48 jobs found

Digital Trust & Security - Managing Consultant At Capgemini Invent, we believe difference drives change. As inventive transformation consultants, we blend our strategic, creative and scientific capabilities, collaborating closely with clients to deliver cutting-edge solutions. Join us to drive transformation tailored to our client's challenges of today and tomorrow. Informed and validated by science and data. Superpowered by creativity and design. All underpinned by technology created with purpose. YOUR ROLE The Invent Digital Trust & Security (DT&S) practice focuses on ensuring secure business outcomes for our clients, providing Cybersecurity advisory and transformation consulting in areas such as security strategy, risk management, human risk management, data and identity security, secure intelligent industry, Gen-AI risk, and security operations modernisation. Our security specialists and innovators enable our clients to evaluate cyber risks, redesign Cybersecurity operating models, modernise digital identity capabilities, lead programmes to drive security culture change, and transform security and compliance regimes to make them efficient, effective, sustainable, and resilient. For this role, we are looking for individuals with experience in Cybersecurity to help embed security culture and practices. We continuously recruit across a range of experienced hire grades for our DT&S practice. Depending on experience, you will be comfortable with exploring ambiguity with a business outcome mindset while applying business analysis and enabling skills including communications and stakeholder engagement as a key delivery contributor, a subject matter expert (SME) in the team and/or manager of a workstream of consultants and client staff. We're looking to grow our diverse team at the Managing Consultant level with those who have demonstrated expertise and experience in either one (or both) of the following domains: Generative AI - Enabling the secure design and adoption of Gen AI for business, IT and/or security functions in alignment with the evolving regulatory landscape (e.g. EU AI Act, GDPR, DPA 2018, etc.). Security Architecture - Improving the security posture of the Enterprise and/or applications through the assessment, design or implementation of effective and secure architectural patterns that align with industry standards (e.g. CIS L1/2, NIST, ISO27001, COBIT, etc.). Operational Technology - Ensure the security of critical infrastructure aligns with industry standards and regulatory requirements (e.g. NIST SP 800-82, CAF, DPA 2018, etc.). Operational Resilience- Shaping and/or transforming client operational resilience capabilities in compliance with leading regulatory standards (e.g., DORA, Bank of England, FCA, NIST, etc.). Cybersecurity Operating Model Transformation- Assessing, designing and implementing effective and outcome orientated security operating models. As an experienced consultant in the business you'll help set the direction, grow our business, model our values and behaviours, and coach and develop junior members of the team. Key expectations from this role include: Engaging in projects for our clients which transform their Cybersecurity, Architecture and Operational Resilience capabilities, and reduce business and technology risk. Providing expertise in the strategic, organisational, and human aspects of Cybersecurity. For example, security strategy definition and high-level operating model design, which are often the first steps in engaging our clients, helping to influence the board and CxO with top-down buy-in and understanding. Providing insight for threat modelling, risk management and security overlay approaches by conducting security maturity assessments. Developing new security strategies to manage emerging risks in Cloud & agile/DevSecOps operating environments. Providing a business understanding of technical domains and tailoring these to help clients maximise value and leverage quick wins on their transformation journey. Engaging with clients in business, IT and/or security to positively influence the board and senior stakeholders to the required outcomes. Collaborating with teams and stakeholders to deliver security strategy, governance, security testing, identity & access management (IAM), security architecture, privacy, and cyber data analytics. As part of your role, you will also have the opportunity to contribute to the business and your own personal growth, through activities that form part of the following: Business Development - Leading/contributing to proposals, RFPs, bids, proposition development, client pitch contribution, client hosting at events. Informal Sales - Ability to achieve a personal sales target of £0.5m (Soft Target). Internal Contribution - Campaign development, internal think-tanks, whitepapers, practice development (operations, recruitment, team events & activities), offering development. Learning & Development - Training to support your career development and the skills demand within the company, certifications etc. YOUR PROFILE To be successful in this role you would need to have the below mixture of skills and experience: Experience in one or more of Cybersecurity domains. (e.g., Security & Risk Management, Asset Security, Security Engineering, Communications & Network Security, Identity & Access Management, Security Education and Awareness, Security Assessment & Testing, Security Operations, or Software Development Security). Desired Cybersecurity experience is as follows: Working with SOC teams, OT Security, Security Op Model Transformation projects and Cybersecurity Assessments. Familiarity with core Cybersecurity frameworks and industry frameworks (e.g., NIST CSF, ISO27001, CIS Critical Controls), regulations (e.g., NIS2) and financial regulations (e.g., DORA, FCA, Bank of England, etc.). Relevant Cybersecurity qualifications such as CISSP / CISM / CompTIA Security+ preferred. Currently working in an established Consulting firm, and/or in industry but having a Consulting background. Proven ability to be successful in a matrixed organisation, and to enlist support and commitment from peers in selling and delivering consulting solutions. Experience of proposition building and delivery. Cross-sector or SME sector experience in core Capgemini sectors. (e.g., Financial Services; Public Sector; Energy, Utilities & Chemicals; Consumer Products Retail Distribution; Manufacturing, Automotive & Life Sciences; Telco, Media & Technology). Bring excellent communication skills and the confidence to influence senior stakeholders to the role. Experience in managing and leading delivery in Cybersecurity projects. SC cleared (or above), or eligible. WHAT YOU'LL LOVE ABOUT WORKING HERE? We are delighted to have received the "Glassdoor Best Places to work UK' accolade for 4 consecutive years. To see what it's like to work at Capgemini Invent, visit our Glassdoor page. Capgemini Invent offers Consultants a culture of learning, ownership, and focus on value. You'll gain exposure to high-profile transformations and gain hands-on exposure to leading technologies. Our consultants are formally trained by industry experts in consulting and client delivery. Consultants have access to a vast array for different training and certifications in a variety of areas: Cybersecurity (CISSP, CISM), cloud technologies (AWS, Azure, GCP), and Agile delivery (Scrum Master, Product Owner, Scaled Agile Framework). Capgemini Invent offers you the flexibility to develop various areas of knowledge in technical domains aligned both to your interests and our client's outcomes. Les Fontaines: Capgemini Invent has a unique training environment just outside of Paris, where we can immerse ourselves in thought-leadership, share knowledge and build capabilities that will help us and our clients to succeed. We hold monthly showcases of our digital transformation initiatives, sharing knowledge and showing off how the power of technology is impacting our clients. There are monthly team drinks, and it's a chance to connect face-to-face with the wider team over a few drinks in the city. The monthly team breakfasts give you a different, more relaxed setting to meet up in the office to hear from the leadership, meet colleagues and discuss the trends and insights within the market. Team away days are always a chance to connect with the team, have fun and learn something new. NEED TO KNOW At Capgemini we don't just believe in Diversity & Inclusion, we actively go out to making it a working reality. Driven by our core values and Active Inclusion Campaign, we build environments where you can bring your whole self to work. We aim to build an environment where employees can enjoy a positive work-life balance. We embed hybrid working in all that we do and make flexible working arrangements the day-to-day reality for our people. All UK employees are eligible to request flexible working arrangements. Employee wellbeing is vitally important to us as an organisation. We see a healthy and happy workforce a critical component for us to achieve our organisational ambitions. To help support wellbeing we have trained 'Mental Health Champions' across each of our business areas. We have also invested in wellbeing apps such as Thrive and Peppy. CSR . click apply for full job details

