Heartflow is a medical technology company advancing the diagnosis and management of coronary artery disease, the cause of death worldwide, using cutting-edge technology. The flagship product-an AI-driven, non-invasive cardiac test supported by the ACC/AHA Chest Pain Guidelines called the Heartflow FFRCTAnalysis-provides a color-coded, 3D model of a patient's coronary arteries indicating the impact blockages have on blood flow to the heart. Heartflow is the first AI-driven non-invasive integrated heart care solution across the CCTA pathway that helps clinicians identify stenoses in the coronary arteries (RoadMap Analysis), assess coronary blood flow (FFRCTAnalysis), and characterize and quantify coronary atherosclerosis (Plaque Analysis).Our pipeline of products is growing and so is our team; join us in helping to revolutionize precision heartcare. Heartflow is a publicly traded company (HTFL) that has received international recognition for exceptional strides in healthcare innovation, is supported by medical societies around the world, cleared for use in the US, UK, Europe, Japan and Canada, and has been used for more than 500,000 patients worldwide. Job Title: Technical Solutions Analyst - EMEA Location: UK / Ireland Position Overview The Technical Solutions Specialist is a critical, hybrid role that serves as a technical consultant, Tier 3 support expert, and solutions analyst for Heartflow's non-invasive FFRct diagnostic technology. This position serves as the support bridge between our complex SaaS platform and our clinical customers. It requires deep expertise in Healthcare IT (HIT), networking, and systems engineering to guide complex implementations, and drive proactive product improvements. Key Responsibilities I. Clinical Implementation & Customer Success Guide and support customers through the technical lifecycle of our unique SaaS non-invasive diagnostic technology. Act as the frontline support resource for information on HeartFlow's technology, including network protocols, security and data protections associated with the transfer of medical imaging data over the Internet, cloud hosted platforms, and SaaS solutions. Contribute to HeartFlow's worldwide adoption of the novel FFRct product by providing knowledgeable and prompt responses to high-level customer inquiries and issues. Provide prompt documentation and complete resolution of reported issues and actively manage and expand the technical knowledge base. Work closely with the solutions engineering team to help deploy solutions that work within the existing infrastructure and workflow, overcoming technical and political obstacles that may arise. Assists Sales, Customer Support, Clinical Research and Technology teams in troubleshooting and alleviating customer issues. Assist with the roll-out of new HeartFlow products and services to existing and new customer base. Execute daily/weekly technical tasks to support regional sales initiatives. II. Advanced Technical Analysis & Solutions Engineering Serve as the Tier 3 escalation point for complex application and platform issues. Perform advanced troubleshooting related to clinical workflows, system integrations, underlying platforms and network components. Follow scripts, tooling, and automation workflows to streamline support operations and contribute to long-term system stability. Analyze recurring support incidents to identify systemic pain points and propose viable architectural or process improvements, collaborating with Development teams on hotfixes and patches. Demonstrate the discipline to work independently, rapidly assess priorities, and solve new technical challenges. Networks & troubleshooting: routing, firewalls, connectivity, latency issues. Security - Secure data protocols, encryption, web services, SSL certificates and keys. Operating systems: Windows and Linux deployment, diagnosis & troubleshooting. Hypervisors - Virtual Machines and mainstream Virtual application solutions. III. Data Feedback & Cross-Functional Leadership Deliver structured customer feedback into HeartFlow's Customer Relationship Management (CRM) system. Help team members analyze and distill technical and usage data to drive improvements in technology and underlying infrastructure. Contribute actively to the high-performing, global team by sharing new information and leveraging group wisdom to enhance team capabilities. Work cross-functionally to coordinate resources, support and information. Required Skills & Qualifications Technical Systems & Healthcare IT Expertise DICOM, Integration & Operability, Clinical workflows, PACS, HIPAA requirements, and PHI protections. Microsoft Windows Server/Desktop, Linux (RHEL, Alma Linux) Python, scripting, Microsoft SQL, Networking: Demonstrated experience troubleshooting IP, routing, connectivity, and latency issues. Virtualization: Knowledge of virtualization technologies required; experience deploying and troubleshooting VMs and working knowledge of Hypervisors. Security: Deep understanding of data protection, encryption, web services, and certificates. SAML integrations: SSO Single-Sign-On, Multi-factor Authentication (MFA). Cloud hosted platforms & web app services: API's & Amazon Web Services (AWS) Experience supporting large-scale websites and/or web-based products. Proven ability to analyze logs, trace, and isolate performance bottlenecks in complex, distributed systems. Special Working Conditions: the responsibilities of this position sometimes require working evenings and weekends, with little advanced notice. Required to be on call 24/7 as needed, Occasional travel to customer locations ( Professional & Communication Skills Customer-Facing Experience: Demonstrated customer-facing skills with a positive, professional personality and comfort presenting in front of groups. Communication: Exceptional written and verbal communication skills (fluency in English required), with the ability to translate complex technical findings into easily understandable business language. Responsible, accountable, and possesses the ability to work well within teams and cross-functionally. Comfortable in high-pressure situations and adept at managing client expectations during critical periods. Competency in German, French, Italian, and/or Spanish is desirable.(EMEA Only) Educational & Experience Requirements Educational Preference: Engineering or B.S. in Computer Science preferred (or sufficient and relevant experience). Industry Experience: 3+ years' experience working in the health care industry. Technical Experience: Minimum of 3 years of professional experience in a technical support, DevOps, or systems engineering role. Experience providing customer and/or corporate sales support preferred. Experience in training, mentorship, and process development is a plus. Physical Demands of the Job: Remote - Office environment. Heartflow is an Equal Opportunity Employer. We are committed to a work environment that supports, inspires, and respects all individuals and do not discriminate against any employee or applicant because of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law. This policy applies to every aspect of employment at Heartflow, including recruitment, hiring, training, relocation, promotion, and termination. Positions posted for Heartflow are not intended for or open to third party recruiters / agencies. Submission of any unsolicited resumes for these positions will be considered to be free referrals. Heartflow has become aware of a fraud where unknown entities are posing as Heartflow recruiters in an attempt to obtain personal information from individuals as part of our application or job offer process. Before providing any personal information to outside parties, please verify the following: A) all legitimate Heartflow recruiter email addresses end with and B) the position described is found on our careers site at/
09/06/2026
Full time
Heartflow is a medical technology company advancing the diagnosis and management of coronary artery disease, the cause of death worldwide, using cutting-edge technology. The flagship product-an AI-driven, non-invasive cardiac test supported by the ACC/AHA Chest Pain Guidelines called the Heartflow FFRCTAnalysis-provides a color-coded, 3D model of a patient's coronary arteries indicating the impact blockages have on blood flow to the heart. Heartflow is the first AI-driven non-invasive integrated heart care solution across the CCTA pathway that helps clinicians identify stenoses in the coronary arteries (RoadMap Analysis), assess coronary blood flow (FFRCTAnalysis), and characterize and quantify coronary atherosclerosis (Plaque Analysis).Our pipeline of products is growing and so is our team; join us in helping to revolutionize precision heartcare. Heartflow is a publicly traded company (HTFL) that has received international recognition for exceptional strides in healthcare innovation, is supported by medical societies around the world, cleared for use in the US, UK, Europe, Japan and Canada, and has been used for more than 500,000 patients worldwide. Job Title: Technical Solutions Analyst - EMEA Location: UK / Ireland Position Overview The Technical Solutions Specialist is a critical, hybrid role that serves as a technical consultant, Tier 3 support expert, and solutions analyst for Heartflow's non-invasive FFRct diagnostic technology. This position serves as the support bridge between our complex SaaS platform and our clinical customers. It requires deep expertise in Healthcare IT (HIT), networking, and systems engineering to guide complex implementations, and drive proactive product improvements. Key Responsibilities I. Clinical Implementation & Customer Success Guide and support customers through the technical lifecycle of our unique SaaS non-invasive diagnostic technology. Act as the frontline support resource for information on HeartFlow's technology, including network protocols, security and data protections associated with the transfer of medical imaging data over the Internet, cloud hosted platforms, and SaaS solutions. Contribute to HeartFlow's worldwide adoption of the novel FFRct product by providing knowledgeable and prompt responses to high-level customer inquiries and issues. Provide prompt documentation and complete resolution of reported issues and actively manage and expand the technical knowledge base. Work closely with the solutions engineering team to help deploy solutions that work within the existing infrastructure and workflow, overcoming technical and political obstacles that may arise. Assists Sales, Customer Support, Clinical Research and Technology teams in troubleshooting and alleviating customer issues. Assist with the roll-out of new HeartFlow products and services to existing and new customer base. Execute daily/weekly technical tasks to support regional sales initiatives. II. Advanced Technical Analysis & Solutions Engineering Serve as the Tier 3 escalation point for complex application and platform issues. Perform advanced troubleshooting related to clinical workflows, system integrations, underlying platforms and network components. Follow scripts, tooling, and automation workflows to streamline support operations and contribute to long-term system stability. Analyze recurring support incidents to identify systemic pain points and propose viable architectural or process improvements, collaborating with Development teams on hotfixes and patches. Demonstrate the discipline to work independently, rapidly assess priorities, and solve new technical challenges. Networks & troubleshooting: routing, firewalls, connectivity, latency issues. Security - Secure data protocols, encryption, web services, SSL certificates and keys. Operating systems: Windows and Linux deployment, diagnosis & troubleshooting. Hypervisors - Virtual Machines and mainstream Virtual application solutions. III. Data Feedback & Cross-Functional Leadership Deliver structured customer feedback into HeartFlow's Customer Relationship Management (CRM) system. Help team members analyze and distill technical and usage data to drive improvements in technology and underlying infrastructure. Contribute actively to the high-performing, global team by sharing new information and leveraging group wisdom to enhance team capabilities. Work cross-functionally to coordinate resources, support and information. Required Skills & Qualifications Technical Systems & Healthcare IT Expertise DICOM, Integration & Operability, Clinical workflows, PACS, HIPAA requirements, and PHI protections. Microsoft Windows Server/Desktop, Linux (RHEL, Alma Linux) Python, scripting, Microsoft SQL, Networking: Demonstrated experience troubleshooting IP, routing, connectivity, and latency issues. Virtualization: Knowledge of virtualization technologies required; experience deploying and troubleshooting VMs and working knowledge of Hypervisors. Security: Deep understanding of data protection, encryption, web services, and certificates. SAML integrations: SSO Single-Sign-On, Multi-factor Authentication (MFA). Cloud hosted platforms & web app services: API's & Amazon Web Services (AWS) Experience supporting large-scale websites and/or web-based products. Proven ability to analyze logs, trace, and isolate performance bottlenecks in complex, distributed systems. Special Working Conditions: the responsibilities of this position sometimes require working evenings and weekends, with little advanced notice. Required to be on call 24/7 as needed, Occasional travel to customer locations ( Professional & Communication Skills Customer-Facing Experience: Demonstrated customer-facing skills with a positive, professional personality and comfort presenting in front of groups. Communication: Exceptional written and verbal communication skills (fluency in English required), with the ability to translate complex technical findings into easily understandable business language. Responsible, accountable, and possesses the ability to work well within teams and cross-functionally. Comfortable in high-pressure situations and adept at managing client expectations during critical periods. Competency in German, French, Italian, and/or Spanish is desirable.(EMEA Only) Educational & Experience Requirements Educational Preference: Engineering or B.S. in Computer Science preferred (or sufficient and relevant experience). Industry Experience: 3+ years' experience working in the health care industry. Technical Experience: Minimum of 3 years of professional experience in a technical support, DevOps, or systems engineering role. Experience providing customer and/or corporate sales support preferred. Experience in training, mentorship, and process development is a plus. Physical Demands of the Job: Remote - Office environment. Heartflow is an Equal Opportunity Employer. We are committed to a work environment that supports, inspires, and respects all individuals and do not discriminate against any employee or applicant because of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law. This policy applies to every aspect of employment at Heartflow, including recruitment, hiring, training, relocation, promotion, and termination. Positions posted for Heartflow are not intended for or open to third party recruiters / agencies. Submission of any unsolicited resumes for these positions will be considered to be free referrals. Heartflow has become aware of a fraud where unknown entities are posing as Heartflow recruiters in an attempt to obtain personal information from individuals as part of our application or job offer process. Before providing any personal information to outside parties, please verify the following: A) all legitimate Heartflow recruiter email addresses end with and B) the position described is found on our careers site at/
Project Manager Business Analyst (Assistant Vice President)Applyremote type: Hybridlocations: Belfast United Kingdomtime type: Full timeposted on: Posted 8 Days Agojob requisition id: Role Overview: Join the Futures & Derivatives Clearing (FDC) and Equities Operations Program Execution Team, a vital component of the Markets Ops Transformation organization. This hybrid Business Analyst / Project Manager role is critical to driving strategic transformation and delivering Target Operating Models for FDC and Equities Operations within a dynamic, fast-paced environment. Our global organization spans over 60 countries, supporting a comprehensive range of Capital Markets products, including Fixed Income (FX, Rates, Credit, Muni, Cash, and Derivatives), where Citi is a dominant player, and Equities (Cash, Derivatives, Prime Brokerage, Futures, Listed Derivatives, FXPB), an area of significant growth. Job Purpose: The Markets Process Engineering team is chartered with designing and delivering a multi-year transformation roadmap for Operations and broader bank stakeholders. This transformation is driven by strategic initiatives, investment change execution, and a market-leading change delivery team focused on program and project management, business analysis, process re-engineering, and low-code application development.The Futures and OTC Clearing franchise, an agency business, provides trading and clearing capabilities across 40+ exchanges for both clients and proprietary lines of business such as Equities, Rates, Commodities, FX, and Prime D1. This business is undergoing a strategic re-engineering of its platforms-a multi-year initiative focused on real-time computation and ambitious goals to establish a more robust, strategic, and well-controlled end-state for Futures and OTC Clearing Operations.We are seeking a dedicated Project/Business Analyst to lead the delivery of these strategic initiatives. This is an exceptional opportunity to contribute to a major Tier 1 program within a growing, global, and dynamic change management team. The role involves close collaboration with the Futures and OTC Clearing business, global operations teams, technology, and downstream functions like finance and regulatory reporting. What you'll do Project Leadership & Execution: Lead end-to-end project lifecycle management from initiation to closure, defining scope, goals, deliverables, timelines, and resource requirements. Ensure successful, on-time delivery that aligns with business objectives and provides robust evidence of completion. Stakeholder Engagement & Communication: Facilitate and lead project meetings (kick-offs, status updates, working groups, governance forums) to foster clear and consistent communication among all project participants. Prepare and deliver senior-level presentations to effectively communicate project progress and insights. Business Analysis & Process Optimization: Conduct in-depth business and data analysis to thoroughly document existing business and operational processes. Identify opportunities for enhancement, design improved workflows, and develop detailed process maps and use cases to support comprehensive business and functional requirements. Risk & Issue Management: Proactively identify, assess, and manage project risks, issues, and dependencies. Develop and implement effective mitigation and contingency plans to ensure project stability. Quality Assurance & UAT: Coordinate and support User Acceptance Testing (UAT) activities, ensuring that developed solutions meet specified business requirements and are fit for purpose. Documentation & Reporting: Create and maintain essential project documentation, including project charters, business requirements, RAID logs (Risks, Assumptions, Issues, Dependencies), and status reports. Cross-Functional Collaboration: Collaborate effectively with stakeholders across Business, Operations, Technology, Compliance, and other functions to ensure seamless project implementation and successful outcomes. Strategic Contribution: Champion change management efforts and actively contribute to additional strategic projects and tasks as required by the organization. What we need from you Experience: Solid and proven experience in Project Management and Business Analysis experience, preferably within the banking sector. Domain Knowledge: Proficient understanding of Exchange Traded Derivatives (ETD) Regulatory Reporting is a significant advantage. Methodologies: Proficient with project life cycle methodologies (Waterfall & Agile). Analytical Skills: Strong critical thinking and problem-solving abilities. Technical Proficiency: Advanced proficiency in Microsoft Applications (PowerPoint, Visio, Project, Word, Excel, Access). Communication: Highly developed communication and diplomatic skills necessary to persuade and influence diverse stakeholders; capable of negotiating with external parties. Certifications (Plus): CAPM, PMP, PgMP, and/or MBA. What we can offer you We work hard to have a positive financial and social impact on the communities we serve. In turn, we put our employees first and provide the best-in-class benefits they need to be well, live well and save well.By joining Citi Belfast, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive base salary (which is annually reviewed), and enjoy a whole host of additional benefits such as: Generous holiday allowance starting at 27 days plus bank holidays; increasing with tenure A discretional annual performance related bonus Private medical insurance packages to suit your personal circumstances Employee Assistance Program Pension Plan Paid Parental Leave Special discounts for employees, family, and friends Access to an array of learning and development resourcesAlongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self every day. We want the best talent around the world to be energized to join us, motivated to stay, and empowered to thrive. Sounds like Citi has everything you need? Then apply to discover the true extent of your capabilities.
09/06/2026
Full time
Project Manager Business Analyst (Assistant Vice President)Applyremote type: Hybridlocations: Belfast United Kingdomtime type: Full timeposted on: Posted 8 Days Agojob requisition id: Role Overview: Join the Futures & Derivatives Clearing (FDC) and Equities Operations Program Execution Team, a vital component of the Markets Ops Transformation organization. This hybrid Business Analyst / Project Manager role is critical to driving strategic transformation and delivering Target Operating Models for FDC and Equities Operations within a dynamic, fast-paced environment. Our global organization spans over 60 countries, supporting a comprehensive range of Capital Markets products, including Fixed Income (FX, Rates, Credit, Muni, Cash, and Derivatives), where Citi is a dominant player, and Equities (Cash, Derivatives, Prime Brokerage, Futures, Listed Derivatives, FXPB), an area of significant growth. Job Purpose: The Markets Process Engineering team is chartered with designing and delivering a multi-year transformation roadmap for Operations and broader bank stakeholders. This transformation is driven by strategic initiatives, investment change execution, and a market-leading change delivery team focused on program and project management, business analysis, process re-engineering, and low-code application development.The Futures and OTC Clearing franchise, an agency business, provides trading and clearing capabilities across 40+ exchanges for both clients and proprietary lines of business such as Equities, Rates, Commodities, FX, and Prime D1. This business is undergoing a strategic re-engineering of its platforms-a multi-year initiative focused on real-time computation and ambitious goals to establish a more robust, strategic, and well-controlled end-state for Futures and OTC Clearing Operations.We are seeking a dedicated Project/Business Analyst to lead the delivery of these strategic initiatives. This is an exceptional opportunity to contribute to a major Tier 1 program within a growing, global, and dynamic change management team. The role involves close collaboration with the Futures and OTC Clearing business, global operations teams, technology, and downstream functions like finance and regulatory reporting. What you'll do Project Leadership & Execution: Lead end-to-end project lifecycle management from initiation to closure, defining scope, goals, deliverables, timelines, and resource requirements. Ensure successful, on-time delivery that aligns with business objectives and provides robust evidence of completion. Stakeholder Engagement & Communication: Facilitate and lead project meetings (kick-offs, status updates, working groups, governance forums) to foster clear and consistent communication among all project participants. Prepare and deliver senior-level presentations to effectively communicate project progress and insights. Business Analysis & Process Optimization: Conduct in-depth business and data analysis to thoroughly document existing business and operational processes. Identify opportunities for enhancement, design improved workflows, and develop detailed process maps and use cases to support comprehensive business and functional requirements. Risk & Issue Management: Proactively identify, assess, and manage project risks, issues, and dependencies. Develop and implement effective mitigation and contingency plans to ensure project stability. Quality Assurance & UAT: Coordinate and support User Acceptance Testing (UAT) activities, ensuring that developed solutions meet specified business requirements and are fit for purpose. Documentation & Reporting: Create and maintain essential project documentation, including project charters, business requirements, RAID logs (Risks, Assumptions, Issues, Dependencies), and status reports. Cross-Functional Collaboration: Collaborate effectively with stakeholders across Business, Operations, Technology, Compliance, and other functions to ensure seamless project implementation and successful outcomes. Strategic Contribution: Champion change management efforts and actively contribute to additional strategic projects and tasks as required by the organization. What we need from you Experience: Solid and proven experience in Project Management and Business Analysis experience, preferably within the banking sector. Domain Knowledge: Proficient understanding of Exchange Traded Derivatives (ETD) Regulatory Reporting is a significant advantage. Methodologies: Proficient with project life cycle methodologies (Waterfall & Agile). Analytical Skills: Strong critical thinking and problem-solving abilities. Technical Proficiency: Advanced proficiency in Microsoft Applications (PowerPoint, Visio, Project, Word, Excel, Access). Communication: Highly developed communication and diplomatic skills necessary to persuade and influence diverse stakeholders; capable of negotiating with external parties. Certifications (Plus): CAPM, PMP, PgMP, and/or MBA. What we can offer you We work hard to have a positive financial and social impact on the communities we serve. In turn, we put our employees first and provide the best-in-class benefits they need to be well, live well and save well.By joining Citi Belfast, you will not only be part of a business casual workplace with a hybrid working model (up to 2 days working at home per week), but also receive a competitive base salary (which is annually reviewed), and enjoy a whole host of additional benefits such as: Generous holiday allowance starting at 27 days plus bank holidays; increasing with tenure A discretional annual performance related bonus Private medical insurance packages to suit your personal circumstances Employee Assistance Program Pension Plan Paid Parental Leave Special discounts for employees, family, and friends Access to an array of learning and development resourcesAlongside these benefits Citi is committed to ensuring our workplace is where everyone feels comfortable coming to work as their whole self every day. We want the best talent around the world to be energized to join us, motivated to stay, and empowered to thrive. Sounds like Citi has everything you need? Then apply to discover the true extent of your capabilities.
