Position Summary The Senior Security Analyst is a dedicated security operations role providing continuous security coverage for a client operating in a regulated industry. You are embedded within a small, senior team delivering operational security services across detection, investigation, response, and proactive security operations, with direct responsibility for outcomes. You own security incidents end-to-end, from initial detection through investigation, containment, and coordination of remediation with internal and third-party teams. When the incident queue is clear, you carry out proactive security operations work including vulnerability scanning, web application scanning, breach and attack simulation, and validation of security tooling, actively maintaining and improving the client's security posture. Beyond incident response, you liaise directly with the client's IT and cloud teams to ensure remediation actions are completed, and you coordinate across teams to drive issues through to resolution. You bridge the gap between security operations and engineering, escalating platform issues to the security engineering team and supporting engineers during major incidents. The tooling scope has a strong Microsoft orientation. You work alongside the client's SOC provider where applicable, receiving escalated SIEM alerts while also monitoring and operating endpoint, vulnerability, and simulation tooling directly. You have direct access for investigation and threat hunting purposes. You bring experience beyond security tooling, with the ability to navigate the infrastructure and application technologies within the client's hybrid (on-premise and cloud) environment. Role Mission To deliver reliable, high-quality operational security for the client by owning detection, investigation, and response, while proactively strengthening the security environment through hands-on security operations work and cross-team coordination. Objectives & Key Results The key objectives will be to: Maintain SLA compliance for incident detection, investigation, and response across all priority levels Own security incidents through to resolution, ensuring remediation actions are completed Operate and validate proactive security tooling (e.g. Qualys, XM Cyber, AttackIQ) to an agreed schedule, identifying and acting on findings Reduce detection gaps by contributing to detection rule tuning, false-positive reduction, and threat hunting activities Share insights that improve SOC response times, detection accuracy, and coverage Maintain high standards of documentation, communication, and compliance to audit standards Support the security engineering team during major incidents and platform changes Complete a minimum of 40 hours of professional training per year, aligned to client requirements Duties and Responsibilities Essential Roles & Responsibilities Incident Detection, Investigation & Response Monitor and investigate alerts from Microsoft Defender and related email, endpoint and cloud security tooling Receive and act on escalated alerts from the client's SOC provider or SIEM platform Take ownership of all security incidents, validating indicators of compromise and determining impact Perform detailed investigations using KQL queries in Microsoft Sentinel and telemetry from across the security stack, going beyond initial triage to full root-cause analysis Reconstruct event chains and identify root causes, including correlation across endpoint, identity, cloud, and network data sources Determine credibility and severity of threats in the context of the client's risk profile and regulatory obligations Investigate potential IOCs using multi-source telemetry and threat intelligence Make evidence-based decisions on containment actions and remediation plans, coordinating response actions with the client's IT, cloud, and workplace teams Recommend immediate defensive or containment actions where appropriate, and support teams across the business in the resolution of incidents and post-event analysis and reporting Handle incidents end-to-end where tooling and access allow, escalating to the security engineering team or client security leadership when required Operate within tight SLAs appropriate to a regulated client environment
Jul 04, 2026
Full time
Position Summary The Senior Security Analyst is a dedicated security operations role providing continuous security coverage for a client operating in a regulated industry. You are embedded within a small, senior team delivering operational security services across detection, investigation, response, and proactive security operations, with direct responsibility for outcomes. You own security incidents end-to-end, from initial detection through investigation, containment, and coordination of remediation with internal and third-party teams. When the incident queue is clear, you carry out proactive security operations work including vulnerability scanning, web application scanning, breach and attack simulation, and validation of security tooling, actively maintaining and improving the client's security posture. Beyond incident response, you liaise directly with the client's IT and cloud teams to ensure remediation actions are completed, and you coordinate across teams to drive issues through to resolution. You bridge the gap between security operations and engineering, escalating platform issues to the security engineering team and supporting engineers during major incidents. The tooling scope has a strong Microsoft orientation. You work alongside the client's SOC provider where applicable, receiving escalated SIEM alerts while also monitoring and operating endpoint, vulnerability, and simulation tooling directly. You have direct access for investigation and threat hunting purposes. You bring experience beyond security tooling, with the ability to navigate the infrastructure and application technologies within the client's hybrid (on-premise and cloud) environment. Role Mission To deliver reliable, high-quality operational security for the client by owning detection, investigation, and response, while proactively strengthening the security environment through hands-on security operations work and cross-team coordination. Objectives & Key Results The key objectives will be to: Maintain SLA compliance for incident detection, investigation, and response across all priority levels Own security incidents through to resolution, ensuring remediation actions are completed Operate and validate proactive security tooling (e.g. Qualys, XM Cyber, AttackIQ) to an agreed schedule, identifying and acting on findings Reduce detection gaps by contributing to detection rule tuning, false-positive reduction, and threat hunting activities Share insights that improve SOC response times, detection accuracy, and coverage Maintain high standards of documentation, communication, and compliance to audit standards Support the security engineering team during major incidents and platform changes Complete a minimum of 40 hours of professional training per year, aligned to client requirements Duties and Responsibilities Essential Roles & Responsibilities Incident Detection, Investigation & Response Monitor and investigate alerts from Microsoft Defender and related email, endpoint and cloud security tooling Receive and act on escalated alerts from the client's SOC provider or SIEM platform Take ownership of all security incidents, validating indicators of compromise and determining impact Perform detailed investigations using KQL queries in Microsoft Sentinel and telemetry from across the security stack, going beyond initial triage to full root-cause analysis Reconstruct event chains and identify root causes, including correlation across endpoint, identity, cloud, and network data sources Determine credibility and severity of threats in the context of the client's risk profile and regulatory obligations Investigate potential IOCs using multi-source telemetry and threat intelligence Make evidence-based decisions on containment actions and remediation plans, coordinating response actions with the client's IT, cloud, and workplace teams Recommend immediate defensive or containment actions where appropriate, and support teams across the business in the resolution of incidents and post-event analysis and reporting Handle incidents end-to-end where tooling and access allow, escalating to the security engineering team or client security leadership when required Operate within tight SLAs appropriate to a regulated client environment
This role provides interim leadership of network, cyber, and infrastructure services within a public sector organisation. You will manage a team of engineers while ensuring secure, resilient, and high-performing IT operations. Client Details Our client is a well-established organisation within the public sector, delivering critical services across a diverse and dynamic environment. They are seeking an experienced Interim IT Network Manager to provide interim leadership across their network and cyber functions, ensuring the continued stability, security, and performance of their IT services. Description Lead and manage a team of approximately 10 Network and Cyber Analysts and Engineers, providing direction, mentoring, and performance management. Oversee the organisation's network infrastructure, cyber security posture, and core IT services. Ensure high levels of system resilience, availability, and security across all infrastructure. Drive best practice across network operations, cyber governance, and infrastructure management. Collaborate with senior stakeholders to align IT services with organisational priorities. Manage incident response, risk mitigation, and continuous service improvement initiatives. Contribute to IT strategy, roadmap planning, and transformation programmes. This is a fractional role, working 4 days per week, with 50% of that time at the head office near Cheltenham, Gloucestershire. Profile As the successful Interim IT Network Manager you should have strong technical knowledge in: Enterprise networking (LAN/WAN, firewalls, routing & switching). Cyber security principles, standards, and best practice. Broad IT infrastructure (servers, cloud platforms, end-user environments). In addition, you will have Proven experience managing technical IT teams, particularly within networking or infrastructure environments. Ability to lead in a people-focused, hands-off but technically credible role. Experience within public sector or regulated environments is desirable. Strong stakeholder management and communication skills. Delivery-focused and pragmatic with strong problem-solving ability. Job Offer Day rate: 500 - 600 (Inside IR35) Contract: 4 days per week (fractional role) Duration: 12 Months Location: 50% onsite in Gloucestershire, remainder remote Opportunity to lead an established, high-performing team Blend of strategic leadership and technical oversight Immediate impact in a service-driven organisation This is a fantastic opportunity for an experienced Interim IT Network Manager to make a meaningful impact within the public sector. If you're ready to take the next step in your career, we encourage you to apply today.
Jul 04, 2026
Contractor
This role provides interim leadership of network, cyber, and infrastructure services within a public sector organisation. You will manage a team of engineers while ensuring secure, resilient, and high-performing IT operations. Client Details Our client is a well-established organisation within the public sector, delivering critical services across a diverse and dynamic environment. They are seeking an experienced Interim IT Network Manager to provide interim leadership across their network and cyber functions, ensuring the continued stability, security, and performance of their IT services. Description Lead and manage a team of approximately 10 Network and Cyber Analysts and Engineers, providing direction, mentoring, and performance management. Oversee the organisation's network infrastructure, cyber security posture, and core IT services. Ensure high levels of system resilience, availability, and security across all infrastructure. Drive best practice across network operations, cyber governance, and infrastructure management. Collaborate with senior stakeholders to align IT services with organisational priorities. Manage incident response, risk mitigation, and continuous service improvement initiatives. Contribute to IT strategy, roadmap planning, and transformation programmes. This is a fractional role, working 4 days per week, with 50% of that time at the head office near Cheltenham, Gloucestershire. Profile As the successful Interim IT Network Manager you should have strong technical knowledge in: Enterprise networking (LAN/WAN, firewalls, routing & switching). Cyber security principles, standards, and best practice. Broad IT infrastructure (servers, cloud platforms, end-user environments). In addition, you will have Proven experience managing technical IT teams, particularly within networking or infrastructure environments. Ability to lead in a people-focused, hands-off but technically credible role. Experience within public sector or regulated environments is desirable. Strong stakeholder management and communication skills. Delivery-focused and pragmatic with strong problem-solving ability. Job Offer Day rate: 500 - 600 (Inside IR35) Contract: 4 days per week (fractional role) Duration: 12 Months Location: 50% onsite in Gloucestershire, remainder remote Opportunity to lead an established, high-performing team Blend of strategic leadership and technical oversight Immediate impact in a service-driven organisation This is a fantastic opportunity for an experienced Interim IT Network Manager to make a meaningful impact within the public sector. If you're ready to take the next step in your career, we encourage you to apply today.
Key Details at a Glance Role: Security Incident Response Engineer Location: Warrington - hybrid, typically 2 days per week on site Contract length: 6 months (with strong potential for extension based on performance and project needs) IR35 status: Out of Scope Rate: 100/hour Clearance: Existing SC preferred or strong eligible candidates Day-to-day environment: Digital / Cyber, working closely with Cyber Operations / CSOC What You Would Be Doing This role sits at the intersection of cyber operations and ServiceNow engineering. You would be responsible for designing and embedding robust incident response capabilities in the ServiceNow Security Incident Response (SIR) module, closely aligned to NCSC and best-practice frameworks. ServiceNow SIR workflow design & development Review existing incident processes and translate them into effective ServiceNow SIR workflows, covering triage, escalation paths, case lifecycle, evidence management, and integration with CSOC tooling. Platform configuration & enhancement Configure and customise SIR forms, fields, templates, routing rules, severity models, and guided response actions. You will also identify gaps in capability and define enhancements in line with platform governance and architecture standards. Systems integration & automation Support integration of SIR with SIEM/SOC tools, threat intelligence feeds, SOAR modules, email ingestion, and ITSM processes (Change, Problem, Incident). A key focus is on building automations that reduce manual effort and improve response times. Data, reporting & dashboards Define and implement operational dashboards for CSOC analysts, KPIs for senior management, and compliance/audit-ready reporting. You will help ensure clear visibility of incident trends, response performance, and workflow bottlenecks. Documentation & playbooks Translate existing cyber response processes into guided SIR workflows and create user guides, SOPs, technical configuration documentation, data flow diagrams, and integration maps to support long-term maintainability. Training & BAU handover Deliver hands-on training for Cyber Operations and process owners, and provide detailed handover materials to embed SIR into BAU operations. What Our Client Is Looking For Proven ServiceNow experience, ideally with a strong focus on SecOps / SIR . Solid background in cyber security and incident response , ideally within SOC/CSOC or similar environments. Comfortable engaging with stakeholders across Cyber Operations, IT, and senior management, with the ability to explain both technical detail and business impact. Experience working in or with public sector / regulated environments is beneficial but not essential if you bring strong SIR and IR credentials. Why This Contract Might Appeal to You Opportunity to shape and build a critical incident response capability on ServiceNow rather than simply maintaining an existing setup. Direct impact on how a major organisation responds to cyber incidents, with visibility to senior stakeholders. Hybrid working model, combining meaningful on-site collaboration with flexibility. Work within the Cyber / Public Sector space, contributing to the protection of nationally important services.
