Find your next tech and IT Job or contract Security by design

🔐 𝗖𝗼𝗻𝘀𝘂𝗹𝘁𝗮𝗻𝘁 𝗦𝗲𝗻𝗶𝗼𝗿 – 𝗦𝗵𝗶𝗳𝘁-𝗟𝗲𝗳𝘁 𝗔𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗣𝗿𝗼𝗴𝗿𝗮𝗺 | 𝗚𝗿𝗼𝘂𝗽𝗲 𝗜𝗻𝗱𝘂𝘀𝘁𝗿𝗶𝗲𝗹 𝗜𝗻𝘁𝗲𝗿𝗻𝗮𝘁𝗶𝗼𝗻𝗮𝗹 🚀 𝗩𝗼𝘂𝘀 𝗲̂𝘁𝗲𝘀 𝗽𝗮𝘀𝘀𝗶𝗼𝗻𝗻𝗲́(𝗲) 𝗽𝗮𝗿 𝗹𝗮 𝘀𝗲́𝗰𝘂𝗿𝗶𝘁𝗲́ 𝗮𝗽𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝘃𝗲 𝗲𝘁 𝘀𝗼𝘂𝗵𝗮𝗶𝘁𝗲𝘇 𝗰𝗼𝗻𝘁𝗿𝗶𝗯𝘂𝗲𝗿 𝗮̀ 𝘂𝗻 𝗽𝗿𝗼𝗴𝗿𝗮𝗺𝗺𝗲 𝘀𝘁𝗿𝗮𝘁𝗲́𝗴𝗶𝗾𝘂𝗲 𝗮̀ 𝗹'𝗲́𝗰𝗵𝗲𝗹𝗹𝗲 𝗶𝗻𝘁𝗲𝗿𝗻𝗮𝘁𝗶𝗼𝗻𝗮𝗹𝗲 ? Dans le cadre d'une initiative majeure visant à intégrer la sécurité dès la conception des applications, nous recherchons un Consultant Senior Application Security / DevSecOps capable d'accompagner la définition, la gouvernance et le déploiement d'un programme global de sécurisation des développements. Vos missions ✅ Définir et structurer les standards Secure SDLC et DevSecOps ✅ Construire les modèles opérationnels, processus, KPI et gouvernance ✅ Piloter des études de marché, benchmarks, PoC, RFI/RFP autour des solutions AppSec ✅ Accompagner l'intégration des pratiques de sécurité dans les chaînes CI/CD ✅ Sécuriser la Software Supply Chain et la gestion des dépendances logicielles ✅ Sensibiliser et accompagner les équipes de développement à l'adoption des bonnes pratiques Secure Coding ✅ Contribuer aux travaux relatifs à l'IA générative, à la sécurité des agents IA et aux nouveaux usages du développement assisté par l'IA Profil recherché ✔ 5 ans d'expérience minimum en Application Security, DevSecOps ou Secure SDLC ✔ Expérience confirmée dans des environnements grands comptes internationaux ✔ Solide maîtrise des sujets : OWASP SSDLC DevSecOps SAST / DAST / IAST / SCA GitLab / GitHub Secrets Management Software Supply Chain Security Infrastructure as Code Security AI Security ✔ Très bonnes capacités de communication, coordination et pilotage transverse ✔ Anglais fluide indispensable Vous avez déjà participé à la transformation DevSecOps d'un grand groupe ou au déploiement d'un programme Application Security à grande échelle ? Échangeons. #ApplicationSecurity #AppSec #DevSecOps #SSDLC #SecureSDLC #OWASP #CyberSecurity #SoftwareSecurity #SecureCoding #AISecurity #Freelance

Mission au sein de la Direction des Systèmes d'Information d'un acteur de premier plan, dans un environnement multisite et hybride (on-premise et Cloud) à fortes exigences de maîtrise des risques cyber. Le département Cyberdéfense est en pleine montée en maturité. Il regroupe des équipes spécialisées dans la détection, la réponse à incident, la gestion des vulnérabilités et l'outillage des solutions de sécurité, et mène plusieurs chantiers structurants pour renforcer la détection, la résilience et la sécurité globale du SI. Rattaché à ce département, l'architecte interviendra notamment sur les axes suivants : - Cartographier et structurer l'existant (assets, applications, solutions de sécurité) - Définir et formaliser des architectures de sécurité cibles et les standards associés - Accompagner les projets et les équipes techniques dans l'intégration de la sécurité (security by design) - Garantir la cohérence globale des dispositifs de sécurité (on-premise, cloud, hybride) - Contribuer à l'amélioration des capacités de détection et de réponse, notamment via l'optimisation des architectures, des logs et de la télémétrie - Construire des standards de sécurité réutilisables par les équipes Le consultant pourra intervenir sur des projets liés à la gestion des vulnérabilités, à la Cyber Threat Intelligence, à l'orchestration de la réponse à incident (SOAR) et à l'évolution des capacités de collecte et d'analyse des logs (SIEM). Environnement technique : architectures multisite et hybrides (on-premise, cloud), sécurité réseau (pare-feu, WAF, IDS/IPS), modèles Zero Trust et défense en profondeur, EDR/XDR, SIEM, SOAR, sécurité cloud (Azure, AWS), IAM/PAM. Modalités : poste basé à Bois-Colombes, jusqu'à deux jours de télétravail par semaine selon les contraintes opérationnelles de la mission. Mission initiale de trois mois, renouvelable sur une durée longue. Démarrage dès que possible.

