26 to 50 of 56 Security Posture Jobs in London

The Role: As our Cyber Intelligence Specialist, you will proactively identify, analyse, respond, and mitigate cyber threats that pose risks to Vanquis Banking Groups cybersecurity posture. This involves monitoring security events, conducting incident response activities, enhancing our threat detection capabilities, and ensuring compliance with policy, standards, and regulation. Your contributions will directly impact our ability to protect sensitive data … cybersecurity risks. As a Cyber Intelligence Specialist, you will: Actively participate the delivery of services provided by the Cyber Intelligence Centre including by not limited to Cyber Threat Intelligence, Security Posture Management, Cyber Security Incident Response, Threat Hunting, Penetration Testing & Red Team Testing, and Cyber Risk Mitigation. Incorporate threat intelligence into CIC activities. Collaborate and assist with … the investigation and resolution of complex security incidents. Support the delivery of retrospective improvements based on incident analysis, RCAs and PIRs. Engage with third-party security partners to enhance and mature services. Maintain centralised processes across all VBG product lines, promoting synergy and efficiency. Stay updated on the latest cyber threats, attack vectors, and trends in the cybersecurity More ❯

recognized as a "Best Company to Work For," and we're proud of our team for receiving awards for workplace effectiveness and flexibility. What You'll Do As our Security Engineer, you'll be responsible for managing our security posture as well as keeping our application safe from external threats. Our ideal Security Engineer will be … able to manage IT-related security issues, such as firewall management, HIDS/HIPS configuration, log monitoring, and audit compliance (SOC II). You will ensure that our software application is both manually and automatically penetration tested for security vulnerabilities (both Red Team and Blue Team exercises), and be a decision maker in all things security management … the plug" on a feature, application, or other business function if it represents a significant risk to the company. You will: Conduct penetration tests against web applications infrastructure Validate security on new hardware and software infrastructure Assist front-line company representatives with security questions Manage firewall rules and internal pentesting Manage SOC II controls and external pentesting Manage More ❯

Senior Cyber Security & Infrastructure Engineer - Azure - FinTech A well known FinTech is seeking a skilled Senior Cyber & Infrastructure Engineer to drive the next phase of its Microsoft cloud environment and cyber security strategy. This role offers an opportunity to join a forward-thinking IT function and be a key player in building secure, scalable systems and ensuring the … organisation stays ahead of evolving cyber threats. The successful candidate will take ownership of security architecture in a Microsoft cloud infrastructure environment to deliver resilient, and future proof solutions. Key Responsibilities: Implement and enhance secure, Microsoft Azure and Microsoft 365 platforms. Strengthen and manage the organisations security posture using Microsoft Defender for Endpoint, Sentinel, Intune, and other … Microsoft security solutions. Integrate and optimise EDR, XDR, and CrowdStrike (or similar platforms) to improve threat detection and response capabilities. Maintain effective access controls, including RBAC and Conditional Access Collaborate with Risk & Compliance teams to align infrastructure with ISO 27001, NIST, and CIS frameworks. Act as the technical SME for security infrastructure and collaborate with other Cloud, Compliance More ❯

Job Opportunity: Security Governance and Service Management Specialist Are you passionate about security governance and service management? Do you want to make a difference in the financial sector? If so, we have an exciting temporary position for you in the heart of London! Location: City of London Contract Type: Temporary Commute: Just a 1-minute walk from Liverpool … Street train station! Join our dynamic team at a leading financial institution and insurance provider! We're looking for a dedicated Security Governance and Service Management Specialist to help us enhance our security posture and ensure top-notch service delivery. What You'll Do: Develop and implement security governance frameworks to safeguard our assets. Collaborate with … cross-functional teams to ensure compliance with regulatory requirements. Monitor and manage security incidents, providing timely reporting and resolution. Conduct risk assessments and audits to identify vulnerabilities. Assist in the formulation of security policies and procedures. Provide training and support to staff on security best practises. What We're Looking For: Proven experience in security governance More ❯

tester Location: London, UK (Hybrid) Inside IR35 Contract (6months +) The Role Performs manual and automated penetration tests on networks, systems, web applications, and endpoints. Identifies, exploits, and documents security vulnerabilities to assess an organization's risk exposure. Develops detailed reports with findings, impact analysis, and actionable remediation re commendations. Simulates real-world attacks to test the effectiveness of … existing security controls and incident response. Keeps up to date with the latest vulnerabilities, exploit techniques and penetration testing tools in general and more specific to an airline industry, transportation sector. Your responsibilities: Performing IaC Automation and ServiceNow integrations to automate AWS Service catalogues. Planning and conducting the full-scope penetration tests of applications, APIs, internal infrastructure, networks, cloud … authentication, authorization bypass, input validation issues, cloud misconfigurations, AD misuses, etc. Create detailed reports, providing actionable advice to clients on how to address the identified vulnerabilities and improve their security posture; outlining identified vulnerabilities, their potential impact, and recommended remediation steps: including executive summaries and technical findings Collaborate with development, cloud, and infrastructure teams on remediation Test and More ❯

