72 jobs found

Who we are, what we do Sensat is a geospatial AI business that powers advanced and highly functional digital twins for the world's most critical infrastructure projects. We partner with the world's largest construction, engineering and critical infrastructure companies, including National Grid, Network Rail, Heathrow and Severn Trent Water. We enable our customers to fight the costly and high-risk "Status Quo" of siloed data, people and processes. Our AI-powered digital twins help teams digitally visualise, plan and manage projects, providing Project Confidence Through Clarity. We are a high trust, high impact team, who offer purpose driven work. We operate with autonomy and flexibility in an agile, flat structure. We look for highly talented, adaptable and curious individuals who love solving meaningful problems and who share our resilient team spirit when facing challenges! We more than doubled ARR in 2025, with a strong pipeline that positions us for another year of 100%+ ARR growth this year! Backed by over £25 million in funding from blue-chip investors like National Grid Partners and with imminent US market entry representing a significant value inflection point, this is an exciting time to join the Sensat team! The role - why it exists & why it's interesting Sensat has a "gold mine" problem. We have incredible client stories, a world-class visual product, and industry-leading visionaries in our Labs, but it's currently locked inside the building. We are looking for a Content Creator, Strategist who is part investigative journalist, part demand-gen strategist. Your job isn't to "write blogs"; it's to build a media engine that makes Project Directors at Asset Owners and Tier contractor firms stop scrolling and start reaching out. The mission: Turn Sensat's visionary geospatial technology into the most influential brand in civil Infrastructure. What you'll be doing The "Extraction" motion: You'll host weekly "mining" sessions with our Founder and Labs Leader. You'll take their complex thoughts on the future of 3D data and "ghost-write" high-authority LinkedIn essays and YouTube scripts that position them as category leaders. Product-in-Motion: You will master the Sensat software to independently capture high-quality screen recordings. You'll partner with our videographer to show-not just tell-how Sensat solves $100M infrastructure problems. No stock photos. No "corporate" fluff. The Case Study Workaround: Client approvals take forever. You'll lead our "Shadow case study" program, creating data-heavy, unbranded narratives that show exactly how we save time and money for our clients Content atomization: You are an expert at "slicing." You can take one 30-minute interview and turn it into 1 deep-dive article, 5 LinkedIn posts, a YouTube script, and a high-impact PDF for the Sales team. Inbound engine: You'll own our LinkedIn and YouTube presence. You understand "Zero-Click" content, giving away so much value in the feed that prospects trust us before they even book a demo. Sales Enablement Sync: Meet weekly with Sales to identify "content gaps" (e.g., a video for electricity pylons) and produce assets within 7 days to help close deals. What you'll bring The translator: You can sit with a geospatial engineer, understand a complex technical concept, and explain it to a busy CEO in 3 bullet points. 3-5 years in B2B/SaaS: Ideally in a technical or industrial sector. You know that B2B doesn't have to be boring. Social native: You understand the nuances of LinkedIn and YouTube. You know how to write a hook that stops the scroll and a narrative that builds a brand. Visual Storyteller: You know that in infrastructure, a 30-second model walkthrough is worth 1,000 words. Biased for action: You'd rather ship a 90% perfect video that starts a conversation today than wait three weeks for a "perfect" version that misses the window. Detail obsessed: You take pride in the "Sensat" voice. You are the final gatekeeper of our brand narrative. This role is hybrid with 2 to 3 days per week in the London office, especially during the initial onboarding phase; flexibility to work remotely on days needed for focused content production. What success looks like in 90 days Success in this role looks like this: Within 3 months, our Sales team has a library of visual "use cases" they actually use, our Founder is a "must-follow" on LinkedIn, and we are seeing consistent inbounds citing our content as the reason they reached out. What we'll bring When Sensat succeeds, so will you, with significant equity share options ️Take a break using your 30 days of annual leave (in addition to bank holidays) A flexible working environment Continue learning every day through your £500 personal development fund Regular social events! We've been to the theatre, racing around the tracks go-karting, had movie nights, watched the London Symphony Orchestra, line dancing lessons and murder mystery We've got your back, be it immediate access to mental health support through Spill or enhanced Family Leave for those welcoming a new arrival, we support you throughout your journey here. We care about our people and want to make essential healthcare accessible and affordable. That's why we have an Opt-in Corporate health and wellbeing cash plan (offering up to £1700 in cash back annually) provided through BHSF. We want to enable you to do your best work without having to think about whether your tech will work, so we'll set you up with a MacBook, mouse & keyboard and £250 towards setting up your WFH environment. Pension: with Penfold. Employer contribution of 3%, employee contribution set at 5% but can be increased (relief at source or salary sacrifice). Access to the benefits of our Fora office membership, including access to their gyms and fitness classes, events and dog friendly office Other benefits including cycle to work scheme, season ticket loans, eye-care vouchers, payroll giving At this time, we are only able to accept applications from those who have a right to work in the United Kingdom. Our office is in Old Street, London. Equality, Diversity and Inclusion We are an equal opportunities employer and are committed to creating a diverse and inclusive workplace. We welcome applications from all individuals regardless of age, disability, gender, marriage or civil partnership status, pregnancy or maternity, race, religion or belief, sex or sexual orientation. All employment decisions are made on the basis of qualifications, merit, and business need, and our recruitment processes are conducted in accordance with the Equality Act 2010. If you require any adjustments during the recruitment process, please let us know.

