Spencer Rose Ltd

Lead Incident Response Specialist Salary - £110,000 + Discretionary Bonus (Depending on Experience) Hybrid working - x2 days per week in office (London based) Spencer Rose are currently partnered with a leading Financial Services organisation who are currently on the lookout for a Lead Incident Response Specialist on a Full time basis. Within this role, the Lead Incident Response Specialist will be responsible for proactively investigating and responding to security incidents that have been escalated from the SOC. The Lead Incident Response Specialist will have the following responsibilities - Develop and refine incident response standard operating procedures and playbooks Operate and maintain controls related to SIEM, DLP, Vulnerability Management, Cyber Threat Intelligence, Endpoint Protection To ensure incident response efforts and documentation comply with industry standards and best practices like GDPR, SOC, NIST & ISO The LeadIncident Response Specialist will need to have the following skills/experience - 5+ years experience working within Incident Response or similar Previous experience operating and maintaining IT security controls related to SIEM, DLP, Vulnerability Management and Cyber Threat Intelligence Must have practical commercial experience of IT Security analysis and engineering experience including securing systems, networks and infrastructure; operational support Previous working within either Financial Services, Banking or Insurance

Infrastructure Architect London, Docklands (Hybrid) £100,000 - £110,000 per annum + annual discretionary bonus On behalf of an industry Leading financial services organisation, I am seeking an experienced Infrastructure Architect additionally with a background in Security Architecture. The Infrastructure Architect will possess broad knowledge in Cloud Infrastructure, Platforms and Cyber Security with a focus on capability enhancements and continuous improvement. This role involves collaborating with cross-functional teams to understand business requirements, providing technical leadership, and ensuring the design meets architectural principles and security standards. The organisation offers hybrid working with a non-negotiable 2 days a week in their London office, therefore you must be within reasonable commuting distance to London. Responsibilities: Author High Level Solution Design, Solutions Overview and Conceptual Architectures. Design and architect solutions based on technical and business requirements. Develop and document architecture blueprints and best practices. Act as a lead Architecture on projects Contribute to the development & management of Infrastructure Strategy Contribute to the continuous improvement of Architecture within the business Contribute to product roadmaps & reference architectures. Provide technical guidance to team members and stakeholders. Skills/Experience required: At least 8 years' experience in an Infrastructure Architecture capacity additionally with experience in authoring Cyber Security Architecture. Experience in a regulated financial services environment (banking/insurance preferred) Experience in IaC (nice to have) Automation experience highly advantageous - eg Ansible/Jenkins (alternatives considered). Knowledge of networking design and principles in both public cloud and traditional data centre Knowledge of hybrid cloud architectures. Ability to assess and recommend third-party tools and services to complement AWS offerings. Ability to communicate solutions to other stakeholders Broad knowledge of Networks & Security Identify & recommend opportunities for efficiency. Stay updated on new features and capabilities & best practices. Ability to deal with ambiguity and manage diversity. Share knowledge with the team and contribute to the organization's learning culture. Experience with cloud security solutions and services

Application Security Engineer Bristol or Edinburgh - minimum of 3 days per week on site. £90,000 + great benefits An impressive financial services business is looking to hire an Application Security Engineer to support this team with the risk and remediation activities. This business is going through a big technology transformation programme that is estimated to take 3 -5 years. The successful Application Security Engineer will be part of this journey and have great technical exposure and the ability to rapidly progress. Working closely in one of transformation projects, the successful Application Security Engineer will work closely with the wider security and technology teams to define the strategy and roadmap of technology changes moving forward. Application Security Engineer Duties and Responsibilities The successful Application Security Engineer will: Provide security input into solution design to ensure that security principles are incorporated at both the platform and software level Automate tooling to run security fixes over a variety of repo's Ensure that security requirement input is provided across the programme to ensure that the new technology is secure by design Support the teams to interpret security requirements of the project Conduct threat modelling and pen testing to identify threats and establish controls Support wider teams with security advice and guidance in both a verbal and written format Lead delivery of hands-on security engineering solutions when needed Application Security Engineer - Your Background The ideal Application Security Engineer will have: Experience in a similar role, in both responsibility and scale Proficiency with one of the following: Python, Jenkins, Powershell, Bash, GitHub Actions Relevant professional certifications for example: CISSP SANS Crest/CHECK Strong understanding of shift left Proven experience with of working with development teams on security related topics Either hands on secure software development or applications security testing Likely come from a pen testing, SRE, or Software Development Background We invite individuals from underrepresented groups to apply for any of our roles and are committed to supporting accessibility needs.

