Egham Security Job Listings

Workable

SOC Analyst

Job Title: SOC Analyst Location: Reading, United Kingdom (Hybrid- 1-2 days/week) Job Type: Contract Inside IR35 Client: Wipro Job Overview: As an OT Senior Cyber Security Analyst, you will be responsible for maintaining SecOps (Security Operations) solutions, controls and processes across the organisation. You will be mentoring and assisting with leading the SOC team to ensure appropriate prioritisation and remediation of OT alerts and incidents. This role requires a deep understanding of SecOps concepts, technologies and best practices across IT and OT environments, as well as the ability to collaborate effectively with cross-functional teams. The ideal candidate will possess strong communication and incident management skills and will be committed to ensuring the highest level of security, compliance, and user experience. Responsibilities: Investigate security alerts from our SIEM tool and 3rd party MSSPs, and to provide appropriate incident response actions. Liaise with technology and business stakeholders in relation to cyber security issues/incidents providing clear descriptions and actions. Support the Cyber Security Operations Lead for security and privacy incidents, triaging events and performing root cause analysis to understand how incidents arise. Acting as the key contact and escalation point for the SOC and Thames Water Digital teams. Supporting out-of-hours incident investigations via an On-Call rota, covering 24*7*365 alongside our 3rd party MSSP. Monitor, analyse and optimise SecOps tool performance (e.g. SIEM, PAM), identify potential issues, and recommend and implement proactive solutions. Develop and maintain SecOps documentation, policies, and procedures. Collaborate with stakeholders to understand business requirements and implementing security controls that are proportionate to the risk. Maintain cyber security solutions with existing systems, applications, and infrastructure. Evaluate and recommend technologies, tools, and vendors to meet business needs. Perform proactive threat hunting for new and emerging cyber threats. Specialist in Operational Technology systems, defining monitoring alerts and ensuring the operation of effective security controls. Collect data that drives cyber security compliance metric dashboards. Support compliance with relevant industry standards, regulations, and best practices, such as GDPR, NIS and ISO 27001. Stay current on industry trends, emerging technologies, and best practices to continuously improve security operations. This job involves: Key Responsibilities Expectations Contextualize OT specific threats Responsible for understanding the Operational Technology estate, specific OT threats and controls and mitigations that are in place. To be able to use tools such as Claroty to understand network traffic and OT hardware limitations to avoid downtime due to active scans. Understand OT specific architecture frameworks Reduce risks with overlaying context Build direct relationships with Operations of the essential service alongside the OT team to understand and articulate operational risk and cyber risk. Maintain Security Operations Responsible for maintaining our security operations processes, including supporting an effective continuous improvement process surrounding the services provided. Familiarity desired with Microsoft security operations tools (e.g. Sentinel), and extensive knowledge of other security tools such as SOAR, EDR / XDR and IDAM. Reductions over time in repetitive tickets/alerts demonstrating successful tuning of security tooling and processes. Reduction over time in average time it takes to investigate and resolve security incidents demonstrating an increasing efficiency in SecOps processes. Operational metrics evidencing the effectiveness of security controls. Proactive Risk Remediation Follow a risk-based approach to continually identify, analyse and evaluate the effectiveness of security controls and relate them to appropriate (and proportionate) security controls. Responsible for helping the business to deliver new security controls and for performing proactive activities (e.g. threat hunting) to continuously evaluate and uncover vulnerabilities throughout the technology stack. Act as an ambassador within the Cyber Security team for the application of a risk-based approach and continuous risk reduction. Collate the data supporting dashboards with robust SecOps metrics that evidence the tangible reduction in risk and technical debt. 4 Incident Readiness & Response The Security Operations team holds primary responsibility for cyber security incident triage, management, and response. A consistent and reliable level of service is provided around both preparing the business for a significant cyber security incident (e.g. ransomware attack) and actual responses to live incidents. Responses to incidents are run in a structured, measured and auditable manner with continuous improvement integrated into incident management processes to ensure processes are always adapting to the changing threat landscape. Reduction over time in business impacts experienced as a result of cyber security incidents. Time between incident identification and remediation/closure reduces over time. The business is periodically educated on incident management procedures and readiness activities. All staff are aware of what constitutes a cyber security incident and how it should be reported. 5Continuous Improvement Demonstrate an ability to improve processes over time whether that be increases in efficiency or using automation. The more efficient SecOps processes are the shorter response time to incidents will be and the more time will be available to proactive security activities such as threat hunting. Gradual improvement over time of operational efficiencies as reporting in metrics/KPIs/dashboards. Demonstrable use of automation to eliminate manual processes. The qualifications, experience, technical skills, competencies, and values required are: Strong analytical and problem-solving abilities Some hands-on exposure to cyber security concepts and principles Experience in working with third party delivery partners and MSSPs Decision making and judgement Ability to innovate technical solutions Excellent planning and organising capabilities Essential Experience Minimum of 3 years of experience working with technical Cyber Security controls, preferably in an enterprise environment Minimum of 3 years of experience in control systems of essential service (ICS, SCADA, CNI) Exposure to working in or with a security operations centre (SOC) Triaging problems or issues in a structured and disciplined manner Experience in remediating cyber risks in ever-changing digital environments Essential Technical Skills & Qualifications Ability to explain complex IT / Security problems in a simple manner to non-technical audiences Strong understanding of OT infrastructure, networking, and end-user computing. Experience writing Kusto Query Language (KQL) for creating and tuning SIEM queries and alerts. Proficient in configuration and troubleshooting of multi-factor authentication (MFA), Privileged Access Management (PAM) and Security Information & Event Management (SIEM) systems, in particular Microsoft Sentinel. Desirable Experience Familiarity with managing network security capabilities such as NAC (Network Access Control), Firewalls, Proxies/VPN, IDS/IPS, etc. Leading and mentoring a team to deliver operational excellence. Desirable Technical Skills & Qualifications Degree in Cyber Security, Computer Science, Information Technology, Engineering, or related field. Microsoft SecOps specific certification(s) e.g. Microsoft Security Operations Analyst (SC-200, AZ-900) Any generic cyber security industry certification(s) such as CCSP, OT-specific certification(s) e.g. Claroty Cybersecurity Analyst

