68 jobs found

About the opportunity Completely government funding training with career support to land you a job at the end - no brainer! Netcom Training's government-funded Cyber Security course is your shortcut to breaking into the cyber security industry. Learn the essentials - threat intelligence, security testing, incident response and legislation - in an interactive online format and earn an NCFE-accredited Level 3 Certificate in Cyber Security Practices. Course details Duration: 14 weeks Format: Online, practical workshops Schedule: Mon-Thur 6-9pm What you'll learn Understanding cyber security principles and threat intelligence Identifying malicious software, vulnerabilities and social engineering tactics Applying effective security testing methods and cyber security controls Developing incident response plans for security breaches Understanding legislation, information security standards and ethical practice in cyber security Potential roles Information Security Analyst Incident Response Analyst Cyber Forensic Analyst IT Support Technician Compliance/GRC Assistant Additional benefits High-impact employability workshops Six months' access to online employability courses Ongoing career support Eligibility To apply, you must: Live in the West Midlands Be aged 19 or over Earn below the gross annual wage cap of £36,126 (West Midlands) Not currently be undertaking any other government-funded training Not be in the UK on a student, graduate, postgraduate or sponsorship visa, or as a dependent of someone who is Cost This is a free government funded course

Senior Cyber Security Analyst Glasgow Hybrid (2DPW in office) Competitive Salary Working Hours: 7am 4pm VIQU are partnering with a leading global professional services organisation seeking a Senior Cyber Security Analyst to strengthen their security operations and enhance their cyber security posture. This is a hands-on technical role focused on threat detection, incident response, security controls, and continuous improvement. The successful candidate will act as a Subject Matter Expert (SME), providing technical guidance, mentoring junior analysts, and collaborating with global teams to ensure effective security operations. Key Responsibilities of the Senior Cyber Security Analyst: Lead the monitoring, investigation, and response to security alerts and incidents using SIEM and other security technologies Analyse security logs, network traffic, and threat intelligence to identify potential threats and vulnerabilities Manage complex security incidents, including root cause analysis, containment, and remediation Implement, maintain, and optimise security controls across infrastructure, applications, and endpoints Conduct vulnerability assessments, security testing, and reviews to identify and address security weaknesses Act as a technical SME, mentoring junior analysts and supporting BAU security operations Collaborate with IT and infrastructure teams to strengthen security practices and organisational resilience Maintain security documentation in line with ISO 27001 and monitor performance against KPIs and SLAs Key Experience Required of the Senior Cyber Security Analyst: Proven experience in a Senior Cyber Security Analyst, Security Operations Analyst, or equivalent technical security role Strong hands-on experience with SIEM technologies, threat detection, security monitoring, and incident response Experience with security technologies including firewalls, endpoint detection and response (EDR), DLP, and vulnerability management tools Demonstrable experience investigating complex security incidents and implementing remediation measures Strong understanding of security frameworks, risk management, and ISO 27001 Previous experience acting as a technical SME, mentoring analysts, and supporting BAU security operations Familiarity with ITSM and delivery tools such as ServiceNow, Cherwell, Jira, or Azure DevOps Excellent stakeholder management skills and experience collaborating across global teams Relevant certifications such as CompTIA Security+, CySA+, or CISSP are desirable Apply now to speak with VIQU IT in confidence, or reach out to Katie Dark via the VIQU IT website. Do you know someone great? We ll thank you with up to £1,000 if your referral is successful (terms apply). For more exciting roles and opportunities like this, please follow us on IT Recruitment.

Senior Cyber Security Analyst required to join a leading global organisation in Glasgow, playing a key role in strengthening its cyber security operations and protecting a complex international technology environment. This is a senior technical position within an established Information Security function, combining hands-on security expertise with responsibility for improving threat detection, incident response and the effectiveness of security controls. You'll act as a technical specialist within the team, taking the lead on more complex security challenges, supporting other analysts and helping develop the organisation's overall security capabilities. The Organisation Over the past three years, the organisation has significantly enhanced its cyber security maturity, strengthening frameworks, investing in security tooling and developing more sophisticated approaches to identifying and managing risk. That investment continues, with strong executive support and a clear commitment to improving security capabilities across its global operations. The Information Security function works internationally, collaborating with technology teams and business stakeholders across multiple regions to protect critical systems, information and services. With continued investment in technology, automation and emerging capabilities such as AI, cyber security plays an increasingly important role in enabling innovation while ensuring the organisation remains secure and resilient. The Role You'll be a senior member of the Cyber Security team, helping oversee day-to-day security operations while taking ownership of more technically complex investigations, incidents and security improvements. A significant part of the position involves working with security monitoring technologies, analysing suspicious activity and coordinating responses to potential threats. You'll use your technical expertise to investigate incidents, understand their underlying causes and introduce improvements that reduce the likelihood of similar issues occurring again. Beyond incident management, you'll work closely with the wider IT team to assess vulnerabilities, strengthen security controls and ensure new technologies are introduced securely. You'll also act as a technical point of escalation for other analysts, sharing knowledge, supporting their development and working with the Cyber Security Team Leader to improve processes, tooling and the overall effectiveness of the function. It's an opportunity to combine hands-on technical security work with ownership, influence and responsibility within a global environment. What You'll Be Doing * Leading the investigation of security alerts and incidents, using SIEM platforms, security logs and threat intelligence to identify suspicious activity and potential threats. * Managing more complex security incidents, coordinating investigations, containment and remediation with technical teams across the business. * Improving threat detection and monitoring capabilities, identifying opportunities to enhance security tooling, processes and response procedures. * Assessing the effectiveness of existing security controls, including vulnerability management, security testing and identifying weaknesses across infrastructure and applications. * Working with IT, to strengthen security architecture, implement appropriate controls and address security vulnerabilities. * Investigating recurring incidents and underlying technical issues, using root cause analysis to drive longer-term improvements. * Acting as a technical escalation point for Cyber Security Analysts, providing guidance, mentoring colleagues and helping develop the team's capabilities. * Supporting security reporting and operational performance, using metrics and incident trends to identify areas for improvement. What They're Looking For * Strong experience in a hands-on cyber security role, ideally within security operations, incident response, threat detection or a similar technical security environment. * Practical knowledge of security technologies including SIEM, Firewalls, endpoint detection and response (EDR), DLP and vulnerability management tools. * Experience investigating security incidents, analysing logs and identifying threats across complex IT environments. * A good understanding of security controls, vulnerability assessments and how to identify and remediate weaknesses in systems and applications. * Familiarity with security standards such as ISO 27001 and an understanding of how operational security contributes to wider compliance requirements. * Strong communication skills, comfortable working with technical colleagues and stakeholders across different business functions and international locations. * Security qualifications such as CompTIA Security+, CySA+, CISSP or similar would be advantageous. The Offer A competitive salary and benefits package is on offer, alongside hybrid working (2/3 days) in a modern Glasgow city centre office. The organisation also offers excellent opportunities for professional development, including structured learning programmes and support towards further qualifications. If this sounds of interest, please apply or reach out to Murray Simpson. Cathcart Technology is acting as an Employment Agency in relation to this vacancy.

