25 jobs found

About Aspire: At Aspire Technology Solutions, we look for dynamic individuals who want to work for one of the fastest growing IT and Cyber Security providers in the UK. It is an exciting time to join us on our journey as we grow and expand! Our mission: To deliver technology like no other! We look for dynamic individuals who embrace technology, think differently, collaborate as team players, and are driven by continuous improvement with a focus on great results for our customers. About the role We are looking for an Associate Cyber Security Analyst to join our growing 24x7 SOC team. You will be responsible for supporting key day-to-day operations of our Security Operations Centre, working alongside our L1, L2 and L3 analysts. This role is varied to support your continuous development and will include security alert investigation, vulnerability reporting, carrying out support tasks and engaging with third parties. You will be customer-focused and play a key role in ensuring the security and integrity of their systems and data. Efficiency is also important to succeed, as you will be managing a diverse workload. Customer service is key to success in the role - living our values are woven through everything we do to guarantee that our service delivery is second to none. What you will be doing Monitor security queues, triage alerts, and determine incident severity. Stay updated on threat intelligence and integrate it into operations. Engage in ongoing learning and professional development. Support vulnerability scans and report generation. Collaborate with team members and participate in meetings. Answer customer calls in a professional and friendly manner, acting as a first point of contact for Real Protect customers and IR engagements. Conduct thorough investigations and elevate complex cases. Qualifications Experience with security tooling, whether that be in a commercial setting or home lab. Prior experience in an IT-related background. Awareness of security technologies. A willingness to learn and good attention to detail. Experience in conducting security investigations and triaging alerts. Understanding of threat intelligence and its integration into operations. Strong communication skills for handling customer calls and emails. Collaborative mindset and ability to work effectively in a team. It is advantageous but not essential to have the following certificates: TryHackMe Level 1. Values We understand that you might not have all of the qualifications and experiences that we think are key to succeeding in this role therefore we provide continuous learning and development at Aspire which is at the heart of everything we do. As long as you are passionate, eager to learn and driven to be the best at what you do and live our values this role may be a fit for you. At the heart of everything we do are our core values which guide how we work and grow together: Ambitious: We are driven by data to achieve the best results. We push ourselves to be our best and make an impact while delivering the best experience for customers and colleagues. Sincere: We do the right thing for our customers and colleagues. We are honest, provide independent advice and support each other as one team. Passionate: We love what we do. We take pride in our work and consistently deliver high-quality results. Innovative: We are bold and take action to develop creative solutions. We learn from mistakes and strive for continual improvement. Reliable: We collaborate to achieve the best results and ensure people can depend on us. Expert: We are technical experts who continue to learn and grow. We share knowledge and ensure customers achieve their ambitions through the right technology. Salary £26,500 - £30,500 per annum (depending on experience) Benefits Here at Aspire, we offer a great benefits package and a competitive salary. Being a people centric organisation is what sets us apart - we strive to look after our people in the best way we can! Travel benefits including free parking, subsidized travel passes and much more! Health Cash Plan Cycle to Work Scheme Network Benefits Employee Assistance Program Enhanced Annual Leave Entitlement (increasing with length of service) Enhanced Maternity, Paternity and Parental Schemes Enhanced Pension Scheme Tech Purchase Scheme Electric Vehicle Salary Sacrifice Scheme Employee referral scheme New business referral scheme Discounted Gym Membership Life Assurance and Critical Illness cover Location and Working Arrangements You will be based at Aspire's Gateshead head office with travel as required. Hours of work 37.5 hours per week, Monday - Friday. Equality, Inclusion and Diversity at Aspire Aspire is an equal opportunity employer committed to creating a culture that respects and values each other's differences, that promotes dignity, equality and diversity that encourages individuals to develop their true potential. Interview Process We generally conduct interviews in three stages, lasting approximately 2-3 weeks, depending on everyone's calendars. Shortlisted candidates will be invited to a pre screening call via Teams to discuss your experience and what you're looking for in your next role. Successful candidates will be invited to an interview with the Hiring Manager. If successful in an interview, candidates will be invited to an informal interview with key stakeholders at Aspire to meet the wider team(s).

DigitalXRaid is seeking a Level 1 SOC Analyst to join the Security Operations Centre in the United Kingdom. The role is shift-based (4 on, 4 off) and operates a hybrid working model. You will analyse and triage security incidents, classify alerts, and support incident investigations with L2/L3 analysts. Strong communication and a keen interest in cybersecurity are essential. This entry-level role is ideal for candidates with 0-2 years in SOC and a drive to develop expertise in security

