5 of 5 Contract Zero Trust Jobs in the Thames Valley

needs network, SASE and Cyber Security experience. Youll be leading the enhancement of the existing Microsoft Defender for Cloud Apps (MDCA) service model to support the implementation of Dynamic Trust Service Edge (DTSE), enabling modern, cloud-native access with strong Zero Trust principles. KEY RESPOSNIBILITES: Service Design & Operational Modelling Lead the service design for SASE and DTSE … capabilities Design and implement cloud-based application access control mechanisms to enable secure, scalable access to modern applications. Develop Zero Trust-based solutions to replace traditional remote access technologies such as VPN, proxies, and Citrix. Establish real-time, posture-aware access policies that adapt to user context, device health, and security posture for dynamic access control. Take ownership … case for investment in the updated service model. REQUIRED EXPERIENCE: Proven senior level experience in Service Design within strong Cyber Security and telecom environments Strong understanding of SASE frameworks , Zero Trust architecture , and cloud-native security Deep knowledge of MDCA (Microsoft Defender for Cloud Apps) or similar security solutions Experience in process design , operational modelling , and stakeholder engagement More ❯

will play a crucial role in modernising the company's vulnerability management capabilities, ensuring they can support a fast-moving business and stand as a strong pillar within their zero-trust framework. Accountabilities: Explore and document our baseline vulnerability management architecture Capture our vulnerability management requirements and usage scenarios, captured as a set of patterns that a future … for significant and impactful change Desired: Establishing observability platforms Capabilities adjacent to exposure/vulnerability management capabilities (ie cyber security asset management, attack surface management, etc) Pragmatic application of zero-trust philosophies Cloud based security (GCP, AWS and Azure) Pentest scoping and analysis experience Application security Threat modelling To apply for this position please submit your CV. Carbon60 More ❯

. Application Security (secure coding, API security, SAST/DAST, WAF integration). Container Security (Kubernetes, Docker, service mesh). Security Information and Event Management (SIEM) and logging strategies. Zero Trust Architecture principles. Proven experience with DevSecOps methodologies and securing CI/CD pipelines. Strong understanding of security frameworks such as NIST CSF, ISO 27001, CSA CCM, and More ❯

Ensure alignment with European regulatory standards (e.g., GDPR, PSD2, DORA, NIS2). Embed DevSecOps into SDLC and CI/CD pipelines using IaC and automation tools. Drive adoption of Zero Trust principles, secure APIs, container security, and logging strategies. What Were Looking For 15+ years in Information Security, with 78 years in Security Architecture roles. 5+ years of More ❯

NIST CSF, CSA CCM). - Integrate security into CI/CD and Infrastructure-as-Code workflows (DevSecOps). - Design and guide implementation of secure cloud infrastructure and services. - Champion Zero Trust and secure-by-design principles across the SDLC. - Evaluate, select, and integrate security technologies (e.g., CSPM, CWPP, SIEM). - Mentor engineers and contribute to security capability uplift More ❯