Senior Cyber Security Engineer

Join Us in Shaping the Future of Cyber Security.At Quantexa, we believe in the power of innovation and continuous improvement. Our mission is to forge meaningful relationships with our clients and drive impactful change across various industries. With a diverse workforce comprising over 50 nationalities and 20 languages spoken, we foster an inclusive environment where every voice matters. Here, you will find the autonomy and support needed to craft a career that aligns with your aspirations.The Role.We are seeking a proactive and technically skilled Cyber Security Engineer to join our Security Operations team. In this hands-on role, you will be instrumental in safeguarding Quantexa's digital assets. Your responsibilities will include the operational management, optimization, and monitoring of essential security platforms, focusing on Zscaler, cloud monitoring via Wiz, and endpoint detection and response through CrowdStrike.Collaborating closely with the broader Security Operations team, you will ensure that security alerts, findings, and detections are efficiently triaged, validated, documented, and remediated. Your contributions will directly enhance Quantexa's security posture by minimizing risk, bolstering detection capabilities, and ensuring timely responses to security incidents.This position is ideal for a curious and detail-oriented professional who thrives on working with cutting-edge security tools, embraces disciplined execution, and seeks opportunities for ongoing improvement.Your Responsibilities.Wiz (Cloud Security Posture Management)Daily monitoring and triaging of Wiz findings, validating alerts and assessing operational impact.Engaging in tuning and threat hunting within Wiz and other security tools.Identifying misconfigurations, excessive permissions, and exposed assets while escalating issues as necessary.Tracking remediation progress with engineering teams and ensuring the resolution of high-priority issues.Zscaler (Web Security Tunnel 2.0)Reviewing and triaging Zscaler alerts and policy violations according to documented response procedures.Investigating suspicious traffic, access attempts, and user activity to determine legitimacy.

Join our dynamic team at Lendable as a Cyber Security Engineer, where you will play a pivotal role in safeguarding our digital assets and ensuring the integrity of our systems. In this position, you will be responsible for the design, implementation, and maintenance of security protocols across our network and applications. You will work closely with cross-functional teams to identify vulnerabilities and develop strategies to mitigate risks.

The Economist Group is seeking a dedicated and skilled Cyber Security Engineer to join our dynamic team in London. In this role, you will play a crucial part in safeguarding our digital assets and ensuring the integrity of our systems against various cyber threats. You will work closely with cross-functional teams to implement security measures, conduct risk assessments, and respond to security incidents.

Founded in 1990, Methods has been at the forefront of transforming public sector operations across the UK, partnering with various central government departments and agencies.Our mission is clear: to enhance and secure public-facing services. By applying innovative digital thinking, we ensure that the future of our public services is centered around the needs of our citizens.What sets us apart from typical consultancies, system integrators, and software houses is our commitment to a customer-centric value system. We focus on delivering solutions that genuinely meet our clients' needs.We are dedicated to supporting our clients in their project successes, fostering collaboration to share skills and effectively solve challenges. At Methods, we work hard but also embrace the joy of our work, learning from our experiences, including our mistakes.As experts in providing secure and resilient cyber and information services, we prioritize the protection of systems and data. Our tailored security roadmaps significantly reduce risks and vulnerabilities associated with cyber-attacks.We assist organizations in enhancing processes like threat management through the development of identity management programs, as well as establishing robust prevention, detection, and response capabilities against cyber threats.

Join Our Team as a 3rd Line Support Engineer!Security experience is a must!We are seeking a skilled 3rd Line IT Support Engineer with a strong background in cyber and IT security to join our rapidly growing company in Central London.Key Responsibilities: You will play a pivotal role in monitoring SIEM systems, ensuring robust security measures are in place, and contributing to various exciting projects.This position offers a fantastic opportunity for career advancement and the chance to work with cutting-edge technology.The basic salary for this role is up to £60,000 per annum.If you meet the qualifications, please send your CV for more information!

