19 jobs found

Senior DevOps & Systems Engineer - 1 or 2 days a week expected at Head Office in Blackburn - Salary: 60k- 65k Summary of Position The Senior DevOps & Systems Engineer will be responsible for the administration, reliability, security and continuous improvement of the TW Group infrastructure estate across both Linux and Microsoft environments. This is a hands-on senior role for an experienced infrastructure engineer who is comfortable taking ownership of technical problems, investigating unfamiliar systems and delivering practical solutions with minimal supervision. The successful candidate will work closely with the Software Development Team, IT Operations and selected third-party technology partners to support business-critical infrastructure, development environments, databases, container platforms and deployment pipelines. The role will be expected to take ownership of day-to-day infrastructure operations while also improving automation, monitoring, resilience, documentation and disaster recovery capability across the wider IT estate. Key Responsibilities - Administration, maintenance and improvement of Linux and Microsoft server environments. - Provisioning and configuration of new virtual machines, servers, services and supporting infrastructure. - Deployment and configuration of applications and infrastructure components. - Monitoring the health, performance, availability and security of production and internal systems. - Investigating and resolving infrastructure incidents, performance issues and system failures. - Designing and implementing appropriate monitoring, alerting and logging for new and existing systems. - Managing and improving configuration automation using Ansible. - Supporting and administering containerised environments using Docker, CRI-O and Kubernetes. - Managing Kubernetes clusters, workloads, services and associated infrastructure. - Administration and operational support of MySQL, Galera Cluster and Microsoft SQL Server environments. - 1 Building, maintaining and improving CI/CD pipelines. - Supporting software deployment and release processes in collaboration with the Development Team. - Maintaining system patching, upgrades, security configuration and vulnerability remediation. - Managing backup, recovery and disaster recovery processes. - Improving infrastructure resilience and reducing key-person dependencies through documentation and cross-training. - Reviewing existing infrastructure and recommending improvements where systems can be made more reliable, secure, maintainable or efficient. - Supporting infrastructure-related security incidents and remediation activities. - Maintaining clear technical documentation covering systems, infrastructure, recovery procedures and operational processes. - Working with third-party infrastructure and technology partners where specialist support is required. - Supporting the broader IT function where infrastructure, systems or operational responsibilities overlap. Experience - 5+ years of professional experience in DevOps, Systems Administration, Infrastructure Engineering, Platform Engineering or a similar role. - Significant hands-on experience operating production-grade infrastructure. - Strong Linux administration experience. - Practical experience across both Linux and Microsoft server estates. - Proven experience managing infrastructure supporting business-critical applications. - Experience taking ownership of complex technical problems with limited supervision. - Proven ability to investigate unfamiliar systems and determine appropriate solutions. - Experience improving infrastructure reliability, automation, security or operational efficiency. - Previous experience operating in a senior or highly autonomous engineering role Skills and Experience - Core Linux & Systems Administration - Strong professional experience administering Linux server environments in production. - Strong understanding of Linux system administration, including: users and permissions system services package management networking storage and filesystems scheduled tasks logging performance management troubleshooting. - Experience provisioning and configuring servers and virtual machines from initial deployment through to production readiness. - Strong understanding of production infrastructure reliability, availability and operational support. - Experience with system patching, upgrades and lifecycle management. - Experience diagnosing complex infrastructure issues independently. Monitoring, Reliability & Security - Strong experience with system, application and security monitoring. - Experience designing and implementing monitoring and alerting for new infrastructure and applications. - Ability to identify meaningful service health indicators and create appropriate alerts. - Strong understanding of: infrastructure security access control patch management vulnerability remediation system hardening logging auditing certificate management - Experience responding to production incidents and security-related infrastructure issues. - Strong understanding of backup, recovery and disaster recovery principles. - Experience documenting and testing disaster recovery procedures. Automation & Configuration Management - Strong working knowledge of Ansible. Experience using automation to manage: server configuration 3. - Application deployment package installation security configuration environment setup recurring operational tasks - Ability to design reusable, maintainable and well-documented automation. - Strong understanding of infrastructure automation and configuration management principles. - Experience with Infrastructure as Code concepts. Containers & Kubernetes - Strong experience with Docker and containerised workloads. - Experience with CRI-O, containerd or comparable container runtimes. - Practical experience administering Kubernetes clusters in production or business-critical environments. - Strong understanding of: deployments pods services ingress persistent storage secrets configuration resource allocation cluster networking availability monitoring troubleshooting - Ability to independently deploy, troubleshoot and maintain applications within Kubernetes. - Experience supporting highly available containerised environments Database Administration MySQL / Galera - Strong experience administering MySQL environments. - Experience managing Galera Cluster or comparable highly available MySQL architectures. - Good understanding of: replication backup and restore performance - monitoring database troubleshooting permissions and access upgrades clustering high availability failover disaster recovery - Ability to investigate and resolve database performance and availability issues Microsoft SQL Server - Experience administering Microsoft SQL Server / MSSQL environments. - Good understanding of: database backup and recovery - permissions maintenance - monitoring performance - troubleshooting availability resilience Microsoft Systems Administration - Strong experience administering Microsoft Windows Server environments. - Experience installing, configuring and maintaining Windows-based servers and applications. - Experience with system monitoring, patching, security and operational support. - Strong understanding of Windows Server permissions, services and network configuration. - Ability to troubleshoot Windows infrastructure and application issues independently. - Experience supporting business-critical Microsoft workloads. CI/CD & Development Operations - Strong experience with CI/CD pipelines. - Experience designing, maintaining and troubleshooting automated deployment pipelines. - Understanding of build, test and production deployment processes. - Strong working knowledge of Git and modern source control workflows. - Experience supporting software developers with infrastructure and deployment requirements. - Ability to improve deployment reliability through automation and standardisation. - Experience supporting multiple development, staging and production environments Infrastructure & Networking - Strong understanding of: TCP/IP DNS HTTP / HTTPS firewalls VPNs load balancing reverse proxies TLS / SSL certificates - Experience administering web servers such as Nginx and Apache. - Understanding of highly available, multi-server environments. - Ability to troubleshoot infrastructure issues across operating system, networking, database and application layers. - Experience working alongside external infrastructure or managed service providers Working Style & Soft Skills - Strong problem-solving and diagnostic capability. - Comfortable being given an outcome or problem rather than a predefined technical solution. - Able to independently investigate, evaluate options and implement appropriate solutions. - Strong ownership mentality and willingness to take responsibility for systems through their full lifecycle. - Proactive approach to identifying operational risks before they become incidents. - Calm and methodical approach to production incidents and high-pressure situations. - Strong attention to detail. Good communication skills with both technical and non-technical stakeholders. - Ability to explain infrastructure risks and recommendations in practical business terms. Nice-to-Have - Previous experience supporting SAP environments click apply for full job details