Job: Security Operations (SOC) Analyst Location: Belfast, Northern Ireland, UK The Role The SOC Analyst will be responsible for day-to-day security threats, vulnerability management, analysis, and response. You will manage security incidents and review security alerts, determine if the security events are false positives, true positives, or false negatives, while working with incident responders on known or suspected security threats. The Analyst will work on log analysis, vulnerabilities and emerging threats, threat hunting and incident response that adhere to best practices and recognized control frameworks. The role will work closely with Information Security and Information Technology professionals to provide security metrics, threat landscape updates and emerging trends. Responsibilities Monitor, analyse, investigate security incidents and events using various tools and technologies including SIEM, UEBA, Threat Intel and EDR Perform security incident and event correlation, analysis, triage using information gathered from a variety of sources within the enterprise. Generate reports, dashboards, and presentations from security technologies Able to participate in an on call rotation and provide Tier 1 & Tier 2 support. Provide analysis of trending security data from a large number of heterogeneous security devices across different layers. Provide Incident Response (IR) support when analysis confirms an actionable incident. Communicate and collaborate with stakeholders, including internal customers and senior management to provide updates on security incidents and to ensure proper resolution Investigate, document, and report on information security threats and emerging trends. Integrate technologies and share information with SOC analysts and external teams. Participate in internal projects and initiatives to increase SOC efficiency and improve SOC tooling. Improve and challenge existing processes and procedures in an agile and fast-moving environment. Maintain and update security documentation, including incident reports and KB articles Core Qualifications The permanent right to live and work in the United Kingdom - this job is based in Belfast, Northern Ireland Bachelor's degree in a related field (Security, Forensics, Cyber Security, or Computer Science is preferred) or equivalent industry related experience. At least 2 years' experience working within an information security / cyber security role Desirable Proven experience as a security analyst, incident handler/responder, security engineer, or penetration tester. Knowledge of security methodologies, processes (i.e., Cyber Kill Chain/Diamond Models, and the MITRE ATT&CK/D3FEND framework). Knowledge of technical security solutions (such as but not limited to firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavioural analytics, orchestration, automation and cloud security). Deep knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS and HTTP Protocols, network analysis, and network/security applications and email security. Good knowledge of common malware threats and attack methodologies. Basic knowledge of scripting languages and programming languages (PowerShell, Python, Bash, .NET, Ruby,Java, C, etc.) Desirable Professional Certifications: GCIA, GCIH, GCFE, GCFA, Security+, CCNA CyberOps, OSCP, GPEN, GWAPT, CEH, CySA+ Core Competencies Accountable for the successful completion of multiple, individual projects simultaneously. Communicate effectively by contributing significantly to the development and delivery of a variety of written and visual documents for diverse audiences. Manage change and demonstrate adaptability by adjusting priorities or processes and approaching as needs dictate. Work independently as a team representative of Information Security as well as showing excellence teamwork skills. Ability to develop thorough documentation and operational playbooks, in addition, to suggest alert enhancements to improve detection capability. Fundamental knowledge of network and system technologies and practices Desire for continual learning of new technologies and developing knowledge / skills We Offer 28 days annual leave plus 10 NI national holidays Pension matched up to 7% Private health insurance for medical and dental Life Insurance Great work/life balance and flexible working hours Monthly catered lunches Unlimited drinks and snacks Charitable matching gift program EEO Statement Apex Fintech Solutions is an equal opportunity employer that does not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, veteran status, marital status, or any other protected characteristic. Our hiring practices ensure that all qualified applicants receive fair consideration without regard to these characteristics. Disability Statement Apex Fintech Solutions is committed to creating an inclusive and accessible workplace for all candidates, including those with disabilities. We are dedicated to ensuring equal employment opportunities and providing reasonable accommodations to qualified individuals with disabilities. If you require reasonable accommodations to participate in the application or interview process, please submit your request via Candidate Accommodation Requests Form. We will work with you to provide the necessary accommodations to ensure your full participation in our hiring process.
09/06/2026
Full time
Job: Security Operations (SOC) Analyst Location: Belfast, Northern Ireland, UK The Role The SOC Analyst will be responsible for day-to-day security threats, vulnerability management, analysis, and response. You will manage security incidents and review security alerts, determine if the security events are false positives, true positives, or false negatives, while working with incident responders on known or suspected security threats. The Analyst will work on log analysis, vulnerabilities and emerging threats, threat hunting and incident response that adhere to best practices and recognized control frameworks. The role will work closely with Information Security and Information Technology professionals to provide security metrics, threat landscape updates and emerging trends. Responsibilities Monitor, analyse, investigate security incidents and events using various tools and technologies including SIEM, UEBA, Threat Intel and EDR Perform security incident and event correlation, analysis, triage using information gathered from a variety of sources within the enterprise. Generate reports, dashboards, and presentations from security technologies Able to participate in an on call rotation and provide Tier 1 & Tier 2 support. Provide analysis of trending security data from a large number of heterogeneous security devices across different layers. Provide Incident Response (IR) support when analysis confirms an actionable incident. Communicate and collaborate with stakeholders, including internal customers and senior management to provide updates on security incidents and to ensure proper resolution Investigate, document, and report on information security threats and emerging trends. Integrate technologies and share information with SOC analysts and external teams. Participate in internal projects and initiatives to increase SOC efficiency and improve SOC tooling. Improve and challenge existing processes and procedures in an agile and fast-moving environment. Maintain and update security documentation, including incident reports and KB articles Core Qualifications The permanent right to live and work in the United Kingdom - this job is based in Belfast, Northern Ireland Bachelor's degree in a related field (Security, Forensics, Cyber Security, or Computer Science is preferred) or equivalent industry related experience. At least 2 years' experience working within an information security / cyber security role Desirable Proven experience as a security analyst, incident handler/responder, security engineer, or penetration tester. Knowledge of security methodologies, processes (i.e., Cyber Kill Chain/Diamond Models, and the MITRE ATT&CK/D3FEND framework). Knowledge of technical security solutions (such as but not limited to firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavioural analytics, orchestration, automation and cloud security). Deep knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS and HTTP Protocols, network analysis, and network/security applications and email security. Good knowledge of common malware threats and attack methodologies. Basic knowledge of scripting languages and programming languages (PowerShell, Python, Bash, .NET, Ruby,Java, C, etc.) Desirable Professional Certifications: GCIA, GCIH, GCFE, GCFA, Security+, CCNA CyberOps, OSCP, GPEN, GWAPT, CEH, CySA+ Core Competencies Accountable for the successful completion of multiple, individual projects simultaneously. Communicate effectively by contributing significantly to the development and delivery of a variety of written and visual documents for diverse audiences. Manage change and demonstrate adaptability by adjusting priorities or processes and approaching as needs dictate. Work independently as a team representative of Information Security as well as showing excellence teamwork skills. Ability to develop thorough documentation and operational playbooks, in addition, to suggest alert enhancements to improve detection capability. Fundamental knowledge of network and system technologies and practices Desire for continual learning of new technologies and developing knowledge / skills We Offer 28 days annual leave plus 10 NI national holidays Pension matched up to 7% Private health insurance for medical and dental Life Insurance Great work/life balance and flexible working hours Monthly catered lunches Unlimited drinks and snacks Charitable matching gift program EEO Statement Apex Fintech Solutions is an equal opportunity employer that does not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, veteran status, marital status, or any other protected characteristic. Our hiring practices ensure that all qualified applicants receive fair consideration without regard to these characteristics. Disability Statement Apex Fintech Solutions is committed to creating an inclusive and accessible workplace for all candidates, including those with disabilities. We are dedicated to ensuring equal employment opportunities and providing reasonable accommodations to qualified individuals with disabilities. If you require reasonable accommodations to participate in the application or interview process, please submit your request via Candidate Accommodation Requests Form. We will work with you to provide the necessary accommodations to ensure your full participation in our hiring process.
Security Monitoring Analyst Purpose of the Role The role staffs the Network Operations Centre on a rotating shift pattern to deliver continuous service monitoring of availability, performance, capacity, and security signals across Active Directory, Entra ID, Microsoft 365, SharePoint, Power Platform, Microsoft Fabric, and Azure - for the services that require 24/7 coverage as defined in the technical scope. The post-holder triages incoming alerts, performs first-pass diagnostics, executes documented runbooks for known incident patterns, escalates to the relevant L2/L3 specialist within agreed timelines, opens communication bridges for P1 events, and ensures customer stakeholders are kept informed during major incidents. The role is the heartbeat of the SLA: it determines whether the contractual P1 1-hour response is met. Requirements Key Technical Responsibilities Continuous Monitoring and Alert Triage Operate the monitoring console stack - Microsoft Sentinel, Azure Monitor, Microsoft Defender for Cloud, Microsoft 365 Admin Center service health, Defender XDR alerts, Log Analytics workbooks, and the integrated ITSM ticketing platform - for the duration of every shift. Monitor availability and performance of Active Directory domain controllers, DNS / DHCP / time service, ADFS, AAD Connect sync health, Entra ID sign-in service health, Exchange Online, SharePoint Online, Teams, OneDrive, Power Platform environments, Microsoft Fabric capacity, Azure VMs, storage, networking, and PaaS services. Triage incoming alerts within 5 minutes of generation, applying the documented severity matrix; classify alerts as actionable, suppressible, or false-positive, and record the rationale in the ticketing platform. Correlate alerts across multiple sources (Sentinel, Defender, Azure Monitor, M365 service health) to identify the underlying incident rather than reacting to individual symptoms. Acknowledge alerts and update tickets at the agreed cadence (every 60 minutes during P1; every 4 hours during P2) until handover or closure. Incident Response and Runbook Execution Execute Tier 1 incident response runbooks for known and documented patterns: Conditional Access misconfiguration rollback, AAD Connect sync failure restart, expired application secret rotation, Defender alert containment, mailbox / Teams reset operations, SharePoint sharing link restoration, and Power Platform environment health checks. Initiate the major incident process for any P1 incident: page the duty L2/L3 specialist, open the Microsoft Teams incident bridge, notify the Service Delivery Manager and customer stakeholders per the agreed comms plan, and assume scribe duties on the bridge call. Maintain accurate incident timelines in the ticketing platform - every action, every status check, every communication - with timestamp and operator initials, suitable for post incident review and audit. Execute documented automated containment playbooks (Sentinel Logic Apps) for high confidence security events: disable risky users, force password reset, isolate device in Defender for Endpoint, block sender in Exchange Online. Hand over open incidents at shift change using the structured handover template (active incidents, watch items, scheduled changes, planned maintenance, expected escalations). Service Request Fulfilment During Out of Hours Windows Fulfil pre approved standard service requests during out of hours windows where authorised - for example licence assignment for emergency onboarding, Teams meeting policy adjustments for live events, or pre approved Conditional Access exclusions - strictly within the documented standing change envelope. Monitoring Hygiene and Improvement Participate in alert tuning to reduce false positive rate and alert fatigue: review noisy rules weekly, propose threshold or filter changes through change control, and validate post change. Maintain monitoring runbook accuracy: every time a runbook is executed, capture deviations and feed back to the engineering team for runbook updates. Contribute weekly to the Service Delivery Manager's service review with a shift summary report (alerts handled, incidents raised, false positive trends, runbook gaps). Communication and Stakeholder Management Provide clear, factual, non speculative communication during incidents in line with the proposed SLA Communication Plan - initial notification within 15 minutes of P1 declaration, updates at 60 minute intervals, and a wrap up notification within 1 hour of resolution. Maintain the operational status page / Teams channel for customer stakeholders during major incidents. Comply strictly with EEA only data processing requirements: no customer data is to leave the EEA boundary at any point during incident handling, and no screenshots / logs are to be transmitted via non approved channels. Mandatory Technical Skills Hands on experience operating Microsoft Sentinel and Azure Monitor in a production NOC / SOC: ingesting alerts, working incidents, executing playbooks, and authoring basic KQL queries. Working knowledge of the Microsoft 365 service health framework, Defender XDR alert lifecycle, and the Azure Service Health portal. Active Directory and Entra ID fundamentals - enough to triage authentication failures, replication issues, MFA / Conditional Access blocks, and PIM activations. Basic PowerShell and KQL - sufficient to run prepared queries, validate state, and capture evidence; not expected to author advanced detection content (that sits with the Security & Governance Specialist). ITIL v4 foundation - incident, problem, change and event management; understanding of priority matrix, SLA clocks, and major incident process. Strong written English for incident notes, comms, and handover; ability to write clearly and unambiguously under time pressure. Desirable Technical Skills KQL beyond basics - ability to extend prepared hunting queries with new filters under L2 supervision. Familiarity with ServiceNow / Jira Service Management / Freshservice (or equivalent ITSM). Experience with Power BI service health dashboards and Microsoft 365 Usage Analytics. Exposure to Azure DevOps work item tracking and Microsoft Teams incident bridge management. Awareness of GDPR Article 33 personal data breach notification timelines and EEA data residency obligations. Required Certifications Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC 900) - mandatory. Microsoft Certified: Azure Fundamentals (AZ 900) - mandatory. Microsoft 365 Certified: Fundamentals (MS 900) - mandatory. Microsoft Certified: Security Operations Analyst Associate (SC 200) - preferred (mandatory within 12 months of starting). ITIL 4 Foundation - preferred. CompTIA Security+ or equivalent - desirable.
09/06/2026
Full time
Security Monitoring Analyst Purpose of the Role The role staffs the Network Operations Centre on a rotating shift pattern to deliver continuous service monitoring of availability, performance, capacity, and security signals across Active Directory, Entra ID, Microsoft 365, SharePoint, Power Platform, Microsoft Fabric, and Azure - for the services that require 24/7 coverage as defined in the technical scope. The post-holder triages incoming alerts, performs first-pass diagnostics, executes documented runbooks for known incident patterns, escalates to the relevant L2/L3 specialist within agreed timelines, opens communication bridges for P1 events, and ensures customer stakeholders are kept informed during major incidents. The role is the heartbeat of the SLA: it determines whether the contractual P1 1-hour response is met. Requirements Key Technical Responsibilities Continuous Monitoring and Alert Triage Operate the monitoring console stack - Microsoft Sentinel, Azure Monitor, Microsoft Defender for Cloud, Microsoft 365 Admin Center service health, Defender XDR alerts, Log Analytics workbooks, and the integrated ITSM ticketing platform - for the duration of every shift. Monitor availability and performance of Active Directory domain controllers, DNS / DHCP / time service, ADFS, AAD Connect sync health, Entra ID sign-in service health, Exchange Online, SharePoint Online, Teams, OneDrive, Power Platform environments, Microsoft Fabric capacity, Azure VMs, storage, networking, and PaaS services. Triage incoming alerts within 5 minutes of generation, applying the documented severity matrix; classify alerts as actionable, suppressible, or false-positive, and record the rationale in the ticketing platform. Correlate alerts across multiple sources (Sentinel, Defender, Azure Monitor, M365 service health) to identify the underlying incident rather than reacting to individual symptoms. Acknowledge alerts and update tickets at the agreed cadence (every 60 minutes during P1; every 4 hours during P2) until handover or closure. Incident Response and Runbook Execution Execute Tier 1 incident response runbooks for known and documented patterns: Conditional Access misconfiguration rollback, AAD Connect sync failure restart, expired application secret rotation, Defender alert containment, mailbox / Teams reset operations, SharePoint sharing link restoration, and Power Platform environment health checks. Initiate the major incident process for any P1 incident: page the duty L2/L3 specialist, open the Microsoft Teams incident bridge, notify the Service Delivery Manager and customer stakeholders per the agreed comms plan, and assume scribe duties on the bridge call. Maintain accurate incident timelines in the ticketing platform - every action, every status check, every communication - with timestamp and operator initials, suitable for post incident review and audit. Execute documented automated containment playbooks (Sentinel Logic Apps) for high confidence security events: disable risky users, force password reset, isolate device in Defender for Endpoint, block sender in Exchange Online. Hand over open incidents at shift change using the structured handover template (active incidents, watch items, scheduled changes, planned maintenance, expected escalations). Service Request Fulfilment During Out of Hours Windows Fulfil pre approved standard service requests during out of hours windows where authorised - for example licence assignment for emergency onboarding, Teams meeting policy adjustments for live events, or pre approved Conditional Access exclusions - strictly within the documented standing change envelope. Monitoring Hygiene and Improvement Participate in alert tuning to reduce false positive rate and alert fatigue: review noisy rules weekly, propose threshold or filter changes through change control, and validate post change. Maintain monitoring runbook accuracy: every time a runbook is executed, capture deviations and feed back to the engineering team for runbook updates. Contribute weekly to the Service Delivery Manager's service review with a shift summary report (alerts handled, incidents raised, false positive trends, runbook gaps). Communication and Stakeholder Management Provide clear, factual, non speculative communication during incidents in line with the proposed SLA Communication Plan - initial notification within 15 minutes of P1 declaration, updates at 60 minute intervals, and a wrap up notification within 1 hour of resolution. Maintain the operational status page / Teams channel for customer stakeholders during major incidents. Comply strictly with EEA only data processing requirements: no customer data is to leave the EEA boundary at any point during incident handling, and no screenshots / logs are to be transmitted via non approved channels. Mandatory Technical Skills Hands on experience operating Microsoft Sentinel and Azure Monitor in a production NOC / SOC: ingesting alerts, working incidents, executing playbooks, and authoring basic KQL queries. Working knowledge of the Microsoft 365 service health framework, Defender XDR alert lifecycle, and the Azure Service Health portal. Active Directory and Entra ID fundamentals - enough to triage authentication failures, replication issues, MFA / Conditional Access blocks, and PIM activations. Basic PowerShell and KQL - sufficient to run prepared queries, validate state, and capture evidence; not expected to author advanced detection content (that sits with the Security & Governance Specialist). ITIL v4 foundation - incident, problem, change and event management; understanding of priority matrix, SLA clocks, and major incident process. Strong written English for incident notes, comms, and handover; ability to write clearly and unambiguously under time pressure. Desirable Technical Skills KQL beyond basics - ability to extend prepared hunting queries with new filters under L2 supervision. Familiarity with ServiceNow / Jira Service Management / Freshservice (or equivalent ITSM). Experience with Power BI service health dashboards and Microsoft 365 Usage Analytics. Exposure to Azure DevOps work item tracking and Microsoft Teams incident bridge management. Awareness of GDPR Article 33 personal data breach notification timelines and EEA data residency obligations. Required Certifications Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC 900) - mandatory. Microsoft Certified: Azure Fundamentals (AZ 900) - mandatory. Microsoft 365 Certified: Fundamentals (MS 900) - mandatory. Microsoft Certified: Security Operations Analyst Associate (SC 200) - preferred (mandatory within 12 months of starting). ITIL 4 Foundation - preferred. CompTIA Security+ or equivalent - desirable.