Jul 04, 2026
Contractor
Key Details at a Glance Role: Security Incident Response Engineer Location: Warrington - hybrid, typically 2 days per week on site Contract length: 6 months (with strong potential for extension based on performance and project needs) IR35 status: Out of Scope Rate: 100/hour Clearance: Existing SC preferred or strong eligible candidates Day-to-day environment: Digital / Cyber, working closely with Cyber Operations / CSOC What You Would Be Doing This role sits at the intersection of cyber operations and ServiceNow engineering. You would be responsible for designing and embedding robust incident response capabilities in the ServiceNow Security Incident Response (SIR) module, closely aligned to NCSC and best-practice frameworks. ServiceNow SIR workflow design & development Review existing incident processes and translate them into effective ServiceNow SIR workflows, covering triage, escalation paths, case lifecycle, evidence management, and integration with CSOC tooling. Platform configuration & enhancement Configure and customise SIR forms, fields, templates, routing rules, severity models, and guided response actions. You will also identify gaps in capability and define enhancements in line with platform governance and architecture standards. Systems integration & automation Support integration of SIR with SIEM/SOC tools, threat intelligence feeds, SOAR modules, email ingestion, and ITSM processes (Change, Problem, Incident). A key focus is on building automations that reduce manual effort and improve response times. Data, reporting & dashboards Define and implement operational dashboards for CSOC analysts, KPIs for senior management, and compliance/audit-ready reporting. You will help ensure clear visibility of incident trends, response performance, and workflow bottlenecks. Documentation & playbooks Translate existing cyber response processes into guided SIR workflows and create user guides, SOPs, technical configuration documentation, data flow diagrams, and integration maps to support long-term maintainability. Training & BAU handover Deliver hands-on training for Cyber Operations and process owners, and provide detailed handover materials to embed SIR into BAU operations. What Our Client Is Looking For Proven ServiceNow experience, ideally with a strong focus on SecOps / SIR . Solid background in cyber security and incident response , ideally within SOC/CSOC or similar environments. Comfortable engaging with stakeholders across Cyber Operations, IT, and senior management, with the ability to explain both technical detail and business impact. Experience working in or with public sector / regulated environments is beneficial but not essential if you bring strong SIR and IR credentials. Why This Contract Might Appeal to You Opportunity to shape and build a critical incident response capability on ServiceNow rather than simply maintaining an existing setup. Direct impact on how a major organisation responds to cyber incidents, with visibility to senior stakeholders. Hybrid working model, combining meaningful on-site collaboration with flexibility. Work within the Cyber / Public Sector space, contributing to the protection of nationally important services.
An exciting opportunity has arisen for a Junior Cyber Security Analyst to join a growing Information Security team within a modern, cloud-first environment. This role is ideal for someone with around 12-24 months of cyber security or IT security experience who is looking to develop their career within a supportive team using industry-leading technologies. Working alongside experienced security professionals, you'll help monitor, investigate and respond to cyber security events across a global environment. You'll gain hands-on experience with SIEM, EDR, email security, vulnerability management and security automation while continuing to build your technical knowledge. The Role Monitor and investigate security alerts using SIEM and endpoint security platforms. Support incident response activities, including phishing, malware and security investigations. Manage security tickets and requests, ensuring SLAs are met. Assist with vulnerability scanning and remediation activities. Support email security administration and reported phishing investigations. Help maintain Data Loss Prevention (DLP) controls and data protection processes. Work closely with Infrastructure, Service Desk, Networks and Development teams to improve security across the business. Keep documentation and security processes up to date. Stay current with emerging cyber threats and security best practice. About You Around 1-2 years' experience within Cyber Security, Information Security, IT Security or a Service Desk role with security responsibilities. Understanding of security concepts including phishing, malware, vulnerability management and incident response. Exposure to SIEM, EDR/XDR or Microsoft security technologies would be advantageous. Knowledge of Microsoft 365 and cloud environments. Strong communication and problem-solving skills. Passionate about cyber security and keen to continue learning. Relevant certifications (CompTIA Security+, CySA+, SC-200, Blue Team Level 1 or similar) are desirable but not essential. Benefits 25 days annual leave plus Bank Holidays Birthday off Company pension Health Cash Plan Employee Assistance Programme Cycle to Work Scheme Season Ticket Loan Profit Share Scheme Excellent training, mentoring and career progression opportunities 51903MSR1 INDMANS The Portfolio Group are acting on behalf of our client in recruiting for this position.
Jul 04, 2026
Full time
An exciting opportunity has arisen for a Junior Cyber Security Analyst to join a growing Information Security team within a modern, cloud-first environment. This role is ideal for someone with around 12-24 months of cyber security or IT security experience who is looking to develop their career within a supportive team using industry-leading technologies. Working alongside experienced security professionals, you'll help monitor, investigate and respond to cyber security events across a global environment. You'll gain hands-on experience with SIEM, EDR, email security, vulnerability management and security automation while continuing to build your technical knowledge. The Role Monitor and investigate security alerts using SIEM and endpoint security platforms. Support incident response activities, including phishing, malware and security investigations. Manage security tickets and requests, ensuring SLAs are met. Assist with vulnerability scanning and remediation activities. Support email security administration and reported phishing investigations. Help maintain Data Loss Prevention (DLP) controls and data protection processes. Work closely with Infrastructure, Service Desk, Networks and Development teams to improve security across the business. Keep documentation and security processes up to date. Stay current with emerging cyber threats and security best practice. About You Around 1-2 years' experience within Cyber Security, Information Security, IT Security or a Service Desk role with security responsibilities. Understanding of security concepts including phishing, malware, vulnerability management and incident response. Exposure to SIEM, EDR/XDR or Microsoft security technologies would be advantageous. Knowledge of Microsoft 365 and cloud environments. Strong communication and problem-solving skills. Passionate about cyber security and keen to continue learning. Relevant certifications (CompTIA Security+, CySA+, SC-200, Blue Team Level 1 or similar) are desirable but not essential. Benefits 25 days annual leave plus Bank Holidays Birthday off Company pension Health Cash Plan Employee Assistance Programme Cycle to Work Scheme Season Ticket Loan Profit Share Scheme Excellent training, mentoring and career progression opportunities 51903MSR1 INDMANS The Portfolio Group are acting on behalf of our client in recruiting for this position.
An exciting opportunity for a passionate Network Security Engineer to join a unique, multi-national Information Management function. Ideal candidates should be committed to protecting our critical systems and ensuring the integrity and security of our network infrastructure. Salary: Circa £50,000depending on experience+ shift allowance Dynamic (hybrid) working: 5 days per week on-site due to workload classification, working a 24/7 Shift Pattern Security Clearance: British Citizen This role will require DV Clearance. Restrictions and/or limitations relating to nationality and/or rights to work may apply. As a minimum and after offer stage, all successful candidates will need to undergo HMG Basic Personnel Security Standard checks (BPSS) and a Security Check (SC) clearance, which are managed by the MBDA Personnel Security Team. What we can offer you: Company bonus: Up to £2,500 (based on company performance and will vary year to year) Pension: maximum total (employer and employee) contribution of up to 14% Overtime: opportunity for paid overtime Flexi Leave: Up to 15 additional days Enhanced parental leave: offers up to 26 weeks for maternity, adoption and shared parental leave -enhancements are available for paternity leave, neonatal leave and fertility testing and treatments Facilities: Fantastic site facilities including subsidised meals, free car parking and much more The opportunity: Join our forward thinking team as a Network Security Engineer, where you will play a key role in safeguarding our organisations' network infrastructure as part of the 24x7 Internal Security Response (ISR) team. When not involved in incident response and triage activity with the SOC team, you will be responsible for designing, implementing and maintaining robust security solutions to protect against evolving threats. Collaborating with cross-functional teams, you will work on implementing changes securely, identifying vulnerabilities, managing security incidents and ensuring compliance with industry best practices. The role will be involved in the optimisation of network security tools to remediate "purple team" highlighted areas identified for improvement. You will also have the opportunity to immerse your time into the standardisation of network tools. This is a dynamic opportunity to contribute to security initiatives, solve complex challenges, and have a direct impact on the overall resilience of our IT environment. If you are passionate about security and proactive defence, this role is the perfect fit. If you are looking to leverage your technical skills in a values-led company that values innovation and diversity, this is the place to make an impact. What we're looking for from you: ESSENTIALS Solid understanding of networking principles (TCP/IP, DNS, routing, switching, VLANS and load balancing) Strong expertise in configuring, maintaining and troubleshooting firewalls e.g. Cisco, Checkpoint, Palo Alto Demonstrable hands-on experience in next-gen firewalls and advancing security features like IPS/IDS, SSL decryption and deep packet inspection. Proven experience in managing secure proxy solutions (e.g. Bluecoat, F5) and the ability to implement policies for content filtering, SSL inspection and network traffic monitoring. In depth knowledge of security protocols such as IPSec, SSL / TLS, VPNs and two factor authentication. Understanding of network architectures and security zones (DMZ, internal networks). Proficient in monitoring technologies e.g. PRTG, Nagios. DESIRABLES Understanding of cyber security capabilities and their integrations to networks infrastructure. Existing knowledge of / aptitude to learn Darktrace Antigena and Respond, Splunk ES or Log Rhythm tools. Strong ability to interpret complex information via use of packet capture in order to identify malicious traffic in detail, revealing attacker behaviours like C2, exploitation, lateral movement, or data exfiltration. Proven ability to review SOC alerting in collaboration with SOC analysts to effectively triage and manage Tier 1 SOC alerts to the appropriate outcome. Experience with LDAP, and application traffic flow root cause analysis. Previous experience to identify root cause from (TBC for review - Demonstrable understanding of the OSI Reference Model and the network communication protocols, including but not limited to DNS, HTTP/S, SSL, SMTP, FTP/S, LDAP/S. Demonstrable experience with Security Information Event Monitoring Tools and/or Network Packet Capture tools). Our company: Peace is not a given, Freedom is not a given, Sovereignty is not a given MBDA is a leading defence organisation. We are proud of the role we play in supporting the Armed Forces who protect our nations. We partner with governments to work together towards a common goal, defending our freedom. We are proud of our employee-led networks, examples include: Gender Equality, Pride, Menopause Matters, Parents and Carers, Armed Forces, Ethnic Diversity, Neurodiversity, Disability and more We recognise that everyone is unique, and we encourage you to speak to us should you require any advice, support or adjustments throughout our recruitment process. Follow us on LinkedIn (MBDA), X Instagram (MBDA_UK) and Glassdoor or visit our MBDA Careers website for more information.
