Security Engineer

• Design, build, and maintain secure CI/CD pipelines with security gates that catch issues before they reach production.
• Systematically, consistently and automatically capture the risk exposure of Chainguards products.
• Implement and enforce software supply chain security controls: signed artifacts, SBOMs, provenance attestation (SLSA, Sigstore / Cosign).
• Proactively identify emerging customer security needs, and build solutions to meet these.
• Lead security architecture reviews and threat models for Kubernetes-based workloads running on GCP and AWS.
• Harden container images, Kubernetes cluster configurations, and cloud IAM postures — minimise attack surface across our product stack.
• Define and drive adoption of baseline security standards: pod security standards, network policies, workload identity, secrets management.
• Evaluate and operationalise CNAPP / CSPM tooling to maintain continuous visibility into cloud-native risk.

Senior Product Security Engineer

• Build and configure a COMS mock-up environment within the NATO Software Factory
• Recreate Jira and Confluence workflows, processes, plugins, and integrations
• Implement automation and synchronization mechanisms between environments
• Analyse and document functional and non-functional requirements
• Produce technical documentation suitable for third-party vendors
• Create demonstration materials and technical walkthroughs
• Support live demonstrations and stakeholder presentations
• Collaborate with NATO and NCIA subject matter experts

Senior Atlassian Consultant

• Support the development of Next Generation Network (NGN) architectures
• Evaluate current and emerging 5G and 6G technologies for military applications
• Develop technical studies, white papers, and architecture artefacts
• Analyse secure communications concepts and network architectures
• Conduct readiness assessments and technology maturity evaluations
• Review Network Management and Cyber Defence concepts
• Present findings and recommendations to NATO stakeholders
• Contribute to future communication strategies and capability development

Principal 5G & Network Architecture Consultant, Security Clearance

• Design and refine security profiles for NATO communication standards
• Analyze compliance with NATO Data Centric Security (DCS) requirements
• Develop proof-of-concept implementations and concept demonstrators
• Support interoperability and validation exercises
• Design and execute security validation testing
• Produce technical specifications and standards documentation
• Develop and maintain software components supporting secure information exchange
• Contribute to SCRUM-based development teams
• Support knowledge transfer and technical handover activities

Senior Secure Communications Engineer – Security Clearance

• Identification and management of security risks to Business Information within Complex Systems.
• Identification and management of security risks to Information Technology, Operational Technology and supporting processes.
• Plan, manage and recover from adverse events that may compromise a Business or System.

Cyber Security Consultant

• Keep customers, clients, and colleagues safe by identifying cyber-vulnerabilities
• Allocation of the correct risk rating and remediation prioritisation
• Development of vulnerability management operating model, policies, and procedures
• Communication of vulnerabilities to relevant parties
• Collaboration with Threat intelligence and Cyber Operations teams
• Reporting of remediation status of Security Assurance Specialist team findings

Enterprise Security Posture Management SME

• Work closely with client stakeholders to identify, assess, manage, and communicate cyber risks across a variety of programmes and operational environments.
• Act as a trusted advisor to help organisations establish effective cyber risk management practices, improve governance processes, and implement proportionate controls aligned to their risk appetite.
• Support the continued evolution of Local Digital Cyber Risk capability, helping to mature reporting processes, strengthen risk insights, and enhance the use of the NCSC Cyber Assessment Framework (CAF).
• Lead cyber risk activities, supporting and developing colleagues, fostering best practice, and ensuring clients remain resilient against an evolving threat landscape.

Cyber Risk Manager, Active Security Clearance Required

• Lead Tecknuovo’s cyber security strategy
• Strengthen internal information and cyber security posture
• Deliver advisory and commercial security value to clients
• Provide strategic oversight of security governance, risk management and compliance

Cyber Security Principal

• Enable 'secure by design' principles in system architecture
• Conduct security risk assessments
• Collaborate with stakeholders for security strategy development
• Participate in security policy development and maintenance

Security Consultant

• develop, implement and maintain solutions that support the safeguarding of the bank's systems and sensitive information
• provision of subject matter expertise on security systems and engineering patterns
• development and implementation of protocols, algorithms, and software applications to protect sensitive data and systems
• management and protection of secrets, ensuring that they are securely generated, stored, and used
• execution of audits to monitor, identify and assess vulnerabilities in the banks infrastructure/software and support the response to potential security breaches
• collaboration across the bank, including developers and security teams, to ensure that cryptographic solutions align with business objectives, security policies and regulatory requirements
• development/ implementation and maintenance of Identity and Access Management solutions and systems

• Take ownership of information security and technology risk across the Dental and Care business units
• Build strong working relationships with senior stakeholders across business and technology teams
• Guide how risks are identified, prioritised, managed, or escalated
• Act as the senior escalation point for complex or high-risk issues
• Represent security and risk positions in senior forums, clearly explaining options and impacts
• Help balance delivery priorities with security and risk considerations
• Keep up to date with emerging cyber threats and trends, sharing insights with the business
• Support a positive culture where security and risk decisions are clear, transparent, and well understood
• Lead, coach, and develop team members to support their growth and performance
• Make sure strong risk management practices are in place and aligned to regulations

Business Information Security Officer, Dental & Care Services

• Engage with multiple stakeholders to understand business objectives, identify security risks, and design security architectures that enable the safe delivery of business outcomes.
• Work closely with solution architects, engineering teams, delivery managers, and client leadership to ensure that security is embedded by design.
• Operate with a high degree of autonomy, applying your expertise to resolve complex security challenges and providing authoritative guidance across projects and programmes.
• Contribute to the growth of the Security Practice by developing new service offerings, maintaining security standards and artefacts, supporting business development activities, and mentoring junior colleagues.
• Help identify and shape new opportunities by engaging with client stakeholders to understand strategic security objectives and deliver value-driven outcomes.
• Be a confident communicator, capable of influencing senior stakeholders, facilitating workshops, and building consensus across multidisciplinary teams.

