12 jobs found

Principal Identity & Access Lead Milton Keynes (2 days on site) £75 - £85k + 15% bonus We are working with an established organisation who are embarking on a significant digital transformation programme and are seeking a Principal Identity & Access Lead to shape and deliver their enterprise Identity and Access Management (IAM) strategy. The role will play a pivotal role in protecting critical systems, data, and business services by leading the evolution of the organisation's IAM capability. Working closely with the CISO and senior stakeholders, you will design, implement, and continuously enhance IAM and Privileged Access Management (PAM) solutions that strengthen resilience, support regulatory compliance, and enable secure business transformation. Key responsibilities include: Own and drive the enterprise IAM vision, roadmap and strategy, ensuring identity security capabilities support organisational goals and regulatory expectations Lead the selection, deployment, integration and ongoing optimisation of IAM and PAM solutions Champion identity governance and access management best practices across the organisation, influencing stakeholders at all levels Lead the design and operation of robust IAM and PAM controls that protect critical systems, data and business services Drive a culture of least privilege, accountability and access governance through effective control frameworks and stakeholder engagement Deliver insightful reporting and executive-level briefings on IAM risk, compliance, maturity and control effectiveness Lead a team of IAM Analysts Experience with IAM and PAM tools such as SailPoint, CyberArk, Delinea or similar is essential. This role can be based in central London or Milton Keynes, 2 days per week onsite. If London, occasional travel to Milton Keynes will be required, 2 days per month. If you're passionate about building secure, scalable identity services and enjoy working across technology, architecture and business teams, please apply now.

Principal Identity & Access Lead London or Milton Keynes (2 days on site) £75 - £85k + 15% bonus We are working with an established organisation who are embarking on a significant digital transformation programme and are seeking a Principal Identity & Access Lead to shape and deliver their enterprise Identity and Access Management (IAM) strategy. The role will play a pivotal role in protecting critical systems, data, and business services by leading the evolution of the organisation's IAM capability. Working closely with the CISO and senior stakeholders, you will design, implement, and continuously enhance IAM and Privileged Access Management (PAM) solutions that strengthen resilience, support regulatory compliance, and enable secure business transformation. Key responsibilities include: Own and drive the enterprise IAM vision, roadmap and strategy, ensuring identity security capabilities support organisational goals and regulatory expectations Lead the selection, deployment, integration and ongoing optimisation of IAM and PAM solutions Champion identity governance and access management best practices across the organisation, influencing stakeholders at all levels Lead the design and operation of robust IAM and PAM controls that protect critical systems, data and business services Drive a culture of least privilege, accountability and access governance through effective control frameworks and stakeholder engagement Deliver insightful reporting and executive-level briefings on IAM risk, compliance, maturity and control effectiveness Lead a team of IAM Analysts Experience with IAM and PAM tools such as SailPoint, CyberArk, Delinea or similar is essential. If you're passionate about building secure, scalable identity services and enjoy working across technology, architecture and business teams, please apply now.

Principal Identity & Access Lead London or Milton Keynes (2 days on site) 75 - 85k + 15% bonus We are working with an established organisation who are embarking on a significant digital transformation programme and are seeking a Principal Identity & Access Lead to shape and deliver their enterprise Identity and Access Management (IAM) strategy. The role will play a pivotal role in protecting critical systems, data, and business services by leading the evolution of the organisation's IAM capability. Working closely with the CISO and senior stakeholders, you will design, implement, and continuously enhance IAM and Privileged Access Management (PAM) solutions that strengthen resilience, support regulatory compliance, and enable secure business transformation. Key responsibilities include: Own and drive the enterprise IAM vision, roadmap and strategy, ensuring identity security capabilities support organisational goals and regulatory expectations Lead the selection, deployment, integration and ongoing optimisation of IAM and PAM solutions Champion identity governance and access management best practices across the organisation, influencing stakeholders at all levels Lead the design and operation of robust IAM and PAM controls that protect critical systems, data and business services Drive a culture of least privilege, accountability and access governance through effective control frameworks and stakeholder engagement Deliver insightful reporting and executive-level briefings on IAM risk, compliance, maturity and control effectiveness Lead a team of IAM Analysts Experience with IAM and PAM tools such as SailPoint, CyberArk, Delinea or similar is essential. If you're passionate about building secure, scalable identity services and enjoy working across technology, architecture and business teams, please apply now.