Senior Cyber Security Analyst Glasgow - Hybrid (2DPW in office) Competitive Salary Working Hours: 7am - 4pm VIQU are partnering with a leading global professional services organisation seeking a Senior Cyber Security Analyst to strengthen their security operations and enhance their cyber security posture. This is a hands-on technical role focused on threat detection, incident response, security controls, and continuous improvement. The successful candidate will act as a Subject Matter Expert (SME), providing technical guidance, mentoring Junior Analysts, and collaborating with global teams to ensure effective security operations. Key Responsibilities of the Senior Cyber Security Analyst: Lead the monitoring, investigation, and response to security alerts and incidents using SIEM and other security technologies Analyse security logs, network traffic, and threat intelligence to identify potential threats and vulnerabilities Manage complex security incidents, including root cause analysis, containment, and remediation Implement, maintain, and optimise security controls across infrastructure, applications, and endpoints Conduct vulnerability assessments, security testing, and reviews to identify and address security weaknesses Act as a technical SME, mentoring Junior Analysts and supporting BAU security operations Collaborate with IT and infrastructure teams to strengthen security practices and organisational resilience Maintain security documentation in line with ISO 27001 and monitor performance against KPIs and SLAs Key Experience Required of the Senior Cyber Security Analyst: Proven experience in a Senior Cyber Security Analyst, Security Operations Analyst, or equivalent technical security role Strong hands-on experience with SIEM technologies, threat detection, security monitoring, and incident response Experience with security technologies including Firewalls, endpoint detection and response (EDR), DLP, and vulnerability management tools Demonstrable experience investigating complex security incidents and implementing remediation measures Strong understanding of security frameworks, risk management, and ISO 27001 Previous experience acting as a technical SME, mentoring analysts, and supporting BAU security operations Familiarity with ITSM and delivery tools such as ServiceNow, Cherwell, Jira, or Azure DevOps Excellent stakeholder management skills and experience collaborating across global teams Relevant certifications such as CompTIA Security+, CySA+, or CISSP are desirable Apply now to speak with VIQU IT in confidence, or reach out to Katie Dark via the VIQU IT website. Do you know someone great? We'll thank you with up to £1,000 if your referral is successful (terms apply).

Cyber Security Analyst 2-month contract Remote/London Inside of IR35 My Client is looking for a Cyber Security Analyst to support day-to-day BAU security operations, with a primary focus on Rapid7, SIEM monitoring, vulnerability management and security investigations . They have quite a few backlog of alerts, so they are looking for someone with strong SIEM, vulnerability and investigation skills. Key Skills & Experience from the Cyber Security Analyst: Strong hands-on experience with Rapid7 and SIEM platforms . (Monitoring alerts and investigation) Proven experience in alert triage, security investigations and vulnerability management . Strong Mimecast administration experience (Email review, releasing, whitelisting, sandboxing) Good working knowledge of Microsoft Purview, eDiscovery, DSAR and DLP . Experience with CrowdStrike (managing alerts) Experience with Netskope or similar (Site reviews and unblocking) Good understanding of SOC / Security Operations and BAU security processes. Key Responsibilities of the Cyber Security Analyst: Monitor, triage and investigate Rapid7 and SIEM alerts , including managing and reducing an existing alert backlog. Perform security investigations , analysing events and identifying potential threats or suspicious activity. Support vulnerability management using Rapid7, including reviewing, prioritising and investigating vulnerabilities. Monitor and investigate security events through SIEM tooling , escalating incidents where appropriate. Manage Mimecast security operations, including email reviews, releasing quarantined messages, whitelisting and sandboxing. Support Microsoft Purview activities including eDiscovery, DSARs and DLP . Manage Netskope requests, including site reviews and URL unblocking. Monitor and triage CrowdStrike alerts. Provide administrative support for Security DDQs and wider information security requests. Maintain appropriate investigation records and security documentation. The Cyber Security Analyst is required to be onsite 1 day a week in Central London. Apply now to speak with VIQU IT in confidence. Or reach out to Connor Smal via the VIQU IT website. Do you know someone great? We ll thank you with up to £1,000 if your referral is successful (terms apply). For more exciting roles and opportunities like this, please follow us on IT Recruitment.