Principal Security Consultant (CCSAM/CCRTM) - RTO NetSPI pioneered Penetration Testing as a Service (PTaaS) and leads the industry in modernpentesting. Combining world-class security professionals with AI and automation,NetSPIdelivers clarity, speed, and scale across 50+pentesttypes, attack surface management, and vulnerability prioritization. TheNetSPIplatform streamlines workflows and accelerates remediation, enabling our experts to focus on deep dive testing that uncovers vulnerabilities others miss. Trusted by the top 10 U.S. banks and Fortune 500 companies worldwide,NetSPIhas been driving security innovation since 2001. NetSPIis on an exciting growth journey as we disrupt and improve the proactive security market. We are looking for individuals with a collaborative, innovative, and customer-first mindset to join our team. Learn more about our award-winning workplace culture and get to know our A-Team at . Join our mission as a Principal Security Consultant. We're seeking a seasoned security professional who combines deep technical expertise in adversarial simulation with exceptional communication skills to engage both executives and technical teams with equal impact. On our globally deployed Red Team you will compromise some of the world's most sophisticated and heavily fortified networks. As an operator, you'll collaborate with industry-leading experts while wielding cutting-edge proprietary tools that set the standard for offensive security operations. In this role, you'll leverage your strategic problem-solving abilities, foster high-performance team dynamics, and drive innovative methodologies to deliver transformative engagements that consistently surpass client expectations. Responsibilities: Lead comprehensive red team operations by serving as the primary technical operator on standard adversarial engagements, where you'll strategically plan scenario execution, orchestrate team resources and timelines, and make critical technical decisions that drive successful outcomes in complex, high-stakes environments. Perform duties aligned to a red team manager and secondary operator on Regulated Red team engagements such as CBEST, TIBER, TLPT, iCAST, FEER etc. This is a dual responsibility where you will be an active operator as well as performing operational governance activities associated with this role in complex regulated red team engagements. Leverage deep technical expertise in operating systems, network architecture, and infrastructure fundamentals to execute sophisticated attack chains and navigate complex enterprise environments during red team operations. Pioneer cutting-edge offensive security capabilities in coordination with our dedicated malware and capability developers by researching, developing, and operationalizing innovative techniques, proprietary tools, and advanced methodologies that push the boundaries of adversarial simulation and red team effectiveness. Offer mentorship or coaching to growing team members, while sharing knowledge externally through blogs, webinar presentations, or presenting at conferences. Collaborate with cross-functional teams on key activities, including scoping initiatives, providing subject matter expertise in high-stakes sales presentations, and contributing strategic technical insights to marketing campaigns that showcase our capabilities. Help define, document, and continuously refine internal technical processes, service methodologies, and tactical procedures (TTPs) that standardize excellence across all engagements. Perform administrative tasks related to day-to-day consulting activities to ensure smooth business and engagement operations. Minimum Qualifications: Bachelor's degree or higher, with a focus on IT, Computer Science, Engineering or Math or equivalent experience 5+ years of work experience performing adversarial simulation related engagements Due to the nature of the role, the applicant must hold and be able to maintain a current CCRTM or CCSAM certification Familiarity with offensive tools, based on applicable skillset Deep technical familiarity with offensive and defensive IT concepts and protocols Working knowledge of Windows, Linux and MacOS operating systems internals Extensive understanding of the MITRE ATT&CK framework, OWASP Top 10, and other security frameworks Ability to work independently and as part of a team Proficient communication skills, both written and verbal Willingness to travel up to 10% minimum This position requires an 8-hour workday, with occasional evenings or weekends necessary to meet project deadlines or critical needs Preferred Qualifications: Ability to provide technical and QA oversight on the Red Team service line Experience in one or more of the following programming or scripting languages (e.g., Python, PowerShell, Perl, C, C++, C#, Java, Nim, Rust, etc.) We are an equal employment opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status or any other characteristic protected by law.