Summary: As our Solutions Analyst/Developer at South East Water, you will design, build, deploy, and constantly improve our Oracle-based applications and databases. You'll work right at the intersection of our hybrid setup, bridging our on-premise data centre with our modern Google Cloud Platform (GCP) environment. In this role, you'll write highly efficient database code and use Oracle APEX to design clean web interfaces, keeping our data flowing smoothly between both worlds. We are a forward-thinking technology team bridging the reliability of robust, secure on-premise infrastructure with the dynamic scalability of the cloud. Our core systems are built on Oracle and Google Cloud Platform (GCP). We are seeking a highly skilled Developer to design, develop, and modernise our suite of business-critical web applications. If you are a database-centric developer who loves building highly responsive low-code applications while navigating the exciting complexities of a hybrid on-premise/GCP multi-data-centre architecture, we want to hear from you! Main Responsibilities Oracle APEX & Web Development Design, develop, and maintain secure, responsive, and user-friendly Oracle APEX applications. Implement custom UI/UX requirements using HTML, CSS, JavaScript, and custom APEX plugins. Configure APEX authentication and authorization schemes integrated with enterprise Identity Providers (IdP). Build and manage interactive grids, charts, and highly customized reports. Database Engineering & PL/SQL Write clean, maintainable, and highly optimized PL/SQL code (packages, procedures, functions, triggers, and types). Architect and design relational data models, ensuring data integrity, normalization, and performance efficiency. Perform query tuning, analyse execution plans, and optimize indexes to ensure low latency across massive datasets. Build robust RESTful APIs using Oracle REST Data Services (ORDS) to expose database endpoints. Hybrid Infrastructure & Cloud Integration Collaborate with Cloud Engineers and DBAs to support database infrastructure running on-premise and on Google Cloud Platform (GCP). Support data replication, ETL pipelines, and secure networking between on-premise Oracle databases and GCP-hosted resources (e.g., Cloud SQL, Compute Engine, BigQuery). Develop routines for cross-data-center data synchronization and integrity validation. Participate in database migration plans, backup strategies, and Disaster Recovery (DR) drills involving both on-premise and GCP topologies. You'll need: Skills / Qualifications / Experience Oracle Database: Extensive knowledge of Oracle Database 19c / 23c database objects, memory architecture, and optimization. PL/SQL Mastery: Expert-level writing of complex PL/SQL block structures, analytical functions, bulk collections, and exception handling. Oracle APEX: Strong experience with modern APEX version 24 and newer, custom themes, templates, and JavaScript integration. API Development: Proficient in configuring and developing ORDS REST APIs. Web Basics: Solid foundational understanding of HTML5, CSS3, JavaScript, and JSON formatting. Cloud Infrastructure: Familiarity with GCP core services (GCE, Cloud SQL for MySQL, Cloud Storage and IAM). CI/CD & DevOps: Experience with Git version control and CI/CD pipelines (such as GitLab CI, or Google Cloud Build). Alternative Databases: Experience with SQL Server & Google BigQuery is a strong plus. Degree in Computer Science, Information Technology, or a closely related quantitative field. Demonstrable professional experience in Oracle PL/SQL development. Demonstrable experience specifically developing and deploying applications with Oracle APEX. Grow a career with a meaningful purpose. We know the communities we serve are diverse. We recognise creativity comes from diversity not similarity. That's why we are enthusiastic about creating inclusion across age, race, gender, ethnicity, religion and identity. You will experience our dedication to equal opportunities and fair treatment for all: through your recruitment, employment and career progression with South East Water. Benefits package: Excellent Stakeholder pension scheme, up to 10% employer contribution. 5 weeks holiday plus bank holidays per annum, increasing to 6 weeks with length of service. Flexible annual leave policy to buy or sell holiday leave. Paid volunteering days. Cycle to work scheme. Health cash plan. Life assurance. Wellbeing related benefits. What can you expect from your recruitment? To apply for this position, please submit your CV on our career's website. It is necessary for you to have the legal right to work in the UK when you begin employment with South East Water. Additionally, as part of the employment offer, you will need to pass background, identity, and employment referencing checks. If this sounds like the opportunity you've been looking for, apply now! South East Water kindly asks that recruitment agencies refrain from submitting CVs to our employees or associates without explicit invitation from our HR Resourcing team. CVs sent on a speculative basis will not be acknowledged and will not assume any responsibility for fees or commissions in the event that we hire a candidate who applied directly or subsequently introduced by an instructed agency. Compensation package: £40,000 - £55,000 p.a. (dependent on experience)