We are looking for a Senior Network & Security Analyst to join our team. With a strong network engineering background, you will also need experience within cyber security, with a strong knowledge of Palo Alto and project based work. An opportunity to fully own your daily duties and tasks, push yourself daily and really be a SME in your field. This role offers a competitive salary and benefits package plus additional payments for operational on-call and overtime opportunities. The role in a nutshell To provide effective and timely operational support, development and management of the IT network and security infrastructure to meet business requirements and objectives. To complete projects on time, within scope and to budget. About the Department The Business Technology Solutions (BTS) department are responsible for delivering end-to-end business technology and change through their four key functions of Governance, Projects & Change, Delivery and Technical Operations. They look after both TFSUK and KINTO UK. The mission of BTS is to Give (giving the business the technology, applications and services it needs), Guide (guiding the business through changes using expertise and experience) and Guard (always protect the business). What you'll be doing Work closely with other members of the team to ensure the technology, security policies and procedures are in place to safeguard the business. Manage day to day operational cyber security tasks to maintain optimum business security. Develop, maintain, and support the organisations IT security systems including managing next generation firewalls, IPS, security SIEM tools, Endpoint and security devices or services, responding to security incidents and analysing security breaches. Develop, maintain, and support the organisations network including managing all Layer2/3 devices, LAN, WAN, Internet, B2B connections, RAS, NLB, Wi Fi ensuring they support the business goals and infrastructure. Responsible for identifying external and internal threats, including investigating and documenting security incidents, making recommendations for fixes, and implementing those fixes where applicable. Working on cyber security projects or those that require security input, including the rollout of new security measures across the business. Monitor SIEM tools and data feeds for threats and take appropriate action when required. Install and operate firewall and data encryption software to protect sensitive business information. Support the technical implementation of ongoing security requirements, including access control and technical audits. Ongoing assessment of risk and reporting to line manager allowing him to make informed decisions regarding cyber security. Analyse and identify potential threats to fine tune the existing security monitoring platforms. Create, maintain, and review security policies and controls across the business, in line with business needs. Manage, update, and resolve incidents or service requests, in adherence to all applicable Service Level Agreements Research current and developing cyber security products and standards. Deploy patches to security devices in a timely manner and ensure any detected vulnerabilities are fixed to ensure high levels of security are maintained. Perform daily monitoring of security estate to ensure there is no unplanned downtime, breaches of security or network vulnerabilities. Create, maintain, and adhere to operational policies, procedures, and standards to effectively support the operational business. Create and maintain system documentation including documentation sufficient for someone else to cover in your absence Participate in the development, testing and maintenance of disaster recovery and business continuity plans Recommend, develop, and implement system solutions through analysis of business requirements and new developments in technology Effectively manage small works requests in line with defined procedures Liaise with 3rd party company representatives to ensure that satisfactory support, supply, and maintenance services are provided Provide specialised technical assistance in the planning and development of new projects and systems Ensure that IT equipment inventory information is entered and maintained How you could stretch this role Demonstrate a flexible approach to working hours and travel, and work closely with other members of IT, to meet with support and project deadlines. Participate in IT Strategy reviews as required Suggest improvements to the department's processes and procedures (where appropriate), encouraging a work culture of continuous improvement. Involvement in ad hoc projects. Support, coach and assist other team members and advise on new preventative measures and fixes. Communicate with other teams to resolve escalated issues quickly and efficiently. Identify any potential problem areas and devise methods of prevention Ensure housekeeping and maintenance routines are executed when required Key Experience & Skills Essential Experience Palo Alto Firewalls and all associated NG services Endpoint detection and remediation Proven track record in Cyber security and understanding of cyber security analysis, tools and software Experience of implementing, supporting and developing L2/3 network infrastructure Qualys Vulnerability Management Aruba Wifi L2/3 switching - Cisco Nexus Network Load balancing Penetration Testing (3rd Party) Incident management Data Security Attributes & Behaviours Good time management and organisational skills. Strong written and verbal communication, including confidence in presenting. Self motivated and proactive worker. Keen attention to detail. Able to work effectively with all levels of staff and external partners. Professional attitude and motivation by producing quality results Methodical and structured approach to work At Toyota Financial Services (TFS) it is more than just an externally benchmarked salary and bonus, we also offer: Hybrid working pattern is 2 days in the office and 3 days from a location of your choice. Access to attractive car schemes for you (and your family) for Toyota & Lexus cars Excellent pension scheme (up to 6% employee contribution and 15% employer contribution). Generous annual leave of 25 days which increases with service and holiday purchase option Private Medical Healthcare (single, partner/spouse and dependent children) with Digital GP Service Group Income Protection cover with Aviva including physical, mental, and financial wellbeing services Employee Assistance Program Eye tests Onsite gym, Sports and Social Club, & flu jabs to keep you healthy Wellbeing hour each month and many more initiatives throughout the year to encourage a healthy mind and body, and to raise awareness and celebrate diversity, equity and inclusion. Dress for your day policy to make you feel comfortable at work Eco HQ, free parking & restaurant Two volunteering days per year Reward gateway voucher discounts Flexible working scheme and we welcome flexible working conversations at interview Regular 121s with your manager, a personal development review (PReview) each quarter A wide range of learning & development opportunities including Linked In Learning courses £250 contribution towards you learning something new outside of work Annual events (e.g., summer party, BBQ & Xmas party) including Countdown to Christmas events every December - it is so much fun! Equal Employment Opportunity We are a Disability Confident Employer and welcome all applicants to request accommodations during the recruitment process.

Lead the forefront of innovative solutions analysis in a dynamic tech environment, driving success through expertise in data analytics and technical program delivery. As a Lead Solutions Analyst at JPMorgan Chase, within the Corporate & Investment Bank's Futures & Options Clearing Trade Processing Team, you will play a central role in driving the success of our technical program delivery. Your deep understanding of Clearing platforms and products will position you as a key bridge between product owners, business, operations, and software developers. Utilizing advanced analytical reasoning and technical fluency, you will translate complex business requirements into well-structured and technically feasible solutions. You will make data-informed decisions and provide strategic insights to support key business initiatives. As a technical subject matter expert, you'll navigate ambiguity, manage change effectively, and communicate compellingly with diverse stakeholder audiences to ensure the highest quality and professionalism in service delivery. Job responsibilities Lead the elicitation, documentation, and validation of business and data flow requirements, ensuring alignment with stakeholder expectations and technical feasibility Lead multiple teams from a Agile scrum leader perspective Develop and maintain comprehensive knowledge of industry trends, emerging technologies, and best practices to provide strategic guidance and innovative solutions for complex projects Uses enterprise-authorized AI capabilities within the work environment to accelerate requirements synthesis and solution optioning, validating outputs and handling data according to sensitivity and security requirements. Partner with supporting internal and external (vendor) tech teams to develop realistic and achievable project/fix estimates and manage key relationships Model the design and implementation of technical solutions, ensuring seamless integration with existing systems and infrastructure Utilize advanced data analytics techniques to extract insights from large, diverse datasets, driving data-informed decision-making and supporting key business initiatives Mentor and guide team members in the application of technical writing and analytical reasoning skills, fostering a culture of continuous learning and improvement. Promotes reuse-first, AI-assisted practices for analysis and documentation across the team, ensuring human review and alignment to delivery standards. Required qualifications, capabilities, and skills Extensive clearing experience or equivalent expertise in solutions analysis, technical program delivery, or a related field. Demonstrated expertise in data analysis and data application, including hands on experience with major data visualization platforms Advanced knowledge of data analytics techniques, with experience in developing and interpreting models, diagrams, and data-driven insights Proven ability to apply technical fluency in current and relevant platforms, software tools, and technologies to drive innovative solutions Understanding of the trade lifecycle and back office functions: clearing, margining, settlements, collateral, interest, accounting and cash management Demonstrated experience using enterprise-authorized AI capabilities within the work environment to support solutions analysis workflows with strong validation habits and awareness of data sensitivity. Ability to review and validate AI assisted analyses and recommendations before use, escalating when uncertain and following data handling expectations. Strong track record of leading through change, navigating ambiguous situations, and managing dependencies in complex projects Preferred qualifications, capabilities, and skills Experience of working with AWS in an Investment Banking context in particular in a Futures & Options department Experience with FIX protocol, Java, Kafka Some experience of providing production support in a Level2/Level3 capacity Experience with doing heap analysis, profiling etc.