Overview At Vanta, our mission is to help businesses earn and prove trust. We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without … it. As a Vanta Customer Success Manager, you will play a pivotal role in guiding customers through their security and compliance journeys with Vanta's specialized solutions. By combining your customer-centric approach with expertise in Vanta's products and security best practices, you will contribute to the overall success and satisfaction of Vanta's customers in achieving … robust security and compliance outcomes through retention of customers and health of the book of business. Vanta's success over the last year was exponential and we are now working to solve the problem of how to provide world-class customer experience to as many security-minded software companies as possible. As a Vanta Customer Success Manager, you More ❯

At Vanta, our mission is to help businesses earn and prove trust.We believe that security should be monitored and verified continuously, and we empower companies to practice better security and prove it with ease. Vanta has a kind and talented team, and while some have prior security experience, many have been successful at Vanta without it. As … Vanta's Customer Success Manager, in the Upmarket space (Enterprise/Mid-Market), you will play a pivotal role in guiding customers through their security and compliance journeys with Vanta's specialised solutions. By combining your customer-centric approach with expertise in Vanta's products and security best practices, you will contribute to the overall success and satisfaction … of Vanta's customers in achieving robust security and compliance outcomes through retention of customers and health of the book of business. Vanta's success over the last year was exponential and we are now working to solve the problem of how to provide world-class customer experience to as many security-minded software companies as possible. As More ❯

Outside of IR35 – Remote/London My Customer is seeking a highly skilled DevSecOps Engineer with deep expertise in Cloud Security. This role is critical in strengthening their cloud security posture, ensuring compliance, and embedding security across our development pipelines. The ideal candidate will be hands-on, business-minded, and capable of bridging the gap between cyber … Engineer Previous experience working in a DevSecOps role – Outside IR35 Strong experience with Wiz – must be able to make recommendations on improvements Proven track record in DevSecOps pipeline design, security integration, and automation. Dev Experience but strong experience in Cloud Security. Prior experience leading or contributing to audit and certification readiness projects (ISO, Cyber Essentials, SOC2). Experience with … AWS GuardDuty, AWS Config, and broader AWS security services. Solid development background with the ability to understand engineering challenges and build secure solutions. Expertise in Cloud Security best practices (identity, monitoring, compliance, and remediation). Ability to create clear architecture and security maps. Strong communication skills to translate technical issues into business context. The DevSecOps Engineer is More ❯

Employee Senior Threat Detection Specialist Location: London Happy to talk flexible working The Opportunity As we focus on transformation across the organisation, we’re also investing in our cyber security capabilities to keep our people, data, and customers safe. That’s why we’re building a new Detection Engineering function—and we’re looking for a talented and driven … and accuracy. Build and tune custom detection logic for complex environments and emerging threats. Monitor evolving attacker tactics (TTPs), integrating insights into detection and prevention strategies. Collaborate across Cyber Security, Engineering, and Global IT teams to enhance security posture and incident response. About you Strong experience across both offensive and defensive cyber security disciplines. Deep understanding … of attacker tactics, techniques, and procedures (TTPs), with expertise in the MITRE ATT&CK Framework. Hands-on technical knowledge in cyber detection engineering, security tools, and infrastructure. Skilled in Detection-as-Code and experienced with SIEM query languages. Confident communicator with experience working alongside global technical teams and senior stakeholders. Proactive, collaborative, and driven by curiosity and continuous improvement. More ❯

