280 jobs found

Role Summary As a Senior Threat Analyst - Tier I on our Managed Detection and Response (MDR) team, you will provide best in class monitoring, detection, and response services to proactively defend customer environments before attacks prevail. You will work alongside and contribute to a team of cyber threat hunters, incident response analysts, engineers, and ethical hackers by using enterprise, log analysis and endpoint collection systems to facilitate investigations, identification, and neutralization of cyber threats. What You Will Do Monitor, investigate, and respond to alerts generated by the Sophos security stack (including EDR/XDR capabilities) Lead and mentor Tier I Analysts through escalated cases, ensuring thorough and accurate investigation practices. Perform end to end analysis on suspicious activity to assess scope, impact, and risk Identify and respond to cyber threats across customer environments using approved playbooks and tooling Accurately document findings, investigative steps, and outcomes in the MDR case management platform Conduct threat hunting to identify potential threats throughout the MDR customer base Investigate phishing emails, suspicious binaries, and behavioral anomalies Support detection tuning by identifying recurring false positives and suggesting improvements Stay informed on threat actor behaviors, MITRE ATT&CK techniques, and Sophos threat research updates Proactively research emerging IOCs, active exploits, and vulnerabilities to stay ahead of evolving threats Contribute to internal knowledge bases, documentation, and continuous improvement initiatives Participate in shift rotations and ensure timely, detailed handovers between global teams Provide detection and response support for active security incidents Manage case workflows: create cases, track progress, and follow up with clients until resolution Engage with clients via chat, phone, and tickets as part of case handling Assist with developing and refining Security Operations processes, playbooks, and tooling feedback What You Will Bring Essential 3+ years of hands on experience in a Security Operations Center (SOC), Managed Detection and Response (MDR) environment, or cybersecurity focused IT role Proficient in the use of endpoint and network security tools (e.g., EDR, IDS/IPS, malware detection platforms) with the ability to validate and triage complex alerts Working knowledge of Windows operating systems (both workstation and server), with additional experience in Linux (Ubuntu, Debian, RedHat) or macOS environments Ability to interpret and analyze Windows event logs and other telemetry data Understanding of core network concepts including TCP/IP, protocols, routing, and traffic analysis Demonstrated experience contributing to real time incident response efforts and threat investigations Exposure to threat hunting methodologies and an understanding of attacker behavior and patterns Experience handling active threats, including containment, mitigation, and recovery efforts during security incidents Familiar with techniques such as persistence, privilege escalation, lateral movement, and defense evasion, and able to identify these in real world environments Familiarity with common incident response workflows and security operations processes Strong analytical thinking and troubleshooting skills, with attention to detail in investigations and case documentation Excellent communication skills, with the ability to clearly explain findings to both technical and non technical audiences Customer first mindset with professionalism and a focus on service excellence Must thrive within a team environment as well as on an individual basis Natural curiosity and willingness to learn in a fast paced, ever changing threat landscape A passion for cybersecurity, continuous improvement, and staying current on threat trends Bachelor's degree in information technology, Computer Science, Cybersecurity or related field, or equivalent practical experience Ability to communicate in English Willingness to participate in shift work including nights, weekends and holidays (our MDR service is 24x7x365) Desirable Familiarity with the MITRE ATT&CK framework and its application in detection and response Experience working with SIEM platforms and managing enterprise security telemetry Ability to write and interpret SQL queries for data analysis and investigation Experience with OSQuery and scripting skills, particularly in PowerShell Relevant and practical cybersecurity certifications (e.g., GSEC, GCIA, GCIH, PEN-200, Security Blue Team L1, TCM Academy SOC L1, or similar) We're proud of the diverse and inclusive environment we have at Sophos, and we're committed to ensuring equality of opportunity. We believe that diversity, combined with excellence, builds a better Sophos, so we encourage applicants who can contribute to the diversity of our team. All applicants will be treated in a fair and equal manner and in accordance with the law regardless of gender, sex, gender reassignment, marital status, race, religion or belief, color, age, military veteran status, disability, pregnancy, maternity or sexual orientation. We want to give you every opportunity to show us your best self, so if there are any adjustments we could make to the recruitment and selection process to support you, please let us know.

