it job board logo
  • Home
  • Find IT Jobs
  • Register CV
  • Career Advice
  • Contact us
  • Employers
    • Register as Employer
    • Pricing Plans
  • Recruiting? Post a job
  • Sign in
  • Sign up
  • Home
  • Find IT Jobs
  • Register CV
  • Career Advice
  • Contact us
  • Employers
    • Register as Employer
    • Pricing Plans
Sorry, that job is no longer available. Here are some results that may be similar to the job you were looking for.

124 jobs found

Email me jobs like this
Refine Search
Current Search
waf security engineer
Lead Technical Architect (Network) - DV Cleared
Certes IT Service Solutions Milton Keynes, Buckinghamshire
Lead Technical Architect - Networks (DV Cleared) Clearance: Developed Vetting (DV) - mandatory Onsite Requirement: 3 days per week Rate: £750 - £775 per day Inside IR35 Location: Milton Keynes Overview: We are seeking an experienced Lead Technical Architect (Networks) to join our client, reporting directly to the Chief Technology Officer. This is a senior leadership role responsible for defining and governing network architecture across both physical and logical domains. The successful candidate will play a key role in a new project, leading network architecture strategy and ensuring designs are secure, scalable, resilient, and cost-effective, aligned with organisational objectives and enterprise architecture standards. This role requires a strong blend of deep technical expertise, architecture governance, and stakeholder engagement, with a particular emphasis on end-to-end datacentre design and customer-facing delivery. Key Responsibilities: Lead network architecture across physical and logical environments Define and govern secure, scalable, and cost-efficient network designs Act as the primary architect for key project delivery initiatives Translate business and security requirements into technical solutions Produce and review high- and low-level designs (conceptual, logical, physical) aligned to TOGAF Provide leadership and guidance to architects and technical teams Drive best practices in network automation, provisioning, and orchestration Influence senior stakeholders through evidence-based recommendations Support incident resolution and technical escalations Develop and maintain technical roadmaps aligned to organisational strategy Essential Skills & Experience: Qualifications & Certifications Degree (or equivalent experience) in Computer Science, Network Engineering, or Telecommunications Industry certifications or willingness to work towards (TOGAF, ITIL, PRINCE2, Agile) Professional certifications such as: o CCNP (Cisco) o VCP-NV (VMware) o PCNSE (Palo Alto) o Azure Network Engineer / AWS Solutions Architect (or equivalent experience) Technical Expertise: Proven experience designing and governing secure network architectures across: o VMware (private cloud) o Microsoft on-premise environments o Multi-cloud (Azure and/or AWS) Strong experience delivering LAN, WAN, hybrid cloud, and datacentre network designs Deep understanding of: o Cisco technologies (ACI, ASA, Firepower, ASR, Catalyst, Nexus) o VMware NSX o Palo Alto Firewalls Networking protocols and technologies: o VLANs, MPLS, IPsec, OSPF, BGP, SD-WAN, SDN o TCP/IP, VPN, DNS, QoS Experience designing networks in Azure (VNet) and AWS (VPC) Knowledge of: o Zero Trust architecture o Network automation and orchestration o Monitoring tools (SolarWinds, PRTG) o F5 BIG-IP (LTM, ASM) Understanding of high-grade encryption technologies for secure environments Architecture & Delivery Experience: Experience producing robust architecture designs using TOGAF frameworks Strong track record of: o Designing secure, resilient environments (ideally government/defence) o Delivering business continuity and disaster recovery solutions o Designing DDoS protection and security controls (WAF, IDS/IPS, EDR/XDR/NDR) Experience evaluating solution options across cost, quality, time, and risk Exposure to network automation tools (e.g. Ansible, Terraform, Python) Experience working within CI/CD and DevSecOps environments Leadership & Stakeholder Management: Proven ability to lead and mentor technical teams Experience influencing senior stakeholders and decision-makers Ability to act as a key escalation point for complex issues Strong customer-facing and communication skills Knowledge Requirements: UK Government and security frameworks, including: o NCSC guidance o GDS standards o Secure by Design principles o Cloud Security Principles o Technology Code of Practice Experience designing secure / air-gapped environments Expertise in cloud-native networking and modern architectural practices Desirable Skills: Membership of professional bodies (e.g., BCS, IET) Experience working at OFFICIAL (or higher) government classification levels Advanced certifications (e.g., CCIE) Experience with Google Cloud Platform (GCP) networking Awareness of AI-driven operational optimisation Strong experience with automation in DevSecOps environments Certes Computing (and all of its subsidiary companies) is committed to promoting equality and diversity in its business operations. JBRP1_UKTJ
17/06/2026
Full time
Lead Technical Architect - Networks (DV Cleared) Clearance: Developed Vetting (DV) - mandatory Onsite Requirement: 3 days per week Rate: £750 - £775 per day Inside IR35 Location: Milton Keynes Overview: We are seeking an experienced Lead Technical Architect (Networks) to join our client, reporting directly to the Chief Technology Officer. This is a senior leadership role responsible for defining and governing network architecture across both physical and logical domains. The successful candidate will play a key role in a new project, leading network architecture strategy and ensuring designs are secure, scalable, resilient, and cost-effective, aligned with organisational objectives and enterprise architecture standards. This role requires a strong blend of deep technical expertise, architecture governance, and stakeholder engagement, with a particular emphasis on end-to-end datacentre design and customer-facing delivery. Key Responsibilities: Lead network architecture across physical and logical environments Define and govern secure, scalable, and cost-efficient network designs Act as the primary architect for key project delivery initiatives Translate business and security requirements into technical solutions Produce and review high- and low-level designs (conceptual, logical, physical) aligned to TOGAF Provide leadership and guidance to architects and technical teams Drive best practices in network automation, provisioning, and orchestration Influence senior stakeholders through evidence-based recommendations Support incident resolution and technical escalations Develop and maintain technical roadmaps aligned to organisational strategy Essential Skills & Experience: Qualifications & Certifications Degree (or equivalent experience) in Computer Science, Network Engineering, or Telecommunications Industry certifications or willingness to work towards (TOGAF, ITIL, PRINCE2, Agile) Professional certifications such as: o CCNP (Cisco) o VCP-NV (VMware) o PCNSE (Palo Alto) o Azure Network Engineer / AWS Solutions Architect (or equivalent experience) Technical Expertise: Proven experience designing and governing secure network architectures across: o VMware (private cloud) o Microsoft on-premise environments o Multi-cloud (Azure and/or AWS) Strong experience delivering LAN, WAN, hybrid cloud, and datacentre network designs Deep understanding of: o Cisco technologies (ACI, ASA, Firepower, ASR, Catalyst, Nexus) o VMware NSX o Palo Alto Firewalls Networking protocols and technologies: o VLANs, MPLS, IPsec, OSPF, BGP, SD-WAN, SDN o TCP/IP, VPN, DNS, QoS Experience designing networks in Azure (VNet) and AWS (VPC) Knowledge of: o Zero Trust architecture o Network automation and orchestration o Monitoring tools (SolarWinds, PRTG) o F5 BIG-IP (LTM, ASM) Understanding of high-grade encryption technologies for secure environments Architecture & Delivery Experience: Experience producing robust architecture designs using TOGAF frameworks Strong track record of: o Designing secure, resilient environments (ideally government/defence) o Delivering business continuity and disaster recovery solutions o Designing DDoS protection and security controls (WAF, IDS/IPS, EDR/XDR/NDR) Experience evaluating solution options across cost, quality, time, and risk Exposure to network automation tools (e.g. Ansible, Terraform, Python) Experience working within CI/CD and DevSecOps environments Leadership & Stakeholder Management: Proven ability to lead and mentor technical teams Experience influencing senior stakeholders and decision-makers Ability to act as a key escalation point for complex issues Strong customer-facing and communication skills Knowledge Requirements: UK Government and security frameworks, including: o NCSC guidance o GDS standards o Secure by Design principles o Cloud Security Principles o Technology Code of Practice Experience designing secure / air-gapped environments Expertise in cloud-native networking and modern architectural practices Desirable Skills: Membership of professional bodies (e.g., BCS, IET) Experience working at OFFICIAL (or higher) government classification levels Advanced certifications (e.g., CCIE) Experience with Google Cloud Platform (GCP) networking Awareness of AI-driven operational optimisation Strong experience with automation in DevSecOps environments Certes Computing (and all of its subsidiary companies) is committed to promoting equality and diversity in its business operations. JBRP1_UKTJ
TXP
SC Cleared Azure Network Engineer
TXP
Azure Network Engineer (Apply online only) per day INSIDE IR35 REMOTE 6 MONTHS Role Overview The Network Engineer will be responsible for designing, deploying, and securing Azure networking solutions within a secure cloud environment aligned to client security and governance standards. Key Responsibilities Design Azure virtual networks, routing, and subnet architectures Configure secure connectivity using VPN, ExpressRoute, and Azure Firewall Implement secure application networking using NSGs, ASGs, WAFs, Firewall Policies, and Private Endpoints Support secure environment preparation for PEN Testing and ITHC activities Deploy network infrastructure using Terraform Troubleshoot routing, connectivity, DNS, and firewall issues Produce network diagrams, architecture documentation, standards, and runbooks Core Skills & Experience Azure Networking (VNet, Subnets, Routing) VPN Gateway / ExpressRoute Azure Firewall NSGs / ASGs / WAF / Private Endpoints Terraform Infrastructure as Code Hybrid networking and secure cloud networking patterns
16/06/2026
Contractor
Azure Network Engineer (Apply online only) per day INSIDE IR35 REMOTE 6 MONTHS Role Overview The Network Engineer will be responsible for designing, deploying, and securing Azure networking solutions within a secure cloud environment aligned to client security and governance standards. Key Responsibilities Design Azure virtual networks, routing, and subnet architectures Configure secure connectivity using VPN, ExpressRoute, and Azure Firewall Implement secure application networking using NSGs, ASGs, WAFs, Firewall Policies, and Private Endpoints Support secure environment preparation for PEN Testing and ITHC activities Deploy network infrastructure using Terraform Troubleshoot routing, connectivity, DNS, and firewall issues Produce network diagrams, architecture documentation, standards, and runbooks Core Skills & Experience Azure Networking (VNet, Subnets, Routing) VPN Gateway / ExpressRoute Azure Firewall NSGs / ASGs / WAF / Private Endpoints Terraform Infrastructure as Code Hybrid networking and secure cloud networking patterns
TXP
SC Cleared Azure Network Engineer
TXP
Azure Network Engineer 600 - 650 per day INSIDE IR35 REMOTE 6 months Role Overview The Network Engineer will be responsible for designing, deploying, and securing Azure networking solutions within a secure cloud environment aligned to client security and governance standards. Key Responsibilities Design Azure virtual networks, routing, and subnet architectures Configure secure connectivity using VPN, ExpressRoute, and Azure Firewall Implement secure application networking using NSGs, ASGs, WAFs, Firewall Policies, and Private Endpoints Support secure environment preparation for PEN Testing and ITHC activities Deploy network infrastructure using Terraform Troubleshoot routing, connectivity, DNS, and Firewall issues Produce network diagrams, architecture documentation, standards, and runbooks Core Skills & Experience Azure Networking (VNet, Subnets, Routing) VPN Gateway/ExpressRoute Azure Firewall NSGs/ASGs/WAF/Private Endpoints Terraform Infrastructure as Code Hybrid networking and secure cloud networking patterns
16/06/2026
Contractor
Azure Network Engineer 600 - 650 per day INSIDE IR35 REMOTE 6 months Role Overview The Network Engineer will be responsible for designing, deploying, and securing Azure networking solutions within a secure cloud environment aligned to client security and governance standards. Key Responsibilities Design Azure virtual networks, routing, and subnet architectures Configure secure connectivity using VPN, ExpressRoute, and Azure Firewall Implement secure application networking using NSGs, ASGs, WAFs, Firewall Policies, and Private Endpoints Support secure environment preparation for PEN Testing and ITHC activities Deploy network infrastructure using Terraform Troubleshoot routing, connectivity, DNS, and Firewall issues Produce network diagrams, architecture documentation, standards, and runbooks Core Skills & Experience Azure Networking (VNet, Subnets, Routing) VPN Gateway/ExpressRoute Azure Firewall NSGs/ASGs/WAF/Private Endpoints Terraform Infrastructure as Code Hybrid networking and secure cloud networking patterns
Lead DevOps Engineer
Micro Technologies Colchester, Essex
Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!# Job Details This role is in support of Cencora's global pharma consulting services marketed through our PharmaLex business.The purpose of this role is to own and lead the DevOps function, helping teams ship software faster and more safely by building and improving Azure infrastructure and CI/CD pipelines, driving automation and a shift-left culture, and mentoring engineers. Responsibilities: Define and drive the DevOps Vision and using Agile best practices Set direction, standards, and best practices for the team Lead the design of scalable, secure, and reliable infrastructure and delivery pipelines Establish and maintain CI/CD pipelines for multiple applications and services Align DevOps initiatives with engineering, product, and business goals Ensure high-quality engineering is demonstrated across the team Design, deploy and maintain cloud infrastructure (Azure) Mentor engineers and promote knowledge sharing Facilitate clear communication between the different departments Advocate DevOps culture across the teams looking to shift-left wherever possible. Requirements: 6+ years in DevOps/Cloud/Platform Engineering roles 2+ years in a technical leadership or team lead capacity Strong hands-on experience with Microsoft Azure (VMs/networking/Storage, AKS, App Services, Keyvault) Deep experience with Kubernetes in production environments Strong infrastructure as code experience, mainly Terraform/Helm Strong CI/CD experience, ideally with Azure DevOps Candidates must be based in Poland ( ideally located near Lublin ) or the United Kingdom Functional development/coding ability with at least one language - Golang/Python/PowerShell/bash Strong understanding of networking, security, and cloud architecture Experience working in cross-functional engineering teams Familiar with observability platforms Cloudflare/Edge/WAF knowledge - will be a plus LLM experience - will be a plus Minimum of 5 GCSEs at grades A-C (9-4) including Maths and English, or equivalent high school diploma Works under broad direction and often self-initiates tasks Makes decisions impacting results and deadlines Demonstrates leadership in operational management and encourages learning and growth Understands and evaluates the organizational impact of new technologies and digital services# What Cencora offers Benefit offerings outside the US may vary by country and will be aligned to local market practice. The eligibility and effective date may differ for some benefits and for team members covered under collective bargaining agreements.Full time# Affiliated Companies Affiliated Companies: PhlexGlobal Limited# Equal Employment Opportunity # Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.The company's continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call or email . We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returnedCencora is a leading global pharmaceutical solutions company that is committed to improving the lives of people and animals everywhere. We connect manufacturers, providers, and patients to ensure that anyone can get the therapies they need, where and when they need them.We're a purpose-driven organization, where all of our team members around the world are united in our responsibility to create healthier futures. We work together every day to help our partners bring their innovations to patients worldwide, creating unparalleled access and impact at the center of health.2.) Be Wary of Unrealistic Promises: Exercise caution If a job posting offers high salaries and minimal qualifications. Legitimate jobs will have realistic expectations and provide detailed job requirements. Jobs at Cencora can be found on
16/06/2026
Full time
Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere. Apply today!# Job Details This role is in support of Cencora's global pharma consulting services marketed through our PharmaLex business.The purpose of this role is to own and lead the DevOps function, helping teams ship software faster and more safely by building and improving Azure infrastructure and CI/CD pipelines, driving automation and a shift-left culture, and mentoring engineers. Responsibilities: Define and drive the DevOps Vision and using Agile best practices Set direction, standards, and best practices for the team Lead the design of scalable, secure, and reliable infrastructure and delivery pipelines Establish and maintain CI/CD pipelines for multiple applications and services Align DevOps initiatives with engineering, product, and business goals Ensure high-quality engineering is demonstrated across the team Design, deploy and maintain cloud infrastructure (Azure) Mentor engineers and promote knowledge sharing Facilitate clear communication between the different departments Advocate DevOps culture across the teams looking to shift-left wherever possible. Requirements: 6+ years in DevOps/Cloud/Platform Engineering roles 2+ years in a technical leadership or team lead capacity Strong hands-on experience with Microsoft Azure (VMs/networking/Storage, AKS, App Services, Keyvault) Deep experience with Kubernetes in production environments Strong infrastructure as code experience, mainly Terraform/Helm Strong CI/CD experience, ideally with Azure DevOps Candidates must be based in Poland ( ideally located near Lublin ) or the United Kingdom Functional development/coding ability with at least one language - Golang/Python/PowerShell/bash Strong understanding of networking, security, and cloud architecture Experience working in cross-functional engineering teams Familiar with observability platforms Cloudflare/Edge/WAF knowledge - will be a plus LLM experience - will be a plus Minimum of 5 GCSEs at grades A-C (9-4) including Maths and English, or equivalent high school diploma Works under broad direction and often self-initiates tasks Makes decisions impacting results and deadlines Demonstrates leadership in operational management and encourages learning and growth Understands and evaluates the organizational impact of new technologies and digital services# What Cencora offers Benefit offerings outside the US may vary by country and will be aligned to local market practice. The eligibility and effective date may differ for some benefits and for team members covered under collective bargaining agreements.Full time# Affiliated Companies Affiliated Companies: PhlexGlobal Limited# Equal Employment Opportunity # Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.The company's continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call or email . We will make accommodation determinations on a request-by-request basis. Messages and emails regarding anything other than accommodations requests will not be returnedCencora is a leading global pharmaceutical solutions company that is committed to improving the lives of people and animals everywhere. We connect manufacturers, providers, and patients to ensure that anyone can get the therapies they need, where and when they need them.We're a purpose-driven organization, where all of our team members around the world are united in our responsibility to create healthier futures. We work together every day to help our partners bring their innovations to patients worldwide, creating unparalleled access and impact at the center of health.2.) Be Wary of Unrealistic Promises: Exercise caution If a job posting offers high salaries and minimal qualifications. Legitimate jobs will have realistic expectations and provide detailed job requirements. Jobs at Cencora can be found on
DMS Computer Recruitment
Cloud Security Engineer (AWS) - Remote
DMS Computer Recruitment
The Role: We are looking for a Cloud Security Engineer with experience on AWS, to join our growing team. The successful candidate will have an essential role in ensuring the information security of our business. You will be working in a team that is designing and building resilient and secure Cloud environments that proactively prevent security threats. You will typically have industry accreditations like AWS Certified Security - Specialty The main responsibilities of the position include: Design and build resilient Cloud infrastructures that are protected against security threats Develop and assess Cloud security solutions to secure systems, databases and networks Conduct assessment and make recommendations to ensure that appropriate controls are in place Gain insight into security incidents and threats by monitoring/analyzing logs and performing vulnerability assessments Participate in efforts that shape the company's security policies, procedures and standards for use in Cloud environments Create technical and managerial level security reports for Cloud-based applications and infrastructure Implement and tests network and security Disaster Recovery procedures to ensure business continuity Monitor use of sensitive data and regulates access to safeguard information Ensure the confidentiality and integrity of data during transmission, storage and processing Review violations of security procedures and discusses procedures with violators to ensure they are not repeated Provide support to end users regarding network and security related issues Main requirements: BSc/MSc in Information Security or any other related field Minimum 1 year working experience in Information Security, with proven focus in Cloud Security Deep technical knowledge of Amazon Web Services (AWS). Expertise in Microsoft Azure and Oracle Cloud will be considered an advantage Hands-on experience on AWS services such as IAM, Organizations, SSO, VPC, Transit Gateway, S3, EC2, RDS, ELB, CloudTrail, Config, Inspector, GuardDuty, WAF, etc Clear understanding of current threats to Cloud infrastructure and advanced knowledge of securing such environments Experience in DevSecOps methodologies is considered a plus Experience building and deploying applications to the cloud (AWS, Azure, etc.) using Infrastructure as Code tools such as Terraform is considered a plus Expertise in container security is considered a plus Ability to work autonomously with minimum supervision and to integrate well within a team Excellent problem solving and analytical skills Ability to quickly learn new technologies in depth Benefit from: Attractive remuneration Food allowance Intellectually stimulating work environment Continuous personal development and international training opportunities
16/06/2026
Full time
The Role: We are looking for a Cloud Security Engineer with experience on AWS, to join our growing team. The successful candidate will have an essential role in ensuring the information security of our business. You will be working in a team that is designing and building resilient and secure Cloud environments that proactively prevent security threats. You will typically have industry accreditations like AWS Certified Security - Specialty The main responsibilities of the position include: Design and build resilient Cloud infrastructures that are protected against security threats Develop and assess Cloud security solutions to secure systems, databases and networks Conduct assessment and make recommendations to ensure that appropriate controls are in place Gain insight into security incidents and threats by monitoring/analyzing logs and performing vulnerability assessments Participate in efforts that shape the company's security policies, procedures and standards for use in Cloud environments Create technical and managerial level security reports for Cloud-based applications and infrastructure Implement and tests network and security Disaster Recovery procedures to ensure business continuity Monitor use of sensitive data and regulates access to safeguard information Ensure the confidentiality and integrity of data during transmission, storage and processing Review violations of security procedures and discusses procedures with violators to ensure they are not repeated Provide support to end users regarding network and security related issues Main requirements: BSc/MSc in Information Security or any other related field Minimum 1 year working experience in Information Security, with proven focus in Cloud Security Deep technical knowledge of Amazon Web Services (AWS). Expertise in Microsoft Azure and Oracle Cloud will be considered an advantage Hands-on experience on AWS services such as IAM, Organizations, SSO, VPC, Transit Gateway, S3, EC2, RDS, ELB, CloudTrail, Config, Inspector, GuardDuty, WAF, etc Clear understanding of current threats to Cloud infrastructure and advanced knowledge of securing such environments Experience in DevSecOps methodologies is considered a plus Experience building and deploying applications to the cloud (AWS, Azure, etc.) using Infrastructure as Code tools such as Terraform is considered a plus Expertise in container security is considered a plus Ability to work autonomously with minimum supervision and to integrate well within a team Excellent problem solving and analytical skills Ability to quickly learn new technologies in depth Benefit from: Attractive remuneration Food allowance Intellectually stimulating work environment Continuous personal development and international training opportunities
DMS Computer Recruitment
Cloud Security Engineer (AWS) - Remote - good salary + bonus
DMS Computer Recruitment
The Role: We are looking for a Cloud Security Engineer with experience on AWS, to join our growing team. The successful candidate will have an essential role in ensuring the information security of our business. You will be working in a team that is designing and building resilient and secure Cloud environments that proactively prevent security threats. You will typically have, although not essential, industry accreditations like AWS Certified Security - Specialty The main responsibilities of the position include: Design and build resilient Cloud infrastructures that are protected against security threats Develop and assess Cloud security solutions to secure systems, databases and networks Conduct assessment and make recommendations to ensure that appropriate controls are in place Gain insight into security incidents and threats by monitoring/analyzing logs and performing vulnerability assessments Participate in efforts that shape the company's security policies, procedures and standards for use in Cloud environments Create technical and managerial level security reports for Cloud-based applications and infrastructure Implement and tests network and security Disaster Recovery procedures to ensure business continuity Monitor use of sensitive data and regulates access to safeguard information Ensure the confidentiality and integrity of data during transmission, storage and processing Review violations of security procedures and discusses procedures with violators to ensure they are not repeated Provide support to end users regarding network and security related issues Main requirements: BSc/MSc in Information Security or any other related field Minimum 1 year working experience in Information Security, with proven focus in Cloud Security Deep technical knowledge of Amazon Web Services (AWS). Expertise in Microsoft Azure and Oracle Cloud will be considered an advantage Hands-on experience on AWS services such as IAM, Organizations, SSO, VPC, Transit Gateway, S3, EC2, RDS, ELB, CloudTrail, Config, Inspector, GuardDuty, WAF, etc Clear understanding of current threats to Cloud infrastructure and advanced knowledge of securing such environments Experience in DevSecOps methodologies is considered a plus Experience building and deploying applications to the cloud (AWS, Azure, etc.) using Infrastructure as Code tools such as Terraform is considered a plus Expertise in container security is considered a plus Ability to work autonomously with minimum supervision and to integrate well within a team Excellent problem solving and analytical skills Ability to quickly learn new technologies in depth Benefit from: Attractive remuneration Food allowance Intellectually stimulating work environment Continuous personal development and international training opportunities
16/06/2026
Full time
The Role: We are looking for a Cloud Security Engineer with experience on AWS, to join our growing team. The successful candidate will have an essential role in ensuring the information security of our business. You will be working in a team that is designing and building resilient and secure Cloud environments that proactively prevent security threats. You will typically have, although not essential, industry accreditations like AWS Certified Security - Specialty The main responsibilities of the position include: Design and build resilient Cloud infrastructures that are protected against security threats Develop and assess Cloud security solutions to secure systems, databases and networks Conduct assessment and make recommendations to ensure that appropriate controls are in place Gain insight into security incidents and threats by monitoring/analyzing logs and performing vulnerability assessments Participate in efforts that shape the company's security policies, procedures and standards for use in Cloud environments Create technical and managerial level security reports for Cloud-based applications and infrastructure Implement and tests network and security Disaster Recovery procedures to ensure business continuity Monitor use of sensitive data and regulates access to safeguard information Ensure the confidentiality and integrity of data during transmission, storage and processing Review violations of security procedures and discusses procedures with violators to ensure they are not repeated Provide support to end users regarding network and security related issues Main requirements: BSc/MSc in Information Security or any other related field Minimum 1 year working experience in Information Security, with proven focus in Cloud Security Deep technical knowledge of Amazon Web Services (AWS). Expertise in Microsoft Azure and Oracle Cloud will be considered an advantage Hands-on experience on AWS services such as IAM, Organizations, SSO, VPC, Transit Gateway, S3, EC2, RDS, ELB, CloudTrail, Config, Inspector, GuardDuty, WAF, etc Clear understanding of current threats to Cloud infrastructure and advanced knowledge of securing such environments Experience in DevSecOps methodologies is considered a plus Experience building and deploying applications to the cloud (AWS, Azure, etc.) using Infrastructure as Code tools such as Terraform is considered a plus Expertise in container security is considered a plus Ability to work autonomously with minimum supervision and to integrate well within a team Excellent problem solving and analytical skills Ability to quickly learn new technologies in depth Benefit from: Attractive remuneration Food allowance Intellectually stimulating work environment Continuous personal development and international training opportunities
AND Digital
Contract Tech Lead (Fullstack, Java/React)
AND Digital
Role: Technical Lead - Fullstack Rate: £500 Duration: 6 months Start Date: Early April Location: London On site requirement: 2dpw in London - City of London Office Who We Are: AND Digital are a tech company focused on accelerating digital delivery and dedicated to closing the digital skills gap. We've been helping organisations build better digital products and stronger digital teams since 2014. We believe our work should always make a remarkable impact for our clients. We do this through our regional offices (or 'Clubs') building strong relationships with our partners, so that they are always prioritised by a team within close proximity. This unique model has driven success for our clients and ourselves, evidenced by our remarkable organic growth since 2014. Today we number more than 1,300 people with Clubs all over the UK, Europe and the USA with plans for global expansion in the next couple of years. Join us - and help us fulfil our mission to close the world's digital skills gap. Role: We are seeking a Technical lead (hands on Architect and Engineering Leader) to lead on a complex modernisation programme. Your Leadership & Influence: Technology Engineering Leadership: You have a proven track record of leading complex software engineering engagements. You excel at navigating enterprise scale problem solving, turning technical challenges into opportunities. Stakeholder Management: You are a master of client facing delivery. You can translate complex architectures into tangible business value. Hands on Mindset: You are comfortable leading engagements from the front. You bring a bias for technical delivery and are ready to roll up your sleeves when it matters, helping teams succeed. Your Strategic Mindset: Quality Advocate: You take personal pride in the integrity of your work. You champion quality assurance, security, and performance as a mindset - ensuring the solutions we build for clients are robust, reliable, and respected. Industry Stewardship: You are a lifelong learner who keeps a pulse on industry standards, emerging software engineering patterns, platforms, and best practices. Your Technical Fluency: You lead by example. While your primary focus is client delivery, you maintain the technical depth required to guide work end to end from initial architecture through to production and operational run. Engineering: Full stack experience across several languages & data including; Java and React. An advanced understanding of engineering practices such as pair programming, TDD, security by design, observability, resiliency and disaster recovery, AI use in development with tools like CoPilot/Claude, and a general shift left approach. Cloud Experience: You possess expertise across the Microsoft Azure and Google Cloud ecosystem, adopting cloud native approaches like serverless and event driven architectures, and managing diverse Platform as a Service (PaaS) and Infrastructure as a Service (IaaS) workloads. Your approach is strongly guided by the Cloud Adoption Framework (CAF) and the Well Architected Framework (WAF). DevOps Practices: You are fluent in CI/CD, infrastructure as code, and container orchestration, with hands on experience across a broad technology range. Security & Governance: You understand Zero Trust architecture principles and have practical experience with compliance, FinOps, observability, BCDR, monitoring, logging, and SIEM. Architecture Design: You produce clear, considered architectural documentation, HLDs, LLDs, ADRs, and can lead solutions workshops, articulating complex ideas confidently to both technical and non technical stakeholders. Certifications: Hold, or be willing to achieve, relevant solutions focused certifications (e.g. Microsoft Certified: Azure Solutions Architect Expert, or similar). Equal Opportunities Statement We are an equal opportunity employer and welcome applications from all qualified candidates. We actively encourage applications from women, ethnic minorities, and individuals with disabilities. We consider all flexible working arrangements, subject to the requirements of the role. Where reasonable adjustments are needed, we will strive to make changes to accommodate them.