Join our dynamic team at Pace Consulting as a Product Security Specialist, focusing on the critical field of cyber security for medical devices. In this role, you will be responsible for ensuring the security and integrity of medical products throughout their lifecycle. This position demands a proactive approach to identifying vulnerabilities and implementing effective solutions to safeguard sensitive patient data and comply with regulatory standards.

Join Shawbrook's Thrive Apprenticeship program as a Cyber Security Apprentice, where you'll have the opportunity to develop essential skills and knowledge in the dynamic field of cybersecurity. This program is designed for entry-level candidates seeking to kickstart their careers in tech while contributing to the safety and security of our digital landscape.As an apprentice, you will work alongside experienced professionals, gaining hands-on experience and practical insights into cybersecurity practices and technologies. This role is an excellent pathway for those eager to learn and grow in a fast-paced environment.

Methods is a leading IT Services Consultancy with a revenue exceeding £100M, dedicated to transforming the public sector in the UK. With over 30 years of experience, we partner with various central government departments and agencies to enhance operational efficiency and effectiveness.Our unique approach combines technology, data, and a human touch, which distinguishes us from other consultancies, system integrators, and software houses. We are committed to delivering sustainable and impactful solutions for our clients, staff, communities, and the environment.At Methods, we cultivate a collaborative atmosphere that fosters skill-sharing and problem-solving while enjoying our work. We embrace challenges, learn from our experiences, and strive for excellence.While primarily serving the public sector, we are actively expanding our portfolio to include significant private sector clients. Methods became part of the Alten Group in early 2022.Role Overview: As a prominent digital transformation consultancy, Methods collaborates with public and private organizations to provide innovative and secure solutions. Our focus on governance, risk, and compliance (GRC) empowers businesses to navigate intricate security landscapes while maintaining regulatory and operational resilience.We are currently looking for a Principal Cyber Security Risk & Audit Consultant to join our dynamic team. This position is perfect for a professional with extensive expertise in cyber security, risk management, and internal audit. Candidates should possess experience in both public and private sectors, ideally with a background in management consultancy. Strong leadership and team-building skills are highly preferred.

Join Timberseed as a Trainee Recruitment Consultant specializing in IT and Cyber Security!Located in the vibrant East London, we are thrilled to collaborate with a leading recruitment firm known for its excellence in IT and Cyber Security. With a solid presence in both the UK and the US, our partner boasts an impressive 20-year track record in the rapidly evolving fields of cyber security, corporate security, and data privacy.As the demand for skilled professionals in these areas continues to rise, we are excited to expand our team and are seeking motivated and ambitious recent graduates to embark on their careers as trainee recruitment consultants.We offer an exceptional training program led by industry experts, equipping you with the essential skills to thrive in recruitment. Successful consultants can benefit from our market-leading uncapped commission structure, allowing for potential earnings exceeding £15,000 on top of your base salary during the first year. Additionally, top billers enjoy exclusive incentives, including overseas trips, fine dining experiences, and extra days off.Your responsibilities will include:Identifying and attracting new candidates through various methods such as advertising, networking, and headhuntingParticipating in client meetings and networking eventsEvaluating candidates' qualifications, coordinating interviews, and overseeing the interview processFacilitating the offer process, ensuring candidates are well-informed and enthusiastic about their offersThe ideal candidate will possess:A strong work ethic, ambition, and a proactive approachExcellent interpersonal skills with the ability to communicate effectively both in writing and verballyA capacity to listen, adapt, and respond to diverse personalities and situationsResilience and determinationA keen interest in ITA minimum of a 2.1 degree from a Russell Group UniversityAt Timberseed, we are committed to guiding you through every step of the recruitment process. We will assist you with your CV, prepare you for interviews, and provide valuable advice on showcasing your strengths.