Up to 60,000 London HQ Office-Based, Hybrid or Fully Remote for the Right Candidate Jackson Hogg are delighted to be supporting an innovative and rapidly growing AI and biotechnology organisation in the search for an IT Systems & Infrastructure Engineer. This is an opportunity to join a cutting-edge business operating at the intersection of artificial intelligence, healthcare and life sciences, where technology plays a critical role in driving scientific innovation and business growth. This is a broad, hands-on role suited to an experienced infrastructure professional who enjoys ownership and variety. You'll be responsible for the day-to-day management, security and development of the organisation's IT estate, while helping shape its future technology strategy as the company continues to scale. The Role You'll take ownership of core IT systems and infrastructure, providing a blend of operational support, systems administration, cloud management and cybersecurity oversight. Key responsibilities include: Managing and supporting Microsoft 365, including Entra ID, Exchange Online, Teams, SharePoint, OneDrive and Intune Administering Google Cloud Platform (GCP), including IAM, networking, monitoring and security Managing network infrastructure including firewalls, switches, VPNs, Wi-Fi, DNS and DHCP Providing user support across devices, software, access management and business applications Managing endpoint security, patching, software deployment and asset management Supporting cybersecurity initiatives, vulnerability management and remediation Improving IT policies, processes, security awareness and governance Leading infrastructure upgrades, migrations and continuous improvement projects Supporting backup, disaster recovery, business continuity and incident response Maintaining compliance with security frameworks including Cyber Essentials Plus and ISO 27001 Managing relationships with IT suppliers, licensing providers and third-party support partners About You We're looking for a proactive and technically capable IT professional who enjoys taking ownership and solving problems. You'll have strong experience across several of the following areas: Microsoft 365 & Entra ID Intune and endpoint management Google Cloud Platform Windows, macOS and Linux environments Networking, VPNs, firewalls and wireless technologies Cybersecurity and identity management Backup and disaster recovery solutions SaaS administration IT asset and licence management IT governance, policies and documentation Cyber Essentials Plus and ISO 27001 environments What's on Offer? Salary of up to 60,000 Flexible working arrangements with office-based, hybrid or fully remote options available Opportunity to work within a genuinely innovative AI and life sciences environment Significant autonomy and ownership Chance to influence and shape the future IT landscape of a growing business Exposure to modern cloud, security and infrastructure technologies This role would suit an ambitious Infrastructure Engineer, Systems Administrator, IT Manager or Senior IT Support Engineer looking for a varied position where they can make a real impact in a fast-growing technology-driven organisation.

Cybersecurity Professional Siemens Smart Infrastructure - Electrification & Automation Location: This is a hybrid role, offering a mix of home and office-based working. You'll be able to work from either our Hebburn or Manchester office, with the flexibility to work from home 2-3 days per week. At Siemens Electrification & Automation, we work across energy, infrastructure and industrial environments, where secure and resilient technology is critical to both our business and our customers. We're growing our cybersecurity capability and looking for a Cybersecurity Professional to join our team. Reporting to the Cybersecurity Assurance Manager, you'll support cybersecurity assurance activities across information security, project delivery, supplier assurance and customer-facing cybersecurity requirements. As you develop within the role, you'll also provide delegated support to the Cybersecurity Assurance Manager, helping to coordinate priorities, engage stakeholders and support activities across the wider business. We're open to candidates with a range of experience levels. Alongside a strong technical foundation, we're looking for someone who is curious, proactive and motivated to learn, take ownership and deliver practical business outcomes. Responsibilities and level will be aligned to your experience and capability during the selection process. Key Responsibilities Support the delivery of cybersecurity assurance activities across information security, business assets, projects, and operational environments. Coordinate and support assurance processes, including risk assessments, business impact assessments, evidence gathering, action tracking, and periodic reviews. Provide guidance to asset owners, project teams, and stakeholders on cybersecurity requirements, responsibilities, and best practice. Support information security governance activities, including ISO 27001 maturity initiatives, control reviews, assurance reporting, and continuous improvement. Provide cybersecurity support throughout the project and delivery lifecycle, including tender activities, risk assessments, design reviews, vulnerability management, and secure-by-design practices. Conduct and coordinate cybersecurity assessments of suppliers, contractors, software providers, and third-party service partners, identifying risks and tracking remediation actions. Support supplier onboarding, contract reviews, audits, customer assurance activities, pre-qualification questionnaires, and the provision of assurance evidence. Work collaboratively with Procurement, IT, Engineering, Project Management, Operations, and other business stakeholders to identify and manage cybersecurity risks. Provide support for critical business applications and infrastructure, helping to address control weaknesses, significant changes, and emerging cyber risks. Contribute to the development of cybersecurity capability across the business through knowledge sharing, training, guidance materials, and awareness activities. Support the development of cybersecurity interns and colleagues building cyber capability, where applicable. Provide delegated support for selected Cybersecurity Assurance activities, helping to coordinate urgent assurance, project, tender, or incident-related matters within defined authority levels. About you You will be a proactive and organised professional with a positive, solutions-focused approach. Comfortable working independently and managing competing priorities, you'll be motivated to learn, identify opportunities for improvement, and deliver practical outcomes that add value to the business. A degree-level qualification in cybersecurity, computer science, engineering, information systems or a related technical discipline. Professional experience in cybersecurity, information security, Product and Solution Security, secure engineering or technology assurance. Understanding of information-security management and the ability to translate requirements into practical actions. Experience working with technical and non-technical stakeholders across multiple functions. Clear written and verbal communication in English, with a collaborative and constructive approach. Curious and self-driven, with the confidence to try, learn independently, seek input when needed, and work collaboratively to solve problems. Desirable Practical experience of risk assessment, control evaluation, evidence review and action tracking. Experience in industrial or operational technology cybersecurity. Knowledge of ISO/IEC 27001, IEC 62443, secure development, vulnerability management, security testing or audit methods. You do not need to tick every box. We are interested in what you know today, but equally in your potential to learn, grow and make an impact. Why join us? At Siemens Electrification & Automation, you'll work on real-world cybersecurity challenges across engineering, energy, automation and digitalisation. As part of a global cybersecurity community, you'll collaborate with specialists from across Siemens while developing your skills in a supportive and innovative environment. What can we offer? Performance-Based Bonus: Enjoy an annual bonus linked to the company's performance Flexible Working Hours: Achieve a healthy work-life balance with our flexible working arrangements Pension Plan: Secure your future with our generous pension scheme, with employer contributions up to 10%. Time Off: Recharge and rejuvenate with 26 days of annual leave (plus bank holidays), and the option to buy or sell an additional 5 days! We are fully committed to providing equal opportunities and building an inclusive workplace where a broad range of backgrounds and perspectives thrive. We embrace the many ways people think, learn, and experience the world-because we know that diverse minds drive innovation. So that we can support you to be your best during the application and interview process, please let us know if you have any specific requirements.