16/06/2026
Full time
Role: Technical Lead - Fullstack Rate: £500 Duration: 6 months Start Date: Early April Location: London On site requirement: 2dpw in London - City of London Office Who We Are: AND Digital are a tech company focused on accelerating digital delivery and dedicated to closing the digital skills gap. We've been helping organisations build better digital products and stronger digital teams since 2014. We believe our work should always make a remarkable impact for our clients. We do this through our regional offices (or 'Clubs') building strong relationships with our partners, so that they are always prioritised by a team within close proximity. This unique model has driven success for our clients and ourselves, evidenced by our remarkable organic growth since 2014. Today we number more than 1,300 people with Clubs all over the UK, Europe and the USA with plans for global expansion in the next couple of years. Join us - and help us fulfil our mission to close the world's digital skills gap. Role: We are seeking a Technical lead (hands on Architect and Engineering Leader) to lead on a complex modernisation programme. Your Leadership & Influence: Technology Engineering Leadership: You have a proven track record of leading complex software engineering engagements. You excel at navigating enterprise scale problem solving, turning technical challenges into opportunities. Stakeholder Management: You are a master of client facing delivery. You can translate complex architectures into tangible business value. Hands on Mindset: You are comfortable leading engagements from the front. You bring a bias for technical delivery and are ready to roll up your sleeves when it matters, helping teams succeed. Your Strategic Mindset: Quality Advocate: You take personal pride in the integrity of your work. You champion quality assurance, security, and performance as a mindset - ensuring the solutions we build for clients are robust, reliable, and respected. Industry Stewardship: You are a lifelong learner who keeps a pulse on industry standards, emerging software engineering patterns, platforms, and best practices. Your Technical Fluency: You lead by example. While your primary focus is client delivery, you maintain the technical depth required to guide work end to end from initial architecture through to production and operational run. Engineering: Full stack experience across several languages & data including; Java and React. An advanced understanding of engineering practices such as pair programming, TDD, security by design, observability, resiliency and disaster recovery, AI use in development with tools like CoPilot/Claude, and a general shift left approach. Cloud Experience: You possess expertise across the Microsoft Azure and Google Cloud ecosystem, adopting cloud native approaches like serverless and event driven architectures, and managing diverse Platform as a Service (PaaS) and Infrastructure as a Service (IaaS) workloads. Your approach is strongly guided by the Cloud Adoption Framework (CAF) and the Well Architected Framework (WAF). DevOps Practices: You are fluent in CI/CD, infrastructure as code, and container orchestration, with hands on experience across a broad technology range. Security & Governance: You understand Zero Trust architecture principles and have practical experience with compliance, FinOps, observability, BCDR, monitoring, logging, and SIEM. Architecture Design: You produce clear, considered architectural documentation, HLDs, LLDs, ADRs, and can lead solutions workshops, articulating complex ideas confidently to both technical and non technical stakeholders. Certifications: Hold, or be willing to achieve, relevant solutions focused certifications (e.g. Microsoft Certified: Azure Solutions Architect Expert, or similar). Equal Opportunities Statement We are an equal opportunity employer and welcome applications from all qualified candidates. We actively encourage applications from women, ethnic minorities, and individuals with disabilities. We consider all flexible working arrangements, subject to the requirements of the role. Where reasonable adjustments are needed, we will strive to make changes to accommodate them.
Application Security Engineer
Finova Technologies Private Limited Salford, Manchester
Application Security Engineer - Manchester Based (3 Days Hybrid) Finova is seeking a hands on Application Security Engineer to embed security into the design, build, and shipment of software across a multi cloud SaaS fintech platform. About the Role Core Responsibility: Partner closely with developers, the IAM Specialist, and the Cloud Security Engineer to ensure identity, infrastructure, and code are defended together. The Stack: Multi cloud environment spanning AWS, Azure and GCP. Applications run on .NET / ASP.NET with SQL Server backends. Key Challenge: Protect regulated financial data while defending a growing portfolio of AI powered features against a new class of application risks (prompt injection, model abuse, and training data leakage). Work Model: Highly collaborative, hands on hybrid role focused on making secure by default the path of least resistance for engineering teams. About You Experience: 4-6 years in application security, product security, or security focused software engineering within regulated environments. Framework Expertise: Strong working knowledge of .NET / ASP.NET application security (Claims based identity, ASP.NET Core authorization, data protection APIs). Security Models: Deep familiarity with OWASP Top 10, OWASP ASVS, and hands on experience leading threat modelling sessions (STRIDE/attack trees). CI/CD Pipeline Skills: Experience integrating and tuning security tools (SAST, SCA, DAST) within Azure DevOps, GitHub Actions or similar pipelines. Code Review: Confident reading and reviewing C# code to find authorization flaws, deserialization issues, or tenant isolation gaps during PRs. Core Fundamentals: Solid understanding of cryptographic primitives, API security at scale (OAuth 2.0 / OIDC, JWT pitfalls), and SaaS multi tenancy data exposure risks. Consultative Delivery: Experience working as a delivery engineer or consultant, shipping security work into messy, deadline driven customer environments. Communication: Clear communicator who can effectively coach a junior engineer, debate with a senior engineer, and explain critical risks to non technical executives. Nice to Have Fintech Background: Experience working in fintech, payments, banking or insurance environments. AI Security: Hands on experience securing AI/LLM features, prompt injection defense, and familiarity with OWASP LLM Top 10 or MITRE ATLAS. Offensive Security: An offensive security background (OSCP, OSWE or equivalent) or experience with bug bounty program design. Certifications: CSSLP, GWAPT, GWEB, CISSP or vendor specific cloud security certifications. Database Security: Experience identifying SQL Server specific application risks, including ORM misuse and stored procedure vulnerabilities. Community Contributions: Contributions to open source security tooling, CVE research, or published security writing. Key Attributes The Collaborative Builder: Thrive in shared accountability environments, working alongside infrastructure and identity specialists to build multi layered defenses. Pragmatic and Ruthless: Tune tools to protect developer workflows from noise, ensuring that every alert is a high signal, high trust finding. Curious and Adaptive: Energized by new technical frontiers, translating the emerging risks of AI endpoints and LLMs into practical engineering guardrails. Resilient Communicator: Comfortable operating in regulated environments, translating complex vulnerabilities into business context for leadership while remaining a trusted peer to developers. What Will You Be Doing? Secure SDLC & Shift Left Automation Toolchain Ownership: Own the application security toolchain end to end (SAST, SCA, DAST, secrets, container and IaC scanning) integrated into Azure DevOps and GitHub Actions. Scanner Optimization: Tune scanners to maximize high signal findings and eliminate noise so engineers trust the alerts. Early Detection: Build and maintain pre commit and pull request security checks to catch issues before code is merged. Vulnerability Management: Drive CVSS based SLAs, automated tracking and exception workflows for application layer issues across product teams. Coding Standards: Define and evolve secure coding standards for .NET / ASP.NET (input validation, cryptography, logging and authorization patterns). Threat Modelling & Secure Design Active Threat Modelling: Lead threat modelling sessions for new features using STRIDE or attack trees, turning outputs into tracked work items. Design Architecture: Review Architectural Decision Records, API designs and data flow diagrams before code is written. Developer Pairing: Provide hands on security guidance by pairing with developers on complex authorization logic, cryptographic choices or tenant isolation. Pattern Catalogues: Maintain a living catalogue of approved secure patterns and anti patterns so teams can build securely at speed. Vulnerability Management & Penetration Testing Lifecycle Management: Own the remediation lifecycle for application findings discovered via internal testing, customer reports, bug bounties and external pentests. Pentest Coordination: Scope and coordinate external penetration tests, select vendors, challenge false positives and build remediation plans. Internal Testing: Conduct manual code reviews of high risk areas, dynamic testing of new features and adversarial reviews of authorization logic. Purple Teaming: Build and run purple team exercises against internal applications to test detection and response capabilities alongside Security Operations. Application Layer Authorization (in partnership with IAM) Access Validation: Partner with the IAM Specialist to ensure RBAC/ABAC implementations behave correctly, tenant context is mandatory and defaults fail closed. ASP.NET Hardening: Review and harden authorization implementations (Claims, policies, attributes, custom middleware) and write unit/integration tests to prove isolation. Policy Design: Contribute to OPA / Rego policy design from the application side and integrate policy decision points into application code. Bug Hunting: Systematically hunt for high stakes authorization bugs such as IDOR, BOLA, broken access control and mass assignment. API & Service Security API Standards: Define and enforce standards for authentication (OAuth 2.0, mTLS), rate limiting and schema validation across REST, GraphQL and gRPC. Gateway Hardening: Partner with the Cloud Security Engineer to harden API gateway configurations, request validations and JWT validation rules. Layer 7 Protections: Implement and monitor WAF rules, bot management and anti automation controls without disrupting legitimate customer integrations. Inventory Tracking: Maintain a clear inventory of internal and external APIs, their classifications and their security postures. AI & ML Application Security AI Risk Leadership: Lead security thinking for AI features, defending against prompt injection, jailbreaks, model DoS and inference data leakage. Adversarial Testing: Design and run security testing for LLM backed endpoints and feed findings back into prompt design and guardrails. Confused Deputy Prevention: Collaborate with IAM to ensure AI endpoints cannot be weaponized to bypass direct access limitations. Data Pipeline Security: Define secure use patterns for embeddings, vector databases, RAG pipelines and feature stores to prevent tenant data leaks. Landscape Tracking: Translate evolving AI security frameworks (OWASP LLM Top 10, MITRE ATLAS) into practical engineering standards. Compliance, Evidence & Engineering Enablement Automated Evidence: Ensure application security controls satisfy SOC 2 Type II and PCI DSS requirements via automated pipeline collection. Audit Support: Support audits and customer assurance reviews by providing technical context and clear remediation narratives. Security Training: Run secure coding workshops, threat modelling enablement, and post incident learning sessions for engineers. Incident Response: Contribute to incident response for application security events through root cause analysis and blameless post mortems. What We Offer Hybrid working - work in the office with flexibility to work remotely as needed. Private medical insurance - comprehensive health cover with option to add family. Life assurance and income protection - peace of mind for the future. Family friendly policies - enhanced leave beyond maternity and paternity. Work from anywhere - approval to work abroad for up to 4 weeks each year. Flexible holiday package - 25 days paid holiday plus public holidays, with option to rebook or trade. Company pension scheme - salary exchange to save on tax and build a secure future. Employee assistance programme - confidential counselling helpline. Electric car scheme - brand new electric vehicle with salary sacrifice. Health cash plan - reimbursement for everyday healthcare costs. . click apply for full job details
16/06/2026
Full time
Application Security Engineer - Manchester Based (3 Days Hybrid) Finova is seeking a hands on Application Security Engineer to embed security into the design, build, and shipment of software across a multi cloud SaaS fintech platform. About the Role Core Responsibility: Partner closely with developers, the IAM Specialist, and the Cloud Security Engineer to ensure identity, infrastructure, and code are defended together. The Stack: Multi cloud environment spanning AWS, Azure and GCP. Applications run on .NET / ASP.NET with SQL Server backends. Key Challenge: Protect regulated financial data while defending a growing portfolio of AI powered features against a new class of application risks (prompt injection, model abuse, and training data leakage). Work Model: Highly collaborative, hands on hybrid role focused on making secure by default the path of least resistance for engineering teams. About You Experience: 4-6 years in application security, product security, or security focused software engineering within regulated environments. Framework Expertise: Strong working knowledge of .NET / ASP.NET application security (Claims based identity, ASP.NET Core authorization, data protection APIs). Security Models: Deep familiarity with OWASP Top 10, OWASP ASVS, and hands on experience leading threat modelling sessions (STRIDE/attack trees). CI/CD Pipeline Skills: Experience integrating and tuning security tools (SAST, SCA, DAST) within Azure DevOps, GitHub Actions or similar pipelines. Code Review: Confident reading and reviewing C# code to find authorization flaws, deserialization issues, or tenant isolation gaps during PRs. Core Fundamentals: Solid understanding of cryptographic primitives, API security at scale (OAuth 2.0 / OIDC, JWT pitfalls), and SaaS multi tenancy data exposure risks. Consultative Delivery: Experience working as a delivery engineer or consultant, shipping security work into messy, deadline driven customer environments. Communication: Clear communicator who can effectively coach a junior engineer, debate with a senior engineer, and explain critical risks to non technical executives. Nice to Have Fintech Background: Experience working in fintech, payments, banking or insurance environments. AI Security: Hands on experience securing AI/LLM features, prompt injection defense, and familiarity with OWASP LLM Top 10 or MITRE ATLAS. Offensive Security: An offensive security background (OSCP, OSWE or equivalent) or experience with bug bounty program design. Certifications: CSSLP, GWAPT, GWEB, CISSP or vendor specific cloud security certifications. Database Security: Experience identifying SQL Server specific application risks, including ORM misuse and stored procedure vulnerabilities. Community Contributions: Contributions to open source security tooling, CVE research, or published security writing. Key Attributes The Collaborative Builder: Thrive in shared accountability environments, working alongside infrastructure and identity specialists to build multi layered defenses. Pragmatic and Ruthless: Tune tools to protect developer workflows from noise, ensuring that every alert is a high signal, high trust finding. Curious and Adaptive: Energized by new technical frontiers, translating the emerging risks of AI endpoints and LLMs into practical engineering guardrails. Resilient Communicator: Comfortable operating in regulated environments, translating complex vulnerabilities into business context for leadership while remaining a trusted peer to developers. What Will You Be Doing? Secure SDLC & Shift Left Automation Toolchain Ownership: Own the application security toolchain end to end (SAST, SCA, DAST, secrets, container and IaC scanning) integrated into Azure DevOps and GitHub Actions. Scanner Optimization: Tune scanners to maximize high signal findings and eliminate noise so engineers trust the alerts. Early Detection: Build and maintain pre commit and pull request security checks to catch issues before code is merged. Vulnerability Management: Drive CVSS based SLAs, automated tracking and exception workflows for application layer issues across product teams. Coding Standards: Define and evolve secure coding standards for .NET / ASP.NET (input validation, cryptography, logging and authorization patterns). Threat Modelling & Secure Design Active Threat Modelling: Lead threat modelling sessions for new features using STRIDE or attack trees, turning outputs into tracked work items. Design Architecture: Review Architectural Decision Records, API designs and data flow diagrams before code is written. Developer Pairing: Provide hands on security guidance by pairing with developers on complex authorization logic, cryptographic choices or tenant isolation. Pattern Catalogues: Maintain a living catalogue of approved secure patterns and anti patterns so teams can build securely at speed. Vulnerability Management & Penetration Testing Lifecycle Management: Own the remediation lifecycle for application findings discovered via internal testing, customer reports, bug bounties and external pentests. Pentest Coordination: Scope and coordinate external penetration tests, select vendors, challenge false positives and build remediation plans. Internal Testing: Conduct manual code reviews of high risk areas, dynamic testing of new features and adversarial reviews of authorization logic. Purple Teaming: Build and run purple team exercises against internal applications to test detection and response capabilities alongside Security Operations. Application