Toyota Financial Services (TFS) is seeking a Senior Network & Security Analyst to own and enhance the IT network and security estate. You will drive operational tasks, shape security policies, and lead projects ensuring delivery on time and within budget. The role requires strong Palo Alto, endpoint security and L2/3 networking expertise, with a focus on threat detection, incident response and continuous improvement across IT services.

The DigitalXRaid Security Operations Centre provides around the clock protective monitoring solutions to a client base that spans multiple industry verticals. Utilising industry-leading detection technology, our team of experienced SOC team members work to provide assurance detection and incident response capabilities to organisations of all sizes. DigitalXRaid are looking for a Level 1 SOC Analyst to join the Security Operations Centre and Incident Response team based United Kingdom. This role is shift based (4 on, 4 off) and operates a hybrid working operation. Key Responsibilities Analyse, Triage and Remediate Security Incidents through the ITSM platform Correctly Classify Security Incidents Identify and Escalate Validated Incidents to L2/L3 Analysts Within SLA Apply Basic Containment Actions (e.g. isolating endpoints) Where Authorised Participate in Various Stages of Incident Investigations Collaborate With Senior Analysts to Resolve Incidents Efficiently. Contribute to Enhancing SOC Such as Tuning Suggestions, Process Suggestions Assess URL and Domain Reputation Using Threat Intelligence Tools Key Skills 0-2 years of experience within a SOC environment Excellent communication skills and comfortable in a client facing role. A keen interest in cyber security and associated industries. Proven ability to effectively communicate when under pressure (high pressure situations may arise during ongoing incidents or attacks). Proven ability to adapt to difficult situations (high pressure situations may arise during ongoing incidents or attacks). Industry certifications are desirable to the role, such as Microsoft SC-200, AZ-500, SC-100, Security Blue Team L1 Experience in any of the following technologies would be advantageous - MS Sentinel, MS Defender, USM Anywhere, SentinelOne, Tenable IO

The Role As an Information Security Analyst II at you will work across the full breadth of the information security function, spanning Governance, Risk and Compliance (GRC), AI Governance, Application Security (AppSec), Technology Risk, and Data Governance. This is a role for someone who has built solid foundational expertise and is ready to take independent ownership of security initiatives across multiple domains. Security at Checkout operates at scale and at pace. We are a global payments business, regulated across multiple jurisdictions, building infrastructure that processes billions of transactions. Our security function needs analysts who can think across domains, communicate with engineers and executives alike, and contribute to a security programme that is genuinely embedded in how the business operates. At L3 you will manage security programmes, lead assessments, drive policy improvements, and mentor junior colleagues. Your primary focus is independent execution with growing influence. You know your domains well enough to spot gaps, propose solutions, and take them through to completion. Governance, Risk and Compliance Support workstreams within Checkout's GRC programme, including ISO 27001, SOC 2, and relevant regulatory obligations across our global licensed entities. Coordinate control evidence collection activities across internal teams, ensuring continuous audit readiness rather than point in time preparation. Maintain and improve GRC documentation including policies, standards, procedures, and control matrices, ensuring they stay current and proportionate to Checkout's evolving risk profile. Monitor the risk register, track remediation activity against agreed timelines, and elevate issues where commitments are at risk. Conduct third party risk assessments, evaluating supplier security controls and compliance posture in line with Checkout's TPRM framework. Track regulatory change across Checkout's operating markets including DORA, FCA/PRA requirements, and payment scheme obligations, flagging gaps and supporting impact assessments. AI Governance Support the development and operationalisation of Checkout's AI governance framework, aligned to ISO 42001, the EU AI Act, and NIST AI RMF. Conduct AI risk assessments for internal AI and ML systems and third party AI tools, evaluating bias, transparency, data lineage, and control adequacy. Maintain an inventory of AI use cases and associated risk classifications, working with product and engineering teams to embed governance requirements at the point of design. Monitor the evolving regulatory landscape for AI in financial services and contribute to policy and control development that keeps Checkout ahead of emerging obligations. Support Checkout's AI Security programme including threat modelling for agentic and LLM based systems, and controls mapping against the OWASP LLM Top 10 and related frameworks. Technology Risk Conduct technology risk assessments across infrastructure, cloud environments, and third party systems, producing clear outputs with actionable treatment recommendations. Support third party risk management activities, evaluating supplier security controls and compliance posture in line with Checkout's vendor risk framework. Contribute to control assurance activities including vulnerability scanning coordination, firewall and configuration reviews, and access control assessments. Monitor Checkout's technology risk landscape, identifying emerging threats and translating them into actionable risk items for the register and leadership reporting. Support DORA related ICT risk management obligations, contributing to resilience testing coordination and critical third party risk assessments. Data Governance Support Checkout's data governance programme, including data classification, data flow mapping, and enforcement of data handling standards across the business. Contribute to data loss prevention (DLP) controls and tooling, working with engineering and product teams to ensure sensitive data is protected throughout its lifecycle. Assist in maintaining records of processing activities (RoPA) and supporting data protection impact assessments (DPIAs) for new systems and processing activities. Work with the privacy and legal functions to ensure data governance controls meet GDPR, UK GDPR, and applicable regional data protection requirements. Promote data governance awareness and good data handling practices across the business, contributing to training and guidance materials for non technical teams. Cross domain Collaboration and Mentoring Work closely with Engineering, Product, Legal, Procurement, Finance, and Compliance teams to embed security requirements into processes, systems, and projects across all five domains. Respond to security due diligence requests from merchants, partners, and regulators, drawing on multi domain expertise to provide accurate and comprehensive responses. Provide guidance and day to day support to junior analysts (L1 and L2), contributing to their development through knowledge sharing and review. Contribute to the continuous improvement of Checkout's security processes, identifying inefficiencies and proposing practical solutions including automation where viable. What We're Looking For Experience 2 to 4 years of experience in information security, IT audit, or a closely related function, ideally within payments, financial services, or fintech. Demonstrated working knowledge across more than one of the following domains: GRC, AI governance, AppSec, technology risk, or data governance. Depth in one or two with credible breadth across the others is the target profile. Practical experience with one or more major compliance frameworks: PCI DSS (v4.0.1 preferred), ISO 27001, SOC 2, DORA, NIST CSF, or equivalent. Experience supporting or managing external audits, assessments, or regulatory engagements including evidence collation and assessor liaison. Demonstrated ability to own a workstream independently, from scoping through to delivery, without requiring constant direction. Skills and Approach Strong analytical and process oriented mindset. You look for root causes and systemic fixes, not just point in time remediation. Clear written and verbal communication. You can translate security concepts for technical teams and business stakeholders with equal clarity. Comfortable operating with ambiguity across a complex domain landscape. You can prioritise without perfect information. Collaborative and pragmatic. You understand that security must work with the business and that influence matters as much as expertise. Methodical and well organised, with a track record of delivering on commitments across concurrent workstreams. Preferred Relevant certification in one or more domains: CISA, CISM, CISSP, PCIP, ISO 27001 Lead Implementer or Auditor, Certified AppSec Practitioner (CAP), or equivalent. Familiarity with cloud environments (AWS, Azure, GCP) from a security or compliance perspective. Exposure to AI and ML systems from a risk, governance, or security perspective. Experience with security or GRC tooling such as Wiz, Qualys, Microsoft Sentinel, ServiceNow GRC, or similar. Understanding of agentic AI and LLM security risks including OWASP LLM Top 10, prompt injection, and data exfiltration vectors. Hybrid Working Model All of our offices globally are onsite three times per week (Tuesday, Wednesday, and Thursday). We work collaboratively in the same space while also being able to partner with colleagues globally. During your days at the office, we offer great snacks, breakfast, and lunch options in all of our locations. We understand that work is just one part of your life. Our hybrid working model offers flexibility, with three days per week in the office to support collaboration and connection.

