AJ Bell Business Solutions Limited
Salford, Manchester
Due to growth within our security engineering department we are now looking for a Principal Information Security Engineer to join the team. The role will support the Senior Information Security Engineering Manager by providing technical leadership and oversight across the Information Security Engineering team. This role is responsible for the day-to-day technical execution by our security engineering team, ensuring that project engagements are delivered to a high standard and support activities are dealt with in line with organisational SLAs. You will act as the team s primary technical lead and escalation point, driving efficiency, validating designs, and ensuring that all engineering outputs remain consistent and aligned with the security strategy. The key responsibilities of the role are: Act as the primary technical escalation point for the team, providing hands-on guidance and decision-making for complex technical challenges. Oversee the day-to-day execution of security engineering, ensuring that BAU work is delivered to high standards and that all team SLAs are consistently met. Ensure the quality and consistency of engineering outputs, specifically for project engagements, technical tasks, and documentation, ensuring they align with established security standards. Support the technical delivery of our security tooling roadmap, helping to bridge the gap between high-level strategic objectives and operational outcomes. Work closely with the Information Security Architecture team to validate design concepts, ensuring solutions are robust, scalable, and fit for our enterprise environment. Collaborate with the Information Security Operations team to drive operational efficiency, quality improvements, and the seamless integration of security controls across the estate. Provide technical leadership and mentoring to the engineering team, ensuring they have the support and direction needed to deliver secure, automated, and effective solutions Technical Skills: Demonstrable experience implementing enterprise security platforms Strong hands-on experience with of Microsoft security stack Strong hands-on experience using, managing, and securing diverse end-user compute environments, including Windows, MacOS, Linux, and mobile device platforms. Knowledge/experience working with firewalls and cloud security solutions is highly advantageous Deep understanding of Information Security solutions e.g. email / web gateways, Privileged Account Management (PAM), Identity Governance and Administration (IGA), Security Information and Event Management (SIEM), Endpoint protection Strong understanding and knowledge of Information Security risk management tools and techniques. Awareness of Information Security control standards and frameworks Knowledge/experience working with firewalls and cloud security solutions is highly advantageous. Knowledge/experience working with firewalls is highly advantageous Experience of Cloud security solutions and standards is highly advantageous Hands-on experience with automation and scripting highly desirable Competence: Experience working within recognised Information Security frameworks and best practices such as ISO27001, NIST etc. 5 years experience in an Information Security role gained in a financial services or e-commerce environment is preferred Attained or working towards CISSP certification About AJ Bell At AJ Bell, we believe investing should feel good. Whether you're looking for an ISA, pension or dealing account, whether you want to invest with the help of a financial adviser or do it yourself, we have easy-to-use solutions to suit people from all walks of life. We're one of the UK's fastest-growing investment platform businesses, trusted by everyone from professional financial advisers to first-time investors. Today, over 762,000 customers trust us to manage more than £121.5 billion of assets. By continually striving to make investing simpler and more accessible, we're helping more people take control of their financial futures. We're proud to be recognised as one of the UK's Best 100 Companies to Work For for six consecutive years, and a Great Place to Work in 2025 and 2026, a reflection of our supportive and collaborative culture. What we offer We offer a competitive package including: Starting holidays of 26 days, increasing to 31 with length of service as well as buy/sell options Matched pension contributions up to 7% Discretionary bonus scheme Free share awards & BAYE scheme Private healthcare options & Health Cash Plan Free onsite gym Ongoing technical training & professional qualification support Hybrid working (minimum 50% Manchester office) For the full list of benefits and more detail about the role, click apply or visit our careers page. Our ways of working At AJ Bell, our people are the heart of our culture. We believe in building strong connections by working together. That's why we offer a hybrid working model, where you'll spend a minimum of 50% of working time per month in the office. For new team members, an initial period will be spent full-time in the office to help you immerse yourself in our business and build valuable relationships with your colleagues. Inclusion & diversity We re committed to creating an inclusive environment where everyone feels respected, supported and able to be themselves at work. We welcome applications from all backgrounds and make hiring decisions based on skills, experience and potential. Agency information This vacancy is being managed exclusively by our in-house Recruitment team. We are not partnering with recruitment agencies on this opportunity and will only accept applications submitted directly by candidates.