Days In-Office Weekly) Salary: £51,000 - £61,000 Network IT is recruiting for a Network Manager to lead the delivery and ongoing improvement of network services and security operations for a large organisation in London. This permanent role offers hybrid working, competitive salary, and excellent benefits including pension, annual leave, and development opportunities. The role centres on ensuring … a resilient, scalable, and high-performing network environment across wired, wireless, and remote access platforms. Alongside this, youll oversee the security posture of the network, ensuring compliance, incident management, and protection against evolving threats supporting the wider IT strategy. Key Responsibilities: Develop and deliver the organisations network strategy , ensuring resilience, scalability, and alignment with IT transformation goals. Lead … and manage a high-performing team, responsible for wired, Wi-Fi, and remote access services. Oversee the security of the network , including compliance, vulnerability assessments, and incident response. Provide technical and strategic advice to senior stakeholders on network performance and emerging risks. Manage budgets, procurement, and vendor relationships, ensuring cost-effective service delivery. Drive continuous improvement and innovation in More ❯

Days In-Office Weekly) Salary: £51,000 - £61,000 Network IT is recruiting for a Network Manager to lead the delivery and ongoing improvement of network services and security operations for a large organisation in London. This permanent role offers hybrid working, competitive salary, and excellent benefits including pension, annual leave, and development opportunities.The role centres on ensuring a … resilient, scalable, and high-performing network environment across wired, wireless, and remote access platforms. Alongside this, you’ll oversee the security posture of the network, ensuring compliance, incident management, and protection against evolving threats – supporting the wider IT strategy. Key Responsibilities: Develop and deliver the organisation’s network strategy , ensuring resilience, scalability, and alignment with IT transformation goals. … Lead and manage a high-performing team, responsible for wired, Wi-Fi, and remote access services. Oversee the security of the network , including compliance, vulnerability assessments, and incident response. Provide technical and strategic advice to senior stakeholders on network performance and emerging risks. Manage budgets, procurement, and vendor relationships, ensuring cost-effective service delivery. Drive continuous improvement and innovation More ❯

Contract Type: Contract (6 months) Day Rate: 535 - 550 GBP (Inside IR35) Start Date: ASAP The Role We are seeking an experienced DevSecOps Pentester to join a high-performing security team. The successful candidate will conduct penetration tests and security assessments across CI/CD pipelines, cloud infrastructure, and application environments. You will integrate automated security tools … into DevOps workflows, identifying vulnerabilities before they reach production, and collaborate with developers and operations teams to enhance security posture. This role requires a mix of hands-on penetration testing, automation expertise, and strong collaboration skills within agile environments. Key Responsibilities Integrate security practices and tooling into DevOps pipelines. Perform penetration testing and security reviews on CI … phase, applying threat modelling and secure design principles. Deliver detailed reports, including executive summaries and technical findings, with actionable remediation advice. Retest vulnerabilities and validate fixes. Track and manage security issues via Jira workflows. Advise on secure deployment, IAM, and secrets management practices. Educate development and operations teams on emerging threats and best practices. Essential Skills & Experience Strong application More ❯

for AI-powered tools and GenAI applications. You'll work in a greenfield, lab-first environment to prototype, iterate, and deploy solutions that meet the highest standards of performance, security, and compliance in a regulated financial setting. Accountabilities & Responsibilities Design and develop modern, responsive front-end applications from the ground up using React, TypeScript, and Next.js. Build secure, performant … user interfaces that integrate with LLM APIs (e.g., Gemini, Azure OpenAI) and internal systems. Implement advanced front-end security features including token handling, session management, data masking, and audit logging. Translate UX/UI designs into modular, reusable components aligned with enterprise design systems. Integrate front-end applications with REST/GraphQL APIs, WebSockets, and backend services. Collaborate with … data privacy standards through secure coding practices and regular code reviews. Deploy applications to GCP (Firebase, Cloud Run) and Azure App Services using CI/CD pipelines hardened for security and compliance. Participate in code reviews, technical design discussions, and architecture planning sessions. Required Knowledge, Skills & Experience Proven experience building secure, production-grade front-end applications in regulated environments More ❯

for AI-powered tools and GenAI applications. You'll work in a greenfield, lab-first environment to prototype, iterate, and deploy solutions that meet the highest standards of performance, security, and compliance in a regulated financial setting. Accountabilities & Responsibilities Design and develop modern, responsive front-end applications from the ground up using React, TypeScript, and Next.js. Build secure, performant … user interfaces that integrate with LLM APIs (e.g., Gemini, Azure OpenAI) and internal systems. Implement advanced front-end security features including token handling, session management, data masking, and audit logging. Translate UX/UI designs into modular, reusable components aligned with enterprise design systems. Integrate front-end applications with REST/GraphQL APIs, WebSockets, and backend services. Collaborate with … data privacy standards through secure coding practices and regular code reviews. Deploy applications to GCP (Firebase, Cloud Run) and Azure App Services using CI/CD pipelines hardened for security and compliance. Participate in code reviews, technical design discussions, and architecture planning sessions. Required Knowledge, Skills & Experience Proven experience building secure, production-grade front-end applications in regulated environments More ❯