Transport Practice Managing Consultant Department: Cyber Services and Capabilities Employment Type: Full Time Location: GBR London Reporting To: Gary Cannon Description Role: Cyber Security Aviation Lead (Global Transport) Locations: Cheltenham, Manchester or London - Hybrid/Global Remit We are seeking a highly skilled Cyber Security Aviation Lead to join our Global Transport Practice. This role will serve as the subject matter expert (SME) for aviation cyber security, covering operational technology (OT), safety critical aviation systems, and regulatory standards across the global aviation ecosystem. You will play a pivotal role in shaping NCC Group's aviation offerings, supporting delivery, mentoring colleagues, engaging clients, and driving growth in the aviation market. While aviation is the primary focus, the role also offers opportunities to work across rail, maritime, and automotive with full support from the wider transport team. This is a client facing, collaborative, and technically hands on role suited to someone with solid aviation cyber experience who can also support business development activities. Key Responsibilities Aviation Cyber Security Leadership Act as the global aviation cyber security SME, providing expert knowledge of: Part IS and other aviation specific security frameworks ISA/IEC 62443 requirements and application to aviation OT Penetration testing techniques relevant to OT and aviation systems Avionics, airport infrastructure, ground systems, airline operational technologies Lead and oversee cyber engagements within the aviation ecosystem, including: Airports, ANSPs, MNO, airlines, OEMs, ground handling, avionics suppliers Safety critical OT networks and mission critical control systems Technical Delivery Perform and/or lead: OT penetration testing Threat modelling and risk assessments Security architecture review for aviation technologies Compliance assessments and gap analyses (Part IS, 62443, NIS2 where applicable) Oversee technical quality, ensuring best in class delivery to clients. Business Development & Practice Growth Support the creation and refinement of NCC Group's aviation services and propositions. Work with business development teams to: Identify opportunities Create proposals Participate in client meetings and presentations Represent NCC Group at aviation cyber conferences, industry forums, and working groups. Collaboration & Cross-Transport Support Operate as part of the wider Global Transport Practice, contributing to multi modal cyber projects. When required (and with team support), step into cyber roles in: Rail Maritime Automotive Work closely with colleagues across geographies to develop integrated cyber security solutions. Knowledge Sharing & Mentoring Coach and mentor internal consultants on aviation cyber security concepts, systems, and regulations. Develop internal guidance, training materials, and workbooks/playbooks. Promote a collaborative, high performance culture. Client Engagement Act as a trusted advisor to stakeholders at all levels. Ensure exceptional client experience through clear communication, professionalism, and delivery excellence. Build long term relationships with global aviation customers. Skills, Knowledge and Expertise Essential Experience & Skills Proven experience in the aviation ecosystem, such as working with: Airports Airlines OEMs Avionics manufacturers ANSPs Strong understanding of aviation operational technologies and safety critical systems. Knowledge of: Part IS ISA/IEC 62443 OT networks, architectures, and protocols Security risk assessment in safety critical environments Hands on cyber security experience, such as: Penetration testing (OT preferred) Threat modelling Incident response Architecture review Comfortable providing client facing advisory services. Experience working in or with regulated environments. Ability to simplify complex cyber concepts for diverse audiences. Desirable Skills Certifications (one or more): GICSP, CISSP, CISM, CRT/OSCP, CISA, CCSFP, 62443 certificates, CREST Background in engineering, avionics, or airport operations. Experience with NIS/NIS2, EASA, FAA, ICAO cyber requirements. Experience contributing to sales or pre sales cycles. Benefits What do we offer in return? We have a high performance culture which is balanced evenly with world class well being initiatives and benefits: Flexible Working: Balance your work and personal life with our flexible working options. Generous Holiday Allowance: Enjoy 25 days of holiday, plus bank holidays, with the option to buy up to 5 additional days of annual leave. Medicash & Critical Illness Scheme Financial & Investment Benefits: Enjoy peace of mind with our Pension, Life Assurance, and Share Save Scheme. Community & Volunteering Programmes: Make a difference in your community with our volunteering opportunities. Green Car Scheme: Drive green and save money with our eco friendly car scheme. Cycle Scheme: Stay fit and healthy with our cycle to work scheme. Special Time Off: Take time off for those big moments in life, like getting married/entering into a civil partnership, becoming a grandparent, and welcoming home a new pet. Family Planning: Benefit from our generous maternity and paternity leave, as well as time off and support for those undergoing fertility treatments.