Information Security Manager with Network Engineering Skills Our Client is a bank based in Central London who are looking to recruit a seasoned professional with at least 7 to 10 years expertise level Information Security coupled with Hands-on Network Engineering. The role is mainly Information Security – Data Security and split circa 80% with 20% Network Engineering – so you do need to be hands-on technically. You will ideally have circa 5+ years of work experience with Network Engineering coupled with over 10 years experience with Cisco Systems Products Role Description The Information Security Manager with Network Engineering Skills is a full-time hybrid role based in London, with the flexibility to work from home part of the week. The role oversees the design, implementation, and continuous improvement of information security policies, procedures, and controls across networks and systems. Day-to-day responsibilities include managing the Information Security Management System (ISMS), monitoring cybersecurity and network security events, coordinating incident response, and ensuring compliance with relevant standards and regulations. The person in this role will collaborate with IT and business stakeholders to assess risks, implement technical and procedural safeguards, and support secure network architecture and configuration. Additional tasks include producing security documentation, leading security awareness initiatives, and providing guidance on secure network engineering practices. Qualifications · Strong skills in Information Security Management and Information Security, with experience defining and enforcing security policies and governance. · Hands-on expertise with Information Security Management Systems (ISMS), including implementation, maintenance, and audit readiness. · Proficiency in Cybersecurity and Network Security, covering threat detection, vulnerability management, network hardening, and incident response. · Demonstrated network engineering experience (eg, routing, switching, firewalls, VPNs, secure network design). · Relevant certifications such as CISSP, CISM, CISA, CompTIA Security+, or similar are beneficial. · Experience with regulatory and compliance frameworks (eg, ISO 27001, GDPR, NIST) and security best practices. · Ability to analyze complex technical environments, communicate clearly with both technical and non-technical stakeholders, and document security requirements and processes. · Bachelor's degree in computer science, information security, engineering, or a related field, or equivalent professional experience. Key Networking Skills Required: Cisco Network Switches Layer 2 and 3 (Catalyst 9K) – CCNP Level, Expert Level Preferred Routing protocol – OSPF (Catalyst 9K) – CCNP Level, Expert Level Preferred Cisco Switch Stacking (Cat 9K Switches 9600, 9300. 9200) Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting - CCNP Level, Expert Level Preferred High Availability and Disaster Recovery - CCNP Level, Expert Level Preferred Security/Cyber ​​​​Security Skills Required: Cisco Firepower Firewalls (ASA, FTD) - CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer 2 Port Security Network Access Control including Cisco ISE, TACACS etc. Network Detection and Response Network Encryption (Site to Site VPN's) Cisco Secure Client (ASA) Network IPS (Trellix) Network Zero Day (Trellix NX or similar) Host Zero Day (Trellix HX or similar) Cyber ​​Security Network Control Incident Investigation with the assistance of group cyber security experts – Tier 1, Tier 2 to 3 preferred, using LogRhythm SIEM a bonus Host End Point Protection (Symantec) Host IPS Preferred Skills and Knowledge Vulnerability Management (Scanning for Vulnerabilities and classifying the risk, CIS Benchmark Scanning and compliance) – Using Rapid7 a bonus Knowledge of Penetration Testing, understanding of the types of testing and their advantages and disadvantages Security Zone Design and considerations