As a Senior Consultant, with a focus on social engineering & physical penetration testing (black team), you will perform formal and comprehensive penetration testing assessments, including producing full written reports to appropriate standards and within agreed deadlines. In addition, you will support with training, client pre engagement activities (including scoping and proposal drafting), researching vulnerabilities and maintaining process documentation. Responsibilities Perform formal and comprehensive Social Engineering and other penetration testing assessments (i.e. Application and/or Infrastructure based assessments) where appropriate and required. Attend customer sites to deliver engagements where required (such as Physical Penetration Testing/Black Team engagements). Provide well written, concise, technical and non technical reports in English. Perform vulnerability assessments and provide findings with remediation actions. Support with various client pre engagement interactions, including scoping activities and proposal drafting. Manage and deliver penetration testing project activities within strict deadlines. Research Social Engineering trends, new attack vectors and technologies that may improve efficiencies when delivering these engagements. Develop and deliver in house training to the penetration testing team. Coach and mentor Graduate and Junior penetration testers. Act as lead tester on large or onsite penetration testing projects (including Physical Penetration Tests). Support the Marketing team with the development of content (including, but not limited to: Blogs, Social Media Posts, and Articles) to help raise the profile of Bulletproof's Penetration Testing and other services. Support the QA process to ensure high quality client reports are delivered in accordance with applicable Service Level Agreement (SLA). Any other appropriate job duties in line with the associated skill and experience of the post holder. Skills & Experience Required Proven industry experience in Social Engineering and Physical Penetration Testing (Black Team). Deep knowledge of Social Engineering attack vectors relating to: Phishing (email) Vishing (Phone calls) Physical Social engineering (in person during a Physical Penetration Test/Black Team) Strong knowledge of Social Engineering and Physical Penetration attack techniques such as: Lock picking Card cloning Elicitation Disguise and Social Engineering scenario creation Strong skills in Open Source Intelligence gathering - specifically targeting organisations and physical locations. Knowledge of the additional legal boundaries that are involved for Social Engineering attacks and Physical Site Engagements. Proven industry experience in infrastructure and/or application penetration testing. Deep knowledge of various Operating Systems and network principles. Strong understanding of OWASP, PTES and MITRE ATT&CK framework. Knowledge of how modern solutions are designed and deployed across different platforms. Ability to program or script in your preferred language. Relevant security qualifications (such as OSCP, CREST CRT, OSEP, CCT or relevant Social Engineering exams/training). Nice to have Deep knowledge of access card cloning techniques and involved technologies. Experience operating as part of or in conjunction with a Red Team. Strong knowledge of Wireless (WiFi) testing techniques and other Signals Intelligence. Good knowledge of SMShing attacks and supporting infrastructure. Personal Attributes Excellent spoken and written communication skills with strong attention-to-detail and accuracy. A passion for security and networks. Analytical and problem solving skills with a can do attitude and the ability to think laterally. Self motivation with a commitment to continued development. Ability to work independently and as part of a team. Influencing and negotiation skills with the ability to build relationships at all levels. Willingness to learn. Benefits Birthday holiday. Discounted Private Medical Insurance. Gym Membership. VITO days - X2 paid volunteer days. Enhanced Family Related Leave Pay. Standard Life Salary Sacrifice Pension. Social Events. We understand that job descriptions provide only a brief overview of a role. If you would like more information, please feel free to reach out or submit an application, and we will be happy to share further details. WorkNest is an equal opportunity employer. We celebrate diversity and are committed to fostering an inclusive environment for all employees.