Application Security Engineer Bristol - 3 days a week on site £90,000 + great benefits An impressive financial services business is looking to hire an Application Security Engineer to support this team with the risk and remediation activities. This business is going through a big technology transformation programme that is estimated to take 3 -5 years. The successful Application Security Engineer will be part of this journey and have great technical exposure and the ability to rapidly progress. Working closely in one of transformation projects, the successful Application Security Engineer will work closely with the wider security and technology teams to define the strategy and roadmap of technology changes moving forward. Application Security Engineer Duties and Responsibilities The successful Application Security Engineer will: Provide security input into solution design to ensure that security principles are incorporated at both the platform and software level Automate tooling to run security fixes over a variety of repo's Ensure that security requirement input is provided across the programme to ensure that the new technology is secure by design Support the teams to interpret security requirements of the project Conduct threat modelling and pen testing to identify threats and establish controls Support wider teams with security advice and guidance in both a verbal and written format Lead delivery of hands-on security engineering solutions when needed Application Security Engineer - Your Background The ideal Application Security Engineer will have: Experience in a similar role, in both responsibility and scale Proficiency with one of the following: Python, Jenkins, Powershell, Bash, GitHub Actions Relevant professional certifications for example: CISSP SANS Crest/CHECK Strong understanding of shift left Proven experience with of working with development teams on security related topics Either hands on secure software development or applications security testing Likely come from a pen testing, SRE, or Software Development Background We invite individuals from underrepresented groups to apply for any of our roles and are committed to supporting accessibility needs.

DevOps Engineer - CI/CD, SQL, Azure DevOps Up to £70,000 Croydon My client, a rapidly growing business platform supporting innovative insurance teams, is seeking a DevOps Engineer to join their expanding data function. This is a high-impact role offering significant exposure across the organisation, with opportunities to shape database delivery processes, improve development workflows, and contribute to the future of a cloud-first data platform. You'll be responsible for building and maintaining robust CI/CD pipelines, automating database deployments, and driving quality across the SDLC to ensure reliable, high-quality releases. You'll work closely with developers, analysts, and stakeholders to deliver automation-first solutions and help scale a platform built entirely in the cloud. Key Responsibilities: Design, implement, and maintain automated CI/CD pipelines for database development and deployment Collaborate with developers to integrate database changes seamlessly into the SDLC Develop and enforce quality gates for schema validation, data integrity checks, and migration testing Build and maintain test automation frameworks for database processes (unit, integration, regression, performance) Ensure version control best practices for database objects, scripts, and configurations Implement and monitor rollback/recovery mechanisms to minimise deployment risk Optimise pipeline performance and resolve bottlenecks across build, test, and release processes Maintain environment consistency across dev, test, staging, and production systems Contribute to platform governance by defining and documenting best practices for database QA and DevOps Tech & Environment: Microsoft Azure (including Azure SQL) Azure DevOps, GitHub, YAML pipelines SQL Server (preferred), schema change management, migrations T-SQL, PowerShell (desirable) Power BI, Excel (with future integration of Python, GIS, and other tools) You Should Have: 3-4 years' experience as a QA Engineer, DevOps Engineer, or Database QA Specialist with CI/CD focus Strong understanding of database systems, preferably SQL Server Proven experience building automated database pipelines (schema, migration, testing) Proficiency in SQL queries, stored procedures, and test scripts Familiarity with cloud-first environments and version control best practices Excellent communication and problem-solving skills, with a proactive, detail-oriented approach If this sounds like the role for you, APPLY and a consultant will be in touch.

