Find your next tech and IT Job or contract IT security in England

Explore the latest IT & tech jobs in England, home to numerous tech hubs and a diverse job market.

Your search returns 62 results.
Fixed term

Job Vacancy
Security Director

Published on

180 months
LS1 5RD, Leeds, England, United Kingdom
**4 days a week onsite in Leeds, Inside IR35** Your responsibilities: Security Leadership Strategy * Define and implement the company-s security strategy across AI, blockchain, and cloud environments. * Establish policies, standards, and governance frameworks aligned with industry best practices (ISO 27001, NIST, SOC2). * Lead incident response, risk assessment, and threat modeling programs. * Build and mentor a world-class security team. AI Data Security * Protect proprietary AI models, training data, and pipelines from data poisoning, model theft, or adversarial attacks. * Secure ML infrastructure across data collection, preprocessing, model training, and deployment. * Implement privacy-preserving techniques (eg, encryption, anonymization, federated learning). Crypto Blockchain Security * Oversee smart contract security audits, testing, and deployment pipelines. * Protect user assets across wallets, custody solutions, and crypto exchange mechanisms . * Monitor on-chain activity for suspicious behavior (rug pulls, flash loan attacks, etc). * Partner with external firms for protocol audits, bug bounty programs, and penetration testing . Infrastructure Application Security * Implement best practices in cloud security (AWS, GCP, Azure) , container security, and zero-trust networks. * Harden DevSecOps pipelines to ensure secure software delivery. * Work with engineering teams to integrate security by design into products. Compliance Risk Management * Ensure regulatory compliance with GDPR, SOC2, ISO, PCI-DSS, and crypto-specific frameworks . * Lead risk assessments for third-party vendors and service providers . * Collaborate with legal and compliance teams on KYC/AML security for crypto services. Your Profile Essential skills/knowledge/experience: * 15+ years of progressive experience in Information Security, with a significant focus (minimum 7-8 years) on Cybersecurity. * Proven track record in cybersecurity strategy, team leadership, and incident management. * Deep knowledge of blockchain protocols, smart contracts (Solidity, Rust), cryptography, and custody systems. * Strong expertise in cloud security, DevSecOps, and secure software development lifecycle (SSDLC). * Understanding of AI/ML systems security, including model attacks and data integrity risks. * Certifications preferred: CISSP, CISM, CISA, CEH, OSCP, CCSK, or blockchain security certs. LA International is a HMG approved ICT Recruitment and Project Solutions Consultancy, operating globally from the largest single site in the UK as an IT Consultancy or as an Employment Business & Agency depending upon the precise nature of the work, for security cleared jobs or non-clearance vacancies, LA International welcome applications from all sections of the community and from people with diverse experience and backgrounds. Award Winning LA International, winner of the Recruiter Awards for Excellence, Best IT Recruitment Company, Best Public Sector Recruitment Company and overall Gold Award winner, has now secured the most prestigious business award that any business can receive, The Queens Award for Enterprise: International Trade, for the second consecutive period.
Contractor