Dunnhumby is the global leader in Customer Data Science, partnering with the world's most ambitious retailers and brands to put the customer at the heart of every decision. We combine deep insight, advanced technology, and close collaboration to help our clients grow, innovate, and deliver measurable value for their customers. Dunnhumby employs nearly 2,500 experts in offices throughout Europe, Asia, Africa, and the Americas working for transformative, iconic brands such as Tesco, Coca Cola, Nestlé, Unilever and Metro. Overview We are looking for an Application Security Engineer with a strong engineering mindset-someone who has built and maintained technical systems and understands how products are developed end to end. The ideal candidate may come from a security or product background, but must be deeply familiar with the SDLC, CI/CD pipelines, Git workflows, and modern software engineering practices. This role combines hands on security engineering with enablement, governance, and cross team collaboration. The Security Engineer will drive application vulnerability management, embed security into development pipelines, and guide engineering teams in building secure by design applications. Strong communication skills and the ability to build trusted relationships across both technical and non technical stakeholders is essential. Key Responsibilities Application Security Integrate security best practices into the SDLC and operate, tune, and maintain AppSec tooling (SAST, DAST, SCA). Provide secure design guidance, perform secure code reviews, reproduce issues, propose fixes, and validate remediations with developers. Cloud & Kubernetes Security Embed security checks in CI/CD for container images, IaC, and Helm charts & contribute to runtime protections such as admission controls, policy as code, scanning, and drift detection. Promote secure infrastructure configurations and Kubernetes defaults (RBAC, network policies, PodSecurity, secrets handling, image provenance). Vulnerability Management & Reporting Ensure CI/CD pipelines have robust, effective security coverage and manage exceptions & risk workflows. Maintain a consolidated vulnerability backlog with clear ownership and SLA tracking and build automated reporting using tools like Power BI or Excel/Pandas. Enablement & Governance Develop secure coding standards and practical developer guidance. Run secure development forums, build and maintain strong relationship with engineering teams and drive application vulnerability management through engagements and reporting. Act as a trusted advisor to both engineers and leadership - identifying and communicating risk clearly and persuasively. What You Can Expect From Us We won't just meet your expectations. We'll defy them. So you'll enjoy the comprehensive rewards package you'd expect from a leading technology company. We also offer personal flexibility, thoughtful perks such as flexible working hours and your birthday off. You'll benefit from an investment in cutting edge technology that reflects our global ambition while maintaining a nimble, small business feel that gives you freedom to play, experiment and learn. Diversity & Inclusion We don't just talk about diversity and inclusion. We live it every day - with thriving networks including dh Gender Equality Network, dh Proud, dh Family, dh One, dh Enabled and dh Thrive as the living proof. We want everyone to have the opportunity to shine and perform at your best throughout our recruitment process. Please let us know how we can make this process work best for you. Flexible Working We value and respect difference and are committed to building an inclusive culture by creating an environment where you can balance a successful career with your commitments and interests outside of work. Some roles lend themselves to flexible options more than others, so if this is important to you, please raise this with your recruiter.

This website emits an average of 1.6 g of CO 2 per page, ASY 40,4 EURSenior Environmental ConsultantOur Vacancy# Senior Environmental Consultant Permanent / Project Management Birmingham United Kingdom 19/03/26 On site Share# is an independent international engineering and project management company with a strong track record delivering complex, regulated infrastructure projects across the energy, infrastructure and defence sectors. With over 55 years' experience, Assystem supports clients throughout the full project lifecycle, from strategy and design through to construction, commissioning and operation. Within Assystem, the Environment, Consents & Engagement (ECE) Practice provides specialist environmental, sustainability and stakeholder expertise to major projects across the UK. The team supports clients in securing and maintaining environmental consents, managing environmental risk and ensuring compliance during construction, while also helping to integrate sustainability requirements into project delivery in a practical and proportionate way. Assystem is currently supporting the delivery of High Speed 2, one of the UK's most significant transport infrastructure projects. Job DescriptionWe're looking for a Senior Environmental Consultant to play a key role in ensuring compliance with environmental legislation, permits, licences, and consents throughout the construction of HS2. In this role, you'll help safeguard the environment while working collaboratively with multidisciplinary teams to continuously enhance environmental performance across