If you enjoy getting hands-on with cyber security, investigating threats and improving the protection of complex IT environments, this could be an opportunity worth exploring. Cyber Security Analyst Southampton Hybrid - 3 days on-site Up to 65,000 We're working with a UK rail freight and logistics business looking for a Cyber Security Analyst to support its IT Systems Manager in protecting systems, networks and data across the organisation. This is an operational, technically focused role combining cyber security, network security and elements of systems administration. You'll work alongside infrastructure, applications and service delivery teams, helping maintain security controls, investigate incidents and support compliance across the business. The Role You'll take responsibility for day-to-day security operations, helping ensure that security controls are working effectively and that potential risks are identified and addressed. Your responsibilities will include: Monitoring security systems, investigating alerts and coordinating incident resolution. Configuring, maintaining and supporting security technologies across on-premises, cloud and SaaS environments. Supporting firewalls, VPNs, endpoint protection, email security, identity and access controls, vulnerability management and security monitoring platforms. Coordinating vulnerability assessments and working with system owners to track remediation through to completion or formal acceptance. Reviewing systems, applications and cloud services for secure configuration and alignment with approved standards. Supporting penetration tests, audits, assurance reviews and accreditation activities. Contributing technical evidence and documentation for security policies, risk assessments and compliance requirements. Providing practical security guidance to technical teams and project stakeholders. Identifying opportunities to improve security services through upgrades, automation and better operational processes. You'll also help maintain alignment with the NIST Cybersecurity Framework and applicable Network and Information Systems (NIS) Regulations. What You'll Bring You'll have significant hands-on experience supporting complex IT, network or cyber security environments, with a strong understanding of how security controls operate across infrastructure, networks, endpoints, cloud services and applications. You'll also bring: Practical knowledge of TCP/IP, firewalls, VPNs, DNS, DHCP, certificates and SSL/TLS. Experience with vulnerability scanning, secure configuration assessments and remediation tracking. An understanding of common attack techniques, security monitoring and incident response. Knowledge of the OWASP Top 10 and recognised cyber security principles. An understanding of the NIST Cybersecurity Framework and NIS Regulations. Experience working towards Cyber Essentials. The ability to maintain security policies, procedures, technical documentation and audit evidence. A methodical approach to investigating issues, prioritising risks and communicating findings clearly. You'll be comfortable working with technical teams and stakeholders, managing competing priorities and taking ownership of security-related actions. A willingness to support occasional out-of-hours requirements is also needed. Desirable Experience Experience with any of the following would be useful: Microsoft Azure, Microsoft 365, Entra ID, Defender or Sentinel. SIEM, endpoint detection and response, secure web gateways, email security or privileged access technologies. Security audits, NIS compliance, assurance reviews or accreditation programmes. ITIL or working within an IT service management framework. Relevant certifications such as CompTIA Security+, CISSP, SSCP, CCNA Security or Microsoft and Palo Alto Networks security certifications. Working in a regulated, safety-critical, transport, logistics or multi-site environment. What's on Offer Salary up to 65,000. Hybrid working, with 3 days a week on-site in Southampton. 25 days' holiday plus bank holidays. Company pension and life assurance. Employee discounts and Cycle to Work scheme. Ongoing training and career development. Employee Assistance Programme and wellbeing support. Occasional travel to other sites may also be required. Apply now or contact Ruby Calver at Spectrum IT Recruitment to find out more. Spectrum IT Recruitment (South) Limited is acting as an Employment Agency in relation to this vacancy.

Drax Group is seeking an OT Cyber Security Analyst to monitor and secure OT/ICS/SCADA systems across UK assets. The role supports generation assets and involves travel to sites around the UK about 30% of the time. Hybrid work is available with 3 days on site at Drax Power Station Selby or Glasgow. Ideal candidates will combine OT awareness with cyber tooling experience (SIEM/EDR/IDS) and a solid grounding in networking, firewalls, and IEC 62443/NIS CAF frameworks.

As a global leader in cybersecurity, CrowdStrike protects the people, processes and technologies that drive modern organizations. Since 2011, our mission hasn't changed - we're here to stop breaches, and we've redefined modern security with the world's most advanced AI-native platform. We work on large scale distributed systems, processing almost 3 trillion events per day and this traffic is growing daily. Our customers span all industries, and they count on CrowdStrike to keep their businesses running, their communities safe and their lives moving forward. We're proud to work for a mission-driven company leveraging AI to transform the way we work. CrowdStrikers drive their careers through flexibility and autonomy while also being expected to contribute to a culture of responsible AI adoption, experimentation, and innovation. We use an AI-first mindset as a force multiplier to proactively and continuously accelerate execution, build expertise, uncover insights, and solve complex problems. We're always looking to add talented CrowdStrikers to the team who have limitless passion, a relentless focus on innovation and a fanatical commitment to our customers, our community and each other. Ready to join a mission that matters? The future of cybersecurity starts with you. About the Role: CrowdStrike is looking for highly motivated, self-driven, technical analysts dedicated to making a difference in global security by protecting organizations against the most advanced attackers in the world. Our CrowdStrike virtual security operations center offers opportunities to expand your skill set through a wide variety of experiences, detecting and responding to incidents as they occur in real-time for our customers. Do you find yourself interested in putting your hands-on technical skills to the test in detecting, containing, and remediating incidents? Are you self-motivated and looking for an opportunity to rapidly accelerate your skills? Do you crave new and innovative work that actually matters to your customer? Do you have an Incident Response or Information Security background that you're not fully utilizing? Are you capable of leading teams and interacting well with customers? Do you love working around like-minded, smart people who you can learn from and mentor on a daily basis? What You'll Do: Conduct monitoring and perform in-depth analysis of security alerts. Exercise incident handling processes across Windows, Mac, and Linux platforms. Perform malware analysis. Perform remote remediation of malware or malicious activity. Develop and improve processes for incident detection, triage, and the execution of countermeasures Produce high-quality written and verbal communications, recommendations, and findings to customer management. Demonstrate industry thought leadership through blog posts, CrowdCasts, and other public speaking events. Manage internal programs or teams. Serve as the technical escalation point and mentor for lower-level analysts. Provide oversight and quality assurance for issues worked by lower-level analysts. Assist in the advancement of security processes and procedures. What You'll Need: Successful candidates will have experience in one or more of the following areas: Incident Handling: experience conducting or managing incident response for organizations, investigating targeted threats such as the Advanced Persistent Threat, Organized Crime, and Hactivists. Computer Forensic Analysis: a background using a variety of forensic analysis tools in incident response investigations to determine the extent and scope of compromise. Systems Administration: an understanding of system internals is required to understand how to implement and execute countermeasures and remediation. Network Forensic Analysis: knowledge of network protocols, network analysis tools, and ability to perform analysis of associated network logs. Malware Analysis: ability to perform static and dynamic malware analysis to understand the nature of malware Incident Remediation: strong understanding of targeted attacks and able to create customized tactical and strategic remediation plans for compromised organizations. Network Operations and Architecture/Engineering: strong understanding of secure network architecture and strong background in performing network operations. Programming/Scripting: experience coding in Powershell, C, C#, VB, Python, Perl, Ruby on Rails, and.NET. Education: BA or BS / MA or MS degree in Computer Science, Computer Engineering, Math, Information Security, Information Assurance, Information Security Management, Intelligence Studies, Cybersecurity, Cybersecurity Policy, or a related field. Bonus Points: 4-6 years of relevant incident handling experience At least one relevant security certification Strong verbal and communication skills Strong problem solving skills Strong experience with Mac OS, Windows, and Unix operating systems. Ability to handle high pressure situations in a productive and professional manner. Strong time management skills with the ability to multi-task Benefits of Working at CrowdStrike: Market leader in compensation and equity awards Comprehensive physical and mental wellness programs Competitive vacation and holidays for recharge Paid parental and adoption leaves Professional development opportunities for all employees regardless of level or role Employee Networks, geographic neighborhood groups, and volunteer opportunities to build connections Vibrant office culture with world class amenities Great Place to Work Certified across the globe CrowdStrike is proud to be an equal opportunity employer. We are committed to fostering a culture of belonging where everyone is valued for who they are and empowered to succeed. We support veterans and individuals with disabilities through our affirmative action program. CrowdStrike is committed to providing equal employment opportunity for all employees and applicants for employment. The Company does not discriminate in employment opportunities or practices on the basis of race, color, creed, ethnicity, religion, sex (including pregnancy or pregnancy-related medical conditions), sexual orientation, gender identity, marital or family status, veteran status, age, national origin, ancestry, physical disability (including HIV and AIDS), mental disability, medical condition, genetic information, membership or activity in a local human rights commission, status with regard to public assistance, or any other characteristic protected by law. We base all employment decisions including recruitment, selection, training, compensation, benefits, discipline, promotions, transfers, lay-offs, return from lay-off, terminations and social/recreational programs on valid job requirements. If you need assistance accessing or reviewing the information on this website or need help submitting an application for employment or requesting an accommodation, please contact us at for further assistance.