Salary - £50,000 Full time, Permanent Package Description Up to 15% discretionary annual bonus 11% pension contribution (3% from you, 8% from us optional additional matched 3% contributions, e.g. 6% from you, 11% from us) 25 days annual leave plus flexible bank holidays (option to buy/sell 5 days) Private Medical Cover Healthcare cash plan 6x salary death in service Paid volunteering day A personal GP service enabling you to get a video consultation with an NHS-registered, private GP Employee Assistance Programme A range of shopping discounts from major high-street retailers Job Introduction We have an exciting opportunity for a Security Operations Engineer to join our Information Security based in Leeds! The role of a Security Operations Engineer is all about protecting the company s digital assets. You'll be in charge of managing and maintaining security tools, as well as making sure they work well together. You ll also play a key part in securing delivery pipelines offering strategic input on projects and helping to integrate DevSecOps practices into the development process. To succeed in this role, you ll need a solid understanding of security principles and practices so you can effectively detect, respond to, and prevent threats. You'll be working closely with teams like security operations, incident response, and development, all to help strengthen the company s overall security. Main Responsibilities As our new Security Operations Engineer, you will also: You ll be responsible for handling the implementation, integration, maintenance, and management of security tools like SIEM, EDR, and vulnerability management platforms. Assist security analysts and incident command team with ongoing alerts of note and incidents You ll collaborate with analysts and management to create and fine-tune detections, ensuring that the security posture is constantly evaluated and updated to stay in line with the evolving threat landscape. Provide recommendations on containment and hardening actions to be taken, in relation to security incidents You ll collaborate with analysts and management to create and fine-tune detections, ensuring that the security posture is constantly evaluated and updated to stay in line with the evolving threat landscape. You ll support Security Operations Analysts, the Incident Command Team, and any connected third-party service providers during incident response activities. The Ideal Candidate We are looking for: You should have strong IT skills, including a solid understanding of computer networks, operating systems, software, hardware, and security. You should have extensive hands-on experience with security tools and technologies, like SIEM, IDS/IPS, and firewalls and experience of working in Agile development environments. You should have experience reviewing security controls and implementing hardening measures based on industry standard benchmarks. You should be familiar with security domains, auditing standards, and risk analysis frameworks, such as ISO 27001, Cyber Essentials, PCI DSS, and others. Verbal communication skills, including presentation skills, with an ability to communicate with a range of technical and non-technical team members and other relevant individuals About The Company About the Team Technology is at the heart of our organisation. It empowers our colleagues to deliver the best in class service to our Members, whether that be through our systems, platforms and architecture or robust data insights to help influence business decisions. It is a very exciting time to get involved in our Member Experience, Digital and Data (MEDD) division, as the team are currently developing new Cloud-based architecture, introducing a new CRM system that will allow for better cross-team collaboration and streamlining our Member journey through customer-centric product development. How MEDD work We offer a truly-flexible hybrid working arrangement that is centred around our colleagues work-life balance. Technology allows us to collaborate effectively regardless of location, but we know sometimes you can t beat being with your team in-person and our team tends to come on-site once or twice a month. However, we expect this can fluctuate throughout the year depending on our projects and current work. The Medical Protection Society Ltd (MPS) is the world s leading protection organisation for Doctors, Dentists and healthcare professionals. We protect and support the professional interests of almost 300,000 members around the world. We are a not-for-profit organisation, meaning member s subscriptions are either invested into bettering the organisation, colleagues and products, or kept safe should members require support for complaints or claims arising from professional practice. Our philosophy is to support safe practice in medicine and dentistry by helping to avert problems in the first place. We also actively campaign for regulatory and legal reforms that benefit members and the wider healthcare professions. To do this, we need colleagues who are trusted and supported to deliver their best work, whether that be through leadership development, fully funded training courses or peer-to-peer support. We want colleagues to feel empowered to deliver positive change, display ambition to push themselves and be determined when faced with a challenge, whilst ensuring members best interests are at the core. Closing Date 31 December 2025