Network and Security Architecture Design and Considerations Understanding of Information Security (Confidentiality, Integrity, Availability), MITER ATT&CK, NIST, ISO 27001, SIEM use cases for key controls etc Risk Management in Cyber ​​Security, SSL Blind spots, what causes them and how to mitigate Malware/Ransomware and how to mitigate along with Penetration testing concepts Understanding of White/Black/Grey Box penetration testing. Developing Security policies and procedures and conducting audits/risk assessments Handling crisis situations during security incidents The role is hybrid 3 days in the office in Central London. The salary for this role will be in the range £85K - £100K + Benefits. Do send your CV to us in Word format along with your salary and notice period.

Information Security Manager with Network Engineering Skills Our Client is a bank based in Central London who are looking to recruit a seasoned professional with at least 7 to 10 years expertise level Information Security coupled with Hands-on Network Engineering. The role is mainly Information Security – Data Security and split circa 80% with 20% Network Engineering – so you do need to be hands-on technically. You will ideally have circa 5+ years of work experience with Network Engineering coupled with over 10 years experience with Cisco Systems Products Role Description The Information Security Manager with Network Engineering Skills is a full-time hybrid role based in London, with the flexibility to work from home part of the week. The role oversees the design, implementation, and continuous improvement of information security policies, procedures, and controls across networks and systems. Day-to-day responsibilities include managing the Information Security Management System (ISMS), monitoring cybersecurity and network security events, coordinating incident response, and ensuring compliance with relevant standards and regulations. The person in this role will collaborate with IT and business stakeholders to assess risks, implement technical and procedural safeguards, and support secure network architecture and configuration. Additional tasks include producing security documentation, leading security awareness initiatives, and providing guidance on secure network engineering practices. Qualifications · Strong skills in Information Security Management and Information Security, with experience defining and enforcing security policies and governance. · Hands-on expertise with Information Security Management Systems (ISMS), including implementation, maintenance, and audit readiness. · Proficiency in Cybersecurity and Network Security, covering threat detection, vulnerability management, network hardening, and incident response. · Demonstrated network engineering experience (eg, routing, switching, firewalls, VPNs, secure network design). · Relevant certifications such as CISSP, CISM, CISA, CompTIA Security+, or similar are beneficial. · Experience with regulatory and compliance frameworks (eg, ISO 27001, GDPR, NIST) and security best practices. · Ability to analyze complex technical environments, communicate clearly with both technical and non-technical stakeholders, and document security requirements and processes. · Bachelor's degree in computer science, information security, engineering, or a related field, or equivalent professional experience. Key Networking Skills Required: Cisco Network Switches Layer 2 and 3 (Catalyst 9K) – CCNP Level, Expert Level Preferred Routing protocol – OSPF (Catalyst 9K) – CCNP Level, Expert Level Preferred Cisco Switch Stacking (Cat 9K Switches 9600, 9300. 