Cyber Operations Analyst (Network Intrusion & Capability Development) Location: London, Cheltenham, Ipswich (5 days per week) Salary: Up to £100,000 + Bonus + Benefits Join a specialist cyber team operating within highly secure national security environments. This is a hands-on role focused on network intrusion analysis, cyber investigations, large-scale data analysis and capability development. You'll work alongside cyber operators, engineers and analysts to investigate sophisticated threats and build bespoke tooling that enhances cyber operations. Cyber Operations Analyst - Key Responsibilities Conduct network intrusion analysis and investigations into sophisticated cyber activity. Analyse large-scale network and telecommunications datasets, including NetFlow and network telemetry. Develop bespoke cyber tooling, automation and analytical capabilities to improve investigations and detection. Produce intelligence reporting and technical assessments to support operational decision-making. Collaborate with cyber specialists, engineers and researchers to solve complex cyber security challenges. Cyber Operations Analyst - Key Requirements Active UKIC DV Clearance. Extensive hands-on experience within cyber operations, threat hunting, cyber intelligence or network intrusion analysis. Experience analysing large-scale network data and identifying malicious activity. Software development or Scripting experience (Python or similar) with a focus on tooling and automation. Strong analytical and reporting skills with the ability to communicate complex findings clearly. This is an exciting opportunity to work within a high-performing cyber team, developing advanced capabilities and supporting investigations into sophisticated cyber threats across critical national security environments. Get in touch with me at (see below) *Rates depend on experience and client requirements