Position: Security EngineerLocation: London, Bristol, or Edinburgh (Hybrid options available)Salary Range: £63,000 - £93,000Team: Security Engineering TeamReporting To: Security Engineering ManagerThis role requires existing right to work in the UK. Please note that we currently do not offer visa sponsorship for this position.Kaluza is at the forefront of the energy transition, transforming energy complexity into seamless coordination. Our mission is to assist energy companies in navigating today’s challenges while accelerating the shift towards a cleaner, electrified future.Our platform enables millions of real-time decisions across homes, devices, markets, and grids. By merging predictive algorithms with human-centered design, Kaluza ensures that clean energy is dependable, affordable, and adaptable to everyday life.With teams strategically located across Europe, North America, Asia, and Australia, and a joint venture with Mitsubishi Corporation in Japan, we empower leading organizations including OVO, AGL, and ENGIE, alongside innovators like Volvo and Volkswagen.Your Role:Implement security platforms and tools to proactively prevent, accurately detect, and efficiently respond to emerging security threats.Collaborate with Platform Engineering and IAM teams to integrate Zero Trust architecture and enforce robust privileged access management (PAM) controls.Support Kaluza’s product teams in delivering secure systems rapidly while promoting a culture of collaboration and security best practices.

Due to our ongoing expansion, Control Risks is excited to announce an opportunity for a dynamic and experienced Senior Consultant to join our esteemed Digital Risks Protect Advisory team in London. This is a rare chance for a dedicated, client-oriented professional to contribute to a successful team renowned for its expertise in cyber security. In this role, you will spearhead cyber security risk assessment projects primarily across the EMEA region and serve as a trusted subject matter expert in the realm of cyber security risk assessments. We are looking for candidates who can showcase their extensive experience in delivering cyber security evaluations and who possess the ability to engage effectively with senior client stakeholders. A collaborative mindset and a passion for providing high-quality cyber security guidance to some of the world's largest organizations are essential.This position entails a hybrid working model, requiring at least three days per week in our London office, along with the flexibility to travel up to 50% of the time, occasionally over weekends. Travel will mainly focus on destinations within Europe, with potential trips to Africa and beyond. This role is well-suited for individuals with a strong background in cyber security assurance and advisory functions, along with a deep understanding of the cyber security challenges faced by our clients.

About Us:Established in 2022, Cyber Energia is dedicated to protecting critical renewable energy infrastructures from the ever-changing landscape of cyber threats. Our expertise lies in Operational Technology (OT) cybersecurity, providing cutting-edge solutions that guarantee operational resilience, regulatory compliance, and business continuity amidst the rapid digital transformation of the energy sector.At Cyber Energia, we aim to empower operators to effectively manage cyber risks while ensuring adherence to regulatory standards.Job Overview:We are on the lookout for an experienced Senior Network Cyber Security Engineer to join our Network Security Engineering team, with a focus on firewalls and routing technologies. In this hands-on position, you will spearhead the design, implementation, and enhancement of Check Point security platforms, safeguarding mission-critical renewable energy infrastructure both across Europe and globally.The ideal candidate will be a proactive, self-driven professional with a proven track record in enterprise firewall architecture, adept at multitasking, and thriving in a fast-paced, challenging environment.

Join our team as a Managing Consultant specializing in Digital Trust and Cyber Security within the Financial Services sector. In this pivotal role, you will lead initiatives aimed at enhancing our clients' security posture and ensuring their digital trustworthiness. Collaborate with cross-functional teams to design and implement innovative solutions that address the complex challenges of cybersecurity and data protection.