9200) Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting - CCNP Level, Expert Level Preferred High Availability and Disaster Recovery - CCNP Level, Expert Level Preferred Security/Cyber ​​​​Security Skills Required: Cisco Firepower Firewalls (ASA, FTD) - CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer 2 Port Security Network Access Control including Cisco ISE, TACACS etc. Network Detection and Response Network Encryption (Site to Site VPN's) Cisco Secure Client (ASA) Network IPS (Trellix) Network Zero Day (Trellix NX or similar) Host Zero Day (Trellix HX or similar) Cyber ​​Security Network Control Incident Investigation with the assistance of group cyber security experts – Tier 1, Tier 2 to 3 preferred, using LogRhythm SIEM a bonus Host End Point Protection (Symantec) Host IPS Preferred Skills and Knowledge Vulnerability Management (Scanning for Vulnerabilities and classifying the risk, CIS Benchmark Scanning and compliance) – Using Rapid7 a bonus Knowledge of Penetration Testing, understanding of the types of testing and their advantages and disadvantages Security Zone Design and considerations Network and Security Architecture Design and Considerations Understanding of Information Security (Confidentiality, Integrity, Availability), MITER ATT&CK, NIST, ISO 27001, SIEM use cases for key controls etc Risk Management in Cyber ​​Security, SSL Blind spots, what causes them and how to mitigate Malware/Ransomware and how to mitigate along with Penetration testing concepts Understanding of White/Black/Grey Box penetration testing. Developing Security policies and procedures and conducting audits/risk assessments Handling crisis situations during security incidents The role is hybrid 3 days in the office in Central London. The rate for this role will be in the range £500 pd to £650 pd. This is a 3-month assignment. Do send your CV to us in Word format along with your salary and notice period.

RSSI Responsable Cybersécurité, CDI ou freelance 36 mois de projet, IDF Hybride 2 jours de télé travail Excellente opportunité pour un(e) RSSI confirmé(e) de rejoindre un client final français à dimension international sur un vaste périmètre d'action et à forte visibilité. Vous interviendrez au sein d'une filiale, en lien direct avec le RSSI Groupe, dans un environnement complexe, réglementé et mêlant enjeux IT, réseaux et télécommunications. 💡 Vos responsabilités : • Décliner la stratégie cybersécurité Groupe au sein de la filiale et construire la feuille de route SSI. • Mettre en place et piloter la gouvernance sécurité : politiques, standards, indicateurs, reporting et comités. • Piloter les analyses de risques, les plans de remédiation et les sujets de conformité. • Accompagner les projets IT, réseaux et télécoms avec une approche security by design. • Superviser les sujets SOC, EDR et la relation avec les équipes ou prestataires de sécurité externes. • Contribuer au renforcement de la détection, de la réponse à incident et de la résilience du SI. • Coordonner les projets de sécurisation et les différentes parties prenantes techniques et métiers. • Assurer une communication claire et régulière auprès du RSSI Groupe et des directions locales.

Contexte : Rejoignez une équipe Agile pour contribuer au développement d'un portail web industriel multi-tenant. Le projet, actuellement en architecture monolithique (évolution vers des microservices prévue), utilise NestJS 11, TypeScript, Docker/OpenShift et une chaîne GitLab CI/CD. Missions principales : Développement backend : Conception et implémentation d'APIs REST avec NestJS, intégration dans une architecture moderne, sécurisée et évolutive. Collaboration Agile : Participation active aux cérémonies (daily, refinement, planning, review, rétrospective), découpage des User Stories en tâches techniques, estimation, et rédaction de scénarios Gherkin. Qualité et documentation : Rédaction de tests unitaires/E2E, documentation technique (Confluence), et documentation OpenAPI/Swagger. Standards et sécurité : Respect des bonnes pratiques (OWASP, Secure by Design, RBAC, RGPD) et contribution aux revues de code. Livrables attendus : Fonctionnalités backend développées et intégrées. APIs REST documentées (OpenAPI/Swagger). Tests unitaires et E2E couverts. Documentation technique (Confluence) et mise à jour des tickets Jira.