Location: Manchester (Hybrid, 3 Days On-Site) Salary: £60,000 - £80,000 + Excellent Benefits Our client is a rapidly growing software company whose technology supports emergency services and public safety organisations across the UK and North America. They are seeking an experienced AWS Cloud Security Operations Engineer to join their cybersecurity team. This role combines cloud security engineering, vulnerability management, threat intelligence and incident response within a highly secure, cloud-first environment. Responsibilities Own the vulnerability management process across AWS infrastructure, applications and network environments Conduct threat research and provide actionable remediation recommendations Lead and support security incident investigations and response activities Assess and harden AWS security configurations Work with SIEM, EDR and monitoring technologies to improve detection capabilities Support cloud security best practice across engineering and platform teams Assist with local IT and security requirements within the Manchester office Participate in an on-call security rota Essential Experience Minimum 5 years' experience within Security Engineering, Cloud Security or Security Operations Strong AWS security expertise Vulnerability management and threat analysis experience Security incident response experience Knowledge of SIEM and endpoint security tools Infrastructure as Code experience (Terraform preferred) Understanding of networking and Windows environments Excellent communication and stakeholder engagement skills Desirable Skills AWS Certified Security Specialty Terraform, Kubernetes or cloud automation tooling CrowdStrike, Elastic, CloudTrail or similar platforms ISO27001, PCI-DSS or Cyber Essentials experience Package Competitive salary of £60,000 - £80,000 Private Medical Insurance Pension Contribution Equity Scheme Hybrid Working (3 days per week in Manchester) Career progression within a growing international business Due to the nature of the organisation's work, candidates must be eligible to obtain SC and NPPV3 Security Clearance and typically have a minimum of 5 years' UK residency. AWS Security Engineer, Cloud Security Engineer, Security Operations Engineer, Security Engineer, AWS, Terraform, SIEM, CrowdStrike, CloudTrail, Vulnerability Management, Incident Response, Cyber Security Engineer, DevSecOps, ISO27001, Cyber Essentials.

At CV-Library, we have a simple vision: to help the world to work and we are looking for exceptional and talented people to help us realise this vision in both UK and overseas markets. We are in a period of focused internal investment, following a year of key strategic acquisitions and significant investment across all parts of the business, from Tech and Data to People and HR, there's never been a more exciting time to join us or a better place to grow your career! The Role Hours: Monday-Friday, 9:00-17:30 Location: Fleet Working Pattern: Hybrid - 3 days a week on site This is a security role built for someone who wants to own the threat, not just log it. As Security Engineer, you'll be the person who understands what's actually at risk across a modern Cloud native microservice platform and our internal IT estate, from SIEM alerts to Microsoft 365 endpoint security, and who sets the priorities that matter. You won't be buried in compliance paperwork. You'll direct a capable Platform Ops team on remediation while you stay focused on the threat picture, the tooling and the DevSecOps thinking that keeps CV-Library ahead of it. You'll report directly to the Platform & Service Operations Manager, with a genuine mandate to shape how security is done, not just document it. Compliance still matters, and you'll keep ISO 27001 documentation and audit evidence in good shape as you go, but it's the by-product of doing security well, not the job itself. Responsibilities: Own the day-to-day management of security alerts, investigations and incidents across CV-Library's technology estate Monitor emerging cyber threats and threat intelligence, assessing potential risks and recommending improvements to security controls Lead the initial response to security incidents, coordinating containment and remediation activities with relevant technical teams Maintain incident records, conduct post-incident reviews and ensure lessons are learned are embedded into processes, tooling and controls Manage and continuously improve the organisation's security tooling, including SIEM, endpoint protection, vulnerability management and cloud security solutions Take ownership of endpoint and Microsoft 365 security, including device security, conditional access policies and identity protection controls Define and maintain security standards and guardrails for cloud infrastructure and software delivery, working closely with Platform DevOps teams Manage identity and access management processes, supporting user provisioning, access reviews and least-privilege principles Act as the security subject matter expert, providing guidance on infrastructure, platform and application changes Oversee the vulnerability management lifecycle, ensuring security weaknesses are identified, prioritised and remediated effectively Coordinate external penetration testing activities and track remediation actions through to completion Maintain security documentation, policies and audit evidence, supporting ongoing ISO 27001 compliance and certification requirements Apply GDPR and data protection principles to ensure security controls, processes and documentation meet regulatory expectations Support supplier and third-party security assessments, helping to identify and manage external risks Assess the secure use of AI technologies across the business and champion a strong security culture by promoting best practice across best technology and non-technical teams What we're looking for Strong technical knowledge of security tools, frameworks and best practice Solid understanding of cloud-native infrastructure (AWS, Kubernetes/EKS) sufficient to assess and prioritise risk and to direct Platform Ops on remediation, without owning infrastructure changes directly Experience with penetration testing engagement and vulnerability management processes Understanding of endpoint protection technologies and policy configuration, including Microsoft 365 security tooling (e.g. Defender, Intune, Conditional Access) Working knowledge of Identity and Access Management principles Strong incident response and threat intelligence skills, including SIEM-based monitoring and triage Familiarity with security accreditations such as ISO 27001 and what they require operationally Working knowledge of UK GDPR and data protection principles, particularly as they relate to security control and audit documentation Excellent communication skills, able to convey security matters clearly to both technical and non-technical audiences We are actively committed to promoting a fully diverse and inclusive workforce and we welcome applications for this role from all candidates who meet the key requirements. Please do not hesitate to get in touch should you require any reasonable adjustments to assist with your application.