Layer Authorization (in partnership with IAM) Access Validation: Partner with the IAM Specialist to ensure RBAC/ABAC implementations behave correctly, tenant context is mandatory and defaults fail closed. ASP.NET Hardening: Review and harden authorization implementations (Claims, policies, attributes, custom middleware) and write unit/integration tests to prove isolation. Policy Design: Contribute to OPA / Rego policy design from the application side and integrate policy decision points into application code. Bug Hunting: Systematically hunt for high stakes authorization bugs such as IDOR, BOLA, broken access control and mass assignment. API & Service Security API Standards: Define and enforce standards for authentication (OAuth 2.0, mTLS), rate limiting and schema validation across REST, GraphQL and gRPC. Gateway Hardening: Partner with the Cloud Security Engineer to harden API gateway configurations, request validations and JWT validation rules. Layer 7 Protections: Implement and monitor WAF rules, bot management and anti automation controls without disrupting legitimate customer integrations. Inventory Tracking: Maintain a clear inventory of internal and external APIs, their classifications and their security postures. AI & ML Application Security AI Risk Leadership: Lead security thinking for AI features, defending against prompt injection, jailbreaks, model DoS and inference data leakage. Adversarial Testing: Design and run security testing for LLM backed endpoints and feed findings back into prompt design and guardrails. Confused Deputy Prevention: Collaborate with IAM to ensure AI endpoints cannot be weaponized to bypass direct access limitations. Data Pipeline Security: Define secure use patterns for embeddings, vector databases, RAG pipelines and feature stores to prevent tenant data leaks. Landscape Tracking: Translate evolving AI security frameworks (OWASP LLM Top 10, MITRE ATLAS) into practical engineering standards. Compliance, Evidence & Engineering Enablement Automated Evidence: Ensure application security controls satisfy SOC 2 Type II and PCI DSS requirements via automated pipeline collection. Audit Support: Support audits and customer assurance reviews by providing technical context and clear remediation narratives. Security Training: Run secure coding workshops, threat modelling enablement, and post incident learning sessions for engineers. Incident Response: Contribute to incident response for application security events through root cause analysis and blameless post mortems. What We Offer Hybrid working - work in the office with flexibility to work remotely as needed. Private medical insurance - comprehensive health cover with option to add family. Life assurance and income protection - peace of mind for the future. Family friendly policies - enhanced leave beyond maternity and paternity. Work from anywhere - approval to work abroad for up to 4 weeks each year. Flexible holiday package - 25 days paid holiday plus public holidays, with option to rebook or trade. Company pension scheme - salary exchange to save on tax and build a secure future. Employee assistance programme - confidential counselling helpline. Electric car scheme - brand new electric vehicle with salary sacrifice. Health cash plan - reimbursement for everyday healthcare costs. . click apply for full job details
BUPA
DevOps Engineer
BUPA Staines, Middlesex
DevOps Engineer Salary: From £65,900 plus Bonus and benefits. Contract type: Permanent. Shift pattern: Full time - 37.5 hours per week. Location: Hybrid/ Staines (TW18 3DZ) - days in office per week. Job Overview Join our DevOps Support team and play a key role in driving innovation at Bupa. You'll champion DevOps delivery, own and enhance reusable pipelines, and work closely with multiple delivery teams to provide infrastructure and cloud services using Terraform and automation. You'll offer expert technical support to your business unit, ensuring incidents and problems are resolved in line with agreed SLAs and OLAs. From code deployments to infrastructure rebuilds across production and non production environments, you'll keep things running smoothly. As a technical focal point during major incidents, you'll bring clarity and solutions when it matters most. Key Responsibilities Manage infrastructure hosted on Azure, GCP and AWS cloud platforms. Manage and support Web Application Firewall configuration. Improve security and remediate vulnerabilities across cloud platforms, web applications and WAF technologies. Ensure that the cloud hosted infrastructure and services adhere to agreed SLA and OLA. Manage tools and processes for CI/CD. Manage automation processes. Provide support services to deliver the required system availability, reliability and performance necessary to underpin business operations. Provide 2nd line application support that includes "Fix on Fail", management of defects and change requests, support requests, proactive performance monitoring and management. Key Skills & Qualifications Significant experience in technology development and management with a strong focus on value and service. Strong technical background, understanding the challenges of managing, maintaining and delivering IT services. Strong communication and influencing abilities; able to engage with senior stakeholders internally and with supplier organisations. Ability to understand the challenges and dependencies of peers. Experienced in managing and supporting web and API environments. Experienced in working with CDN and WAF technologies such as Cloudflare and Akamai. Experience in building, maintaining and supporting high availability environments. Proven experience working in a DevOps/SRE team or a similar multi skilled, technically demanding environment. Proficiency or familiarity with CI/CD tools, especially Azure DevOps and/or GitHub. Competence in Azure, GCP and multi cloud disciplines, including a solid understanding of cloud networking and cloud security principles. Hands on experience with Terraform, Terragrunt, Docker, Kubernetes, PowerShell, Python or other scripting languages. Familiarity with Microsoft SQL Server, MySQL or other database technologies. Knowledge of content management systems (CMS) - preferably Sitecore and/or Silverstripe. Benefits 25 days holiday, increasing through length of service, with option to buy or sell Bupa health insurance as a benefit in kind. Enhanced pension plan and life insurance. Onsite gyms or local discounts where no onsite gym available. Various other benefits and online discounts. EEO Statement Bupa is a Level2 Disability Confident Employer. We aim to offer an interview/assessment to every disabled applicant who meets the minimum criteria for the role and will make reasonable adjustments as part of our recruitment process for anyone that needs them.
16/06/2026
Full time
DevOps Engineer Salary: From £65,900 plus Bonus and benefits. Contract type: Permanent. Shift pattern: Full time - 37.5 hours per week. Location: Hybrid/ Staines (TW18 3DZ) - days in office per week. Job Overview Join our DevOps Support team and play a key role in driving innovation at Bupa. You'll champion DevOps delivery, own and enhance reusable pipelines, and work closely with multiple delivery teams to provide infrastructure and cloud services using Terraform and automation. You'll offer expert technical support to your business unit, ensuring incidents and problems are resolved in line with agreed SLAs and OLAs. From code deployments to infrastructure rebuilds across production and non production environments, you'll keep things running smoothly. As a technical focal point during major incidents, you'll bring clarity and solutions when it matters most. Key Responsibilities Manage infrastructure hosted on Azure, GCP and AWS cloud platforms. Manage and support Web Application Firewall configuration. Improve security and remediate vulnerabilities across cloud platforms, web applications and WAF technologies. Ensure that the cloud hosted infrastructure and services adhere to agreed SLA and OLA. Manage tools and processes for CI/CD. Manage automation processes. Provide support services to deliver the required system availability, reliability and performance necessary to underpin business operations. Provide 2nd line application support that includes "Fix on Fail", management of defects and change requests, support requests, proactive performance monitoring and management. Key Skills & Qualifications Significant experience in technology development and management with a strong focus on value and service. Strong technical background, understanding the challenges of managing, maintaining and delivering IT services. Strong communication and influencing abilities; able to engage with senior stakeholders internally and with supplier organisations. Ability to understand the challenges and dependencies of peers. Experienced in managing and supporting web and API environments. Experienced in working with CDN and WAF technologies such as Cloudflare and Akamai. Experience in building, maintaining and supporting high availability environments. Proven experience working in a DevOps/SRE team or a similar multi skilled, technically demanding environment. Proficiency or familiarity with CI/CD tools, especially Azure DevOps and/or GitHub. Competence in Azure, GCP and multi cloud disciplines, including a solid understanding of cloud networking and cloud security principles. Hands on experience with Terraform, Terragrunt, Docker, Kubernetes, PowerShell, Python or other scripting languages. Familiarity with Microsoft SQL Server, MySQL or other database technologies. Knowledge of content management systems (CMS) - preferably Sitecore and/or Silverstripe. Benefits 25 days holiday, increasing through length of service, with option to buy or sell Bupa health insurance as a benefit in kind. Enhanced pension plan and life insurance. Onsite gyms or local discounts where no onsite gym available. Various other benefits and online discounts. EEO Statement Bupa is a Level2 Disability Confident Employer. We aim to offer an interview/assessment to every disabled applicant who meets the minimum criteria for the role and will make reasonable adjustments as part of our recruitment process for anyone that needs them.
Senior Site Reliability Engineer / Technical Architect
United States Digital Space LLC Winnersh, Berkshire
We are looking for a highly experienced Senior Site Reliability Engineer / Technical Architect with strong hands on expertise in cloud infrastructure, Kubernetes, platform engineering, automation, observability, and AI assisted engineering. The ideal candidate will have deep experience designing, building, and operating reliable, scalable, and secure infrastructure across AWS, Azure, Kubernetes, Terraform, CI/CD, GitOps, and monitoring platforms. This role requires strong ownership of production systems, incident management, automation, infrastructure standards, and collaboration with engineering, security, and platform teams. Key Responsibilities Design, build, and maintain scalable cloud infrastructure across AWS and Azure. Manage Kubernetes platforms including EKS, AKS, Helm, Argo CD, and GitOps workflows. Create reusable Terraform, Ansible, and automation patterns for infrastructure provisioning. Define and improve SLOs, SLIs, monitoring, alerting, dashboards, and incident response processes. Implement observability using tools such as Datadog, Grafana, Prometheus, Loki, Tempo, OpenTelemetry, Splunk, and related platforms. Improve platform reliability, reduce operational toil, and support root cause analysis during incidents. Support secure infrastructure access using IAM, Okta, Teleport, RBAC, MFA, TLS/PKI, Secrets Manager, and cloud security controls. Work with CI/CD tools such as Jenkins, GitLab CI, GitHub Actions, and Argo CD to improve deployment reliability. Support Linux, Windows Server, Active Directory, DNS, DHCP, LDAP, and Group Policy environments. Manage large-scale GPU/HPC workloads using SLURM, PySpark, anomaly detection pipelines, and bare metal provisioning with IPMI and PXE boot. Apply AI assisted engineering tools such as Cursor, Claude Code, GitHub Copilot, AWS Bedrock, Ollama, Datadog Watchdog, and Grafana AI Agents to improve automation, troubleshooting, and delivery. Partner with engineering, security, and business teams to turn operational and regulatory requirements into practical platform standards. Required Skills Strong experience in Site Reliability Engineering, DevOps, Cloud Infrastructure, or Platform Engineering. Hands on experience with AWS services such as EC2, EKS, ECS, Lambda, RDS, S3, VPC, CloudFront, Route 53, IAM, KMS, WAF, and Secrets Manager. Experience with Azure services including AKS, Virtual Machines, Virtual Networks, Storage Accounts, Load Balancer, Azure Monitor, and Entra ID. Strong Kubernetes, Docker, Helm, Terraform, Ansible, and GitOps experience. Good scripting and automation skills using Python, Bash, or similar languages. Strong monitoring and observability experience with Datadog, Grafana, Prometheus, Loki, Tempo, OpenTelemetry, Splunk, or Nagios. Experience with incident response, production support, root cause analysis, capacity planning, cost optimisation, and reliability improvement. Good understanding of networking, DNS, DHCP, LDAP, load balancers, firewalls, CDN, VPN, and security controls. Experience working in regulated, high availability, or large scale production environments. Preferred Certifications Certified Kubernetes Administrator AWS Certified Solutions Architect Red Hat Certified Engineer Microsoft Certified Solutions Expert CCNA Routing and Switching / Security Candidate Profile This role is suitable for a senior engineer or architect with 15+ years of experience across SRE, cloud, DevOps, infrastructure, and platform engineering. The candidate should be comfortable working across both hands on technical delivery and architecture level decision making, with a strong focus on reliability, automation, security, and developer productivity. Job Type: Full time Pay: £45,000.00 per year Benefits Flexitime Licence/Certification Certified Kubernetes Administrator (required) Work Location: In person
16/06/2026
Full time
We are looking for a highly experienced Senior Site Reliability Engineer / Technical Architect with strong hands on expertise in cloud infrastructure, Kubernetes, platform engineering, automation, observability, and AI assisted engineering. The ideal candidate will have deep experience designing, building, and operating reliable, scalable, and secure infrastructure across AWS, Azure, Kubernetes, Terraform, CI/CD, GitOps, and monitoring platforms. This role requires strong ownership of production systems, incident management, automation, infrastructure standards, and collaboration with engineering, security, and platform teams. Key Responsibilities Design, build, and maintain scalable cloud infrastructure across AWS and Azure. Manage Kubernetes platforms including EKS, AKS, Helm, Argo CD, and GitOps workflows. Create reusable Terraform, Ansible, and automation patterns for infrastructure provisioning. Define and improve SLOs, SLIs, monitoring, alerting, dashboards, and incident response processes. Implement observability using tools such as Datadog, Grafana, Prometheus, Loki, Tempo, OpenTelemetry, Splunk, and related platforms. Improve platform reliability, reduce operational toil, and support root cause analysis during incidents. Support secure infrastructure access using IAM, Okta, Teleport, RBAC, MFA, TLS/PKI, Secrets Manager, and cloud security controls. Work with CI/CD tools such as Jenkins, GitLab CI, GitHub Actions, and Argo CD to improve deployment reliability. Support Linux, Windows Server, Active Directory, DNS, DHCP, LDAP, and Group Policy environments. Manage large-scale GPU/HPC workloads using SLURM, PySpark, anomaly detection pipelines, and bare metal provisioning with IPMI and PXE boot. Apply AI assisted engineering tools such as Cursor, Claude Code, GitHub Copilot, AWS Bedrock, Ollama, Datadog Watchdog, and Grafana AI Agents to improve automation, troubleshooting, and delivery. Partner with engineering, security, and business teams to turn operational and regulatory requirements into practical platform standards. Required Skills Strong experience in Site Reliability Engineering, DevOps, Cloud Infrastructure, or Platform Engineering. Hands on experience with AWS services such as EC2, EKS, ECS, Lambda, RDS, S3, VPC, CloudFront, Route 53, IAM, KMS, WAF, and Secrets Manager. Experience with Azure services including AKS, Virtual Machines, Virtual Networks, Storage Accounts, Load Balancer, Azure Monitor, and Entra ID. Strong Kubernetes, Docker, Helm, Terraform, Ansible, and GitOps experience. Good scripting and automation skills using Python, Bash, or similar languages. Strong monitoring and observability experience with Datadog, Grafana, Prometheus, Loki, Tempo, OpenTelemetry, Splunk, or Nagios. Experience with incident response, production support, root cause analysis, capacity planning, cost optimisation, and reliability improvement. Good understanding of networking, DNS, DHCP, LDAP, load balancers, firewalls, CDN, VPN, and security controls. Experience working in regulated, high availability, or large scale production environments. Preferred Certifications Certified Kubernetes Administrator AWS Certified Solutions Architect Red Hat Certified Engineer Microsoft Certified Solutions Expert CCNA Routing and Switching / Security Candidate Profile This role is suitable for a senior engineer or architect with 15+ years of experience across SRE, cloud, DevOps, infrastructure, and platform engineering. The candidate should be comfortable working across both hands on technical delivery and architecture level decision making, with a strong focus on reliability, automation, security, and developer productivity. Job Type: Full time Pay: £45,000.00 per year Benefits Flexitime Licence/Certification Certified Kubernetes Administrator (required) Work Location: In person
WAF Infrastructure Engineer: Automate, Scale & Secure
Lloyds Bank plc Manchester, Lancashire
Lloyds Bank plc seeks an Infrastructure Engineer (WAF) responsible for designing and operating Web Application Firewall platforms to secure critical services. The role involves working with Infrastructure-as-Code practices to improve platform resilience and security. Candidates should have hands-on experience with WAF technologies, strong scripting skills (Python preferred), and a solid understanding of web fundamental concepts. This hybrid role includes a salary range of £48,987 - £55,000 annually along with generous benefits.