Almatek recherche pour l'un de ses clients, Un Consultant backend full stack ( NestJS / Typescript) Sur Massy. Environnement technique: Profil recherché Framework principal : NestJS 11 Architecture : APIs REST modernes Conteneurisation : Docker Plateforme : OpenShift CI/CD : GitLab CI/CD Documentation API : OpenAPI / Swagger Tests : Unitaires + Intégration + End-to-End Qualité logicielle : Clean Code, SOLID Pratiques de développement : Code Review + Pair Programming Sécurité : OWASP, Secure by Design, RBAC, RGPD Architecture attendue : Multi-tenant sécurisée Travail Agile : Participation aux cérémonies Scrum Contribution fonctionnelle : Découpage User Stories Spécifications : Rédaction des scénarios Gherkin Estimation : Chiffrage des User Stories Livrables : Backend, APIs documentées, tests, documentation, User Stories, tickets Jira, revues de code Rôle Senior : Tech Lead, résolution de problématiques complexes, accompagnement technique des développeurs Soft skills attendues : Autonomie, rigueur, esprit d'équipe, communication, capacité à challenger les choix techniques, culture qualité et sécurité

Description du poste💼 Mission : HELPLINE recherche un Ingénieur DevOps H/F en CDI pour accompagner la transformation digitale d'un de nos partenaires majeurs. Au sein du domaine, vous gérez l'exploitation et l'évolution des infrastructures Cloud pour 4 produits digitaux stratégiques (E-commerce, Magasins, Paiement). Vos responsabilités principales : Gestion & Automatisation : Déploiement via l'IaC (Terraform), GitOps et pipelines CI/CD (GitHub Actions). Culture DevOps/Agile : Animation des rituels et vulgarisation des bonnes pratiques auprès des équipes. Sécurité & FinOps : Application du "Secured by Design" et optimisation des coûts Cloud. Fiabilité (SRE) : Suivi des SLO et pilotage de l'observabilité/alerting via Datadog. Amélioration Continue : Scripting (Python) et optimisation constante des workflows. Qualifications🎯 Profil Recherché : De formation Bac+5, vous possédez entre 4 et 5 ans d'expérience sur un poste DevOps, idéalement avec une connaissance du secteur Retail. Idéalement avec du Python, GCP, SQL, GITHUB.

Contexte de la missionDans le cadre du renforcement d'une équipe cybersécurité, nous recherchons un consultant expert en cybersécurité opérationnelle, spécialisé Cloud, architecture technique et DevSecOps. L'objectif est d'accompagner les équipes digitales dans l'intégration de la sécurité au sein de leurs produits, d'industrialiser les pratiques sécurité et de faire monter les équipes en autonomie. Missions principalesAccompagner les équipes produit sur les sujets de sécurité (Security by Design, revues d'architecture, analyse de risques). Intégrer la sécurité dans les cycles DevOps et CI/CD (DevSecOps). Définir et diffuser les standards, méthodes et bonnes pratiques sécurité. Réaliser des analyses techniques, évaluations de sécurité et cadrages de pentests. Identifier les axes d'amélioration et proposer des plans d'action. Documenter les procédures, modes opératoires et référentiels techniques. Assurer une veille technologique sur les solutions Cloud et DevSecOps. Compétences techniques attenduesExpertise en architecture technique, infrastructure et Cloud. Très bonne maîtrise de GCP et des environnements Cloud modernes. Expérience confirmée en DevSecOps. Maîtrise des architectures microservices, conteneurs et API. Connaissance des environnements : GitHub / GitHub Actions / GitHub Advanced Security Terraform Docker Vault Kubernetes Trivy JFrog Datadog Kafka / APIs