Contractor job
Security Architect

Published on

6 months
£475-500
LS1 5RD, Leeds, England, United Kingdom
Hybrid
Security Architect 6 Month contract initially Based: Remote/Leeds - Max 4 days p/w onsite Rate: £475 - £500 p/d - (via Umbrella company) We have a great opportunity with a world leading organisation where you will be provided with all of the support and development to succeed. A progressive organisation where you can really make a difference. We have a great opportunity for a Security Architect to join the team. We are looking for an exceptionally seasoned Security Architect with deep progressive experience, including extensive leadership in designing and implementing robust security architectures, particularly within large-scale cloud environments and the highly regulated financial domain. This role demands a deep understanding of complex security challenges, a proven track record of strategic influence, and the ability to translate business requirements into secure, scalable, and compliant technical solutions. Key Responsibilities: * Strategic Security Leadership: Define, evangelize, and evolve the overall cloud security architecture strategy and roadmap, aligning with business objectives, relevant European regulatory requirements (e.g., GDPR, DORA, PSD2, NIS2 Directive), and industry best practices. Act as a trusted security advisor to senior leadership, engineering teams, and business units on all aspects of cloud security. Lead the development and implementation of security architectural standards, patterns, and guidelines for cloud-native and hybrid-cloud deployments. * Solution Design & Assurance: Provide expert security architecture guidance for critical enterprise applications, infrastructure, and data platforms, with a strong focus on secure-by-design principles. Conduct comprehensive security architecture reviews of high-level and low-level designs, identifying risks, proposing effective controls, and ensuring adherence to security policies. Drive the selection and integration of security technologies and services within cloud ecosystems (AWS, Azure, GCP preferred). * Risk & Compliance Management: Lead threat modelling, risk assessments, and security posture management across cloud environments. Ensure architectural designs meet stringent regulatory compliance requirements relevant to the financial industry in Europe (e.g., data residency, privacy, operational resilience). Develop and implement security controls that align with frameworks like NIST CSF, ISO 27001, PCI DSS, and CSA CCM. * DevSecOps & Automation: Champion the integration of security into the entire SDLC (DevSecOps), promoting automated security testing, continuous compliance, and secure configuration management. Design secure CI/CD pipelines and infrastructure as code (IaC) templates. Your Profile Key Skills & Experience: * Deep progressive experience in Information Security, with a significant focus on Security Architecture. * Ideally 5+ years of hands-on experience specifically in Cloud Security Architecture for enterprise-scale deployments across at least one major public cloud provider (AWS, Azure, or GCP). Multi-cloud experience is highly preferred. * Deep expertise in financial services domain security, including understanding of common threats, European regulatory requirements (e.g., PSD2, DORA, EBA guidelines), and data privacy mandates (GDPR). * Extensive knowledge of security architecture principles for: * Identity & Access Management (IAM) in cloud (e.g., AWS IAM, Azure AD, GCP IAM). * Network Security (VPCs, firewalls, WAFs, micro-segmentation, private connectivity). * Data Security (encryption at rest/in transit, KMS, data classification, DLP). * Application Security (secure coding, API security, SAST/DAST, WAF integration). * Container Security (Kubernetes, Docker, service mesh). * Security Information and Event Management (SIEM) and logging strategies. * Zero Trust Architecture principles. * Proven experience with DevSecOps methodologies and securing CI/CD pipelines. * Strong understanding of security frameworks such as NIST CSF, ISO 27001, CSA CCM, and experience in translating these into practical architectural designs. * Hands-on experience with security tools and technologies for vulnerability management, secrets management, cloud security posture management (CSPM), and cloud workload protection platforms (CWPP). * Relevant industry certifications are highly desirable (e.g., TOGAF, CISSP, CCSP, AWS Certified Security - Specialty, Azure Security Engineer Associate, GCP Professional Cloud Security Engineer). This is an excellent opportunity on a great project of work, If you are looking for your next exciting opportunity, apply now for your CV to reach me directly, we will respond as soon as possible. LA International is a HMG approved ICT Recruitment and Project Solutions Consultancy, operating globally from the largest single site in the UK as an IT Consultancy or as an Employment Business & Agency depending upon the precise nature of the work, for security cleared jobs or non-clearance vacancies, LA International welcome applications from all sections of the community and from people with diverse experience and backgrounds. Award Winning LA International, winner of the Recruiter Awards for Excellence, Best IT Recruitment Company, Best Public Sector Recruitment Company and overall Gold Award winner, has now secured the most prestigious business award that any business can receive, The Queens Award for Enterprise: International Trade, for the second consecutive period.
Fixed term

Job Vacancy
Security Test engineer

Published on

6 months
London Borough of Croydon, United Kingdom
Hybrid
Role: Security test engineer Rate: Outside IR35 Location: 1-2 days onsite in London Duration: 6 months initially SC clearance required Security Tester - Job Description The Security Tester will play a key role in delivering robust application security testing aligned with Secure-by-Design (SbD) principles and compliance frameworks such as NIST, CAF, and CAT. This role supports the Home Office's strategic aim to scale enterprise security testing capabilities, reduce outsourcing reliance, and embed security into the software development lifecycle. Key Responsibilities Conduct Security Testing using SAST and DAST tools Collaborate with Cyber Security Managers and Governance teams to ensure alignment with organisational security policies and standards Mentor and upskill team testers in application security testing and automation Track and report on security metrics and KPIs, including vulnerability trends and remediation outcomes. Integrate security testing into CI/CD pipelines, supporting shift-left strategies and DevSecOps practices. Required Skills & Experience Strong understanding of security standards including OWASP, NIST SP 800-53, ISO 27001, and CIS Benchmarks. Experience with SAST/DAST tools and Cloud Security platforms (AWS, Azure). Familiarity with Secure-by-Design principles and organisational security policies. Experience with penetration testing, risk assessment, and compliance testing. Proficiency in tools such as JIRA, SharePoint, and vulnerability management platforms. Desirable Attributes Ability to interpret and apply OWASP and NIST security principles across diverse project environments. Strong stakeholder engagement and communication skills. Experience in developing deployment checklists and decision trees for secure tool usage. Certifications such as CREST CRT, OSCP, CEH, or SANS are highly desirable. Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Please note successful applicants will be required to be security cleared prior to appointment which can take up to a minimum 10 weeks. LA International is a HMG approved ICT Recruitment and Project Solutions Consultancy, operating globally from the largest single site in the UK as an IT Consultancy or as an Employment Business & Agency depending upon the precise nature of the work, for security cleared jobs or non-clearance vacancies, LA International welcome applications from all sections of the community and from people with diverse experience and backgrounds. Award Winning LA International, winner of the Recruiter Awards for Excellence, Best IT Recruitment Company, Best Public Sector Recruitment Company and overall Gold Award winner, has now secured the most prestigious business award that any business can receive, The Queens Award for Enterprise: International Trade, for the second consecutive period.
Fixed term