Jul 04, 2026
Full time
An exciting opportunity for a passionate Network Security Engineer to join a unique, multi-national Information Management function. Ideal candidates should be committed to protecting our critical systems and ensuring the integrity and security of our network infrastructure. Salary: Circa £50,000depending on experience+ shift allowance Dynamic (hybrid) working: 5 days per week on-site due to workload classification, working a 24/7 Shift Pattern Security Clearance: British Citizen This role will require DV Clearance. Restrictions and/or limitations relating to nationality and/or rights to work may apply. As a minimum and after offer stage, all successful candidates will need to undergo HMG Basic Personnel Security Standard checks (BPSS) and a Security Check (SC) clearance, which are managed by the MBDA Personnel Security Team. What we can offer you: Company bonus: Up to £2,500 (based on company performance and will vary year to year) Pension: maximum total (employer and employee) contribution of up to 14% Overtime: opportunity for paid overtime Flexi Leave: Up to 15 additional days Enhanced parental leave: offers up to 26 weeks for maternity, adoption and shared parental leave -enhancements are available for paternity leave, neonatal leave and fertility testing and treatments Facilities: Fantastic site facilities including subsidised meals, free car parking and much more The opportunity: Join our forward thinking team as a Network Security Engineer, where you will play a key role in safeguarding our organisations' network infrastructure as part of the 24x7 Internal Security Response (ISR) team. When not involved in incident response and triage activity with the SOC team, you will be responsible for designing, implementing and maintaining robust security solutions to protect against evolving threats. Collaborating with cross-functional teams, you will work on implementing changes securely, identifying vulnerabilities, managing security incidents and ensuring compliance with industry best practices. The role will be involved in the optimisation of network security tools to remediate "purple team" highlighted areas identified for improvement. You will also have the opportunity to immerse your time into the standardisation of network tools. This is a dynamic opportunity to contribute to security initiatives, solve complex challenges, and have a direct impact on the overall resilience of our IT environment. If you are passionate about security and proactive defence, this role is the perfect fit. If you are looking to leverage your technical skills in a values-led company that values innovation and diversity, this is the place to make an impact. What we're looking for from you: ESSENTIALS Solid understanding of networking principles (TCP/IP, DNS, routing, switching, VLANS and load balancing) Strong expertise in configuring, maintaining and troubleshooting firewalls e.g. Cisco, Checkpoint, Palo Alto Demonstrable hands-on experience in next-gen firewalls and advancing security features like IPS/IDS, SSL decryption and deep packet inspection. Proven experience in managing secure proxy solutions (e.g. Bluecoat, F5) and the ability to implement policies for content filtering, SSL inspection and network traffic monitoring. In depth knowledge of security protocols such as IPSec, SSL / TLS, VPNs and two factor authentication. Understanding of network architectures and security zones (DMZ, internal networks). Proficient in monitoring technologies e.g. PRTG, Nagios. DESIRABLES Understanding of cyber security capabilities and their integrations to networks infrastructure. Existing knowledge of / aptitude to learn Darktrace Antigena and Respond, Splunk ES or Log Rhythm tools. Strong ability to interpret complex information via use of packet capture in order to identify malicious traffic in detail, revealing attacker behaviours like C2, exploitation, lateral movement, or data exfiltration. Proven ability to review SOC alerting in collaboration with SOC analysts to effectively triage and manage Tier 1 SOC alerts to the appropriate outcome. Experience with LDAP, and application traffic flow root cause analysis. Previous experience to identify root cause from (TBC for review - Demonstrable understanding of the OSI Reference Model and the network communication protocols, including but not limited to DNS, HTTP/S, SSL, SMTP, FTP/S, LDAP/S. Demonstrable experience with Security Information Event Monitoring Tools and/or Network Packet Capture tools). Our company: Peace is not a given, Freedom is not a given, Sovereignty is not a given MBDA is a leading defence organisation. We are proud of the role we play in supporting the Armed Forces who protect our nations. We partner with governments to work together towards a common goal, defending our freedom. We are proud of our employee-led networks, examples include: Gender Equality, Pride, Menopause Matters, Parents and Carers, Armed Forces, Ethnic Diversity, Neurodiversity, Disability and more We recognise that everyone is unique, and we encourage you to speak to us should you require any advice, support or adjustments throughout our recruitment process. Follow us on LinkedIn (MBDA), X Instagram (MBDA_UK) and Glassdoor or visit our MBDA Careers website for more information.
DevOps Engineer SC cleared Permanent Flexible AWS Terraform SC Cleared At Peregrine, we re always seeking Specialist Talent that have the ideal mix of skills, experience, and attitude, to place with our vast array of clients. From Business Analysts in large government organisations to Software Developers in the private sector we are always in search of the best talent to place, now. The role: We are seeking an SC cleared DevOps Engineer to work as a forward deployed engineer, embedded within the Cyber Capability Unit. The role will support the design, build and deployment of AI powered solutions that strengthen cyber security and fraud prevention capabilities. You will work closely with engineers, product owners and stakeholders to understand operational needs, develop prototypes and deploy secure, reliable solutions within approved platforms and environments. This role directly supports the Cyber Resilience Centre s mission and contributes to the wider security strategy by delivering practical, governed AI solutions that provide measurable operational value. Responsibilities: Cloud and Platform Integration Design and deploy solutions in AWS cloud environments Use infrastructure as code to ensure repeatable and compliant deployments Ensure all solutions meet organisational governance, security and compliance standards CI/CD and Automation Configure, manage and maintain GitLab CI pipelines Automate testing, build and deployment of infrastructure, applications and services Promote best practice DevOps ways of working across environments Testing and Quality Implement unit, integration and performance testing for all components Ensure solutions are reliable, reproducible and stable across releases Support continuous improvement of testing practices Monitoring and Incident Response Implement observability and monitoring tooling Track system performance and detect anomalies Support incident response, troubleshooting and root cause analysis in live environments Collaboration and Delivery Work closely with engineers, analysts and stakeholders Translate requirements into working technical solutions Support deployment, handover and ongoing optimisation of delivered capabilities Skills & Experience: Active SC clearance Strong experience deploying and operating solutions in AWS Infrastructure as code using Terraform CI/CD pipeline development using GitLab CI Experience with monitoring, logging and alerting tools Understanding of secure DevOps practices in regulated environments Experience working with large data stores or big data platforms Desirable skills: Experience supporting AI or data driven platforms Knowledge of cyber security or fraud prevention domains Experience working within government or critical national infrastructure environments About Peregrine We build workforces that deliver tech and change programmes at leading UK organisations. By combining data science from Peregrine Intelligence, our industry-accredited Peregrine Academy, and market-leading attraction and diversity initiatives, we bridge capability gaps at all levels in public and private sector organisations. We work closely with our clients to understand their challenges and deliver flexible, long-term solutions that make a real difference. When you join Peregrine, you become part of a team that s focused on growth, both yours, our clients , and the sectors we support. You ll also get access to a full range of benefits alongside your salary. How Specialist Talent Works As a permanent employee at Peregrine, you ll be part of our Specialist Talent team. That means you ll work on-site or remotely with our clients, supporting them on complex, high-impact projects in Data, Digital and Business Transformation. You ll get the variety and challenge of consultancy work, with the stability and support of a permanent role. You re not a contractor - you re a valued member of our team, with access to all the same benefits, learning opportunities, and community. Find out more: peregrine.global or check out our LinkedIn page: peregrin e- resourcing
Jul 03, 2026
Full time
DevOps Engineer SC cleared Permanent Flexible AWS Terraform SC Cleared At Peregrine, we re always seeking Specialist Talent that have the ideal mix of skills, experience, and attitude, to place with our vast array of clients. From Business Analysts in large government organisations to Software Developers in the private sector we are always in search of the best talent to place, now. The role: We are seeking an SC cleared DevOps Engineer to work as a forward deployed engineer, embedded within the Cyber Capability Unit. The role will support the design, build and deployment of AI powered solutions that strengthen cyber security and fraud prevention capabilities. You will work closely with engineers, product owners and stakeholders to understand operational needs, develop prototypes and deploy secure, reliable solutions within approved platforms and environments. This role directly supports the Cyber Resilience Centre s mission and contributes to the wider security strategy by delivering practical, governed AI solutions that provide measurable operational value. Responsibilities: Cloud and Platform Integration Design and deploy solutions in AWS cloud environments Use infrastructure as code to ensure repeatable and compliant deployments Ensure all solutions meet organisational governance, security and compliance standards CI/CD and Automation Configure, manage and maintain GitLab CI pipelines Automate testing, build and deployment of infrastructure, applications and services Promote best practice DevOps ways of working across environments Testing and Quality Implement unit, integration and performance testing for all components Ensure solutions are reliable, reproducible and stable across releases Support continuous improvement of testing practices Monitoring and Incident Response Implement observability and monitoring tooling Track system performance and detect anomalies Support incident response, troubleshooting and root cause analysis in live environments Collaboration and Delivery Work closely with engineers, analysts and stakeholders Translate requirements into working technical solutions Support deployment, handover and ongoing optimisation of delivered capabilities Skills & Experience: Active SC clearance Strong experience deploying and operating solutions in AWS Infrastructure as code using Terraform CI/CD pipeline development using GitLab CI Experience with monitoring, logging and alerting tools Understanding of secure DevOps practices in regulated environments Experience working with large data stores or big data platforms Desirable skills: Experience supporting AI or data driven platforms Knowledge of cyber security or fraud prevention domains Experience working within government or critical national infrastructure environments About Peregrine We build workforces that deliver tech and change programmes at leading UK organisations. By combining data science from Peregrine Intelligence, our industry-accredited Peregrine Academy, and market-leading attraction and diversity initiatives, we bridge capability gaps at all levels in public and private sector organisations. We work closely with our clients to understand their challenges and deliver flexible, long-term solutions that make a real difference. When you join Peregrine, you become part of a team that s focused on growth, both yours, our clients , and the sectors we support. You ll also get access to a full range of benefits alongside your salary. How Specialist Talent Works As a permanent employee at Peregrine, you ll be part of our Specialist Talent team. That means you ll work on-site or remotely with our clients, supporting them on complex, high-impact projects in Data, Digital and Business Transformation. You ll get the variety and challenge of consultancy work, with the stability and support of a permanent role. You re not a contractor - you re a valued member of our team, with access to all the same benefits, learning opportunities, and community. Find out more: peregrine.global or check out our LinkedIn page: peregrin e- resourcing
Cyber Security Analyst 6-Month Contract Inside IR35 Hybrid (2 Days Onsite) We are seeking a hands-on Cyber Security Analyst to support a major public-sector organisation's cyber security operations and resilience programme. Key Responsibilities Monitor, investigate and respond to cyber security incidents. Support security monitoring using Microsoft Sentinel and related tools. Conduct threat hunting, log analysis and security investigations. Identify vulnerabilities and track remediation actions. Develop and improve incident response processes and playbooks. Work with technical teams, suppliers and stakeholders to drive security improvements. Provide practical security advice across the organisation. Essential Skills Cyber Security Operations, SOC or Incident Response experience. Hands-on Microsoft Sentinel or SIEM experience. Threat hunting, log analysis and security monitoring. Experience with Microsoft Defender and Microsoft security technologies. Vulnerability management and remediation tracking. Strong communication and stakeholder management skills. Desirable Skills Local Government, NHS, Housing or wider Public Sector experience. Defender XDR, Defender for Endpoint, Defender for Identity and Entra ID. SOAR, Logic Apps or security automation experience. Contract Details 6-Month Contract Inside IR35 Hybrid Working (2 Days Onsite) Immediate Start Preferred An excellent opportunity for an experienced Cyber Security Analyst to join a complex environment and play a key role in strengthening cyber resilience.
Jul 03, 2026
Contractor
Cyber Security Analyst 6-Month Contract Inside IR35 Hybrid (2 Days Onsite) We are seeking a hands-on Cyber Security Analyst to support a major public-sector organisation's cyber security operations and resilience programme. Key Responsibilities Monitor, investigate and respond to cyber security incidents. Support security monitoring using Microsoft Sentinel and related tools. Conduct threat hunting, log analysis and security investigations. Identify vulnerabilities and track remediation actions. Develop and improve incident response processes and playbooks. Work with technical teams, suppliers and stakeholders to drive security improvements. Provide practical security advice across the organisation. Essential Skills Cyber Security Operations, SOC or Incident Response experience. Hands-on Microsoft Sentinel or SIEM experience. Threat hunting, log analysis and security monitoring. Experience with Microsoft Defender and Microsoft security technologies. Vulnerability management and remediation tracking. Strong communication and stakeholder management skills. Desirable Skills Local Government, NHS, Housing or wider Public Sector experience. Defender XDR, Defender for Endpoint, Defender for Identity and Entra ID. SOAR, Logic Apps or security automation experience. Contract Details 6-Month Contract Inside IR35 Hybrid Working (2 Days Onsite) Immediate Start Preferred An excellent opportunity for an experienced Cyber Security Analyst to join a complex environment and play a key role in strengthening cyber resilience.