Head of Operational Excellence Salary: £75,000-£80,000 per annum Location: Remote-first, with travel to the Nottingham office and customer sites as required Employment Type: Permanent Security Clearance: Active SC clearance preferred. Candidates without current clearance must be eligible and willing to undergo UK security vetting. The Opportunity We are seeking an experienced Head of Operational Excellence to drive continuous improvement, cross-functional integration and AI-enabled business transformation within a specialist technology and security organisation. This is a strategic leadership role focused on ensuring that business operations are efficient, consistent, secure and continuously improving. You will work closely with the Managing Director, Senior Leadership Team and functional leaders across Sales, Business Development, Engineering, Professional Services, Product, Marketing and Operations. You will act as the organisation's operational integrator, bringing together processes, knowledge management, certifications, compliance and ways of working to improve performance and deliver measurable business value. A key initial priority will be leading AI-enabled transformation across Sales, Commercial and Business Development, helping the organisation use its knowledge, data and expertise more effectively while maintaining the highest standards of security and governance. Key Responsibilities Operational Excellence and Continuous Improvement Drive effective integration across business functions, identifying and removing duplication, inefficiencies and operational barriers. Lead continuous improvement initiatives that deliver measurable gains in productivity, quality and consistency. Identify and prioritise activities that deliver the greatest value to the organisation and its customers. Establish consistent processes, governance and performance measures across functions. Certifications, Assurance and Compliance Oversee the organisation's certification and accreditation portfolio, including ISO 9001, ISO 27001, ISO 20000, ISO 22301, TickITplus, CRTF and relevant defence cyber certifications. Maintain compliance, audit readiness and continuous improvement across applicable standards and frameworks. Work with subject matter experts to maintain high-assurance operational standards aligned with MOD, NCSC, NATO and secure-by-design principles. Coordinate internal audit programmes, corrective actions and assurance reporting for the Managing Director and Board. Knowledge Management Own the approach to capturing, maintaining and exploiting organisational knowledge and intellectual assets. Develop and maintain effective knowledge resources covering case studies, proposals, bid libraries, propositions, playbooks, competitor intelligence, customer insight and reusable collateral. Establish processes to capture learning from projects, presales, Sales, Business Development and Professional Services. Ensure information is accessible, secure, version-controlled and actively reused, while protecting intellectual property and sensitive data. Foster a culture of knowledge sharing, continuous learning and translating expertise into customer and commercial value. AI-Enabled Business Transformation Initially focused on Sales, Commercial and Business Development, you will lead the design and implementation of AI-enabled capabilities across: Market intelligence, segmentation and research. Prospect and customer insight. Sales and presales collateral creation. Proposal development, quality assurance and governance. Internal knowledge discovery and exploitation. The responsible use of external knowledge and public large language models (LLMs). You will define and govern the organisation's approach to safe and effective AI adoption, establishing an operating model covering governance, training, tooling, security, probity and continuous improvement. You will also guide internal teams and external technical specialists in implementing appropriate AI capabilities, including small language models (SLMs) and LLMs, ensuring technology augments existing expertise and decision-making. A core objective will be to demonstrate measurable business benefits from AI adoption while maintaining robust security, data governance and intellectual property protection. Leadership and Stakeholder Management Act as a trusted adviser to the Managing Director and Senior Leadership Team. Lead cross-functional transformation programmes, influencing stakeholders and ensuring initiatives are delivered and adopted. Challenge established practices constructively while maintaining strong working relationships and a collaborative culture. Commission and manage external specialists, analysts and consultancies where additional expertise is required. Build engagement across all levels of the organisation to ensure improvements are understood, Embedded and sustained. Represent the organisation at relevant industry forums and events. Essential Experience and Skills The successful candidate will demonstrate: Significant operational leadership experience within the technology and/or security sectors. A proven track record of leading cross-functional transformation and continuous improvement programmes. Experience overseeing certifications, audits, assurance activities and compliance frameworks. Experience implementing AI-enabled business processes or leading digital transformation initiatives. Strong analytical, communication, negotiation and stakeholder management skills. The ability to influence senior stakeholders, challenge existing ways of working and drive change across multiple functions. A pragmatic, commercially focused approach, with the ability to translate strategic objectives into measurable operational improvements. Desirable Experience Experience supporting MOD, NCSC, NATO or secure government supply chains. Knowledge of secure AI adoption, data governance and intellectual property protection. Familiarity with operational improvement methodologies such as ITIL, Lean, Six Sigma or Kaizen. Experience commissioning and managing external technical or specialist expertise. An understanding of AI/ML tooling and LLMs in high-assurance environments. Personal Attributes You will be a collaborative and influential leader who can combine strategic thinking with practical delivery. You will be comfortable working across organisational boundaries, building trust with technical and commercial teams, and turning complex challenges into clear, actionable improvements. You will demonstrate: Focus: Prioritising what matters most and delivering high-quality outcomes. Adaptability: Embracing change, solving complex challenges and continuously improving. Respect: Building trust, valuing different perspectives and creating an inclusive environment. Collaboration: Bringing people together to share expertise and achieve common goals. What's on Offer? Permanent position with a salary of £75,000-£80,000. Remote-first working with flexible arrangements. A senior leadership role with direct exposure to the Managing Director and wider leadership team. The opportunity to lead meaningful operational and AI-enabled transformation. Work within a specialist technology and security environment supporting government, defence and critical national infrastructure. A collaborative culture focused on technical excellence, innovation and continuous improvement. Reasonable Adjustments: Respect and equality are core values to us. We are proud of the diverse and inclusive community we have built, and we welcome applications from people of all backgrounds and perspectives. Our success is driven by our people, united by the spirit of partnership to deliver the best resourcing solutions for our clients. If you need any help or adjustments during the recruitment process for any reason , please let us know when you apply or talk to the recruiters directly so we can support you.

SecOps Engineer Hybrid Working | Permanent | Competitive Salary + Benefits Help Protect, Secure and Strengthen a Modern Technology Environment Cyber threats continue to evolve, and we're looking for a talented Security Operations (SecOps) Engineer to play a key role in safeguarding a complex and business-critical technology estate. This is an exciting opportunity to join a forward-thinking organisation where security is a strategic priority. Working across security operations, engineering and incident response, you'll help detect and respond to emerging threats while continuously improving the tools, processes and controls that protect the business. If you're passionate about cyber security and enjoy combining technical expertise with real-world problem-solving, we'd love to hear from you. The Role As a SecOps Engineer , you'll sit at the heart of the organisation's cyber security function, partnering with internal technology teams and external security providers to maintain and enhance security operations. You'll be responsible for monitoring threats, responding to incidents, improving detection capabilities and helping drive security best practice across the wider business. This role offers a fantastic opportunity to influence security strategy whilst remaining hands-on with leading security technologies. What You'll Be Doing Security Operations & Incident Response Investigate, triage and respond to security alerts and incidents. Coordinate incident response activities to minimise business impact. Perform root-cause analysis and recommend preventative measures. Lead or support security investigations and post-incident reviews. Threat Detection & Monitoring Enhance monitoring and detection capabilities across the organisation. Tune and optimise security tooling to improve visibility and reduce false positives. Identify emerging threats, vulnerabilities and attack vectors. Support threat hunting and proactive security initiatives. Security Engineering & Improvement Configure and maintain SIEM, EDR/XDR and monitoring solutions. Drive security automation and orchestration initiatives. Deliver security improvement projects and technical enhancements. Support the implementation of security controls, policies and standards. Stakeholder Collaboration Act as a key liaison for managed SOC and security partners. Work closely with infrastructure, cloud and application teams. Provide technical security guidance to internal stakeholders. Help embed a security-first culture across the organisation. What We're Looking For Essential Experience You'll likely have experience in one or more of the following roles: Security Operations Engineer Cyber Security Analyst Security Engineer SOC Analyst (Level 2/3) Threat Detection Engineer Incident Response Analyst You'll also bring: Strong knowledge of cyber security operations and incident management. Experience with security monitoring and detection technologies. Understanding of endpoint, identity and cloud security. Experience working within Microsoft 365 environments. Knowledge of vulnerability management and security best practices. Strong analytical and problem-solving skills. Excellent communication and stakeholder engagement abilities. Technical Experience Experience with some of the following technologies is highly desirable: Microsoft Sentinel Microsoft Defender XDR CrowdStrike SentinelOne Splunk IBM QRadar Azure Security Services Security Automation & SOAR platforms Endpoint Detection & Response (EDR) Desirable Qualifications CISSP SSCP CompTIA Security+ SC-200 SC-300 Azure Security certifications GIAC certifications Equivalent experience will also be considered. Why Join? This is more than a security operations role. It's an opportunity to help shape the future of cyber security within a business that values innovation, continuous improvement and technology excellence. You'll gain exposure to modern security tooling, meaningful projects and strategic initiatives while working alongside experienced technology and security professionals. Apply Today If you're a security professional looking for your next challenge and want the opportunity to influence, protect and improve a modern technology environment, we'd love to hear from you. Apply now to discuss this opportunity in confidence. Modis International Ltd acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers in the UK. Modis Europe Ltd provide a variety of international solutions that connect clients to the best talent in the world. For all positions based in Switzerland, Modis Europe Ltd works with its licensed Swiss partner Accurity GmbH to ensure that candidate applications are handled in accordance with Swiss law. Both Modis International Ltd and Modis Europe Ltd are Equal Opportunities Employers. By applying for this role your details will be submitted to Modis International Ltd and/or Modis Europe Ltd. Our Candidate Privacy Information Statement which explains how we will use your information is available on the Modis website.