16/06/2026
Full time
Lloyds Bank plc seeks an Infrastructure Engineer (WAF) responsible for designing and operating Web Application Firewall platforms to secure critical services. The role involves working with Infrastructure-as-Code practices to improve platform resilience and security. Candidates should have hands-on experience with WAF technologies, strong scripting skills (Python preferred), and a solid understanding of web fundamental concepts. This hybrid role includes a salary range of £48,987 - £55,000 annually along with generous benefits.
Senior or Principal MMIC Engineer
Leonardo UK Ltd Edinburgh, Midlothian
Overview Job Description: Salary: Senior: £45,200 to £61,950 / Principal: £53,300 to £71,400. Leonardo UK operates a grade-based salary framework with broad bands. The salary range shown reflects the approved grade band for this role, or a narrower hiring range published within that band, and is benchmarked against the external market. Exceptions above the standard range are managed through governance controls to protect internal equity. Based at our Edinburgh site, you'll collaborate with some of the brightest minds in the industry, turning cutting edge ideas into real world solutions. We're seeking talented, driven and experienced Senior/Principal Microwave Engineers to join our growing hardware engineering community within our world class radar division. Responsibilities Create high quality and robust MMIC designs using Gallium Nitride (GaN) or Gallium Arsenide (GaAs) semiconductor technologies. Perform circuit design including High Power Amplifiers, Low Noise Amplifiers, Attenuators, Phase Shifters, Switches, Oscillators, etc. Prepare robust manufacturing data packs and provide technical support to sub-contracts and engineering interface with external foundries. Ensure design reviews are planned, executed and completed successfully. Conduct RF on wafer and "chip on board" testing of your designs including debugging, and performance verification to ensure the requirements are met. Collaborate with cross-disciplinary teams - mechanical, systems, test and manufacture - to ensure seamless integration of your MMIC designs into our larger systems. Mentor early career engineers and contribute to technical reviews and design standards. What you'll bring / Qualifications Strong command of RF circuit design, microwave engineering, and electromagnetic theory, with the problem-solving mindset and attention to detail needed to tackle complex technical challenges. A curiosity for emerging technologies, enthusiasm for the defence and space sectors, and adaptability to new methods and tools. First or second degree (BSc, BEng, MEng, MSc, PhD, EngD) in Electrical & Electronic Engineering (preferable) or related science (e.g. Physics). Proven experience (3 years +) in MMIC circuit design and a strong understanding of microwave techniques and electromagnetic theory. Proficiency in using commercial software tools for RF analysis/simulation such as Keysight ADS, AWR Microwave Office & CST Microwave Studio. Hands-on experience in RF & Microwave measurement techniques such as Vector Network Analysis, Spectrum Analysis, etc. Awareness of requirements management, ideally using tools such as IBM Doors. This is not an exhaustive list, and we are keen to hear from you even if you might not have experience in all the above. The most important skill is a good attitude and willingness to learn. Security Clearance This role is subject to pre-employment screening in line with the UK Government's Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) may apply, which could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: Why join us We offer a comprehensive, company-funded benefits package that supports your wellbeing, career development, and work-life balance. Highlights include: Time to Recharge: generous leave with the opportunity to accrue up to 12 additional flexi-days each year. Secure your Future: up to 15% employer contribution to our pension scheme. Your Wellbeing Matters: free access to mental health support, financial advice, and employee-led networks championing inclusion and diversity. Rewarding Performance: bonus scheme for employees at management level and below. Never Stop Learning: free access to 4,000+ online courses via Coursera and LinkedIn Learning. Refer a friend: financial reward through our referral programme. Flexible working: hybrid options. Part-time opportunities can be discussed. Leonardo is a global leader in Aerospace, Defence, and Security. Headquartered in Italy, we employ over 53,000 people worldwide. We are committed to building an inclusive, accessible, and welcoming workplace. If you have accessibility requirements during the recruitment process, please let us know.
16/06/2026
Full time
Overview Job Description: Salary: Senior: £45,200 to £61,950 / Principal: £53,300 to £71,400. Leonardo UK operates a grade-based salary framework with broad bands. The salary range shown reflects the approved grade band for this role, or a narrower hiring range published within that band, and is benchmarked against the external market. Exceptions above the standard range are managed through governance controls to protect internal equity. Based at our Edinburgh site, you'll collaborate with some of the brightest minds in the industry, turning cutting edge ideas into real world solutions. We're seeking talented, driven and experienced Senior/Principal Microwave Engineers to join our growing hardware engineering community within our world class radar division. Responsibilities Create high quality and robust MMIC designs using Gallium Nitride (GaN) or Gallium Arsenide (GaAs) semiconductor technologies. Perform circuit design including High Power Amplifiers, Low Noise Amplifiers, Attenuators, Phase Shifters, Switches, Oscillators, etc. Prepare robust manufacturing data packs and provide technical support to sub-contracts and engineering interface with external foundries. Ensure design reviews are planned, executed and completed successfully. Conduct RF on wafer and "chip on board" testing of your designs including debugging, and performance verification to ensure the requirements are met. Collaborate with cross-disciplinary teams - mechanical, systems, test and manufacture - to ensure seamless integration of your MMIC designs into our larger systems. Mentor early career engineers and contribute to technical reviews and design standards. What you'll bring / Qualifications Strong command of RF circuit design, microwave engineering, and electromagnetic theory, with the problem-solving mindset and attention to detail needed to tackle complex technical challenges. A curiosity for emerging technologies, enthusiasm for the defence and space sectors, and adaptability to new methods and tools. First or second degree (BSc, BEng, MEng, MSc, PhD, EngD) in Electrical & Electronic Engineering (preferable) or related science (e.g. Physics). Proven experience (3 years +) in MMIC circuit design and a strong understanding of microwave techniques and electromagnetic theory. Proficiency in using commercial software tools for RF analysis/simulation such as Keysight ADS, AWR Microwave Office & CST Microwave Studio. Hands-on experience in RF & Microwave measurement techniques such as Vector Network Analysis, Spectrum Analysis, etc. Awareness of requirements management, ideally using tools such as IBM Doors. This is not an exhaustive list, and we are keen to hear from you even if you might not have experience in all the above. The most important skill is a good attitude and willingness to learn. Security Clearance This role is subject to pre-employment screening in line with the UK Government's Baseline Personnel Security Standard (BPSS). An additional range of Personnel Security Controls referred to as National Security Vetting (NSV) may apply, which could include meeting the eligibility requirements for The Security Check (SC) or Developed Vetting (DV). For more information and guidance please visit: Why join us We offer a comprehensive, company-funded benefits package that supports your wellbeing, career development, and work-life balance. Highlights include: Time to Recharge: generous leave with the opportunity to accrue up to 12 additional flexi-days each year. Secure your Future: up to 15% employer contribution to our pension scheme. Your Wellbeing Matters: free access to mental health support, financial advice, and employee-led networks championing inclusion and diversity. Rewarding Performance: bonus scheme for employees at management level and below. Never Stop Learning: free access to 4,000+ online courses via Coursera and LinkedIn Learning. Refer a friend: financial reward through our referral programme. Flexible working: hybrid options. Part-time opportunities can be discussed. Leonardo is a global leader in Aerospace, Defence, and Security. Headquartered in Italy, we employ over 53,000 people worldwide. We are committed to building an inclusive, accessible, and welcoming workplace. If you have accessibility requirements during the recruitment process, please let us know.
Security Researcher - Bot Detection Adversarial Research
Jobgether
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Researcher - Bot Detection Adversarial Research based in United Kingdom. This is a highly technical and research-driven role focused on analyzing, simulating, and countering advanced bot detection and anti-automation systems at scale. You will work on the front line of web security and data collection, reverse engineering sophisticated protection mechanisms and developing resilient solutions that ensure reliable access to public web data. The role combines deep protocol expertise, offensive security thinking, and systems-level engineering to improve large-scale data collection infrastructure. You will contribute to building and optimizing HTTP clients, exploring emerging anti-bot technologies, and identifying new patterns that impact collection performance. Operating in a fast-evolving security environment, you will have significant autonomy to shape research direction and technical approaches. This position is ideal for someone who thrives on complex adversarial challenges and cutting edge web security research. Accountabilities Conduct advanced research on anti-bot systems, web protection technologies, and mechanisms that block large-scale data collection. Design, build, and improve HTTP client infrastructure to ensure reliable and efficient web data acquisition at scale. Reverse engineer adversarial systems, including fingerprinting techniques and bot mitigation strategies, to identify weaknesses and bypass mechanisms. Monitor emerging web standards, protocols, and security technologies that may impact data collection capabilities. Develop and refine methods for simulating real-world adversaries against anti-bot systems to evaluate system resilience. Contribute to the evolution of large-scale data collection platforms through research-driven engineering improvements. Collaborate with engineering and research teams to translate findings into production ready solutions. Requirements 5+ years of experience in R&D, security research, software engineering, or testing roles in complex technical environments. Strong understanding of HTTP and TLS protocols and how they are used and manipulated in real-world systems. Experience in at least two of the following areas: programming in JavaScript, TypeScript, Python, or C++; penetration testing or offensive security (e.g., OSCP, OSEP); web or mobile security research; reverse engineering (including JS deobfuscation or binary analysis); malware analysis; or anti bot/WAF/DDoS system development. Hands on experience with reverse engineering techniques and adversarial system analysis. Familiarity with anti bot technologies, web security tools, or large-scale protection systems is a strong advantage. Strong analytical mindset with the ability to break down complex systems and identify weaknesses. Fluent English communication skills, both written and verbal. Experience working in web security or anti bot-focused environments is highly desirable. Benefits Competitive compensation aligned with experience and technical expertise. Fully remote work environment with global team collaboration. Opportunity to work on cutting edge adversarial security and web scale systems. High level of autonomy and ownership over research direction and technical decisions. Exposure to complex, real world security challenges at massive scale. Collaborative and technically strong research and engineering culture. Opportunity to directly influence the evolution of large-scale data collection systems.
16/06/2026
Full time
This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Security Researcher - Bot Detection Adversarial Research based in United Kingdom. This is a highly technical and research-driven role focused on analyzing, simulating, and countering advanced bot detection and anti-automation systems at scale. You will work on the front line of web security and data collection, reverse engineering sophisticated protection mechanisms and developing resilient solutions that ensure reliable access to public web data. The role combines deep protocol expertise, offensive security thinking, and systems-level engineering to improve large-scale data collection infrastructure. You will contribute to building and optimizing HTTP clients, exploring emerging anti-bot technologies, and identifying new patterns that impact collection performance. Operating in a fast-evolving security environment, you will have significant autonomy to shape research direction and technical approaches. This position is ideal for someone who thrives on complex adversarial challenges and cutting edge web security research. Accountabilities Conduct advanced research on anti-bot systems, web protection technologies, and mechanisms that block large-scale data collection. Design, build, and improve HTTP client infrastructure to ensure reliable and efficient web data acquisition at scale. Reverse engineer adversarial systems, including fingerprinting techniques and bot mitigation strategies, to identify weaknesses and bypass mechanisms. Monitor emerging web standards, protocols, and security technologies that may impact data collection capabilities. Develop and refine methods for simulating real-world adversaries against anti-bot systems to evaluate system resilience. Contribute to the evolution of large-scale data collection platforms through research-driven engineering improvements. Collaborate with engineering and research teams to translate findings into production ready solutions. Requirements 5+ years of experience in R&D, security research, software engineering, or testing roles in complex technical environments. Strong understanding of HTTP and TLS protocols and how they are used and manipulated in real-world systems. Experience in at least two of the following areas: programming in JavaScript, TypeScript, Python, or C++; penetration testing or offensive security (e.g., OSCP, OSEP); web or mobile security research; reverse engineering (including JS deobfuscation or binary analysis); malware analysis; or anti bot/WAF/DDoS system development. Hands on experience with reverse engineering techniques and adversarial system analysis. Familiarity with anti bot technologies, web security tools, or large-scale protection systems is a strong advantage. Strong analytical mindset with the ability to break down complex systems and identify weaknesses. Fluent English communication skills, both written and verbal. Experience working in web security or anti bot-focused environments is highly desirable. Benefits Competitive compensation aligned with experience and technical expertise. Fully remote work environment with global team collaboration. Opportunity to work on cutting edge adversarial security and web scale systems. High level of autonomy and ownership over research direction and technical decisions. Exposure to complex, real world security challenges at massive scale. Collaborative and technically strong research and engineering culture. Opportunity to directly influence the evolution of large-scale data collection systems.
Principal Security Strategist
Cloud Software Group
About this team The Strategic Security Services team is expanding within Citrix. Our mission is to proactively harden and protect our most strategic customers. We act as "white-glove" security partners for the world's most complex financial, healthcare, government, and critical infrastructure organizations. We are a team of deeply technical, risk-aware experts whose sole focus is to make these customers demonstrably more secure, reduce their risk, and in turn, protect their business. Position Overview As a Principal Security Strategist, you will be the primary security partner and advocate for a dedicated portfolio of strategic customers. You will leverage your deep expertise in the Citrix platform, including Citrix Virtual Apps and Desktops (CVAD) and NetScaler, to guide your customers through a continuous security improvement journey. This is not a traditional consulting role. You are a long-term, relationship-based advisor. Your goal is to move beyond reactive problem-solving and drive a proactive security posture through hands on guidance, risk management, and strategic education. You will be your customers' trusted guide for security, from architecture and configuration to incident coordination. What You'll Be Doing Serve as the named, high touch security expert and security point of contact for your assigned customers. Collaborate closely with the Account Technical Specialist (ATS) and other internal teams to ensure a unified customer experience. Conduct security assessments, design reviews, and hardening workshops for Citrix customers. Develop and maintain a prioritized Remediation Roadmap for each customer, and drive them toward execution. Leverage and drive adoption of product telemetry to create and review customer facing dashboards. Report on security posture, risk reduction, and month over month improvements, culminating in an annual Security Executive Briefing. Deliver security focused educational content, including workshops, threat modeling sessions, and tabletop exercises to test customer incident response plans. Contribute to our webinars and newsletters to provide security information at scale. Act as the primary coordinator and approver for third party security services during a critical security bulletin or customer incident. Act as the "voice of the customer" for security, providing direct, actionable feedback to our Product and Engineering teams to make our core products more secure. Basic Qualifications 8+ years of experience in a senior, customer facing technical role (e.g., Security Architect, Principal Consultant, or Senior Solutions Engineer). Deep, demonstrable expertise in the architecture, security, and hardening of Citrix Virtual Apps and Desktops (CVAD). Strong foundational knowledge of NetScaler (ADC) architecture, including Gateway, Authentication (nFactor), and WAF. Broad, practical knowledge of IT security principles: Identity and Access Management (IAM), network security (firewalls, segmentation), application security, logging/SIEM, and risk management. Exceptional communication and presentation skills. You must be able to explain complex technical risks to both C level executives and senior engineers. Proven ability to manage complex, high pressure customer situations with sound, risk aware judgment. Ability to travel to customer sites, conferences, training and internal meetings. Preferred Qualifications Relevant security certifications (CISSP, CISM, CISA, or similar). Advanced expertise in NetScaler, particularly NetScaler Console Security Advisory and Application Firewall (WAF). Experience in one or more of our key customer verticals (Financial Services, Healthcare, Government). Experience delivering tabletop exercises, threat modeling, or security workshops. Experience with public cloud (Azure, AWS, GCP) security and architecture. Equal Employment Opportunity Cloud Software Group is firmly committed to Equal Employment Opportunity (EEO) and to compliance with all federal, state and local laws that prohibit employment discrimination. All qualified applicants will receive consideration for employment without regard to age, race, color, creed, sex or gender, sexual orientation, gender identity, gender expression, ethnicity, national origin, ancestry, citizenship, religion, genetic carrier status, disability, pregnancy, childbirth or related medical conditions (including lactation status), marital status, military service, protected veteran status, political activity or affiliation, taking or requesting statutorily protected leave and other protected classifications.