OT Cyber Security ManagerApplylocations: UK - Watford: POL - Wroclawtime type: Full timeposted on: Posted Todayjob requisition id: R90659 Life. Unlimited. At Smith+Nephew we design and manufacture technology that takes the limits off living.Are you passionate about securing the technologies that power modern manufacturing? This is a rare opportunity to lead and shape global OT cybersecurity strategy in a highly regulated, purpose driven medical technology environment. You will play a critical role in protecting operations that directly impact patient outcomes while enabling innovation and digital transformation across our global manufacturing network. What will you be doing?You will take ownership of our global OT cybersecurity programme, setting the direction and ensuring it is embedded into how our manufacturing technologies are designed, operated and supported. Working at the intersection of cybersecurity, IT, engineering and manufacturing, you will guide a diverse set of stakeholders to manage risk while maintaining operational continuity.Day to day, you will define governance, lead risk management activities and provide technical oversight across OT environments, ensuring alignment with leading standards such as IEC 62443 and NIST frameworks. You will collaborate closely with OT architecture and engineering teams, influencing design decisions and supporting secure modernisation initiatives across manufacturing sites.You will also act as the cybersecurity lead for major OT projects, ensuring security by design is applied from the outset. In parallel, you will coordinate incident response activities, ensuring rapid and effective handling of OT security events. Through strong partnerships across regions and functions, you will embed cybersecurity into everyday operations, creating a consistent and sustainable global approach. What will you need to be successful?Success in this role comes from your ability to combine strategic leadership with deep technical understanding, while influencing across a complex global environment.You will bring: Strong experience in OT or industrial cybersecurity within manufacturing or critical infrastructure environments, with a clear understanding of ICS technologies and risks Proven ability to lead programmes and influence across engineering, IT and business stakeholders without direct control of implementation teams Solid knowledge of recognised frameworks such as IEC 62443, NIST SP , NIST CSF and ISO standards Experience leading teams and developing capability while fostering collaboration, accountability and continuous improvementYou will be someone who can communicate clearly at all levels, build trust quickly and guide decision making in situations where operational risk, compliance and innovation must all be carefully balanced. You. Unlimited. We believe in creating the greatest good for society. Our Strongest investments are in our people and patients we serve. Inclusion & Belonging: Committed to Welcoming, Celebrating and Thriving on Inclusion and Belonging, Learn more about our Employee Inclusion Groups on our website Your Future: Generous annual bonus, life insurance Work/Life Balance: Flexible Vacation and Time Off, Paid Holidays and Paid Volunteering Hours, so we can give back to our communities! Your Wellbeing: Private Health and Dental plans, multisport card/my benefit platform and much more. Flexibility: Hybrid Working Model (For most professional roles). Training: Hands-On, Team-Customised, Mentorship, subsidies for language classes, certifications and postgraduate studies connected by joining our Talent Community.We're more than just a company - we're a community! Follow us on LinkedIn to see how we support and empower our employees and patients every day. Check us out on Glassdoor for a glimpse behind the scenes and a sneak peek into You. Unlimited. , life, culture, and benefits at S+N.Explore our website and learn more about our mission, our team, and the opportunities we offer. About UsSmith+Nephew is a global medical technology company. We design and manufacture technology that takes the limits off living. We support healthcare professionals to return their patients to health and mobility, helping them to perform at their fullest potential.From our first employee and founder, T.J. Smith, to our team today, it's our people who make Smith+Nephew a unique place. Yes, we love to innovate and develop exciting technologies, and we offer competitive salaries and progressive benefits. But it's our culture - of Care, Collaboration and Courage - that really sets us apart. Through a spirit of ownership and can-do attitude we work together to win. We're a company of people who care about each other, about our customers and their patients, and about our communities. Together, we fulfill our shared purpose of Life Unlimited.

