5 jobs found

Cybersecurity Vulnerability Lead - £700 per day - Inside IR35 - Remote - 6 Months initial contract. Our client, the UKs leading producer of Zero Carbon energy, is looking for a Cybersecurity Vulnerability Lead to join them on a contract basis. This is a senior role with responsibility for the organisation s vulnerability management programme across multiple business units, technologies, and regulatory environments. The organisation has made significant investment in Tenable as its core vulnerability management platform. You ll be expected to lead its strategic and day-to-day usage, ensuring vulnerabilities are accurately identified, prioritised, and remediated while driving continuous improvement in how the platform is integrated and utilised. Candidates with strong Tenable expertise, particularly those who have embedded it at scale in large or regulated environments such as financial services, will be especially attractive for this role. Security Clearance - Due to the sensitive nature of the work, candidates must be eligible for SC clearance. Candidates with active or recently lapsed SC clearance will be prioritised. Applicants without clearance must be willing and eligible to undergo vetting. The Role - As Cybersecurity Vulnerability Lead, you will: Own the end-to-end vulnerability management programme, with Tenable One at the core. Define and deliver the strategy, policies, SLAs, and operating rhythm. Lead on risk-based prioritisation using exploit intelligence, asset criticality, and business impact. Translate scan data into clear, actionable remediation plans for technical teams. Build dashboards and executive reports (ServiceNow, Power BI). Provide rapid risk assessments and emergency patch governance during incidents. Support audits and regulatory compliance (ISO27001, CE+, GDPR, NIS2, ONR). Drive automation, integrating tools and workflows to improve efficiency. Act as subject matter expert for Tenable and related tooling, ensuring platforms are fully leveraged. Mentor analysts and security champions, building maturity across the team. About You - You will bring experience leading vulnerability management at enterprise scale, ideally in financial services or similarly regulated industries. You should also have hands-on knowledge of the following: Core Vulnerability Management - Tenable One (Exposure Management, Attack Surface Management, Attack Paths, Identity) AWS Inspector Agent-based and network-based scanning Cloud integrations (AWS, Azure, GCP) Dashboards and risk-based prioritisation Patch & Endpoint Management - Microsoft Intune / SCCM / WSUS Jamf Workflow & ITSM Integration - ServiceNow (dashboards, SOAR) Jira Cloud & Application Security - AWS Security Hub Azure Defender for Cloud Veracode Threat Intelligence & Exploit Context - Tenable Threat Intelligence Exploit DB Metasploit SIEM, SOAR & Monitoring - Microsoft Sentinel SOAR platforms (ServiceNow SOAR) Automation & Scripting - Python, PowerShell, Bash, Ansible Reporting & Metrics - Power BI ServiceNow dashboards Excel (advanced analysis) Frameworks & Standards - NIST CSF, ISO 27001, OWASP, CE / CE+, GDPR, NIS2, ONR Security Domains / Capabilities - Identity and Access Management (IAM) Network Security Data Protection Cloud Security Controls Application Security Security Monitoring Processes & Practices - Vulnerability Management Programmes Incident Response and Threat Assessment Emergency Patch Governance Risk-based Prioritisation (CVEs, exploit intelligence, asset criticality, business impact) Audit Support (internal assurance, penetration test follow-ups, external audits) Exception and exemption management Automation of manual tasks Dashboarding for risk and SLA metrics What's on Offer - A leadership role with significant influence across a major UK organisation. Opportunity to work with a forward-thinking Cyber Services function pushing boundaries in vulnerability management.