IAM Consultant Microsoft Identity & Access Management Entra ID Security Salary: £70,000 + Benefits Location: Fully Remote (UK) Type: Permanent, Full-Time Are you an experienced Identity & Access Management professional with a passion for Microsoft technologies? Do you have proven experience designing and delivering Microsoft Identity solutions across Entra ID, Active Directory and Hybrid Identity environments? Are you confident engaging with stakeholders, leading technical workshops and delivering secure, scalable identity solutions that support modern security strategies? If so, this could be an excellent opportunity to join a growing Microsoft-focused consultancy delivering strategic Identity and Security projects across a diverse client portfolio. The Opportunity We are seeking an experienced IAM Consultant to support the design, implementation and optimisation of Identity and Access Management solutions across the Microsoft technology stack. This is a client-facing consultancy role where you will act as a trusted advisor, helping organisations modernise their identity platforms, strengthen security controls and implement best-practice identity governance. Working alongside Architects, Project Managers, Security Consultants and Technical Delivery teams, you will deliver innovative and secure identity solutions while supporting clients throughout their digital transformation journeys. What You Will Be Doing You will be involved in the full project lifecycle, including discovery, design, implementation, migration and handover activities. Key responsibilities include: Delivering Microsoft Identity and Access Management solutions across enterprise environments Leading discovery workshops and technical design sessions Assessing existing identity architectures and security controls Designing and implementing Microsoft Entra ID solutions Supporting Active Directory modernisation and Hybrid Identity deployments Implementing Conditional Access policies and Zero Trust principles Delivering Multi-Factor Authentication (MFA) and Passwordless Authentication solutions Configuring and supporting Single Sign-On (SSO) integrations Designing Joiner, Mover and Leaver (JML) processes Implementing Role-Based Access Control (RBAC) models Supporting Identity Governance and Administration (IGA) initiatives Delivering Privileged Identity Management (PIM) and Privileged Access Management (PAM) solutions Developing High-Level and Low-Level Design documentation Supporting migration, testing, cutover and operational handover activities Providing technical guidance and best-practice recommendations to clients Working collaboratively with project teams to deliver successful outcomes What We Are Looking For We are seeking a consultant who can combine strong Microsoft Identity expertise with excellent communication and stakeholder management skills. You should be able to demonstrate: Proven experience delivering Microsoft Identity solutions Strong experience with Microsoft Entra ID (Azure AD) Excellent knowledge of Active Directory and Hybrid Identity Experience implementing Conditional Access and MFA solutions Strong understanding of authentication and access management principles Experience designing and implementing RBAC models Knowledge of Identity Governance and Privileged Access Management Experience producing technical designs and project documentation Strong troubleshooting and problem-solving skills Excellent client-facing and stakeholder engagement experience Ability to work independently within a remote consultancy environment Technical Skills You should have experience across several of the following technologies and disciplines: Microsoft Entra ID Active Directory Hybrid Identity Microsoft Entra Connect / Cloud Sync Conditional Access Multi-Factor Authentication (MFA) Single Sign-On (SSO) Passwordless Authentication Windows Hello for Business Self-Service Password Reset (SSPR) Role-Based Access Control (RBAC) Identity Governance and Administration (IGA) Privileged Identity Management (PIM) Privileged Access Management (PAM) Microsoft 365 Security Zero Trust Security PowerShell Automation Desirable Certifications The following certifications would be advantageous: SC-300 Microsoft Identity and Access Administrator SC-100 Microsoft Cybersecurity