Genius Sports combines technology and live data to change how fans connect with sports worldwide. The company aims to create interactive, personalized experiences that keep audiences engaged. More information is available at geniussports.com. Role overview The Cyber Risk Manager plays a key part in strengthening Genius Sports’ ability to identify, assess, and manage cyber risks across the organization. Reporting to the VP of Cyber Security within the Information Security division, this role works closely with the GRC Manager. The focus goes beyond compliance, addressing security risk as a core business issue. This position guides the creation and improvement of frameworks and practices that help teams make risk-aware decisions. The Cyber Risk Manager translates evolving threats into clear risk assessments, ensures consistent risk treatment and accountability, and supports the company’s growth with scalable risk management processes. Key responsibilities Establish and manage the cyber risk program, adapting it to organizational growth and shifting threats. Develop and maintain frameworks for identifying and assessing cyber risks across all business areas. Promote risk awareness, enabling teams to make informed cybersecurity decisions. Collaborate with the GRC Manager to address security risk as a business challenge, not just a technical or compliance issue. Translate complex threats into actionable risk assessments for stakeholders at every level. Drive consistent risk treatment and accountability throughout the organization. Location This role is based in London, England, United Kingdom.

Starling Bank brings together over 3,000 professionals across London, Southampton, Cardiff, and Manchester to deliver digital banking services in the UK. The company is known for combining technology-driven solutions with the reliability expected from a fully licensed bank. Its culture centers on values such as Listen, Keep It Simple, Do The Right Thing, Own It, and Aim For Greatness. Role overview The Director of Information Security leads the Office of the CISO and reports directly to the Chief Information Security Officer. This position manages a team of Information Security analysts and plays a key role in shaping and strengthening Starling Bank's security capabilities and governance. This role is designed for a seasoned information security leader who has experience building teams and driving continuous improvement. It offers a path for those considering future advancement to a CISO role. Main responsibilities Oversee the Information Security Policy Framework, ensuring alignment with the needs of Starling Group and its stakeholders, and maintaining compliance with legislation and industry standards. Develop and maintain standards for implementing security controls and procedures. Collaborate with external organizations and regulatory bodies to enhance Starling’s security posture. Location This position is based in London, England, United Kingdom.

Hypersonica builds advanced hypersonic defense technologies for Europe, aiming to set higher standards for speed, resilience, and technological independence. The company’s London office is home to a focused team dedicated to solving demanding technical problems in this field. Role overview The IT Security Expert role sits at the heart of Hypersonica’s work. This position joins a small, highly skilled group that faces complex security challenges. Technical depth, independent judgment, and the ability to work with minimal oversight are valued here. What sets this role apart Responsibilities will shift based on individual strengths and experience. Direct input into company strategy and Europe’s technological autonomy. Chance to tackle problems that others consider impossible or unconventional. Requirements Outstanding technical skills in IT security. Demonstrated independence and sound decision-making. Background in addressing significant, unconventional challenges. Creative thinking and a record of unique contributions. Location This role is based in London.

Join Smartdesc as an Information Security ConsultantLocation: Field-based, primarily in the London areaEmployment Type: Full-timeSalary: £70,000 - £80,000As an Information Security Consultant at Smartdesc, you will collaborate with the Information Security and technical delivery teams to implement robust security solutions for our clients.Your role will involve providing strategic guidance on Information Security, aiding clients in enhancing their security posture, and overseeing a variety of security projects. This includes assisting clients in implementing security controls, conducting assessments based on industry best practices, and delivering assessment reports to Senior Leadership Teams to bolster their security measures.The position encompasses a diverse array of responsibilities, from strategic governance and risk management to advising non-profit organizations on maximizing the value of Microsoft Business Premium, E3, and E5 security solutions. You should be comfortable presenting security information to varied audiences, from part-time volunteers to executive boards.This customer-facing role demands a meticulous eye for detail and a proven track record in delivering exemplary Information Security practices.Key ResponsibilitiesAssess and identify steps organizations must take to enhance their security posture, creating roadmaps for continuous improvement while maximizing existing Microsoft licensing.Align security practices with frameworks and standards such as Cyber Essentials, NCSC CAF, and ISO 27001.Own or oversee key Information Security processes and procedures.Manage the Smartdesc MDR management service.Implement and oversee Information Security Risk Management programs.Identify and manage remediation actions to mitigate risks.Develop and maintain Information Security Policies.Create and deliver general and role-specific Information Security Training and Awareness programs.Raise, investigate, and manage IT Security incidents, ensuring appropriate follow-up actions.Provide IT security support to various business functions, including digital teams, IT infrastructure, and IT Service Desk.Develop and oversee Information Security Internal Audit programs.Supervise ongoing security testing, reviews, and audits.