Information Security Manager with Network Engineering Skills Our Client is bank based in Central London who are looking to recruit a seasoned professional with at least 7 to 10 years expertise level Information Security coupled with Hands-on Network Engineering. The role is mainly Information Security – Data Security and split circa 80% with 20% Network Engineering – so you do need to be hands-on technically. You will ideally have circa 5+ years of work experience with Network Engineering coupled with over 10 years experience with Cisco Systems Products Role Description The Information Security Manager with Network Engineering Skills is a full-time hybrid role based in London, with the flexibility to work from home part of the week. The role oversees the design, implementation, and continuous improvement of information security policies, procedures, and controls across networks and systems. Day-to-day responsibilities include managing the Information Security Management System (ISMS), monitoring cybersecurity and network security events, coordinating incident response, and ensuring compliance with relevant standards and regulations. The person in this role will collaborate with IT and business stakeholders to assess risks, implement technical and procedural safeguards, and support secure network architecture and configuration. Additional tasks include producing security documentation, leading security awareness initiatives, and providing guidance on secure network engineering practices. Qualifications Strong skills in Information Security Management and Information Security, with experience defining and enforcing security policies and governance. Hands-on expertise with Information Security Management Systems (ISMS), including implementation, maintenance, and audit readiness. Proficiency in Cybersecurity and Network Security, covering threat detection, vulnerability management, network hardening, and incident response. Demonstrated network engineering experience (e.g., routing, switching, firewalls, VPNs, secure network design). Relevant certifications such as CISSP, CISM, CISA, CompTIA Security+, or similar are beneficial. Experience with regulatory and compliance frameworks (e.g., ISO 27001, GDPR, NIST) and security best practices. Ability to analyze complex technical environments, communicate clearly with both technical and non-technical stakeholders, and document security requirements and processes. Bachelor's degree in computer science, information security, engineering, or a related field, or equivalent professional experience. Key Networking Skills Required: Cisco Network Switches Layer 2 and 3 (Catalyst 9K) – CCNP Level, Expert Level Preferred Routing protocol – OSPF (Catalyst 9K) – CCNP Level, Expert Level Preferred Cisco Switch Stacking (Cat 9K Switches 9600, 9300. 9200) Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting - CCNP Level, Expert Level Preferred High Availability and Disaster Recovery - CCNP Level, Expert Level Preferred Security/Cyber Security Skills Required: Cisco Firepower Firewalls (ASA, FTD) - CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer 2 Port Security Network Access Control including Cisco ISE, TACACS etc Network Detection and Response Network Encryption (Site to Site VPN's) Cisco Secure Client (ASA) Network IPS (Trellix) Network Zero Day (Trellix NX or similar) Host Zero Day (Trellix HX or similar) Cyber Security Network Control Incident Investigation with the assistance of group cyber security experts – Tier 1, Tier 2 to 3 preferred, using LogRhythm SIEM a bonus Host End Point Protection (Symantec) Host IPS Preferred Skills and Knowledge Vulnerability Management (Scanning for Vulnerabilities and classifying the risk, CIS Benchmark Scanning and compliance) – Using Rapid7 a bonus Knowledge of Penetration Testing, understanding of the types of testing and their advantages and disadvantages Security Zone Design and considerations Network and Security Architecture Design and Considerations Understanding of Information Security (Confidentiality, Integrity, Availability), MITRE ATT&CK, NIST, ISO 27001, SIEM use cases for key controls etc Risk Management in Cyber Security, SSL Blind spots, what causes them and how to mitigate Malware/Ransomware and how to mitigate along with Penetration testing concepts Understanding of White/Black/Grey Box penetration testing. Developing Security policies and procedures and conducting audits/risk assessments Handling crisis situations during security incidents The role is hybrid 3 days in the office in Central London. The salary for this role will be in the range £85K - £100K + Benefits. Do send your CV to us in Word format along with your salary and notice period.