We are looking for a Senior Network & Security Analyst to join our team. With a strong network engineering background, you will also need experience within cyber security, with a strong knowledge of Palo Alto and project based work. An opportunity to fully own your daily duties and tasks, push yourself daily and really be a SME in your field. This role offers a competitive salary and benefits package plus additional payments for operational on-call and overtime opportunities. The role in a nutshell To provide effective and timely operational support, development and management of the IT network and security infrastructure to meet business requirements and objectives. To complete projects on time, within scope and to budget. About the Department The Business Technology Solutions (BTS) department are responsible for delivering end-to-end business technology and change through their four key functions of Governance, Projects & Change, Delivery and Technical Operations. They look after both TFSUK and KINTO UK. The mission of BTS is to Give (giving the business the technology, applications and services it needs), Guide (guiding the business through changes using expertise and experience) and Guard (always protect the business). What you'll be doing Work closely with other members of the team to ensure the technology, security policies and procedures are in place to safeguard the business. Manage day to day operational cyber security tasks to maintain optimum business security. Develop, maintain, and support the organisations IT security systems including managing next generation firewalls, IPS, security SIEM tools, Endpoint and security devices or services, responding to security incidents and analysing security breaches. Develop, maintain, and support the organisations network including managing all Layer2/3 devices, LAN, WAN, Internet, B2B connections, RAS, NLB, Wi Fi ensuring they support the business goals and infrastructure. Responsible for identifying external and internal threats, including investigating and documenting security incidents, making recommendations for fixes, and implementing those fixes where applicable. Working on cyber security projects or those that require security input, including the rollout of new security measures across the business. Monitor SIEM tools and data feeds for threats and take appropriate action when required. Install and operate firewall and data encryption software to protect sensitive business information. Support the technical implementation of ongoing security requirements, including access control and technical audits. Ongoing assessment of risk and reporting to line manager allowing him to make informed decisions regarding cyber security. Analyse and identify potential threats to fine tune the existing security monitoring platforms. Create, maintain, and review security policies and controls across the business, in line with business needs. Manage, update, and resolve incidents or service requests, in adherence to all applicable Service Level Agreements Research current and developing cyber security products and standards. Deploy patches to security devices in a timely manner and ensure any detected vulnerabilities are fixed to ensure high levels of security are maintained. Perform daily monitoring of security estate to ensure there is no unplanned downtime, breaches of security or network vulnerabilities. Create, maintain, and adhere to operational policies, procedures, and standards to effectively support the operational business. Create and maintain system documentation including documentation sufficient for someone else to cover in your absence Participate in the development, testing and maintenance of disaster recovery and business continuity plans Recommend, develop, and implement system solutions through analysis of business requirements and new developments in technology Effectively manage small works requests in line with defined procedures Liaise with 3rd party company representatives to ensure that satisfactory support, supply, and maintenance services are provided Provide specialised technical assistance in the planning and development of new projects and systems Ensure that IT equipment inventory information is entered and maintained How you could stretch this role Demonstrate a flexible approach to working hours and travel, and work closely with other members of IT, to meet with support and project deadlines. Participate in IT Strategy reviews as required Suggest improvements to the department's processes and procedures (where appropriate), encouraging a work culture of continuous improvement. Involvement in ad hoc projects. Support, coach and assist other team members and advise on new preventative measures and fixes. Communicate with other teams to resolve escalated issues quickly and efficiently. Identify any potential problem areas and devise methods of prevention Ensure housekeeping and maintenance routines are executed when required Key Experience & Skills Essential Experience Palo Alto Firewalls and all associated NG services Endpoint detection and remediation Proven track record in Cyber security and understanding of cyber security analysis, tools and software Experience of implementing, supporting and developing L2/3 network infrastructure Qualys Vulnerability Management Aruba Wifi L2/3 switching - Cisco Nexus Network Load balancing Penetration Testing (3rd Party) Incident management Data Security Attributes & Behaviours Good time management and organisational skills. Strong written and verbal communication, including confidence in presenting. Self motivated and proactive worker. Keen attention to detail. Able to work effectively with all levels of staff and external partners. Professional attitude and motivation by producing quality results Methodical and structured approach to work At Toyota Financial Services (TFS) it is more than just an externally benchmarked salary and bonus, we also offer: Hybrid working pattern is 2 days in the office and 3 days from a location of your choice. Access to attractive car schemes for you (and your family) for Toyota & Lexus cars Excellent pension scheme (up to 6% employee contribution and 15% employer contribution). Generous annual leave of 25 days which increases with service and holiday purchase option Private Medical Healthcare (single, partner/spouse and dependent children) with Digital GP Service Group Income Protection cover with Aviva including physical, mental, and financial wellbeing services Employee Assistance Program Eye tests Onsite gym, Sports and Social Club, & flu jabs to keep you healthy Wellbeing hour each month and many more initiatives throughout the year to encourage a healthy mind and body, and to raise awareness and celebrate diversity, equity and inclusion. Dress for your day policy to make you feel comfortable at work Eco HQ, free parking & restaurant Two volunteering days per year Reward gateway voucher discounts Flexible working scheme and we welcome flexible working conversations at interview Regular 121s with your manager, a personal development review (PReview) each quarter A wide range of learning & development opportunities including Linked In Learning courses £250 contribution towards you learning something new outside of work Annual events (e.g., summer party, BBQ & Xmas party) including Countdown to Christmas events every December - it is so much fun! Equal Employment Opportunity We are a Disability Confident Employer and welcome all applicants to request accommodations during the recruitment process.