Job Vacancy
Security Solution Architect

Published on

HU17 9HR, Beverley, England, United Kingdom
We have a current opportunity for a Security Solution Architect on a contract basis. For further information about this position please apply. 🔐 Security Solution Architect - PAM 📍 Hybrid (UK-based) 3 days on-site Sheffield, Barnsley or Birmingham A leading financial services organisation is seeking a Security Solution Architect to support the design and delivery of a strategic Privileged Access Management (PAM) solution as part of a wider Identity & Access Management transformation. Key Responsibilities Design and maintain end-to-end PAM solutions, including detailed low-level designs. Align solutions with reference architecture and business requirements. Document key design decisions, deviations, risks, and mitigation strategies. Translate business needs into secure, scalable, and cost-effective technical solutions. Manage and escalate technical risks, mapping them to design decisions and outcomes. Promote strong documentation practices and collaborate with global teams. What You'll Need Proven experience in IAM/PAM architecture (e.g., CyberArk, Delinea, OneIdentity). Strong understanding of solution design, risk management, and technical governance. Proficiency with tools like BizzDesign, Jira, and Confluence. Relevant certifications (e.g., CISSP, CISM) are desirable. Please click to find out more about our Key Information Documents. Please note that the documents provided contain generic information. If we are successful in finding you an assignment, you will receive a Key Information Document which will be specific to the vendor set-up you have chosen and your placement. To find out more about Computer Futures please visit Computer Futures, a trading division of SThree Partnership LLP is acting as an Employment Business in relation to this vacancy | Registered office | 8 Bishopsgate, London, EC2N 4BQ, United Kingdom | Partnership Number | OC387148 England and Wales
Permanent

Job Vacancy
Cyber Security Cloud Assurance Specialist

Published on

£45k-50k
City of Bristol, United Kingdom
Hybrid
Job Title: Cyber Security Cloud Assurance Specialist Location: Preston or Frimley. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role Salary: Circa £50,000 dependent on experience What you'll be doing: Delivering cloud assurance services to the business, Enterprise IT, IM&T Sector and Group Functions Analysis of cloud solutions, providing control recommendations (covering technical / physical / procedural / personnel) to ensure cloud solutions are compliant with internal / external standards and regulations Conducting security risk assessments, working alongside stakeholders / Cloud Service Providers to ensure identified risks are reduced to acceptable levels, advising appropriate mitigating requirements where necessary Delivering documentation to demonstrate compliance to internal and external stakeholders Assessment of and provision of control effectiveness in managing information security risk Supporting development of strategy and continual service improvement for the assurance function & business cloud adoption Your skills and experiences: Essential: Infrastructure, IT and / or IT Security experience associated with the management of cloud platforms, security risk and architectures Experience of cloud administration, security or auditing Working knowledge of Vulnerability Management, particularly in prioritisation and remediation Working knowledge of industry security standards such as; NCSC Cloud Principles, Cloud Security Alliance Desirable: Threats, risks, vulnerabilities and risk mitigations strategies and techniques, specifically for Cloud services Benefits: As well as a competitive pension scheme, BAE Systems also offers employee share plans, an extensive range of flexible discounted health, wellbeing and lifestyle benefits, including a green car scheme, private health plans and shopping discounts - you may also be eligible for an annual incentive. The Cloud Security Assurance Team: As part of the Cloud Security Assurance team, you will act as a subject matter expert in relation to cloud security, working closely with a variety of projects throughout the organisation. You will be responsible for providing security input, technical oversight, advice and assurance, to ensure cloud services utilised by the organisation are implemented and operated securely. Progressing policies and procedures, this role has great exposure across multiple business units within BAE Systems in a tight-knit team and friendly working environment. Why BAE Systems? This is a place where you'll be able to make a real difference. You'll be part of an inclusive culture that values diversity of thought, rewards integrity, and merit, and where you'll be empowered to fulfil your potential. We welcome people from all backgrounds and want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks. Closing Date: 29th October 2025 We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible. #LI-NP1 #LI-Hybrid
Contractor

