TELSTRA Associates

A leading Professional Services company is seeking a Security Engineer IAM on a contract basis to work on an exciting project with a financial services client. You will be required to work onsite in London 4-5 days a week. Please DO NOT apply unless you can commit to this. The Security Engineer IAM must have the following skills: Minimum of 3 years of hands-on experience working with cloud-native services in AWS or GCP. Experience in the design and implementation of enterprise security solutions in Financial Services or a large complex and/or global environment Highly motivated self-starter with excellent interpersonal and communication skills Ability to work independently, multi-task, and take ownership of various parts of a project or initiative. Relevant certifications such as CISSP, AWS Certified Security Specialty, Google Professional Cloud Security Engineer are desirable Experience with infrastructure as code (IaC) tools: Terraform and CloudFormation Proficiency in Python, Go or Java Proficiency in unit testing frameworks such as Behave, pytest or Junit Proficiency in developing and securing SOAP and REST based web service APIs Experience in DevOps and agile methodologies and automated solution delivery and testing through CI/CD pipelines The Role: Collaborate with cross-functional cloud teams including security, infrastructure, service engineering and business application teams to define and implement IAM roles and policies required to build, support and consume services in public cloud. Define and develop security controls and tools to ensure IAM implementation in public cloud environments are compliant with cloud security standards and policies. Build automation and libraries to enable developers to create IAM identities and permissions through self-service. Deliver IAM solutions through CI/CD pipelines with automated testing and validation.

A leading Professional Services organization is seeking an Information Security Officer ISO IAM Cloud on a contract basis to work on an exciting project with a financial services client. You will be needed onsite in London 4-5 days a week, please DO NOT apply unless you can commit to this. The Information Security Officer is a senior level professional position responsible for driving efforts to prevent, monitor and respond to information/data breaches and cyber-attacks. The overall purpose of this role is to ensure the execution of Information Security (IS) directives and activities in alignment with Citi's information and cybersecurity policy within the supported business units, primarily Citi Technology Infrastructure. The Security Officer ISO IAM Cloud must have the following skills and experience. Strong understanding of cloud security architectures (ie AWS Well-Architected Framework, Google Cloud Security Command Centre). Knowledge of the Identity and Access management (IAM) security models of AWS and GCP. In-depth knowledge of cloud infrastructure and architecture (eg VPC, EC2, S3, Cloud Storage and Compute Engine. Familiarity with compliance and risk frameworks (NIST, ISO 27001, CSA STAR) Experience in business engagement for Information Security, Risk or Control & Compliance, IT Analysis/Design or Program/Project Management. Perform Information Security risk assessments and familiarity with Information Security Risk Governance. At least 2 years' experience securing cloud environments particularly AWS and GCP Bachelors degree or higher (Computer Science or Cybersecurity preferred) or equivalent work experience. Industry certifications such as CISSP/CISM/CCSP are desired. Have good communication skills with the ability to articulate clearly in high stress situations. Self-starter with good problem-solving skills. Proven influencing and relationship management skills. Familiarity with IaC security (Terraform, CloudFormation) Advanced proficiency with Microsoft Office tools and software. Public Cloud Solution Architect or Security Certifications are plus (ie AWS Certified Solution Architect, GCP Professional Cloud Security Engineer) Responsibilities: Identify opportunities to automate and standardize information security controls and for the supported groups. Resolve any vulnerabilities or issues detected in an application or infrastructure. Analyze source code to mitigate identified weaknesses and vulnerabilities within the system. Review and validate automated testing results and prioritize actions that resolve issues based on overall risk. Scan and analyze applications with automated tools, and perform manual testing if necessary. Reduce risk by analysing the root cause of issues, their impact, and required corrective actions. Direct the development and delivery of secure solutions by coordinating with business and technical contacts. Contribute to execution of the architectural vision for all IT systems through major, complex IT architecture projects. Security Architecture: Collaborate with IT to ensure system architecture follows corporate policies and IT best practices. Risk management: Identify, assess and mitigate security risks. Identify application compensating controls for non-compliant items. Provide technical leadership and is responsible for developing components of, or the overall systems design. Translate complex business problems into sound technical solutions. Provide integrated systems planning and recommends innovative technologies that will enhance the current system. Recommend appropriate infrastructure platforms, and communication links required to support IT goals and strategy. Impact the architecture function by influencing decisions through advice, counsel or facilitating services. Guide, influences and persuades others with developed communication and diplomacy skills.

ISRP Contractor IT Cyber Security Consultant London Hybrid £450-£500+ per day inside Looking for a strong ISRP Contractor IT Cyber Security Consultant to work for an exciting client on a new project in London. Job Purpose: To perform of information security review of infrastructure products before they are rolled out into production, and to provide results of this review to Information Security Officers and support them in the remediation of any findings. Key Responsibilities: Perform the information security review of infrastructure products and verify their compliance to the Information Security Standards (CISS). Work client's engineering teams and third-party vendors to obtain information required for the security review of these infrastructure products. Evaluate the security and compliance of the products by reviewing documentation and by hands-on testing. Document any findings, security breaches and non-compliant items. Investigate how non-compliant items can be remediated or how their risk could be mitigated and provide recommendations. Support Information Security Officers in their work for remediating any non-compliant items.

Threat Modeling IT Cyber Security Consultant London Hybrid £450-£500+ per day inside Looking for a strong Threat Modeling IT Security Consultant to work on a new project in London. Responsibilities Threat Modeling using a documented process. Development of automation tools as required. Maintain a high standard of work in identifying threats and specifying mitigating controls. Attending to the life cycle of identified threats and controls. Delivery of threat models and supporting tasks within existing timeframes. Provide feedback, support, and improvements to the existing threat modelling process. Present work to seniors, the team, and other technical teams. Work with little supervision to complete work Develop, test, and deploy secure and efficient Python-based applications, adhering to established SDLC processes and quality standards. IT experience minimum of 6 years with minimum of 4 years Cyber-Security/Information Security - must Threat Modeling (STRIDE, PASTA, Attack trees, tooling, Att&ck) - must . Identifying vulnerabilities using CWE or OWASP. Experience working in a cyber-security role - must . Security practices pertaining to authentication, authorization, logging/monitoring, encryption, infrastructure security, network/segmentation - must . Operating systems and their hardening.

React Software Engineer (Apply online only) per day inside Sussex remote hybrid Looking for a strong React Software Engineer to work with an interesting client on a new project. 3. Experience in Frontend technologies for web, including Typescript and frameworks such as React JS 4. Professional certifications in software engineering, architecture, or product management 5. At least couple of years of experience building, mentoring, and managing high-performance distributed engineering teams. 6. Hands-on experience developing data-driven UI and dynamic forms such as JSON-schema based forms. 7. Hands-on experience developing, improving, and testing application code towards industry-standard specifications or to meet compliance requirements. 8. React, JavaScript (ES6+), HTML5, and CSS3 9. Experience with React Hooks and functional component patterns 10. Experience with state management tools such as Redux and/or Context API 11. Experience with React Testing Library or similar testing frameworks 12. Experience integrating with RESTful APIs 13. Familiarity with JSON and web service technologies 14. Understanding of performance optimization techniques for web applications 15. Participate in code reviews to ensure high standards of code quality and performance 16. Experience working in agile development environments.