Senior IT Support Analyst Salary: £32,000 £37,000 depending on experience Hours: 37.5 hours per week - Monday to Friday, 08 30 Location: Hybrid - Coventry office base preferred; nationwide applications welcome Start Date: ASAP At Macfarlane Packaging, we protect what matters - our people, customers and the environment. With over 75 years of expertise, we offer a stable, supportive workplace where you can build a long-term career. We re now looking for a Senior IT Support Analyst to join our Head Office function based in Coventry. Role Overview This is an exciting opportunity for an experienced IT support professional to join a forward-thinking IT team at a pivotal point in how we deliver and evolve our helpdesk function. We are investing in AI tooling - including Freshservice Freddy AI and Microsoft Copilot - to enhance first-contact resolution, automate triage, and free our analysts to focus on complex problem-solving and user experience. This role sits at the centre of that transition: you will be both a skilled technical responder and a key contributor to building a smarter, more efficient support service. You will operate with a high degree of autonomy, acting as the de facto lead across the helpdesk queue, and will work closely with the IT Manager to develop and continuously improve our AI-augmented support model. Key responsibilities: Helpdesk Operations Own the day-to-day management of the Freshservice helpdesk queue, ensuring tickets are triaged, prioritised, and resolved in line with SLAs Provide 2nd line technical support across the Microsoft 365 stack (Entra ID, Intune, Exchange Online, SharePoint, Teams) and core business applications Act as the first point of escalation for the helpdesk team, providing technical guidance and quality oversight Maintain and improve the Freshservice knowledge base, ensuring articles are accurate, current, and structured for AI consumption Core working hours are Monday to Friday, 08 30 (37.5 hours per week). Out-of-hours availability is not a routine requirement of this role; however, the postholder may occasionally be contacted outside these hours in the event of a critical IT incident such as a significant cybersecurity threat or major service outage AI & Automation Champion the use of Freshservice Freddy AI, including auto-triage, auto-categorisation, and automated response workflows Work with the IT Manager to identify and implement automation opportunities that reduce manual ticket handling Monitor AI-deflection rates and first-contact resolution metrics, making data-driven recommendations for improvement Leverage Microsoft Copilot and Claude Enterprise for drafting technical responses, summarising incident trends, and knowledge base creation User Experience & Communication Ensure all users receive timely, clear, and professional communication throughout their ticket lifecycle Identify recurring issues and proactively communicate workarounds or solutions to the wider business Assist with onboarding and offboarding processes, device provisioning, and licence management Continuous Improvement Produce regular reporting on helpdesk performance, SLA adherence, and ticket trends, presenting insights to the IT Manager Contribute to IT projects and initiatives as required, including site integrations and system rollouts Maintain and improve standard operating procedures and runbooks Personal Specification 3+ years experience in an IT support or service desk role, including 2nd line technical work Strong working knowledge of Microsoft 365 particularly Entra ID, Intune, Exchange Online, and Teams Experience with an ITSM platform (Freshservice, ServiceNow, Zendesk, Jira Service Management, or similar) Confident communicator with the ability to explain technical issues clearly to non-technical users Self-motivated with the ability to manage a busy queue independently and prioritise effectively A genuine interest in AI tooling and how it can improve IT service delivery Full UK Driving Licence (occasional travel to UK sites is required) Desirable Hands-on experience with Freshservice and/or Freddy AI Familiarity with Microsoft Copilot, Copilot Studio, or similar AI productivity tools Experience using NinjaOne, Microsoft Intune, or other RMM/MDM platforms Microsoft certifications (e.g. MS-900, MD-102, MS-102) or equivalent practical experience ITIL Foundation certification or working knowledge of ITIL service management principles Familiarity with cybersecurity practices relevant to end-user computing (e.g. MFA, endpoint protection, phishing awareness) Exposure to IT project work - system rollouts, site integrations, or technology migrations Experience in a multi-site or distributed business environment Employee Benefits: •£32,000 £37,000 per annum, depending on experience •Hybrid / flexible working arrangements •Pension scheme •25 days holiday plus bank holidays •Access to Group employee benefits and discount schemes •Structured professional development and support for relevant certifications •Exposure to a modern Microsoft 365-centric environment with real investment in AI tooling Equal Opportunities Macfarlane Packaging is an equal opportunities employer. We are committed to creating an inclusive environment for all employees and welcome applications from candidates of all backgrounds.
Jul 03, 2026
Full time
Senior IT Support Analyst Salary: £32,000 £37,000 depending on experience Hours: 37.5 hours per week - Monday to Friday, 08 30 Location: Hybrid - Coventry office base preferred; nationwide applications welcome Start Date: ASAP At Macfarlane Packaging, we protect what matters - our people, customers and the environment. With over 75 years of expertise, we offer a stable, supportive workplace where you can build a long-term career. We re now looking for a Senior IT Support Analyst to join our Head Office function based in Coventry. Role Overview This is an exciting opportunity for an experienced IT support professional to join a forward-thinking IT team at a pivotal point in how we deliver and evolve our helpdesk function. We are investing in AI tooling - including Freshservice Freddy AI and Microsoft Copilot - to enhance first-contact resolution, automate triage, and free our analysts to focus on complex problem-solving and user experience. This role sits at the centre of that transition: you will be both a skilled technical responder and a key contributor to building a smarter, more efficient support service. You will operate with a high degree of autonomy, acting as the de facto lead across the helpdesk queue, and will work closely with the IT Manager to develop and continuously improve our AI-augmented support model. Key responsibilities: Helpdesk Operations Own the day-to-day management of the Freshservice helpdesk queue, ensuring tickets are triaged, prioritised, and resolved in line with SLAs Provide 2nd line technical support across the Microsoft 365 stack (Entra ID, Intune, Exchange Online, SharePoint, Teams) and core business applications Act as the first point of escalation for the helpdesk team, providing technical guidance and quality oversight Maintain and improve the Freshservice knowledge base, ensuring articles are accurate, current, and structured for AI consumption Core working hours are Monday to Friday, 08 30 (37.5 hours per week). Out-of-hours availability is not a routine requirement of this role; however, the postholder may occasionally be contacted outside these hours in the event of a critical IT incident such as a significant cybersecurity threat or major service outage AI & Automation Champion the use of Freshservice Freddy AI, including auto-triage, auto-categorisation, and automated response workflows Work with the IT Manager to identify and implement automation opportunities that reduce manual ticket handling Monitor AI-deflection rates and first-contact resolution metrics, making data-driven recommendations for improvement Leverage Microsoft Copilot and Claude Enterprise for drafting technical responses, summarising incident trends, and knowledge base creation User Experience & Communication Ensure all users receive timely, clear, and professional communication throughout their ticket lifecycle Identify recurring issues and proactively communicate workarounds or solutions to the wider business Assist with onboarding and offboarding processes, device provisioning, and licence management Continuous Improvement Produce regular reporting on helpdesk performance, SLA adherence, and ticket trends, presenting insights to the IT Manager Contribute to IT projects and initiatives as required, including site integrations and system rollouts Maintain and improve standard operating procedures and runbooks Personal Specification 3+ years experience in an IT support or service desk role, including 2nd line technical work Strong working knowledge of Microsoft 365 particularly Entra ID, Intune, Exchange Online, and Teams Experience with an ITSM platform (Freshservice, ServiceNow, Zendesk, Jira Service Management, or similar) Confident communicator with the ability to explain technical issues clearly to non-technical users Self-motivated with the ability to manage a busy queue independently and prioritise effectively A genuine interest in AI tooling and how it can improve IT service delivery Full UK Driving Licence (occasional travel to UK sites is required) Desirable Hands-on experience with Freshservice and/or Freddy AI Familiarity with Microsoft Copilot, Copilot Studio, or similar AI productivity tools Experience using NinjaOne, Microsoft Intune, or other RMM/MDM platforms Microsoft certifications (e.g. MS-900, MD-102, MS-102) or equivalent practical experience ITIL Foundation certification or working knowledge of ITIL service management principles Familiarity with cybersecurity practices relevant to end-user computing (e.g. MFA, endpoint protection, phishing awareness) Exposure to IT project work - system rollouts, site integrations, or technology migrations Experience in a multi-site or distributed business environment Employee Benefits: •£32,000 £37,000 per annum, depending on experience •Hybrid / flexible working arrangements •Pension scheme •25 days holiday plus bank holidays •Access to Group employee benefits and discount schemes •Structured professional development and support for relevant certifications •Exposure to a modern Microsoft 365-centric environment with real investment in AI tooling Equal Opportunities Macfarlane Packaging is an equal opportunities employer. We are committed to creating an inclusive environment for all employees and welcome applications from candidates of all backgrounds.