Senior Client Services Analyst, Regulatory ReportingApplylocations: London, United Kingdomtime type: Full timeposted on: Posted Todayjob requisition id: R Role: Client Services Analyst Business Area: Post Trade Regulatory Reporting Solutions Role Overview Join a fast moving, customer-focused team at the heart of post trade regulatory reporting. Our solutions support global sell side and buy side firms in handling operational risk and meeting regulatory obligations across reconciliations, reporting, and trade confirmations.You'll be the trusted first point of contact for our broad client base. You'll combine client service excellence with technical investigation, helping clients resolve issues quickly while driving service improvement.You will provide Tier 1 client support to banks, hedge funds, and other financial institutions. The role focuses on responding to client queries, performing initial investigations, coordinating with internal teams, and proactively improving client experience.The Analyst also prepares for and runs monthly operational meetings with our most important customers reviewing service performance, ticket trends, and ongoing issues as well as the management of any open JIRA items. Key Responsibilities Responding to customer queries and performing Tier 1 investigations in line with defined SLAs Handle support tickets via the Customer Portal hosted on Salesforce , ensuring accurate logging, tracking, and ownership until resolution Raise defects to Development, QA, Product, Professional Services teams whilst keeping clients fully updated in their progress Develop and maintain a good functional understanding of the business services and solutions provided Issue service notifications and broadcast communications to users. Collaborate effectively with internal partners including development, QA, solutions, and professional services teams Partner with the Head of Client Services / Team Lead to continuously improve service quality, identify ticket reduction opportunities, and proactively support clients Coordinate and lead monthly operational review meetings with key clients, understanding themes, open defects, and client concerns. Maintain and update internal documentation to ensure knowledge accuracy and accessibility Develop knowledge base articles and client tooling to reduce incoming ticket volumes Act as a strong voice for client-impacting defects, highlighting their prioritisation and resolution with product owners and scrum teams Use SQL, MFT Anywhere, and related tools to proactively investigate client issues in a timely manner Running training sessions with new clients to ensure they get the most from the application. Essential Experience & Skills 2-3 years' experience in a helpdesk, customer support, or client-facing operational role Strong client-centric demeanor with confident customer interaction via phone and ticketing systems Excellent written and verbal communication skills, with the ability to collaborate efficiently across teams Strong presentation and meeting facilitation skills, capable of explaining sophisticated technical issues in clear, client-friendly language Experience in post-trade processing , including equities, equity derivatives, or other financial instruments Knowledge of reconciliations and/or transaction and regulatory reporting processes Professional proficiency in English (reading, writing, speaking, and listening) Nice to Have Knowledge or experience with MiFIR and/or EMIR regulatory reporting Basic SQL knowledge or exposure to another programming language for investigative support work Basic understanding of networking concepts, including FTP/SFTP Familiarity with JIRA, Confluence, and/or ServiceNow Experience with Salesforce , including report generation and dashboard development to analyse ticket trends Career Stage: Senior Associate London Stock Exchange Group (LSEG) Information: Join us and be part of a team that values innovation, quality, and continuous improvement. If you're ready to take your career to the next level and make a significant impact, we'd love to hear from you.LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership , Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce.We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone's race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.You will be part of a collaborative and creative culture where we encourage new ideas. We are committed to sustainability across our global business and we are proud to partner with our customers to help them meet their sustainability objectives. Our charity, the LSEG Foundation provides charitable grants to community groups that help people access economic opportunities and build a secure future with financial independence. Colleagues can get involved through fundraising and volunteering.LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.Please take a moment to read this privacy notice carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it's used for, and how it's obtained, your rights and how to contact us as a data subject.If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.
09/06/2026
Full time
Senior Client Services Analyst, Regulatory ReportingApplylocations: London, United Kingdomtime type: Full timeposted on: Posted Todayjob requisition id: R Role: Client Services Analyst Business Area: Post Trade Regulatory Reporting Solutions Role Overview Join a fast moving, customer-focused team at the heart of post trade regulatory reporting. Our solutions support global sell side and buy side firms in handling operational risk and meeting regulatory obligations across reconciliations, reporting, and trade confirmations.You'll be the trusted first point of contact for our broad client base. You'll combine client service excellence with technical investigation, helping clients resolve issues quickly while driving service improvement.You will provide Tier 1 client support to banks, hedge funds, and other financial institutions. The role focuses on responding to client queries, performing initial investigations, coordinating with internal teams, and proactively improving client experience.The Analyst also prepares for and runs monthly operational meetings with our most important customers reviewing service performance, ticket trends, and ongoing issues as well as the management of any open JIRA items. Key Responsibilities Responding to customer queries and performing Tier 1 investigations in line with defined SLAs Handle support tickets via the Customer Portal hosted on Salesforce , ensuring accurate logging, tracking, and ownership until resolution Raise defects to Development, QA, Product, Professional Services teams whilst keeping clients fully updated in their progress Develop and maintain a good functional understanding of the business services and solutions provided Issue service notifications and broadcast communications to users. Collaborate effectively with internal partners including development, QA, solutions, and professional services teams Partner with the Head of Client Services / Team Lead to continuously improve service quality, identify ticket reduction opportunities, and proactively support clients Coordinate and lead monthly operational review meetings with key clients, understanding themes, open defects, and client concerns. Maintain and update internal documentation to ensure knowledge accuracy and accessibility Develop knowledge base articles and client tooling to reduce incoming ticket volumes Act as a strong voice for client-impacting defects, highlighting their prioritisation and resolution with product owners and scrum teams Use SQL, MFT Anywhere, and related tools to proactively investigate client issues in a timely manner Running training sessions with new clients to ensure they get the most from the application. Essential Experience & Skills 2-3 years' experience in a helpdesk, customer support, or client-facing operational role Strong client-centric demeanor with confident customer interaction via phone and ticketing systems Excellent written and verbal communication skills, with the ability to collaborate efficiently across teams Strong presentation and meeting facilitation skills, capable of explaining sophisticated technical issues in clear, client-friendly language Experience in post-trade processing , including equities, equity derivatives, or other financial instruments Knowledge of reconciliations and/or transaction and regulatory reporting processes Professional proficiency in English (reading, writing, speaking, and listening) Nice to Have Knowledge or experience with MiFIR and/or EMIR regulatory reporting Basic SQL knowledge or exposure to another programming language for investigative support work Basic understanding of networking concepts, including FTP/SFTP Familiarity with JIRA, Confluence, and/or ServiceNow Experience with Salesforce , including report generation and dashboard development to analyse ticket trends Career Stage: Senior Associate London Stock Exchange Group (LSEG) Information: Join us and be part of a team that values innovation, quality, and continuous improvement. If you're ready to take your career to the next level and make a significant impact, we'd love to hear from you.LSEG is a leading global financial markets infrastructure and data provider. Our purpose is driving financial stability, empowering economies and enabling customers to create sustainable growth.Our purpose is the foundation on which our culture is built. Our values of Integrity, Partnership , Excellence and Change underpin our purpose and set the standard for everything we do, every day. They go to the heart of who we are and guide our decision making and everyday actions.Working with us means that you will be part of a dynamic organisation of 25,000 people across 65 countries. However, we will value your individuality and enable you to bring your true self to work so you can help enrich our diverse workforce.We are proud to be an equal opportunities employer. This means that we do not discriminate on the basis of anyone's race, religion, colour, national origin, gender, sexual orientation, gender identity, gender expression, age, marital status, veteran status, pregnancy or disability, or any other basis protected under applicable law. Conforming with applicable law, we can reasonably accommodate applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs.You will be part of a collaborative and creative culture where we encourage new ideas. We are committed to sustainability across our global business and we are proud to partner with our customers to help them meet their sustainability objectives. Our charity, the LSEG Foundation provides charitable grants to community groups that help people access economic opportunities and build a secure future with financial independence. Colleagues can get involved through fundraising and volunteering.LSEG offers a range of tailored benefits and support, including healthcare, retirement planning, paid volunteering days and wellbeing initiatives.Please take a moment to read this privacy notice carefully, as it describes what personal information London Stock Exchange Group (LSEG) (we) may hold about you, what it's used for, and how it's obtained, your rights and how to contact us as a data subject.If you are submitting as a Recruitment Agency Partner, it is essential and your responsibility to ensure that candidates applying to LSEG are aware of this privacy notice.
Working Pattern: Monday to Friday, 09:00-17:00 (early Friday finish at 16:00, workload permitting) Clearance: SC We are seeking a Senior Cyber Security Analyst to join the Security Operations Centre (SOC) at Computer Network Defence Ltd (CND). This is a key role within our Managed Security Services Provider (MSSP) environment, where you will lead on the analysis and response to security incidents across multiple client environments. Working closely with the SOC Team Lead, you will support day to day monitoring and investigation activities, engage directly with clients to communicate findings and trends, and contribute to the ongoing improvement of SOC processes and capabilities. You will also play an important role in mentoring junior analysts and helping to shape the future direction of our security services. Key Responsibilities Monitor, triage and investigate security alerts across multiple platforms Conduct in-depth incident analysis and support ongoing client investigations Act as deputy to the SOC Team Lead when required Review and assess escalated Tier 2 alerts for urgency and impact Deliver weekly and monthly reporting to clients and stakeholders Communicate security findings and trends directly to clients Support vulnerability management analysis and remediation efforts Lead false positive reduction and SIEM tuning activities Mentor and support development of Tier 1 and junior analysts Contribute to SOC process improvement and operational efficiency Participate in incident response activities as part of the wider team Lead internal SOC initiatives and projects where required Create and deliver presentations for clients and internal teams What We're Looking For Strong experience within a SOC or cyber security operations environment Proven ability to investigate and analyse complex security incidents Experience with SIEM platforms, threat intelligence, and security tooling Strong stakeholder and client communication skills Ability to mentor and develop junior team members Proactive approach to problem-solving and continuous improvement Good understanding of current cyber threats, tactics and trends Please note that we cannot sponsor visas to work in the UK.
09/06/2026
Full time
Working Pattern: Monday to Friday, 09:00-17:00 (early Friday finish at 16:00, workload permitting) Clearance: SC We are seeking a Senior Cyber Security Analyst to join the Security Operations Centre (SOC) at Computer Network Defence Ltd (CND). This is a key role within our Managed Security Services Provider (MSSP) environment, where you will lead on the analysis and response to security incidents across multiple client environments. Working closely with the SOC Team Lead, you will support day to day monitoring and investigation activities, engage directly with clients to communicate findings and trends, and contribute to the ongoing improvement of SOC processes and capabilities. You will also play an important role in mentoring junior analysts and helping to shape the future direction of our security services. Key Responsibilities Monitor, triage and investigate security alerts across multiple platforms Conduct in-depth incident analysis and support ongoing client investigations Act as deputy to the SOC Team Lead when required Review and assess escalated Tier 2 alerts for urgency and impact Deliver weekly and monthly reporting to clients and stakeholders Communicate security findings and trends directly to clients Support vulnerability management analysis and remediation efforts Lead false positive reduction and SIEM tuning activities Mentor and support development of Tier 1 and junior analysts Contribute to SOC process improvement and operational efficiency Participate in incident response activities as part of the wider team Lead internal SOC initiatives and projects where required Create and deliver presentations for clients and internal teams What We're Looking For Strong experience within a SOC or cyber security operations environment Proven ability to investigate and analyse complex security incidents Experience with SIEM platforms, threat intelligence, and security tooling Strong stakeholder and client communication skills Ability to mentor and develop junior team members Proactive approach to problem-solving and continuous improvement Good understanding of current cyber threats, tactics and trends Please note that we cannot sponsor visas to work in the UK.
Maidenhead, United Kingdom Posted on 07/05/2026 VE3 is a technology and business consultancy focused on delivering end-to-end technology solutions and products. We have successfully serviced enterprises across multiple markets, including the public and private sectors. Our services span all aspects of business, providing a holistic approach to managing an organization. We are committed to providing technical innovations and tools that empower organizations with critical information to facilitate decision-making that results in business transformation through cost savings and increased operational efficiency. Our commitment to quality is adopted throughout the organization and sets the foundation for delivering our full suite of capabilities. Job Description Security Monitoring Analyst Purpose of the Role The role staffs the Network Operations Centre on a rotating shift pattern to deliver continuous service monitoring of availability, performance, capacity, and security signals across Active Directory, Entra ID, Microsoft 365, SharePoint, Power Platform, Microsoft Fabric, and Azure - for the services that require 24/7 coverage as defined in the technical scope. The post-holder triages incoming alerts, performs first-pass diagnostics, executes documented runbooks for known incident patterns, escalates to the relevant L2/L3 specialist within agreed timelines, opens communication bridges for P1 events, and ensures customer stakeholders are kept informed during major incidents. The role is the heartbeat of the SLA: it determines whether the contractual P1 1-hour response is met. Requirements Key Technical Responsibilities Continuous Monitoring and Alert Triage Operate the monitoring console stack - Microsoft Sentinel, Azure Monitor, Microsoft Defender for Cloud, Microsoft 365 Admin Center service health, Defender XDR alerts, Log Analytics workbooks, and the integrated ITSM ticketing platform - for the duration of every shift. Monitor availability and performance of Active Directory domain controllers, DNS / DHCP / time service, ADFS, AAD Connect sync health, Entra ID sign-in service health, Exchange Online, SharePoint Online, Teams, OneDrive, Power Platform environments, Microsoft Fabric capacity, Azure VMs, storage, networking, and PaaS services. Triage incoming alerts within 5 minutes of generation, applying the documented severity matrix; classify alerts as actionable, suppressible, or false-positive, and record the rationale in the ticketing platform. Correlate alerts across multiple sources (Sentinel, Defender, Azure Monitor, M365 service health) to identify the underlying incident rather than reacting to individual symptoms. Acknowledge alerts and update tickets at the agreed cadence (every 60 minutes during P1; every 4 hours during P2) until handover or closure. Incident Response and Runbook Execution Execute Tier-1 incident response runbooks for known and documented patterns: Conditional Access misconfiguration rollback, AAD Connect sync failure restart, expired application secret rotation, Defender alert containment, mailbox / Teams reset operations, SharePoint sharing-link restoration, and Power Platform environment health checks. Initiate the major incident process for any P1 incident: page the duty L2/L3 specialist, open the Microsoft Teams incident bridge, notify the Service Delivery Manager and customer stakeholders per the agreed comms plan, and assume scribe duties on the bridge call. Maintain accurate incident timelines in the ticketing platform - every action, every status check, every communication - with timestamp and operator initials, suitable for post-incident review and audit. Execute documented automated containment playbooks (Sentinel Logic Apps) for high-confidence security events: disable risky users, force password reset, isolate device in Defender for Endpoint, block sender in Exchange Online. Hand over open incidents at shift change using the structured handover template (active incidents, watch-items, scheduled changes, planned maintenance, expected escalations). Service Request Fulfilment During Out-of-Hours Windows Fulfil pre-approved standard service requests during out-of-hours windows where authorised - for example licence assignment for emergency onboarding, Teams meeting policy adjustments for live events, or pre-approved Conditional Access exclusions - strictly within the documented standing change envelope. Monitoring Hygiene and Improvement Participate in alert tuning to reduce false-positive rate and alert fatigue: review noisy rules weekly, propose threshold or filter changes through change control, and validate post-change. Maintain monitoring runbook accuracy: every time a runbook is executed, capture deviations and feed back to the engineering team for runbook updates. Contribute weekly to the Service Delivery Manager's service review with a shift-summary report (alerts handled, incidents raised, false-positive trends, runbook gaps). Communication and Stakeholder Management Provide clear, factual, non-speculative communication during incidents in line with the proposed SLA Communication Plan - initial notification within 15 minutes of P1 declaration, updates at 60-minute intervals, and a wrap-up notification within 1 hour of resolution. Maintain the operational status page / Teams channel for customer stakeholders during major incidents. Comply strictly with EEA-only data processing requirements: no customer data is to leave the EEA boundary at any point during incident handling, and no screenshots / logs are to be transmitted via non-approved channels. Mandatory Technical Skills Hands-on experience operating Microsoft Sentinel and Azure Monitor in a production NOC / SOC: ingesting alerts, working incidents, executing playbooks, and authoring basic KQL queries. Working knowledge of the Microsoft 365 service health framework, Defender XDR alert lifecycle, and the Azure Service Health portal. Active Directory and Entra ID fundamentals - enough to triage authentication failures, replication issues, MFA / Conditional Access blocks, and PIM activations. Basic PowerShell and KQL - sufficient to run prepared queries, validate state, and capture evidence; not expected to author advanced detection content (that sits with the Security & Governance Specialist). ITIL v4 foundation - incident, problem, change and event management; understanding of priority matrix, SLA clocks, and major incident process. Strong written English for incident notes, comms, and handover; ability to write clearly and unambiguously under time pressure. Desirable Technical Skills KQL beyond basics - ability to extend prepared hunting queries with new filters under L2 supervision. Familiarity with ServiceNow / Jira Service Management / Freshservice (or equivalent ITSM). Experience with Power BI service health dashboards and Microsoft 365 Usage Analytics. Exposure to Azure DevOps work item tracking and Microsoft Teams incident bridge management. Awareness of GDPR Article 33 personal data breach notification timelines and EEA data residency obligations. Required Certifications Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) - mandatory. Microsoft 365 Certified: Fundamentals (MS-900) - mandatory. Microsoft Certified: Security Operations Analyst Associate (SC-200) - preferred (mandatory within 12 months of starting). ITIL 4 Foundation - preferred. CompTIA Security+ or equivalent - desirable.