for AI-powered tools and GenAI applications. Working in a greenfield, lab-first environment, you will prototype, iterate, and deploy solutions that adhere to the highest standards of performance, security, and compliance in a regulated financial setting. Key Responsibilities: Design and develop modern, responsive front-end applications from the ground up using React, TypeScript, and Next.js. Build secure, performant … user interfaces that integrate with LLM APIs (e.g., Gemini, Azure OpenAI) and internal systems. Implement advanced front-end security features, including token handling, session management, data masking, and audit logging. Translate UX/UI designs into modular, reusable components aligned with enterprise design systems. Integrate front-end applications with REST/GraphQL APIs, WebSockets, and backend services. Collaborate closely … data privacy standards through secure coding practises and regular code reviews. Deploy applications to GCP (Firebase, Cloud Run) and Azure App Services using CI/CD pipelines hardened for security and compliance. Participate in code reviews, technical design discussions, and architecture planning sessions. Required Skills & Experience: Proven experience building secure, production-grade front-end applications in regulated environments (e.g. More ❯

working with a key client on a Network Analyst requirement. We’re looking for someone to play a pivotal role in delivering a network segmentation programme focused on improving security posture and preventing lateral movement. Essential Proven experience implementing network segmentation strategies Strong understanding of lateral movement risks and mitigation techniques Skilled in mapping data flows across complex More ❯

working with a key client on a Network Analyst requirement. We’re looking for someone to play a pivotal role in delivering a network segmentation programme focused on improving security posture and preventing lateral movement. Essential Proven experience implementing network segmentation strategies Strong understanding of lateral movement risks and mitigation techniques Skilled in mapping data flows across complex More ❯

may be necessary – providing feedback on behalf of the business as required. Projects Under the direction of the Central Operations Manager, administer development projects contributing to IT infrastructure, cyber security posture and process automation. Assist in the delivery of wider projects and programmes of work as when required. Communication and Relationships: Act as the first point of business More ❯

Senior Cyber Security Engineer Hybrid working policy: 3 days per week required in the office in London. The role will be responsible for developing, implementing, and maintaining security solutions that protect systems from ever-evolving cyber threats moving towards a zero-trust operating model. The role will serve as the technical lead, drive key security initiatives, play … a pivotal role in mentoring junior team members and increasing overall security posture. Core responsibilities: - Overall management and maintenance of the CrowdStrike platform, including configuring EDR policies, tuning SIEM rules, and optimizing the system for performance - Leading or participating in incident response efforts, conducting root cause analysis, and developing runbooks for incident handling - Monitoring for security threats, analysing … alerts, and responding to incidents using CrowdStrike and other security tools. Conduct vulnerability scans and support remediation and risk mitigation efforts - Oversee WAF, DDoS, VPN, and perimeter firewalls - Manage Email and Web Security Gateways - Work with Endpoint team to administer MFA, SSO, PAM, MDM/MAM, and Conditional Access - Maintain security certificates, encryption keys, and IDS/ More ❯

dynamic team. The ideal candidate will design, implement, and optimize secure network architectures, leveraging Microsoft cloud technologies to protect enterprise environments against evolving cyber threats. Key Responsibilities: Network Architecture & Security: Design and implement secure network infrastructures using Azure networking components (VNETs, NSGs, Azure Firewall, VPN Gateway, etc.). Integrate M365 security features (Defender for Office 365, Conditional Access … Entra. Consulting & Advisory: Provide expert guidance to clients on cybersecurity best practices, compliance (e.g., ISO 27001, NIST), and risk mitigation. Conduct assessments and audits of existing network and cloud security postures. Deliver workshops and training sessions on M365 and Azure security capabilities. Incident Response & Monitoring: Collaborate with SOC teams to monitor and respond to network-based threats. Utilize … for Cloud to detect and remediate vulnerabilities. Develop playbooks and automation for threat response. Required Skills & Experience: Proven experience in networking and cybersecurity consulting. Strong knowledge of Microsoft 365 security and compliance features. Hands-on experience with Azure networking and security services. Familiarity with SIEM tools, especially Microsoft Sentinel. Understanding of identity and access management (IAM), MFA, and More ❯