Contractor job
SC cleared Operational Technology Security Specialist

Published on

6 months
OX13 6YP, Vale of White Horse, England, United Kingdom
An SC cleared Operational Technology Security Specialist is required for an initial 6 month outside of ir35 contract. The clients site is Abingdon this is a hybrid role paying £450 per day outside ir35 for 4 days working remotely 1 day on site or £500oper day outside of ir35 for 4.5 days on site and .5 day remotely. The OT Security Specialist will lead the development and maturation of the Operational Technology (OT) security capability as part of a greenfield security programme. This includes defining and implementing an OT Security Strategy, developing policies and standards, and introducing appropriate security controls across OT environments. The OT Security Specialist will provide technical and governance oversight of OT security, ensuring alignment with industry frameworks (IEC 62443, NIST CSF, CAF, ISO 27001) and with enterprise cyber security objectives. The role will combine hands-on implementation, strategic oversight, and the creation of governance artefacts. You will also engage with engineering teams and managed service providers (MSPs) to ensure that OT security controls are effectively designed, implemented, and sustained. Experience with SIEM/SOC integration is valuable and considered desirable. Key Skills and experience: *Lead the design and delivery of the OT Security Strategy, policies, and standards. *Define governance processes for OT security, ensuring alignment with enterprise security frameworks. *Conduct OT risk assessments and gap analyses against recognised standards (IEC 62443, NIST CSF, CAF). *Identify, prioritise, and oversee the implementation of security controls across OT systems and networks. *Provide technical oversight and assurance when engaging with MSPs and third-party vendors. *Collaborate with enterprise security teams to align OT security with broader cyber programmes. *Support OT incident response activities, including escalation paths to SOC teams where relevant. *Mentor and support junior team members in OT security concepts and practices. *Track and report on OT security maturity progress against roadmap milestones. oDemonstrable experience in maturing OT security within ICS or critical infrastructure environments. oProven ability to create and implement OT security strategies, policies, and standards. oStrong knowledge of OT security frameworks and standards (IEC 62443, NIST CSF, CAF, ISO 27001). oExperience conducting OT security risk assessments, gap analysis, and remediation planning. oKnowledge of OT networks, segmentation, and common industrial protocols. oExperience working with operations and engineering teams in OT environments. oAbility to provide technical oversight for MSPs or third-party security service providers. oStrong communication and documentation skills, particularly in policy/standards creation. *Desirable Experience: oFamiliarity with SIEM/SOC integration for OT environments. oExperience with OT asset discovery, monitoring, and security tool deployment. o Exposure to regulatory compliance in critical infrastructure (e.g., NIS Directive, UK CAF). oMay be requested to represent the Group in OT security working groups, act as an SME in OT-related projects, and contribute to the development of internal security capability through training and mentoring Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Please note successful applicants will be required to be security cleared prior to appointment which can take up to a minimum 10 weeks. LA International is a HMG approved ICT Recruitment and Project Solutions Consultancy, operating globally from the largest single site in the UK as an IT Consultancy or as an Employment Business & Agency depending upon the precise nature of the work, for security cleared jobs or non-clearance vacancies, LA International welcome applications from all sections of the community and from people with diverse experience and backgrounds. Award Winning LA International, winner of the Recruiter Awards for Excellence, Best IT Recruitment Company, Best Public Sector Recruitment Company and overall Gold Award winner, has now secured the most prestigious business award that any business can receive, The Queens Award for Enterprise: International Trade, for the second consecutive period.
Fixed term