09/06/2026
Full time
Maidenhead, United Kingdom Posted on 07/05/2026 VE3 is a technology and business consultancy focused on delivering end-to-end technology solutions and products. We have successfully serviced enterprises across multiple markets, including the public and private sectors. Our services span all aspects of business, providing a holistic approach to managing an organization. We are committed to providing technical innovations and tools that empower organizations with critical information to facilitate decision-making that results in business transformation through cost savings and increased operational efficiency. Our commitment to quality is adopted throughout the organization and sets the foundation for delivering our full suite of capabilities. Job Description Security Monitoring Analyst Purpose of the Role The role staffs the Network Operations Centre on a rotating shift pattern to deliver continuous service monitoring of availability, performance, capacity, and security signals across Active Directory, Entra ID, Microsoft 365, SharePoint, Power Platform, Microsoft Fabric, and Azure - for the services that require 24/7 coverage as defined in the technical scope. The post-holder triages incoming alerts, performs first-pass diagnostics, executes documented runbooks for known incident patterns, escalates to the relevant L2/L3 specialist within agreed timelines, opens communication bridges for P1 events, and ensures customer stakeholders are kept informed during major incidents. The role is the heartbeat of the SLA: it determines whether the contractual P1 1-hour response is met. Requirements Key Technical Responsibilities Continuous Monitoring and Alert Triage Operate the monitoring console stack - Microsoft Sentinel, Azure Monitor, Microsoft Defender for Cloud, Microsoft 365 Admin Center service health, Defender XDR alerts, Log Analytics workbooks, and the integrated ITSM ticketing platform - for the duration of every shift. Monitor availability and performance of Active Directory domain controllers, DNS / DHCP / time service, ADFS, AAD Connect sync health, Entra ID sign-in service health, Exchange Online, SharePoint Online, Teams, OneDrive, Power Platform environments, Microsoft Fabric capacity, Azure VMs, storage, networking, and PaaS services. Triage incoming alerts within 5 minutes of generation, applying the documented severity matrix; classify alerts as actionable, suppressible, or false-positive, and record the rationale in the ticketing platform. Correlate alerts across multiple sources (Sentinel, Defender, Azure Monitor, M365 service health) to identify the underlying incident rather than reacting to individual symptoms. Acknowledge alerts and update tickets at the agreed cadence (every 60 minutes during P1; every 4 hours during P2) until handover or closure. Incident Response and Runbook Execution Execute Tier-1 incident response runbooks for known and documented patterns: Conditional Access misconfiguration rollback, AAD Connect sync failure restart, expired application secret rotation, Defender alert containment, mailbox / Teams reset operations, SharePoint sharing-link restoration, and Power Platform environment health checks. Initiate the major incident process for any P1 incident: page the duty L2/L3 specialist, open the Microsoft Teams incident bridge, notify the Service Delivery Manager and customer stakeholders per the agreed comms plan, and assume scribe duties on the bridge call. Maintain accurate incident timelines in the ticketing platform - every action, every status check, every communication - with timestamp and operator initials, suitable for post-incident review and audit. Execute documented automated containment playbooks (Sentinel Logic Apps) for high-confidence security events: disable risky users, force password reset, isolate device in Defender for Endpoint, block sender in Exchange Online. Hand over open incidents at shift change using the structured handover template (active incidents, watch-items, scheduled changes, planned maintenance, expected escalations). Service Request Fulfilment During Out-of-Hours Windows Fulfil pre-approved standard service requests during out-of-hours windows where authorised - for example licence assignment for emergency onboarding, Teams meeting policy adjustments for live events, or pre-approved Conditional Access exclusions - strictly within the documented standing change envelope. Monitoring Hygiene and Improvement Participate in alert tuning to reduce false-positive rate and alert fatigue: review noisy rules weekly, propose threshold or filter changes through change control, and validate post-change. Maintain monitoring runbook accuracy: every time a runbook is executed, capture deviations and feed back to the engineering team for runbook updates. Contribute weekly to the Service Delivery Manager's service review with a shift-summary report (alerts handled, incidents raised, false-positive trends, runbook gaps). Communication and Stakeholder Management Provide clear, factual, non-speculative communication during incidents in line with the proposed SLA Communication Plan - initial notification within 15 minutes of P1 declaration, updates at 60-minute intervals, and a wrap-up notification within 1 hour of resolution. Maintain the operational status page / Teams channel for customer stakeholders during major incidents. Comply strictly with EEA-only data processing requirements: no customer data is to leave the EEA boundary at any point during incident handling, and no screenshots / logs are to be transmitted via non-approved channels. Mandatory Technical Skills Hands-on experience operating Microsoft Sentinel and Azure Monitor in a production NOC / SOC: ingesting alerts, working incidents, executing playbooks, and authoring basic KQL queries. Working knowledge of the Microsoft 365 service health framework, Defender XDR alert lifecycle, and the Azure Service Health portal. Active Directory and Entra ID fundamentals - enough to triage authentication failures, replication issues, MFA / Conditional Access blocks, and PIM activations. Basic PowerShell and KQL - sufficient to run prepared queries, validate state, and capture evidence; not expected to author advanced detection content (that sits with the Security & Governance Specialist). ITIL v4 foundation - incident, problem, change and event management; understanding of priority matrix, SLA clocks, and major incident process. Strong written English for incident notes, comms, and handover; ability to write clearly and unambiguously under time pressure. Desirable Technical Skills KQL beyond basics - ability to extend prepared hunting queries with new filters under L2 supervision. Familiarity with ServiceNow / Jira Service Management / Freshservice (or equivalent ITSM). Experience with Power BI service health dashboards and Microsoft 365 Usage Analytics. Exposure to Azure DevOps work item tracking and Microsoft Teams incident bridge management. Awareness of GDPR Article 33 personal data breach notification timelines and EEA data residency obligations. Required Certifications Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900) - mandatory. Microsoft 365 Certified: Fundamentals (MS-900) - mandatory. Microsoft Certified: Security Operations Analyst Associate (SC-200) - preferred (mandatory within 12 months of starting). ITIL 4 Foundation - preferred. CompTIA Security+ or equivalent - desirable.
At On the Beach, we're redefining how millions of customers discover, plan and book their holidays. Our platform sits at the heart of that experience and we're now investing in the next frontier: AI-driven travel discovery. We're forming a new AI Discovery team. A small, senior led group with a mandate to explore and shape the future of how customers search, discover and plan their trips. This is not a traditional product team. It's an innovation-focused environment where experienced engineers lead ideas end-to-end, from concept through to real world validation working directly on problems that could redefine the customer experience. About the Role As a Senior Software Engineer in the AI Discovery team, you'll work at the frontier of applied AI building and testing new product experiences with real customers. You'll focus on rapid experimentation and intelligent prototyping, exploring areas such as: Conversational trip planning AI-powered personalisation and recommendations New search and discovery paradigms using LLMs Agent based and workflow-driven experiences This role is about learning fast and building the right things, not just building things right. You'll collaborate closely with product managers, designers, analysts and researchers to design experiments, validate ideas and identify which opportunities are worth scaling into full product capabilities. Why This Role Is Different You'll work on AI-driven problems that reach real customers, not just internal demos, with the autonomy to explore ideas in a low-process, high-trust environment. This is a role where you'll help shape product direction as much as implementation, while influencing how AI is adopted across the organisation. You'll be part of a small, experienced team focused on solving meaningful problems and driving real impact. Why Join Us This is an opportunity to work at the intersection of AI, product, and customer experience, contributing to how a well-established travel platform continues to evolve with new technologies. If you enjoy exploring new ideas, experimenting with emerging tools, and building solutions that can influence product direction, we'd love to hear from you! What you'll be doing day to day Design and build lean, high-impact prototypes to test hypotheses with real customers Run multiple experiments each quarter using approaches like fake-door tests, rapid prototypes and beta releases Explore and apply modern AI capabilities, including LLMs, retrieval systems and recommendation techniques Work across the full stack: from backend services and APIs to frontend experiences Collaborate with cross-functional partners to design experiments that maximise learning Iterate quickly based on qualitative and quantitative feedback Partner with existing product teams when experimenting in their domains Contribute to internal tooling, patterns and approaches that accelerate AI adoption across engineering Balance speed and pragmatism, knowing when to move fast and when to invest in robustness You'll be a great addition to our team if you have the following skills, knowledge and experience We're looking for experienced engineers who are comfortable operating in ambiguous, fast-moving environments and enjoy solving new types of problems. Strong full-stack engineering skills, with the ability to ship working software quickly Experience working with modern AI/ML tools or APIs (e.g. LLMs, OpenAI, Anthropic, Bedrock or similar) A track record of working in ambiguous problem spaces and driving ideas forward The ability to make pragmatic technical decisions with incomplete information Experience building prototypes, MVPs, or working in innovation focused environments A strong product mindset (you care about customer impact, not just technical elegance!) Confidence communicating ideas and trade-offs to both technical and non-technical stakeholders A collaborative approach and the ability to work effectively across team boundaries Nice to Have Experience validating product ideas through experimentation (A/B testing, user research, etc.) Exposure to recommendation systems, search or personalisation problems Experience contributing to technical direction or mentoring other engineers What Success Looks Like Success in this role is defined by the impact you create and the speed at which we learn, rather than output alone. You'll run high-quality experiments that generate meaningful insights, identify promising opportunities early, and help shape their direction. As ideas prove their value, you'll play a key role in guiding them towards production while also helping to foster a broader culture of experimentation and AI adoption across engineering. What to expect from our interview process We'll run a multiple stage interview process, one stage we may ask you to pop in and visit in-person interview at our fabulous Aeroworks office in Manchester city centre. Alternatively we can usually accommodate a final stage virtually also. We want to make sure everybody has the opportunity to perform at their best. If you require any reasonable adjustments during the interview process please let the Talent Acquisition team know and they will be happy to assist. Ways of working Our full time hours are 37.5 per week, but we don't have rigid working hours so you can find the working pattern that's right for you. We have core working hours between 10am - 4pm, so we can collaborate and enjoy the social side of work. We also have hybrid working so we all work from home and from our Aeroworks office in Manchester City Centre. As a team we are in the office 1 day every 2 weeks (usually Tuesday or Wednesday). Our benefits We might be biased but we think our colleagues are pretty great. They're the people that have made On the Beach what it is today and continue to make it vibrant and successful tomorrow. That's why we offer a competitive benefits package, known as our Beach Perks, to all On the Beach colleagues. 25 days holiday plus your birthday off Generous discount on holidays, plus you will receive 2 extra days annual leave on top of your holiday allowance to use whilst you're away on your On the Beach package holiday Access to Learnerbly learning platform, plus workshops, courses and professional qualifications Enhanced maternity, paternity, shared parental leave and adoption pay, plus other family friendly support Employee Assistance Programme and free access to counselling Simplyhealth Optimise Health Plan Company Sick Pay scheme Regular wellbeing events Gym discount Share Incentive Plan (SIP) Death in Service cover Onsite subsidised coffee shop The Sandbox (our very own bar) Food and drink discounts across a number of venues in Manchester City Centre Regular social events Cycle to Work scheme
08/06/2026
Full time
At On the Beach, we're redefining how millions of customers discover, plan and book their holidays. Our platform sits at the heart of that experience and we're now investing in the next frontier: AI-driven travel discovery. We're forming a new AI Discovery team. A small, senior led group with a mandate to explore and shape the future of how customers search, discover and plan their trips. This is not a traditional product team. It's an innovation-focused environment where experienced engineers lead ideas end-to-end, from concept through to real world validation working directly on problems that could redefine the customer experience. About the Role As a Senior Software Engineer in the AI Discovery team, you'll work at the frontier of applied AI building and testing new product experiences with real customers. You'll focus on rapid experimentation and intelligent prototyping, exploring areas such as: Conversational trip planning AI-powered personalisation and recommendations New search and discovery paradigms using LLMs Agent based and workflow-driven experiences This role is about learning fast and building the right things, not just building things right. You'll collaborate closely with product managers, designers, analysts and researchers to design experiments, validate ideas and identify which opportunities are worth scaling into full product capabilities. Why This Role Is Different You'll work on AI-driven problems that reach real customers, not just internal demos, with the autonomy to explore ideas in a low-process, high-trust environment. This is a role where you'll help shape product direction as much as implementation, while influencing how AI is adopted across the organisation. You'll be part of a small, experienced team focused on solving meaningful problems and driving real impact. Why Join Us This is an opportunity to work at the intersection of AI, product, and customer experience, contributing to how a well-established travel platform continues to evolve with new technologies. If you enjoy exploring new ideas, experimenting with emerging tools, and building solutions that can influence product direction, we'd love to hear from you! What you'll be doing day to day Design and build lean, high-impact prototypes to test hypotheses with real customers Run multiple experiments each quarter using approaches like fake-door tests, rapid prototypes and beta releases Explore and apply modern AI capabilities, including LLMs, retrieval systems and recommendation techniques Work across the full stack: from backend services and APIs to frontend experiences Collaborate with cross-functional partners to design experiments that maximise learning Iterate quickly based on qualitative and quantitative feedback Partner with existing product teams when experimenting in their domains Contribute to internal tooling, patterns and approaches that accelerate AI adoption across engineering Balance speed and pragmatism, knowing when to move fast and when to invest in robustness You'll be a great addition to our team if you have the following skills, knowledge and experience We're looking for experienced engineers who are comfortable operating in ambiguous, fast-moving environments and enjoy solving new types of problems. Strong full-stack engineering skills, with the ability to ship working software quickly Experience working with modern AI/ML tools or APIs (e.g. LLMs, OpenAI, Anthropic, Bedrock or similar) A track record of working in ambiguous problem spaces and driving ideas forward The ability to make pragmatic technical decisions with incomplete information Experience building prototypes, MVPs, or working in innovation focused environments A strong product mindset (you care about customer impact, not just technical elegance!) Confidence communicating ideas and trade-offs to both technical and non-technical stakeholders A collaborative approach and the ability to work effectively across team boundaries Nice to Have Experience validating product ideas through experimentation (A/B testing, user research, etc.) Exposure to recommendation systems, search or personalisation problems Experience contributing to technical direction or mentoring other engineers What Success Looks Like Success in this role is defined by the impact you create and the speed at which we learn, rather than output alone. You'll run high-quality experiments that generate meaningful insights, identify promising opportunities early, and help shape their direction. As ideas prove their value, you'll play a key role in guiding them towards production while also helping to foster a broader culture of experimentation and AI adoption across engineering. What to expect from our interview process We'll run a multiple stage interview process, one stage we may ask you to pop in and visit in-person interview at our fabulous Aeroworks office in Manchester city centre. Alternatively we can usually accommodate a final stage virtually also. We want to make sure everybody has the opportunity to perform at their best. If you require any reasonable adjustments during the interview process please let the Talent Acquisition team know and they will be happy to assist. Ways of working Our full time hours are 37.5 per week, but we don't have rigid working hours so you can find the working pattern that's right for you. We have core working hours between 10am - 4pm, so we can collaborate and enjoy the social side of work. We also have hybrid working so we all work from home and from our Aeroworks office in Manchester City Centre. As a team we are in the office 1 day every 2 weeks (usually Tuesday or Wednesday). Our benefits We might be biased but we think our colleagues are pretty great. They're the people that have made On the Beach what it is today and continue to make it vibrant and successful tomorrow. That's why we offer a competitive benefits package, known as our Beach Perks, to all On the Beach colleagues. 25 days holiday plus your birthday off Generous discount on holidays, plus you will receive 2 extra days annual leave on top of your holiday allowance to use whilst you're away on your On the Beach package holiday Access to Learnerbly learning platform, plus workshops, courses and professional qualifications Enhanced maternity, paternity, shared parental leave and adoption pay, plus other family friendly support Employee Assistance Programme and free access to counselling Simplyhealth Optimise Health Plan Company Sick Pay scheme Regular wellbeing events Gym discount Share Incentive Plan (SIP) Death in Service cover Onsite subsidised coffee shop The Sandbox (our very own bar) Food and drink discounts across a number of venues in Manchester City Centre Regular social events Cycle to Work scheme
Overview Role: Application Support Analyst - 6 / 12 month FTC Location: UK, Shoreham-by-Sea, Leamington Spa, Prague, Czechia - Hybrid Role ID: The Role Ricardo is looking to hire a new Application Support Analyst to join our global Applications CoE team, initially specialising in the support of Share Point, Net and Java applications and associated platforms incl. MSSQL. As Ricardo has a varied system architecture you will be encouraged to grow within the role and embrace the opportunity to diversify your skillset in alignment with your career aspirations. Reporting into the Technical Architect, this role can be located in either the UK or Prague from where you will be responsible for the day to day support of Ricardo end users both when they encounter a problem or when they need help with the way a system performs. In addition to day to day support activities, you will contribute to project based initiatives aligned with the Applications CoE roadmap. This will include involvement in the delivery of system enhancements, platform upgrades, and new application implementations, working collaboratively with technical and business stakeholders. You will play an active role across the project life cycle, from testing through deployment, and post implementation support. This will provide opportunities to apply your technical expertise in a structured delivery environment while continuing to develop your skills across Ricardo's diverse application landscape. Using your great interpersonal skills and ability to convey technical information succinctly, you will also provide technical expertise to the wider business as required, enabling them to implement their own solutions in a timely fashion. Key Responsibilities Monitoring our internal Help desk system and responding to tickets in a timely manner, ensuring adherence to agreed SLAs. Using your technical expertise to resolve Tier 2 incidents and service requests, and managing the life cycle of issues escalated to Tier 3. Performing daily health checks across key applications and infrastructure, proactively identifying and resolving potential issues before they impact service. Investigating recurring incidents and working to identify root causes, implementing permanent fixes where possible. Collaborating with the wider Business Systems and IT teams to provide technical support and guidance from meetings and ongoing initiatives. Maintaining and updating technical documentation, knowledge base articles, and support procedures to ensure consistency and knowledge sharing. Supporting application releases, patches, and upgrades, including testing and post deployment validation. Contributing to continuous improvement initiatives within the Applications CoE, including process optimisation, standardisation, and automation. Participating in project based work such as system enhancements, migrations, and new application implementations, working alongside technical and business stakeholders. Assisting with user acceptance testing (UAT) as part of project delivery. Providing clear and concise communication to end users and stakeholders, translating technical issues into understandable terms. Ensuring compliance with IT governance, security policies, and best practices across supported applications and platforms. Key Competencies and Experience Degree in an IT related area or experience in an Application Support role with a provable work history in troubleshooting complex issues. Thoughtful, clear communication skills; ability to communicate complex messages effectively with clients and key stakeholders at their level of understanding via written word and face to face meetings. Being mindful of SLAs and KPIs you are a skilled multi tasker who can handle multiple, shifting, and competing priorities. Experience with an ITSM tool such as Vivantio or similar and understanding the various stages of ticket management. Fluency in English is a requirement for this role. Benefits Your remuneration and benefits package will reflect that you are valued. You will receive a range of benefits which include support for your physical and mental health. Diversity, Equality, and Inclusion statement We are an Equal Opportunity Employer, we believe in each person's potential, and we are committed to diversity, equality, and inclusion. We are a recognised 'disability confident' employer.
08/06/2026
Full time
Overview Role: Application Support Analyst - 6 / 12 month FTC Location: UK, Shoreham-by-Sea, Leamington Spa, Prague, Czechia - Hybrid Role ID: The Role Ricardo is looking to hire a new Application Support Analyst to join our global Applications CoE team, initially specialising in the support of Share Point, Net and Java applications and associated platforms incl. MSSQL. As Ricardo has a varied system architecture you will be encouraged to grow within the role and embrace the opportunity to diversify your skillset in alignment with your career aspirations. Reporting into the Technical Architect, this role can be located in either the UK or Prague from where you will be responsible for the day to day support of Ricardo end users both when they encounter a problem or when they need help with the way a system performs. In addition to day to day support activities, you will contribute to project based initiatives aligned with the Applications CoE roadmap. This will include involvement in the delivery of system enhancements, platform upgrades, and new application implementations, working collaboratively with technical and business stakeholders. You will play an active role across the project life cycle, from testing through deployment, and post implementation support. This will provide opportunities to apply your technical expertise in a structured delivery environment while continuing to develop your skills across Ricardo's diverse application landscape. Using your great interpersonal skills and ability to convey technical information succinctly, you will also provide technical expertise to the wider business as required, enabling them to implement their own solutions in a timely fashion. Key Responsibilities Monitoring our internal Help desk system and responding to tickets in a timely manner, ensuring adherence to agreed SLAs. Using your technical expertise to resolve Tier 2 incidents and service requests, and managing the life cycle of issues escalated to Tier 3. Performing daily health checks across key applications and infrastructure, proactively identifying and resolving potential issues before they impact service. Investigating recurring incidents and working to identify root causes, implementing permanent fixes where possible. Collaborating with the wider Business Systems and IT teams to provide technical support and guidance from meetings and ongoing initiatives. Maintaining and updating technical documentation, knowledge base articles, and support procedures to ensure consistency and knowledge sharing. Supporting application releases, patches, and upgrades, including testing and post deployment validation. Contributing to continuous improvement initiatives within the Applications CoE, including process optimisation, standardisation, and automation. Participating in project based work such as system enhancements, migrations, and new application implementations, working alongside technical and business stakeholders. Assisting with user acceptance testing (UAT) as part of project delivery. Providing clear and concise communication to end users and stakeholders, translating technical issues into understandable terms. Ensuring compliance with IT governance, security policies, and best practices across supported applications and platforms. Key Competencies and Experience Degree in an IT related area or experience in an Application Support role with a provable work history in troubleshooting complex issues. Thoughtful, clear communication skills; ability to communicate complex messages effectively with clients and key stakeholders at their level of understanding via written word and face to face meetings. Being mindful of SLAs and KPIs you are a skilled multi tasker who can handle multiple, shifting, and competing priorities. Experience with an ITSM tool such as Vivantio or similar and understanding the various stages of ticket management. Fluency in English is a requirement for this role. Benefits Your remuneration and benefits package will reflect that you are valued. You will receive a range of benefits which include support for your physical and mental health. Diversity, Equality, and Inclusion statement We are an Equal Opportunity Employer, we believe in each person's potential, and we are committed to diversity, equality, and inclusion. We are a recognised 'disability confident' employer.