L3Harris Technologies in the United Kingdom seeks an experienced SAP Support Analyst to manage the SAP ECC6 landscape and oversee ERP activities across the business. The role involves technical and functional leadership, incident management, and collaboration with internal IT teams and external vendors. You will work with stakeholders to ensure ERP stability, security, and alignment with business objectives, while managing SAP modules and integrations with other systems.

Job Title - SAP Support Analyst Job Location - Tewkesbury Job ID - 40869 About this opportunity and L3Harris UK L3Harris is dedicated to recruiting and developing high-performing talent who are passionate about what they do. Our employees are unified in a shared dedication to our customers' mission and quest for professional growth. L3Harris provides an inclusive, engaging environment designed to empower employees and promote work-life success. Fundamental to our culture is an unwavering focus on values, dedication to our communities, and commitment to excellence in everything we do. L3Harris is the Trusted Disruptor in defense tech. With customers' mission-critical needs always in mind, our employees deliver end-to-end technology solutions connecting the space, air, land, sea and cyber domains in the interest of national security. Operating at 11 sites in the United Kingdom, L3Harris supports Britain's mission to secure and strengthen the country by delivering sovereign innovation across the space, air, land, sea and cyber domains. L3Harris in Tewkesbury is part of our Global Spectrum Superiority (GS2) division. In the land domain, our T7 and T4 multi-mission robots deliver next-generation remote capabilities and uncompromised performance. We design and manufacture world-leading land force protection systems, cyber and electromagnetic activities (CEMA), electronic warfare (EW) and encryption capabilities. Our cyber capabilities provide an information advantage in the fields of kinetic conflict, cyber warfare, force protection and counterterrorism. The Global Technology and Business Solutions department (EMEA region), functions as a high-performance hub that delivers core IT capabilities across our organisation. We focus on measurable outcomes, leveraging standardized processes, data-driven decision making and customer-centric delivery to support innovation and growth. We are seeking an experienced SAP support analyst to manage an organisation's SAP landscape (SAP ECC6) and oversee the support work with other ERP platforms across the business. This role combines hands on SAP expertise, ensuring ERP systems are stable, secure, and aligned with business objectives. The role will act as the primary point of contact for ERP related initiatives, working closely with business stakeholders, external vendors, and internal IT teams. In addition to co ordinating SAP support and development activities, the role will oversee other ERP applications used within the organisation and manage the relationship and tickets processed with external vendors (Sage 200, Infor Evolution). A few of our employee benefits are: Half day finish on a Friday 25 days holiday per year (plus bank holidays), increasing with long service and with the opportunity to buy/sell up to 5 days Private medical insurance with optional family cover Pension scheme of up to 8% employer contribution Life Assurance 4x salary (flexible up to 10x) Group income protection Flexible opt in extras such as a health care cash plan, dental insurance, gym membership, critical illness cover, cycle to work scheme, travel insurance and electric car scheme Employee Family Assistance Program providing mental health and wellbeing support Professional membership reimbursement (discretionary) What the role will involve The responsibilities of your role will include the following: Ownership Act as the technical and functional lead for the linux based, SAP ECC6 environment Provide SAP support activities including incident management, root cause analysis, and system improvements Provide guidance across SAP modules such as FI/CO, MM, SD, PP, or other relevant areas Ensure SAP platforms meet business, security, and compliance requirements ERP Systems Strategy & Governance Provide oversight of ERP platforms, ensuring alignment with business processes Support integrations between SAP and other business systems Project Delivery & Transformation Support ERP related projects, including upgrades, enhancements, and system integrations Work with stakeholders to translate business requirements into technical solutions Ensure effective incident, problem, and change management processes are in place Promote knowledge sharing and maintain system documentation and support procedures Vendor & Stakeholder Management Manage relationships with SAP partners, support providers, and ERP vendors Act as the primary liaison between IT and business units regarding ERP capabilities and improvements Coordinate external consultants and implementation partners when required Security, Compliance & Risk Management To maintain SOX compliance, oversee SAP security roles, access controls, and compliance processes Ensure ERP systems meet audit, regulatory, and governance requirements Support business continuity and disaster recovery planning for ERP platforms What you'll bring The role requires the following experience and skills: Security, Compliance & Risk Management To maintain SOX compliance, oversee SAP security roles, access controls, and compliance processes Ensure ERP systems meet audit, regulatory, and governance requirements Support business continuity and disaster recovery planning for ERP platforms Important to know Due to the nature of our work many our roles require a UK nationality and the ability to obtain a security clearance. Applicants who accept a conditional offer of employment must meet the requirement of right to work in the UK and must meet eligibility requirements for access to classified information and will be subject to government security checks. L3Harris Technologies is proud to be an Equal Opportunity Employer. We are committed to maintaining a workplace that is free from unlawful discrimination and offers equal opportunities for all. Applications from individuals are encouraged regardless of age, disability, sex, gender reassignment, sexual orientation, pregnancy and maternity, race, religion or belief, and marriage and civil partnerships.