Architect SC-200 Security Operations Analyst AZ-104 Azure Administrator AZ-305 Azure Solutions Architect Equivalent practical experience will also be considered. The Person This role is ideal for someone who: Is passionate about Microsoft Identity and Security technologies Enjoys solving complex technical challenges Takes a consultative and customer-focused approach Builds strong relationships with technical and non-technical stakeholders Communicates clearly and confidently Takes ownership and accountability for delivery Is proactive, organised and detail-oriented Thrives in a remote-first working environment Enjoys continuous learning and professional development Why Apply? £70,000 salary plus benefits Fully remote working Exposure to enterprise-scale Microsoft Identity projects Opportunities to work with the latest Microsoft Security and Identity technologies Ongoing certification and training support Clear career progression Collaborative and supportive consultancy culture Opportunity to influence Identity strategy and client outcomes This is an excellent opportunity for an experienced Identity professional looking to play a key role in delivering modern Identity and Access Management solutions within a growing Microsoft-focused consultancy environment. Services offered by Computappoint Limited are those of an Employment Business and/or Employment Agency in relation to this vacancy. Computappoint do not use AI to filter or assess candidates, we use experienced and dedicated recruiters, who want to match the best people to roles.

IAM Business Analyst Identity & Access Management Transformation Microsoft Security & Identity Client-Facing Consultancy Salary: £50k MAX Location Remote FIXED TERM CONTRACT - 6 months with a view to extension and permancy Are you confident facilitating stakeholder workshops, gathering complex requirements and translating business needs into practical technical outcomes? Have you worked on identity transformation programmes involving Joiner, Mover and Leaver processes, Role-Based Access Control, Identity Governance or Privileged Access Management? If so, this could be an excellent opportunity to join a growing Microsoft-focused consultancy delivering strategic Identity and Security projects across a diverse client base. You will work closely with clients to analyse identity challenges, document requirements, map processes and support the successful delivery of modern identity solutions across Microsoft-centric environments. What You Will Be Doing You will support IAM and identity transformation projects throughout the full delivery lifecycle, including: Facilitating discovery workshops with business, operational and technical stakeholders Gathering, analysing and documenting functional and non-functional requirements Reviewing Joiner, Mover and Leaver (JML) processes Mapping current-state provisioning and deprovisioning workflows Producing future-state process maps, user journeys and operating models Identifying manual activities, control gaps and automation opportunities Acting as the primary liaison between business stakeholders and technical delivery teams Supporting solution design workshops and process review sessions Collaborating with IAM Architects, Engineers and Project Managers Ensuring business requirements are translated into clearly defined technical outcomes dations to both technical and non-technical audiences What We Are Looking For We are seeking someone who has already worked within an IAM programme, identity transformation project or security-focused change environment and can demonstrate: Proven experience as an IAM Business Analyst Strong requirements elicitation, analysis and documentation skills Experience facilitating workshops and stakeholder engagement sessions Excellent process mapping and business process analysis capabilities Experience producing Business Requirements Documents (BRDs) and Functional Specifications The ability to translate business needs into practical technical deliverables Strong stakeholder management and communication skills Experience working alongside Architects, Engineers and Project Managers The ability to understand and simplify complex identity processes Experience supporting projects through design, build, testing and implementation phases The ability to work independently within a consultancy delivery model IAM Knowledge You should have a solid understanding of several of the following areas: Joiner, Mover and Leaver (JML) processes Identity Lifecycle Management Access Provisioning and Deprovisioning Role-Based Access Control (RBAC) Identity Governance and Administration (IGA) Privileged Access Management (PAM) User Access Reviews (UAR) Single Sign-On (SSO) Multi-Factor Authentication (MFA) Access Request and Approval Workflows Least Privilege Principles Active