Aug 04, 2026
Full time
Due to growth within our security engineering department we are now looking for a Principal Information Security Engineer to join the team. The role will support the Senior Information Security Engineering Manager by providing technical leadership and oversight across the Information Security Engineering team. This role is responsible for the day-to-day technical execution by our security engineering team, ensuring that project engagements are delivered to a high standard and support activities are dealt with in line with organisational SLAs. You will act as the team s primary technical lead and escalation point, driving efficiency, validating designs, and ensuring that all engineering outputs remain consistent and aligned with the security strategy. The key responsibilities of the role are: Act as the primary technical escalation point for the team, providing hands-on guidance and decision-making for complex technical challenges. Oversee the day-to-day execution of security engineering, ensuring that BAU work is delivered to high standards and that all team SLAs are consistently met. Ensure the quality and consistency of engineering outputs, specifically for project engagements, technical tasks, and documentation, ensuring they align with established security standards. Support the technical delivery of our security tooling roadmap, helping to bridge the gap between high-level strategic objectives and operational outcomes. Work closely with the Information Security Architecture team to validate design concepts, ensuring solutions are robust, scalable, and fit for our enterprise environment. Collaborate with the Information Security Operations team to drive operational efficiency, quality improvements, and the seamless integration of security controls across the estate. Provide technical leadership and mentoring to the engineering team, ensuring they have the support and direction needed to deliver secure, automated, and effective solutions Technical Skills: Demonstrable experience implementing enterprise security platforms Strong hands-on experience with of Microsoft security stack Strong hands-on experience using, managing, and securing diverse end-user compute environments, including Windows, MacOS, Linux, and mobile device platforms. Knowledge/experience working with firewalls and cloud security solutions is highly advantageous Deep understanding of Information Security solutions e.g. email / web gateways, Privileged Account Management (PAM), Identity Governance and Administration (IGA), Security Information and Event Management (SIEM), Endpoint protection Strong understanding and knowledge of Information Security risk management tools and techniques. Awareness of Information Security control standards and frameworks Knowledge/experience working with firewalls and cloud security solutions is highly advantageous. Knowledge/experience working with firewalls is highly advantageous Experience of Cloud security solutions and standards is highly advantageous Hands-on experience with automation and scripting highly desirable Competence: Experience working within recognised Information Security frameworks and best practices such as ISO27001, NIST etc. 5 years experience in an Information Security role gained in a financial services or e-commerce environment is preferred Attained or working towards CISSP certification About AJ Bell At AJ Bell, we believe investing should feel good. Whether you're looking for an ISA, pension or dealing account, whether you want to invest with the help of a financial adviser or do it yourself, we have easy-to-use solutions to suit people from all walks of life. We're one of the UK's fastest-growing investment platform businesses, trusted by everyone from professional financial advisers to first-time investors. Today, over 762,000 customers trust us to manage more than £121.5 billion of assets. By continually striving to make investing simpler and more accessible, we're helping more people take control of their financial futures. We're proud to be recognised as one of the UK's Best 100 Companies to Work For for six consecutive years, and a Great Place to Work in 2025 and 2026, a reflection of our supportive and collaborative culture. What we offer We offer a competitive package including: Starting holidays of 26 days, increasing to 31 with length of service as well as buy/sell options Matched pension contributions up to 7% Discretionary bonus scheme Free share awards & BAYE scheme Private healthcare options & Health Cash Plan Free onsite gym Ongoing technical training & professional qualification support Hybrid working (minimum 50% Manchester office) For the full list of benefits and more detail about the role, click apply or visit our careers page. Our ways of working At AJ Bell, our people are the heart of our culture. We believe in building strong connections by working together. That's why we offer a hybrid working model, where you'll spend a minimum of 50% of working time per month in the office. For new team members, an initial period will be spent full-time in the office to help you immerse yourself in our business and build valuable relationships with your colleagues. Inclusion & diversity We re committed to creating an inclusive environment where everyone feels respected, supported and able to be themselves at work. We welcome applications from all backgrounds and make hiring decisions based on skills, experience and potential. Agency information This vacancy is being managed exclusively by our in-house Recruitment team. We are not partnering with recruitment agencies on this opportunity and will only accept applications submitted directly by candidates.