Overview Made Tech helps UK public sector organisations build and run better digital services. Our Cyber practice sits at the heart of that mission - working alongside government departments, agencies, and critical national infrastructure owners to improve how they detect, respond to, and learn from cyber threats. As a Lead Security Analyst, you'll be the most senior analyst on your engagement, setting the technical direction for the SOC and owning the quality of what the team produces - from detection engineering to threat-hunting to incident response. This isn't a role where you disappear into a ticket queue. You'll shape the threat-landscape narrative for your engagement, drive the detection backlog, and build the capability of the analysts around you. That means pairing on complex investigations, setting tradecraft standards, and making sure the team's detection content is version-controlled, peer-reviewed, and continuously improved - not left to age in a SIEM. You'll also be the trusted technical interface for client security stakeholders, translating what the SOC is seeing into the language that informs decisions. The UK public sector context matters here. You'll align your work to NCSC guidance, the Cyber Assessment Framework, and OFFICIAL handling requirements - not because compliance is the goal, but because those frameworks reflect the real risk environment your clients operate in. You'll engage with cross-government security communities, feed detection content and runbooks back into the Cyber practice, and help grow a bench of analysts who can operate at the same standard. Key Responsibilities Set the detection engineering standard - author, tune, and peer-review detections in KQL, SPL, EQL, or Sigma; manage the false-positive backlog; map coverage to MITRE ATT&CK; and train L1/L2 analysts to write and tune detections themselves. Own the threat-landscape narrative for your engagement - turn intelligence from NCSC advisories, sector feeds, and threat actor reporting into hunt themes, coverage gap analysis, and detection priorities that the SOC and client stakeholders can act on. Run the intelligence cycle as a managed discipline - maintain a collection plan, produce timely and rigorous intelligence products, and build feedback loops that keep the cycle honest and improving. Establish and lead security incident response practice - build playbooks, define the severity model, run exercises, and lead the team's response to significant incidents; run blameless post-mortems that the team actually learns from. Design the log and telemetry pipeline that detections run on - including bespoke application telemetry in cloud environments, not just commodity endpoint feeds; ensure the right signals are collected, parsed, and retained for both detection and investigation. Be the trusted technical interface for client security stakeholders - communicate what the SOC is detecting, investigating, and covering without losing fidelity; surface risks early and honestly, and align the team's priorities to the client's risk picture. Grow the analysts around you - pair on detection authorship and incident response as a default, set pairing as the team norm, and actively build the capability of L1 and L2 analysts through structured mentoring and coaching so knowledge isn't concentrated in one person. Contribute to the Cyber practice beyond your engagement - feed detection content, runbooks, and lessons learned back into shared practice resources; contribute to analyst assessment and hiring; and engage with public-sector security communities including NCSC CISP and relevant ISACs. Skills, Knowledge & Expertise We're looking for someone who holds one of the following, or an equivalent senior cyber operations leadership credential: CISSP CISM CASP+ Experience leading detection engineering in a SOC or similar environment - including writing and tuning detections in KQL, SPL, EQL, or Sigma, and managing coverage against MITRE ATT&CK Experience designing or improving a log and telemetry pipeline, including application-level telemetry from cloud-hosted services (AWS is a strong preference at this grade), with an understanding of how to design monitoring for failure modes and degraded states Evidence of running the intelligence cycle as a managed discipline - collection planning, production, and feedback - rather than consuming finished intelligence Working knowledge of UK government security standards and frameworks, including NCSC CAF Objective C, GovAssure, and OFFICIAL handling requirements Experience establishing incident response practice - playbooks, severity models, and exercises - not just responding to individual incidents Evidence of growing the technical capability of less experienced analysts through pairing, structured mentoring, or coaching, including setting clear goals and tracking progress over time Experience anchoring delivery on client outcomes rather than task completion - challenging the brief where it serves the client and making value visible rather than reporting effort Evidence of contributing reusable assets - detection playbooks, runbooks, templates, or accelerators - back into a practice or community, rather than leaving knowledge within a single team Tools and practices Familiarity with SOAR tooling and automation of triage and enrichment workflows Experience working in Kanban-led operating models, including managing triage queues, WIP limits, and class-of-service for incidents Experience running or contributing to skills-based technical assessments that evaluate demonstrated capability rather than credentials or years of experience Made Tech sponsors attainment of recognised cyber certifications for staff in scope. If you don't yet hold the essential credentials listed above but are working toward them - or can demonstrate equivalent capability through your experience - we'd still like to hear from you. Job Benefits We are always listening to our growing teams and evolving the benefits available to our people. As we scale, as do our benefits and we are scaling quickly. We've recently introduced a flexible benefit platform which includes a Smart Tech scheme, Cycle to work scheme, and an individual benefits allowance which you can invest in a Health care cash plan or Pension plan. We're also big on connection and have an optional social and wellbeing calendar of events for all employees to join should they choose to. Here are some of our most popular benefits listed below: 30 days Holiday - we offer 30 days of paid annual leave Flexible Working Hours - we are flexible with what hours you work Flexible Parental Leave - we offer flexible parental leave options Remote Working - we offer part time remote working for all our staff Paid counselling - we offer paid counselling as well as financial and legal advice At this point, we hope you're feeling excited about Made Tech and the job opportunity. Get in touch with our talent team if you'd like an informal chat about the role and your suitability before applying. We are hiring for this role directly, so will not respond to any CVs sent via external recruitment agencies. SC Eligibility - An increasing number of our customers are specifying a minimum of SC (security check) clearance in order to work on their projects. As a result, we're looking for all successful candidates for this role to have eligibility. Eligibility for SC requires 5 years' UK residency and 5 year' employment history (or back to full-time education). Please note that if at any point during the interview process it is apparent that you may not be eligible for SC, we won't be able to progress your application and we will contact you to let you know why. If you need this job description in another format, or other support in applying, please email We believe we can use tech to make public services better. We also believe this can happen best when our own team represents the society that actually uses the services we work on. We're collectively continuing to grow a culture that is happy, healthy, safe and inspiring for people of all backgrounds and experiences, so we encourage people from underrepresented groups to apply for roles with us. When you apply, we'll put you in touch with a member of our talent team who can help with any needs or adjustments we may need to make to help with your application. We've put together this blog as a resource to share more about reasonable adjustments and some examples of what this could include. We also welcome any feedback on how we can improve the experience for future candidates.