Senior Software Engineer Embedded Linux We are recruiting on behalf of an established technology business for a Senior Software Engineer to join its UK Development Centre in West London. This is a senior technical role with end-to-end ownership of software architecture, design, development, and release across complex embedded products. You will act as a technical authority, remaining hands-on while working closely with UK and international engineering teams. Key Responsibilities Own the architecture and technical delivery of major embedded software work packages from requirements through to production. Design and develop production-grade C++ applications on embedded Linux, including custom Yocto/OpenEmbedded environments. Define hardware/software partitioning, inter-processor communications, interfaces, fault handling, recovery, and software updates. Develop embedded networking and communications, including TCP/IP, UDP, QoS, SIP/RTP and VoIP. Integrate software with external network services, REST APIs, and client applications. Establish and maintain CI/CD, code review and automated testing using tools including GitLab, Gerrit and Jenkins. Lead unit, integration, and hardware-in-the-loop (HIL) testing, supporting product certification and regulatory requirements. Own software releases, production test software and technical resolution of manufacturing and support issues. Embed cybersecurity into the architecture, including secure boot, signed updates, access control and vulnerability management. Lead architecture and design reviews and provide technical mentoring to other engineers. Required Experience 10+ years' embedded software development experience, with extensive hands-on experience across embedded Linux. Strong modern C++ development skills, alongside experience with C for firmware/drivers. Proven experience taking complex, multi-processor embedded products from system requirements through to production release. Deep practical experience with Yocto Project / OpenEmbedded. Strong understanding of software architecture, system integration, and hardware/software interfaces. Proven technical leadership experience, including architectural ownership and hands-on delivery. Experience working within regulated, safety-critical or heavily audited engineering environments is highly relevant. Bachelor's or Master's degree in Software Engineering, Computer Science or a related discipline, or equivalent professional experience. Desirable Experience ARM Cortex, FreeRTOS or bare-metal development. CAN, SPI, I2C and UART. Satellite communications, RF, or maritime technology. Embedded networking and VoIP technologies including PJSIP, Linphone or Asterisk. GitLab, Gerrit, Jenkins and Jira. Hardware-in-the-loop testing and formal verification. Safety-critical development, certification, or cybersecurity standards. AI-assisted development tools used within secure engineering environments. Please apply with your CV for further information and to discuss the role in more detail.

DevSecOps Consultant Sheffield (2-days per week onsite) Inside IR35 We're partnering with a leading financial services client to appoint a DevSecOps Consultant to drive secure engineering practices across large-scale, cloud-based platforms. This role is ideal for someone who has come from a hands-on DevSecOps Engineering background and has since transitioned into architecture, design and advisory, while still retaining strong technical depth. We're particularly looking for someone who brings a strong blend of Python development and orchestration experience alongside their DevSecOps expertise. Key Requirements: Proven background in hands-on DevSecOps Engineering, now operating in a design/architecture-focused role Strong Python development experience, with the ability to build automation and orchestration solutions Strong experience with orchestration and workflow automation across engineering, cloud and security platforms Strong experience across both AWS and GCP (essential) Deep understanding of CI/CD pipelines, build tools, artifact repositories, and developer platforms Expertise in secure software delivery, vulnerability management, and platform security Experience with threat modelling, security frameworks, and maturity assessments Strong knowledge of application security, network security, and cloud security principles Excellent stakeholder management and communication skills Desirable: Experience in financial services or regulated environments Knowledge of Kubernetes and container security Familiarity with supply chain security, SBOM, and secure development practices Experience with workflow/orchestration tooling and event-driven automation Relevant certifications (e.g. CISSP, CISM, CCSP) More details available on successful application.

AI DevSecOps Consultant Remote Inside IR35 We're partnering with a leading financial services client to appoint an AI DevSecOps Consultant to drive secure engineering practices across large-scale, cloud-based platforms. A key focus will be practical AI experience within DevSecOps, including embedding security controls into modern AI-assisted developer workflows. We're particularly interested in candidates who have worked with Claude Code or similar AI coding tools and understand how to securely integrate AI-generated code into enterprise development pipelines. Key Requirements: Proven background in hands-on DevSecOps Engineering, with experience operating in a design/architecture-focused role Strong practical experience applying AI within DevSecOps and software engineering workflows Experience securing AI-assisted development workflows, including Claude Code or similar tools Experience integrating SAST and other security controls into workflows containing AI-generated code Strong experience with secrets scanning and preventing sensitive information from entering source code or pipelines Strong experience designing and implementing secure CI/CD pipelines Strong Python development experience, with the ability to build automation and orchestration solutions Strong experience with orchestration and workflow automation across engineering, cloud and security platforms Strong experience across both AWS and GCP (essential) Deep understanding of CI/CD pipelines, build tools, artifact repositories and developer platforms Expertise in secure software delivery, vulnerability management and platform security Experience with threat modelling, security frameworks and maturity assessments Strong knowledge of application security, network security and cloud security principles More details available on successful application.

Job Role: Senior Security Engineer - CIAMLocation: Hybrid - City of LondonSalary: £100,000 - £120,000 + Bonus Are you an experienced Security Engineer with a passion for safeguarding systems and driving innovation in identity and access management? Do you thrive in complex environments where you can solve critical security challenges and influence long-term strategy? If you're driven by excellence, collaboration, and the opportunity to make an impact on a global financial institution, this could be the perfect role for you. Join us as a Senior Security Engineer, where you'll help shape a market-leading digital platform and deliver secure, cutting-edge customer experiences. Ideal Candidate: Strong hands-on expertise with Hardware Security Modules (HSM), AWS Secrets Manager, and certificate lifecycle management (rotation, revocation, automation) Experienced with GitLab CI/CD pipelines, AWS CLI, and automation tooling (Chef or similar) Proven background in Cloud Security, with deep knowledge of:- AWS security controls, policies, and automation- Role-based and attribute-based access controls- Cryptographic protocols and secure key lifecycle management- Securing microservices, APIs, and DevSecOps best practices Skilled in penetration testing and hands-on coding with JavaScript, Java, or Python Strong understanding of vulnerability scanning, remediation, and vendor management Collaborative mindset with the ability to partner across engineering, security, and product teams Desirable Skills: Hands-on configuration, deployment, and operation of ForgeRock IAM solutions (PingGateway, PingAM, PingIDM, PingDS) Knowledge of PKI-based identity, HTTP header signing, and advanced authentication protocols Exposure to both AWS and Azure environments Experience embedding security into the Software Development Lifecycle (SDLC) This is a hybrid role, with 2-3 days a week in the City of London. If you're ready to take on a high-impact role in one of the world's leading banks and help shape the future of secure digital identity, get in touch today to arrange a chat! Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.