the project.HS2 offers a unique opportunity to be part of one of the UK's most ambitious infrastructure programmes, shaping the future of sustainable transport, driving innovation in environmental management, and leaving a lasting legacy through low-carbon construction and large-scale environmental enhancement. Undertaking site inspections of work areas and relaying observations and/or reporting environmental issues where necessary, as well as advising on remedial actions Provision of written and verbal advice on environment legislation, permits, and environmental planning constraints for all activities onsite Support compliance with environmental legislation and demonstrate substantiation of environmental protection equipment Gather and collate environmental performance information on activities Produce, review and update various Management Plans to ensure compliance with environmental regulations and project requirements Support the delivery of environmental training Support for the self-assessment and internal audit of site activities to ensure compliance against applicable legislation, processes and procedures and environmental best practice Support the management of specialist disciplines as required on project such as ecology, N&V, air quality, land quality, waste and water Here's what you'll need : Proven experience leading environmental management initiatives, with a strong grasp of UK legislation and best practice across construction or industrial settings Confident self-starter who communicates clearly, builds relationships easily, and can influence stakeholders at all levels Hands-on experience implementing and maintaining Environmental Management Systems aligned with BS EN ISO 14001:2015 standards Highly organised and adaptable, able to prioritise effectively in fast-paced, complex project environments Additional advantage if you bring experience from high-hazard industries, alongside an understanding of CDM Regulations and client-contractor responsibilities My profile Degree qualified or equivalent in an environmental or engineering/science related discipline Chartered status or membership of a relevant professional body (e.g. ISEP, CIEEM) Benefits include: Pension scheme (8% company contribution / 4% personal contribution) 25 days' paid annual leave + bank holidays + option to buy or sell days Professional fees reimbursed Flexible working Employee referral schemeWe are committed to equal treatment of candidates and promote, as well as foster all forms of diversity within our company. We believe that bringing together people with different backgrounds and perspectives is essential for creating innovative and impactful solutions. Skills, talent, and our people's ability to dare are the only things that matter !. Bring your unique contributions and help us shape the future.# Other vacancies might interest you Contracting Helensburgh 19/03/26 Permanent Bridgwater 19/03/26 Contracting Warrington 19/03/26

Any company can tell you about how they are a multi award winning, market leading business and yes, we are both of those things in the world of IoT connectivity! But we're more than that. Our mission? To make IoT management a breeze for any device, anywhere. With over18 million IoT subscriptionsactive in165 countriesand direct partnerships with50 mobile networks, we connect you to more than750 networks worldwide, delivering unmatched value across the IoT connectivity chain. Innovation is in our DNA, and we have an insatiable hunger to 'wow'! While we may not always get it right, our drive to collaborate, innovate, and achieve top-notch customer satisfaction never wavers. We offer industry expertise, stellar service support, and the most flexible, resilient, and secure connectivity solutions on the market. Our expertise spans across various sectors, including industry, agriculture, healthcare, security, transport, utilities, and smart cities. IoT a fancy acronym or a secret code? TheInternet of Things (IoT)is like the magical glue that keeps the world connected! From ordering your favourite takeaway to the ANPR technology that helps you find a parking spot, IoT is everywhere-even if you don't realize it. AtWireless Logic, we provide cutting-edge connectivity solutions and technologies to ensure a vast array of devices stay seamlessly connected. The Opportunity: We are seeking a highly experienced VP Technology Operations to lead the safe, secure and resilient operation of all production platforms and services across Wireless Logic. This role is accountable for delivering five nines (99.999%) availability across critical services, ensuring that our platforms operate predictably, recover rapidly, and scale effectively under demand. You will act as the executive owner of live platform performance, leading incident response, operational governance, resilience engineering and production risk management. This role plays a critical part in ensuring that our technology estate supports a high availability, regulated and globally distributed business. Working closely with Engineering, Architecture, Security and Operations leadership, you will ensure that platform reliability is continuously improved and that all change is introduced safely into production. Key Responsibilities Include But Not Limited To: Production Reliability & Availability Own end to end production availability across all platforms and services Deliver sustained 99.999% availability for critical services Define and operate: SLAs, SLOs and