Job Title: Cyber Security Incident Response Specialist Location: London, Wokingham, or Warwick (2 days per week onsite - hybrid working) Contract Duration: 6months + initially, with high potential for extension (long-term programme) Clearance: SC required or eligible THIS PROJECT IS INSIDE IR35 Project Overview: We are looking for an experienced Cyber Security Incident Response Specialist to join a high-impact security programme supporting the resilience of UK critical national infrastructure (CNI) . You'll join a team responsible for responding to cyber threats across both cyber and physical domains - helping to manage the full incident life cycle, improve response maturity, and develop scalable IR documentation and exercises. This is a specialist role for someone with real-world IR experience and the ability to assess, escalate, and coordinate technical and business responses. Key Responsibilities: Lead or support incident response (IR) activities across the full life cycle: detection, triage, containment, eradication, recovery, and lessons learned Develop and maintain IR playbooks, plans, and post-incident reports Support post-incident reviews , including root cause analysis (RCA) and lessons learned sessions Design and deliver incident response exercises (eg tabletop simulations) Act as a subject matter expert (SME) for incident response processes and frameworks Collaborate with SOC teams, technical SMEs, and non-technical stakeholders Communicate IR outcomes effectively via reports, presentations, and briefings Build working relationships across internal security functions and external CNI/regulatory stakeholders Mandatory Requirements (Must-Have): Strong, recent experience in cybersecurity incident response Ability to make informed decisions during incidents (triage, escalate, communicate) Experience working in Critical National Infrastructure (CNI) sectors - eg utilities, energy, telco, banking, health, defence, or transport Working knowledge of NIST, MITRE ATT&CK , or equivalent frameworks Proven ability to communicate IR findings to technical and non-technical audiences Experience contributing to or owning IR playbooks, SOPs, or RCA documentation Must hold current SC clearance or have been previously cleared within the last 12-18 months Desirable Skills (Nice-to-Have): Experience within the energy or utilities sector Exposure to OT/ICS environments (eg SCADA, PLCs, DCS) Experience delivering or supporting tabletop IR exercises Familiarity with tools like Microsoft Sentinel, Defender, Splunk, QRadar, Tenable, CrowdStrike, etc. Industry certifications such as CISSP, GCFA, GEIR, CCIM, CISM, CEH , or equivalent What We're Not Looking For: Junior SOC analysts (L1/L2 triage only) Generalist cyber roles without deep IR exposure Candidates without experience in CNI or enterprise-scale IR

IT Security Engineer (Security Frameworks and Domains) working on an initial 6 month contract (initially) based in Uxbridge, West London paying £450 to £500 per day. The Opportunity: Working as a contract Senior IT Security Engineer, your role is working as a key member of the Information Security and Privacy team that works closely with Infrastructure and Application services teams to ensure that all applications and systems are built, maintained and protected in accordance with policies, standards, and compliance requirements so that the risk is managed appropriately. The successful candidate will assist with developing and implementing appropriate network security solutions with desired end state of the Information Security and Privacy programs. Skills and Experience: • Information Security Certification (CISSP, CISM, CCNA, CCNP, GSEC, etc) or other related security certification is highly desired • Any experience working with any of the following is a major bonus: Palo Alto Networks, Cisco ASA, Sourcefire, FireEye • Candidates must have a good understanding of the security domains (Audit and Monitoring, Risk Response and Recovery, Cryptography, Data Communications, Computer Operations Security, Telecommunications and Network Security, Security Architecture and Models) • Strong knowledge of Security Frameworks (ISO 27002, NIST 800-53, COBIT, HITRUST) • In depth knowledge of networking and network routing protocols (OSPF, BGP, ISIS, EIGRP) • Degree qualified and Microsoft, Linux, Unix, and Cisco certifications would be a distinct advantage Role and Responsibilities: • You will be responsible for the end-to-end product lifecycle of enterprise network security solutions to include the solution architecture, design, integration, and testing • Reviewing and analysing existing enterprise network security solutions for effectiveness and efficiency, and develop strategies to improve or enhance configuration and design • Manage the development and deployment of new network security solutions and enhancements to existing network security solutions • Provide technical leadership and vision around network security monitoring, implementation and processes with balance of scalability, stability, cost, robustness and flexibility • Assist in formulating network security solution architecture recommendations and design network security services. • Conduct “Risk and Vulnerability” assessments and recommend preventive measures to reduce risk • Liaise with system and network administrators to assist with implementation and problem resolution for enterprise network security solutions • Design, implement, test security controls and manage the associated remediation as needed for network security infrastructure and technology • Acting as a subject matter expert, builds, consults, validates, and verifies system security designs Applications: To learn more about this exciting new role working as an IT Security Engineer on an initial 6 month contract based in Uxbridge, West London paying Market Rates; please call and speak with Ruth Maskrey here in our Manchester Offices on (Apply online only) or email me a copy of your very latest CV for an immediate call back