Job Title: Lead Security Solution Architect- PAM Location: Hybrid-London, UK (Days/Week Onsite) Duration: 6months+ 550GBP/Day Inside IR35 Project Overview CLIENT is working on a strategic Identity and Access Management programme and is re-shaping the way Authentication, Federation, Privileged Access Management, Access Governance, Secrets Management and API Security is done across the bank. One of the pillars of that programe is Privileged Access Management (PAM). CLIENT is working on uplifting controls and capabilities in privileged access for the Group and introducing the strategic password vaulting solution that will enable to meet strategic requirements. We are seeking an experienced Lead Security Solution Architect that can complement an existing team of Solution Architects to progress with designs of different components of the PAM solution and other supporting systems it will need to integrate with as part of the end-to-end journey. Security Solution Architects manage end-to-end solution design and are responsible for delivering architecture design documents in line with functional and non-functional business requirements, strategies, principles, standards, and patterns. Alongside the creation of high-level designs, Security Solution Architects will be required to record key decisions, design deviations, and technical risks and issues where appropriate. Security Solution Architects should be comfortable presenting and sharing solutions at design authorities and senior leadership & stakeholders. The Lead Security Solution Architect will provide technical thought leadership and direction to their project team and may represent the project/programme as subject matter expert. This role will require someone experienced in managing a team of on-shore and off-shore resources to deliver High- and Low-level designs to the required quality and standard. Principal Preferred Requirements Cybersecurity Expertise: Significant experience and proven technical depth within one of the following domains of cybersecurity; security operations & incident response, threat & vulnerability management, identity & access management, cryptography, infrastructure, network, application, data, cloud Broad background across information technology with the ability to communicate clearly with non-security technical SMEs at a comfortable level Experience in both operational and transformation cybersecurity roles or a clear working understanding of both perspectives Experience working in large-scale IT transformation programmes Experience working with PAM solutions such as CyberArk, Centrify, Delinea and OneIdentity Preparing end-to-end configuration of the strategic PAM capability - including on-prem deployments as well as Cloud native toolings Assisting in preparation of demonstrable journeys on the configured PAM tooling Platform & Technology: BizzDesign, Archi, or generic UML visualisation experience for high-level designs High proficiency and expertise in Jira for project & tasks management Working proficiency in Confluence for documentation Principal Accountabilities and Responsibilities Architecture & Design: Produce, manage, and update end-to-end solution designs in line with reference architecture & business requirements (including High and Low Level Designs Articulate and publish key design decision records and options to ensure all solutions follow a logical, transparent decision-making process Articulate, publish, and ensure approval of any design deviations resulting in technical debt Ensure any technical risks or issues arising from a solution design are recorded and mitigated. Produces, manages and translates the requirements into the architecture for that solution, ensuring technology and services meet the customer needs and expected business outcomes Ensures the design of the solutions are efficient, timely and cost effective throughout the project life cycle Clear understanding of both the motivations of the business and technical security Promote strong documentation and clerkship Governance: Ensures all high-level designs, architecture patterns, decision records, deviation requests, and technical risks or issue records undergo architectural and project governance processes Ensure all architecture artefacts undergo appropriate peer review prior to design authority presentation Present publications at technical design authorities for input, feedback, and approval Risk and Dependency Management: Effectively manages and escalates both technical and project risks or issues Articulates solutions and remediation steps to technical risks & issues Ability to map design decisions to resultant technical risks & issues to articulate the cause and rationale which leads to any negatively impacting change Leadership & Teamwork Provides technical thought leadership to the Design Team and the Project Ability to manage a project team of technical architects, engineers, and/or analysts Ability to take a deputised role in programme management-related tasks where necessary Qualifications & Certifications: Masters or doctorate degree in cybersecurity, computer science, software engineering, or related field CISSP/CISM certification or other broad cybersecurity industry-recognised certificate SABSA or TOGAF certified preferred Priyanka Sharma Senior Delivery Consultant
Oct 02, 2025
Contractor
Job Title: Lead Security Solution Architect- PAM Location: Hybrid-London, UK (Days/Week Onsite) Duration: 6months+ 550GBP/Day Inside IR35 Project Overview CLIENT is working on a strategic Identity and Access Management programme and is re-shaping the way Authentication, Federation, Privileged Access Management, Access Governance, Secrets Management and API Security is done across the bank. One of the pillars of that programe is Privileged Access Management (PAM). CLIENT is working on uplifting controls and capabilities in privileged access for the Group and introducing the strategic password vaulting solution that will enable to meet strategic requirements. We are seeking an experienced Lead Security Solution Architect that can complement an existing team of Solution Architects to progress with designs of different components of the PAM solution and other supporting systems it will need to integrate with as part of the end-to-end journey. Security Solution Architects manage end-to-end solution design and are responsible for delivering architecture design documents in line with functional and non-functional business