Information Security Manager with Network Engineering Skills Our Client is bank based in Central London who are looking to recruit a seasoned professional with at least 7 to 10 years expertise level Information Security coupled with Hands-on Network Engineering. The role is mainly Information Security – Data Security and split circa 80% with 20% Network Engineering – so you do need to be hands-on technically. You will ideally have circa 5+ years of work experience with Network Engineering coupled with over 10 years experience with Cisco Systems Products Role Description The Information Security Manager with Network Engineering Skills is a full-time hybrid role based in London, with the flexibility to work from home part of the week. The role oversees the design, implementation, and continuous improvement of information security policies, procedures, and controls across networks and systems. Day-to-day responsibilities include managing the Information Security Management System (ISMS), monitoring cybersecurity and network security events, coordinating incident response, and ensuring compliance with relevant standards and regulations. The person in this role will collaborate with IT and business stakeholders to assess risks, implement technical and procedural safeguards, and support secure network architecture and configuration. Additional tasks include producing security documentation, leading security awareness initiatives, and providing guidance on secure network engineering practices. Qualifications Strong skills in Information Security Management and Information Security, with experience defining and enforcing security policies and governance. Hands-on expertise with Information Security Management Systems (ISMS), including implementation, maintenance, and audit readiness. Proficiency in Cybersecurity and Network Security, covering threat detection, vulnerability management, network hardening, and incident response. Demonstrated network engineering experience (e.g., routing, switching, firewalls, VPNs, secure network design). Relevant certifications such as CISSP, CISM, CISA, CompTIA Security+, or similar are beneficial. Experience with regulatory and compliance frameworks (e.g., ISO 27001, GDPR, NIST) and security best practices. Ability to analyze complex technical environments, communicate clearly with both technical and non-technical stakeholders, and document security requirements and processes. Bachelor's degree in computer science, information security, engineering, or a related field, or equivalent professional experience. Key Networking Skills Required: Cisco Network Switches Layer 2 and 3 (Catalyst 9K) – CCNP Level, Expert Level Preferred Routing protocol – OSPF (Catalyst 9K) – CCNP Level, Expert Level Preferred Cisco Switch Stacking (Cat 9K Switches 9600, 9300. 9200) Virtual Routing and Forwarding – (Catalyst 9600) Internetworking Troubleshooting - CCNP Level, Expert Level Preferred High Availability and Disaster Recovery - CCNP Level, Expert Level Preferred Security/Cyber Security Skills Required: Cisco Firepower Firewalls (ASA, FTD) - CCNP Level, Expert Level Preferred Palo Alto Firewalls – Specialist Level, Architect Level Preferred Cisco Layer 2 Port Security Network Access Control including Cisco ISE, TACACS etc Network Detection and Response Network Encryption (Site to Site VPN's) Cisco Secure Client (ASA) Network IPS (Trellix) Network Zero Day (Trellix NX or similar) Host Zero Day (Trellix HX or similar) Cyber Security Network Control Incident Investigation with the assistance of group cyber security experts – Tier 1, Tier 2 to 3 preferred, using LogRhythm SIEM a bonus Host End Point Protection (Symantec) Host IPS Preferred Skills and Knowledge Vulnerability Management (Scanning for Vulnerabilities and classifying the risk, CIS Benchmark Scanning and compliance) – Using Rapid7 a bonus Knowledge of Penetration Testing, understanding of the types of testing and their advantages and disadvantages Security Zone Design and considerations Network and Security Architecture Design and Considerations Understanding of Information Security (Confidentiality, Integrity, Availability), MITRE ATT&CK, NIST, ISO 27001, SIEM use cases for key controls etc Risk Management in Cyber Security, SSL Blind spots, what causes them and how to mitigate Malware/Ransomware and how to mitigate along with Penetration testing concepts Understanding of White/Black/Grey Box penetration testing. Developing Security policies and procedures and conducting audits/risk assessments Handling crisis situations during security incidents The role is hybrid 3 days in the office in Central London. The rate for this role will be in the range £500 pd to £650 pd. This is a 3 month assignment. Do send your CV to us in Word format along with your salary and notice period.