Cloud Solution Architect (AWS/Azure) Onsite 2dpw minimum in either London or Manchester (wherever is closer) 85,000 - 105,000 Our client is searching for a Cloud Solution Architect. You will lead the design and implementation of scalable, secure, and cost-effective cloud solutions across Azure, AWS and GCP. You will play a key role in cloud strategy, governance, and migration initiatives while ensuring compliance with security standards and industry regulations. Key Responsibilities: Cloud Architecture Design: Develop end-to-end cloud solutions on Azure and AWS that meet business and technical requirements. Strategic Cloud Governance: Establish cloud strategies, frameworks, and best practices aligned with industry standards. Hybrid and Multi-Cloud Integration: Design solutions to seamlessly integrate on-premises and multi-cloud environments. Cloud Migration Leadership: Oversee cloud migration projects, including assessment, planning, and execution. Application Development Support: Collaborate with development teams to optimize cloud-native applications, microservices, and APIs. Security and Compliance: Implement security controls and ensure adherence to relevant standards and regulations. Cost Management: Monitor and optimize cloud resource allocation to balance performance and cost-efficiency. Stakeholder Collaboration: Act as a liaison between business stakeholders, technical teams, and vendors to deliver aligned solutions. Experience: 5+ years as a Solution Architect or Cloud Architect specializing in Azure and AWS. Expertise in designing hybrid and multi-cloud architectures. Proven experience leading large-scale cloud migrations and implementing DevOps practices. Technical Skills: Proficiency in Azure and AWS services (e.g., Azure Functions, AWS Lambda, AKS, ECS, IAM). Strong knowledge of cloud-native application development, microservices, and serverless frameworks. Hands-on experience with infrastructure-as-code tools like Terraform, CloudFormation, and ARM templates. Deep understanding of networking, security, databases, and storage in cloud environments. Familiarity with automation and CI/CD pipelines using tools such as Jenkins, GitLab CI, Ansible, and Docker. Preferred Qualifications: Certifications: AWS Certified Solutions Architect - Professional or Azure Solutions Architect Expert. Expertise in cloud security and DevSecOps practices. Knowledge of Kubernetes (AKS, EKS) and containerization technologies. Understanding of Agile/Scrum methodologies. If you or someone you know of might be interested, please call (phone number removed) and ask for Ben, or email me at