error budgets RTO/RPO aligned to resilience objectives Drive improvements in: Observability and monitoring maturity Capacity management and performance optimisation Act as executive owner for: Major incidents Systemic production risk Customer impacting outages (technical resolution) Incident & Recovery Management Own the technology incident management framework Lead technical restoration during major incidents Coordinate cross functional engineering response Ensure rapid containment and recovery while managing systemic risk Conduct structured post incident reviews with: Engineering (permanent fixes) Architecture (design improvements) CISO (security implications) Service Operations (customer impact feedback) Drive elimination of repeat and systemic incidents Disaster Recovery & Resilience Engineering Own disaster recovery (DR) and resilience capability across all platforms Ensure: Failover capabilities are tested and proven Resilience is validated through regular exercises (e.g. chaos testing) Single points of failure are identified and removed Failure domains and blast radius are clearly defined and controlled Ensure resilience is engineered and evidenced, not assumed Production Change & Release Governance Own production change governance and release risk control Act as final authority on production release readiness Define and enforce safe deployment practices, including: Canary releases Phased rollouts Feature flagging Rapid rollback mechanisms Ensure all changes entering production: Are observable Have recovery mechanisms Minimise operational risk exposure Balance delivery velocity with platform stability Technology Operations & Platform Run Own operation of all production environments, including: Core platforms and shared services Cloud, network and hybrid infrastructure Observability and monitoring tooling 24x7 operational and on call capability Automation of operational processes Ensure platforms are: Secure and compliant Scalable and performant Cost efficient and optimised Operated in line with architectural standards Security Operations (SEC Ops) Operate Security Operations within Technology Operations under CISO governance Accountable for: SOC operations and monitoring Security event detection and triage Runtime vulnerability remediation Operational access controls Execution of containment actions during live incidents Partner with the CISO on: Security incident response Risk based decision making Escalate major trade offs between availability and security appropriately Operational Compliance & Audit Own operational control effectiveness within live environments Ensure readiness for: Regulatory compliance External audits Evidence collection and reporting Partner with: CISO (security controls) Risk, Quality & Compliance (assurance) MD Operations (enterprise governance) Ensure no material audit findings related to operational execution Reliability Engineering Influence Define production readiness standards for all services entering live environments Provide structured input into Engineering for: Reliability improvements Technical debt impacting availability Removal of operational toil Simplification of fragile dependencies Drive adoption of: Site Reliability Engineering (SRE) principles Automation first operations Error budget discipline Ensure reliability is treated as a shared outcome, with clear production accountability Own operational supplier performance and service levels Ensure: Vendors meet availability and response commitments Contracts support five nines objectives Cost efficiency does not compromise resilience Partner with Finance and Architecture on: Capacity planning Infrastructure lifecycle management Decommissioning legacy environments Measures of Success Sustained 99.999% availability for critical services Continuous reduction in MTTR and incident frequency Elimination of repeat and systemic failures Improved change success rate and reduced release risk Proven disaster recovery and resilience outcomes Effective containment of security incidents without customer impact No material audit findings in operational controls Increased automation and observability maturity Predictable and cost efficient platform operations Required Experience & Attributes Proven experience in a senior technology operations, SRE or platform leadership role Strong background in high availability, cloud based or distributed systems environments Experience delivering five nines availability or equivalent reliability targets Deep expertise in: Incident management and recovery Production operations and change governance Observability and monitoring frameworks Experience operating in regulated or compliance heavy environments Strong understanding of security operations in production environments Experience working in private equity backed or high growth organisations is desirable Wireless Logic Group unites and brings people together. We accomplish this when we lead with a lens of diversity, equity, and inclusion in everything we do. As a global company that drives culture we aim to reflect the world's diverse voices both internally and externally to ensure success in our mission. By applying for this role, you are consenting for us to hold and process your data in compliance with the General Data Protection Regulations. If you have any questions or wish to exercise your right to access, erase or restrict the holding or processing of your data please contact us () and we will respond to your query as soon as possible.