dynamic team. The ideal candidate will design, implement, and optimize secure network architectures, leveraging Microsoft cloud technologies to protect enterprise environments against evolving cyber threats. Key Responsibilities: Network Architecture & Security: Design and implement secure network infrastructures using Azure networking components (VNETs, NSGs, Azure Firewall, VPN Gateway, etc.). Integrate M365 security features (Defender for Office 365, Conditional Access … Entra. Consulting & Advisory: Provide expert guidance to clients on cybersecurity best practices, compliance (e.g., ISO 27001, NIST), and risk mitigation. Conduct assessments and audits of existing network and cloud security postures. Deliver workshops and training sessions on M365 and Azure security capabilities. Incident Response & Monitoring: Collaborate with SOC teams to monitor and respond to network-based threats. Utilize … for Cloud to detect and remediate vulnerabilities. Develop playbooks and automation for threat response. Required Skills & Experience: Proven experience in networking and cybersecurity consulting. Strong knowledge of Microsoft 365 security and compliance features. Hands-on experience with Azure networking and security services. Familiarity with SIEM tools, especially Microsoft Sentinel. Understanding of identity and access management (IAM), MFA, and More ❯

Cyber Security - Secure by Design Consultant (Contract) London | £680 per day | 6-month initial contract (with strong potential to go permanent) Deerfoot Recruitment is working with a leading financial services organisation to recruit a Secure by Design Consultant to join their IT Risk, Security & Control function in London. This is a 6-month contract paying £680 per day … high likelihood of converting to a permanent role. The successful candidate will play a key role in delivering secure-by-design assessments across technology projects, ensuring compliance with IT security policies and industry standards. You will work closely with senior stakeholders, providing assurance on cybersecurity controls, identifying risks, and recommending actions to strengthen the organisation's security posture. … Key responsibilities include: Conducting IT security assessments across infrastructure, cloud, applications, and service operations projects. Reviewing and testing security controls to ensure operating effectiveness. Documenting risks, gaps, and recommendations for remediation. Supporting project teams to embed security requirements from the outset. Engaging with senior stakeholders and providing clear, actionable reporting. Skills & experience sought: Strong background in IT More ❯

Cyber Security - Secure by Design Consultant (Contract) London | £680 per day | 6-month initial contract (with strong potential to go permanent) Deerfoot Recruitment is working with a leading financial services organisation to recruit a Secure by Design Consultant to join their IT Risk, Security & Control function in London. This is a 6-month contract paying £680 per day … high likelihood of converting to a permanent role. The successful candidate will play a key role in delivering secure-by-design assessments across technology projects, ensuring compliance with IT security policies and industry standards. You will work closely with senior stakeholders, providing assurance on cybersecurity controls, identifying risks, and recommending actions to strengthen the organisation's security posture. … Key responsibilities include: Conducting IT security assessments across infrastructure, cloud, applications, and service operations projects. Reviewing and testing security controls to ensure operating effectiveness. Documenting risks, gaps, and recommendations for remediation. Supporting project teams to embed security requirements from the outset. Engaging with senior stakeholders and providing clear, actionable reporting. Skills & experience sought: Strong background in IT More ❯

Design and implement PostgreSQL schemas, migrations, and triggers; ensure data integrity and performance. Integrate with Identity and Access Management (IdAM) systems. Ensure secure coding practices and compliance with platform security posture. Collaborate with UX, QA, and DevSecOps teams to deliver accessible, performant, and maintainable features. Monitor and troubleshoot applications Contribute to design discussions, code reviews, and maintain documentation in More ❯

A leading Fintech/Payments company is looking for a proactive and technically skilled Application Security Engineer/DevSecOps to champion secure development practices across our software delivery lifecycle. In this role, youll play a key part in identifying and reducing application-layer risks, integrating security into the development pipeline, and ensuring that security considerations are embedded … throughout the SDLC. Working closely with engineering and platform teams, youll help automate security processes, lead threat modelling exercises, and continually improve the organisations application security posture. Key Responsibilities Secure Development Lifecycle (SDLC) Experience working with static and dynamic code analysis tools (SAST, DAST) is essentialwhile you dont need to have set them up, you should have collaborated … with developers to ensure code is scanned and critical vulnerabilities are blocked in the pipeline. Integrate security controls into CI/CD pipelines and development workflows. Manage and monitor SAST, DAST, and SCA tools to detect vulnerabilities early in the lifecycle. Conduct secure code reviews and support remediation efforts. Threat Modelling & Architecture Review Requirements (Primarily Essential) 2+ years of More ❯