Our client teams operate globally from offices in the UK, Ireland, US, Nordics, and Netherlands. With diverse teams of experts combine innovative thinking and breakthrough technologies to progress further, and faster. Their clients adapt and transform, and together they achieve enduring results. Working with clients in consumer and manufacturing, defence and security, energy and utilities, financial services, government and public services, health and life sciences, and transport. The Senior Google Cloud Engineer will join the business at a period of huge growth. Job description Key Responsibilities: We are looking for an experienced person to join, and be instrumental within, our client s Google Alliance team. This is a critical role, one that will stretch you personally and professionally, and require you to utilise your creative, cognitive, and emotional intelligence. Therefore, we expect that: You are pragmatic and already understand that building a platform is only part of what a cloud engineering entails. You can clearly communicate with both clients and peers, describing technical issues and solutions in both written and meeting/workshop contexts. You are a confident problem solver and troubleshooter. You are confident and generous in sharing your specialist knowledge, ideas and solutions. You know when a platform is "fit for purpose". You are constantly learning and able to make others better by consciously teaching and unconsciously inspiring. You are obsessed with ensuring PA s reputation and credibility is always regarded at a remarkably elevated level, and unafraid to initiate corrective actions should this not be at our desired level. As a GCP Technical Lead, you'll be a true subject matter expert for delivering ingenious solutions on the Google Cloud Platform. We'll be looking at you to set direction and take responsibility for successfully achieving an outcome or deliverable. You may have a team of people to support, leading a development team, or else you could be working across multiple teams, providing some centralised expertise necessary for a larger program of work. You'll have expertise in architecture and will feel comfortable leading higher level architectural discussions. Using your experience of the DevSecOps processes, it s likely you ll own the overall process across a team, or multiple teams, building strong principles and putting robust methods and patterns in place. You will be comfortable having conversations with the client regularly, being one of the main points of engagement between the client and the project. Coaching and mentoring the team will be important in the role. You'll play an active role in technical account management. As part of this role you will design ingenious GCP-enabled solutions and services for brilliant clients across industry sectors. You will learn and grow our client will support you to further develop your specialisations and increase your GCP certifications. Expect a sleeves-up, fully associated, and immersive working week. All our people are client facing and empowered to fulfil the best outcome for their clients. Flexible working - We are guided by our client work and needs; however, you have autonomy to manage your time and diary to suit your work/life balance. Qualifications To be successful in this role, you will need to have knowledge of the following products and deep experience in one more of the categories: Serverless: Cloud Run, Cloud Functions Kubernetes Engine, Compute Engine VPC networks and Service Perimeters BigQuery, Cloud SQL, Cloud Spanner and Firestore API management including Apigee or Cloud Endpoints Data analytics services including Dataproc, Dataflow, Data Fusion and Cloud Composer Security controls, including Cloud IAM, PAM, VPC Service Controls and Security Command Centre Additionally you should have a sound understanding of the following Architectural principles: Microservices patterns Event-driven architectures and message queues Relational and non-relational databases Development and/or scripting experience (e.g. Python, Node, Bash) Security best practices for access control, data protection and communications. In addition to the above, we would be thrilled if you also had: Knowledge of other cloud platforms Automation DevOps experience using Google tech like Cloud Build and open source tech like terraform Additional information Check out some of the extensive benefits: • Health and lifestyle perks accompanying private healthcare for you and your family • 25 days annual leave (plus a bonus half day on Christmas Eve) with the opportunity to buy 5 additional days • Generous company pension scheme • Opportunity to get involved with community and charity-based initiatives • Annual performance-based bonus • Company share ownership • Tax efficient benefits (cycle to work, give as you earn)

Job title: Software Engineering Location: London Type: Contract Work Model: Hybrid Are you a seasoned professional in DevSecOps with a passion for innovation, automation, and security? Join our team as a Senior DevSecOps Engineer and play a pivotal role in shaping our DevOps processes by embedding security at their core. Key Responsibilities Configure toolsets within development pipelines (e.g., GitLab, Jenkins) to implement Security as a Service , enabling "shift-left" DevSecOps capabilities. Collaborate with engineering teams to design, integrate, and automate DevSecOps pipelines, including tools like SAST and DSAT. Lead the design and delivery of DevSecOps tests and controls aligned with the TT2 program. Apply secure coding principles (OWASP, SANS) and work with APIs to enhance DevSecOps functionality. Build and optimize containerized pipelines using a variety of tools and techniques. Top Skills & Experience Required Extensive Experience: 10+ years in operations or development with a strong focus on DevOps or DevSecOps practices. Technical Expertise: Proven ability to configure and integrate toolsets into development pipelines such as GitLab, Jenkins, etc. Hands-on experience with scripting languages like Python, Bash, PowerShell, or JSON. Pipeline Automation: Demonstrated ability to develop, integrate, and automate DevSecOps pipelines using tools such as SAST, DSAT, and vulnerability assessment platforms. If you are interested then please apply with a copy of your updated CV or send your CV directly to raghav. .co .uk Randstad Technologies is acting as an Employment Business in relation to this vacancy.

Java Engineer - SC Cleared - Surrey (FTOS) - 675 a day + 675 a day pay (Inside IR35) + SC Clearance required + Full time on site in Surrey + Java, REST APIs, JSON, JavaScript, Maven The role: You will work as part of a Scrum team, primarily concerned with leading the design and development of new features for the MoD solution. The role requires someone who is both self-reliant in delivery of work and supportive of others in a role as a peer and technical reviewer. We need a mix of skills to help complete some of the more challenging issues, such as redesign for performance improvements, rework to fix critical defects, implementation of new features and migration to current technologies. This includes both technology in the operational solution and technology in our DevSecOps development processes. The solution is an application based on a Service Oriented Architecture, implemented using Oracle's SOA Suite and Java EE, which provides Enterprise Application Integration, workflow and business process implementation, and provides data consumed by the Portal. The application is undergoing modernisation whilst the software development processes are exploiting industry standard DevSecOps and Infrastructure as Code techniques and tools. Essential Technical Skills are: Java JavaScript REST APIs JSON Messages JavaScript Framework (ideally React) Maven GitLab (or other source code configuration control) Build & Release Process Basic SQL (e.g. Oracle) Java Engineer - SC Cleared - Surrey (FTOS) - 675 a day