Job Vacancy
AWS Security Specialist

Published on

6 months
BS1 2BD, Bristol, England, United Kingdom
Remote role, however may occasionally need to attend site in Bristol. Main duty: Needs to be an expert in AWS security so needs to show experience in this from previous roles. 1. Other duties: 2. Delivering Infrastructure-as-Code (IaC) solutions to optimize efficiency and scalability. 3. AWS Infrastructure support in a large environment. 4. Understanding and experience of CI/CD pipelines. Designing orchestration strategies for seamless, repeatable deployments LA International is a HMG approved ICT Recruitment and Project Solutions Consultancy, operating globally from the largest single site in the UK as an IT Consultancy or as an Employment Business & Agency depending upon the precise nature of the work, for security cleared jobs or non-clearance vacancies, LA International welcome applications from all sections of the community and from people with diverse experience and backgrounds. Award Winning LA International, winner of the Recruiter Awards for Excellence, Best IT Recruitment Company, Best Public Sector Recruitment Company and overall Gold Award winner, has now secured the most prestigious business award that any business can receive, The Queens Award for Enterprise: International Trade, for the second consecutive period.
Permanent

Job Vacancy
Principal Engineer - Cyber Security

Published on

£47k-61,500
GU16 7EQ, Frimley, England, United Kingdom
Job Title: Principal Engineer - Cyber Security Location: Frimley, Bristol, Weymouth, Portsmouth. We offer a range of hybrid and flexible working arrangements - please speak to your recruiter about the options for this particular role. Salary: Up to £61,500 depending on skills and experience What you'll be doing: Define and implement risk-based cybersecurity requirements for systems and subsystems, providing technical expertise and guidance across all aspects of cyber security and resilience Conduct in-depth cybersecurity analysis, including development of threat taxonomies, security architectures, security baselines, and risk mitigation strategies Develop and execute cybersecurity test plans and schedules, carrying out both informal and formal security testing activities Support engineering lifecycle reviews and design assurance processes to ensure security is embedded throughout system development Produce and maintain key security artefacts, including risk registers, security assurance cases, plans, and schedules, while contributing security input to broader engineering documentation Your skills and experiences: Essential: Degree in a relevant STEM subject or maintaining recognised Industry Security Qualifications e.g., CCP, CISSP Proven experience of assessing and managing risk in line with industry good practice (NIST, ISO 27001) Significant experience with using security baselines, mitigations and controls Considerable familiarity with a life cycle phased approach Desirable: Experience in Product Security activities in a highly regulated environment Operational Technologies/ Industrial Control Systems experience Benefits: As well as a competitive pension scheme, BAE Systems also offers employee share plans, an extensive range of flexible discounted health, wellbeing and lifestyle benefits, including a green car scheme, private health plans and shopping discounts - you may also be eligible for an annual incentive. The Engineering Delivery team: The team designs, builds, integrates and provides through life support to all the Submarine Platforms in the Royal Naval fleet. You will ensure the submarine systems and products are developed to support the delivery of an appropriately secure and resilient product. Through application of your knowledge and experience, you shall identify, analyse, evaluate and manage information security risks associated with the products used on-board the submarine. Speaking knowledgably and credibly with customers, users and internal stakeholders you shall provide advice on the causes of the risks identified, their likelihood and potential operational impacts. We offer relocation support packages across all Submarines roles, subject to meeting eligibility criteria. Why BAE Systems? This is a place where you'll be able to make a real difference. You'll be part of an inclusive culture that values diversity of thought, rewards integrity, and merit, and where you'll be empowered to fulfil your potential. We welcome people from all backgrounds and want to make sure that our recruitment processes are as inclusive as possible. If you have a disability or health condition (for example dyslexia, autism, an anxiety disorder etc.) that may affect your performance in certain assessment types, please speak to your recruiter about potential reasonable adjustments. Please be aware that many roles at BAE Systems are subject to both security and export control restrictions. These restrictions mean that factors such as your nationality, any nationalities you may have previously held, and your place of birth can restrict the roles you are eligible to perform within the organisation. All applicants must as a minimum achieve Baseline Personnel Security Standard. Many roles also require higher levels of National Security Vetting where applicants must typically have 5 to 10 years of continuous residency in the UK depending on the vetting level required for the role, to allow for meaningful security vetting checks. We reserve the right to close this vacancy early if we receive sufficient applications for the role. Therefore, if you are interested, please submit your application as early as possible. #LI-AG1 #LI-Hybrid
Permanent

Job Vacancy
Head of IT Infrastructure and Security

Published on
Azure
ISO 27001
Managed Service Provider (MSP)