UTA seeks a Security Engineer to help build and strengthen our security operations programs-safeguarding our brand, our people, and our digital assets. In this role, you will design and implement security solutions across physical, virtual, and cloud environments. By leveraging your expertise in cybersecurity and knowledge of common attack vectors, you will enhance visibility, threat correlation, and incident response capabilities throughout our technology landscape. As a key contributor to our cloud first strategy, you will play a critical role in shaping and advancing our overall security posture. What You Will Do Investigate and contextualize security events from numerous data sources Help detect, respond to, and remediate security events and incidents Create automated data correlation and triage processes to reduce alert to fix time Develop remediation and orchestration efficiencies across the security stack, including endpoint, network, identity, and application Perform e discovery tasks in support of Legal and HR investigations Respond to user requests for security related issues and concerns Improve current visibility by configuring existing logging and alerting policies Evaluate and select additional tools and services Contribute to SIEM tuning for reliable alerting Perform vulnerability triage and assignment Engage in proactive threat hunting to identify risks not automatically captured by scans Have a meaningful and positive impact on the security of colleagues and clients Be challenged to identify, build, test, and deploy solutions in real life, not just in theory Be encouraged to innovate and take ownership Be given the opportunity to rapidly accelerate security, technology, and management skills Have the freedom to experiment with novel problem solving approaches Contribute to all security related initiatives-both tactical and strategic Be exposed to emerging security and business technologies Have access to best in class tooling and people Grow and learn on the job every day Serve as a subject matter expert on information security related escalations Maintain awareness of trends in various security domains Collaborate with other teams to improve security posture, risk remediation, and threat awareness What You Will Need Bachelor's degree in Cybersecurity, Engineering, or a related field; or equivalent experience 5+ years of experience in Security Engineering or Security Operations Experience with incident response, security event triage, investigations, forensics, and fluency with endpoint operating systems (Windows/Mac/Linux) and command line tools Experience with log analysis, event aggregation, security event data management, SIEM tuning, and Microsoft Sentinel Experience with security automation and orchestration and threat intelligence utilization Experience with e discovery tools and processes Experience responding to phishing, scam, and imposter campaigns Experience with endpoint security tooling and MDM solutions Network engineering, secure architecture, and network operations (firewalls, switches, etc.) Cloud infrastructure operations and architecture (Azure a plus) Identity management and authentication protocols Remediation strategies, system hardening, and vulnerability management Experience with enterprise information technology, including Active Directory/Azure AD, Exchange, Office 365, servers (Windows, SQL/DB, Linux, VM, Citrix, App, Web), device/asset management, and ServiceNow Experience with posture and threat management of third party SaaS platforms Technical understanding of enterprise EDR tools What You Will Get The unique and exciting opportunity to work at one of a leading global entertainment companies Access to the tools, leadership, and resources you will need to create and drive a center of excellence The opportunity to do the best work of your career Work in an inclusive and diverse company culture Competitive programs to support your well being Experience working in a collaborative environment with room to grow UTA and its Affiliated Companies are Equal Employment Opportunity employers and welcome all job seekers.

About the Role As an experienced Penetration Tester at Starling, you'll be joining an established team, working with talented cyber security professionals to ensure our services are designed, developed and operated securely. This is a collaborative role - you'll directly interact with multiple areas of the business to understand requirements, conduct research, perform security testing, and report issues aligned to our risk framework. Being an internal tester, you'll gain a strong understanding of how technology works at Starling to enable in depth testing. You'll also support remediation processes, seeing your findings lead to tangible security improvements. We understand the importance of knowledge and expertise remaining current, so we'll actively support your advancement through research and training. In turn, you'll help us continuously improve our processes, methodologies and tools to maintain the highest standard of testing. We're open minded when it comes to hiring and we care more about aptitude and attitude than specific experience or qualifications. Responsibilities Scoping and performing mobile, web application, cloud and infrastructure penetration tests. Collaborating with engineering teams to facilitate secure development, including: Reviewing and analysing proposed technical solutions to identify appropriate security controls. Conducting code reviews of features and critical security components. Performing in depth practical security testing. Advising on the remediation of security issues and identifying solutions to address root causes. Automating security testing and developing internal tooling to achieve continuous assurance. Identifying and implementing improvements to the team's internal processes and procedures. Mentoring less experienced team members, leading by example in technical assessments, and promoting a collaborative approach to security across Starling. Qualifications 5+ years technical information security experience. Experience in mobile, web application, cloud and infrastructure penetration testing. Technical knowledge - a good foundation in mobile security (iOS and Android), web application security, networking and associated protocols, cloud security (AWS and GCP), containers and Kubernetes. A desire to learn, and the ability to apply technical security knowledge to new and unfamiliar areas. Penetration testing qualifications (e.g. CREST Certified Tester, OSCP) or equivalent industry experience. Experience performing code reviews or code assisted testing, particularly in Java and Go. Experience in automation of security testing (e.g. using Python or Go). Excellent verbal and written communication skills. Interview Process First stage with the Penetration Testing Team Lead. Second stage with additional members of the Penetration Testing team. Final stage with Infosec Director and CISO. Benefits 25 days holiday (plus public holiday allowance). Extra day's holiday for your birthday. Annual leave increased with length of service, and you can choose to buy or sell up to five extra days off. 16 hours paid volunteering time a year. Salary sacrifice, company enhanced pension scheme. Life insurance at 4 your salary & group income protection. Private Medical Insurance with VitalityHealth including mental health support and cancer care. Partner benefits include discounts with Waitrose, Mr & Mrs Smith and Peloton. Generous family friendly policies. Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks. Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing. Equal Opportunities Starling is an equal opportunity employer, and we're proud of our ongoing efforts to foster diversity & inclusion in the workplace. Individuals seeking employment at Starling Bank are considered without regard to race, religion, national origin, age, sex, gender, gender identity, gender expression, sexual orientation, marital status, medical condition, ancestry, physical or mental disability, military or veteran status, or any other characteristic protected by applicable law.