Senior DevSecOps Engineer - 6 Months Contract - Inside IR35 Our client a leading Telecoms Company is looking for a Senior DevSecOps Engineer to lead the development of a scalable, secure DevSecOps framework. You'll play a key role in integrating security across development pipelines and ensuring seamless platform collaboration. What You'll Do: Lead Engineering Efforts: Guide cross-functional teams to deliver secure, scalable DevSecOps solutions. Framework Development: Implement a sustainable DevSecOps framework integrated with existing platforms. Automate Pipelines: Develop and automate security pipelines (SAST, DSAT) and enhance DevSecOps processes. What You'll Need: 10+ years in operations or development, with strong DevOps/DevSecOps expertise. Experience configuring toolsets for development pipelines (GitLab, Jenkins) and working with containers. Strong understanding of secure coding principles (OWASP, SANS). Hands-on experience with security scanners (Coverity, SonarQube, Veracode, Snyk). Proficiency with scripting languages (Python, Bash, PowerShell, etc.). Key Qualities: Hands-on approach, excellent communicator, and strong leadership skills. Ability to work independently in a large-scale environment. Detail-oriented, adaptable, and proactive in a fast-paced setting. If the role is of interest please apply with your updated CV.

We are seeking a highly experienced and hands-on Azure Solution Architect to design, develop, and deliver enterprise-level Azure cloud architectures. The ideal candidate will excel in infrastructure as code (IAC), modern DevSecOps practices, and enterprise-scale deployments while adhering to controls-compliant processes. The role requires expertise in designing secure, cost-effective, scalable, and operable solutions, with a strong focus on Terraform and Azure-native tools for automation, validation, and deployment. Location: Hybrid - 1-2 days per week in Wokingham Salary: Market Rate OR Day Rate: Inside IR35 - Market Rate Key Responsibilities Solution Design and Delivery Design and document Azure-specific solution architectures that align with business needs, including: Security and compliance best practices Cost-effectiveness, availability, and scalability Observability and operational excellence Develop and deliver cloud solution architectures ensuring control-compliant processes. Infrastructure as Code (IaC) and Automation Implement infrastructure as code (IaC) solutions, focusing on Terraform within the Azure ecosystem. Deploy and maintain infrastructure using pipelines and automation techniques . Lead infrastructure automation and validation activities. DevSecOps and GitOps Practices Design and implement GitOps workflows for infrastructure management. Ensure solutions align with modern DevSecOps practices. Integration and Support Integrate Azure infrastructure with peripheral services , such as: Authentication and authorization services (e.g., Azure Active Directory) Logging and monitoring tools Provide technical support to colleagues and service consumers. Documentation and Technical Authoring Author and maintain technical documentation, including: User guides Tutorials Design and architectural artifacts General Requirements All candidates must be knowledgeable and experienced in: Delivery within highly regulated environments with controls-compliant solutions. Modern DevSecOps ways of working for secure, automated software and infrastructure delivery. Software delivery best practices with a focus on observability, version control, and automation. Key Skills and Expertise Azure Solution Architecture (Design, Documentation, and Implementation). Hands-on experience with Terraform for IaC in Azure. Infrastructure deployment and management via Pipelines and automation tools. Strong understanding of: VM Infrastructure Container Infrastructure (AKS, Docker) Networking aspects (NSGs, VNets, Load Balancers, Firewalls, etc.) Authentication and Authorization (Azure AD, RBAC, IAM policies). GitOps design and implementation. Expertise in integrating services such as identification, logging, and monitoring solutions. Qualifications Azure Solution Architect certification Demonstrated hands-on experience in Terraform, pipelines, and automation. Proven experience in highly regulated, enterprise environments. Key Competencies Strong problem-solving and analytical skills. Excellent communication and collaboration abilities. Detail-oriented with a focus on operational excellence and compliance.

Job Title: DevOps Engineer Duration: 6 months with possible extension Rate: Competitive Location : Remote 3 days, 2 days in London or Ipswich office Our clients Digital unit is responsible for leading the digital transformation, delivering brilliant customer experiences and creating the innovative products and services their customers need. Our clients future will be defined by their ability to rapidly bring compelling, innovative ideas to market, partnering with their customers and suppliers to deliver innovative, adaptable solutions, delivered over best-in-class platforms and services Why this job matters The Senior Engineer will play a crucial role in orchestrating cross-functional engineering efforts to create powerful sustainable DevSecOps framework The role holder will ensure that development of the framework can be easily achieved through the many platforms including Mobius, Arcam and others. What you'll be doing - your accountabilities: Engineering Leadership Framework Implementation Platform Development Experience you'd be expected to have: Security and Technical Delivery: Proven ability to configure toolsets against a range of development pipelines such as Gitlab, Jekins etc to deliver Security as a Service and in doing so shift left DevSecOps capabilities in our DevOps processes. The ability to lead the design and delivery of the DevSecOps test and controls as defined by TT2 programme Works with other engineers to develop, integrate and automate DevSecOps pipelines including SAST and DSAT products. Appreciation of using APIs to deliver capabilities. Working knowledge of secure coding principles (OWASP and OWASP mobile, SANS ), Appreciation of using containers and building pipelines in a variety of tools. Knowledge, Skills, Qualifications & Experience Required 10+ years in operations or development, a good appreciation of DevOps or DevSecOps. Demonstrable knowledge and experience of configuring toolsets against development pipelines and containers Demonstrable knowledge of continuous testing. Practical experience with scripting languages (e.g., Python, Perl, Bash, PowerShell, JSON, etc) - aka can configure toolsets Practical experience in the use of vulnerability assessment tooling is highly desirable. Practical experience using standard Security Scanners like Coverity, SonarQube, Veracode, Snyk would be advantageous Key Attributes Must be willing to be hands on developing and delivering DevSecOps services Able to effectively communicate complex technical concepts such as security vulnerabilities to application developers and/or senior managers who may have little to no experience with security. Leadership experience in driving, mentoring and training junior members of a team. Must be able to work independently at a large scale, enterprise setting and collaborate with multiple team members. Detail-oriented and well-organized. Proactive and able to multitask effectively. Approachable with strong interpersonal skills. Adaptable and willing to learn in a rapidly changing environment. If this is the role for you please submit your CV at your earliest convenience.