16/06/2026
Full time
About this team The Strategic Security Services team is expanding within Citrix. Our mission is to proactively harden and protect our most strategic customers. We act as "white-glove" security partners for the world's most complex financial, healthcare, government, and critical infrastructure organizations. We are a team of deeply technical, risk-aware experts whose sole focus is to make these customers demonstrably more secure, reduce their risk, and in turn, protect their business. Position Overview As a Principal Security Strategist, you will be the primary security partner and advocate for a dedicated portfolio of strategic customers. You will leverage your deep expertise in the Citrix platform, including Citrix Virtual Apps and Desktops (CVAD) and NetScaler, to guide your customers through a continuous security improvement journey. This is not a traditional consulting role. You are a long-term, relationship-based advisor. Your goal is to move beyond reactive problem-solving and drive a proactive security posture through hands on guidance, risk management, and strategic education. You will be your customers' trusted guide for security, from architecture and configuration to incident coordination. What You'll Be Doing Serve as the named, high touch security expert and security point of contact for your assigned customers. Collaborate closely with the Account Technical Specialist (ATS) and other internal teams to ensure a unified customer experience. Conduct security assessments, design reviews, and hardening workshops for Citrix customers. Develop and maintain a prioritized Remediation Roadmap for each customer, and drive them toward execution. Leverage and drive adoption of product telemetry to create and review customer facing dashboards. Report on security posture, risk reduction, and month over month improvements, culminating in an annual Security Executive Briefing. Deliver security focused educational content, including workshops, threat modeling sessions, and tabletop exercises to test customer incident response plans. Contribute to our webinars and newsletters to provide security information at scale. Act as the primary coordinator and approver for third party security services during a critical security bulletin or customer incident. Act as the "voice of the customer" for security, providing direct, actionable feedback to our Product and Engineering teams to make our core products more secure. Basic Qualifications 8+ years of experience in a senior, customer facing technical role (e.g., Security Architect, Principal Consultant, or Senior Solutions Engineer). Deep, demonstrable expertise in the architecture, security, and hardening of Citrix Virtual Apps and Desktops (CVAD). Strong foundational knowledge of NetScaler (ADC) architecture, including Gateway, Authentication (nFactor), and WAF. Broad, practical knowledge of IT security principles: Identity and Access Management (IAM), network security (firewalls, segmentation), application security, logging/SIEM, and risk management. Exceptional communication and presentation skills. You must be able to explain complex technical risks to both C level executives and senior engineers. Proven ability to manage complex, high pressure customer situations with sound, risk aware judgment. Ability to travel to customer sites, conferences, training and internal meetings. Preferred Qualifications Relevant security certifications (CISSP, CISM, CISA, or similar). Advanced expertise in NetScaler, particularly NetScaler Console Security Advisory and Application Firewall (WAF). Experience in one or more of our key customer verticals (Financial Services, Healthcare, Government). Experience delivering tabletop exercises, threat modeling, or security workshops. Experience with public cloud (Azure, AWS, GCP) security and architecture. Equal Employment Opportunity Cloud Software Group is firmly committed to Equal Employment Opportunity (EEO) and to compliance with all federal, state and local laws that prohibit employment discrimination. All qualified applicants will receive consideration for employment without regard to age, race, color, creed, sex or gender, sexual orientation, gender identity, gender expression, ethnicity, national origin, ancestry, citizenship, religion, genetic carrier status, disability, pregnancy, childbirth or related medical conditions (including lactation status), marital status, military service, protected veteran status, political activity or affiliation, taking or requesting statutorily protected leave and other protected classifications.
Network Security Architect - 11603SR5
Proactive.IT Appointments Limited Bristol, Gloucestershire
11603SR5 £70k - 75k per year + Bonus + Brilliant Benefits Network Security Architect Our client is urgently looking for an experienced Network Security Architect to join their team on a permanent basis. Please note, the role is on site 5 days per week in Oxfordshire. There is flexible working hours and an earlier finish on a Friday. Remote working may be granted on occasion. This is a global role with an initial focus around Network segmentation. You will improve standards across the business and lead technical projects and work closely with technical colleagues and vendors. The current tech stack includes but is not limited to Fortigate, Cisco, SD Wan and Palo Alto. You will be rewarded with an excellent salary, as well as a brilliant benefits package including bonus (15%), annual leave, flexible working hours, pension scheme (matched up top 9%), life assurance, private medical, income protection, on site canteen and gym and many, many more perks! Network Security Architect - Key Skills 10+ years hands on experience in network engineering and architecture, with at least 3+ years specialising in large scale network segmentation 5+ years hands on experience implementing and managing industry leading network security solutions (NGFWs, NDR, SASE, CASB, WAF, NAC, ZTNA) Deep expertise in core networking technologies (SDWAN, MPLS, VPN, IPSec, VLANs etc) Detailed understanding of enterprise network transport protocols (TCP, UDP, ICMP, ARP), infrastructure protocols (DNS, DHCP, BGP, SNMP), common application protocols (SMB, RDP, HTTP, FTP etc) and security protocols (TLS/SSL, IPSec, SSH, SAML, OAuth etc) Proven history of identifying, assessing and remediating network related security risks/misconfigurations Strong technical knowledge of a Microsoft based enterprise IT infrastructure Experience as an architect or lead on large projects spanning multiple countries and cultures Background of defining security standards and processes in large corporate IT environments Working knowledge of Cyber Security frameworks/methodologies (such as NIST, ISO 27001, MITRE ATT&CK, Lockheed Martin Kill Chain etc) Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted. Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation. We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website
15/06/2026
Full time
11603SR5 £70k - 75k per year + Bonus + Brilliant Benefits Network Security Architect Our client is urgently looking for an experienced Network Security Architect to join their team on a permanent basis. Please note, the role is on site 5 days per week in Oxfordshire. There is flexible working hours and an earlier finish on a Friday. Remote working may be granted on occasion. This is a global role with an initial focus around Network segmentation. You will improve standards across the business and lead technical projects and work closely with technical colleagues and vendors. The current tech stack includes but is not limited to Fortigate, Cisco, SD Wan and Palo Alto. You will be rewarded with an excellent salary, as well as a brilliant benefits package including bonus (15%), annual leave, flexible working hours, pension scheme (matched up top 9%), life assurance, private medical, income protection, on site canteen and gym and many, many more perks! Network Security Architect - Key Skills 10+ years hands on experience in network engineering and architecture, with at least 3+ years specialising in large scale network segmentation 5+ years hands on experience implementing and managing industry leading network security solutions (NGFWs, NDR, SASE, CASB, WAF, NAC, ZTNA) Deep expertise in core networking technologies (SDWAN, MPLS, VPN, IPSec, VLANs etc) Detailed understanding of enterprise network transport protocols (TCP, UDP, ICMP, ARP), infrastructure protocols (DNS, DHCP, BGP, SNMP), common application protocols (SMB, RDP, HTTP, FTP etc) and security protocols (TLS/SSL, IPSec, SSH, SAML, OAuth etc) Proven history of identifying, assessing and remediating network related security risks/misconfigurations Strong technical knowledge of a Microsoft based enterprise IT infrastructure Experience as an architect or lead on large projects spanning multiple countries and cultures Background of defining security standards and processes in large corporate IT environments Working knowledge of Cyber Security frameworks/methodologies (such as NIST, ISO 27001, MITRE ATT&CK, Lockheed Martin Kill Chain etc) Due to the volume of applications received for positions, it will not be possible to respond to all applications and only applicants who are considered suitable for interview will be contacted. Proactive Appointments Limited operates as an employment agency and employment business and is an equal opportunities organisation. We take our obligations to protect your personal data very seriously. Any information provided to us will be processed as detailed in our Privacy Notice, a copy of which can be found on our website
Staff Platform Engineer
Collibra
Joining Collibra's Platform Infrastructure Engineering team Collibra's Platform Infrastructure Engineering team is responsible for the essential cloud foundation underpinning all Collibra products, reporting directly to the Senior Manager, Platform Infrastructure Engineering. Your work is vital to evolving our multi-cloud platform infrastructure strategy. You will optimize our use of Kubernetes, IaC (Terraform/Helm), and Golang automation to ensure maximum operational efficiency and resilience for Collibra. We are a geographically diverse team guided by our value of Embracing and Driving Change, which translates into a team that never settles long for good enough, offering you a dynamic environment to advance your technical skills and make a tangible difference. Staff Platform Engineers at Collibra are responsible for Lead the design and evolution of the cloud platform across AWS and GCP (Kubernetes, networking, and core infrastructure) in order to enable product teams to build, deploy, and operate services with speed, consistency, and minimal friction Build and standardize platform capabilities (CI/CD, observability, service templates, and golden paths) in order to reduce cognitive load and accelerate developer productivity across the organization Develop and operate shared data platform services (operators in Go, Kafka, Neo4j, and related infrastructure) in order to provide scalable, reliable, and self service data capabilities for product and analytics teams Partner with product engineering, security, and SRE teams in order to drive adoption of platform best practices and ensure secure, compliant, and resilient architectures across AWS and GCP Mentor other engineers, champion technical excellence, and drive cloud cost optimization through automation. You have Production experience managing infrastructure on a major cloud platform (AWS or GCP). Hands on experience operating Kubernetes and service mesh technologies (preferably Istio). Strong understanding of cloud networking concepts (VPCs, routing, load balancing, WAFs, network policies). Proven experience with Infrastructure as Code (Terraform) and software development in Golang. Experience managing or supporting the underlying infrastructure for stateful applications (e.g., databases like GraphDB, kafka) on cloud platforms. Familiarity with cloud security principles (IAM, security groups). A bachelor's degree or equivalent working experience. You are Critical thinker who skillfully analyzes complex distributed systems, including intricate network flows. A proactive learner, curious about evolving technologies in cloud, container orchestration, and service mesh. Open minded and approach problems from an assumption of positive intent and demonstrate emotional intelligence. Able to communicate complex technical concepts clearly to diverse audiences and identify opportunities for simplification and automation. Able to work with a high degree of care and independence. Measures of Success Within your first month: you will Integrate with the team, understand our architecture, and make your first platform contribution. Within your third month: Build strong familiarity with the platform, team workflows, and shared services in order to begin contributing to well defined platform improvements with guidance Within your sixth month: Independently deliver production ready improvements to the internal developer platform and shared services in order to demonstrate ownership, sound technical judgment, and alignment with organizational standards Benefits at Collibra Collibra recognizes and values that everyone has different needs, interests, and life goals. We built our benefits program with flexibility in mind to support you and your loved ones through a diverse range of circumstances and life events. These flexible offerings sit on a foundation of competitive compensation, health coverage, and time off. Learn more about Collibra's benefits. We create inclusion and belonging through how we onboard, meet, connect, engage, and communicate. Learn more about diversity, equity, and inclusion at Collibra. At Collibra, we're proud to be an equal opportunity employer. We realize the key to creating a company with a world class culture and employee experience comes from who we hire and creating a workplace that celebrates everyone. With this, we proudly consider qualified applicants without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sexual orientation, pregnancy, sex, gender identity, gender expression, genetic information, physical or mental disability, HIV status, registered domestic partner status, caregiver status, marital status, veteran or military status, citizenship status or any other legally protected category. If you have a need that requires accommodation, let us know by completing our Accommodations for Applicants form.
15/06/2026
Full time
Joining Collibra's Platform Infrastructure Engineering team Collibra's Platform Infrastructure Engineering team is responsible for the essential cloud foundation underpinning all Collibra products, reporting directly to the Senior Manager, Platform Infrastructure Engineering. Your work is vital to evolving our multi-cloud platform infrastructure strategy. You will optimize our use of Kubernetes, IaC (Terraform/Helm), and Golang automation to ensure maximum operational efficiency and resilience for Collibra. We are a geographically diverse team guided by our value of Embracing and Driving Change, which translates into a team that never settles long for good enough, offering you a dynamic environment to advance your technical skills and make a tangible difference. Staff Platform Engineers at Collibra are responsible for Lead the design and evolution of the cloud platform across AWS and GCP (Kubernetes, networking, and core infrastructure) in order to enable product teams to build, deploy, and operate services with speed, consistency, and minimal friction Build and standardize platform capabilities (CI/CD, observability, service templates, and golden paths) in order to reduce cognitive load and accelerate developer productivity across the organization Develop and operate shared data platform services (operators in Go, Kafka, Neo4j, and related infrastructure) in order to provide scalable, reliable, and self service data capabilities for product and analytics teams Partner with product engineering, security, and SRE teams in order to drive adoption of platform best practices and ensure secure, compliant, and resilient architectures across AWS and GCP Mentor other engineers, champion technical excellence, and drive cloud cost optimization through automation. You have Production experience managing infrastructure on a major cloud platform (AWS or GCP). Hands on experience operating Kubernetes and service mesh technologies (preferably Istio). Strong understanding of cloud networking concepts (VPCs, routing, load balancing, WAFs, network policies). Proven experience with Infrastructure as Code (Terraform) and software development in Golang. Experience managing or supporting the underlying infrastructure for stateful applications (e.g., databases like GraphDB, kafka) on cloud platforms. Familiarity with cloud security principles (IAM, security groups). A bachelor's degree or equivalent working experience. You are Critical thinker who skillfully analyzes complex distributed systems, including intricate network flows. A proactive learner, curious about evolving technologies in cloud, container orchestration, and service mesh. Open minded and approach problems from an assumption of positive intent and demonstrate emotional intelligence. Able to communicate complex technical concepts clearly to diverse audiences and identify opportunities for simplification and automation. Able to work with a high degree of care and independence. Measures of Success Within your first month: you will Integrate with the team, understand our architecture, and make your first platform contribution. Within your third month: Build strong familiarity with the platform, team workflows, and shared services in order to begin contributing to well defined platform improvements with guidance Within your sixth month: Independently deliver production ready improvements to the internal developer platform and shared services in order to demonstrate ownership, sound technical judgment, and alignment with organizational standards Benefits at Collibra Collibra recognizes and values that everyone has different needs, interests, and life goals. We built our benefits program with flexibility in mind to support you and your loved ones through a diverse range of circumstances and life events. These flexible offerings sit on a foundation of competitive compensation, health coverage, and time off. Learn more about Collibra's benefits. We create inclusion and belonging through how we onboard, meet, connect, engage, and communicate. Learn more about diversity, equity, and inclusion at Collibra. At Collibra, we're proud to be an equal opportunity employer. We realize the key to creating a company with a world class culture and employee experience comes from who we hire and creating a workplace that celebrates everyone. With this, we proudly consider qualified applicants without regard to race, color, religion, creed, gender, national origin, age, disability, veteran status, sexual orientation, pregnancy, sex, gender identity, gender expression, genetic information, physical or mental disability, HIV status, registered domestic partner status, caregiver status, marital status, veteran or military status, citizenship status or any other legally protected category. If you have a need that requires accommodation, let us know by completing our Accommodations for Applicants form.