The impact you'll make:As the Information Security Team Lead, you will spearhead the daily operations and enhancement of Elliptic's information and cyber security initiatives. Your role will involve driving the adoption of SSDLC v2.0, strengthening our cloud and SaaS security frameworks, and ensuring readiness for external audits and customer due diligence. Collaborate closely with Engineering, Platform, Legal, Procurement, and Customer teams to mitigate risks while facilitating delivery and revenue, including the implementation of Enterprise Tier security features.Your responsibilities will include:Programme Ownership and ExecutionLead the execution of the InfoSec roadmap and performance metrics. Transform strategic objectives into actionable quarterly plans with quantifiable results.Establish necessary gates, controls, and reporting mechanisms for SSDLC v2.0 across build and deployment pipelines.Direct the baselining of CSPM/SSPM and the targeted reduction of misconfigurations and vulnerabilities.Risk Management, Assurance, and Audit PreparednessOversee ISMS processes in compliance with ISO 27001. Organize evidence collection for customer audits and external assurances (e.g., penetration testing, TPOs).Lead or contribute to risk management forums. Ensure prompt remediation, risk acceptance, and tracking of exceptions.Cloud and SaaS Security EnhancementsCollaborate with the Platform team to fortify AWS (IAM, KMS, network segmentation, Security Hub, GuardDuty, logging).Enhance endpoint security, identity and access management, vulnerability management, and logging throughout the organization.Leadership and Team CollaborationProvide daily guidance to TISO, Analysts, and cross-functional contributors.Foster a pragmatic, developer-friendly security culture through enablement, playbooks, and training.Vendor Management and Data GovernanceManage vendor security due diligence with defined SLAs and documentation trails. Assist data protection and BC/DR control owners.Required Qualifications:Demonstrated experience leading security initiatives in a cloud-native product environment.Deep understanding of security frameworks and compliance standards.Strong communication skills with the ability to collaborate effectively across teams.

Abound is changing how consumer lending works in the UK and beyond. By combining advanced AI with Open Banking data, the company looks at a person’s complete financial situation, not just a credit score, to make lending decisions that are fairer and more accurate. Since launch, Abound has issued over £1.3bn in loans, with a credit performance that outpaces industry averages. The company became profitable within 2.5 years and has backing from major investors, including Citi and Deutsche Bank. With over £2bn in funding, Abound is recognized as one of Europe’s fastest-growing fintechs. Role overview This Senior Security Engineer position is based in London and sits within the Platform team. The role blends DevSecOps responsibilities, serving as a bridge between product engineering and Corporate IT. As a hands-on contributor, the Senior Security Engineer critically reviews security architecture across both production and internal IT environments. During the first 6 to 12 months, the focus will be on designing and implementing next-generation cloud security architecture in AWS and GCP. The role also involves building and maturing internal SOC capabilities, particularly around detection and response. What you will do Manage Microsoft Sentinel to strengthen SIEM/SOAR capabilities Automate RBAC for identity and access management across AWS, Microsoft Entra, and internal systems Embed security controls into GitLab CI/CD pipelines, including scanning, infrastructure-as-code reviews, and automated policy enforcement Support a shift-left approach by integrating security throughout the software development lifecycle Technology stack Cloud & Compute: AWS, ECS Fargate, Aurora, Lambda, GCP Data Lake: S3, DMS, Glue Security & Identity: Microsoft Defender (XDR), Microsoft Sentinel (SIEM/SOAR), Defender for Cloud (CSPM), Microsoft 365, Entra, Intune Cloud Security Tooling: GuardDuty, Security Hub, Inspector, Security Command Center Code & Infrastructure: Terraform, GitLab CI/CD