Directory Microsoft Entra ID (Azure AD) Hybrid Identity Microsoft 365 Access and Security Controls Desirable Experience Experience with the following technologies and tools would be advantageous: Microsoft Entra ID Active Directory Microsoft 365 Jira Confluence Azure DevOps Microsoft Visio Lucidchart Services offered by Computappoint Limited are those of an Employment Business and/or Employment Agency in relation to this vacancy. Computappoint do not use AI to filter or assess candidates, we use experienced and dedicated recruiters, who want to match the best people to roles. Location: Remote with occasional client engagement as required Type: Fixed-Term Contract with strong potential for long-term opportunities Sector: Microsoft Identity, Security & Digital Transformation Experience Level: Mid-Senior Business Analyst / IAM Specialist BA

Threat Intelligence Analyst SC Required Overview We are seeking a skilled Threat Intelligence Analyst to join our Security team and work on a high-profile project with UK Central Government, a client frequently in the spotlight and responsible for safeguarding critical national infrastructure. This role offers a unique opportunity to contribute to the security of vital systems, gain exposure to high-stakes projects, and rapidly develop your career in a fast-paced, dynamic environment. As a Threat Intelligence Analyst, you will collaborate with Incident Responders, Security Operations, and other teams to define and prioritise cyber threat indicators. You will maintain a comprehensive understanding of the evolving threat landscape, enabling the team to provide high-level situational awareness and proactive warnings about emerging threats. Responsibilities Threat Monitoring & Analysis - Monitor and analyse various intelligence sources, including internal data, open-source reports, online databases, and restricted intelligence sources, to identify actionable areas of interest Research & Reporting - Conduct in-depth research and produce detailed reports on cybersecurity and threat intelligence topics, such as current threats, threat actors, vulnerabilities, and evolving trends in the threat landscape Indicators of Compromise (IoC) - Use IoCs such as files, IP addresses, and hashes to identify threat actors, understand their methods, and develop strategies to prevent future attacks Incident Support - Conduct investigations following the intelligence cycle, assist in handling and remediating security incidents, and support security-related programs through data analysis, assessments, and reporting Threat Modeling - Leverage common analysis techniques and frameworks, such as Kill Chain, Pyramid of Pain, MITRE ATT&CK, and Diamond Model, to enhance threat detection and response capabilities Intelligence Function Support - Contribute to the strategic, operational, and tactical components of the Intelligence function within the Threat Intelligence team, ensuring alignment with organizational security goals Why This Role Is Unique High-Profile Client - Work with a government client that is in the public eye, providing an exceptional opportunity to contribute to the security of critical national infrastructure Career Growth - The dynamic and high-stakes nature of this role offers unparalleled opportunities for professional development and hands-on experience in the cybersecurity domain Learning Opportunities - Collaborate with top-tier professionals and leverage cutting-edge tools and technologies to stay at the forefront of threat intelligence and cybersecurity Required Skills and Experience 1+ years of experience in Cybersecurity or a related field Strong understanding of threat intelligence concepts, frameworks, and methodologies Familiarity with tools and platforms used for threat intelligence and analysis, such as Recorded Future, OpenCTI, Cribl, and Splunk Knowledge of threat modelling techniques, including Kill Chain, Pyramid of Pain, MITRE ATT&CK, and Diamond Model Strong analytical and problem-solving skills with the ability to identify and prioritise actionable intelligence Active Security Clearance required Preferred Qualifications 1+ years of experience in a Threat Intelligence Analyst role Advanced certifications in cybersecurity or threat intelligence (eg, GCTI, CISSP, CEH, GIAC) Experience working with government or critical national infrastructure organizations Strong written and verbal communication skills, with the ability to produce high-quality intelligence reports and briefings