£85k-95k
City of London, England, United Kingdom
Hybrid
Head of IT Infrastructure and Security In summary we are looking to recruit an all-round individual with expert knowledge and hands-on experience of IT Infrastructure coupled with Security, Compliance & Risk Management You must have upwards of 10 years hands-on expertise in IT Infrastructure combined with Security and Risk – ideally from within the banking or insurance sector. The Head of IT Infrastructure and Security Lead is responsible for overseeing the organization's IT operations, ensuring the stability, continuity, security, and efficiency of its technology platforms within a global commercial insurance environment. Some of the key points to consider for this role are: • Define and enforce cloud security policies, identity management, and access controls to protect systems, networks, and data. • Oversee the adoption of zero-trust security principles to enhance protection across cloud platforms. • Manage identity and access management (IAM) in a cloud-first environment, including Azure AD, MFA, Conditional Access, SSO, and Privileged Access Management (PAM). • Lead threat monitoring, detection, and response using cloud-native security solutions such as Microsoft Defender, Sentinel, and SIEM platforms. • Ensure compliance with cloud security frameworks and regulatory requirements (ISO 27001, NIST, GDPR, SOC2, FCA). Technology: • Microsoft Azure Infrastructure design and administration, including topology, Azure networking, services, and component knowledge, • Microsoft AD (Entra), Server and SQL experience, • O365 administration and design • Microsoft 365 & Azure: Strong experience managing Microsoft 365 (Exchange, SharePoint, Teams), Azure cloud infrastructure, and security tools such as Microsoft Defender and Sentinel. • Security & Compliance: Deep knowledge of security frameworks (ISO 27001, NIST, CIS), compliance requirements (GDPR, SOC2), and risk management best practices. Summary: • Problem-Solving & Decision-Making: Capable of making informed decisions and resolving complex IT issues in a fast-paced environment. • Stakeholder Engagement: Ability to communicate effectively with technical and non-technical stakeholders, including senior leadership and business users. The role will involve managing a Cloud environment in a team of 4 Technical people. Managing 6 different suppliers which include Security, IT Networks, Hosting and Servers and 3rd party software. The aim of the role is to bring the MSP's (suppliers of hardware and software) to the same page for the stakeholders and the Board and ensure technology is running smoothly. The Client is a financial organization based in the City of London. This is a hybrid position with 3 days in the office. The salary for this role will be in the range £85K - £95K plus Excellent Benefits. Do send your CV to us in Word format along with your salary and notice period.
Fixed term

Job Vacancy
Security test engineer

Published on

6 months
London Borough of Croydon, United Kingdom
Role: Security tester Rate: Outside IR35 Location: 1-2 day a week onsite Croydon (maybe less) Duration: 6 months initially SC clearance required Security Tester - Job Description The Security Tester will play a key role in delivering robust application security testing aligned with Secure-by-Design (SbD) principles and compliance frameworks such as NIST, CAF, and CAT. This role supports the Home Office's strategic aim to scale enterprise security testing capabilities, reduce outsourcing reliance, and embed security into the software development lifecycle. Key Responsibilities Conduct Security Testing using SAST and DAST tools Collaborate with Cyber Security Managers and Governance teams to ensure alignment with organisational security policies and standards Mentor and upskill team testers in application security testing and automation Track and report on security metrics and KPIs, including vulnerability trends and remediation outcomes. Integrate security testing into CI/CD pipelines, supporting shift-left strategies and DevSecOps practices. Required Skills & Experience Strong understanding of security standards including OWASP, NIST SP 800-53, ISO 27001, and CIS Benchmarks. Experience with SAST/DAST tools and Cloud Security platforms (AWS, Azure). Familiarity with Secure-by-Design principles and organisational security policies. Experience with penetration testing, risk assessment, and compliance testing. Proficiency in tools such as JIRA, SharePoint, and vulnerability management platforms. Desirable Attributes Ability to interpret and apply OWASP and NIST security principles across diverse project environments. Strong stakeholder engagement and communication skills. Experience in developing deployment checklists and decision trees for secure tool usage. Certifications such as CREST CRT, OSCP, CEH, or SANS are highly desirable. Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Please note successful applicants will be required to be security cleared prior to appointment which can take up to a minimum 10 weeks. LA International is a HMG approved ICT Recruitment and Project Solutions Consultancy, operating globally from the largest single site in the UK as an IT Consultancy or as an Employment Business & Agency depending upon the precise nature of the work, for security cleared jobs or non-clearance vacancies, LA International welcome applications from all sections of the community and from people with diverse experience and backgrounds. Award Winning LA International, winner of the Recruiter Awards for Excellence, Best IT Recruitment Company, Best Public Sector Recruitment Company and overall Gold Award winner, has now secured the most prestigious business award that any business can receive, The Queens Award for Enterprise: International Trade, for the second consecutive period.
Contractor