Company Description We're You might not know our name, but companies like eBay, Spotify, Klarna, Uber, and Sony do, because we're behind many of the digital experiences you use every day. We are where the world checks out, enabling over 10 billion transactions yearly for more than one billion global shoppers. Whether you want to book a holiday, order food, renew a subscription, or check out online, there's a good chance our tech powers the payments behind the scenes. Our platform helps the most ambitious businesses deliver effortless digital experiences, at scale. If you want to do career-defining work, you've come to the right place. We move fast, think globally, and believe great teams are built by hiring exceptional people with conviction, curiosity, and the desire to make an impact. With 20 offices across six continents and London as our HQ, we're shaping the future of fintech - and we're just getting started. The Role As an Information Security Analyst at you will work across the full breadth of the information security function, spanning Governance, Risk and Compliance (GRC), AI Governance, Application Security (AppSec), Technology Risk, and Data Governance. This is a role for someone who has built a solid foundation in information security and is ready to move from guided execution to genuine ownership of tasks and smaller workstreams. Security at Checkout operates at scale and at pace. We are a global payments business, regulated across multiple jurisdictions, building infrastructure that processes billions of transactions. Our security function needs analysts who understand how different domains fit together, communicate clearly with technical and non-technical colleagues, and take accountability for the quality of their work. At L2 you will implement security controls, respond to security incidents, identify risks, and support compliance activities across multiple domains. You work independently for extended periods and are developing the cross-domain knowledge and stakeholder skills that will prepare you for programme ownership at L3 and beyond. How You'll Make Impact Governance, Risk and Compliance Support workstreams within Checkout's GRC programme, including ISO 27001, SOC 2, PCI DSS, and applicable regulatory obligations across our global licensed entities. Assist with control evidence collection activities, coordinating with internal teams to gather accurate and timely evidence in support of audit readiness. Maintain GRC documentation including policies, standards, procedures, and control matrices under the guidance of senior colleagues. Support monitoring of the risk register, tracking remediation activity against agreed timelines and escalating where commitments are at risk. Assist in conducting third party risk assessments, evaluating supplier security controls in line with Checkout's TPRM framework. Develop working knowledge of regulatory obligations across Checkout's operating markets, including FCA/PRA requirements, payment scheme rules, and DORA. AI Governance Support the operationalisation of Checkout's AI governance framework, aligned to ISO 42001, the EU AI Act, and NIST AI RMF. Assist in conducting AI risk assessments for internal AI and ML systems and third party AI tools, under the guidance of more senior analysts. Help maintain an inventory of AI use cases and associated risk classifications, working with product and engineering teams as directed. Develop awareness of the evolving regulatory landscape for AI in financial services and contribute to policy and control documentation. Contribute to the development and communication of responsible AI usage guidance for staff, helping teams across the business understand acceptable use boundaries, data handling expectations, and the risks associated with AI tools in a regulated environment. Application Security Contribute to Checkout's application security programme, including support for secure code review processes, SDLC integration, and developer security guidance. Support threat modelling activities for new and existing products, identifying security requirements under the guidance of senior colleagues. Assist in managing vulnerability findings from penetration tests, bug bounty programmes, and automated tooling, tracking remediation and validating fixes. Apply knowledge of the OWASP Top 10 and secure development frameworks to practical security reviews and guidance activities. Technology Risk Support technology risk assessments across infrastructure, cloud environments, and third party systems, contributing to outputs with actionable treatment recommendations. Assist with control assurance activities including vulnerability scanning coordination, access control assessments, and firewall and configuration reviews. Develop an understanding of Checkout's technology risk landscape, identifying emerging threats and contributing inputs to the risk register. Support DORA related ICT risk management activities under the direction of senior analysts. Data Governance Support Checkout's data governance programme, including data classification activities, data flow mapping, and enforcement of data handling standards. Assist with data loss prevention (DLP) controls and tooling, contributing to activities that ensure sensitive data is protected throughout its lifecycle. Help maintain records of processing activities (RoPA) and support data protection impact assessments (DPIAs) for new systems. Develop working knowledge of GDPR, UK GDPR, and applicable regional data protection requirements as they affect Checkout's operations. Cross domain Collaboration Work with Engineering, Product, Legal, Procurement, Finance, and Compliance teams to support the embedding of security requirements into processes, systems, and projects. Respond to security due diligence requests from merchants, partners, and regulators with accuracy and within agreed SLAs, escalating complex queries appropriately. Communicate clearly with internal stakeholders on security requirements, keeping teams updated on changes and project progress. Contribute to security awareness initiatives, promoting a security conscious culture across Checkout. What We're Looking for Experience 1 to 2 years of experience in information security, IT audit, or a closely related function, ideally within payments, financial services, or fintech. Working knowledge of at least one of the following domains: GRC, AppSec, technology risk, or data governance. Practical familiarity with at least one compliance framework: PCI DSS, ISO 27001, SOC 2, NIST CSF, or equivalent. Some exposure to external audits, risk assessments, or security assurance activities. Ability to manage tasks independently and deliver on commitments reliably. Skills and Approach Clear written and verbal communication. You can translate security concepts for technical and non technical audiences. Detail oriented and methodical. You approach your work carefully and follow through consistently. Curious and proactive. You ask questions, flag issues early, and look for root causes rather than surface fixes. Collaborative and adaptable. You work effectively across teams and adjust your approach as priorities shift. Receptive to feedback and committed to developing your information security skills across multiple domains. Preferred Pursuing or holding a relevant certification: CompTIA Security+, CISA (in progress), ISO 27001 Foundation, or equivalent. Familiarity with cloud environments (AWS, Azure, GCP) from a security or compliance perspective. Exposure to security or GRC tooling such as Wiz, Qualys, Microsoft Sentinel, ServiceNow GRC, or similar. Awareness of AI governance frameworks or the OWASP LLM Top 10. Some scripting or automation experience (Python, etc.) is a plus.