SecOps Engineer Hybrid Working | Permanent | Competitive Salary + Benefits Help Protect, Secure and Strengthen a Modern Technology Environment Cyber threats continue to evolve, and we're looking for a talented Security Operations (SecOps) Engineer to play a key role in safeguarding a complex and business-critical technology estate. This is an exciting opportunity to join a forward-thinking organisation where security is a strategic priority. Working across security operations, engineering and incident response, you'll help detect and respond to emerging threats while continuously improving the tools, processes and controls that protect the business. If you're passionate about cyber security and enjoy combining technical expertise with real-world problem-solving, we'd love to hear from you. The Role As a SecOps Engineer , you'll sit at the heart of the organisation's cyber security function, partnering with internal technology teams and external security providers to maintain and enhance security operations. You'll be responsible for monitoring threats, responding to incidents, improving detection capabilities and helping drive security best practice across the wider business. This role offers a fantastic opportunity to influence security strategy whilst remaining hands-on with leading security technologies. What You'll Be Doing Security Operations & Incident Response Investigate, triage and respond to security alerts and incidents. Coordinate incident response activities to minimise business impact. Perform root-cause analysis and recommend preventative measures. Lead or support security investigations and post-incident reviews. Threat Detection & Monitoring Enhance monitoring and detection capabilities across the organisation. Tune and optimise security tooling to improve visibility and reduce false positives. Identify emerging threats, vulnerabilities and attack vectors. Support threat hunting and proactive security initiatives. Security Engineering & Improvement Configure and maintain SIEM, EDR/XDR and monitoring solutions. Drive security automation and orchestration initiatives. Deliver security improvement projects and technical enhancements. Support the implementation of security controls, policies and standards. Stakeholder Collaboration Act as a key liaison for managed SOC and security partners. Work closely with infrastructure, cloud and application teams. Provide technical security guidance to internal stakeholders. Help embed a security-first culture across the organisation. What We're Looking For Essential Experience You'll likely have experience in one or more of the following roles: Security Operations Engineer Cyber Security Analyst Security Engineer SOC Analyst (Level 2/3) Threat Detection Engineer Incident Response Analyst You'll also bring: Strong knowledge of cyber security operations and incident management. Experience with security monitoring and detection technologies. Understanding of endpoint, identity and cloud security. Experience working within Microsoft 365 environments. Knowledge of vulnerability management and security best practices. Strong analytical and problem-solving skills. Excellent communication and stakeholder engagement abilities. Technical Experience Experience with some of the following technologies is highly desirable: Microsoft Sentinel Microsoft Defender XDR CrowdStrike SentinelOne Splunk IBM QRadar Azure Security Services Security Automation & SOAR platforms Endpoint Detection & Response (EDR) Desirable Qualifications CISSP SSCP CompTIA Security+ SC-200 SC-300 Azure Security certifications GIAC certifications Equivalent experience will also be considered. Why Join? This is more than a security operations role. It's an opportunity to help shape the future of cyber security within a business that values innovation, continuous improvement and technology excellence. You'll gain exposure to modern security tooling, meaningful projects and strategic initiatives while working alongside experienced technology and security professionals. Apply Today If you're a security professional looking for your next challenge and want the opportunity to influence, protect and improve a modern technology environment, we'd love to hear from you. Apply now to discuss this opportunity in confidence. Modis International Ltd acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers in the UK. Modis Europe Ltd provide a variety of international solutions that connect clients to the best talent in the world. For all positions based in Switzerland, Modis Europe Ltd works with its licensed Swiss partner Accurity GmbH to ensure that candidate applications are handled in accordance with Swiss law. Both Modis International Ltd and Modis Europe Ltd are Equal Opportunities Employers. By applying for this role your details will be submitted to Modis International Ltd and/or Modis Europe Ltd. Our Candidate Privacy Information Statement which explains how we will use your information is available on the Modis website.