Security Architect

• The AI Information Security Specialist will play a key role in supporting the secure and resilient use of artificial intelligence across Standard Life.
• The role will focus on ensuring information security risks are appropriately identified, assessed and managed as AI use cases are designed, approved and operated under the AI Governance Framework.
• Working closely with technology, architecture, cyber security, data, risk and business teams, the role will provide expert advice and challenge on information security risks associated with AI, including model security, data protection controls, access management, resilience and third‑party risk.
• The role will support the business to embed proportionate security controls that enable innovation while maintaining strong security outcomes.
• Key responsibilities will include advising on information security considerations for AI use cases, supporting security risk assessments and control design, contributing to AI use case reviews through the AI Review Board and other governance forums, and maintaining AI‑related information security governance artefacts, registers and guidance.
• The role will also support the development of AI‑specific information security guidance and awareness, helping colleagues understand secure design and usage expectations and promoting consistent, well‑controlled practices across the organisation.

AI Information Security Specialist

• Be the internal security lead on our Greenfield Product with full access to source code, cloud infrastructure, and configurations.
• Ensure the product is enterprise-ready before customers go near it.
• Work alongside the Greenfield Product hardening squad for collaboration.
• Act as day-to-day counterpart to external security and pen test partners.
• Build and implement controls, not writing recommendations for others to action.
• Own AWS security posture including account structure, IAM, RBAC, logging, and monitoring.
• Manage SOC 2 Type II controls and evidence for the Greenfield Product on AWS.
• Handle application-level hardening including authentication, API rate limiting, web security headers, etc.
• Manage penetration test engagements with external firms, triaging findings, and closing them rapidly.
• Put automated processes in place for continuous security validation.
• Ensure data residency requirements are met for US and UK law firm customers.

AI Security Engineer

• Drive adoption and optimization of Splunk platform
• Provide strategic technical guidance
• Resolve complex customer challenges
• Collaborate with cross-functional teams

Senior Splunk Technical Account Manager – Cybersecurity

• work on complex systems provided by Thales
• provide specialist security architecture, technical leadership and guidance
• devise, develop and maintain reliable, secure, accreditable and economically sustainable security solutions
• advise on the development of high level security compliant architecture
• produce justification for architectural choices
• conduct security related tasks including production of engineering and architecture reports
• collaborate/interact with cyber suppliers/vendors for technical assessment of cyber products

Cyber Security Architect

• Configure, implement, and manage security hardware and software systems, Across both On-Premise & Cloud/SAAS Solutions
• Assume responsibility for maintaining accurate documentation and team processes for the allocated tools and services.
• Craft playbooks, policies, and custom rulesets, perform tool tuning and allowlisting to enhance security maturity.
• Contribute to the formulation of strategies for responding to and recovering from security incidents and breaches.
• Lead efforts to validate and test both hardware and software solutions, ensuring compliance with security standards.
• Monitor and manage security systems to ensure optimal performance and timely patching and updates.
• Work closely with vendors, system designers, and architects to shape and develop technical solutions that align with security requirements.
• Act as a subject matter expert, providing technical advice and contributing to the design and implementation of security policies and procedures.
• Collaborate with product management teams to ensure security milestones are met within delivery/sprint timelines with focus on continuous improvement.
• Be a mentor for team members, supporting and sharing knowledge.
• Automate wherever possible and challenge processes where there is no automation.
• Understand the business needs, work closely with key stakeholders.
• Knowledge of security policy implementation and deployment; experience of creating technical security standards based on established policy objectives and requirements.
• Continuously learn and adapt to new technologies, staying up to date with emerging security threats and trends.

Cyber Security Engineer

• Leading offensive security projects from initial idea through to execution and reporting
• Simulating real world attacks to uncover vulnerabilities across our systems, infrastructure, and products
• Partnering with engineering and security teams to improve detection, response, and resilience
• Bringing an attacker mindset into conversations - asking “what if?” and challenging assumptions
• Producing proof-of-concept exploits to clearly demonstrate risk and drive meaningful fixes
• Mentoring others in the team and acting as a highly independent technical lead on complex engagements

Senior Offensive Security Engineer

• Own and evolve the application security capability across the full software development lifecycle
• Embed secure-by-design principles
• Reduce risk exposure and strengthen cyber resilience across modern, cloud, and API-driven environments
• Work at the intersection of security, engineering, and business teams
• Ensure application risks are clearly understood, prioritised, and effectively managed

Application Security Lead

• Support the delivery of cybersecurity governance, risk, and compliance activities, ensuring alignment with frameworks including ISO 27001, NIST Cybersecurity Framework, Cyber Essentials, and GovAssure.
• Conduct information security risk assessments across business processes, programmes, projects, technology platforms, and third-party suppliers.
• Maintain security risk registers, track remediation actions, and support the effective management of cyber risk across business and technology functions.
• Produce high-quality security documentation, including policies, standards, compliance evidence, assessment reports, and executive-level reporting.
• Support internal and external audits, control reviews, assurance activities, and compliance assessments.
• Facilitate workshops and engage with stakeholders across technical, programme, operational, and leadership teams to gather requirements, collect evidence, and drive security initiatives.
• Support supplier assurance and third-party risk management activities.
• Assist with the development and continuous improvement of security governance processes and controls.
• Support in embedding security best practices, data governance, and Secure by Design principles across recovery, transformation, and operational workstreams.
• Contribute to security awareness, risk reporting, and governance activities across the client environment.

See all jobs on JobTailor