Role Summary As a Senior Threat Analyst - Tier I on our Managed Detection and Response (MDR) team, you will provide best in class monitoring, detection, and response services to proactively defend customer environments before attacks prevail. You will work alongside and contribute to a team of cyber threat hunters, incident response analysts, engineers, and ethical hackers by using enterprise, log analysis and endpoint collection systems to facilitate investigations, identification, and neutralization of cyber threats. What You Will Do Monitor, investigate, and respond to alerts generated by the Sophos security stack (including EDR/XDR capabilities) Lead and mentor Tier I Analysts through escalated cases, ensuring thorough and accurate investigation practices. Perform end to end analysis on suspicious activity to assess scope, impact, and risk Identify and respond to cyber threats across customer environments using approved playbooks and tooling Accurately document findings, investigative steps, and outcomes in the MDR case management platform Conduct threat hunting to identify potential threats throughout the MDR customer base Investigate phishing emails, suspicious binaries, and behavioral anomalies Support detection tuning by identifying recurring false positives and suggesting improvements Stay informed on threat actor behaviors, MITRE ATT&CK techniques, and Sophos threat research updates Proactively research emerging IOCs, active exploits, and vulnerabilities to stay ahead of evolving threats Contribute to internal knowledge bases, documentation, and continuous improvement initiatives Participate in shift rotations and ensure timely, detailed handovers between global teams Provide detection and response support for active security incidents Manage case workflows: create cases, track progress, and follow up with clients until resolution Engage with clients via chat, phone, and tickets as part of case handling Assist with developing and refining Security Operations processes, playbooks, and tooling feedback What You Will Bring Essential 3+ years of hands on experience in a Security Operations Center (SOC), Managed Detection and Response (MDR) environment, or cybersecurity focused IT role Proficient in the use of endpoint and network security tools (e.g., EDR, IDS/IPS, malware detection platforms) with the ability to validate and triage complex alerts Working knowledge of Windows operating systems (both workstation and server), with additional experience in Linux (Ubuntu, Debian, RedHat) or macOS environments Ability to interpret and analyze Windows event logs and other telemetry data Understanding of core network concepts including TCP/IP, protocols, routing, and traffic analysis Demonstrated experience contributing to real time incident response efforts and threat investigations Exposure to threat hunting methodologies and an understanding of attacker behavior and patterns Experience handling active threats, including containment, mitigation, and recovery efforts during security incidents Familiar with techniques such as persistence, privilege escalation, lateral movement, and defense evasion, and able to identify these in real world environments Familiarity with common incident response workflows and security operations processes Strong analytical thinking and troubleshooting skills, with attention to detail in investigations and case documentation Excellent communication skills, with the ability to clearly explain findings to both technical and non technical audiences Customer first mindset with professionalism and a focus on service excellence Must thrive within a team environment as well as on an individual basis Natural curiosity and willingness to learn in a fast paced, ever changing threat landscape A passion for cybersecurity, continuous improvement, and staying current on threat trends Bachelor's degree in information technology, Computer Science, Cybersecurity or related field, or equivalent practical experience Ability to communicate in English Willingness to participate in shift work including nights, weekends and holidays (our MDR service is 24x7x365) Desirable Familiarity with the MITRE ATT&CK framework and its application in detection and response Experience working with SIEM platforms and managing enterprise security telemetry Ability to write and interpret SQL queries for data analysis and investigation Experience with OSQuery and scripting skills, particularly in PowerShell Relevant and practical cybersecurity certifications (e.g., GSEC, GCIA, GCIH, PEN-200, Security Blue Team L1, TCM Academy SOC L1, or similar) We're proud of the diverse and inclusive environment we have at Sophos, and we're committed to ensuring equality of opportunity. We believe that diversity, combined with excellence, builds a better Sophos, so we encourage applicants who can contribute to the diversity of our team. All applicants will be treated in a fair and equal manner and in accordance with the law regardless of gender, sex, gender reassignment, marital status, race, religion or belief, color, age, military veteran status, disability, pregnancy, maternity or sexual orientation. We want to give you every opportunity to show us your best self, so if there are any adjustments we could make to the recruitment and selection process to support you, please let us know.
06/06/2026
Full time
Role Summary As a Senior Threat Analyst - Tier I on our Managed Detection and Response (MDR) team, you will provide best in class monitoring, detection, and response services to proactively defend customer environments before attacks prevail. You will work alongside and contribute to a team of cyber threat hunters, incident response analysts, engineers, and ethical hackers by using enterprise, log analysis and endpoint collection systems to facilitate investigations, identification, and neutralization of cyber threats. What You Will Do Monitor, investigate, and respond to alerts generated by the Sophos security stack (including EDR/XDR capabilities) Lead and mentor Tier I Analysts through escalated cases, ensuring thorough and accurate investigation practices. Perform end to end analysis on suspicious activity to assess scope, impact, and risk Identify and respond to cyber threats across customer environments using approved playbooks and tooling Accurately document findings, investigative steps, and outcomes in the MDR case management platform Conduct threat hunting to identify potential threats throughout the MDR customer base Investigate phishing emails, suspicious binaries, and behavioral anomalies Support detection tuning by identifying recurring false positives and suggesting improvements Stay informed on threat actor behaviors, MITRE ATT&CK techniques, and Sophos threat research updates Proactively research emerging IOCs, active exploits, and vulnerabilities to stay ahead of evolving threats Contribute to internal knowledge bases, documentation, and continuous improvement initiatives Participate in shift rotations and ensure timely, detailed handovers between global teams Provide detection and response support for active security incidents Manage case workflows: create cases, track progress, and follow up with clients until resolution Engage with clients via chat, phone, and tickets as part of case handling Assist with developing and refining Security Operations processes, playbooks, and tooling feedback What You Will Bring Essential 3+ years of hands on experience in a Security Operations Center (SOC), Managed Detection and Response (MDR) environment, or cybersecurity focused IT role Proficient in the use of endpoint and network security tools (e.g., EDR, IDS/IPS, malware detection platforms) with the ability to validate and triage complex alerts Working knowledge of Windows operating systems (both workstation and server), with additional experience in Linux (Ubuntu, Debian, RedHat) or macOS environments Ability to interpret and analyze Windows event logs and other telemetry data Understanding of core network concepts including TCP/IP, protocols, routing, and traffic analysis Demonstrated experience contributing to real time incident response efforts and threat investigations Exposure to threat hunting methodologies and an understanding of attacker behavior and patterns Experience handling active threats, including containment, mitigation, and recovery efforts during security incidents Familiar with techniques such as persistence, privilege escalation, lateral movement, and defense evasion, and able to identify these in real world environments Familiarity with common incident response workflows and security operations processes Strong analytical thinking and troubleshooting skills, with attention to detail in investigations and case documentation Excellent communication skills, with the ability to clearly explain findings to both technical and non technical audiences Customer first mindset with professionalism and a focus on service excellence Must thrive within a team environment as well as on an individual basis Natural curiosity and willingness to learn in a fast paced, ever changing threat landscape A passion for cybersecurity, continuous improvement, and staying current on threat trends Bachelor's degree in information technology, Computer Science, Cybersecurity or related field, or equivalent practical experience Ability to communicate in English Willingness to participate in shift work including nights, weekends and holidays (our MDR service is 24x7x365) Desirable Familiarity with the MITRE ATT&CK framework and its application in detection and response Experience working with SIEM platforms and managing enterprise security telemetry Ability to write and interpret SQL queries for data analysis and investigation Experience with OSQuery and scripting skills, particularly in PowerShell Relevant and practical cybersecurity certifications (e.g., GSEC, GCIA, GCIH, PEN-200, Security Blue Team L1, TCM Academy SOC L1, or similar) We're proud of the diverse and inclusive environment we have at Sophos, and we're committed to ensuring equality of opportunity. We believe that diversity, combined with excellence, builds a better Sophos, so we encourage applicants who can contribute to the diversity of our team. All applicants will be treated in a fair and equal manner and in accordance with the law regardless of gender, sex, gender reassignment, marital status, race, religion or belief, color, age, military veteran status, disability, pregnancy, maternity or sexual orientation. We want to give you every opportunity to show us your best self, so if there are any adjustments we could make to the recruitment and selection process to support you, please let us know.
Job title: Liquidity Business Analyst - Treasury Job Type: Temporary (PAYE) Contract Duration: 9 Months Department: Finance Location: London Nomura is a global financial services group with an integrated network spanning approximately 30 countries and regions. By connecting markets East & West, Nomura services the needs of individuals, institutions, corporates and governments through its three business divisions: Wealth Management, Investment Management, and Wholesale (Global Markets and Investment Banking). Founded in 1925, the firm is built on a tradition of disciplined entrepreneurship, serving clients with creative solutions and considered thought leadership. For further information about Nomura, visit Treasury Planning and Analysis comprises of four key sub-areas; EMEA Liquidity Risk Policy (LRP), Data Assurance (Data), Regulatory Reporting & Controls (RRP) and Treasury Chief Operating Officer/Office (Treasury COO). Treasury COO is a key component of the Finance Treasury Department. Senior management takes a hands on approach within the department, and is keen to reward hard work, enthusiasm and success. A willingness to constantly question established processes, and strive for improvements is actively encouraged, leading to an ever changing and exciting environment. Nomura offers a unique opportunity to gain broad experience across multiple products and business lines, supported by skilled professionals. Overview The Business Analysts in the Treasury COO team are based onshore and offshore. The BA process involves regular project updates (daily/weekly) and monthly change control governance. The BA team are responsible for the gap analysis, requirements gathering, solution design, UAT and documentation of data and calculation system changes and transformation. The role is in the Treasury COO BA team, which forms part of the Treasury department of Nomura's UK Finance Division. The successful candidate will take responsibility for the delivery of numerous firmwide data and calculation change and transformation initiatives and work programs to enhance overall front to back Treasury and Finance data and system capabilities. This role requires an individual with a mixture of Treasury SME (Subject Matter Expert), Data and BA (Business Analyst) skillsets. It will include working with colleagues in London, Tokyo, Singapore, US and Mumbai. Specific Responsibilities Lead front to back data and systems change and transformation for Treasury from data and calculation as well as from a reporting perspective, including taking necessary operational decisions and integration with other departments Ensure changes are standardised and aligned for both internal and regulatory liquidity reporting Support end to end testing (Dev, SIT & UAT) Prepare, present and recommend items for approval in technical design and data governance forums as well as Global Liquidity SteerCo including supporting artefacts as required Engage with Liquidity policy and reporting SMEs, RRP (Recovery Resolution Programme), FiR (Funding in Resolution) team and FLM (Funding & Liquidity Management) team based in numerous locations globally Work closely with upstream data providers to identify trusted data, validate and analyse any data changes & resolving data quality issues Advancing tactical and strategic data quality remediation & validations holding upstream providers to account Perform analysis into data quality issues root causes and new product / business process, ensuring all downstream implications are understood and supporting effective prioritisation Monitor data quality controls associated with the inputs and outputs from the risk systems (this will include investigation of issues and reporting against the firm's KRI framework) Supporting product SMEs in identifying the trusted source of data for liquidity reporting purposes, agreeing and checking mitigating controls with manual data providers Build strong relationships with various departments including Front Office, Product Control, Risk, Legal, IT and Senior Management across the bank Key Objectives Critical to Success Ability to work to high degree of accuracy with logical and structured approach Ability to self review, identify issues and investigate / escalation appropriately Willingness and ability to learn new tools (in house and external) and deep dive into underlying codes/scripts/data Ability to communicate effectively with colleagues and to build relationships within the department and across functions Ability to document effectively key processes Skills, Experience, Qualifications and Knowledge Required Liquidity experience gained in an Investment banking environment performing front to back data and system change and transformation Knowledge of PRA (UK Basel 3) & EBA (CRRII) Liquidity reporting rules (LCR, NSFR, ALMM, Asset Encumbrance, TWD, RRP, FiR) Familiarity with JFSA Basel III Liquidity rules would be a distinct advantage Investment banking product knowledge (specifically Secured/ Unsecured Financing transactions & Derivatives) including front to back trade lifecycle knowledge and an understanding of their impact on Liquidity reporting Ability to connect data to liquidity risk management Ability to understand and challenge the detail Strong analytical/numerical/problem solving/investigative skills Excellent communication and presentation skills Excellent organisational and planning skills, with proven track record of delivery Strong documentation skills (e.g. JIRAs, Confluence, Github), promoting concise and clear written deliverables Exceptional drive, motivation and commitment and focus in operational excellence Good IT Literacy, with a strong Data Analysis skillset Familiar with Investment Banking systems and data management techniques Familiarity with big data analytics/business intelligence tools (e.g. Tableau, Power BI, Alteryx) and data frameworks (e.g. Hadoop, MAPR, MinIO) would be a distinct advantage Familiarity with coding tools (e.g. Python, SQL) would be a distinct advantage Results focused in a pressurised environment with tight project deadlines Nomura Competencies Explore Insights & Vision Identify the underlying causes of problems faced by you or your team and define a clear vision and direction for the future. Making Strategic Decisions Evaluate all the options for resolving the problems and effectively prioritise and recommend actions or recommendations. Inspire Entrepreneurship in People Inspire team members through effective communication of ideas and motivate them to actively enhance productivity. Elevate Organizational Capability Engage proactively in professional development and enhance team productivity through the promotion of knowledge sharing. Inclusion Respect DEI, foster a culture of psychological safety in the workplace and cultivate a "Risk Culture" (Challenge, Escalate and Respect). Right to Work The UK Government have taken steps to reduce net migration to the UK by limiting the number of overseas workers coming to the UK for employment. Please note that whilst we are able to consider applications from overseas workers from outside the UK (who require a Tier 2 Skilled Worker visa) we can only employ them if we can provide evidence that this is a genuine vacancy for a qualified role. Diversity & Inclusion Nomura is an equal opportunity employer. We value diversity and are committed to ensuring we best reflect the diversity of the communities we serve creating an inclusive environment for all our employees. We welcome all applications and do not discriminate on the basis of age, disability, gender identity and gender expression, pregnancy and maternity, marriage and civil partnership, race, religion or belief, sex or sexual orientation. If you require any assistance or reasonable adjustments due to a disability or long term health condition, please do not hesitate to contact us. Nomura is an Equal Opportunity Employer
05/06/2026
Full time
Job title: Liquidity Business Analyst - Treasury Job Type: Temporary (PAYE) Contract Duration: 9 Months Department: Finance Location: London Nomura is a global financial services group with an integrated network spanning approximately 30 countries and regions. By connecting markets East & West, Nomura services the needs of individuals, institutions, corporates and governments through its three business divisions: Wealth Management, Investment Management, and Wholesale (Global Markets and Investment Banking). Founded in 1925, the firm is built on a tradition of disciplined entrepreneurship, serving clients with creative solutions and considered thought leadership. For further information about Nomura, visit Treasury Planning and Analysis comprises of four key sub-areas; EMEA Liquidity Risk Policy (LRP), Data Assurance (Data), Regulatory Reporting & Controls (RRP) and Treasury Chief Operating Officer/Office (Treasury COO). Treasury COO is a key component of the Finance Treasury Department. Senior management takes a hands on approach within the department, and is keen to reward hard work, enthusiasm and success. A willingness to constantly question established processes, and strive for improvements is actively encouraged, leading to an ever changing and exciting environment. Nomura offers a unique opportunity to gain broad experience across multiple products and business lines, supported by skilled professionals. Overview The Business Analysts in the Treasury COO team are based onshore and offshore. The BA process involves regular project updates (daily/weekly) and monthly change control governance. The BA team are responsible for the gap analysis, requirements gathering, solution design, UAT and documentation of data and calculation system changes and transformation. The role is in the Treasury COO BA team, which forms part of the Treasury department of Nomura's UK Finance Division. The successful candidate will take responsibility for the delivery of numerous firmwide data and calculation change and transformation initiatives and work programs to enhance overall front to back Treasury and Finance data and system capabilities. This role requires an individual with a mixture of Treasury SME (Subject Matter Expert), Data and BA (Business Analyst) skillsets. It will include working with colleagues in London, Tokyo, Singapore, US and Mumbai. Specific Responsibilities Lead front to back data and systems change and transformation for Treasury from data and calculation as well as from a reporting perspective, including taking necessary operational decisions and integration with other departments Ensure changes are standardised and aligned for both internal and regulatory liquidity reporting Support end to end testing (Dev, SIT & UAT) Prepare, present and recommend items for approval in technical design and data governance forums as well as Global Liquidity SteerCo including supporting artefacts as required Engage with Liquidity policy and reporting SMEs, RRP (Recovery Resolution Programme), FiR (Funding in Resolution) team and FLM (Funding & Liquidity Management) team based in numerous locations globally Work closely with upstream data providers to identify trusted data, validate and analyse any data changes & resolving data quality issues Advancing tactical and strategic data quality remediation & validations holding upstream providers to account Perform analysis into data quality issues root causes and new product / business process, ensuring all downstream implications are understood and supporting effective prioritisation Monitor data quality controls associated with the inputs and outputs from the risk systems (this will include investigation of issues and reporting against the firm's KRI framework) Supporting product SMEs in identifying the trusted source of data for liquidity reporting purposes, agreeing and checking mitigating controls with manual data providers Build strong relationships with various departments including Front Office, Product Control, Risk, Legal, IT and Senior Management across the bank Key Objectives Critical to Success Ability to work to high degree of accuracy with logical and structured approach Ability to self review, identify issues and investigate / escalation appropriately Willingness and ability to learn new tools (in house and external) and deep dive into underlying codes/scripts/data Ability to communicate effectively with colleagues and to build relationships within the department and across functions Ability to document effectively key processes Skills, Experience, Qualifications and Knowledge Required Liquidity experience gained in an Investment banking environment performing front to back data and system change and transformation Knowledge of PRA (UK Basel 3) & EBA (CRRII) Liquidity reporting rules (LCR, NSFR, ALMM, Asset Encumbrance, TWD, RRP, FiR) Familiarity with JFSA Basel III Liquidity rules would be a distinct advantage Investment banking product knowledge (specifically Secured/ Unsecured Financing transactions & Derivatives) including front to back trade lifecycle knowledge and an understanding of their impact on Liquidity reporting Ability to connect data to liquidity risk management Ability to understand and challenge the detail Strong analytical/numerical/problem solving/investigative skills Excellent communication and presentation skills Excellent organisational and planning skills, with proven track record of delivery Strong documentation skills (e.g. JIRAs, Confluence, Github), promoting concise and clear written deliverables Exceptional drive, motivation and commitment and focus in operational excellence Good IT Literacy, with a strong Data Analysis skillset Familiar with Investment Banking systems and data management techniques Familiarity with big data analytics/business intelligence tools (e.g. Tableau, Power BI, Alteryx) and data frameworks (e.g. Hadoop, MAPR, MinIO) would be a distinct advantage Familiarity with coding tools (e.g. Python, SQL) would be a distinct advantage Results focused in a pressurised environment with tight project deadlines Nomura Competencies Explore Insights & Vision Identify the underlying causes of problems faced by you or your team and define a clear vision and direction for the future. Making Strategic Decisions Evaluate all the options for resolving the problems and effectively prioritise and recommend actions or recommendations. Inspire Entrepreneurship in People Inspire team members through effective communication of ideas and motivate them to actively enhance productivity. Elevate Organizational Capability Engage proactively in professional development and enhance team productivity through the promotion of knowledge sharing. Inclusion Respect DEI, foster a culture of psychological safety in the workplace and cultivate a "Risk Culture" (Challenge, Escalate and Respect). Right to Work The UK Government have taken steps to reduce net migration to the UK by limiting the number of overseas workers coming to the UK for employment. Please note that whilst we are able to consider applications from overseas workers from outside the UK (who require a Tier 2 Skilled Worker visa) we can only employ them if we can provide evidence that this is a genuine vacancy for a qualified role. Diversity & Inclusion Nomura is an equal opportunity employer. We value diversity and are committed to ensuring we best reflect the diversity of the communities we serve creating an inclusive environment for all our employees. We welcome all applications and do not discriminate on the basis of age, disability, gender identity and gender expression, pregnancy and maternity, marriage and civil partnership, race, religion or belief, sex or sexual orientation. If you require any assistance or reasonable adjustments due to a disability or long term health condition, please do not hesitate to contact us. Nomura is an Equal Opportunity Employer