Ideas People Trust We're BDO. An accountancy and business advisory firm, providing the advice and solutions entrepreneurial organisations need to navigate today's changing world. We work with the companies that are Britain's economic engine - ambitious, entrepreneurially-spirited and high growth businesses that fuel the economy - and directly advise the owners and management teams that lead them. We'll broaden your horizons To ensure our services and applications are fit for the modern market, our IT team collaborates with every department. They develop, they explore and they implement the new ideas helping us to change the future of accounting, tax and business consulting. But, just as importantly, they maintain the tech that keeps us advancing. By testing and adopting the future of financial technical solutions, they find new and exciting ways to drive us forward. And you could too. In an IT role at BDO, you'll become part of a team that act as the backbone for our business. No matter who you are or what your skillset is, we'll give you the training and support you need to achieve whatever you put your mind to. We'll help you succeed Leading organisations trust us because of the quality of our advice. That quality grows from a thorough understanding of their business, and that understanding comes from working closely with them and building long-lasting relationships. You'll be someone who is both comfortable working proactively and managing your own tasks, as well as confident collaborating with others and communicating regularly with senior managers, directors, and BDO's partners to help businesses effectively. You'll be encouraged to identify and draw attention to opportunities for enhancing our delivery and providing additional services to organisations we work with. We are seeking a highly motivated and experienced Lead Software Security Engineer to join our team. You will have a strong background in software development, security, and operations. This role is required to support the Digital Product Management team in embedding security requirements and best practices into new Digital Products and Services. You will work closely with the Digital Product Management and IT Security teams to establish and build the right security controls and quality state gates across the product lifecycle. This includes security tooling to manage these controls. In this busy and rewarding role, you'll also: Collaborate with software development teams to integrate security into the development lifecycle Own the cultural shift to a Security DevSecOps mindset Manage & implement security controls, tools, and processes to secure applications and infrastructure Monitor and respond to security incidents and threats in a timely manner Stay up-to-date with security trends and best practices to continuously improve security posture Automate security testing and deployment processes to ensure rapid and secure delivery of software Develop and maintain security documentation and training materials Develop and implement the product security strategy in alignment with organisational goals Integrate Application Security Tools within existing Development Processes Assist with the Planning & Execution of Application Penetration Tests Serve as a Subject Matter Expert (SME) in the field of Application Security Define security NFR's and ensure these are met Report on compliance with security standards You'll be someone with: Strong experience in software development and security Proficient in scripting languages such as Powershell, YAML, JASON, etc. Collaborate with development teams to integrate security best practices into the secure software development lifecycle (SDLC) and ensure products are built securely Oversee vulnerability management and remediation efforts, including leading responses to pen test findings and security assessments Experience conducting risk assessments and threat modelling for software development and advise where necessary Experience in software security design review Strong knowledge of Agile, DevSecOps, System Engineer and or equivalent Knowledge of security standards and secure development principles such as NCSC Secure Development & Deployment Guidance, OWASP, NIST Secure Software Development Framework (SSDF - 800-218), Microsoft Azure Secure Development best practices, ISO27001 Experience with Azure cloud infrastructure, particularly Azure PaaS service Experience with Azure DevOps, particularly CI/CD and backlog management Prepare and present regular security reports to senior management, ensuring compliance with security standards and regulations Expertise with security tools and familiarity with DevSecOps processes Bachelor's or Master's degree in Computer Science, Cybersecurity, or related field (preferable) You'll be able to be yourself; we'll recognise and value you for who you are and celebrate and reward your contributions to the business. We're committed to agile working, and we offer every colleague the opportunity to work in ways that suit you, your teams, and the task at hand. At BDO, we'll help you achieve your personal goals and career ambitions, and we have programmes, resources, and frameworks that provide clarity and structure around career development. We're in it together Mutual support and respect is one of BDO's core values and we're proud of our distinctive, people-centred culture. From informal success conversations to formal mentoring and coaching, we'll support you at every stage in your career, whatever your personal and professional needs. Our agile working framework helps us stay connected, bringing teams together where and when it counts so they can share ideas and help one another. At BDO, you'll always have access to the people and resources you need to do your best work. We know that collaboration is the key to creating value for the companies we work with and satisfying experiences for our colleagues, so we've invested in state-of-the-art collaboration spaces in our offices. BDO's people represent a wealth of knowledge and expertise, and we'll encourage you to build your network, work alongside others, and share your skills and experiences. With a range of multidisciplinary events and dedicated resources, you'll never stop learning at BDO. We're looking forward to the future At BDO, we help entrepreneurial businesses to succeed, fuelling the UK economy. Our success is powered by our people, which is why we're always finding new ways to invest in you. Across the UK thousands of unique minds continue to come together to help companies we work with to achieve their ambitions We've got a clear purpose, and we're confident in our future, because we're adapting and evolving to build on our strengths, ensuring we continue to find the right combination of global reach, integrity and expertise. We shape the future together with openness and clarity, because we believe in empowering people to think creatively about how we can do things better.

Ideas People Trust We're BDO. An accountancy and business advisory firm, providing the advice and solutions entrepreneurial organisations need to navigate today's changing world. We work with the companies that are Britain's economic engine - ambitious, entrepreneurially-spirited and high growth businesses that fuel the economy - and directly advise the owners and management teams that lead them. We'll broaden your horizons To ensure our services and applications are fit for the modern market, our IT team collaborates with every department. They develop, they explore and they implement the new ideas helping us to change the future of accounting, tax and business consulting. But, just as importantly, they maintain the tech that keeps us advancing. By testing and adopting the future of financial technical solutions, they find new and exciting ways to drive us forward. And you could too. In an IT role at BDO, you'll become part of a team that act as the backbone for our business. No matter who you are or what your skillset is, we'll give you the training and support you need to achieve whatever you put your mind to. We'll help you succeed Leading organisations trust us because of the quality of our advice. That quality grows from a thorough understanding of their business, and that understanding comes from working closely with them and building long-lasting relationships. You'll be someone who is both comfortable working proactively and managing your own tasks, as well as confident collaborating with others and communicating regularly with senior managers, directors, and BDO's partners to help businesses effectively. You'll be encouraged to identify and draw attention to opportunities for enhancing our delivery and providing additional services to organisations we work with. We are seeking a highly motivated and experienced Lead Software Security Engineer to join our team. You will have a strong background in software development, security, and operations. This role is required to support the Digital Product Management team in embedding security requirements and best practices into new Digital Products and Services. You will work closely with the Digital Product Management and IT Security teams to establish and build the right security controls and quality state gates across the product lifecycle. This includes security tooling to manage these controls. In this busy and rewarding role, you'll also: Collaborate with software development teams to integrate security into the development lifecycle Own the cultural shift to a Security DevSecOps mindset Manage & implement security controls, tools, and processes to secure applications and infrastructure Monitor and respond to security incidents and threats in a timely manner Stay up-to-date with security trends and best practices to continuously improve security posture Automate security testing and deployment processes to ensure rapid and secure delivery of software Develop and maintain security documentation and training materials Develop and implement the product security strategy in alignment with organisational goals Integrate Application Security Tools within existing Development Processes Assist with the Planning & Execution of Application Penetration Tests Serve as a Subject Matter Expert (SME) in the field of Application Security Define security NFR's and ensure these are met Report on compliance with security standards You'll be someone with: Strong experience in software development and security Proficient in scripting languages such as Powershell, YAML, JASON, etc. Collaborate with development teams to integrate security best practices into the secure software development lifecycle (SDLC) and ensure products are built securely Oversee vulnerability management and remediation efforts, including leading responses to pen test findings and security assessments Experience conducting risk assessments and threat modelling for software development and advise where necessary Experience in software security design review Strong knowledge of Agile, DevSecOps, System Engineer and or equivalent Knowledge of security standards and secure development principles such as NCSC Secure Development & Deployment Guidance, OWASP, NIST Secure Software Development Framework (SSDF - 800-218), Microsoft Azure Secure Development best practices, ISO27001 Experience with Azure cloud infrastructure, particularly Azure PaaS service Experience with Azure DevOps, particularly CI/CD and backlog management Prepare and present regular security reports to senior management, ensuring compliance with security standards and regulations Expertise with security tools and familiarity with DevSecOps processes Bachelor's or Master's degree in Computer Science, Cybersecurity, or related field (preferable) You'll be able to be yourself; we'll recognise and value you for who you are and celebrate and reward your contributions to the business. We're committed to agile working, and we offer every colleague the opportunity to work in ways that suit you, your teams, and the task at hand. At BDO, we'll help you achieve your personal goals and career ambitions, and we have programmes, resources, and frameworks that provide clarity and structure around career development. We're in it together Mutual support and respect is one of BDO's core values and we're proud of our distinctive, people-centred culture. From informal success conversations to formal mentoring and coaching, we'll support you at every stage in your career, whatever your personal and professional needs. Our agile working framework helps us stay connected, bringing teams together where and when it counts so they can share ideas and help one another. At BDO, you'll always have access to the people and resources you need to do your best work. We know that collaboration is the key to creating value for the companies we work with and satisfying experiences for our colleagues, so we've invested in state-of-the-art collaboration spaces in our offices. BDO's people represent a wealth of knowledge and expertise, and we'll encourage you to build your network, work alongside others, and share your skills and experiences. With a range of multidisciplinary events and dedicated resources, you'll never stop learning at BDO. We're looking forward to the future At BDO, we help entrepreneurial businesses to succeed, fuelling the UK economy. Our success is powered by our people, which is why we're always finding new ways to invest in you. Across the UK thousands of unique minds continue to come together to help companies we work with to achieve their ambitions We've got a clear purpose, and we're confident in our future, because we're adapting and evolving to build on our strengths, ensuring we continue to find the right combination of global reach, integrity and expertise. We shape the future together with openness and clarity, because we believe in empowering people to think creatively about how we can do things better.