requirements, strategies, principles, standards, and patterns. Alongside the creation of high-level designs, Security Solution Architects will be required to record key decisions, design deviations, and technical risks and issues where appropriate. Security Solution Architects should be comfortable presenting and sharing solutions at design authorities and senior leadership & stakeholders. The Lead Security Solution Architect will provide technical thought leadership and direction to their project team and may represent the project/programme as subject matter expert. This role will require someone experienced in managing a team of on-shore and off-shore resources to deliver High- and Low-level designs to the required quality and standard. Principal Preferred Requirements Cybersecurity Expertise: Significant experience and proven technical depth within one of the following domains of cybersecurity; security operations & incident response, threat & vulnerability management, identity & access management, cryptography, infrastructure, network, application, data, cloud Broad background across information technology with the ability to communicate clearly with non-security technical SMEs at a comfortable level Experience in both operational and transformation cybersecurity roles or a clear working understanding of both perspectives Experience working in large-scale IT transformation programmes Experience working with PAM solutions such as CyberArk, Centrify, Delinea and OneIdentity Preparing end-to-end configuration of the strategic PAM capability - including on-prem deployments as well as Cloud native toolings Assisting in preparation of demonstrable journeys on the configured PAM tooling Platform & Technology: BizzDesign, Archi, or generic UML visualisation experience for high-level designs High proficiency and expertise in Jira for project & tasks management Working proficiency in Confluence for documentation Principal Accountabilities and Responsibilities Architecture & Design: Produce, manage, and update end-to-end solution designs in line with reference architecture & business requirements (including High and Low Level Designs Articulate and publish key design decision records and options to ensure all solutions follow a logical, transparent decision-making process Articulate, publish, and ensure approval of any design deviations resulting in technical debt Ensure any technical risks or issues arising from a solution design are recorded and mitigated. Produces, manages and translates the requirements into the architecture for that solution, ensuring technology and services meet the customer needs and expected business outcomes Ensures the design of the solutions are efficient, timely and cost effective throughout the project life cycle Clear understanding of both the motivations of the business and technical security Promote strong documentation and clerkship Governance: Ensures all high-level designs, architecture patterns, decision records, deviation requests, and technical risks or issue records undergo architectural and project governance processes Ensure all architecture artefacts undergo appropriate peer review prior to design authority presentation Present publications at technical design authorities for input, feedback, and approval Risk and Dependency Management: Effectively manages and escalates both technical and project risks or issues Articulates solutions and remediation steps to technical risks & issues Ability to map design decisions to resultant technical risks & issues to articulate the cause and rationale which leads to any negatively impacting change Leadership & Teamwork Provides technical thought leadership to the Design Team and the Project Ability to manage a project team of technical architects, engineers, and/or analysts Ability to take a deputised role in programme management-related tasks where necessary Qualifications & Certifications: Masters or doctorate degree in cybersecurity, computer science, software engineering, or related field CISSP/CISM certification or other broad cybersecurity industry-recognised certificate SABSA or TOGAF certified preferred Priyanka Sharma Senior Delivery Consultant
Principal Cybersecurity Machine Learning Engineer The position is a senior technical role, requiring knowledge of data engineering, data science, advanced analytics techniques, research and development, and innovation within one or more of the Cybersecurity sciences (e.g. network, endpoint and cloud security, cryptography, malware analysis, vulnerability assessment, privileged access management, anomaly/intrusion detection, incident response, or offensive security). The Principal Cybersecurity Analytics Engineer role is a key leadership, hands on technical role, contributing to, coordinating, and leading delivery of advanced analytics solutions to cybersecurity problems through rapid development of prototypes, engineering of production solutions, and exploration of longer term, potentially ground-breaking technologies. Cybersecurity-specific knowledge is required for the role, but exceptional candidates from other disciplines will also be considered. The ideal candidate will possess strong technical skills, an eagerness to learn, a keen interest in Cybersecurity, the ability to work collaboratively in a fast-paced environment, and an aptitude for picking up new tools and techniques on the job, building on existing skillsets as a foundation. You will have access to tailored professional development opportunities and a competitive pay and benefits package. This includes private healthcare for all UK-based employees, enhanced maternity and adoption pay and support when you return to work, and a contributory pension scheme with a generous employer contribution. In this role you will: Data Engineering Ingestion and provisioning of datasets, delta tables, and/or curated, re-usable data assets to enable Cybersecurity use cases. Support and enhancement of data ingestion infrastructure and pipelines. Platform Operations and Production Support Provide maintenance and run support for landing zones/cloud workspaces operated on behalf of Cybersecurity teams. Cybersecurity Sciences Research & Development (R&D) and Innovation Drive innovative research & development to test and evolve new technologies and advanced analytic techniques. Explore and develo innovative capabilities, exploiting emerging technologies and data science to help stay ahead of advancing cyber