attack frameworks such as MITRE ATT&CK and Cyber Kill Chain. Experience investigating security events and supporting incident response activities. Strong analytical, investigative, and problem-solving skills. Ability to assess cyber risks and communicate findings clearly to stakeholders. Excellent written and verbal communication skills. Experience working within enterprise-scale or highly regulated environments. Desirable Experience Security Operations Centre (SOC) experience. Experience with SIEM platforms and security monitoring tools. Knowledge of cloud security and hybrid infrastructure environments. Exposure to vulnerability management and threat hunting activities. Experience supporting government, defence, or public sector programmes. Familiarity with security frameworks such as NIST, ISO 27001, or CIS Controls. Consulting or client-facing experience. Key Competencies Cybersecurity Operations Cyber Threat Intelligence Threat Modelling Security Monitoring Risk Analysis Incident Investigation Cyber Risk Management Threat Assessment Stakeholder Engagement Problem Solving Continuous Improvement