Role: Cyber Incident Manager Duration: 5 Months Location: UK Remote Day Rate: 500 Inside IR35 Active SC clearance required due to project restrictions Overview We are seeking an experienced Cyber Incident Manager to join a high-profile programme supporting a secure government environment. The successful candidate will lead the coordination, management, and resolution of cyber security incidents, ensuring rapid response, stakeholder engagement, and continuous service improvement. This role requires a proactive individual with strong communication skills, experience managing complex cyber incidents, and the ability to operate effectively within secure and highly regulated environments. Key Responsibilities Lead the end-to-end management of cyber security incidents and major security events. Coordinate technical response teams during security incidents, ensuring timely containment, eradication, and recovery activities. Act as the primary point of contact for cyber incident communications and stakeholder updates. Facilitate incident response bridges and war-room activities during critical incidents. Ensure incidents are appropriately prioritised, investigated, documented, and escalated. Produce post-incident reports, lessons learned documentation, and root cause analysis findings. Work closely with Security Operations Centres (SOC), security analysts, infrastructure teams, and third-party suppliers. Monitor incident trends and provide recommendations for improving cyber resilience. Support the development and enhancement of incident response processes, playbooks, and procedures. Ensure compliance with organisational security policies and industry best practices. Essential Skills & Experience Active SC Clearance. Minimum 5 years' experience within Cyber Security, Incident Management, or Security Operations environments. Proven experience leading and managing cyber security incidents from initiation through to resolution. Strong knowledge of incident response methodologies and cyber security frameworks. Experience working with SIEM, EDR, and threat intelligence platforms. Excellent stakeholder management and communication skills. Ability to coordinate multiple technical teams during high-pressure incidents. Strong analytical and problem-solving skills. Experience producing executive-level incident reports and recommendations. Desirable Skills Certifications such as CISSP, CISM, GCIH, CompTIA Security+, or equivalent. Experience within Government, Defence, National Security, or Critical National Infrastructure sectors. Knowledge of NIST, ISO 27001, Cyber Essentials, and NCSC guidance. Experience working within Security Operations Centres (SOC). If you receive suspicious outreach claiming to be from us, please contact us via the ManpowerGroup website.

SecOps Engineer Hybrid Working Permanent Competitive Salary + Benefits Help Protect, Secure and Strengthen a Modern Technology Environment Cyber threats continue to evolve, and we're looking for a talented Security Operations (SecOps) Engineer to play a key role in safeguarding a complex and business-critical technology estate. This is an exciting opportunity to join a forward-thinking organisation where security is a strategic priority. Working across security operations, engineering and incident response, you'll help detect and respond to emerging threats while continuously improving the tools, processes and controls that protect the business. If you're passionate about cyber security and enjoy combining technical expertise with real-world problem-solving, we'd love to hear from you. The Role As a SecOps Engineer , you'll sit at the heart of the organisation's cyber security function, partnering with internal technology teams and external security providers to maintain and enhance security operations. You'll be responsible for monitoring threats, responding to incidents, improving detection capabilities and helping drive security best practice across the wider business. This role offers a fantastic opportunity to influence security strategy whilst remaining hands-on with leading security technologies. What You'll Be Doing Security Operations & Incident Response Investigate, triage and respond to security alerts and incidents. Coordinate incident response activities to minimise business impact. Perform root-cause analysis and recommend preventative measures. Lead or support security investigations and post-incident reviews. Threat Detection & Monitoring Enhance monitoring and detection capabilities across the organisation. Tune and optimise security tooling to improve visibility and reduce false positives. Identify emerging threats, vulnerabilities and attack vectors. Support threat hunting and proactive security initiatives. Security Engineering & Improvement Configure and maintain SIEM, EDR/XDR and monitoring solutions. Drive security automation and orchestration initiatives. Deliver security improvement projects and technical enhancements. Support the implementation of security controls, policies and standards. Stakeholder Collaboration Act as a key liaison for managed SOC and security partners. Work closely with infrastructure, cloud and application teams. Provide technical security guidance to internal stakeholders. Help embed a security-first culture across the organisation. What We're Looking For Essential Experience You'll likely have experience in one or more of the following roles: Security Operations Engineer Cyber Security Analyst Security Engineer SOC Analyst (Level 2/3) Threat Detection Engineer Incident Response Analyst You'll also bring: Strong knowledge of cyber security operations and incident management. Experience with security monitoring and detection technologies. Understanding of endpoint, identity and cloud security. Experience working within Microsoft 365 environments. Knowledge of vulnerability management and security best practices. Strong analytical and problem-solving skills. Excellent communication and stakeholder engagement abilities. Technical Experience Experience with some of the following technologies is highly desirable: Microsoft Sentinel Microsoft Defender XDR CrowdStrike SentinelOne Splunk IBM QRadar Azure Security Services Security Automation & SOAR platforms Endpoint Detection & Response (EDR) Desirable Qualifications CISSP SSCP CompTIA Security+ SC-200 SC-300 Azure Security certifications GIAC certifications Equivalent experience will also be considered. Why Join? This is more than a security operations role. It's an opportunity to help shape the future of cyber security within a business that values innovation, continuous improvement and technology excellence. You'll gain exposure to modern security tooling, meaningful projects and strategic initiatives while working alongside experienced technology and security professionals. Apply Today If you're a security professional looking for your next challenge and want the opportunity to influence, protect and improve a modern technology environment, we'd love to hear from you. Apply now to discuss this opportunity in confidence. Modis International Ltd acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers in the UK. Modis Europe Ltd provide a variety of international solutions that connect clients to the best talent in the world. For all positions based in Switzerland, Modis Europe Ltd works with its licensed Swiss partner Accurity GmbH to ensure that candidate applications are handled in accordance with Swiss law. Both Modis International Ltd and Modis Europe Ltd are Equal Opportunities Employers. By applying for this role your details will be submitted to Modis International Ltd and/ or Modis Europe Ltd. Our Candidate Privacy Information Statement which explains how we will use your information is available on the Modis website.