Portfolio are proud to be exclusively representing our award-wining, multinational professional services client in their search for a Software Engineer. This role will be on site 5 days a week Who you are and what you will bring Open and collaborative mindset A keen eye for detail and an inquisitive mind Enjoy solving complex problems to deliver meaningful improvements for our customers Rigorous approach to analysing and delivering on business requirements Passion for learning new technologies and ways of working Contribution to innovation through investigation and evidence-based analysis Maintenance of learning culture in the team and helping new joiners Understanding of Agile principles and experience in iterative, incremental delivery Excellent verbal and written communication skills Initiative in solving production issues Acts of leadership in medium complexity domains Professional experience in programming in two or more languages, preferably using test-driven and Object-Oriented methodologies (we use Drupal, Laravel and Typescript amongst others) Ability to deliver semantically correct, performant, responsive frontend code Desirable Experience enhancing application performance, resilience and security Familiarity with serverless applications, headless or microservice architectures Knowledge of DevOps, DevSecOps and Quality Engineering practices INDFIR

Software Development Manager (Product) - EMEA Hybrid in London Up to 120k Are you a seasoned leader with a passion for driving innovation and technical excellence? Do you thrive on building and scaling high-performing engineering teams while delivering cutting-edge products that truly make an impact? If so, we'd love to hear from you! Our client, a forward-thinking organisation with global reach, is looking for an exceptional Development Manager to lead their UK-based engineering team. This hybrid role offers flexibility and an exciting opportunity to shape technical strategy and innovation in partnership with a dynamic leadership group. What You'll Be Doing As Head of Product Engineering, you'll be at the forefront of product development and delivery, ensuring the engineering team consistently delivers high-quality solutions aligned with strategic business goals. Key responsibilities include: Collaborating with the Engineering Leadership Team and Technology Leadership Group to drive and implement the Group Strategy. Building and mentoring a top-tier engineering team, fostering technical excellence and operational efficiency. Developing and delivering technical and product roadmaps, ensuring alignment with business priorities. Leading the transition of on-premise products to cloud-based solutions. Promoting best practices across software engineering, including CI/CD, DevSecOps, and cloud architecture. Driving innovation by staying ahead of emerging technologies and trends. Collaborating with product, UX/UI, and business teams to streamline development, testing, and deployment processes. Ensuring security, compliance, and performance optimisation across all engineering outputs. What We're Looking For This role is perfect for a strong leader who combines technical expertise with a passion for people and innovation. You'll need: A strong background in the product development lifecycle and agile methodologies (Scrum, Kanban, etc.). Expertise in modern development tools and patterns, including Git, CI/CD pipelines, AWS, and microservices architecture. Experience transitioning products from on-premise to cloud environments. A deep understanding of security, scalability, and performance optimisation. Proven ability to lead, motivate, and develop large, diverse teams. Excellent communication skills with the ability to collaborate across all levels of the organisation. Strong problem-solving and decision-making skills, particularly under pressure. This role won't be about for long and our client are interviewing ASAP. If you are interested, send your CV in for immediate consideration. Modis International Ltd acts as an employment agency for permanent recruitment and an employment business for the supply of temporary workers in the UK. Modis Europe Ltd provide a variety of international solutions that connect clients to the best talent in the world. For all positions based in Switzerland, Modis Europe Ltd works with its licensed Swiss partner Accurity GmbH to ensure that candidate applications are handled in accordance with Swiss law. Both Modis International Ltd and Modis Europe Ltd are Equal Opportunities Employers. By applying for this role your details will be submitted to Modis International Ltd and/ or Modis Europe Ltd. Our Candidate Privacy Information Statement which explains how we will use your information is available on the Modis website.