The Company Since the 1970s, the Briggs Group has grown to become one of the world leaders in the marine and environmental services industry, currently employing around 800 dedicated members of staff. Providing clients with services ranging from terminal operations to subsea cable repair, we are committed to employing dedicated and skilled staff who are looking for a career that offers stability, genuine career progression, and recognition. Our core values support the Company s mission and decision-making and provide a benchmark for everything that we believe in. They are the Company s fundamental beliefs and are integrated into every employee process, shaping the Company s culture for future success. The Role The IT Security Analyst is responsible for identifying, analysing, and tracking security risks across systems and applications. The role focuses on monitoring, investigation, vulnerability management, and supporting remediation activities to help protect the organisation's technology estate and information assets. Working within an established security governance framework, you will support security operations, compliance activities, risk management, and continuous improvement initiatives across the business. Key Responsibilities: • Monitor and analyse security alerts from tools such as Microsoft Defender and other security monitoring platforms. • Identify vulnerabilities across systems, applications, and endpoints. • Investigate anomalies, trends, and suspicious activity, escalating security incidents in line with defined procedures. • Participate in incident investigations and post-incident reviews, contributing findings and recommendations. • Assess and track vulnerabilities through to remediation, monitoring progress against agreed actions and timelines. • Conduct access reviews and support permission auditing activities. • Gather and prepare evidence for internal and external audits. • Support risk management activities, including maintaining risk registers and assisting with supplier security assessments. • Deliver security awareness and training initiatives across the organisation. • Identify opportunities to improve and automate security processes, reporting, and operational controls. Skills & Experience: • Experience using security monitoring tools such as Microsoft Defender, SIEM platforms, or similar technologies. • Strong analytical and investigative skills. • Understanding of vulnerability management and incident response processes. • Familiarity with security standards and frameworks such as ISO 27001 and Cyber Essentials Plus. • Ability to interpret security alerts, logs, and system behaviour. • Experience working within governance, compliance, or audit-focused environments. The Candidate: You will be: • Detail-oriented with a strong focus on accuracy. • Proactive in identifying and addressing risks. • Comfortable working within structured processes and governance frameworks. • A clear communicator with the ability to engage with both technical and non-technical stakeholders. • Committed to continuous improvement and professional development. What s in it for you? We offer an excellent package, including a pension, life assurance, the Cycle to Work scheme, and more, along with opportunities for on-the-job training and career progression within a stable environment. Flexible working options are also available. As an equal opportunity employer, we encourage diversity and are committed to creating an inclusive environment for all employees. We welcome applicants from all protected characteristics and are committed to providing any reasonable adjustments you need during the application, assessment, and onboarding process. The next steps You must be able to provide relevant documentation confirming that you have the right to work in the UK. Please send applications or feel free to call for further information
Jul 03, 2026
Full time
The Company Since the 1970s, the Briggs Group has grown to become one of the world leaders in the marine and environmental services industry, currently employing around 800 dedicated members of staff. Providing clients with services ranging from terminal operations to subsea cable repair, we are committed to employing dedicated and skilled staff who are looking for a career that offers stability, genuine career progression, and recognition. Our core values support the Company s mission and decision-making and provide a benchmark for everything that we believe in. They are the Company s fundamental beliefs and are integrated into every employee process, shaping the Company s culture for future success. The Role The IT Security Analyst is responsible for identifying, analysing, and tracking security risks across systems and applications. The role focuses on monitoring, investigation, vulnerability management, and supporting remediation activities to help protect the organisation's technology estate and information assets. Working within an established security governance framework, you will support security operations, compliance activities, risk management, and continuous improvement initiatives across the business. Key Responsibilities: • Monitor and analyse security alerts from tools such as Microsoft Defender and other security monitoring platforms. • Identify vulnerabilities across systems, applications, and endpoints. • Investigate anomalies, trends, and suspicious activity, escalating security incidents in line with defined procedures. • Participate in incident investigations and post-incident reviews, contributing findings and recommendations. • Assess and track vulnerabilities through to remediation, monitoring progress against agreed actions and timelines. • Conduct access reviews and support permission auditing activities. • Gather and prepare evidence for internal and external audits. • Support risk management activities, including maintaining risk registers and assisting with supplier security assessments. • Deliver security awareness and training initiatives across the organisation. • Identify opportunities to improve and automate security processes, reporting, and operational controls. Skills & Experience: • Experience using security monitoring tools such as Microsoft Defender, SIEM platforms, or similar technologies. • Strong analytical and investigative skills. • Understanding of vulnerability management and incident response processes. • Familiarity with security standards and frameworks such as ISO 27001 and Cyber Essentials Plus. • Ability to interpret security alerts, logs, and system behaviour. • Experience working within governance, compliance, or audit-focused environments. The Candidate: You will be: • Detail-oriented with a strong focus on accuracy. • Proactive in identifying and addressing risks. • Comfortable working within structured processes and governance frameworks. • A clear communicator with the ability to engage with both technical and non-technical stakeholders. • Committed to continuous improvement and professional development. What s in it for you? We offer an excellent package, including a pension, life assurance, the Cycle to Work scheme, and more, along with opportunities for on-the-job training and career progression within a stable environment. Flexible working options are also available. As an equal opportunity employer, we encourage diversity and are committed to creating an inclusive environment for all employees. We welcome applicants from all protected characteristics and are committed to providing any reasonable adjustments you need during the application, assessment, and onboarding process. The next steps You must be able to provide relevant documentation confirming that you have the right to work in the UK. Please send applications or feel free to call for further information
Head of Information Security - CISSP, CISM, ISO27001, NIST, PCI DSS, GDPR, DevSecOps, Cloud Security, SIEM, SOC, AI Security. Permanent, West London, Hybrid Working. c.£100k +Benefits Head of Information Security/CISO/Senior InfoSec Consultant required to lead and develop a modern, security-first function within a growing technology business. Reporting to the CTO, you'll combine strategic leadership with a hands-on technical approach, working closely with Engineering, Infrastructure and Operations teams to embed security across the organisation. The role will adopt Information Security strategy, governance, risk and compliance while implementing practical security controls, automation and DevSecOps best practice. This is an excellent opportunity to influence technology strategy, lead security initiatives and help shape a mature, AI-enabled security capability whilst remaining hands-on in the early stages. In time, you will build a small team of InfoSec and Cyber Security Analysts around you. Key Responsibilities: Define and deliver the Information Security strategy, policies and governance framework. Define and develop robust security controls inline with both business practices and compliance requirements inc ISO27001, CE+, SOC2, NIST CSF, GDPR and PCI DSS. Embed Secure by Design and DevSecOps principles across engineering teams. Lead cyber risk management, incident response, threat modelling and vulnerability management using a range of contemporary tools. Drive AI and automation to enhance security operations and threat detection. Oversee third-party security, supplier assurance and client audits. Recruit, mentor, lead and develop the Information Security team. As such, we're looking for candidates with experience leading Information Security or Cyber Security functions within technology-led organisations. You will possess: CISSP, CISM or equivalent security certification. Strong knowledge of ISO27001, NIST, PCI DSS, GDPR and Information Security Governance. Experience developing security strategy, GRC and cyber risk programmes including definition of security controls Strong technical knowledge across cloud, network, endpoint, application and data security. Experience with SIEM, SOC, vulnerability management and incident response. Knowledge of DevSecOps, security automation and modern cloud environments. Excellent communication, stakeholder management and leadership skills. You may have been working as a CISO, Information Security Manager, Cyber Security Consultant or within another senior InfoSec/CyberSec capacity which has granted you experience in both security control definition and hands-on practical management of security threats and incidents including vulnerability scanning and penetration testing. This is an outstanding opportunity to join a forward-thinking organisation where you'll shape the security strategy, influence technology direction and build a modern Information Security function using the latest cloud, automation and AI technologies.
Jul 03, 2026
Full time
Head of Information Security - CISSP, CISM, ISO27001, NIST, PCI DSS, GDPR, DevSecOps, Cloud Security, SIEM, SOC, AI Security. Permanent, West London, Hybrid Working. c.£100k +Benefits Head of Information Security/CISO/Senior InfoSec Consultant required to lead and develop a modern, security-first function within a growing technology business. Reporting to the CTO, you'll combine strategic leadership with a hands-on technical approach, working closely with Engineering, Infrastructure and Operations teams to embed security across the organisation. The role will adopt Information Security strategy, governance, risk and compliance while implementing practical security controls, automation and DevSecOps best practice. This is an excellent opportunity to influence technology strategy, lead security initiatives and help shape a mature, AI-enabled security capability whilst remaining hands-on in the early stages. In time, you will build a small team of InfoSec and Cyber Security Analysts around you. Key Responsibilities: Define and deliver the Information Security strategy, policies and governance framework. Define and develop robust security controls inline with both business practices and compliance requirements inc ISO27001, CE+, SOC2, NIST CSF, GDPR and PCI DSS. Embed Secure by Design and DevSecOps principles across engineering teams. Lead cyber risk management, incident response, threat modelling and vulnerability management using a range of contemporary tools. Drive AI and automation to enhance security operations and threat detection. Oversee third-party security, supplier assurance and client audits. Recruit, mentor, lead and develop the Information Security team. As such, we're looking for candidates with experience leading Information Security or Cyber Security functions within technology-led organisations. You will possess: CISSP, CISM or equivalent security certification. Strong knowledge of ISO27001, NIST, PCI DSS, GDPR and Information Security Governance. Experience developing security strategy, GRC and cyber risk programmes including definition of security controls Strong technical knowledge across cloud, network, endpoint, application and data security. Experience with SIEM, SOC, vulnerability management and incident response. Knowledge of DevSecOps, security automation and modern cloud environments. Excellent communication, stakeholder management and leadership skills. You may have been working as a CISO, Information Security Manager, Cyber Security Consultant or within another senior InfoSec/CyberSec capacity which has granted you experience in both security control definition and hands-on practical management of security threats and incidents including vulnerability scanning and penetration testing. This is an outstanding opportunity to join a forward-thinking organisation where you'll shape the security strategy, influence technology direction and build a modern Information Security function using the latest cloud, automation and AI technologies.
Cyber Security Operations Manager (Hybrid) Location: Bournemouth (2 days per week in-office) Salary: £65-75k + competitive bonus & benefits Lead and evolve a high-performing cyber security operations function within a fast-paced, values-driven environment. This role offers the opportunity to shape security strategy, strengthen incident response capabilities, and drive continuous improvement across monitoring, detection, and risk management. You'll take ownership of security operations, managing a team of analysts while working closely with senior stakeholders to enhance resilience, governance, and compliance. From leading incident response and threat hunting to influencing long-term security roadmaps, you'll play a key role in protecting critical systems and data. We're looking for a hands-on cyber leader with strong technical depth, proven experience in security operations, and the ability to translate complex risks into clear business impact. A background in frameworks such as ISO27001, NIST or similar, alongside relevant certifications, will be highly beneficial. Excellent benefits, flexible hybrid working, and the chance to make a genuine impact in a forward-thinking organisation.
Jul 03, 2026
Full time
Cyber Security Operations Manager (Hybrid) Location: Bournemouth (2 days per week in-office) Salary: £65-75k + competitive bonus & benefits Lead and evolve a high-performing cyber security operations function within a fast-paced, values-driven environment. This role offers the opportunity to shape security strategy, strengthen incident response capabilities, and drive continuous improvement across monitoring, detection, and risk management. You'll take ownership of security operations, managing a team of analysts while working closely with senior stakeholders to enhance resilience, governance, and compliance. From leading incident response and threat hunting to influencing long-term security roadmaps, you'll play a key role in protecting critical systems and data. We're looking for a hands-on cyber leader with strong technical depth, proven experience in security operations, and the ability to translate complex risks into clear business impact. A background in frameworks such as ISO27001, NIST or similar, alongside relevant certifications, will be highly beneficial. Excellent benefits, flexible hybrid working, and the chance to make a genuine impact in a forward-thinking organisation.
A fantastic opportunity for a Cloud Security Analyst to join a leading SAAS provider within the Insurance services industry. Working as part of their IT Operations team based in Camberley, Surrey on hybrid working arrangement that will require staff to be present in the office in Camberley for 3 days per week. Therefore you will need to be within a sensible commutable distance to their offices. Ideally you will be hold degree in Computer Science, Information Technology, Cybersecurity, Data Science, or a related technical field, or equivalent relevant experience with demonstrable cloud platforms, particularly AWS. You will have at least 2 years of practical working experience of security principles and you will demonstrate genuine interest in developing expertise in cloud security further. A relevant industry certification, such as AWS certifications is desirable and familiarity with security and compliance frameworks including ISO 27001, SOC 2 and CIS Foundations Benchmarks are required. You will have strong analytical and problem-solving skills, with the ability to identify and mitigate security risks effectively, along with excellent communication and interpersonal skills to collaborate with cross-functional teams and the ability to simultaneously work on a range of information security activities. In this you will be supporting the technical security and compliance of the organisation and their hosted services provided to clients. This is a role for someone with a solid foundation in cloud and security principles who is looking to take the next step in their career - you will be supported by experienced colleagues and given the opportunity to take on increasing responsibility as your confidence and skills develop. The core focus of the role is AWS-hosted environment security, complemented by identity and access management, vulnerability management, compliance support and incident response. You will work closely with their Engineering, Platform, Infrastructure and Support teams, as well as external stakeholders. A starting salary of around £50,000 plus excellent benefits and a structured career path are on offer for the right candidate.
Jul 03, 2026
Full time
A fantastic opportunity for a Cloud Security Analyst to join a leading SAAS provider within the Insurance services industry. Working as part of their IT Operations team based in Camberley, Surrey on hybrid working arrangement that will require staff to be present in the office in Camberley for 3 days per week. Therefore you will need to be within a sensible commutable distance to their offices. Ideally you will be hold degree in Computer Science, Information Technology, Cybersecurity, Data Science, or a related technical field, or equivalent relevant experience with demonstrable cloud platforms, particularly AWS. You will have at least 2 years of practical working experience of security principles and you will demonstrate genuine interest in developing expertise in cloud security further. A relevant industry certification, such as AWS certifications is desirable and familiarity with security and compliance frameworks including ISO 27001, SOC 2 and CIS Foundations Benchmarks are required. You will have strong analytical and problem-solving skills, with the ability to identify and mitigate security risks effectively, along with excellent communication and interpersonal skills to collaborate with cross-functional teams and the ability to simultaneously work on a range of information security activities. In this you will be supporting the technical security and compliance of the organisation and their hosted services provided to clients. This is a role for someone with a solid foundation in cloud and security principles who is looking to take the next step in their career - you will be supported by experienced colleagues and given the opportunity to take on increasing responsibility as your confidence and skills develop. The core focus of the role is AWS-hosted environment security, complemented by identity and access management, vulnerability management, compliance support and incident response. You will work closely with their Engineering, Platform, Infrastructure and Support teams, as well as external stakeholders. A starting salary of around £50,000 plus excellent benefits and a structured career path are on offer for the right candidate.