Why We Exist Economic incentives, environmental pressures, and regulatory shifts are driving a global move toward the circular economy. Consumers and businesses are already moving away from rigid ownership models in favour of more flexible, affordable access. Yet while big tech has embedded subscriptions in everything from music to software to storage, the $1.5 trillion electronic device market remains deeply underserved. Until now. Raylo is the subscription infrastructure for the world's leading electronics brands, powering the circular economy by making devices more accessible, affordable, and flexible for consumers and businesses. The only way customers and manufacturers will make that shift is if it's simple and cost-effective. This is where we come in. What We've Built We enable the world's leading electronics brands to shift from single-use to circular, customer centric business models. We're at £70m ARR, profitable, growing fast, with 200,000+ active subscriptions across consumers and small businesses. Customers trust us too, with a 4.5/5 Trustpilot rating from more than 20,000 reviews. For customers, the experience is simple: subscribe to a device, get support throughout, upgrade when you want, and return it when you're done. Behind that sits a sophisticated fintech platform powering device subscriptions end to end: credit and fraud decisioning, lifecycle operations, and the financing engine that lets brands offer subscriptions without using their own balance sheet. No one else has built the full infrastructure to run electronics subscriptions at scale. Our platform has two sides. marketplace gives consumers and small businesses access to premium tech from the world's leading electronics brands. Raylo Pay is our embedded product, enabling brands such as PlayStation and LG to launch subscription journeys directly through their own DTC and ecommerce channels. The impact of our circular model is big. We cut emissions per device by around 50% compared to buy-and-discard. We're B Corp certified, backed by Macquarie, NatWest and Channel 4 Ventures, and recognised by Tech Nation's Future Fifty. How We Work AI is changing what small, ambitious teams can build. Companies that embrace it will define the next decade. Raylo is uniquely placed to benefit. We combine proprietary technology and data with the orchestration of physical assets, operating across credit, fraud, pricing, logistics, refurbishment, resale and customer care. With AI improving every cycle, our moat deepens with scale. At Raylo, AI is woven into how we work every day. We don't ration access or hedge our bets. Our people use the best models and tools, and we expect them to do things that weren't possible a year ago. Processes that used to be good enough are being rebuilt. Teams are replacing spreadsheets with bespoke tooling, and anyone can query our data layer in plain English and get a real answer in seconds. We give every team their own hackathon: a chance to step back, start with a blank sheet, and ask: if we were starting today, how would we do this? The more we automate, the more human judgement matters. AI gives people back time, and we expect them to spend it on the things no model can replicate: conversations, trust, craft and team judgement. We hire to a high bar. You'll work with people who push you, raise your game and expect you to do the same. We want every person at Raylo to do the best work of their lives, and enjoy doing it. Our Core Values Be deeply curious - We thrive on innovation through diverse approaches, views, and people. Walk in your customer's shoes - To build the best products and make the best decisions for the long term, we must figure out what our customers need, not just what they want. Focus and execute - We have a big vision, but we believe in nailing the most important problems first. Be gritty - Only gritty teams succeed. Our individual ownership, passion, and perseverance mean we're a team through thick and thin. Your Team Operations Strategy supports Raylo's ability to scale, improve efficiency and become more effective. We sit within Operations and have three core pillars: Customer Experience, Supply Chain, and Revenue and Billing. Our remit is to own operational projects, launch new initiatives, and optimise processes that drive positive outcomes for Raylo's growth ambitions and allow the broader Operations team to succeed. AI is at the centre of how we work. We do not ration access, we use the best models, and we expect everyone on the team to push the tools harder than we currently do. This graduate programme is how we build the next generation of that team. As a Graduate Analyst, Operations Strategy, you'll spend your first twelve months rotating through the broader Operations function: three months each in Customer Support, Collections, RiskOps, and Supply Chain. By the end of year one you will have walked in the customer's shoes across the full operation, delivered four meaningful improvement projects (one per rotation), and built the foundation for project work across our pillars for years to come. What You'll Do Rotate through four operational pillars in your first twelve months. Customer Support, Collections, RiskOps, and Supply Chain. Three months each. In every rotation you'll shadow the team to understand the core elements of the role, embed and complete the work hand in hand with them, then deliver an improvement project before moving on. These might rebuild a process, automate a manual step, or build a tool that did not exist before. Turn operational data into recommendations and insights. Build dashboards, query our data, and surface the insights that change how decisions get made or how processes run. Across the rotations you'll work with metrics that span fulfilment performance, customer SLAs, stock health, cost efficiency, and billing performance. Get exposure across the business. Each rotation gives you direct working relationships with different operational teams, our cross functional partners in Commercial, Product, Finance and Risk Ops, and our supplier and vendor ecosystem. Contribute to the design and continuous improvement of how Operations works. Whether through your rotation projects or ad hoc contributions, you'll help shape the processes, tools, and systems that underpin Raylo's operational performance. Use the best tools to get the work done. The team works with Intercom, Forest, Claude, Notion, Granola and Google Suite to perform analysis, automate operational work, and drive projects forward. We expect you to push the tools harder than we do and tell us when there is a better one we should be using. Pair with a mentor from outside Operations. Someone who joined Raylo early in their career and grew into a more senior role. They sit outside your reporting line and help you navigate the business, not just your rotation. You'll Succeed With Being in your final year of university, or graduated within the last twelve months, with an expected or achieved 2:1 or above from a top university, ideally in a STEM or other highly analytical discipline. Deep curiosity and fluency with frontier AI tools. You use Claude or ChatGPT daily, you've tried agentic tools, you read the model releases when they drop, and you have a view on what a strong analyst's job looks like three years from now. Built something with AI. An automation, a small app, a research tool, a side project that does real work or other examples. We can teach you operational rigour. AI will be core to how we scale, and evidence you've embraced it tells us a lot about fit. A working knowledge of Excel or Google Sheets, and a willingness to learn SQL. Most of our team writes SQL daily, often with Claude or a similar tool helping. You should be able to do the same within your first few months. Evidence of using data to drive decisions. Whether through coursework, an internship, a side project or a university society. Strong communication skills. You're comfortable asking for help, flagging issues early, and keeping teammates in the loop. You can explain things clearly and adapt your style depending on who you're talking to. Comfort with ambiguity. The programme is structured, but the work is fast paced. This means you'll have to be proactive, disciplined and gritty to complete projects and maintain momentum. Alignment with Raylo's sustainability mission. We're building a circular alternative to single use electronics in a $1.5 trillion market. If that gets you out of bed, you'll fit here. Belfast-based The role is based out of our Belfast office four days a week, with one day from home. Opportunities & Benefits Fast track your career - 40% of our employees are promoted every review cycle (bi annual) Exclusive Raylo device lease for employees Private Medical Insurance Stock options for all employees L&D budget to support the skills you value 4 days in the Raylo Belfast Office, with 1 day working from home per week. 33 days off, your way - 25 days + 8 bank holidays with full flexibility to use on the days that mean the most to you Enhanced maternity, paternity, adoption or shared parental leave, if you've been with us for 12 months. Workplace nursery scheme for major cost savings Hiring Process We move quickly and we'll aim to give you the best candidate experience possible . click apply for full job details
05/06/2026
Full time
Why We Exist Economic incentives, environmental pressures, and regulatory shifts are driving a global move toward the circular economy. Consumers and businesses are already moving away from rigid ownership models in favour of more flexible, affordable access. Yet while big tech has embedded subscriptions in everything from music to software to storage, the $1.5 trillion electronic device market remains deeply underserved. Until now. Raylo is the subscription infrastructure for the world's leading electronics brands, powering the circular economy by making devices more accessible, affordable, and flexible for consumers and businesses. The only way customers and manufacturers will make that shift is if it's simple and cost-effective. This is where we come in. What We've Built We enable the world's leading electronics brands to shift from single-use to circular, customer centric business models. We're at £70m ARR, profitable, growing fast, with 200,000+ active subscriptions across consumers and small businesses. Customers trust us too, with a 4.5/5 Trustpilot rating from more than 20,000 reviews. For customers, the experience is simple: subscribe to a device, get support throughout, upgrade when you want, and return it when you're done. Behind that sits a sophisticated fintech platform powering device subscriptions end to end: credit and fraud decisioning, lifecycle operations, and the financing engine that lets brands offer subscriptions without using their own balance sheet. No one else has built the full infrastructure to run electronics subscriptions at scale. Our platform has two sides. marketplace gives consumers and small businesses access to premium tech from the world's leading electronics brands. Raylo Pay is our embedded product, enabling brands such as PlayStation and LG to launch subscription journeys directly through their own DTC and ecommerce channels. The impact of our circular model is big. We cut emissions per device by around 50% compared to buy-and-discard. We're B Corp certified, backed by Macquarie, NatWest and Channel 4 Ventures, and recognised by Tech Nation's Future Fifty. How We Work AI is changing what small, ambitious teams can build. Companies that embrace it will define the next decade. Raylo is uniquely placed to benefit. We combine proprietary technology and data with the orchestration of physical assets, operating across credit, fraud, pricing, logistics, refurbishment, resale and customer care. With AI improving every cycle, our moat deepens with scale. At Raylo, AI is woven into how we work every day. We don't ration access or hedge our bets. Our people use the best models and tools, and we expect them to do things that weren't possible a year ago. Processes that used to be good enough are being rebuilt. Teams are replacing spreadsheets with bespoke tooling, and anyone can query our data layer in plain English and get a real answer in seconds. We give every team their own hackathon: a chance to step back, start with a blank sheet, and ask: if we were starting today, how would we do this? The more we automate, the more human judgement matters. AI gives people back time, and we expect them to spend it on the things no model can replicate: conversations, trust, craft and team judgement. We hire to a high bar. You'll work with people who push you, raise your game and expect you to do the same. We want every person at Raylo to do the best work of their lives, and enjoy doing it. Our Core Values Be deeply curious - We thrive on innovation through diverse approaches, views, and people. Walk in your customer's shoes - To build the best products and make the best decisions for the long term, we must figure out what our customers need, not just what they want. Focus and execute - We have a big vision, but we believe in nailing the most important problems first. Be gritty - Only gritty teams succeed. Our individual ownership, passion, and perseverance mean we're a team through thick and thin. Your Team Operations Strategy supports Raylo's ability to scale, improve efficiency and become more effective. We sit within Operations and have three core pillars: Customer Experience, Supply Chain, and Revenue and Billing. Our remit is to own operational projects, launch new initiatives, and optimise processes that drive positive outcomes for Raylo's growth ambitions and allow the broader Operations team to succeed. AI is at the centre of how we work. We do not ration access, we use the best models, and we expect everyone on the team to push the tools harder than we currently do. This graduate programme is how we build the next generation of that team. As a Graduate Analyst, Operations Strategy, you'll spend your first twelve months rotating through the broader Operations function: three months each in Customer Support, Collections, RiskOps, and Supply Chain. By the end of year one you will have walked in the customer's shoes across the full operation, delivered four meaningful improvement projects (one per rotation), and built the foundation for project work across our pillars for years to come. What You'll Do Rotate through four operational pillars in your first twelve months. Customer Support, Collections, RiskOps, and Supply Chain. Three months each. In every rotation you'll shadow the team to understand the core elements of the role, embed and complete the work hand in hand with them, then deliver an improvement project before moving on. These might rebuild a process, automate a manual step, or build a tool that did not exist before. Turn operational data into recommendations and insights. Build dashboards, query our data, and surface the insights that change how decisions get made or how processes run. Across the rotations you'll work with metrics that span fulfilment performance, customer SLAs, stock health, cost efficiency, and billing performance. Get exposure across the business. Each rotation gives you direct working relationships with different operational teams, our cross functional partners in Commercial, Product, Finance and Risk Ops, and our supplier and vendor ecosystem. Contribute to the design and continuous improvement of how Operations works. Whether through your rotation projects or ad hoc contributions, you'll help shape the processes, tools, and systems that underpin Raylo's operational performance. Use the best tools to get the work done. The team works with Intercom, Forest, Claude, Notion, Granola and Google Suite to perform analysis, automate operational work, and drive projects forward. We expect you to push the tools harder than we do and tell us when there is a better one we should be using. Pair with a mentor from outside Operations. Someone who joined Raylo early in their career and grew into a more senior role. They sit outside your reporting line and help you navigate the business, not just your rotation. You'll Succeed With Being in your final year of university, or graduated within the last twelve months, with an expected or achieved 2:1 or above from a top university, ideally in a STEM or other highly analytical discipline. Deep curiosity and fluency with frontier AI tools. You use Claude or ChatGPT daily, you've tried agentic tools, you read the model releases when they drop, and you have a view on what a strong analyst's job looks like three years from now. Built something with AI. An automation, a small app, a research tool, a side project that does real work or other examples. We can teach you operational rigour. AI will be core to how we scale, and evidence you've embraced it tells us a lot about fit. A working knowledge of Excel or Google Sheets, and a willingness to learn SQL. Most of our team writes SQL daily, often with Claude or a similar tool helping. You should be able to do the same within your first few months. Evidence of using data to drive decisions. Whether through coursework, an internship, a side project or a university society. Strong communication skills. You're comfortable asking for help, flagging issues early, and keeping teammates in the loop. You can explain things clearly and adapt your style depending on who you're talking to. Comfort with ambiguity. The programme is structured, but the work is fast paced. This means you'll have to be proactive, disciplined and gritty to complete projects and maintain momentum. Alignment with Raylo's sustainability mission. We're building a circular alternative to single use electronics in a $1.5 trillion market. If that gets you out of bed, you'll fit here. Belfast-based The role is based out of our Belfast office four days a week, with one day from home. Opportunities & Benefits Fast track your career - 40% of our employees are promoted every review cycle (bi annual) Exclusive Raylo device lease for employees Private Medical Insurance Stock options for all employees L&D budget to support the skills you value 4 days in the Raylo Belfast Office, with 1 day working from home per week. 33 days off, your way - 25 days + 8 bank holidays with full flexibility to use on the days that mean the most to you Enhanced maternity, paternity, adoption or shared parental leave, if you've been with us for 12 months. Workplace nursery scheme for major cost savings Hiring Process We move quickly and we'll aim to give you the best candidate experience possible . click apply for full job details
Come and join the Littlefish team! Work location: Nottingham (Hybrid) Salary: Up to: £35,000 + 20% shift allowance Shift pattern: 4 days on/4 days off Must be eligible for SC Clearance (UK resident for the last 5 years) and NPPV2 clearance Here at Littlefish, we look for people who can make a real difference and become a giant slayer. As the world around us continues to change, we look for people who grab that change with optimism and excitement. These are the passionate and high performing people who enjoy and thrive on thinking outside the box. Our current employees are the giant slayers who have made Littlefish who we are today, and you will be the future employees who continue to add the drive, passion, and add to our skills and experience as we see Littlefish grow. So, if this is ticking your boxes and you are excited at the thought of working with creative, passionate, energetic, friendly people- we would love to hear from you. The role and what you'll be getting up to on a day-to-day basis: As a Tier 2 Cyber Security Analyst, you'll work within the CSOC to detect, investigate, and respond to advanced security threats across customer environments. You'll support the CSOC Manager with day-to-day operations, act as a technical escalation point for analysts, and provide out-of-hours escalation support when required. This is a hands-on technical role where you'll investigate complex alerts, support threat-hunting activities, contribute to the tuning of SIEM detections, and help improve SOC processes and response playbooks. You'll also play an important role in mentoring analysts and supporting the continued development of the SOC's technical capability. Technology innovation is part of our DNA, and this role will continue to evolve as AI-driven detection, automation, and response capabilities are introduced. You will: Investigate, triage, and respond to security alerts across customer environments Support the tuning and maintenance of SIEM detection rules alongside senior analysts Carry out proactive threat analysis and support threat-hunting activities Act as an escalation point for Tier 1 analysts, providing guidance and technical support Investigate complex security incidents and contribute to root-cause analysis Support continual improvement of SOC processes and response playbooks Assist with monthly SOC reporting and contribute insights into customer security posture Support client service reviews and communicate cyber risks in clear, business-friendly language Conduct security assessments, including vulnerability testing and risk analysis Ensure timely, high-quality incident resolution in line with SOC standards and SLAs Who you are: You're an experienced cyber security professional with deep SOC experience and a strong technical foundation. You're confident making decisions in high-pressure situations, enjoy solving complex security challenges, and take pride in supporting and developing others. You balance technical excellence with a service-delivery mindset and strong customer engagement. You will have: 2-4 years' experience in a Security Operations or similar cyber role Strong experience investigating and responding to cyber security incidents Hands-on experience with SIEM, EDR, and email security tooling Experience working in a Microsoft XDR SOC Strong KQL (Kusto Query Language) skills Experience mentoring and supporting analysts at different levels Excellent written and verbal communication skills Strong analytical thinking, judgement, and attention to detail A proactive, self-motivated approach and passion for cyber security It's a bonus if you also have: Relevant cyber security certifications such as AZ-500, SC-300, SC-100, SC-200, or SANS certifications Experience working as part of an incident response function Exposure to developing or enhancing detection rules and response playbooks Knowledge of vulnerability assessment and remediation processes An understanding of balancing business requirements with technical and security standards What can we offer you? Healthcare cash plan. This will give you access to online GP appointments, 24/7 access to qualified counsellors and cash back against a range of general healthcare Referral bonus scheme of £1000 when you successfully refer a friend. Access to our LinkedIn Learning platform, with over 16000 expert-led online tutorials to enhance and achieve your personal and professional goals. Casual dress policy Company Pension Scheme Company social events 25 days annual leave plus public/bank holidays Purchase of annual leave scheme Life at Littlefish: Our company values shape who we are as a business, what we stand for and how we work. Hiring people with our values at heart, is very important as we see Littlefish grow. I am High Performing- I like to raise the bar, we look at creating opportunities to increase quality and improve efficiency, we strive for service excellence. I am Passionate- We build team success and celebrate them together, I am enthusiastic and energetic, I care about the people I work with and we support one another. I Have a Can-Do Attitude - I am not afraid to step outside my comfort zone, we are not afraid to challenge status quo, we get stuff done! So, if you feel like you can make a tangible difference, apply today, and join us on this journey. Here at Littlefish we aim to be somewhere everyone can be themselves. We are committed to encouraging a diverse and inclusive community where everyone irrespective of who they are, or their background, can feel equal and supported. We encourage applications from people of all backgrounds. Please get in touch if you are concerned about any difficulties you may face during your recruitment process, so we adjust accordingly. Part of our application process includes a set of ED&I (Equality, diversity and inclusion) questions. Please note, each question has a prefer not to say option).