Linux Application Support Engineer London, Docklands (Hybrid) £80,000 - £90,000 per annum + annual discretionary bonus On behalf of an industry Leading financial services business, I am seeking an experienced Infrastructure Application Support Engineer to provide 2nd line support for the organisations Lunix/Unix application services. The company operates hybrid working where you will be expected to commit to a non-negotiable 2 days a week in their London office, therefore applicants must be based within a reasonable commuting distance. Responsibilities: Provide 2nd line production operational support for Linux/UNIX application services, many of which are business critical. Be a point of contact for stakeholder communications for the Service Operations teams including Unix Application, Unix Infrastructure support and Unix DBA Support Provide remote and onsite support for internally developed business critical applications and 3rd Party vendor packages through Dev, Test, UAT and Prod. Manage and escalate problems as appropriate. Provide 24/7 on-call cover on a rotational shift basis. Ensure that the BAU Service is prioritized, and all faults, incidents and problems are responded to in an efficient manner without negatively impacting SLA's and reporting metrics in place. Investigate defects or problems; work with the internal Development team and external vendors to identify workarounds and support any fixes that are required as part of service improvement. Implement Changes or fixes to applications. Support other technical changes being made which affect the organisations Business Systems. Follow the Change Management procedure and other standard practices in installing and configuring applications in Test and Production environments. Upgrade or maintain software at a time when the impact to the business is minimized. Participate in regular Disaster Recovery testing activities. Create, maintain, and review operational process and support documentation. Participate in planned weekend work as required. Through example and behaviour, strive to provide peer leadership to other team members ensuring a level of excellence is achieved in delivering the service. Participate in the successful release and transition of new IT services into support, meeting the team's service acceptance criteria. Skills/Experience required: Must have strong experience of supporting critical production applications in a Redhat Enterprise Linux, command line, environment. Must have strong experience of supporting Applications using Amazon Web Services (AWS). Experience of supporting IBM WebSphere MQ Experience of supporting Swift messaging applications. Ability to perform diagnostic and troubleshooting of AWS Product set such as EC2, Lambda, EKS, ECR, Workspaces, EBS, EFS, S3, RDS MSSQL, Route 53, VPC, Cloud Formation Strong experience in working with ticket systems such as Service Now and an understanding of priorities and SLA's. Experience of Release Management processes for the deployment of application packages from development through to production environments. Strong documentation and technical writing skills. Ability to collaborate effectively with Development teams and other operational support teams (Service Management and Engineering), to support the end-to-end service. Knowledge of ITIL framework (understanding of Incident, Problem, Change) Experience with WebSphere Application Server and Apache Tomcat Experience with maintenance of SSL Certs for ISVA/LDAP/WebSphere components. Scripting skills in languages such as Shell and Python Strong experience of supporting proprietary developed business critical banking applications. Experience of running queries against PostgreSQL and DB2 databases. Supporting Applications in a windows environment (preferred) Experience of providing cross training on application solutions and operational processes to colleagues. (preferred) Professional qualifications/certifications: Bachelor's degree or equivalent Prior IT operational support experience across business-critical Production environment, infrastructure, applications and database services Industry standard IT certification - AWS/RHEL/IBM MQ (preferred) ITIL certification (preferred).

Salary - £90,000 + discretionary bonus Hybrid working - x2 days per week based in London Spencer Rose are partnered with a leading financial services organisation who are on the look out for a Senior Network infrastructure Engineer. Within this role, the Senior Network Infrastructure Engineer will be responsible for optimizing their network and data centre infrastructure, monitoring network alerts as well as troubleshooting various network technologies. The Senior Network Infrastructure Engineer will have the following experience - Responsible for the configuration and maintenance of their data center and cloud network architecture Responsible for solving operations tickets through troubleshooting any connectivity issues Developing and maintaining operational documentation, including runbooks, network diagrams, and configuration records Adhere to strict change management process to deploy Firewall rule change requests, scheduled firmware upgrades and other network build, changes, or maintenance activities The Senior Network Infrastructure Engineer will need to have the following skills/experience - Must have in-depth experience of working in a multi-vendor Firewall environment (Checkpoint, ASA, Fortinet), that involves implementing & troubleshooting Firewall rule changes, NAT & VPN in a segmented network with multiple layers of Firewalls Extensive experience across Datacenter Infrastructure - Cisco ACI deployment & Cisco NX-OS Extensive knowledge of LAN/WAN technologies including routing protocols, route redistribution, manipulation, and filtering. Proven experience with deploying and troubleshooting issues related to WLAN Must have a background working within either Banking, Financial Services or Insurance