About the Role This is a strong opportunity for an experienced Business Analyst to make a visible impact within Central Bedfordshire by supporting meaningful service improvement, transformation, and change projects. We are seeking a confident, delivery-focused professional who can turn complex business challenges into clear, practical solutions. Role Purpose Shape high-value service improvement, transformation and change projects from discovery through to delivery. Influence stakeholders, simplify complex processes and help deliver solutions that improve outcomes for services and residents. Key Responsibilities Lead focused workshops, interviews and analysis to uncover real business needs and define clear requirements. Map current and future-state processes, highlighting risks, inefficiencies and opportunities for measurable improvement. Produce clear, decision-ready documentation, including process maps, requirements, options appraisals and reports. Use data, insight and stakeholder feedback to drive better decisions, stronger delivery and tangible benefits. Essential Requirements Proven Business Analyst experience within transformation, service improvement or complex organisational settings. Strong skills in requirements gathering, process mapping, stakeholder engagement and analysis. Excellent written and verbal communication skills, with the ability to produce clear reports and recommendations. Ability to work independently, manage priorities and deliver quality outputs to deadlines. Desirable Criteria Business analysis qualification, such as BCS, IIBA or equivalent. Experience in local government, public sector or digital transformation projects. About You You will be a proactive, credible, and solutions-focused Business Analyst who enjoys driving change, building trusted relationships, and turning ambiguity into clear direction. This role is ideal for someone who wants to contribute quickly, add value and demonstrate the impact needed for a potential temp-to-perm opportunity. How to Apply If you are ready to bring your business analysis expertise to a varied assignment with real scope to influence change, apply now with your CV outlining your stakeholder engagement, transformation and service improvement experience. Compliance Requirements Applicants must complete required pre-employment checks, including Right to Work verification. Diamond Blaque is acting as an employment business for this vacancy and welcomes applications from all suitably qualified candidates.

Cyber Threat Intelligence Analyst Summer-Browning Associates is supporting our client in the Central Government, who is seeking a Cyber Threat Intelligence Analyst for an initial 12-month assignment, with the possibility of extension. Location: London | Hybrid The ideal candidates will hold an active Security clearance and have a proven background in Cyber Security Threat Intelligence, with the following skills and experience: Experience in risk and threat modelling within high-threat government environments. Experience with cyber threat frameworks, such as MITRE ATT&CK, the Diamond Model, and the Intelligence Cycle. Proficiency in using open-source and commercial research methods & threat intelligence platforms. Proven experience in researching, analysing, and reporting on cyber threats or related security issues. Experience in Threat Modelling System and Security Information and Event Management (SIEM) solutions Ability to triage security events to determine their scope, priority, and impact, while making recommendations for efficient remediation. Relevant professional qualifications or training in intelligence analysis or cyber security. To apply, please submit your latest CV for review.

My client are looking for a Cyber Security Analyst for an initial 3 month contract opportunity to start ASAP. IR35 Status: Inside IR35 Rate: Up to £800 per day Location: Hybrid - London Duration: Initial 3 months THIS ROLE REQUIRES AN ACTIVE SC CLEARANCE Essential Requirements: Threat Detection & Incident Response: Proven ability to monitor, detect, and respond to cybersecurity incidents using SIEM tools (eg, Splunk, Sentinel, QRadar). Vulnerability Management: Experience with vulnerability scanning, risk assessment, and remediation processes across network, cloud, and endpoint environments. Security Frameworks & Compliance: Working knowledge of NIST, ISO 27001, CIS Controls, and regulatory requirements (eg, GDPR, HIPAA, or SOC 2). A thorough understanding of HMG policies and guidance, especially regarding requirements and controls around the Government Security Policy Classification, mainly at OFFICIAL. Secured web applications and cloud infrastructure environments (AWS/Azure) against vulnerabilities, and applied common and innovative remediation techniques. Secured AWS components, in particular IAM, S3 and EC2. Knowledge of security monitoring, prevention and control systems including but not limited to Firewalls, IDS/IPS, web proxies, antivirus and log correlation solutions. If you are interested, please apply with your most up to date CV. Lawrence Harvey is acting as an Employment Business in regards to this position.