threats. Rapid Response Respond to urgent requests to address vulnerabilities or emerging threats. Advanced Analytics & Security Software Development Support Cybersecurity teams in using data and advanced analytic technologies effectively to enhance operations and inform decisions. Deliver critical analytics engineering requirements across Cybersecurity. Develop new data products, analysis platforms, and custom AI solutions to enable Cybersecurity teams to monitor controls more effectively, automatically detect and triage malicious activity, optimise manual tasks, better protect HSBC, and meet the needs of customers. Develop new models, detections, and automations to protect against advanced and emerging threats and help Cybersecurity operate efficiently and effectively at scale. Develop custom security applications, APIs, and data-driven services in support of the Cybersecurity mission. To be successful in this role you should meet the following requirements: Strong Data Technology skills, with the ability to build, operate, maintain and support loud infrastructure & data services at scale Extensive experience of Big Data Technologies (Databricks, Spark etc) Cloud Infrastructure & Platform Engineering experience (Azure preferred) The ability to conduct cybersecurity industry research and rapidly develop data-driven prototypes for live business problems faced by Cybersecurity teams Experience developing custom security applications, APIs, AI/ML models, detections, automations, and advanced analytic technologies to mitigate against current and emerging threats The ability to act as a Cybersecurity data domain expert and advise stakeholders how to use data and analytics to drive business change and improvement Proficiency in applying data science and advanced analytics techniques to the Cybersecurity domain and its associated datasets Full Stack Engineering and custom security software development experience with proficiency in programming languages such as Python, Java, C#, or similar preferred. This role can be based in Sheffield or Birmingham or London
Oct 01, 2025
Full time
Principal Cybersecurity Machine Learning Engineer The position is a senior technical role, requiring knowledge of data engineering, data science, advanced analytics techniques, research and development, and innovation within one or more of the Cybersecurity sciences (e.g. network, endpoint and cloud security, cryptography, malware analysis, vulnerability assessment, privileged access management, anomaly/intrusion detection, incident response, or offensive security). The Principal Cybersecurity Analytics Engineer role is a key leadership, hands on technical role, contributing to, coordinating, and leading delivery of advanced analytics solutions to cybersecurity problems through rapid development of prototypes, engineering of production solutions, and exploration of longer term, potentially ground-breaking technologies. Cybersecurity-specific knowledge is required for the role, but exceptional candidates from other disciplines will also be considered. The ideal candidate will possess strong technical skills, an eagerness to learn, a keen interest in Cybersecurity, the ability to work collaboratively in a fast-paced environment, and an aptitude for picking up new tools and techniques on the job, building on existing skillsets as a foundation. You will have access to tailored professional development opportunities and a competitive pay and benefits package. This includes private healthcare for all UK-based employees, enhanced maternity and adoption pay and support when you return to work, and a contributory pension scheme with a generous employer contribution. In this role you will: Data Engineering Ingestion and provisioning of datasets, delta tables, and/or curated, re-usable data assets to enable Cybersecurity use cases. Support and enhancement of data ingestion infrastructure and pipelines. Platform Operations and Production Support Provide maintenance and run support for landing zones/cloud workspaces operated on behalf of Cybersecurity teams. Cybersecurity Sciences Research & Development (R&D) and Innovation Drive innovative research & development to test and evolve new technologies and advanced analytic techniques. Explore and develo innovative capabilities, exploiting emerging technologies and data science to help stay ahead of advancing cyber threats. Rapid Response Respond to urgent requests to address vulnerabilities or emerging threats. Advanced Analytics & Security Software Development Support Cybersecurity teams in using data and advanced analytic technologies effectively to enhance operations and inform decisions. Deliver critical analytics engineering requirements across Cybersecurity. Develop new data products, analysis platforms, and custom AI solutions to enable Cybersecurity teams to monitor controls more effectively, automatically detect and triage malicious activity, optimise manual tasks, better protect HSBC, and meet the needs of customers. Develop new models, detections, and automations to protect against advanced and emerging threats and help Cybersecurity operate efficiently and effectively at scale. Develop custom security applications, APIs, and data-driven services in support of the Cybersecurity mission. To be successful in this role you should meet the following requirements: Strong Data Technology skills, with the ability to build, operate, maintain and support loud infrastructure & data services at scale Extensive experience of Big Data Technologies (Databricks, Spark etc) Cloud Infrastructure & Platform Engineering experience (Azure preferred) The ability to conduct cybersecurity industry research and rapidly develop data-driven prototypes for live business problems faced by Cybersecurity teams Experience developing custom security applications, APIs, AI/ML models, detections, automations, and advanced analytic technologies to mitigate against current and emerging threats The ability to act as a Cybersecurity data domain expert and advise stakeholders how to use data and analytics to drive business change and improvement Proficiency in applying data science and advanced analytics techniques to the Cybersecurity domain and its associated datasets Full Stack Engineering and custom security software development experience with proficiency in programming languages such as Python, Java, C#, or similar preferred. This role can be based in Sheffield or Birmingham or London