05/06/2026
Full time
Come and join the Littlefish team! Work location: Nottingham (Hybrid) Salary: Up to: £35,000 + 20% shift allowance Shift pattern: 4 days on/4 days off Must be eligible for SC Clearance (UK resident for the last 5 years) and NPPV2 clearance Here at Littlefish, we look for people who can make a real difference and become a giant slayer. As the world around us continues to change, we look for people who grab that change with optimism and excitement. These are the passionate and high performing people who enjoy and thrive on thinking outside the box. Our current employees are the giant slayers who have made Littlefish who we are today, and you will be the future employees who continue to add the drive, passion, and add to our skills and experience as we see Littlefish grow. So, if this is ticking your boxes and you are excited at the thought of working with creative, passionate, energetic, friendly people- we would love to hear from you. The role and what you'll be getting up to on a day-to-day basis: As a Tier 2 Cyber Security Analyst, you'll work within the CSOC to detect, investigate, and respond to advanced security threats across customer environments. You'll support the CSOC Manager with day-to-day operations, act as a technical escalation point for analysts, and provide out-of-hours escalation support when required. This is a hands-on technical role where you'll investigate complex alerts, support threat-hunting activities, contribute to the tuning of SIEM detections, and help improve SOC processes and response playbooks. You'll also play an important role in mentoring analysts and supporting the continued development of the SOC's technical capability. Technology innovation is part of our DNA, and this role will continue to evolve as AI-driven detection, automation, and response capabilities are introduced. You will: Investigate, triage, and respond to security alerts across customer environments Support the tuning and maintenance of SIEM detection rules alongside senior analysts Carry out proactive threat analysis and support threat-hunting activities Act as an escalation point for Tier 1 analysts, providing guidance and technical support Investigate complex security incidents and contribute to root-cause analysis Support continual improvement of SOC processes and response playbooks Assist with monthly SOC reporting and contribute insights into customer security posture Support client service reviews and communicate cyber risks in clear, business-friendly language Conduct security assessments, including vulnerability testing and risk analysis Ensure timely, high-quality incident resolution in line with SOC standards and SLAs Who you are: You're an experienced cyber security professional with deep SOC experience and a strong technical foundation. You're confident making decisions in high-pressure situations, enjoy solving complex security challenges, and take pride in supporting and developing others. You balance technical excellence with a service-delivery mindset and strong customer engagement. You will have: 2-4 years' experience in a Security Operations or similar cyber role Strong experience investigating and responding to cyber security incidents Hands-on experience with SIEM, EDR, and email security tooling Experience working in a Microsoft XDR SOC Strong KQL (Kusto Query Language) skills Experience mentoring and supporting analysts at different levels Excellent written and verbal communication skills Strong analytical thinking, judgement, and attention to detail A proactive, self-motivated approach and passion for cyber security It's a bonus if you also have: Relevant cyber security certifications such as AZ-500, SC-300, SC-100, SC-200, or SANS certifications Experience working as part of an incident response function Exposure to developing or enhancing detection rules and response playbooks Knowledge of vulnerability assessment and remediation processes An understanding of balancing business requirements with technical and security standards What can we offer you? Healthcare cash plan. This will give you access to online GP appointments, 24/7 access to qualified counsellors and cash back against a range of general healthcare Referral bonus scheme of £1000 when you successfully refer a friend. Access to our LinkedIn Learning platform, with over 16000 expert-led online tutorials to enhance and achieve your personal and professional goals. Casual dress policy Company Pension Scheme Company social events 25 days annual leave plus public/bank holidays Purchase of annual leave scheme Life at Littlefish: Our company values shape who we are as a business, what we stand for and how we work. Hiring people with our values at heart, is very important as we see Littlefish grow. I am High Performing- I like to raise the bar, we look at creating opportunities to increase quality and improve efficiency, we strive for service excellence. I am Passionate- We build team success and celebrate them together, I am enthusiastic and energetic, I care about the people I work with and we support one another. I Have a Can-Do Attitude - I am not afraid to step outside my comfort zone, we are not afraid to challenge status quo, we get stuff done! So, if you feel like you can make a tangible difference, apply today, and join us on this journey. Here at Littlefish we aim to be somewhere everyone can be themselves. We are committed to encouraging a diverse and inclusive community where everyone irrespective of who they are, or their background, can feel equal and supported. We encourage applications from people of all backgrounds. Please get in touch if you are concerned about any difficulties you may face during your recruitment process, so we adjust accordingly. Part of our application process includes a set of ED&I (Equality, diversity and inclusion) questions. Please note, each question has a prefer not to say option).
We re Hiring: Senior Cyber Security Analyst Corsham I m currently looking for a Senior Cyber Security Analyst to join our SOC team at Computer Network Defence Ltd (CND). This is a key hire within our MSSP Security Operations Centre, offering the opportunity to take a lead role in incident analysis, client engagement, and mentoring junior analysts, while shaping how the SOC continues to evolve. The Role As a Senior Cyber Security Analyst, you will support the SOC Team Lead and play a central role in monitoring, triaging, and investigating security events across a range of client environments. You ll be working across SIEM platforms, vulnerability management tools, threat intelligence sources, and network telemetry to deliver effective detection and response. You will also take on client-facing responsibilities, presenting findings, trends, and insights, as well as contributing to reporting and continuous improvement within the SOC. Key Responsibilities Monitor, triage and investigate security alerts across multiple platforms Conduct in-depth incident analysis and support ongoing client investigations Act as deputy to the SOC Team Lead when required Review and assess escalated Tier 2 alerts for urgency and impact Deliver weekly and monthly reporting to clients and stakeholders Communicate security findings and trends directly to clients Support vulnerability management analysis and remediation efforts Lead false-positive reduction and SIEM tuning activities Mentor and support development of Tier 1 and junior analysts Contribute to SOC process improvement and operational efficiency Participate in incident response activities as part of the wider team Lead internal SOC initiatives and projects where required Create and deliver presentations for clients and internal teams What We re Looking For Strong experience within a SOC or cyber security operations environment Proven ability to investigate and analyse complex security incidents Experience with SIEM platforms, threat intelligence, and security tooling Strong stakeholder and client communication skills Ability to mentor and develop junior team members Proactive approach to problem-solving and continuous improvement Good understanding of current cyber threats, tactics and trends Package & Details Location: Isle of Man (relocation package)/Corsham Hours: 37.5 hours per week, plus on-call rota Working pattern: Monday to Friday, 09 00 (early Friday finish at 16:00, workload permitting) Clearance: SC Cleared This is a great opportunity for someone looking to step into a more senior, visible role within a growing SOC, with real influence over both technical delivery and team development.
04/06/2026
Full time
We re Hiring: Senior Cyber Security Analyst Corsham I m currently looking for a Senior Cyber Security Analyst to join our SOC team at Computer Network Defence Ltd (CND). This is a key hire within our MSSP Security Operations Centre, offering the opportunity to take a lead role in incident analysis, client engagement, and mentoring junior analysts, while shaping how the SOC continues to evolve. The Role As a Senior Cyber Security Analyst, you will support the SOC Team Lead and play a central role in monitoring, triaging, and investigating security events across a range of client environments. You ll be working across SIEM platforms, vulnerability management tools, threat intelligence sources, and network telemetry to deliver effective detection and response. You will also take on client-facing responsibilities, presenting findings, trends, and insights, as well as contributing to reporting and continuous improvement within the SOC. Key Responsibilities Monitor, triage and investigate security alerts across multiple platforms Conduct in-depth incident analysis and support ongoing client investigations Act as deputy to the SOC Team Lead when required Review and assess escalated Tier 2 alerts for urgency and impact Deliver weekly and monthly reporting to clients and stakeholders Communicate security findings and trends directly to clients Support vulnerability management analysis and remediation efforts Lead false-positive reduction and SIEM tuning activities Mentor and support development of Tier 1 and junior analysts Contribute to SOC process improvement and operational efficiency Participate in incident response activities as part of the wider team Lead internal SOC initiatives and projects where required Create and deliver presentations for clients and internal teams What We re Looking For Strong experience within a SOC or cyber security operations environment Proven ability to investigate and analyse complex security incidents Experience with SIEM platforms, threat intelligence, and security tooling Strong stakeholder and client communication skills Ability to mentor and develop junior team members Proactive approach to problem-solving and continuous improvement Good understanding of current cyber threats, tactics and trends Package & Details Location: Isle of Man (relocation package)/Corsham Hours: 37.5 hours per week, plus on-call rota Working pattern: Monday to Friday, 09 00 (early Friday finish at 16:00, workload permitting) Clearance: SC Cleared This is a great opportunity for someone looking to step into a more senior, visible role within a growing SOC, with real influence over both technical delivery and team development.
Blue Planet Data Management LeadPostulerlocations: London: UK- Reading-Regustime type: Full timeposted on: Publié aujourd'huijob requisition id: R031020As the global leader in high-speed connectivity, Ciena is committed to a people-first approach. Our teams enjoy a culture focused on prioritizing a flexible work environment that empowers individual growth, well-being, and belonging. We're a technology company that leads with our humanity-driving our business priorities alongside meaningful social, community, and societal impact.Ciena is advancing intelligent, automated networks through its Blue Planet portfolio by enabling data-driven innovation and AI-powered operations. This role leads the definition of data strategy, architecture, and productization for telecom data, enabling scalable digital twin capabilities and data platforms that support next-generation network operations. The position plays a critical role in aligning data foundations with AI, automation, and product innovation across the portfolio. How you will make an impact: Define and own the canonical telco data model and ontology across network topology, service lifecycle, inventory, assurance, and OSS domains Align data models with industry standards including TM Forum Open APIs, SID/eTOM, Open Digital Architecture, YANG/NETCONF, and TOSCA Drive adoption of ontology models across product teams as the semantic foundation for data exchange, AI training, and digital twin deployment Develop and lead the data fabric product architecture, including federated access, streaming pipelines, virtualization, metadata management, and lineage tracking Translate data architecture vision into scalable, cloud-native and microservices-based implementations in collaboration with engineering teams Define and deliver the telco digital twin strategy, including use cases such as network optimization, predictive maintenance, and simulation Engage with customers, partners, and industry forums to validate solutions, influence standards, and position the portfolio in the market The must haves: Education: Bachelor's degree in Engineering or Software Engineering with telecommunications, networking, or communications systems concentration, or equivalent experience Experience: 15+ years of experience in the telecom software industry with at least 5+ years of product line management experience Application of telecom data modeling, schema design, graph or ontology structures, and enterprise data management tools Application of AI and ML data requirements including feature stores, training data pipelines, data lineage, and model grounding techniques for GenAI or LLM use cases Background in OSS environments including network automation, orchestration, inventory, assurance, and network management systems Exposure to telecom network domains including fixed, mobile or RAN, and cable or MSO across core, transport, and access layers Experience introducing complex technical products or architectures into Tier-1 CSP or network provider environments Nice to haves: Background in cloud-native architectures including Kubernetes, microservices, and cloud data platforms Exposure to multi-cloud environments Collaboration across engineering, product management, marketing, and field organizations Engagement with industry analysts and participation in analyst briefings Contribution to industry forums such as TM Forum, MEF, ETSI, or ONF Development of technical content including whitepapers, blogs, or conference presentations Support of go-to-market strategy and product positioning Ciena, we are committed to building and fostering an environment in which our employees feel respected, valued, and heard. Ciena values the diversity of its workforce and respects its employees as individuals. We do not tolerate any form of discrimination.Ciena is an Equal Opportunity Employer, including disability and protected veteran status.If contacted in relation to a job opportunity, please advise Ciena of any accommodation measures you may require.
04/06/2026
Full time
Blue Planet Data Management LeadPostulerlocations: London: UK- Reading-Regustime type: Full timeposted on: Publié aujourd'huijob requisition id: R031020As the global leader in high-speed connectivity, Ciena is committed to a people-first approach. Our teams enjoy a culture focused on prioritizing a flexible work environment that empowers individual growth, well-being, and belonging. We're a technology company that leads with our humanity-driving our business priorities alongside meaningful social, community, and societal impact.Ciena is advancing intelligent, automated networks through its Blue Planet portfolio by enabling data-driven innovation and AI-powered operations. This role leads the definition of data strategy, architecture, and productization for telecom data, enabling scalable digital twin capabilities and data platforms that support next-generation network operations. The position plays a critical role in aligning data foundations with AI, automation, and product innovation across the portfolio. How you will make an impact: Define and own the canonical telco data model and ontology across network topology, service lifecycle, inventory, assurance, and OSS domains Align data models with industry standards including TM Forum Open APIs, SID/eTOM, Open Digital Architecture, YANG/NETCONF, and TOSCA Drive adoption of ontology models across product teams as the semantic foundation for data exchange, AI training, and digital twin deployment Develop and lead the data fabric product architecture, including federated access, streaming pipelines, virtualization, metadata management, and lineage tracking Translate data architecture vision into scalable, cloud-native and microservices-based implementations in collaboration with engineering teams Define and deliver the telco digital twin strategy, including use cases such as network optimization, predictive maintenance, and simulation Engage with customers, partners, and industry forums to validate solutions, influence standards, and position the portfolio in the market The must haves: Education: Bachelor's degree in Engineering or Software Engineering with telecommunications, networking, or communications systems concentration, or equivalent experience Experience: 15+ years of experience in the telecom software industry with at least 5+ years of product line management experience Application of telecom data modeling, schema design, graph or ontology structures, and enterprise data management tools Application of AI and ML data requirements including feature stores, training data pipelines, data lineage, and model grounding techniques for GenAI or LLM use cases Background in OSS environments including network automation, orchestration, inventory, assurance, and network management systems Exposure to telecom network domains including fixed, mobile or RAN, and cable or MSO across core, transport, and access layers Experience introducing complex technical products or architectures into Tier-1 CSP or network provider environments Nice to haves: Background in cloud-native architectures including Kubernetes, microservices, and cloud data platforms Exposure to multi-cloud environments Collaboration across engineering, product management, marketing, and field organizations Engagement with industry analysts and participation in analyst briefings Contribution to industry forums such as TM Forum, MEF, ETSI, or ONF Development of technical content including whitepapers, blogs, or conference presentations Support of go-to-market strategy and product positioning Ciena, we are committed to building and fostering an environment in which our employees feel respected, valued, and heard. Ciena values the diversity of its workforce and respects its employees as individuals. We do not tolerate any form of discrimination.Ciena is an Equal Opportunity Employer, including disability and protected veteran status.If contacted in relation to a job opportunity, please advise Ciena of any accommodation measures you may require.
Job: Security Operations (SOC) Analyst Location: Belfast, Northern Ireland, UK The Role The SOC Analyst will be responsible for day-to-day security threats, vulnerability management, analysis, and response. You will manage security incidents and review security alerts, determine if the security events are false positives, true positives, or false negatives, while working with incident responders on known or suspected security threats. The Analyst will work on log analysis, vulnerabilities and emerging threats, threat hunting and incident response that adhere to best practices and recognized control frameworks. The role will work closely with Information Security and Information Technology professionals to provide security metrics, threat landscape updates and emerging trends. Responsibilities Monitor, analyse, investigate security incidents and events using various tools and technologies including SIEM, UEBA, Threat Intel and EDR Perform security incident and event correlation, analysis, triage using information gathered from a variety of sources within the enterprise. Generate reports, dashboards, and presentations from security technologies Able to participate in an on call rotation and provide Tier 1 & Tier 2 support. Provide analysis of trending security data from a large number of heterogeneous security devices across different layers. Provide Incident Response (IR) support when analysis confirms an actionable incident. Communicate and collaborate with stakeholders, including internal customers and senior management to provide updates on security incidents and to ensure proper resolution Investigate, document, and report on information security threats and emerging trends. Integrate technologies and share information with SOC analysts and external teams. Participate in internal projects and initiatives to increase SOC efficiency and improve SOC tooling. Improve and challenge existing processes and procedures in an agile and fast-moving environment. Maintain and update security documentation, including incident reports and KB articles Core Qualifications The permanent right to live and work in the United Kingdom - this job is based in Belfast, Northern Ireland Bachelor's degree in a related field (Security, Forensics, Cyber Security, or Computer Science is preferred) or equivalent industry related experience. At least 2 years' experience working within an information security / cyber security role Desirable Proven experience as a security analyst, incident handler/responder, security engineer, or penetration tester. Knowledge of security methodologies, processes (i.e., Cyber Kill Chain/Diamond Models, and the MITRE ATT&CK/D3FEND framework). Knowledge of technical security solutions (such as but not limited to firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavioural analytics, orchestration, automation and cloud security). Deep knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS and HTTP Protocols, network analysis, and network/security applications and email security. Good knowledge of common malware threats and attack methodologies. Basic knowledge of scripting languages and programming languages (PowerShell, Python, Bash, .NET, Ruby,Java, C, etc.) Desirable Professional Certifications: GCIA, GCIH, GCFE, GCFA, Security+, CCNA CyberOps, OSCP, GPEN, GWAPT, CEH, CySA+ Core Competencies Accountable for the successful completion of multiple, individual projects simultaneously. Communicate effectively by contributing significantly to the development and delivery of a variety of written and visual documents for diverse audiences. Manage change and demonstrate adaptability by adjusting priorities or processes and approaching as needs dictate. Work independently as a team representative of Information Security as well as showing excellence teamwork skills. Ability to develop thorough documentation and operational playbooks, in addition, to suggest alert enhancements to improve detection capability. Fundamental knowledge of network and system technologies and practices Desire for continual learning of new technologies and developing knowledge / skills We Offer 28 days annual leave plus 10 NI national holidays Pension matched up to 7% Private health insurance for medical and dental Life Insurance Great work/life balance and flexible working hours Monthly catered lunches Unlimited drinks and snacks Charitable matching gift program EEO Statement Apex Fintech Solutions is an equal opportunity employer that does not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, veteran status, marital status, or any other protected characteristic. Our hiring practices ensure that all qualified applicants receive fair consideration without regard to these characteristics. Disability Statement Apex Fintech Solutions is committed to creating an inclusive and accessible workplace for all candidates, including those with disabilities. We are dedicated to ensuring equal employment opportunities and providing reasonable accommodations to qualified individuals with disabilities. If you require reasonable accommodations to participate in the application or interview process, please submit your request via Candidate Accommodation Requests Form. We will work with you to provide the necessary accommodations to ensure your full participation in our hiring process.
04/06/2026
Full time
Job: Security Operations (SOC) Analyst Location: Belfast, Northern Ireland, UK The Role The SOC Analyst will be responsible for day-to-day security threats, vulnerability management, analysis, and response. You will manage security incidents and review security alerts, determine if the security events are false positives, true positives, or false negatives, while working with incident responders on known or suspected security threats. The Analyst will work on log analysis, vulnerabilities and emerging threats, threat hunting and incident response that adhere to best practices and recognized control frameworks. The role will work closely with Information Security and Information Technology professionals to provide security metrics, threat landscape updates and emerging trends. Responsibilities Monitor, analyse, investigate security incidents and events using various tools and technologies including SIEM, UEBA, Threat Intel and EDR Perform security incident and event correlation, analysis, triage using information gathered from a variety of sources within the enterprise. Generate reports, dashboards, and presentations from security technologies Able to participate in an on call rotation and provide Tier 1 & Tier 2 support. Provide analysis of trending security data from a large number of heterogeneous security devices across different layers. Provide Incident Response (IR) support when analysis confirms an actionable incident. Communicate and collaborate with stakeholders, including internal customers and senior management to provide updates on security incidents and to ensure proper resolution Investigate, document, and report on information security threats and emerging trends. Integrate technologies and share information with SOC analysts and external teams. Participate in internal projects and initiatives to increase SOC efficiency and improve SOC tooling. Improve and challenge existing processes and procedures in an agile and fast-moving environment. Maintain and update security documentation, including incident reports and KB articles Core Qualifications The permanent right to live and work in the United Kingdom - this job is based in Belfast, Northern Ireland Bachelor's degree in a related field (Security, Forensics, Cyber Security, or Computer Science is preferred) or equivalent industry related experience. At least 2 years' experience working within an information security / cyber security role Desirable Proven experience as a security analyst, incident handler/responder, security engineer, or penetration tester. Knowledge of security methodologies, processes (i.e., Cyber Kill Chain/Diamond Models, and the MITRE ATT&CK/D3FEND framework). Knowledge of technical security solutions (such as but not limited to firewalls, SIEM, NIDS/NIPS/HIDS/HIPS, EDR, DLP, SOAR, proxies, network behavioural analytics, orchestration, automation and cloud security). Deep knowledge of TCP/IP, UDP, DNS, FTP, SSH, SSL/TLS and HTTP Protocols, network analysis, and network/security applications and email security. Good knowledge of common malware threats and attack methodologies. Basic knowledge of scripting languages and programming languages (PowerShell, Python, Bash, .NET, Ruby,Java, C, etc.) Desirable Professional Certifications: GCIA, GCIH, GCFE, GCFA, Security+, CCNA CyberOps, OSCP, GPEN, GWAPT, CEH, CySA+ Core Competencies Accountable for the successful completion of multiple, individual projects simultaneously. Communicate effectively by contributing significantly to the development and delivery of a variety of written and visual documents for diverse audiences. Manage change and demonstrate adaptability by adjusting priorities or processes and approaching as needs dictate. Work independently as a team representative of Information Security as well as showing excellence teamwork skills. Ability to develop thorough documentation and operational playbooks, in addition, to suggest alert enhancements to improve detection capability. Fundamental knowledge of network and system technologies and practices Desire for continual learning of new technologies and developing knowledge / skills We Offer 28 days annual leave plus 10 NI national holidays Pension matched up to 7% Private health insurance for medical and dental Life Insurance Great work/life balance and flexible working hours Monthly catered lunches Unlimited drinks and snacks Charitable matching gift program EEO Statement Apex Fintech Solutions is an equal opportunity employer that does not discriminate on the basis of race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, veteran status, marital status, or any other protected characteristic. Our hiring practices ensure that all qualified applicants receive fair consideration without regard to these characteristics. Disability Statement Apex Fintech Solutions is committed to creating an inclusive and accessible workplace for all candidates, including those with disabilities. We are dedicated to ensuring equal employment opportunities and providing reasonable accommodations to qualified individuals with disabilities. If you require reasonable accommodations to participate in the application or interview process, please submit your request via Candidate Accommodation Requests Form. We will work with you to provide the necessary accommodations to ensure your full participation in our hiring process.