SOC Manager 6 Month contract initially Based: Hybrid/Leamington & Gaydon - Hybrid as per business need Rate: £Market rates p/d (via Umbrella company) We have a great opportunity with a world leading organisation where you will be provided with all of the support and development to succeed. A progressive organisation where you can really make a difference. We have a great opportunity for a SOC Manager to join the team. As SOC Manager you will: * Oversee SOC activities by reviewing your team's performance metrics, incident reports and other key indicators * Lead incident response efforts when a security incident occurs, the SOC team has to respond as quickly as possible * Lead these efforts by establishing clear incident response procedures and protocols and conveying them to the team * Analyse incident reports to understand your organization's security posture by reviewing incident reports, SOC managers identify patterns and trends that may indicate weaknesses or vulnerabilities in their security defences * Serve as the point of contact (POC) for security incidents within the company. You are the primary liaison between the SOC team, other internal stakeholders, and external parties such as vendors, clients or regulatory bodies. * Be responsible for conducting information security investigations as a result of security incidents. These are previously identified by the Level 2 security analyst who are monitoring the security consoles from various SOC entry channels (SIEM, Tickets, Email and Phone) End to end security incident management. You will play a key role in providing the highest level of technical expertise and handling the most complex security incidents. Key Responsibilities: * Manage service and process improvements of SOC, auditing SOC incidents, identifying new use cases and automations * POC for SOC engineering team, threat intelligence analyst and Threat exposure management * Act as a point of escalation for Level-2 SOC security analysts in support of information security investigations to provide guidance and oversight on incident resolution and containment techniques * Act as the lead coordinator to individual information security incidents * Mentor security analysts regarding risk management, information security controls, incident analysis, incident response, SIEM monitoring, and other operational tasks (tools, techniques, Procedures) in support of technologies managed by the Security Operations Centre. * Document incidents from initial detection through final resolution * Ensure threat management, threat modelling, identify threat vectors and develop use cases for security monitoring * Create reports, dashboards, metrics for SOC operations and presentation to Sr. Mgmt. * Act as focal point for any investigations involving security; to prepare reports and note follow up action * Participate in the role of Incident Manager during any incidents and emergencies * Ensure that all business recovery/contingency plans and/or procedures held within the security control rooms are always kept up to date * Coordinate with IT teams on escalations, tracking, performance issues, and outages Key skills & experience: * Strong knowledge in Authentication, End Point Security, Internet Policy Enforcement, Firewalls, Web Content Filtering, Database Activity Monitoring (DAM), Public Key Infrastructure (PKI), Data Loss Prevention (DLP), Identity and Access Management (IAM) and SOC advancements such as EDR and SOAR * Good knowledge of SIEM technologies, like Google Chronicle, Splunk ES or QRadar * In-depth familiarity with security policies based on industry standards and best practices * Experienced within the information security field, with emphasis on security operations, incident management, intrusion analysis, security device installations, configuration, and troubleshooting (e. g., Firewall, IDS, etc.) * Experience in Log source integration and in Developing new correlation rules & Parser writing * Experienced in SOC automation development, cloud operations (e. g. AWS), Designing, building security operations centers and Regulatory Compliance * Ability to lead and communicate efficiently within a team environment along with Incident management process development and/or incident management experience * Solid understanding of information technology and information security required * Excellent communication and presentation skills with demonstrated skill in presenting analytical data effectively to varied audiences (including executives) * Ability to work well under pressure with differing levels of Management This is an excellent opportunity on a great project of work, If you are looking for your next exciting opportunity, apply now for your CV to reach me directly, we will respond as soon as possible. LA International is a HMG approved ICT Recruitment and Project Solutions Consultancy, operating globally from the largest single site in the UK as an IT Consultancy or as an Employment Business & Agency depending upon the precise nature of the work, for security cleared jobs or non-clearance vacancies, LA International welcome applications from all sections of the community and from people with diverse experience and backgrounds. Award Winning LA International, winner of the Recruiter Awards for Excellence, Best IT Recruitment Company, Best Public Sector Recruitment Company and overall Gold Award winner, has now secured the most prestigious business award that any business can receive, The Queens Award for Enterprise: International Trade, for the second consecutive period.