Cyber Security Analyst (Contract) Location: Cheltenham (Ideally 1 day per week onsite) Contract: 6 Months Rate: £300 per day (Inside IR35) The Opportunity Our client, a leading organisation, is looking for an experienced Cyber Security Analyst to join a high-profile programme on an initial six-month contract. This role is heavily focused on technical application security assessments , supporting a major project by reviewing a large volume of applications and ensuring they meet security standards before deployment. Whilst there is some exposure to Cyber Incident Response activities, this is very much a hands-on security assessment role where you'll be expected to work independently and manage a consistent technical workload. What you'll be doing Assess approximately 300 applications from a technical security perspective. Build, configure and manage virtual machines within VMware to support application testing. Execute security scans against executables and installation packages. Identify vulnerabilities and provide clear remediation recommendations. Use vulnerability management tools such as Qualys (or similar) to assess security risks. Support ongoing cybersecurity project delivery within a high-profile programme. Assist with Cyber Incident Response activities where required, including security monitoring and investigation. What we're looking for We're looking for someone who can hit the ground running with experience in: VMware virtual machine creation and management. Application and executable security testing. Vulnerability assessment and remediation. Qualys or comparable vulnerability management tooling. Working independently with minimal supervision. Strong technical judgement and attention to detail. Experience within cybersecurity, infrastructure or security operations environments. Desirable experience includes: Microsoft Defender or Microsoft Sentinel. SOC or CIRT environments. Incident response or security monitoring. PowerShell or Python scripting. Knowledge of MITRE ATT&CK or security frameworks. Why apply? Immediate start on a high-profile security programme. Flexible hybrid working. Long-term project with meaningful technical work. Opportunity to support both project delivery and incident response. £300 per day (Inside IR35). If you're an experienced Cyber Security professional with strong vulnerability assessment experience and are available for your next contract, we'd love to hear from you.
Jul 03, 2026
Contractor
Cyber Security Analyst (Contract) Location: Cheltenham (Ideally 1 day per week onsite) Contract: 6 Months Rate: £300 per day (Inside IR35) The Opportunity Our client, a leading organisation, is looking for an experienced Cyber Security Analyst to join a high-profile programme on an initial six-month contract. This role is heavily focused on technical application security assessments , supporting a major project by reviewing a large volume of applications and ensuring they meet security standards before deployment. Whilst there is some exposure to Cyber Incident Response activities, this is very much a hands-on security assessment role where you'll be expected to work independently and manage a consistent technical workload. What you'll be doing Assess approximately 300 applications from a technical security perspective. Build, configure and manage virtual machines within VMware to support application testing. Execute security scans against executables and installation packages. Identify vulnerabilities and provide clear remediation recommendations. Use vulnerability management tools such as Qualys (or similar) to assess security risks. Support ongoing cybersecurity project delivery within a high-profile programme. Assist with Cyber Incident Response activities where required, including security monitoring and investigation. What we're looking for We're looking for someone who can hit the ground running with experience in: VMware virtual machine creation and management. Application and executable security testing. Vulnerability assessment and remediation. Qualys or comparable vulnerability management tooling. Working independently with minimal supervision. Strong technical judgement and attention to detail. Experience within cybersecurity, infrastructure or security operations environments. Desirable experience includes: Microsoft Defender or Microsoft Sentinel. SOC or CIRT environments. Incident response or security monitoring. PowerShell or Python scripting. Knowledge of MITRE ATT&CK or security frameworks. Why apply? Immediate start on a high-profile security programme. Flexible hybrid working. Long-term project with meaningful technical work. Opportunity to support both project delivery and incident response. £300 per day (Inside IR35). If you're an experienced Cyber Security professional with strong vulnerability assessment experience and are available for your next contract, we'd love to hear from you.
We re Hiring: Senior Cyber Security Analyst Corsham I m currently looking for a Senior Cyber Security Analyst to join our SOC team at Computer Network Defence Ltd (CND). This is a key hire within our MSSP Security Operations Centre, offering the opportunity to take a lead role in incident analysis, client engagement, and mentoring junior analysts, while shaping how the SOC continues to evolve. The Role As a Senior Cyber Security Analyst, you will support the SOC Team Lead and play a central role in monitoring, triaging, and investigating security events across a range of client environments. You ll be working across SIEM platforms, vulnerability management tools, threat intelligence sources, and network telemetry to deliver effective detection and response. You will also take on client-facing responsibilities, presenting findings, trends, and insights, as well as contributing to reporting and continuous improvement within the SOC. Key Responsibilities Monitor, triage and investigate security alerts across multiple platforms Conduct in-depth incident analysis and support ongoing client investigations Act as deputy to the SOC Team Lead when required Review and assess escalated Tier 2 alerts for urgency and impact Deliver weekly and monthly reporting to clients and stakeholders Communicate security findings and trends directly to clients Support vulnerability management analysis and remediation efforts Lead false-positive reduction and SIEM tuning activities Mentor and support development of Tier 1 and junior analysts Contribute to SOC process improvement and operational efficiency Participate in incident response activities as part of the wider team Lead internal SOC initiatives and projects where required Create and deliver presentations for clients and internal teams What We re Looking For Strong experience within a SOC or cyber security operations environment Proven ability to investigate and analyse complex security incidents Experience with SIEM platforms, threat intelligence, and security tooling Strong stakeholder and client communication skills Ability to mentor and develop junior team members Proactive approach to problem-solving and continuous improvement Good understanding of current cyber threats, tactics and trends Package & Details Location: Isle of Man (relocation package)/Corsham Hours: 37.5 hours per week, plus on-call rota Working pattern: Monday to Friday, 09 00 (early Friday finish at 16:00, workload permitting) Clearance: SC Cleared This is a great opportunity for someone looking to step into a more senior, visible role within a growing SOC, with real influence over both technical delivery and team development.
Jul 02, 2026
Full time
We re Hiring: Senior Cyber Security Analyst Corsham I m currently looking for a Senior Cyber Security Analyst to join our SOC team at Computer Network Defence Ltd (CND). This is a key hire within our MSSP Security Operations Centre, offering the opportunity to take a lead role in incident analysis, client engagement, and mentoring junior analysts, while shaping how the SOC continues to evolve. The Role As a Senior Cyber Security Analyst, you will support the SOC Team Lead and play a central role in monitoring, triaging, and investigating security events across a range of client environments. You ll be working across SIEM platforms, vulnerability management tools, threat intelligence sources, and network telemetry to deliver effective detection and response. You will also take on client-facing responsibilities, presenting findings, trends, and insights, as well as contributing to reporting and continuous improvement within the SOC. Key Responsibilities Monitor, triage and investigate security alerts across multiple platforms Conduct in-depth incident analysis and support ongoing client investigations Act as deputy to the SOC Team Lead when required Review and assess escalated Tier 2 alerts for urgency and impact Deliver weekly and monthly reporting to clients and stakeholders Communicate security findings and trends directly to clients Support vulnerability management analysis and remediation efforts Lead false-positive reduction and SIEM tuning activities Mentor and support development of Tier 1 and junior analysts Contribute to SOC process improvement and operational efficiency Participate in incident response activities as part of the wider team Lead internal SOC initiatives and projects where required Create and deliver presentations for clients and internal teams What We re Looking For Strong experience within a SOC or cyber security operations environment Proven ability to investigate and analyse complex security incidents Experience with SIEM platforms, threat intelligence, and security tooling Strong stakeholder and client communication skills Ability to mentor and develop junior team members Proactive approach to problem-solving and continuous improvement Good understanding of current cyber threats, tactics and trends Package & Details Location: Isle of Man (relocation package)/Corsham Hours: 37.5 hours per week, plus on-call rota Working pattern: Monday to Friday, 09 00 (early Friday finish at 16:00, workload permitting) Clearance: SC Cleared This is a great opportunity for someone looking to step into a more senior, visible role within a growing SOC, with real influence over both technical delivery and team development.
Summer-Browning Associates
East Kilbride, Lanarkshire
Summer-Browning Associates is supporting our client in the Central Government who is seeking a SECURITY OPERATIONS CENTER (SOC) ANALYST for an initial 12-month assignment, with the possibility of extension. Location: Hybrid working - 2 days per week onsite at East Kilbride The ideal candidates will hold active SC or DV clearance and have a proven background in Cyber Security, with the following skills and experience: Experience in SOC operations, incident response, and forensic analysis. Proficiency in Security Information and Event Management (SIEM), including tools such as Splunk, Defender, and Tenable Threat Modelling System solutions, as well as with IDS/IPS and vulnerability scanners. Ability to perform triage of security events to determine their scope, priority, and impact, while making recommendations for efficient remediation. Experience in network security principles, firewalls, and access control mechanisms. Preferred Qualifications: - Industry certifications such as CompTIA Security+, CISSP, CISM, CEH, or GIAC are highly desirable
Jul 02, 2026
Contractor
Summer-Browning Associates is supporting our client in the Central Government who is seeking a SECURITY OPERATIONS CENTER (SOC) ANALYST for an initial 12-month assignment, with the possibility of extension. Location: Hybrid working - 2 days per week onsite at East Kilbride The ideal candidates will hold active SC or DV clearance and have a proven background in Cyber Security, with the following skills and experience: Experience in SOC operations, incident response, and forensic analysis. Proficiency in Security Information and Event Management (SIEM), including tools such as Splunk, Defender, and Tenable Threat Modelling System solutions, as well as with IDS/IPS and vulnerability scanners. Ability to perform triage of security events to determine their scope, priority, and impact, while making recommendations for efficient remediation. Experience in network security principles, firewalls, and access control mechanisms. Preferred Qualifications: - Industry certifications such as CompTIA Security+, CISSP, CISM, CEH, or GIAC are highly desirable
Senior Cyber Security Analyst Permanent - Full time£55,000 plus bonusBolton - 3 days per week onsite About the Role We are working with a leading global organization during a pivotal moment who seeking a Senior Cyber Security Analyst to help strengthen its security posture and safeguard critical systems. This is an excellent opportunity for someone passionate about incident response and proactive threat management within a dynamic, fast-paced environment.The ideal candidate will have a positive go-getter attitude, and will have experience of incident response, using MS security tools and ideally an understanding of Tanium. Key Responsibilities Working with the Head of Cyber to mature the incident response capability Using your understanding of the contemporary threat environment to assist with your vulnerability investigations and response Lead remediation efforts for identified vulnerabilities in collaboration with technology teams. Respond to incidents alongside the Head of Cyber Work with the existing MSSP across incident response and proactive monitoring and detection Maintain and optimise Microsoft Sentinel SIEM, XDR/MDR/EDR solutions, and supporting tools. Track deployment and health of all security products across the business. Stay ahead of emerging threats and evolving technologies. What We're Looking For Experience working in a cyber role in an enterprise environment Experience with the Microsoft Defender suite and Tanium would be ideal Solid understanding of cybersecurity principles and incident response processes. Experience exposure to red-teaming would be great but not crucial Experience of use case development An understanding of security best practice frameworks (NIST, ISO27001 etc) Good understanding of threat assessment A technical IT background Strong problem-solving skills and go-getter attitude Excellent communication skills and ability to work independently in a fast-paced setting. What's on Offer £45,000 - £55,000 plus bonus 25 days annual leave, plus moveable bank holidays and up to 5 days buy and sell Pension and company specific benefits Flexible and hybrid working options Career development opportunities and access to accredited qualifications. What you need to do now If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.If this job isn't quite right for you but you are looking for a new position, please contact us for a confidential discussion on your career. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk
Jul 02, 2026
Full time