Detego Global is on the lookout for a SOC Subject Matter Expert to join our Product Management team. We are looking for a mid to senior SOC analyst with extensive operational experience who is ready to transition into a product-focused role. You will be the voice of the SOC development team, translating deep operational security experience into product requirements and strategic direction for advanced SOC command and control tools. You will work closely with product managers, engineers, UX designers, and customers to ensure our products solve real analyst challenges and improve SOC efficiency and effectiveness. This role will provide the right candidate with the opportunity to work on some extremely rewarding projects supporting the development of impactful security operations software while working with a friendly and supportive team. The role has a strong opportunity for growth and will play an integral role in helping shape the future of SOC products and security operations tools. Reports to: Senior Product Manager Place of Work: Hybrid Remote/Office in Horsham Responsibilities and Duties The SOC Subject Matter Expert role requires a professional who combines extensive SOC operational experience with strategic product thinking to bridge the gap between security operations needs and product development. They will be responsible for providing expert SOC operational guidance throughout the product development lifecycle, defining system-level requirements, and ensuring our products genuinely address the challenges faced by SOC analysts in real-world environments. Their primary responsibility lies in translating SOC analyst pain points, workflows, and use cases into actionable product features, with particular focus on alert/incident prioritisation and intelligent playbook execution that helps analysts make critical security decisions. Their responsibilities will include: Providing expert SOC operational guidance to product management and engineering teams throughout the product development lifecycle. Defining and documenting detailed system-level requirements for SOC analyst tools, ensuring alignment with real-world operational needs. Translating SOC analyst pain points, workflows, and use cases into actionable product features and user stories. Designing and validating alert prioritisation algorithms, incident triage workflows, and automated playbook logic based on operational experience. Collaborating with product managers to shape product strategy, roadmap priorities, and feature definitions. Conducting customer discovery sessions, interviews, and workshops with SOC teams to gather requirements and validate concepts. Creating realistic user personas, journey maps, and workflow diagrams that represent authentic SOC analyst experiences. Evaluating competitive SOC tools and industry trends to inform product differentiation and innovation opportunities. Participating in proof-of-concept development to validate new features addressing critical analyst decision-making challenges. Working with UX designers to ensure intuitive interfaces that match SOC analyst mental models and workflow patterns. Providing technical consultation on threat detection logic, MITRE ATT&CK mapping, and security operations best practices. Supporting go-to-market activities by creating technical content, conducting product demonstrations, and engaging with prospective customers. Mentoring and educating internal teams on SOC operations, threat landscapes, and analyst workflows. Ensuring product features align with industry frameworks (MITRE ATT&CK, NIST, ISO 27001) and SOC maturity models. Act as a trusted SOC and cyber defence expert in customer meetings, workshops, and solution design sessions. Support pre-sales engagements by articulating operational value, use cases, and real-world applicability. Deliver product demonstrations and technical briefings tailored to SOC practitioners, security leaders, and decision-makers. Translate complex SOC workflows and technical concepts into clear, compelling narratives for customers and stakeholders. Support go-to-market activities through technical content creation, presentations, and customer engagement. Skills and Experience Minimum 6 years of hands on experience as a SOC Analyst, Senior SOC Analyst, or SOC Team Lead Deep understanding of end to end SOC operations including alert triage, incident response, threat hunting, and case management Extensive experience with SIEM platforms, security orchestration tools, and the broader SOC technology stack Strong knowledge of threat detection methodologies, alert correlation, and incident prioritisation frameworks Expert level understanding of MITRE ATT&CK framework and its practical application in SOC operations Proven ability to identify operational inefficiencies and translate them into product improvement opportunities Experience developing or optimising SOC playbooks, runbooks, and standard operating procedures Excellent communication skills with ability to articulate complex security concepts to both technical and business audiences Strong analytical and strategic thinking capabilities Understanding of common attack patterns, threat actor TTPs, and the evolving threat landscape Ability to balance ideal security outcomes with practical operational constraints and business realities Strong problem solving skills and willingness to roll up one's sleeves to get the job done Skilled at working effectively with cross functional teams in a matrix organisation 8+ years of progressive SOC experience including team leadership or senior analyst responsibilities. Experience in Tier 2 or Tier 3 SOC roles with incident response and threat hunting responsibilities. Previous involvement in SOC tool evaluation, selection, or implementation projects. Experience with security automation, SOAR platforms, or playbook development. Experience working with or partnering with SOC/SIEM/EDR vendors and MSSP (Managed Security Service Provider) vendors. Familiarity with product management principles, agile methodologies, or requirements gathering processes. Experience presenting to executive leadership or external stakeholders. Knowledge of multiple SIEM platforms (Splunk, QRadar, Sentinel, Chronicle, etc.) and their operational strengths/weaknesses. Understanding of SOC metrics, KPIs, and performance measurement frameworks. Security certifications (e.g., GCIH, GCIA, GCFA, CISSP, GMON) demonstrating advanced security operations expertise. Experience working in regulated industries or with compliance driven security operations. Bachelor's degree in cybersecurity, information technology, or related field. "
04/06/2026
Full time
Detego Global is on the lookout for a SOC Subject Matter Expert to join our Product Management team. We are looking for a mid to senior SOC analyst with extensive operational experience who is ready to transition into a product-focused role. You will be the voice of the SOC development team, translating deep operational security experience into product requirements and strategic direction for advanced SOC command and control tools. You will work closely with product managers, engineers, UX designers, and customers to ensure our products solve real analyst challenges and improve SOC efficiency and effectiveness. This role will provide the right candidate with the opportunity to work on some extremely rewarding projects supporting the development of impactful security operations software while working with a friendly and supportive team. The role has a strong opportunity for growth and will play an integral role in helping shape the future of SOC products and security operations tools. Reports to: Senior Product Manager Place of Work: Hybrid Remote/Office in Horsham Responsibilities and Duties The SOC Subject Matter Expert role requires a professional who combines extensive SOC operational experience with strategic product thinking to bridge the gap between security operations needs and product development. They will be responsible for providing expert SOC operational guidance throughout the product development lifecycle, defining system-level requirements, and ensuring our products genuinely address the challenges faced by SOC analysts in real-world environments. Their primary responsibility lies in translating SOC analyst pain points, workflows, and use cases into actionable product features, with particular focus on alert/incident prioritisation and intelligent playbook execution that helps analysts make critical security decisions. Their responsibilities will include: Providing expert SOC operational guidance to product management and engineering teams throughout the product development lifecycle. Defining and documenting detailed system-level requirements for SOC analyst tools, ensuring alignment with real-world operational needs. Translating SOC analyst pain points, workflows, and use cases into actionable product features and user stories. Designing and validating alert prioritisation algorithms, incident triage workflows, and automated playbook logic based on operational experience. Collaborating with product managers to shape product strategy, roadmap priorities, and feature definitions. Conducting customer discovery sessions, interviews, and workshops with SOC teams to gather requirements and validate concepts. Creating realistic user personas, journey maps, and workflow diagrams that represent authentic SOC analyst experiences. Evaluating competitive SOC tools and industry trends to inform product differentiation and innovation opportunities. Participating in proof-of-concept development to validate new features addressing critical analyst decision-making challenges. Working with UX designers to ensure intuitive interfaces that match SOC analyst mental models and workflow patterns. Providing technical consultation on threat detection logic, MITRE ATT&CK mapping, and security operations best practices. Supporting go-to-market activities by creating technical content, conducting product demonstrations, and engaging with prospective customers. Mentoring and educating internal teams on SOC operations, threat landscapes, and analyst workflows. Ensuring product features align with industry frameworks (MITRE ATT&CK, NIST, ISO 27001) and SOC maturity models. Act as a trusted SOC and cyber defence expert in customer meetings, workshops, and solution design sessions. Support pre-sales engagements by articulating operational value, use cases, and real-world applicability. Deliver product demonstrations and technical briefings tailored to SOC practitioners, security leaders, and decision-makers. Translate complex SOC workflows and technical concepts into clear, compelling narratives for customers and stakeholders. Support go-to-market activities through technical content creation, presentations, and customer engagement. Skills and Experience Minimum 6 years of hands on experience as a SOC Analyst, Senior SOC Analyst, or SOC Team Lead Deep understanding of end to end SOC operations including alert triage, incident response, threat hunting, and case management Extensive experience with SIEM platforms, security orchestration tools, and the broader SOC technology stack Strong knowledge of threat detection methodologies, alert correlation, and incident prioritisation frameworks Expert level understanding of MITRE ATT&CK framework and its practical application in SOC operations Proven ability to identify operational inefficiencies and translate them into product improvement opportunities Experience developing or optimising SOC playbooks, runbooks, and standard operating procedures Excellent communication skills with ability to articulate complex security concepts to both technical and business audiences Strong analytical and strategic thinking capabilities Understanding of common attack patterns, threat actor TTPs, and the evolving threat landscape Ability to balance ideal security outcomes with practical operational constraints and business realities Strong problem solving skills and willingness to roll up one's sleeves to get the job done Skilled at working effectively with cross functional teams in a matrix organisation 8+ years of progressive SOC experience including team leadership or senior analyst responsibilities. Experience in Tier 2 or Tier 3 SOC roles with incident response and threat hunting responsibilities. Previous involvement in SOC tool evaluation, selection, or implementation projects. Experience with security automation, SOAR platforms, or playbook development. Experience working with or partnering with SOC/SIEM/EDR vendors and MSSP (Managed Security Service Provider) vendors. Familiarity with product management principles, agile methodologies, or requirements gathering processes. Experience presenting to executive leadership or external stakeholders. Knowledge of multiple SIEM platforms (Splunk, QRadar, Sentinel, Chronicle, etc.) and their operational strengths/weaknesses. Understanding of SOC metrics, KPIs, and performance measurement frameworks. Security certifications (e.g., GCIH, GCIA, GCFA, CISSP, GMON) demonstrating advanced security operations expertise. Experience working in regulated industries or with compliance driven security operations. Bachelor's degree in cybersecurity, information technology, or related field. "
We're seeking a future team member for the role of Senior Associate, Production Services Application Support Analyst to join our team. This role is located in Manchester. In this role, you'll make an impact in the following ways: Collaborate with Engineering, business units, and client-facing teams to support BNY Pershing developed and third-party software applications in a dynamic environment. Provide application monitoring and support to internal technical and non-technical teams, Client Support, external third-party application support groups, and users of BNY Pershing hosted applications. Investigate and diagnose issues arising from software, business processes, usage, or recent software releases, routing unresolved problems to relevant teams. Proactively identify opportunities to improve monitoring, investigation, and incident resolution processes using AI tools and automation to streamline workflows and enhance response times. To be successful in this role, we're seeking the following: Technical skills: Excellent SQL scripting skills Knowledge of any scripting language such as PowerShell or VBScript Experience of using monitoring tools such as AppD, Splunk, Grafana, Cloudprober, Moogsoft Knowledge of any scripting language such as PowerShell or VBScript Experience of using Azure and Snowflake technology Knowledge of multi-tier application architecture Experience of web technologies and internet based applications Experience of working with Production and Non-production environments Experience of application recovery of priority incidents with limited support Understanding of Message Queuing (i.e. IBM WebSphere MQ or Microsoft MQ etc.) Knowledge of any issue/problem tracking system such as ServiceNow Common AI tools (e.g., Microsoft Copilot, ChatGPT, GitHub Copilot) to support troubleshooting, documentation and automation AI Automation Agentic AI Prompt Engineering Soft Skills: Excellent verbal and written communication skills Has the right attitude towards the role and is willing to support all products and react to live problems with the utmost priority. Demonstrates the ability to work with cross-continental, cross-culture support teams with a proven ability to liaise and coordinate between disparate and multi-disciplined teams. High level of professionalism when communicating with external clients and internal users to resolve problems. Take ownership of problems and strive to bring the problem to closure whilst managing expectations. Results oriented, leading by example with excellent analytical and problem-solving skills. Maintain an attitude of continual service improvement to help suggest improvements and drive change.
02/06/2026
Full time
We're seeking a future team member for the role of Senior Associate, Production Services Application Support Analyst to join our team. This role is located in Manchester. In this role, you'll make an impact in the following ways: Collaborate with Engineering, business units, and client-facing teams to support BNY Pershing developed and third-party software applications in a dynamic environment. Provide application monitoring and support to internal technical and non-technical teams, Client Support, external third-party application support groups, and users of BNY Pershing hosted applications. Investigate and diagnose issues arising from software, business processes, usage, or recent software releases, routing unresolved problems to relevant teams. Proactively identify opportunities to improve monitoring, investigation, and incident resolution processes using AI tools and automation to streamline workflows and enhance response times. To be successful in this role, we're seeking the following: Technical skills: Excellent SQL scripting skills Knowledge of any scripting language such as PowerShell or VBScript Experience of using monitoring tools such as AppD, Splunk, Grafana, Cloudprober, Moogsoft Knowledge of any scripting language such as PowerShell or VBScript Experience of using Azure and Snowflake technology Knowledge of multi-tier application architecture Experience of web technologies and internet based applications Experience of working with Production and Non-production environments Experience of application recovery of priority incidents with limited support Understanding of Message Queuing (i.e. IBM WebSphere MQ or Microsoft MQ etc.) Knowledge of any issue/problem tracking system such as ServiceNow Common AI tools (e.g., Microsoft Copilot, ChatGPT, GitHub Copilot) to support troubleshooting, documentation and automation AI Automation Agentic AI Prompt Engineering Soft Skills: Excellent verbal and written communication skills Has the right attitude towards the role and is willing to support all products and react to live problems with the utmost priority. Demonstrates the ability to work with cross-continental, cross-culture support teams with a proven ability to liaise and coordinate between disparate and multi-disciplined teams. High level of professionalism when communicating with external clients and internal users to resolve problems. Take ownership of problems and strive to bring the problem to closure whilst managing expectations. Results oriented, leading by example with excellent analytical and problem-solving skills. Maintain an attitude of continual service improvement to help suggest improvements and drive change.
Office - Wakefield, UK, West Yorkshire, Wakefield, GB Salary Range: £27,000.00 To £30,000.00 Annually POSITION PURPOSE: The Service Desk Analyst - Tier I provides first level technical support to end users, with the goal of delivering high levels of customer service and efficiency. This position is responsible for receiving, triaging, and resolving IT related issues and requests from employees across the organization. ACCOUNTABILITIES & PERFORMANCE EXPECTATIONS: Serve as the first point of contact for all IT related issues and requests from end users. Receive, log, and prioritize incoming service desk tickets through various channels (phone, email, chat, self service portal). Provide first level diagnosis and resolution for a wide range of software, hardware, and network issues. Escalate complex issues to appropriate Tier 2 or Tier 3 support teams when necessary. Maintain accurate and detailed documentation of all service desk interactions and resolutions. Assist users with basic software and hardware installations, configurations, and troubleshooting. Provide guidance and support for company approved applications and systems. Contribute to the development and maintenance of the service desk knowledge base. Identify and report recurring issues or trends to the Service Desk Team Lead. Participate in ongoing training to stay current with new technologies and support processes. Assist in the onboarding process for new employees by setting up accounts and providing basic IT orientation. Maintain a high level of customer service, ensuring user satisfaction with each interaction. Adhere to IT security policies and procedures in all support activities. Participate in after hours support rotation as needed. POSITION REQUIREMENTS Associate degree in Information Technology, Computer Science, or related field preferred. Equivalent experience may be considered. 1-2 years of experience in IT support or customer service role preferred. Strong knowledge of Windows operating systems and Microsoft 365 suite. Basic understanding of network concepts and troubleshooting. Familiarity with remote desktop support tools and ticketing systems. Excellent communication skills, both verbal and written. Strong problem solving and analytical skills. Ability to explain technical concepts to non technical users. Customer oriented mindset with a focus on user satisfaction. Ability to work effectively in a team environment. Excellent time management and prioritization skills. Willingness to learn and adapt to new technologies and processes. To be willing to perform some tasks outside of this job description as required by the business.
02/06/2026
Full time
Office - Wakefield, UK, West Yorkshire, Wakefield, GB Salary Range: £27,000.00 To £30,000.00 Annually POSITION PURPOSE: The Service Desk Analyst - Tier I provides first level technical support to end users, with the goal of delivering high levels of customer service and efficiency. This position is responsible for receiving, triaging, and resolving IT related issues and requests from employees across the organization. ACCOUNTABILITIES & PERFORMANCE EXPECTATIONS: Serve as the first point of contact for all IT related issues and requests from end users. Receive, log, and prioritize incoming service desk tickets through various channels (phone, email, chat, self service portal). Provide first level diagnosis and resolution for a wide range of software, hardware, and network issues. Escalate complex issues to appropriate Tier 2 or Tier 3 support teams when necessary. Maintain accurate and detailed documentation of all service desk interactions and resolutions. Assist users with basic software and hardware installations, configurations, and troubleshooting. Provide guidance and support for company approved applications and systems. Contribute to the development and maintenance of the service desk knowledge base. Identify and report recurring issues or trends to the Service Desk Team Lead. Participate in ongoing training to stay current with new technologies and support processes. Assist in the onboarding process for new employees by setting up accounts and providing basic IT orientation. Maintain a high level of customer service, ensuring user satisfaction with each interaction. Adhere to IT security policies and procedures in all support activities. Participate in after hours support rotation as needed. POSITION REQUIREMENTS Associate degree in Information Technology, Computer Science, or related field preferred. Equivalent experience may be considered. 1-2 years of experience in IT support or customer service role preferred. Strong knowledge of Windows operating systems and Microsoft 365 suite. Basic understanding of network concepts and troubleshooting. Familiarity with remote desktop support tools and ticketing systems. Excellent communication skills, both verbal and written. Strong problem solving and analytical skills. Ability to explain technical concepts to non technical users. Customer oriented mindset with a focus on user satisfaction. Ability to work effectively in a team environment. Excellent time management and prioritization skills. Willingness to learn and adapt to new technologies and processes. To be willing to perform some tasks outside of this job description as required by the business.
Ita-Group-Inc is seeking a Service Desk Analyst - Tier I in Wakefield, UK, to provide first-level technical support to end-users. This role involves logging, diagnosing, and resolving IT-related issues while maintaining high customer service standards. The ideal candidate will have an associate degree in IT or a related field, along with 1-2 years of experience in IT support. Responsibilities include supporting users, maintaining documentation, and resolving technical requests efficiently.
02/06/2026
Full time
Ita-Group-Inc is seeking a Service Desk Analyst - Tier I in Wakefield, UK, to provide first-level technical support to end-users. This role involves logging, diagnosing, and resolving IT-related issues while maintaining high customer service standards. The ideal candidate will have an associate degree in IT or a related field, along with 1-2 years of experience in IT support. Responsibilities include supporting users, maintaining documentation, and resolving technical requests efficiently.