United Kingdom - London; United Kingdom - Southampton What's the role all about? The ideal candidate will be responsible for designing, implementing, and maintaining security measures to protect our organization's computer systems, networks, and SaaS products. This role requires a hands on approach to identifying vulnerabilities, implementing solutions, and staying abreast of the latest security trends and technologies. The Senior Information Security Engineer will collaborate closely with cross functional teams to ensure the confidentiality, integrity, and availability of our systems and data. How will you make an impact? Security Tooling: Deploy, maintain, integrate, and perform initial configuration of security tools. Vulnerability Management: Coordinate and conduct regular security assessments, penetration testing, and vulnerability scans to identify and address security weaknesses proactively. Incident Response: Lead incident response efforts to promptly detect, analyze, and mitigate security incidents and breaches. Develop and maintain incident response plans and procedures. Security Operations: Monitor security logs and alerts, investigate suspicious activities, and respond to security events in real time. Implement and maintain security tools and technologies to enhance our security posture. Identity and Access Management: Manage user access controls, authentication mechanisms, and identity management systems to ensure appropriate levels of access and privilege. Have you got what it takes? At least 5 years of experience in information security, with a focus on hands on security engineering and operations. In-depth knowledge of networking protocols, operating systems, and cloud technologies. Strong understanding of security principles, practices, and frameworks (PCI, NIST, ISO 27001). Experience with security tools such as SIEM, IDS/IPS, endpoint protection, and penetration testing tools. Experience with public cloud security, specifically AWS, Azure, and Google Cloud Platform (GCP). You will have an advantage if you also have: Relevant certifications such as CISSP, CISM, CEH, or cloud specific certifications (AWS Certified Security - Specialty, Microsoft Certified: Azure Security Engineer Associate, Google Professional Cloud Security Engineer) are highly desirable. What's in it for you? Join an ever growing, market disrupting, global company where teams work in a fast paced, collaborative, and creative environment. As the market leader, every day at NICE is a chance to learn and grow, and there are endless internal career opportunities across multiple roles, disciplines, domains, and locations. At NICE, we work according to the NICE FLEX hybrid model, which enables maximum flexibility: 2 days working from the office and 3 days of remote work each week. Naturally, office days focus on face to face meetings, where teamwork and collaborative thinking generate innovation, new ideas, and a vibrant, interactive atmosphere. Requisition ID: 10996 Reporting into: Damon Hefner, Manager Information Security Role Type: Individual Contributor NICE is proud to be an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, national origin, age, sex, marital status, ancestry, neurotype, physical or mental disability, veteran status, gender identity, sexual orientation or any other category protected by law.

Chief Information Security Officer (CISO), Belfast Belfast, Northern Ireland, United Kingdom Join TRG Screen: Building World-Class Teams. One Expert at a Time. Are you ready to be part of a dynamic team at the forefront of subscription spend management innovation? At TRG Screen, we're not just redefining how organizations manage their subscription expenses - we're shaping the future of the industry. With cutting edge solutions and a commitment to excellence, we empower businesses around the globe to optimize their subscription investments and drive sustainable growth. Join us in our mission to revolutionize subscription management and make a meaningful impact on the way businesses access and utilize critical information. At TRG Screen, your talent and ambition will find a home, where opportunities for growth and advancement abound. About TRG Screen TRG Screen is the leading provider of market data and subscription management technology and automation solutions, tailored to the unique needs of financial institutions and legal firms. Our integrated suite of solutions includes market data and subscription spend management, usage management, compliance reporting, and comprehensive managed services, which hundreds of clients worldwide use to remove cumbersome and inaccurate manual processes and gain control over market data and subscription costs at scale. For more than 25 years, TRG Screen has enabled businesses who rely on market data to monitor and strategically manage spending and usage of data and information services, including market data, research, software licenses, consulting and other necessary corporate expenses. TRG Screen solutions give decisionmakers full transparency into subscription spend and usage, enabling them to proactively manage subscription costs at scale, conduct more informed vendor negotiations, improve governance, and avoid unnecessary spending on these mission critical business services. TRG Screen is headquartered in New York City, with offices in Europe and Asia, as well as a 24x7 client support center in Bangalore, India. TRG Screen is a portfolio company of Vista Equity Partners, one of the world's largest and most respected private equity firms. The Role We are seeking a strategic