Job Title: Lead Security Solution Architect- PAM Location: Hybrid-London, UK (Days/Week Onsite) Duration: 6months+ 550GBP/Day Inside IR35 Project Overview CLIENT is working on a strategic Identity and Access Management programme and is re-shaping the way Authentication, Federation, Privileged Access Management, Access Governance, Secrets Management and API Security is done across the bank. One of the pillars of that programe is Privileged Access Management (PAM). CLIENT is working on uplifting controls and capabilities in privileged access for the Group and introducing the strategic password vaulting solution that will enable to meet strategic requirements. We are seeking an experienced Lead Security Solution Architect that can complement an existing team of Solution Architects to progress with designs of different components of the PAM solution and other supporting systems it will need to integrate with as part of the end-to-end journey. Security Solution Architects manage end-to-end solution design and are responsible for delivering architecture design documents in line with functional and non-functional business requirements, strategies, principles, standards, and patterns. Alongside the creation of high-level designs, Security Solution Architects will be required to record key decisions, design deviations, and technical risks and issues where appropriate. Security Solution Architects should be comfortable presenting and sharing solutions at design authorities and senior leadership & stakeholders. The Lead Security Solution Architect will provide technical thought leadership and direction to their project team and may represent the project/programme as subject matter expert. This role will require someone experienced in managing a team of on-shore and off-shore resources to deliver High- and Low-level designs to the required quality and standard. Principal Preferred Requirements Cybersecurity Expertise: Significant experience and proven technical depth within one of the following domains of cybersecurity; security operations & incident response, threat & vulnerability management, identity & access management, cryptography, infrastructure, network, application, data, cloud Broad background across information technology with the ability to communicate clearly with non-security technical SMEs at a comfortable level Experience in both operational and transformation cybersecurity roles or a clear working understanding of both perspectives Experience working in large-scale IT transformation programmes Experience working with PAM solutions such as CyberArk, Centrify, Delinea and OneIdentity Preparing end-to-end configuration of the strategic PAM capability - including on-prem deployments as well as Cloud native toolings Assisting in preparation of demonstrable journeys on the configured PAM tooling Platform & Technology: BizzDesign, Archi, or generic UML visualisation experience for high-level designs High proficiency and expertise in Jira for project & tasks management Working proficiency in Confluence for documentation Principal Accountabilities and Responsibilities Architecture & Design: Produce, manage, and update end-to-end solution designs in line with reference architecture & business requirements (including High and Low Level Designs Articulate and publish key design decision records and options to ensure all solutions follow a logical, transparent decision-making process Articulate, publish, and ensure approval of any design deviations resulting in technical debt Ensure any technical risks or issues arising from a solution design are recorded and mitigated. Produces, manages and translates the requirements into the architecture for that solution, ensuring technology and services meet the customer needs and expected business outcomes Ensures the design of the solutions are efficient, timely and cost effective throughout the project life cycle Clear understanding of both the motivations of the business and technical security Promote strong documentation and clerkship Governance: Ensures all high-level designs, architecture patterns, decision records, deviation requests, and technical risks or issue records undergo architectural and project governance processes Ensure all architecture artefacts undergo appropriate peer review prior to design authority presentation Present publications at technical design authorities for input, feedback, and approval Risk and Dependency Management: Effectively manages and escalates both technical and project risks or issues Articulates solutions and remediation steps to technical risks & issues Ability to map design decisions to resultant technical risks & issues to articulate the cause and rationale which leads to any negatively impacting change Leadership & Teamwork Provides technical thought leadership to the Design Team and the Project Ability to manage a project team of technical architects, engineers, and/or analysts Ability to take a deputised role in programme management-related tasks where necessary Qualifications & Certifications: Masters or doctorate degree in cybersecurity, computer science, software engineering, or related field CISSP/CISM certification or other broad cybersecurity industry-recognised certificate SABSA or TOGAF certified preferred Priyanka Sharma Senior Delivery Consultant