SecOps Engineer Hybrid Working Permanent Competitive Salary + Benefits Help Protect, Secure and Strengthen a Modern Technology Environment Cyber threats continue to evolve, and we're looking for a talented Security Operations (SecOps) Engineer to play a key role in safeguarding a complex and business-critical technology estate. This is an exciting opportunity to join a forward-thinking organisation where security is a strategic priority. Working across security operations, engineering and incident response, you'll help detect and respond to emerging threats while continuously improving the tools, processes and controls that protect the business. If you're passionate about cyber security and enjoy combining technical expertise with real-world problem-solving, we'd love to hear from you. The Role As a SecOps Engineer , you'll sit at the heart of the organisation's cyber security function, partnering with internal technology teams and external security providers to maintain and enhance security operations. You'll be responsible for monitoring threats, responding to incidents, improving detection capabilities and helping drive security best practice across the wider business. This role offers a fantastic opportunity to influence security strategy whilst remaining hands-on with leading security technologies. What You'll Be Doing Security Operations & Incident Response Investigate, triage and respond to security alerts and incidents. Coordinate incident response activities to minimise business impact. Perform root-cause analysis and recommend preventative measures. Lead or support security investigations and post-incident reviews. Threat Detection & Monitoring Enhance monitoring and detection capabilities across the organisation. Tune and optimise security tooling to improve visibility and reduce false positives. Identify emerging threats, vulnerabilities and attack vectors. Support threat hunting and proactive security initiatives. Security Engineering & Improvement Configure and maintain SIEM, EDR/XDR and monitoring solutions. Drive security automation and orchestration initiatives. Deliver security improvement projects and technical enhancements. Support the implementation of security controls, policies and standards. Stakeholder Collaboration Act as a key liaison for managed SOC and security partners. Work closely with infrastructure, cloud and application teams. Provide technical security guidance to internal stakeholders. Help embed a security-first culture across the organisation. What We're Looking For Essential Experience You'll likely have experience in one or more of the following roles: Security Operations Engineer Cyber Security Analyst Security Engineer SOC Analyst (Level 2/3) Threat Detection Engineer Incident Response Analyst You'll also bring: Strong knowledge of cyber security operations and incident management. Experience with security monitoring and detection technologies. Understanding of endpoint, identity and cloud security. Experience working within Microsoft 365 environments. Knowledge of vulnerability management and security best practices. Strong analytical and problem-solving skills. Excellent communication and stakeholder engagement abilities. Technical Experience Experience with some of the following technologies is highly desirable: Microsoft Sentinel Microsoft Defender XDR CrowdStrike SentinelOne Splunk IBM QRadar Azure Security Services Security Automation & SOAR platforms Endpoint Detection & Response (EDR) Desirable Qualifications CISSP SSCP CompTIA Security+ SC-200 SC-300 Azure Security certifications GIAC certifications Equivalent experience will also be considered. Why Join? This is more than a security operations role. It's an opportunity to help shape the future of cyber security within a business that values innovation, continuous improvement and technology excellence. You'll gain exposure to modern security tooling, meaningful projects and strategic initiatives while working alongside experienced technology and security professionals. Apply Today If you're a security professional looking for your next challenge and want the opportunity to influence, protect and improve a modern technology environment, we'd love to hear from you. Apply now to discuss this opportunity in confidence. Modis International Ltd acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers in the UK. Modis Europe Ltd provide a variety of international solutions that connect clients to the best talent in the world. For all positions based in Switzerland, Modis Europe Ltd works with its licensed Swiss partner Accurity GmbH to ensure that candidate applications are handled in accordance with Swiss law. Both Modis International Ltd and Modis Europe Ltd are Equal Opportunities Employers. By applying for this role your details will be submitted to Modis International Ltd and/ or Modis Europe Ltd. Our Candidate Privacy Information Statement which explains how we will use your information is available on the Modis website.

SOC Detection Engineer - 6 Month Initial Contract - Hybrid in Multiple UK Locations - Inside IR35 Role Overview A Senior SOC Detection Engineer responsible for designing, developing, and continuously improving threat-led detection capabilities across a large enterprise. The role translates cyber threat intelligence, red team findings, and incident learnings into high-fidelity detection logic, owning the full detection content life cycle from threat analysis through to tuning, optimisation, and retirement. This is a specialist detection engineering role and is not focused on day-to-day SIEM administration or platform operations. Key Responsibilities Design, develop, and maintain threat-led detection content aligned to MITRE ATT&CK and organisational threat models, translating threat intelligence, hunting findings, and red/purple team outcomes into effective detections. Develop behavioural, risk-based, and correlated detections across endpoint, identity, cloud, network, email, and application telemetry, continuously tuning and optimising logic to reduce false positives. Assess detection coverage, identify telemetry and visibility gaps, and define requirements for improved monitoring across the enterprise security estate. Validate detections through attack simulation, purple teaming, and adversary emulation exercises, maintaining detection content documentation, version control, and Detection-as-Code practices. Develop automation to support detection testing, validation, reporting, and life cycle management, including AI-enabled hypothesis generation and automated rule creation pipelines. Top 5 Skills Threat-led detection engineering - 8+ years in detection engineering, threat hunting, or security operations, with demonstrable experience creating behavioural detections for sophisticated adversaries aligned to MITRE ATT&CK, including full detection life cycle management. SIEM & EDR platform expertise - Proven experience developing enterprise-scale detections within platforms such as Microsoft Sentinel, Splunk, Elastic, or Chronicle, alongside endpoint telemetry from Microsoft Defender, CrowdStrike, SentinelOne, or equivalent EDR/XDR platforms. Detection analytics & automation - Strong proficiency in KQL, SPL, Sigma, Python, and PowerShell for detection logic development, data correlation, Detection-as-Code practices, and automation of SOC analyst activities. Threat analysis & adversary tradecraft - Deep knowledge of threat intelligence, adversary TTP analysis, attack path analysis, and threat hunting methodologies, with strong understanding of attacker tradecraft and common attack techniques. Security domain breadth - Solid knowledge across Identity & Access Management, Active Directory, Cloud Security, Endpoint Security, Network Security, and Email Security, with experience supporting purple team and adversary emulation activities. Contract Details Rate: £425- £475 per day Inside IR35 Location: Hybrid in one of Leamington Spa, Manchester or Warrington (2/3x a week) Duration: 6 Month Initial Contract