Contractor job
Security Analyst / Detection Engineer

Published on

6 months
£500-540
Corsham, England, United Kingdom
Hybrid
***SC CLEARED*** Security Analyst / Detection Engineer 4 Month contract initially Based: Remote/Corsham - Max 3 days p/w onsite Rate: £500 - £537 p/d (via Umbrella company) We have a great opportunity with a world leading organisation where you will be provided with all of the support and development to succeed. A progressive organisation where you can really make a difference. We have a great opportunity for a Security Analyst / Detection Engineer to join the team for an initial 4 month contract. The ideal candidate will have good Security analyst skills, knowledge of working in a SOC environment beneficial, knowledge of defence environment and culture. You will have the ability to operate standard SOC tools (SIEM), incident investigation, detection engineering Embedded with an existing Customer SOC. Key Responsibilities: * Conduct reactive monitoring of the networks to deliver a layered, agile cyber defence capability across all security domains. * Manage and triage alerts; conduct impact assessments and develop mitigating strategies to be briefed up the chain of command. * Improve and comply all extant cyber security policies, procedures and orders, review and amend when required. * Maintain and share knowledge of current cyber issues, vulnerabilities and exploits through research, technical reports and briefs Key Skills & Experience: * Experienced Tier 2 SOC analyst * Knowledge of Data networks * Knowledge & experience with SIEM tool sets and security management tools. Desirable Security Qualifications: CompTIA S+/N+/CySA+, AWS, MS, SANS, CISSP etc. * Ideally have some experience with UK defence or military space. This is an excellent opportunity on a great project of work, If you are looking for your next exciting opportunity, apply now for your CV to reach me directly, we will respond as soon as possible. Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Please note successful applicants will be required to be security cleared prior to appointment which can take up to a minimum 10 weeks. LA International is a HMG approved ICT Recruitment and Project Solutions Consultancy, operating globally from the largest single site in the UK as an IT Consultancy or as an Employment Business & Agency depending upon the precise nature of the work, for security cleared jobs or non-clearance vacancies, LA International welcome applications from all sections of the community and from people with diverse experience and backgrounds. Award Winning LA International, winner of the Recruiter Awards for Excellence, Best IT Recruitment Company, Best Public Sector Recruitment Company and overall Gold Award winner, has now secured the most prestigious business award that any business can receive, The Queens Award for Enterprise: International Trade, for the second consecutive period.
Fixed term

Job Vacancy
DevSecOps Lead

Published on

40 months
EC3V 3LA, City of London, England, United Kingdom
y client within Investment Banking are looking for a DevSecOps SME to join their team. The role will be working on the integration of security practices into our DevOps pipelines Requirements Design, implement, and maintaining secure CI/CD pipelines. Integrate security tools and practices into DevOps workflows (e.g., SAST, DAST, SCA, secrets management). Collaborate with development, operations, and security teams to implement and ensure secure coding and deployment practices. Advise on threat modelling, risk assessments, and vulnerability management. Provide expert guidance on cloud security (AWS, Azure, GCP) and container security (Docker, Kubernetes). Develop and enforce security policies, standards, and best practices. Lead incident response and root cause analysis for security-related issues. Mentor and train teams on DevSecOps principles and tools. Contract: 6 Months Rolling Rate: £800-£900 Via Umbrella Location: London - 2 days per week in the office. Please click to find out more about our Key Information Documents. Please note that the documents provided contain generic information. If we are successful in finding you an assignment, you will receive a Key Information Document which will be specific to the vendor set-up you have chosen and your placement. To find out more about Huxley, please visit Huxley, a trading division of SThree Partnership LLP is acting as an Employment Business in relation to this vacancy | Registered office | 8 Bishopsgate, London, EC2N 4BQ, United Kingdom | Partnership Number | OC387148 England and Wales
Contractor