VMWare Engineer, Storage, Back Up, Infrastr uctu re, Cloud, Automation. A leading provider of financial solutions is seeking a solid and reliable VMware Engineer with a solid range of skills. The role: This area of the business plans, builds and runs the global infrastructure and is additionally responsible for the IT service management to the operating entities of the various Group markets. The Virtual Infrastructure Services team is committed to bringing the best computing experience to the internal clients (platforms, office and business applications) Responsibilities: Installation, Configuration, and Maintenance: Install, configure, and maintain our technologies within the IT infrastructure. This includes ensuring that all software and hardware components are up-to-date and functioning correctly. System Monitoring and Performance Tuning: Implement and use monitoring tools to ensure system availability and performance. Perform routine system audits and capacity planning Collaboration and Documentation: work with development teams and other IT staff to support infrastructure needs and maintain comprehensive documentation of systems and procedures Security Management: implement and maintain security best practices for infrastructure, including patch management, antivirus solutions, and vulnerability assessments (Support) The automation of recurrent activities Propose harmonisation of existing automation developments. Participate in the Day-to-Day service support (incident, alerts, changes. Provide on-call support during out-of-business hours (24/7 watch duty)- one is every eight weeks. Take part in the disaster recovery management for the virtual infrastructure. Offer consulting services to "OS" teams (Windows, Linux, Office, Tandem, Mainframe), projects and other customers Develop solutions based on analysis of business and technical requirements. Develop the architecture and design of projects Develop effective relationships with other key IT experts Skills Required: Solid background in service engineering or service operations Backup platforms, with at least 2 years' experience with Cohesity in larger IT environments Storage platforms (S3, file solutions), within an enterprise environment. Good knowledge of the management of VMware virtualization environments Nutanix hyper-converged infrastructures Good knowledge of converged infrastructures (Vxblock) You are passionate about automation and DevOps Knowledge and experience in Ansible, Tower, and PowerShell. Experience with storage infrastructure management is a plus You are fluent in English, and knowledge of French or Dutch is a plus, but not essential. Working experience in an Agile context Drive and energy, entrepreneurial demeanour, hands-on mentality Open to working in a fast-moving technical and human environment Able to quickly diagnose system problems and implement solutions to restore functionality Continuing to perform efficiently during difficult situations with high pressure. Good collaborator with others as part of a larger team. Open to change and evolution. Be able to work with strict deadlines and handle complex situations. VMWare Engineer, Storage, Back Up, Infrastructure , Cloud, Automation. McGregor Boyall is an equal opportunity employer and do not discriminate on any grounds.

Principal Cybersecurity Machine Learning Engineer The position is a senior technical role, requiring knowledge of data engineering, data science, advanced analytics techniques, research and development, and innovation within one or more of the Cybersecurity sciences (e.g. network, endpoint and cloud security, cryptography, malware analysis, vulnerability assessment, privileged access management, anomaly/intrusion detection, incident response, or offensive security). The Principal Cybersecurity Analytics Engineer role is a key leadership, hands on technical role, contributing to, coordinating, and leading delivery of advanced analytics solutions to cybersecurity problems through rapid development of prototypes, engineering of production solutions, and exploration of longer term, potentially ground-breaking technologies. Cybersecurity-specific knowledge is required for the role, but exceptional candidates from other disciplines will also be considered. The ideal candidate will possess strong technical skills, an eagerness to learn, a keen interest in Cybersecurity, the ability to work collaboratively in a fast-paced environment, and an aptitude for picking up new tools and techniques on the job, building on existing skillsets as a foundation. You will have access to tailored professional development opportunities and a competitive pay and benefits package. This includes private healthcare for all UK-based employees, enhanced maternity and adoption pay and support when you return to work, and a contributory pension scheme with a generous employer contribution. In this role you will: Data Engineering Ingestion and provisioning of datasets, delta tables, and/or curated, re-usable data assets to enable Cybersecurity use cases. Support and enhancement of data ingestion infrastructure and pipelines. Platform Operations and Production Support Provide maintenance and run support for landing zones/cloud workspaces operated on behalf of Cybersecurity teams. Cybersecurity Sciences Research & Development (R&D) and Innovation Drive innovative research & development to test and evolve new technologies and advanced analytic techniques. Explore and develo innovative capabilities, exploiting emerging technologies and data science to help stay ahead of advancing cyber threats. Rapid Response Respond to urgent requests to address vulnerabilities or emerging threats. Advanced Analytics & Security Software Development Support Cybersecurity teams in using data and advanced analytic technologies effectively to enhance operations and inform decisions. Deliver critical analytics engineering requirements across Cybersecurity. Develop new data products, analysis platforms, and custom AI solutions to enable Cybersecurity teams to monitor controls more effectively, automatically detect and triage malicious activity, optimise manual tasks, better protect HSBC, and meet the needs of customers. Develop new models, detections, and automations to protect against advanced and emerging threats and help Cybersecurity operate efficiently and effectively at scale. Develop custom security applications, APIs, and data-driven services in support of the Cybersecurity mission. To be successful in this role you should meet the following requirements: Strong Data Technology skills, with the ability to build, operate, maintain and support loud infrastructure & data services at scale Extensive experience of Big Data Technologies (Databricks, Spark etc) Cloud Infrastructure & Platform Engineering experience (Azure preferred) The ability to conduct cybersecurity industry research and rapidly develop data-driven prototypes for live business problems faced by Cybersecurity teams Experience developing custom security applications, APIs, AI/ML models, detections, automations, and advanced analytic technologies to mitigate against current and emerging threats The ability to act as a Cybersecurity data domain expert and advise stakeholders how to use data and analytics to drive business change and improvement Proficiency in applying data science and advanced analytics techniques to the Cybersecurity domain and its associated datasets Full Stack Engineering and custom security software development experience with proficiency in programming languages such as Python, Java, C#, or similar preferred. This role can be based in Sheffield or Birmingham or London

Avanti recruitment is currently working with a leading award-winning FinTech company based near Epsom, who are looking for a Engineering Manager who is looking to stay close to the code. You'll spend between 30-50% of your time coding, and the rest of your time on people leadership and delivery management. This role is central to a major modernisation project, moving from a legacy monolithic application to a modern microservices and cloud-based architecture. This role will require you on-site 4 days per week, with 1 day remote working. Your responsibilities: Own delivery within a small, high-performing team (currently 3 developers + 1 SRE). Stay hands-on with Java, Spring Boot, microservices, AWS, Docker, Kubernetes and guide best practice. Run daily stand up meetings Lead on system design and architecture for services and modernisation of legacy code Provide day to day technical and people leadership (Mentoring, 1-to-1s, conflict resolution and career progression) Implement escalation and incident management processes, ensuring resilience and reliability Report on progress to the Head of Technology, and keep them up to date with progress reports Act as a bridge between development, operations and other business functions (e.g. Trading, Change) Experience required Must have people leadership experience (1-2-1's, escalation point, disciplinary action when needed etc) Strong hands on Java coding skills Experience in either cloud platforms (AWS preferred), or DevOps experience Docker/Kubernetes & CI/CD Pipelines Track record of leading teams or projects, this could be as a Tech Lead / Principal Engineer or Engineering Manager Exposure to incident management, monitoring and resilience tools (Prometheus, Grafana, ELK etc) Awareness of Security - dependency scanning, vulnerability management Strong communication skills, able to collaborate with stakeholder, present updates and represent engineering in wider discussions This role will have an element of hands-on development so you must be comfortable still coding, as this could take up 30-50% of your time. The company is planning on expanding in the next year, so this is a great time to elevate your career. Salary up to £100,000 + 27 days holiday. If you are interested in discussing then click Apply Now