and hands on Chief Information Security Officer (CISO) to lead and evolve the security function at TRG Screen, a global provider of market data and technology cost management solutions serving leading financial institutions including banks, asset managers, and hedge funds. The role spans both internal security - corporate IT policies, controls, and a remote workforce across the US, EU, UK, and India - and external security, protecting the products and solutions we deliver to clients. Reporting to the CTO and working closely with the Head of IT/Operations, the CISO will operate across a complex infrastructure encompassing AWS, Azure, and on premises data centres. This is a high impact role with genuine ownership - you will set the security agenda for a growing global business, with the mandate and senior leadership backing to build the function on your own terms. The timing is significant: we are actively embedding AI into our products and operations, making this an opportunity to define how we approach AI security from the ground up, in a sector where data protection and client trust are paramount. Key Responsibilities Security Strategy & Governance Define and execute the company's information security strategy, roadmap, policies, and standards Define and enforce internal IT security policies, covering endpoint security, access management, and controls suited to a remote, globally distributed workforce Maintain and build upon our existing certifications (ISO 27001, SOC 2 Type II), and drive expansion of SOC 2 coverage across our full product portfolio Ensure compliance with GDPR and applicable data protection regulations across our EU and global client base, and support the organisation's future pathway toward ISO 42001 for AI governance Application & Product Security Partner with Engineering to embed security into the software development lifecycle (SDLC) Provide guidance on secure architecture and development planning Oversee vulnerability management and remediation efforts Own the external security posture of our client facing products and solutions, ensuring security is embedded from design through to deployment AI Security Define and implement a framework for securing AI powered features and capabilities embedded within our products, including the security of AI agents, models, and associated infrastructure Govern the safe and compliant use of AI tools internally, including copilots and AI agents used by our workforce Client & Operational Security Oversee security aspects of client support operations, ensuring strong controls and responsiveness Act as a key escalation point for security related client matters Support customer audits, security questionnaires, and due diligence processes Identify, assess, and manage security risks across the business Lead incident response planning and execution Continuously improve detection and response capabilities Act as a trusted advisor to the CTO and broader executive leadership on security risks, strategy, and emerging threats Work in close partnership with the Head of IT/Operations, and collaborate across Product, Engineering, and Client teams globally to align security priorities with business objectives Build and scale security awareness across the organisation, including a remote and globally distributed workforce Grow and shape the security function over time, with the opportunity to build out direct reports as the function matures What We're Looking For 7-12 years of experience in information security, with demonstrated senior leadership (e.g., CISO, Director, or Head of Security) within a SaaS or technology environment Strong understanding of application security and secure software development Strong working knowledge of compliance frameworks including ISO 27001 and SOC 2, with hands on experience managing or achieving these certifications; solid understanding of GDPR compliance across multiple jurisdictions Strong communication skills with the ability to engage both technical and non technical stakeholders Experience securing complex, multi cloud environments (AWS and Azure) alongside on premises data centre infrastructure Awareness of AI security practices and risks, including securing AI powered product features and governing internal AI tool usage Based in or with easy access to the US East Coast or UK/Ireland, comfortable leading remote teams across the US, EU, UK, and India, and willing to travel periodically to our offices in New York, London, or Belfast Join TRG Screen and unlock your potential in an environment where innovation thrives, opportunities abound, and your contributions make a difference. We are an equal opportunities employer. We recognise and value the power of diversity in our workplace and are committed to being an employer of choice for everyone. We welcome and encourage applicants from all backgrounds. All applications for employment are considered strictly on the basis of merit. At TRG Screen, we understand that diverse and inclusive teams are not just beneficial, they are essential to our success. We recognize that embracing diverse perspectives, backgrounds, and experiences fosters innovation, enhances problem solving capabilities, and drives better business outcomes. By cultivating a culture of inclusion where every voice is heard and valued, we empower our world class teams to thrive, excel, and drive positive change. We are proud of our diverse workforce and are dedicated to creating a safe and welcoming environment for all employees. People from various ethnicities, ages, genders, and abilities are encouraged to apply.