Our client is recruiting for a Senior Cyber Security Manager tasked with overseeing IT security for an energy company who delivers energy and metering solutions to UK business customers. This critical role ensures that cyber security risks are effectively managed in alignment with their global security policies, maintaining a robust defence against evolving threats in the digital landscape. The role operates within the Digital Technology & Change team, which is transitioning to a Product and DevOps model of working, making prior experience in such environments particularly valuable. Given that many customers utilise smart metering solutions, familiarity with the energy sector, including the Smart Energy Code, is advantageous. The IT ecosystem under this role's purview comprises over 60 applications and associated infrastructure, primarily managed through software-as-a-service models or hosted by third-party providers. It is initially a 6-month contract with potential to be extended. The role is Hybrid, with one day every two weeks being based in their Solihull office. It is a full-time role, 37 hours per week. Accountabilities: Proactively manage application and infrastructure vulnerabilities, including conducting weekly reviews of vulnerability reports in collaboration with application owners, the UK security team, and IT suppliers. Ensure the onboarding of new IT suppliers aligns with their security requirements and maintain compliance with IT security standards during any contractual changes, particularly in the context of project delivery. Participate in IT supplier service reviews, providing expert guidance on security risks, controls, and necessary actions. Engage in audits as the owner of security-related actions and contribute to testing internal controls, with responsibilities extending to compliance with the Smart Energy Code. Advise on security requirements to support the transition toward a Product and DevSecOps operational model. Address security threats and issues within their business, providing updates and taking corrective actions in consultation with the Head of Digital Technology & Change. Contribute to fortnightly UK IT security risk reporting, ensuring that all IT security risks are current and mitigated effectively. Maintain clear identification of security-related control and risk ownership, ensuring regular updates and reviews, including risks associated with IT suppliers. Act as a cybersecurity advocate, delivering guidance and raising security awareness across the business. Occasionally deliver presentations on security-related topics to senior stakeholders, including up to the UK Board level. Oversee the daily activities of a Cyber Security Analyst, ensuring effective management and development. Define and manage security-related Key Performance Indicators (KPIs) and Key Risk Indicators (KRIs) with measurable objectives. The role requires close collaboration with the UK IT Security teams, IT suppliers, and internal IT and business teams. Knowledge and Skills: Experience in working in a Senior Cyber Security role including operational security management, governance and controls Credibility and presence at a senior level Experience of working with outsourced IT suppliers and software as a service model. Complex problem solving and strong analytical skills Demonstrated subject matter expertise in at least two of the following: ISO27001, ISO22301, Data Protection Act / GDPR, Smart Energy Code Experience in the delivery of security policies, controls and procedures. Degree level Information Security or equivalent experience People management experience The role holder will ideally have experience of influencing and consulting at senior level Be comfortable working on own initiative Excellent auditing skills Excellent communication skills, both written and verbal Highly organised and disciplined Ideally be experienced in Senior CCP / Ex CLAS Qualifications in ISO27001 Lead Auditor / Implementer or similar Dev Sec Ops experience Experience with IT contracts and legal frameworks Energy industry knowledge including Smart Energy Code Please note: Should your application be successful, and you are offered the role, a number of pre-employment checks need to be carried out before your appointment can be confirmed. Any assignment offer with our client will be subject to a satisfactory checking report from the Disclosure Barring Service. This vacancy is being advertised by Rullion Ltd acting as an employment business. Since 1978, Rullion has been securing exceptional candidates for a range of clients; from large well-known brands, to SMEs and start-ups. As a family-owned business, Rullion's approach is credible and honest, focused on building long-lasting relationships with both clients and candidates. We celebrate and support diversity and are committed to ensuring equal opportunities for both employees and applicants. Rullion celebrates and supports diversity and is committed to ensuring equal opportunities for both employees and applicants.

Senior Backend Software Engineer Job Title: Senior Backend Software Engineer Location : Hybrid - London 1 Day a Week Node - TypeScript - Nest.JS - SQL - NoSQl - Azure - IaC - Azure Bicep - Terraform My client are seeking a talented Senior Backend Engineer to join their growing team. If you are a seasoned professional with a strong background in backend development, this opportunity might be perfect for you. About the Role: As a Senior Backend Engineer, you will: Design, develop, and maintain software solutions that enhance the customer experience and support renewable energy products. Lead and participate in agile ceremonies and contribute to discussions around tools, architecture, and processes. Mentor junior engineers and provide technical guidance to the team. Practice Test-Driven Development (TDD), write clean code, and embrace the values and practices of DevSecOps to ensure high-quality, maintainable software. Work with a range of modern technologies, including Node.js, TypeScript, Nest.js, and various Azure technologies/services. Design, optimize, and maintain robust databases (both relational SQL and NoSQL) and ensure effective use of Infrastructure as Code tools like Azure Bicep and Terraform. What We Offer: A chance to work on innovative projects that make a real difference An inclusive and collaborative work environment. Opportunities for professional growth and development. The chance to work with cutting-edge technology and methodologies. Who We Are Looking For: We are interested in candidates who are: Passionate about renewable energy and sustainability. Experienced in backend development with a focus on delivering high-quality, maintainable software. Proficient in Node.js, TypeScript, and Nest.js. Familiar with agile methodologies and DevSecOps practices. Skilled in database design and optimization (both SQL and NoSQL). Experienced with Azure services and Infrastructure as Code tools like Azure Bicep and Terraform. Capable of mentoring junior engineers and providing technical leadership. Senior Backend Software Engineer Job Title: Senior Backend Software Engineer Location : Hybrid - London 1 Day a Week Node - TypeScript - Nest.JS - SQL - NoSQl - Azure - IaC - Azure Bicep - Terraform