As a Senior Consultant, with a focus on social engineering & physical penetration testing (black team), you will perform formal and comprehensive penetration testing assessments, including producing full written reports to appropriate standards and within agreed deadlines. In addition, you will support with training, client pre engagement activities (including scoping and proposal drafting), researching vulnerabilities and maintaining process documentation. Responsibilities Perform formal and comprehensive Social Engineering and other penetration testing assessments (i.e. Application and/or Infrastructure based assessments) where appropriate and required. Attend customer sites to deliver engagements where required (such as Physical Penetration Testing/Black Team engagements). Provide well written, concise, technical and non technical reports in English. Perform vulnerability assessments and provide findings with remediation actions. Support with various client pre engagement interactions, including scoping activities and proposal drafting. Manage and deliver penetration testing project activities within strict deadlines. Research Social Engineering trends, new attack vectors and technologies that may improve efficiencies when delivering these engagements. Develop and deliver in house training to the penetration testing team. Coach and mentor Graduate and Junior penetration testers. Act as lead tester on large or onsite penetration testing projects (including Physical Penetration Tests). Support the Marketing team with the development of content (including, but not limited to: Blogs, Social Media Posts, and Articles) to help raise the profile of Bulletproof's Penetration Testing and other services. Support the QA process to ensure high quality client reports are delivered in accordance with applicable Service Level Agreement (SLA). Any other appropriate job duties in line with the associated skill and experience of the post holder. Skills & Experience Required Proven industry experience in Social Engineering and Physical Penetration Testing (Black Team). Deep knowledge of Social Engineering attack vectors relating to: Phishing (email) Vishing (Phone calls) Physical Social engineering (in person during a Physical Penetration Test/Black Team) Strong knowledge of Social Engineering and Physical Penetration attack techniques such as: Lock picking Card cloning Elicitation Disguise and Social Engineering scenario creation Strong skills in Open Source Intelligence gathering - specifically targeting organisations and physical locations. Knowledge of the additional legal boundaries that are involved for Social Engineering attacks and Physical Site Engagements. Proven industry experience in infrastructure and/or application penetration testing. Deep knowledge of various Operating Systems and network principles. Strong understanding of OWASP, PTES and MITRE ATT&CK framework. Knowledge of how modern solutions are designed and deployed across different platforms. Ability to program or script in your preferred language. Relevant security qualifications (such as OSCP, CREST CRT, OSEP, CCT or relevant Social Engineering exams/training). Nice to have Deep knowledge of access card cloning techniques and involved technologies. Experience operating as part of or in conjunction with a Red Team. Strong knowledge of Wireless (WiFi) testing techniques and other Signals Intelligence. Good knowledge of SMShing attacks and supporting infrastructure. Personal Attributes Excellent spoken and written communication skills with strong attention-to-detail and accuracy. A passion for security and networks. Analytical and problem solving skills with a can do attitude and the ability to think laterally. Self motivation with a commitment to continued development. Ability to work independently and as part of a team. Influencing and negotiation skills with the ability to build relationships at all levels. Willingness to learn. Benefits Birthday holiday. Discounted Private Medical Insurance. Gym Membership. VITO days - X2 paid volunteer days. Enhanced Family Related Leave Pay. Standard Life Salary Sacrifice Pension. Social Events. We understand that job descriptions provide only a brief overview of a role. If you would like more information, please feel free to reach out or submit an application, and we will be happy to share further details. WorkNest is an equal opportunity employer. We celebrate diversity and are committed to fostering an inclusive environment for all employees.