Senior Cyber Security Analyst Permanent - Full time£55,000 plus bonusBolton - 3 days per week onsite About the Role We are working with a leading global organization during a pivotal moment who seeking a Senior Cyber Security Analyst to help strengthen its security posture and safeguard critical systems. This is an excellent opportunity for someone passionate about incident response and proactive threat management within a dynamic, fast-paced environment.The ideal candidate will have a positive go-getter attitude, and will have experience of incident response, using MS security tools and ideally an understanding of Tanium. Key Responsibilities Working with the Head of Cyber to mature the incident response capability Using your understanding of the contemporary threat environment to assist with your vulnerability investigations and response Lead remediation efforts for identified vulnerabilities in collaboration with technology teams. Respond to incidents alongside the Head of Cyber Work with the existing MSSP across incident response and proactive monitoring and detection Maintain and optimise Microsoft Sentinel SIEM, XDR/MDR/EDR solutions, and supporting tools. Track deployment and health of all security products across the business. Stay ahead of emerging threats and evolving technologies. What We're Looking For Experience working in a cyber role in an enterprise environment Experience with the Microsoft Defender suite and Tanium would be ideal Solid understanding of cybersecurity principles and incident response processes. Experience exposure to red-teaming would be great but not crucial Experience of use case development An understanding of security best practice frameworks (NIST, ISO27001 etc) Good understanding of threat assessment A technical IT background Strong problem-solving skills and go-getter attitude Excellent communication skills and ability to work independently in a fast-paced setting. What's on Offer £45,000 - £55,000 plus bonus 25 days annual leave, plus moveable bank holidays and up to 5 days buy and sell Pension and company specific benefits Flexible and hybrid working options Career development opportunities and access to accredited qualifications. What you need to do now If you're interested in this role, click 'apply now' to forward an up-to-date copy of your CV, or call us now.If this job isn't quite right for you but you are looking for a new position, please contact us for a confidential discussion on your career. Hays Specialist Recruitment Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept the T&C's, Privacy Policy and Disclaimers which can be found at hays.co.uk
Proactive Appointments
West Drayton, Nottinghamshire
IT Security Analyst Hybrid Are you an experienced Cyber Security professional looking for your next challenge? Our client is seeking a talented Cyber Security Engineer to join their Global IT Security Team, playing a key role in protecting business-critical systems and driving the continual evolution of their cyber security strategy. This is an exciting opportunity to work across a broad range of security technologies, contribute to major security initiatives, and support the ongoing management of an ISO27001-certified Information Security Management System (ISMS). You'll collaborate with internal stakeholders and external partners while helping shape future security programmes within a global organisation. The Role Reporting to the Senior Manager of IT Infrastructure & Security, you will be responsible for protecting the organisation's information assets and strengthening its cyber security posture. Your responsibilities will include: Supporting the ongoing administration and continual improvement of the ISO27001-certified Information Security Management System (ISMS). Working alongside IT Security Management and external consultants to maintain compliance with security standards. Reviewing and enhancing information security policies, procedures and controls. Responding to potential security incidents in collaboration with the wider IT team. Assisting with incident response, investigation, containment and recovery activities. Developing and improving cyber security monitoring, detection and alerting capabilities. Monitoring internal and external threat landscapes and reporting emerging risks. Researching and recommending new security technologies, trends and best practices. Identifying meaningful security KPIs and supporting internal compliance and assurance reviews. You'll ideally have: 5+ years' experience within IT and Network Security operations. CISSP certification (preferred). Hands-on experience with a broad range of security technologies, tools and controls. Good understanding of ISO27001 and/or other recognised Information Security frameworks. Experience in risk assessment, threat detection, vulnerability management and incident response. Strong analytical and problem-solving skills with the ability to perform under pressure. Excellent communication skills with the ability to explain technical concepts clearly to both technical and non-technical stakeholders. A collaborative mindset and passion for continuous improvement. IT Security Analyst Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted. Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website
Jul 02, 2026
Full time
IT Security Analyst Hybrid Are you an experienced Cyber Security professional looking for your next challenge? Our client is seeking a talented Cyber Security Engineer to join their Global IT Security Team, playing a key role in protecting business-critical systems and driving the continual evolution of their cyber security strategy. This is an exciting opportunity to work across a broad range of security technologies, contribute to major security initiatives, and support the ongoing management of an ISO27001-certified Information Security Management System (ISMS). You'll collaborate with internal stakeholders and external partners while helping shape future security programmes within a global organisation. The Role Reporting to the Senior Manager of IT Infrastructure & Security, you will be responsible for protecting the organisation's information assets and strengthening its cyber security posture. Your responsibilities will include: Supporting the ongoing administration and continual improvement of the ISO27001-certified Information Security Management System (ISMS). Working alongside IT Security Management and external consultants to maintain compliance with security standards. Reviewing and enhancing information security policies, procedures and controls. Responding to potential security incidents in collaboration with the wider IT team. Assisting with incident response, investigation, containment and recovery activities. Developing and improving cyber security monitoring, detection and alerting capabilities. Monitoring internal and external threat landscapes and reporting emerging risks. Researching and recommending new security technologies, trends and best practices. Identifying meaningful security KPIs and supporting internal compliance and assurance reviews. You'll ideally have: 5+ years' experience within IT and Network Security operations. CISSP certification (preferred). Hands-on experience with a broad range of security technologies, tools and controls. Good understanding of ISO27001 and/or other recognised Information Security frameworks. Experience in risk assessment, threat detection, vulnerability management and incident response. Strong analytical and problem-solving skills with the ability to perform under pressure. Excellent communication skills with the ability to explain technical concepts clearly to both technical and non-technical stakeholders. A collaborative mindset and passion for continuous improvement. IT Security Analyst Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted. Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website
Security Operations Centre (SOC) Analyst - AI Security Location: Sheffield (Hybrid - 2 days per week onsite) Contract: 6 months (Inside IR35) Day Rate: £575 Overview A leading Tier 1 financial services organisation is seeking an experienced Security Operations Centre (SOC) Analyst to join a growing AI Security function responsible for protecting the organisation's adoption of enterprise AI technologies. As organisations increasingly leverage Large Language Models (LLMs) such as Claude Code to improve software engineering and business productivity, ensuring these platforms remain secure is critical. This role will focus on monitoring, detecting, investigating, and responding to security events associated with AI-assisted development, while helping to build the next generation of AI-specific security operations capabilities. Working within the SOC, you will collaborate closely with Cyber Defence, Security Engineering, Threat Intelligence, and AI Governance teams to develop detection capabilities, improve incident response, and protect the organisation against emerging AI-related threats. Key Responsibilities Monitor, investigate, and respond to security events generated through enterprise AI platforms, including Claude Code. Monitor SIEM dashboards and alerts for AI-related security events, including unusual prompt activity, authentication anomalies, DLP alerts, and suspicious API usage. Investigate and triage security incidents, determining severity and escalating confirmed threats through established incident response processes. Develop, tune, and optimise SIEM detection rules for AI-specific attack scenarios including: Prompt injection attempts Data exfiltration Credential misuse API abuse Abnormal AI usage patterns Conduct daily security log analysis and audit reviews across AI-enabled services. Produce weekly operational metrics, dashboards, and threat reporting. Support AI-focused incident response exercises, simulations, and tabletop scenarios. Develop and maintain SOC playbooks and operational runbooks for AI security incidents. Work with Security Engineering teams to continuously improve monitoring coverage and detection capability. Contribute to the development of security controls supporting enterprise AI adoption. Essential Skills & Experience Minimum 3 years' experience within a Security Operations Centre (SOC), Cyber Defence, or Security Monitoring environment. Strong experience using enterprise SIEM platforms including: Splunk Microsoft Sentinel IBM QRadar Excellent security event investigation and threat analysis skills. Experience creating and tuning SIEM detection rules. Good understanding of the MITRE ATT&CK Framework. Experience analysing web traffic, APIs, authentication events, and application security logs. Strong understanding of security incident life cycle and SOC operations. Excellent analytical and problem-solving skills. Desirable Skills Experience securing AI or Large Language Model (LLM) environments. Understanding of AI attack techniques including: Prompt Injection Data Leakage Model Misuse Jailbreaking AI Supply Chain Risks Knowledge of Claude Code, GitHub Copilot, Microsoft Copilot, ChatGPT Enterprise, or similar AI platforms. Experience with SOAR technologies including: Splunk SOAR Palo Alto Cortex XSOAR Experience with DLP technologies and cloud security monitoring. Understanding of Secure Software Development and DevSecOps practices. Qualifications Security+, CySA+, GSEC, or equivalent cybersecurity certification. SIEM vendor certifications desirable. Cloud security certifications (AWS, Azure, GCP) advantageous. Personal Attributes Curious about emerging AI technologies and their security implications. Strong analytical mindset with excellent investigative skills. Calm and methodical during security incidents. Collaborative team player who enjoys working across Cyber, Engineering, and Technology teams. Passionate about continuous learning and improving security operations.
Jul 02, 2026
Contractor
Security Operations Centre (SOC) Analyst - AI Security Location: Sheffield (Hybrid - 2 days per week onsite) Contract: 6 months (Inside IR35) Day Rate: £575 Overview A leading Tier 1 financial services organisation is seeking an experienced Security Operations Centre (SOC) Analyst to join a growing AI Security function responsible for protecting the organisation's adoption of enterprise AI technologies. As organisations increasingly leverage Large Language Models (LLMs) such as Claude Code to improve software engineering and business productivity, ensuring these platforms remain secure is critical. This role will focus on monitoring, detecting, investigating, and responding to security events associated with AI-assisted development, while helping to build the next generation of AI-specific security operations capabilities. Working within the SOC, you will collaborate closely with Cyber Defence, Security Engineering, Threat Intelligence, and AI Governance teams to develop detection capabilities, improve incident response, and protect the organisation against emerging AI-related threats. Key Responsibilities Monitor, investigate, and respond to security events generated through enterprise AI platforms, including Claude Code. Monitor SIEM dashboards and alerts for AI-related security events, including unusual prompt activity, authentication anomalies, DLP alerts, and suspicious API usage. Investigate and triage security incidents, determining severity and escalating confirmed threats through established incident response processes. Develop, tune, and optimise SIEM detection rules for AI-specific attack scenarios including: Prompt injection attempts Data exfiltration Credential misuse API abuse Abnormal AI usage patterns Conduct daily security log analysis and audit reviews across AI-enabled services. Produce weekly operational metrics, dashboards, and threat reporting. Support AI-focused incident response exercises, simulations, and tabletop scenarios. Develop and maintain SOC playbooks and operational runbooks for AI security incidents. Work with Security Engineering teams to continuously improve monitoring coverage and detection capability. Contribute to the development of security controls supporting enterprise AI adoption. Essential Skills & Experience Minimum 3 years' experience within a Security Operations Centre (SOC), Cyber Defence, or Security Monitoring environment. Strong experience using enterprise SIEM platforms including: Splunk Microsoft Sentinel IBM QRadar Excellent security event investigation and threat analysis skills. Experience creating and tuning SIEM detection rules. Good understanding of the MITRE ATT&CK Framework. Experience analysing web traffic, APIs, authentication events, and application security logs. Strong understanding of security incident life cycle and SOC operations. Excellent analytical and problem-solving skills. Desirable Skills Experience securing AI or Large Language Model (LLM) environments. Understanding of AI attack techniques including: Prompt Injection Data Leakage Model Misuse Jailbreaking AI Supply Chain Risks Knowledge of Claude Code, GitHub Copilot, Microsoft Copilot, ChatGPT Enterprise, or similar AI platforms. Experience with SOAR technologies including: Splunk SOAR Palo Alto Cortex XSOAR Experience with DLP technologies and cloud security monitoring. Understanding of Secure Software Development and DevSecOps practices. Qualifications Security+, CySA+, GSEC, or equivalent cybersecurity certification. SIEM vendor certifications desirable. Cloud security certifications (AWS, Azure, GCP) advantageous. Personal Attributes Curious about emerging AI technologies and their security implications. Strong analytical mindset with excellent investigative skills. Calm and methodical during security incidents. Collaborative team player who enjoys working across Cyber, Engineering, and Technology teams. Passionate about continuous learning and improving security operations.