11631HS Genuinely competitive + Bonus + Car + Brilliant Benefits Senior Cyber Security & Network Analyst - Hybrid Our client is urgently looking for an experienced Senior Cyber Security & Network Analyst to join their team based near Epsom on a permanent basis. Please note, the role is hybrid, with 2-3 days on-site each week. You will have a strong Network Engineering background ( a minimum of 5-7 years) with added Cyber experience and will have led and performed new installations/kit builds. You will be rewarded with an excellent salary, as well as a brilliant benefits package including bonus, annual leave, leading pension contribution (up to 21%), car schemes, on-site canteen, restaurant and gym (heavily subsidised), medical insurance, life assurance, income protection, hybrid working and a genuinely fantastic working culture! Key Skills Palo Alto Firewalls and all associated NG services Endpoint detection and remediation Proven track record in Cyber security and understanding of cyber security analysis, tools and software Experience of implementing, supporting and developing L2/3 network infrastructure Qualys Vulnerability Management Aruba Wifi L2/3 switching - Cisco Nexus Network Load balancing Penetration Testing (3rd Party) Incident management Data Security Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation.

11631HS Genuinely competitive + Bonus + Car + Brilliant Benefits Senior Cyber Security & Network Analyst - Hybrid Our client is urgently looking for an experienced Senior Cyber Security & Network Analyst to join their team based near Epsom on a permanent basis. Please note, the role is hybrid, with 2-3 days on-site each week. You will have a strong Network Engineering background ( a minimum of 5-7 years) with added Cyber experience and will have led and performed new installations/kit builds. You will be rewarded with an excellent salary, as well as a brilliant benefits package including bonus, annual leave, leading pension contribution (up to 21%), car schemes, on-site canteen, restaurant and gym (heavily subsidised), medical insurance, life assurance, income protection, hybrid working and a genuinely fantastic working culture! Key Skills Palo Alto Firewalls and all associated NG services Endpoint detection and remediation Proven track record in Cyber security and understanding of cyber security analysis, tools and software Experience of implementing, supporting and developing L2/3 network infrastructure Qualys Vulnerability Management Aruba Wifi L2/3 switching - Cisco Nexus Network Load balancing Penetration Testing (3rd Party) Incident management Data Security Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation.

We are seeking a skilled and proactive Tier 2 Security Operations Centre (SOC) Analyst to play a critical role in our 24x7 Security Operations Centre. As a Tier 2 Analyst, you will lead the investigation, containment, and coordination of security incidents, working closely with Tier 1 analysts, internal IT teams, and external stakeholders. You'll take ownership of more complex alerts, support threat hunting and intelligence efforts, and contribute to the refinement of detection rules, playbooks, and response procedures. This is an excellent opportunity for an experienced security analyst ready to take the next step - with a chance to mentor junior analysts, deepen your technical expertise, and help shape our evolving security posture in a collaborative, hands on environment. Key responsibilities for this role may include: Incident Detection & Response: Lead the triage, investigation, and classification of security events using SIEM and other tooling Take ownership of end to end handling of medium to high severity incidents, coordinating containment and remediation efforts Maintain detailed incident records, including timelines, impact assessments, root cause analysis, and mitigation steps Act as an escalation point for Tier 1 analysts, guiding initial response actions and validating escalations Threat Intelligence and Analysis: Perform in depth analysis of suspicious activity, identifying indicators of compromise and attribution patterns Lead threat intelligence sharing within the organisation and with external partners Mentor Tier 1 staff in interpreting threat data and logs during investigations Security Monitoring and Detection Engineering: Conduct continuous security monitoring of network traffic, endpoints, and critical systems Proactively tune and improve SIEM rules, alerts, and correlation logic to reduce false positives and increase detection fidelity Support onboarding of new data sources into SIEM and help define parsing, enrichment, and correlation logic Lead investigations into recurring false positives or noisy alerts and propose sustainable resolutions Support deployment and configuration of security tooling Compliance, Reporting and Documentation: Lead security audits and assessments, providing evidence of SOC activities and controls Maintain accurate records of all events handled, including triage notes and escalation details. Lead the delivery of incident and vulnerability summaries to the management team and customers as part of Service Reviews or Security Working Groups Lead post incident reviews and document lessons learned Ensure compliance with industry standards, regulations, and internal security policies Prepare and present regular reports and metrics on SOC operations and overall security posture Vulnerability Management: Coordinate and support risk based prioritisation of vulnerability remediation efforts Support vulnerability lifecycle management, including exception handling, patch validation, and reporting Provide vulnerability remediation guidance based on CVSS scores, threat context and business impacts Collaboration and knowledge sharing: Act as a technical mentor to Tier 1 analysts, supporting their development and escalation handling Work closely with other IT teams (e.g., Network, Architecture, and Development teams) to identify and resolve security issues Share insights, threat intelligence, and incident learnings to improve the overall security posture of the organization As a T2 SOC Analyst, you will have: 1 to 5 years of hands on experience in a SOC or similar security operations role, with demonstrable exposure to alert triage, incident response, security monitoring, and threat analysis Experience handling real world security incidents and working with SIEM, EDR, or vulnerability management tools Candidates with strong practical experience through labs, home projects, certifications, or internships may also be considered if they can demonstrate applied knowledge at a Tier 2 level Bachelor's degree in Computer Science, Information Security, Cyber Security or related field, or equivalent experience desirable. Any SIEM specific certification or vendor specific training. Relevant cybersecurity certifications such as Certified Cloud Security Professional (CCSP) or other relevant security certifications, Security+ (CompTIA), CEH (Certified Ethical Hacker), CISSP, BTL1, BTL2 or others are highly desirable but not essential.