Cyber Security Engineer
Erin Associates Ltd. Altrincham, Cheshire
Cyber Security Engineer (Cyber Security) Location: South Manchester, Altrincham, Cheshire Salary: Up to £55k plus benefits About the Role We are looking for a skilled and motivated IT Security Engineer / Cyber Security to join a growing cyber security team based in Altrincham, South Manchester. You will play a key role in protecting critical systems, improving security posture, and supporting incident response across a modern hybrid IT environment. This is a hands on technical role where you'll work closely with infrastructure, cloud, and SOC teams to detect, prevent, and respond to security threats. Key Responsibilities Monitor and respond to security alerts across SIEM and EDR platforms Manage and tune security tools including firewalls, WAFs, and endpoint protection Investigate and support response to security incidents Perform vulnerability assessments and remediation tracking Support implementation of security controls across cloud and on prem environments Contribute to security policies, standards, and procedures Assist with threat detection engineering and rule tuning Required Skills & Experience Strong understanding of core security technologies (NGFW, WAF, EDR, SIEM) Experience in a SOC, security engineering, or infrastructure security role Good knowledge of networking and common attack types (e.g. SQL injection, phishing, malware) Experience with log analysis and incident investigation Familiarity with Windows and/or Linux environments Understanding of OWASP Top 10 security risks Ability to work in a fast paced, incident driven environment Desirable Security certifications such as CompTIA Security+, GIAC GSEC, or ISC2 certifications Experience with cloud platforms such as Amazon Web Services, Microsoft Azure, or Google Cloud Scripting experience (PowerShell, Python, or Bash) Exposure to threat hunting or SIEM rule development What's On Offer Salary up to £55,000 depending on experience Opportunity to work with modern security tools and technologies Training and certification support Career progression within a growing security function Collaborative and supportive technical team environment To apply, please send your CV to Alex or call for more details. Erin Associates welcomes applications from people of all ethnicities, genders, sexual orientations, and disabilities. Please inform us if you require any reasonable adjustments at any stage of the application process. Location: Altrincham, United Kingdom Employment: Permanent Salary: £45000 - £55000 Pension, Training, Flexible working, Flu jabs, Cycle to work scheme and more!
15/06/2026
Full time
Cyber Security Engineer (Cyber Security) Location: South Manchester, Altrincham, Cheshire Salary: Up to £55k plus benefits About the Role We are looking for a skilled and motivated IT Security Engineer / Cyber Security to join a growing cyber security team based in Altrincham, South Manchester. You will play a key role in protecting critical systems, improving security posture, and supporting incident response across a modern hybrid IT environment. This is a hands on technical role where you'll work closely with infrastructure, cloud, and SOC teams to detect, prevent, and respond to security threats. Key Responsibilities Monitor and respond to security alerts across SIEM and EDR platforms Manage and tune security tools including firewalls, WAFs, and endpoint protection Investigate and support response to security incidents Perform vulnerability assessments and remediation tracking Support implementation of security controls across cloud and on prem environments Contribute to security policies, standards, and procedures Assist with threat detection engineering and rule tuning Required Skills & Experience Strong understanding of core security technologies (NGFW, WAF, EDR, SIEM) Experience in a SOC, security engineering, or infrastructure security role Good knowledge of networking and common attack types (e.g. SQL injection, phishing, malware) Experience with log analysis and incident investigation Familiarity with Windows and/or Linux environments Understanding of OWASP Top 10 security risks Ability to work in a fast paced, incident driven environment Desirable Security certifications such as CompTIA Security+, GIAC GSEC, or ISC2 certifications Experience with cloud platforms such as Amazon Web Services, Microsoft Azure, or Google Cloud Scripting experience (PowerShell, Python, or Bash) Exposure to threat hunting or SIEM rule development What's On Offer Salary up to £55,000 depending on experience Opportunity to work with modern security tools and technologies Training and certification support Career progression within a growing security function Collaborative and supportive technical team environment To apply, please send your CV to Alex or call for more details. Erin Associates welcomes applications from people of all ethnicities, genders, sexual orientations, and disabilities. Please inform us if you require any reasonable adjustments at any stage of the application process. Location: Altrincham, United Kingdom Employment: Permanent Salary: £45000 - £55000 Pension, Training, Flexible working, Flu jabs, Cycle to work scheme and more!
Cyber Security Engineer - Hybrid Training & Benefits
Erin Associates Ltd. Altrincham, Cheshire
Cyber Security Engineer (Cyber Security) Location: South Manchester, Altrincham, Cheshire Salary: Up to £55k plus benefits About the Role We are looking for a skilled and motivated IT Security Engineer / Cyber Security to join a growing cyber security team based in Altrincham, South Manchester. You will play a key role in protecting critical systems, improving security posture, and supporting incident response across a modern hybrid IT environment. This is a hands on technical role where you'll work closely with infrastructure, cloud, and SOC teams to detect, prevent, and respond to security threats. Key Responsibilities Monitor and respond to security alerts across SIEM and EDR platforms Manage and tune security tools including firewalls, WAFs, and endpoint protection Investigate and support response to security incidents Perform vulnerability assessments and remediation tracking Support implementation of security controls across cloud and on prem environments Contribute to security policies, standards, and procedures Assist with threat detection engineering and rule tuning Required Skills & Experience Strong understanding of core security technologies (NGFW, WAF, EDR, SIEM) Experience in a SOC, security engineering, or infrastructure security role Good knowledge of networking and common attack types (e.g. SQL injection, phishing, malware) Experience with log analysis and incident investigation Familiarity with Windows and/or Linux environments Understanding of OWASP Top 10 security risks Ability to work in a fast paced, incident driven environment Desirable Security certifications such as CompTIA Security+, GIAC GSEC, or ISC2 certifications Experience with cloud platforms such as Amazon Web Services, Microsoft Azure, or Google Cloud Scripting experience (PowerShell, Python, or Bash) Exposure to threat hunting or SIEM rule development What's On Offer Salary up to £55,000 depending on experience Opportunity to work with modern security tools and technologies Training and certification support Career progression within a growing security function Collaborative and supportive technical team environment To apply, please send your CV to Alex or call for more details. Erin Associates welcomes applications from people of all ethnicities, genders, sexual orientations, and disabilities. Please inform us if you require any reasonable adjustments at any stage of the application process. Location: Altrincham, United Kingdom Employment: Permanent Salary: £45000 - £55000 Pension, Training, Flexible working, Flu jabs, Cycle to work scheme and more!
15/06/2026
Full time
Cyber Security Engineer (Cyber Security) Location: South Manchester, Altrincham, Cheshire Salary: Up to £55k plus benefits About the Role We are looking for a skilled and motivated IT Security Engineer / Cyber Security to join a growing cyber security team based in Altrincham, South Manchester. You will play a key role in protecting critical systems, improving security posture, and supporting incident response across a modern hybrid IT environment. This is a hands on technical role where you'll work closely with infrastructure, cloud, and SOC teams to detect, prevent, and respond to security threats. Key Responsibilities Monitor and respond to security alerts across SIEM and EDR platforms Manage and tune security tools including firewalls, WAFs, and endpoint protection Investigate and support response to security incidents Perform vulnerability assessments and remediation tracking Support implementation of security controls across cloud and on prem environments Contribute to security policies, standards, and procedures Assist with threat detection engineering and rule tuning Required Skills & Experience Strong understanding of core security technologies (NGFW, WAF, EDR, SIEM) Experience in a SOC, security engineering, or infrastructure security role Good knowledge of networking and common attack types (e.g. SQL injection, phishing, malware) Experience with log analysis and incident investigation Familiarity with Windows and/or Linux environments Understanding of OWASP Top 10 security risks Ability to work in a fast paced, incident driven environment Desirable Security certifications such as CompTIA Security+, GIAC GSEC, or ISC2 certifications Experience with cloud platforms such as Amazon Web Services, Microsoft Azure, or Google Cloud Scripting experience (PowerShell, Python, or Bash) Exposure to threat hunting or SIEM rule development What's On Offer Salary up to £55,000 depending on experience Opportunity to work with modern security tools and technologies Training and certification support Career progression within a growing security function Collaborative and supportive technical team environment To apply, please send your CV to Alex or call for more details. Erin Associates welcomes applications from people of all ethnicities, genders, sexual orientations, and disabilities. Please inform us if you require any reasonable adjustments at any stage of the application process. Location: Altrincham, United Kingdom Employment: Permanent Salary: £45000 - £55000 Pension, Training, Flexible working, Flu jabs, Cycle to work scheme and more!
Information Security Analyst - Product Assurance
Sainsbury's Supermarkets Ltd Coventry, Warwickshire
Information Security Analyst - Product Assurance Salary: Competitive Plus Benefits Location: Coventry Store Support Centre - Ansty Park and Home, Coventry, CV7 9RD Contract type: Permanent Business area: Sainsbury's Tech Closing date: 15 June 2026 Requisition ID: We'd all like amazing work to do, and real work life balance. That's waiting for you at Sainsbury's. Think about the scale it takes to feed the nation. The level of data, transactions and variety involved. Then you'll realise this is a modern software engineering environment, because it has to be. We've made significant investment in the standards and principles that shape how we work. We iterate, learn, experiment and champion ways of working such as Agile, Scrum and XP. So you can look forward to exciting opportunities across everything from AI to reusable tech. Job Title / Role Information Security Analyst - Product Assurance Reporting to Information Security Manager - Sainsbury's Division/Dept Data Governance and Information Security Location Holborn, Coventry, Manchester (Flexible) In a nutshell As an Information Security Analyst in the Data Governance and Information Security Team, you will be working within the Product Assurance team who are responsible for ensuring our Engineering and Development communities are building and maintaining secure products through their entire lifecycle. You will be continually reviewing our security posture and setting the direction on how best to make improvements in line with the evolving threat landscape and core business objectives. The ideal candidate will have 4+ years' experience working within Information or Cyber Security and be passionate about continuous professional development. You will be asked to provide recent, industry respect certificates if successful at interview to demonstrate your ongoing education. Whilst this role isn't 'hands on' candidates are expected to have an in depth knowledge of security technologies and how these are integrated in monolithic and microservice architectures. What you need to do As an Information Security Analyst, you will have good all round infosec experience coupled with finely honed Stakeholder Management skills to ensure that robust security is maintained across our environment. Work in a flexible, agile manner within Engineering Families, whilst maintaining appropriate levels of challenge and governance. Ensure security is built in by design, products are delivered securely with client and employee data appropriately protected. Define Security Non Functional Requirements for each project and ensure that they are fulfilled before going into service, ensuring the relevant technology standards are applied to specific projects. Liaise with the Information Security Testing Team to ensure that Ethical Hacking, Code Reviews, Application Scanning, and Infrastructure Scanning is conducted. Provide end to end assurance of IT products across the Group, throughout its lifecycle, providing approvals where appropriate. Articulate risk in technical and non technical terminology so that it can be interpreted by IT and Business individuals alike. Help identify, assess, and manage strategic, operational and emerging risks affecting the Cloud and Data, and articulate, quantify and monitor risks according to risk appetite. Build and maintain strong senior stakeholder relationships within technology and the business to understand security risk and drive robust risk based decision making. Effectively articulate technical issues to business units and engineering teams. Liaise with third party strategic partners and providers who support Sainsbury's. What you need to know and show A strong technical understanding of security to ensure systems are designed and built securely and to help continually improve our security posture Appreciation of containerisation technologies such as Docker, Kubernetes etc. Fundamental knowledge of logging, monitoring, load balancing/proxies and API gateways Fundamental knowledge of GitHub, Jenkins & Jira Basic knowledge of the OWASP Top 10, Mitre ATT&CK, NIST frameworks, PCI DSS and Cyber Kill Chain Fundamental understanding of PAM, EDR, AV, IPS, SIEM, WAF and DLP technologies The ability to verify solutions and gain assurance that they are fit for purpose through demonstrable evidence of controls and testing Strong understanding of the changing threat landscape and how this may affect our systems The ability to challenge concerns and report through appropriate channels Self drive, motivation and the ability to work independently to deliver expected outcomes In depth understanding of data and security risks in a large enterprise Risk & Vulnerability Management experience and understanding of Risk & Vulnerability Management Frameworks Strong analytical and report writing skills Experience with serverless cloud technologies such as AWS storage and Lambda functions Desirable Qualifications CSA CCSK / CCAK AWS Certified Security Microsoft Azure Security Engineer Associate ISACA CISA / CISM / CRISC / CGEIT MSc. Information/Cyber Security Benefits and Work Life Balance Colleague discount across our multi brands - Sainsbury's, Argos, TU Clothing and Habitat Pension plan Special offers on gym memberships, restaurants, holidays, retail vouchers and more Flexible working approach to support work life balance - remote, on site or hybrid, flexible hours Wellbeing benefits: annual holiday allowance, option to buy additional holiday, season ticket loan, cycle to work scheme, health cash plans, pay advance, employee assistance programme Maternity or adoption leave up to 26 weeks' pay, and paternity leave up to 4 weeks' pay Performance related bonus of up to 10% of salary, depending on company performance For more information about benefits and eligibility, please see .