Job Title: External Attack Surface Management Analyst Job Location: Preston or Frimley - Hybrid-2 days a month onsite. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role. Salary: Circa £45,000 depending on skills and experience Who we are: Join BAE Systems and you'll be part of something bigger. As a valued member of our global colleague network, you'll bring your unique skills and perspectives to help pioneer progress and protect what matters most. You'll be trusted to play your part in delivering the advanced, technology-led defence, aerospace and security solutions of tomorrow - shaping a safer future, for all of us. Role Description: Working within Cyber Operations, you will help safeguard BAE Systems against evolving cyber threats by supporting and enhancing the External Attack Surface Management (EASM) capability across people, process, and technology. You will contribute to an intelligence-led approach to cyber operations, ensuring external assets are identified, assessed, and continuously tested. The role supports detection assurance by identifying shadow IT and unmanaged exposures, providing confidence to leadership that security controls and monitoring capabilities are effective and aligned to organisational security standards. Core Duties: Proactively discover, track, and maintain visibility of external attack surface assets, including unknown and shadow IT exposures Investigate and validate externally visible exposures, assessing real-world risk, attacker relevance, and exploitability Monitor changes in external exposure, identifying new assets, regressions, and emerging risks across the estate Collaborate with Threat Intelligence and Cyber Operations to align exposure findings with attacker activity and remediation priorities Produce clear, actionable reporting on external exposures, trends, and security posture to support risk reduction and decision -making Essential Skills: Good understanding of external reconnaissance techniques, OSINT, and how attackers identify and profile internet-facing assets Proven experience in attack surface discovery, asset enumeration, and identifying unknown or shadow IT exposures Good investigative mindset with the ability to analyse incomplete or ambiguous external data and determine genuine security risk Ability to assess and distinguish between observed external artefacts, misconfigurations, and true exploitable exposures from an attacker's perspective Experience working with internet-facing protocols and data sources (e.g. DNS, HTTP, TLS, certificate transparency, scanning datasets) to identify patterns, relationships, and anomalies The Cyber Operations team: Cyber Operations is responsible for protecting BAE Systems from Cyber Attack by various threat actors. Not only do we protect BAE Systems and its employees, indirectly we protect those who protect us - who serve in our military and rely on the products and services we create across Threat Intelligence, Detection, Incident Response and now Active Defence we work to evolve cyber operations as a world class capability. Why BAE Systems? Here you'll build a career with purpose and limitless possibilities. With lifelong learning and meaningful work - this is a place where you can grow your career with confidence and be empowered to be your best. You'll be recognised for your contribution and enjoy rewards tailored to what's most important to you and your family - support for your financial and personal wellbeing, as well as a balanced lifestyle. In an environment embracing sustainable ways of working and with a strong sense of shared purpose, our supportive culture is a place you can feel you belong and proud of the difference you make. A place where everyone can thrive: We're committed to building an inclusive workplace where everyone feels valued and supported. We know that a diversity of backgrounds, perspectives and experiences strengthens our teams and is vital to the work we do. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role , to allow for meaningful security vetting checks. Closing Date: 14th July 2026 We reserve the right to close this vacancy early if we receive sufficient applications for the role . Therefore, if you are interested, please submit your application as early as possible.
Jul 02, 2026
Full time
Job Title: External Attack Surface Management Analyst Job Location: Preston or Frimley - Hybrid-2 days a month onsite. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role. Salary: Circa £45,000 depending on skills and experience Who we are: Join BAE Systems and you'll be part of something bigger. As a valued member of our global colleague network, you'll bring your unique skills and perspectives to help pioneer progress and protect what matters most. You'll be trusted to play your part in delivering the advanced, technology-led defence, aerospace and security solutions of tomorrow - shaping a safer future, for all of us. Role Description: Working within Cyber Operations, you will help safeguard BAE Systems against evolving cyber threats by supporting and enhancing the External Attack Surface Management (EASM) capability across people, process, and technology. You will contribute to an intelligence-led approach to cyber operations, ensuring external assets are identified, assessed, and continuously tested. The role supports detection assurance by identifying shadow IT and unmanaged exposures, providing confidence to leadership that security controls and monitoring capabilities are effective and aligned to organisational security standards. Core Duties: Proactively discover, track, and maintain visibility of external attack surface assets, including unknown and shadow IT exposures Investigate and validate externally visible exposures, assessing real-world risk, attacker relevance, and exploitability Monitor changes in external exposure, identifying new assets, regressions, and emerging risks across the estate Collaborate with Threat Intelligence and Cyber Operations to align exposure findings with attacker activity and remediation priorities Produce clear, actionable reporting on external exposures, trends, and security posture to support risk reduction and decision -making Essential Skills: Good understanding of external reconnaissance techniques, OSINT, and how attackers identify and profile internet-facing assets Proven experience in attack surface discovery, asset enumeration, and identifying unknown or shadow IT exposures Good investigative mindset with the ability to analyse incomplete or ambiguous external data and determine genuine security risk Ability to assess and distinguish between observed external artefacts, misconfigurations, and true exploitable exposures from an attacker's perspective Experience working with internet-facing protocols and data sources (e.g. DNS, HTTP, TLS, certificate transparency, scanning datasets) to identify patterns, relationships, and anomalies The Cyber Operations team: Cyber Operations is responsible for protecting BAE Systems from Cyber Attack by various threat actors. Not only do we protect BAE Systems and its employees, indirectly we protect those who protect us - who serve in our military and rely on the products and services we create across Threat Intelligence, Detection, Incident Response and now Active Defence we work to evolve cyber operations as a world class capability. Why BAE Systems? Here you'll build a career with purpose and limitless possibilities. With lifelong learning and meaningful work - this is a place where you can grow your career with confidence and be empowered to be your best. You'll be recognised for your contribution and enjoy rewards tailored to what's most important to you and your family - support for your financial and personal wellbeing, as well as a balanced lifestyle. In an environment embracing sustainable ways of working and with a strong sense of shared purpose, our supportive culture is a place you can feel you belong and proud of the difference you make. A place where everyone can thrive: We're committed to building an inclusive workplace where everyone feels valued and supported. We know that a diversity of backgrounds, perspectives and experiences strengthens our teams and is vital to the work we do. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role , to allow for meaningful security vetting checks. Closing Date: 14th July 2026 We reserve the right to close this vacancy early if we receive sufficient applications for the role . Therefore, if you are interested, please submit your application as early as possible.
Job Title: External Attack Surface Management Analyst Job Location: Preston or Frimley - Hybrid-2 days a month onsite. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role. Salary: Circa £45,000 depending on skills and experience Who we are: Join BAE Systems and you'll be part of something bigger. As a valued member of our global colleague network, you'll bring your unique skills and perspectives to help pioneer progress and protect what matters most. You'll be trusted to play your part in delivering the advanced, technology-led defence, aerospace and security solutions of tomorrow - shaping a safer future, for all of us. Role Description: Working within Cyber Operations, you will help safeguard BAE Systems against evolving cyber threats by supporting and enhancing the External Attack Surface Management (EASM) capability across people, process, and technology. You will contribute to an intelligence-led approach to cyber operations, ensuring external assets are identified, assessed, and continuously tested. The role supports detection assurance by identifying shadow IT and unmanaged exposures, providing confidence to leadership that security controls and monitoring capabilities are effective and aligned to organisational security standards. Core Duties: Proactively discover, track, and maintain visibility of external attack surface assets, including unknown and shadow IT exposures Investigate and validate externally visible exposures, assessing real-world risk, attacker relevance, and exploitability Monitor changes in external exposure, identifying new assets, regressions, and emerging risks across the estate Collaborate with Threat Intelligence and Cyber Operations to align exposure findings with attacker activity and remediation priorities Produce clear, actionable reporting on external exposures, trends, and security posture to support risk reduction and decision -making Essential Skills: Good understanding of external reconnaissance techniques, OSINT, and how attackers identify and profile internet-facing assets Proven experience in attack surface discovery, asset enumeration, and identifying unknown or shadow IT exposures Good investigative mindset with the ability to analyse incomplete or ambiguous external data and determine genuine security risk Ability to assess and distinguish between observed external artefacts, misconfigurations, and true exploitable exposures from an attacker's perspective Experience working with internet-facing protocols and data sources (e.g. DNS, HTTP, TLS, certificate transparency, scanning datasets) to identify patterns, relationships, and anomalies The Cyber Operations team: Cyber Operations is responsible for protecting BAE Systems from Cyber Attack by various threat actors. Not only do we protect BAE Systems and its employees, indirectly we protect those who protect us - who serve in our military and rely on the products and services we create across Threat Intelligence, Detection, Incident Response and now Active Defence we work to evolve cyber operations as a world class capability. Why BAE Systems? Here you'll build a career with purpose and limitless possibilities. With lifelong learning and meaningful work - this is a place where you can grow your career with confidence and be empowered to be your best. You'll be recognised for your contribution and enjoy rewards tailored to what's most important to you and your family - support for your financial and personal wellbeing, as well as a balanced lifestyle. In an environment embracing sustainable ways of working and with a strong sense of shared purpose, our supportive culture is a place you can feel you belong and proud of the difference you make. A place where everyone can thrive: We're committed to building an inclusive workplace where everyone feels valued and supported. We know that a diversity of backgrounds, perspectives and experiences strengthens our teams and is vital to the work we do. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role , to allow for meaningful security vetting checks. Closing Date: 14th July 2026 We reserve the right to close this vacancy early if we receive sufficient applications for the role . Therefore, if you are interested, please submit your application as early as possible.
Jul 02, 2026
Full time
Job Title: External Attack Surface Management Analyst Job Location: Preston or Frimley - Hybrid-2 days a month onsite. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role. Salary: Circa £45,000 depending on skills and experience Who we are: Join BAE Systems and you'll be part of something bigger. As a valued member of our global colleague network, you'll bring your unique skills and perspectives to help pioneer progress and protect what matters most. You'll be trusted to play your part in delivering the advanced, technology-led defence, aerospace and security solutions of tomorrow - shaping a safer future, for all of us. Role Description: Working within Cyber Operations, you will help safeguard BAE Systems against evolving cyber threats by supporting and enhancing the External Attack Surface Management (EASM) capability across people, process, and technology. You will contribute to an intelligence-led approach to cyber operations, ensuring external assets are identified, assessed, and continuously tested. The role supports detection assurance by identifying shadow IT and unmanaged exposures, providing confidence to leadership that security controls and monitoring capabilities are effective and aligned to organisational security standards. Core Duties: Proactively discover, track, and maintain visibility of external attack surface assets, including unknown and shadow IT exposures Investigate and validate externally visible exposures, assessing real-world risk, attacker relevance, and exploitability Monitor changes in external exposure, identifying new assets, regressions, and emerging risks across the estate Collaborate with Threat Intelligence and Cyber Operations to align exposure findings with attacker activity and remediation priorities Produce clear, actionable reporting on external exposures, trends, and security posture to support risk reduction and decision -making Essential Skills: Good understanding of external reconnaissance techniques, OSINT, and how attackers identify and profile internet-facing assets Proven experience in attack surface discovery, asset enumeration, and identifying unknown or shadow IT exposures Good investigative mindset with the ability to analyse incomplete or ambiguous external data and determine genuine security risk Ability to assess and distinguish between observed external artefacts, misconfigurations, and true exploitable exposures from an attacker's perspective Experience working with internet-facing protocols and data sources (e.g. DNS, HTTP, TLS, certificate transparency, scanning datasets) to identify patterns, relationships, and anomalies The Cyber Operations team: Cyber Operations is responsible for protecting BAE Systems from Cyber Attack by various threat actors. Not only do we protect BAE Systems and its employees, indirectly we protect those who protect us - who serve in our military and rely on the products and services we create across Threat Intelligence, Detection, Incident Response and now Active Defence we work to evolve cyber operations as a world class capability. Why BAE Systems? Here you'll build a career with purpose and limitless possibilities. With lifelong learning and meaningful work - this is a place where you can grow your career with confidence and be empowered to be your best. You'll be recognised for your contribution and enjoy rewards tailored to what's most important to you and your family - support for your financial and personal wellbeing, as well as a balanced lifestyle. In an environment embracing sustainable ways of working and with a strong sense of shared purpose, our supportive culture is a place you can feel you belong and proud of the difference you make. A place where everyone can thrive: We're committed to building an inclusive workplace where everyone feels valued and supported. We know that a diversity of backgrounds, perspectives and experiences strengthens our teams and is vital to the work we do. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role , to allow for meaningful security vetting checks. Closing Date: 14th July 2026 We reserve the right to close this vacancy early if we receive sufficient applications for the role . Therefore, if you are interested, please submit your application as early as possible.