IT Security Engineer (Security Frameworks and Domains) working on an initial 6 month contract (initially) based in Uxbridge, West London paying £450 to £500 per day. The Opportunity: Working as a contract Senior IT Security Engineer, your role is working as a key member of the Information Security and Privacy team that works closely with Infrastructure and Application services teams to ensure that all applications and systems are built, maintained and protected in accordance with policies, standards, and compliance requirements so that the risk is managed appropriately. The successful candidate will assist with developing and implementing appropriate network security solutions with desired end state of the Information Security and Privacy programs. Skills and Experience: • Information Security Certification (CISSP, CISM, CCNA, CCNP, GSEC, etc) or other related security certification is highly desired • Any experience working with any of the following is a major bonus: Palo Alto Networks, Cisco ASA, Sourcefire, FireEye • Candidates must have a good understanding of the security domains (Audit and Monitoring, Risk Response and Recovery, Cryptography, Data Communications, Computer Operations Security, Telecommunications and Network Security, Security Architecture and Models) • Strong knowledge of Security Frameworks (ISO 27002, NIST 800-53, COBIT, HITRUST) • In depth knowledge of networking and network routing protocols (OSPF, BGP, ISIS, EIGRP) • Degree qualified and Microsoft, Linux, Unix, and Cisco certifications would be a distinct advantage Role and Responsibilities: • You will be responsible for the end-to-end product lifecycle of enterprise network security solutions to include the solution architecture, design, integration, and testing • Reviewing and analysing existing enterprise network security solutions for effectiveness and efficiency, and develop strategies to improve or enhance configuration and design • Manage the development and deployment of new network security solutions and enhancements to existing network security solutions • Provide technical leadership and vision around network security monitoring, implementation and processes with balance of scalability, stability, cost, robustness and flexibility • Assist in formulating network security solution architecture recommendations and design network security services. • Conduct “Risk and Vulnerability” assessments and recommend preventive measures to reduce risk • Liaise with system and network administrators to assist with implementation and problem resolution for enterprise network security solutions • Design, implement, test security controls and manage the associated remediation as needed for network security infrastructure and technology • Acting as a subject matter expert, builds, consults, validates, and verifies system security designs Applications: To learn more about this exciting new role working as an IT Security Engineer on an initial 6 month contract based in Uxbridge, West London paying Market Rates; please call and speak with Ruth Maskrey here in our Manchester Offices on (Apply online only) or email me a copy of your very latest CV for an immediate call back

IT Security Engineer (Security Frameworks and Domains) working on an initial 6 month contract (initially) based in Uxbridge, West London paying £450 to £500 per day. The Opportunity: Working as a contract Senior IT Security Engineer, your role is working as a key member of the Information Security and Privacy team that works closely with Infrastructure and Application services teams to ensure that all applications and systems are built, maintained and protected in accordance with policies, standards, and compliance requirements so that the risk is managed appropriately. The successful candidate will assist with developing and implementing appropriate network security solutions with desired end state of the Information Security and Privacy programs. Skills and Experience: • Information Security Certification (CISSP, CISM, CCNA, CCNP, GSEC, etc) or other related security certification is highly desired • Any experience working with any of the following is a major bonus: Palo Alto Networks, Cisco ASA, Sourcefire, FireEye • Candidates must have a good understanding of the security domains (Audit and Monitoring, Risk Response and Recovery, Cryptography, Data Communications, Computer Operations Security, Telecommunications and Network Security, Security Architecture and Models) • Strong knowledge of Security Frameworks (ISO 27002, NIST 800-53, COBIT, HITRUST) • In depth knowledge of networking and network routing protocols (OSPF, BGP, ISIS, EIGRP) • Degree qualified and Microsoft, Linux, Unix, and Cisco certifications would be a distinct advantage Role and Responsibilities: • You will be responsible for the end-to-end product lifecycle of enterprise network security solutions to include the solution architecture, design, integration, and testing • Reviewing and analysing existing enterprise network security solutions for effectiveness and efficiency, and develop strategies to improve or enhance configuration and design • Manage the development and deployment of new network security solutions and enhancements to existing network security solutions • Provide technical leadership and vision around network security monitoring, implementation and processes with balance of scalability, stability, cost, robustness and flexibility • Assist in formulating network security solution architecture recommendations and design network security services. • Conduct “Risk and Vulnerability” assessments and recommend preventive measures to reduce risk • Liaise with system and network administrators to assist with implementation and problem resolution for enterprise network security solutions • Design, implement, test security controls and manage the associated remediation as needed for network security infrastructure and technology • Acting as a subject matter expert, builds, consults, validates, and verifies system security designs Applications: To learn more about this exciting new role working as an IT Security Engineer on an initial 6 month contract based in Uxbridge, West London paying Market Rates; please call and speak with Ruth Maskrey here in our Manchester Offices on (Apply online only) or email me a copy of your very latest CV for an immediate call back