15/06/2026
Full time
Information Security Analyst - Product Assurance Salary: Competitive Plus Benefits Location: Coventry Store Support Centre - Ansty Park and Home, Coventry, CV7 9RD Contract type: Permanent Business area: Sainsbury's Tech Closing date: 15 June 2026 Requisition ID: We'd all like amazing work to do, and real work life balance. That's waiting for you at Sainsbury's. Think about the scale it takes to feed the nation. The level of data, transactions and variety involved. Then you'll realise this is a modern software engineering environment, because it has to be. We've made significant investment in the standards and principles that shape how we work. We iterate, learn, experiment and champion ways of working such as Agile, Scrum and XP. So you can look forward to exciting opportunities across everything from AI to reusable tech. Job Title / Role Information Security Analyst - Product Assurance Reporting to Information Security Manager - Sainsbury's Division/Dept Data Governance and Information Security Location Holborn, Coventry, Manchester (Flexible) In a nutshell As an Information Security Analyst in the Data Governance and Information Security Team, you will be working within the Product Assurance team who are responsible for ensuring our Engineering and Development communities are building and maintaining secure products through their entire lifecycle. You will be continually reviewing our security posture and setting the direction on how best to make improvements in line with the evolving threat landscape and core business objectives. The ideal candidate will have 4+ years' experience working within Information or Cyber Security and be passionate about continuous professional development. You will be asked to provide recent, industry respect certificates if successful at interview to demonstrate your ongoing education. Whilst this role isn't 'hands on' candidates are expected to have an in depth knowledge of security technologies and how these are integrated in monolithic and microservice architectures. What you need to do As an Information Security Analyst, you will have good all round infosec experience coupled with finely honed Stakeholder Management skills to ensure that robust security is maintained across our environment. Work in a flexible, agile manner within Engineering Families, whilst maintaining appropriate levels of challenge and governance. Ensure security is built in by design, products are delivered securely with client and employee data appropriately protected. Define Security Non Functional Requirements for each project and ensure that they are fulfilled before going into service, ensuring the relevant technology standards are applied to specific projects. Liaise with the Information Security Testing Team to ensure that Ethical Hacking, Code Reviews, Application Scanning, and Infrastructure Scanning is conducted. Provide end to end assurance of IT products across the Group, throughout its lifecycle, providing approvals where appropriate. Articulate risk in technical and non technical terminology so that it can be interpreted by IT and Business individuals alike. Help identify, assess, and manage strategic, operational and emerging risks affecting the Cloud and Data, and articulate, quantify and monitor risks according to risk appetite. Build and maintain strong senior stakeholder relationships within technology and the business to understand security risk and drive robust risk based decision making. Effectively articulate technical issues to business units and engineering teams. Liaise with third party strategic partners and providers who support Sainsbury's. What you need to know and show A strong technical understanding of security to ensure systems are designed and built securely and to help continually improve our security posture Appreciation of containerisation technologies such as Docker, Kubernetes etc. Fundamental knowledge of logging, monitoring, load balancing/proxies and API gateways Fundamental knowledge of GitHub, Jenkins & Jira Basic knowledge of the OWASP Top 10, Mitre ATT&CK, NIST frameworks, PCI DSS and Cyber Kill Chain Fundamental understanding of PAM, EDR, AV, IPS, SIEM, WAF and DLP technologies The ability to verify solutions and gain assurance that they are fit for purpose through demonstrable evidence of controls and testing Strong understanding of the changing threat landscape and how this may affect our systems The ability to challenge concerns and report through appropriate channels Self drive, motivation and the ability to work independently to deliver expected outcomes In depth understanding of data and security risks in a large enterprise Risk & Vulnerability Management experience and understanding of Risk & Vulnerability Management Frameworks Strong analytical and report writing skills Experience with serverless cloud technologies such as AWS storage and Lambda functions Desirable Qualifications CSA CCSK / CCAK AWS Certified Security Microsoft Azure Security Engineer Associate ISACA CISA / CISM / CRISC / CGEIT MSc. Information/Cyber Security Benefits and Work Life Balance Colleague discount across our multi brands - Sainsbury's, Argos, TU Clothing and Habitat Pension plan Special offers on gym memberships, restaurants, holidays, retail vouchers and more Flexible working approach to support work life balance - remote, on site or hybrid, flexible hours Wellbeing benefits: annual holiday allowance, option to buy additional holiday, season ticket loan, cycle to work scheme, health cash plans, pay advance, employee assistance programme Maternity or adoption leave up to 26 weeks' pay, and paternity leave up to 4 weeks' pay Performance related bonus of up to 10% of salary, depending on company performance For more information about benefits and eligibility, please see .
Information Security Analyst - Product Assurance
慨正橡扯 Coventry, Warwickshire
We'd all like amazing work to do, and real work-life balance. That's waiting for you at Sainsbury's. Think about the scale it takes to feed the nation. The level of data, transactions and variety involved. Then you'll realise this is a modern software engineering environment, because it has to be. We've made significant investment in the standards and principles that shape how we work. We iterate, learn, experiment and champion ways of working such as Agile, Scrum and XP. So you can look forward to exciting opportunities across everything from AI to reusable tech. Job Title / Role Information Security Analyst - Product Assurance Reporting to Information Security Manager - Sainsbury's Division/Dept Data Governance and Information Security Location Holborn, Coventry, Manchester (Flexible) In a nutshell As an Information Security Analyst in the Data Governance and Information Security Team, you will be working within the Product Assurance team who are responsible for ensuring our Engineering and Development communities are building and maintaining secure products through their entire lifecycle. You will be continually reviewing our security posture and setting the direction on how best to make improvements in line with the evolving threat landscape and core business objectives. The ideal candidate will have 4+ years' experience working within Information or Cyber Security and be passionate about continuous professional development. You will be asked to provide recent, industry respect certificates if successful at interview to demonstrate your ongoing education. Whilst this role isn't 'hands on' candidates are expected to have an in depth knowledge of security technologies and how these are integrated in monolithic and microservice architectures. What you need to do Work in a flexible, agile manner within Engineering Families, whilst maintaining appropriate levels of challenge and governance Ensure security is built in by design, products are delivered securely with client and employee data appropriately protected Define Security Non Functional Requirements for each project and ensure that they are fulfilled prior to going into service, ensuring the relevant technology standards are applied to specific projects Liaise with the Information Security Testing Team to ensure that Ethical Hacking, Code Reviews, Application Scanning, and Infrastructure Scanning is conducted. Provide end to end assurance of IT products across the Group, throughout its lifecycle, providing approvals where appropriate Articulate risk in technical and non technical terminology so that it can be interpreted by IT and Business individuals alike Help identify, assess, and manage strategic, operational and emerging risks affecting the Cloud and Data, and articulate, quantify and monitor risks according to risk appetite. Build and maintain strong senior stakeholder relationships within technology and the business to understand security risk and drive robust risk based decision making. Effectively articulate technical issues to business units and engineering teams. Liaise with third party strategic partners and providers who support Sainsbury's. What you need to know and show A strong technical understanding of security to ensure systems are designed and built securely and to help continually improve our security posture Appreciation of containerisation technologies such as Docker, Kubernetes etc. Fundamental knowledge of logging, monitoring, load balancing/proxies and API gateways Fundamental knowledge of GitHub, Jenkins & Jira Basic knowledge of the OWASP Top 10, Mitre ATT&CK, NIST frameworks, PCI DSS and Cyber Kill Chain Fundamental understanding of PAM, EDR, AV, IPS, SIEM, WAF and DLP technologies The ability to verify solutions and gain assurance that they are fit for purpose through demonstrable evidence of controls and testing Strong understanding of the changing threat landscape and how this may affect our systems The ability to challenge concerns and report through appropriate channels Self drive, motivation and the ability to work independently to deliver expected outcomes In depth understanding of data and security risks in a large enterprise Risk & Vulnerability Management experience and understanding of Risk & Vulnerability Management Frameworks Strong analytical and report writing skills. Experience with serverless cloud technologies such as AWS storage and Lambda functions. Desirable Qualifications You will have two (or more) of the following: CompTIA Security+, Network+, Linux+, Cloud+, Data+, DataSys+ CSA CCSK / CCAK AWS Certified Security Microsoft Azure Security Engineer Associate (ISC) CISSP / CCSP / SSCP ISACA CISA / CISM / CRISC / CGEIT MSc. Information/Cyber Security Benefits Colleague discount across our multi brands - Sainsbury's, Argos, TU Clothing and Habitat Holiday allowance Bonus scheme Pension plan Special offers on gym memberships, restaurants, holidays, retail vouchers and more Work life balance is important to us, so we offer our colleagues as much flexibility as possible in line with the needs of their role. We trust them to decide how, where and when they work, combining remote and collaborative working with a flexible approach to hours, giving them plenty of time and space for life outside of work whilst delivering against our business goals. We are committed to being a truly inclusive retailer, so you'll be welcomed whoever you are and wherever you work. Around here, there's always the chance to try something new - whether that's as part of an evolving team or somewhere else across the business - and we take development seriously and promise to support you. We also recognise and celebrate colleagues when they go the extra mile and, where possible, offer flexible working. When you join our team, we'll also offer you an amazing range of benefits. Here are some of them: Starting off with colleague discount, you'll be able to get 10% off at Sainsbury's, Argos, TU and Habitat after 4 weeks. This increases to 15% off at Sainsbury's every Friday and Saturday and 15% off at Argos every pay day. We've also got you covered for your future with our pensions scheme and life cover. You'll also be able to share in our success as you may be eligible for a performance related bonus of up to 10% of salary, depending on how we perform. Your wellbeing is important to us too. You'll receive an annual holiday allowance, and you can buy additional holiday. We also offer other benefits that will help your money go further such as season ticket loans, cycle to work scheme, health cash plans, pay advance (where you can access some of your pay before pay day) as well access to a great range of discounts from hundreds of other retailers. And if you ever need it there is also an employee assistance programme. Moments that matter are as important to us as they are to you which is why we give up to 26 weeks' pay for maternity or adoption leave and up to 4 weeks' pay for paternity leave. Please see for a range of our benefits (note, length of service and eligibility criteria may apply).
14/06/2026
Full time
We'd all like amazing work to do, and real work-life balance. That's waiting for you at Sainsbury's. Think about the scale it takes to feed the nation. The level of data, transactions and variety involved. Then you'll realise this is a modern software engineering environment, because it has to be. We've made significant investment in the standards and principles that shape how we work. We iterate, learn, experiment and champion ways of working such as Agile, Scrum and XP. So you can look forward to exciting opportunities across everything from AI to reusable tech. Job Title / Role Information Security Analyst - Product Assurance Reporting to Information Security Manager - Sainsbury's Division/Dept Data Governance and Information Security Location Holborn, Coventry, Manchester (Flexible) In a nutshell As an Information Security Analyst in the Data Governance and Information Security Team, you will be working within the Product Assurance team who are responsible for ensuring our Engineering and Development communities are building and maintaining secure products through their entire lifecycle. You will be continually reviewing our security posture and setting the direction on how best to make improvements in line with the evolving threat landscape and core business objectives. The ideal candidate will have 4+ years' experience working within Information or Cyber Security and be passionate about continuous professional development. You will be asked to provide recent, industry respect certificates if successful at interview to demonstrate your ongoing education. Whilst this role isn't 'hands on' candidates are expected to have an in depth knowledge of security technologies and how these are integrated in monolithic and microservice architectures. What you need to do Work in a flexible, agile manner within Engineering Families, whilst maintaining appropriate levels of challenge and governance Ensure security is built in by design, products are delivered securely with client and employee data appropriately protected Define Security Non Functional Requirements for each project and ensure that they are fulfilled prior to going into service, ensuring the relevant technology standards are applied to specific projects Liaise with the Information Security Testing Team to ensure that Ethical Hacking, Code Reviews, Application Scanning, and Infrastructure Scanning is conducted. Provide end to end assurance of IT products across the Group, throughout its lifecycle, providing approvals where appropriate Articulate risk in technical and non technical terminology so that it can be interpreted by IT and Business individuals alike Help identify, assess, and manage strategic, operational and emerging risks affecting the Cloud and Data, and articulate, quantify and monitor risks according to risk appetite. Build and maintain strong senior stakeholder relationships within technology and the business to understand security risk and drive robust risk based decision making. Effectively articulate technical issues to business units and engineering teams. Liaise with third party strategic partners and providers who support Sainsbury's. What you need to know and show A strong technical understanding of security to ensure systems are designed and built securely and to help continually improve our security posture Appreciation of containerisation technologies such as Docker, Kubernetes etc. Fundamental knowledge of logging, monitoring, load balancing/proxies and API gateways Fundamental knowledge of GitHub, Jenkins & Jira Basic knowledge of the OWASP Top 10, Mitre ATT&CK, NIST frameworks, PCI DSS and Cyber Kill Chain Fundamental understanding of PAM, EDR, AV, IPS, SIEM, WAF and DLP technologies The ability to verify solutions and gain assurance that they are fit for purpose through demonstrable evidence of controls and testing Strong understanding of the changing threat landscape and how this may affect our systems The ability to challenge concerns and report through appropriate channels Self drive, motivation and the ability to work independently to deliver expected outcomes In depth understanding of data and security risks in a large enterprise Risk & Vulnerability Management experience and understanding of Risk & Vulnerability Management Frameworks Strong analytical and report writing skills. Experience with serverless cloud technologies such as AWS storage and Lambda functions. Desirable Qualifications You will have two (or more) of the following: CompTIA Security+, Network+, Linux+, Cloud+, Data+, DataSys+ CSA CCSK / CCAK AWS Certified Security Microsoft Azure Security Engineer Associate (ISC) CISSP / CCSP / SSCP ISACA CISA / CISM / CRISC / CGEIT MSc. Information/Cyber Security Benefits Colleague discount across our multi brands - Sainsbury's, Argos, TU Clothing and Habitat Holiday allowance Bonus scheme Pension plan Special offers on gym memberships, restaurants, holidays, retail vouchers and more Work life balance is important to us, so we offer our colleagues as much flexibility as possible in line with the needs of their role. We trust them to decide how, where and when they work, combining remote and collaborative working with a flexible approach to hours, giving them plenty of time and space for life outside of work whilst delivering against our business goals. We are committed to being a truly inclusive retailer, so you'll be welcomed whoever you are and wherever you work. Around here, there's always the chance to try something new - whether that's as part of an evolving team or somewhere else across the business - and we take development seriously and promise to support you. We also recognise and celebrate colleagues when they go the extra mile and, where possible, offer flexible working. When you join our team, we'll also offer you an amazing range of benefits. Here are some of them: Starting off with colleague discount, you'll be able to get 10% off at Sainsbury's, Argos, TU and Habitat after 4 weeks. This increases to 15% off at Sainsbury's every Friday and Saturday and 15% off at Argos every pay day. We've also got you covered for your future with our pensions scheme and life cover. You'll also be able to share in our success as you may be eligible for a performance related bonus of up to 10% of salary, depending on how we perform. Your wellbeing is important to us too. You'll receive an annual holiday allowance, and you can buy additional holiday. We also offer other benefits that will help your money go further such as season ticket loans, cycle to work scheme, health cash plans, pay advance (where you can access some of your pay before pay day) as well access to a great range of discounts from hundreds of other retailers. And if you ever need it there is also an employee assistance programme. Moments that matter are as important to us as they are to you which is why we give up to 26 weeks' pay for maternity or adoption leave and up to 4 weeks' pay for paternity leave. Please see for a range of our benefits (note, length of service and eligibility criteria may apply).

Modal Window

  • Home
  • Contact
  • About Us
  • FAQs
  • Terms & Conditions
  • Privacy
  • Employer
  • Post a Job
  • Search Resumes
  • Sign in
  • Job Seeker
  • Find Jobs
  • Create Resume
  • Sign in
  • IT blog
  • Facebook
  • Twitter
  • LinkedIn
  • Youtube
© 2008-2026 IT Job Board