Purple Team Analyst/Cyber Security Analyst - £90,000 base + bonus London - Canary Wharf - 2 days in the office Financial Services Purple Team Analyst/Cyber Security Analyst The Company This financial services business supports a truly global client base, managing trillions of dollars each day. They are looking to hire a Purple Team Analyst/Cyber Security Analyst into a newly created role to support increased Purple Teaming activities within the SecOps Function Purple Team Analyst/Cyber Security Analyst The Role The successful applicant for the Purple Team Analyst/Cyber Security Analyst will be responsible for: Planning, managing and running all Purple teaming activities across the SecOps and wider technology estate Producing playbooks and other documentation relevant to both Purple Teaming and the wider SecOps team Supporting the Threat hunting teams with related activities Engage in security reviews for integrations and new service s Assist with escalations from the SOC team Support with Security risk assessments for all high impact projects Review and update Security protocols to mitigate current threats and best practice Acting as a Subject Matter Expert for Purple Teaming within the wider IT Security Team Purple Team Analyst/Cyber Security Analyst Your background The successful candidate for the Purple Team Analyst/Cyber Security Analyst will have experience with: Planning and executing Purple tests Hands on IT Security analysis and security engineering in particular: Security systems Securing Networks On - call experience Malware analysis, Intrusion detection and Incident Response across a hybrid estate Ensuring a risk based approach to security Monitoring and tuning technical IT Security Controls The ideal Purple Team Analyst/Cyber Security Analyst will need strong people skills and the ability to work across and with multiple teams in the business To find out more, click the apply button now, or call to speak to Abigail Moss. We invite individuals from underrepresented groups to apply for any of our roles and are committed to supporting accessibility needs.

Infrastructure Architect London, Docklands (Hybrid) £100,000 - £110,000 per annum + annual discretionary bonus On behalf of an industry Leading financial services organisation, I am seeking an experienced Infrastructure Architect additionally with a background in Security Architecture. The Infrastructure Architect will possess broad knowledge in Cloud Infrastructure, Platforms and Cyber Security with a focus on capability enhancements and continuous improvement. This role involves collaborating with cross-functional teams to understand business requirements, providing technical leadership, and ensuring the design meets architectural principles and security standards. The organisation offers hybrid working with a non-negotiable 2 days a week in their London office, therefore you must be within reasonable commuting distance to London. Responsibilities: Author High Level Solution Design, Solutions Overview and Conceptual Architectures. Design and architect solutions based on technical and business requirements. Develop and document architecture blueprints and best practices. Act as a lead Architecture on projects Contribute to the development & management of Infrastructure Strategy Contribute to the continuous improvement of Architecture within the business Contribute to product roadmaps & reference architectures. Provide technical guidance to team members and stakeholders. Skills/Experience required: At least 8 years' experience in an Infrastructure Architecture capacity additionally with experience in authoring Cyber Security Architecture. Experience in a regulated financial services environment (banking/insurance preferred) Experience in IaC (nice to have) Automation experience highly advantageous - eg Ansible/Jenkins (alternatives considered). Knowledge of networking design and principles in both public cloud and traditional data centre Knowledge of hybrid cloud architectures. Ability to assess and recommend third-party tools and services to complement AWS offerings. Ability to communicate solutions to other stakeholders Broad knowledge of Networks & Security Identify & recommend opportunities for efficiency. Stay updated on new features and capabilities & best practices. Ability to deal with ambiguity and manage diversity. Share knowledge with the team and contribute to the organization's learning culture. Experience with cloud security solutions and services