We are seeking an AWS Security Architect for our rapidly expanding FinTech client based in London on a permanent basis paying up to 120,000 depending on experience + great benefits. This role allows hybrid working with an expectation to attend the office 2-3 days per week. This is a fantastic opportunity for someone who has strong Architecture, Leaderships and hands on skills where you will be given the freedom to build and shape an AWS DevSecOps practice within a growing Fintech company on a global scale. The successful candidate will possess - AWS AWS Cloud Security EC2, S3, VPC, IAM AWS Security Hub GuardDuty Design Security Architecture Security Policies Security best practice Security Strategy Security Operations Vulnerability Management Threat Management / Threat Modelling Incident management Security Assessments Security Audits Security Compliance - ISO 27001, GDPR, HIPAA Terraform / Jenkins Python / Bash Automation CI/CD AWS Certified Security AWS Solutions Architect Professional AWS Advanced Networking Speciality Encryption Identity and Access Management Interested? Please apply below AWS Security Architect, Security Architect, AWS Security Lead, Security Lead, Security Consultant, DevSecOps, DevSecOps Manager, DevSecOps Consultant, DevSecOps Architect, Security Architect, Security Lead, MSP, FinTech, Consultancy,

Head of Product Security We are seeking an experienced Head of Product Security to lead and manage our product security programme and ensure the integrity and security of all software applications. This role involves developing and implementing security strategies, policies, and procedures to safeguard our products against potential threats while working closely with cross-functional teams to integrate security best practices into the software development lifecycle. Key Responsibilities: Lead and mentor the product security team, developing and executing security strategies in alignment with company goals. Collaborate with development teams to integrate security best practices into the software development lifecycle (SDLC) and ensure secure products. Oversee vulnerability management and remediation efforts, including leading responses to pen test findings and security assessments. Prepare and present regular security reports to senior management, ensuring compliance with security standards and regulations. Manage security controls, including continuous penetration testing and SAST tooling, to address emerging threats. What We re Looking For: 5+ years of experience in application/product security. Expertise with security tools like Veracode and familiarity with DevSecOps processes. Strong leadership, interpersonal, and communication skills, with the ability to collaborate effectively across teams. In-depth knowledge of security best practices (e.g., OWASP Top 10) and compliance standards like PCI DSS. Proactive, able to drive security excellence and foster collaboration across departments. Benefits: Competitive salary and bonus. Comprehensive benefits package, including generous leave, medical coverage, and retirement contributions. Work-life balance with flexible time off and paid parental leave. Wellness programmes and additional rewards, such as gym memberships and tech schemes. Please apply now to join our client's team and make an impact as their new Head of Product Security Head of Product Security

About the job Description This is an opportunity to participate in the fast-growing and increasingly important cybersecurity market, using your strong problem-solving and communication skills to delight customers while driving the growth of our client's business. The Senior Technical Support Engineer will work with our client's technical support team. You will be trained in their marketing leading Web-Application Security product and help customers to solve issues, deploy and use their products in various environments (cloud, on-premise, CI/CD pipelines). With a growing customer base, you'll quickly become an expert on their products and their customers and provide insights that create best practices and enhance their product roadmaps. What's in it for you? Our clients believe in paying people what they are worth and not what they can get away with. Their excellent salaries are above the normal market level, and this is always determined based on your individual skills and contribution. Their people also receive: Re-location packages to Knutsford, UK Share options. 8% employer pension contribution. Life assurance: 4x salary. Income protection: full pay for the first 6 months of incapacity followed by 75% of salary plus pension contribution. Private medical insurance (Bupa). 25 days holiday plus public holidays. Car Scheme/Bike Scheme. Continuous personal development. Gym access Free lunch by their own lovely chefs, social events + much more Your Responsibilities Our client's technical support team is the key liaison point between our software developers, customer success, product management, researchers, and customers. Getting hands-on with customers to help them deploy our products in a variety of environments (cloud, on-premise, CI/CD pipelines) Making the most of modern enterprise video communications to engage with customers to ensure they make the best use of our software. Collaborating with software developers to understand product features and to pass on insights into how they are used by our customers in the real world. Investigating bug reports by attempting to reproduce, diagnose, and, where relevant, fix issues that people run into. Liaise with technical product managers to help prioritize software development work, championing the customer's perspective. Key Skills Essential: You're a passionate trouble-shooter, who loves to solve technical problems, whilst providing exceptional service to customers. You have experience working across different operating systems, such as Windows and Linux/Unix. You have Experienced working with a cloud platform such as Azure, AWS or GCP. Or, you have experience working with virtualization tools such as VMware or Hyper-V. You have a good understanding of Networking protocols, along with exposure to working with routers, switches, and firewalls. A desire to learn and continuously develop your skill set Desirable: If you have any experience in the cyber-security sector, that would be beneficial, but not essential! We're more interested in finding some with an interest in this sector and want to learn. Experience working within a DevOps/DevSecOps environment Experience working with Kubernetes Experience with a programming language A background in Computer science would be beneficial, but not essential. Any experience with project deployments or technical pre-sales would also be beneficial Ready to Apply? If you're reading through this advert and are thinking, 'Wow' this sounds like me!' then why are you still reading?!