Contractor job
Full Stack Developer

Published on

3 months
£325-350
England, United Kingdom
Remote
* Front end & language: JavaScript, HTML; responsive UI patterns and web standards. * Back end: Node.js and Spring Boot microservices; RESTful API design and API management (policies, rate limiting, security), EKS (Kubernetes), Containerisation (Docker). * Integration: data layer integration; event driven design with Kafka; NoSQL (MongoDB/DocumentDB). * Security: IDAM/IdP, SSO, RBAC, SSL/TLS, KMS (key management and envelope encryption patterns), Graph API. * Cloud operability: telemetry and logging on AWS; performance and availability monitoring. * Tooling & delivery: Jira, Confluence, GitHub, CI/CD pipelines; automated testing and code reviews. Desirable skills (nice to have) * Caching & sessions: Redis; session management via Kong. * Networking: VPC, VPN patterns for secure service connectivity. * Realtime comms: SignalR (or equivalent) for push/real time features. Experience profile * Demonstrable delivery of citizen or staff facing services at scale using JavaScript/HTML, Node.js, Spring Boot, REST APIs and event driven integrations on AWS. * Should be proficient in Kubernetes & Containerisation of Applications (primarily using Docker). * Track record of embedding security, observability and automation (tests, builds, deployments) into the development life cycle; strong CI/CD discipline and Git best practices. * Experience collaborating in multi disciplinary teams to meet security, accessibility, performance and reliability standards Due to the nature and urgency of this post, candidates holding or who have held high level security clearance in the past are most welcome to apply. Please note successful applicants will be required to be security cleared prior to appointment which can take up to a minimum 10 weeks. LA International is a HMG approved ICT Recruitment and Project Solutions Consultancy, operating globally from the largest single site in the UK as an IT Consultancy or as an Employment Business & Agency depending upon the precise nature of the work, for security cleared jobs or non-clearance vacancies, LA International welcome applications from all sections of the community and from people with diverse experience and backgrounds. Award Winning LA International, winner of the Recruiter Awards for Excellence, Best IT Recruitment Company, Best Public Sector Recruitment Company and overall Gold Award winner, has now secured the most prestigious business award that any business can receive, The Queens Award for Enterprise: International Trade, for the second consecutive period.
Permanent

Job Vacancy
Associate DevSecOps Engineer - 1-5 years experience

Published on

£40k-50k
CB1 9AS, Teversham, England, United Kingdom
Hybrid
About the Role We're looking for a Junior DevSecOps Engineer to join our growing team and help deliver secure, automated solutions across cloud and on-prem environments. This is a fantastic opportunity for someone with 1-5 years of real-world experience who wants to deepen their skills in DevOps, security, and automation while working on impactful projects. You'll work alongside experienced engineers in an Agile environment, contributing to the design, build, and deployment of secure systems. If you're passionate about automation, cloud technologies, and security best practices, this role is for you. What You'll Do Support the design, development, and deployment of secure software and infrastructure. Build and maintain CI/CD pipelines and automate workflows. Work with cloud platforms (AWS, GCP, or Azure) and Infrastructure as Code tools like Terraform. Assist in monitoring, troubleshooting, and resolving issues in development and production environments. Collaborate with cross-functional teams to implement security controls and best practices. Learn and grow by working on real-world projects with senior engineers. What We're Looking For 1-5 years experience in DevOps, DevSecOps, or related engineering roles. Hands-on experience with Linux systems and scripting (Bash, Python, or PowerShell). Familiarity with CI/CD tools (GitHub Actions, Jenkins, CircleCI). Basic understanding of cloud services (AWS, GCP, or Azure). Interest in security principles , threat detection, or incident response. Strong problem-solving skills and willingness to learn. Nice to Have Exposure to containerization (Docker, Kubernetes). Knowledge of monitoring tools (Grafana, Datadog). Experience with SIEM/SOC tools or security automation. Cloud certifications or security training (AWS, GCP, Azure, or similar). To find out more about Computer Futures please visit Computer Futures, a trading division of SThree Partnership LLP is acting as an Employment Business in relation to this vacancy | Registered office | 8 Bishopsgate, London, EC2N 4BQ, United Kingdom | Partnership Number | OC387148 England and Wales
62 results

Contracts

Contractor Permanent

Location
1

England, United Kingdom

Remote type

Hybrid Remote On-site

Rate minimum.

£150 £1300 and more

Salary minimum

£20k £250k

Experience

0-2 years experience 3 to 5 years experience 6 to 10 years experience +10 years experience

Date posted

Connecting Tech-Talent

Free-Work, THE platform for all IT professionals.

Free-workers
Resources
About
Recruiters area
2025 © Free-Work / AGSI SAS
Follow us