SOC Manager Whitehall Resources are looking for a SOC Manager. This role is hybrid working with 2-3 days per week onsite in Warwickshire, and the remainder remote working, for an initial 6-month contract. *Inside IR35* Job Description: Establish goals and priorities by working closely with your team to identify the most critical focus areas. These include: Improving incident response times Reducing false positives and other extraneous alerts Enhancing threat detection capabilities Oversee your staff's activities and ensure they focus on the right priorities Oversee SOC activities by reviewing your team's performance metrics, incident reports and other key indicators Lead incident response efforts when a security incident occurs, the SOC team has to respond as quickly as possible Lead these efforts by establishing clear incident response procedures and protocols and conveying them to the team Analyse incident reports to understand your organization's security posture by reviewing incident reports, SOC managers identify patterns and trends that may indicate weaknesses or vulnerabilities in their security defences Serve as the point of contact (POC) for security incidents within the company. You are the primary liaison between the SOC team, other internal stakeholders, and external parties such as vendors, clients or regulatory bodies. Be responsible for conducting information security investigations as a result of security incidents. These are previously identified by the Level 2 security analyst who are monitoring the security consoles from various SOC entry channels (SIEM, Tickets, Email and Phone) End to end security incident management. You will play a key role in providing the highest level of technical expertise and handling the most complex security incidents. Report to the Customer about security operations. This means that you must keep the CISO and Head of security operations informed about everything that's happening in the operations centre. You can do this by preparing clear and concise reports that highlight key findings, and recommendations about the operations. Your reports will help the customer make informed decisions about security investments and strategies that align with the company's goals. Your responsibilities: Manage service and process improvements of SOC, auditing SOC incidents, identifying new use cases and automations POC for SOC engineering team, threat intelligence analyst and Threat exposure management Act as a point of escalation for Level-2 SOC security analysts in support of information security investigations to provide guidance and oversight on incident resolution and containment techniques Act as the lead coordinator to individual information security incidents Mentor security analysts regarding risk management, information security controls, incident analysis, incident response, SIEM monitoring, and other operational tasks (tools, techniques, Procedures) in support of technologies managed by the Security Operations Centre. Document incidents from initial detection through final resolution Ensure threat management, threat modelling, identify threat vectors and develop use cases for security monitoring Create reports, dashboards, metrics for SOC operations and presentation to Sr. Mgmt. Act as focal point for any investigations involving security; to prepare reports and note follow up action Participate in the role of Incident Manager during any incidents and emergencies Ensure that all business recovery/contingency plans and/or procedures held within the security control rooms are always kept up to date Coordinate with IT teams on escalations, tracking, performance issues, and outages Essential skills and experience: Strong knowledge in Authentication, End Point Security, Internet Policy Enforcement, Firewalls, Web Content Filtering, Database Activity Monitoring (DAM), Public Key Infrastructure (PKI), Data Loss Prevention (DLP), Identity and Access Management (IAM) and SOC advancements such as EDR and SOAR Good knowledge of SIEM technologies, like Google Chronicle, Splunk ES or QRadar In-depth familiarity with security policies based on industry standards and best practices Experienced within the information security field, with emphasis on security operations, incident management, intrusion analysis, security device installations, configuration, and troubleshooting (e. g., Firewall, IDS, etc.) Experience in Log source integration and in Developing new correlation rules & Parser writing Experienced in SOC automation development, cloud operations (e. g. AWS), Designing, building security operations centers and Regulatory Compliance Ability to lead and communicate efficiently within a team environment along with Incident management process development and/or incident management experience Solid understanding of information technology and information security required Excellent communication and presentation skills with demonstrated skill in presenting analytical data effectively to varied audiences (including executives) Ability to work well under pressure with differing levels of Management Desirable skills and experience: Experience of Agile ways of working. All of our opportunities require that applicants are eligible to work in the specified country/location, unless otherwise stated in the job description. Whitehall Resources are an equal opportunities employer who value a diverse and inclusive working environment. All qualified applicants will receive consideration for employment without regard to race, religion, gender identity or expression, sexual orientation, national origin, pregnancy, disability, age, veteran status, or other characteristics.