Senior Application Security Engineer | Permanent | UK (Hybrid - a few times per month) | £84k We're working with a forward-thinking professional services firm on a key hire to embed security into every part of their digital product journey. They're looking for a Senior Application Security Engineer to drive secure-by-design principles across new and evolving applications and act as a Subject Matter Expert for software security across the business. This is a high-impact role in a collaborative, ambitious, and people-focused IT team. You'll play a hands-on role, shaping security culture, guiding engineering teams, and ensuring that security is integrated into every stage of the software development life cycle. What you'll be doing: Leading the cultural shift towards secure software development across product teams Defining and implementing the software security strategy in line with business goals Collaborating with developers to automate security testing and embed security requirements into the SDLC Supporting penetration testing, vulnerability management, and remediation efforts Acting as a software security SME, advising teams on secure design, risk, and compliance Maintaining security documentation, training materials, and processes Reporting on compliance and security posture to senior leadership What we're looking for: Strong background in software development and security - comfortable with both code and risk Proven experience embedding security into agile development environments Hands-on with cloud platforms and CI/CD pipelines, plus Scripting languages such as PowerShell, YAML, or JSON Knowledge of application security tools, threat modelling, and risk assessments Familiarity with standards/frameworks such as OWASP, NIST SSDF, ISO27001, NCSC Experience guiding engineering teams and influencing security culture Excellent communication skills, able to engage confidently with developers and senior leadership Why join them? You'll be part of a forward-thinking IT team that values your input and invests in your development. This is your chance to shape the security of innovative digital products, influence the business's secure software culture, and work in a flexible hybrid environment. Location: London office (hybrid, a few times per month) Salary: Up to £84,000 If you're a software security professional ready to lead, mentor, and make a real impact, send your CV for immediate consideration. Modis International Ltd acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers in the UK. Modis Europe Ltd provide a variety of international solutions that connect clients to the best talent in the world. For all positions based in Switzerland, Modis Europe Ltd works with its licensed Swiss partner Accurity GmbH to ensure that candidate applications are handled in accordance with Swiss law. Both Modis International Ltd and Modis Europe Ltd are Equal Opportunities Employers. By applying for this role your details will be submitted to Modis International Ltd and/or Modis Europe Ltd. Our Candidate Privacy Information Statement which explains how we will use your information is available on the Modis website.

About the role: Join Our Team at Holland & Barrett! Are you passionate about cloud security and looking to make a significant impact? Holland & Barrett is seeking a Cloud Security Specialist to help us define and implement our cloud security strategy. If you're an experienced professional eager to work with cutting-edge technology and collaborate with diverse teams, we want to hear from you! Key Responsibilities: Security Strategy: Help define and execute the Holland & Barrett cloud security strategy, partnering with platform and Site Reliability Engineering (SRE) teams to build robust infrastructure that supports our business. Perimeter Security: Establish platform perimeter security by implementing controls at ingress and egress points, including creating and maintaining an edge network with a Web Application Firewall (WAF), Distributed Denial of Service (DDoS) protection, and a Content Delivery Network (CDN). Access Control: Establish an access control baseline focusing on the principle of least privilege and segregation of duties. Monitor and enforce these controls once roles and permissions are set. Security Controls: Design, implement, and maintain security controls to prevent, detect, and remediate insecure configurations, including defining and disseminating secure AWS/infrastructure baselines. Standards Development: Own the development and maintenance of tailored security standards and guidelines, creating reusable resources for various development teams. AWS Security Services: Establish and manage AWS security services, including certificate authorities, encryption services, insecure configuration scanners, and security control canaries. Key requirements: Essential: 5+ years of experience in cloud security, particularly with AWS, and at least 2+ years in software development. Strong understanding of cloud and application security concepts, including secure coding practices, threat modeling, vulnerability management, and access control mechanisms. Experience with AWS, Kubernetes, Service Mesh, API gateways, and API Security (authentication and authorization). Proficiency in programming languages such as Python, JavaScript, GoLang, Terraform, CloudFormation (AWS), and AWS CDK. Familiarity with Agile methodologies like SCRUM, along with proven project management skills to manage multiple security projects effectively. Desired: Ability to work independently, take initiative, and maintain a keen attention to detail, ensuring high security standards. Strong communication and interpersonal skills, facilitating effective collaboration with both technical and non-technical teams. Why Holland & Barrett? At Holland & Barrett, we are dedicated to promoting health and well-being while ensuring the highest standards of cloud security. Join our team and be part of a company that values innovation and security. Ready to Make an Impact? If you're excited about cloud security and want to contribute to a secure future, apply now! We look forward to welcoming you to our team. We support flexibility and productivity of our employees by hybrid working arrangements. Although your role will be based in London (or Nuneaton, or Amsterdam) you will be required to travel only occasionally to our Hubs in Nuneaton or London or to any other location of H&B. What we offer: Pension company contribution = 3% Incentive scheme up to 10% of annual salary , based on company performance. Your wellbeing is paramount so you can get away and take 33 Days Holiday per year . Private Medical Care (Self after 1 year) Learning and Development opportunity with Holland & Barrett is a great base for career development long term. Career progression. Refer and Earn Scheme - as we're growing you can earn money by referring people to join us from your network. Epic Extras gives you access to exclusive benefits, free advice and savings from a range of retailers and providers. Stay healthy with Discounted Products - from day one you'll get a 25% discount (on top of other promotions) when you shop at H&B on anything that you buy. We all need a little help sometimes, so weoffer Free 24/7 Confidential Advice & Colleague Welfare . Mental Health First Aiders - we have lots of qualified Mental Health First Aiders because its all about your health & wellbeing. Stay active in the Onsite Gym at our Nuneaton Hub! We have colleague Reward and Recognition Schemes , so your hard work and loyalty won't go unnoticed. And many more! We're passionate about helping every colleague thrive across all dimensions of wellbeing, and we're committed to having a diverse and inclusive workplace. In line with our EPIC values (Expertise, Pioneering, Inclusive, Caring), we embrace and actively celebrate all our colleagues' unique and varying experiences, backgrounds, identities and cultures - I am me, we are H&B. Holland & Barrett does not accept unsolicited resumes from search firms/recruiters. Please do not forward resumes to our job alias, employees, or any other company location. Holland & Barrett is not and will not be responsible for any fees if a candidate submitted by a search firm/recruiter unless otherwise agreed with respect to specific open position(s).