Reading, UK

Negotiable Salary

Workable

Security Architect

Security Architect Permanent role Job Location : London ( Hybrid) Languages: Python, Bash Tech Stack: NIST, Cyber Essentials, ISO27001, SOC 2, Azure Sentinel, IAM, SOAR, SIEM Security Standards: NIST, Cyber Essentials Plus, NCSC Security Guidelines, ISO27001, SOC 2 Cloud Platforms: Microsoft Azure (Security and Architecture frameworks, Well-Architected Framework, Cloud Adoption Framework) Security Areas: IAM, SIEM (Splunk, Azure Sentinel), SOAR, Threat Prevention Tools: Palo Alto Networks, FireEye, Nessus, Azure Key Vault, Terraform, Ansible Must Have : 5+ years in security architecture, Azure (Well- Architected Framework), Identity G Access Management (IAM), SIEM (Splunk, Azure Sentinel) Nice to have : Ansible, Terraform, TOGAF, Palo Alto Networks, FireEye, Nessus, data privacy regulations (GDPR, HIPAA) Requirements Tech Stack: NIST, Cyber Essentials, ISO27001, SOC 2, Azure Sentinel, IAM, SOAR, SIEM Security Standards: NIST, Cyber Essentials Plus, NCSC Security Guidelines, ISO27001, SOC 2 Cloud Platforms: Microsoft Azure (Security and Architecture frameworks, Well-Architected Framework, Cloud Adoption Framework)

London, UK

Negotiable Salary

Workable

Qualys Engineer

Job title : Qualys Engineer Job Type : Contract role 6+ Months - Inside Ir35 Job Location: London, UK( Hybrid-2/3 days in a week) Client: Mphasis Job description Implemented and managed Qualys deployments across diverse enviroments (on-premise,cloud,hybrid). Proficiency in writing Qualys queries and filters to target specific assets and vulnerbilities. Performing regular vulnerability scans and assessments using Qualys, identifying high-priority vulnerabilities. Worked extensively on collaborating with IT teams to prioritize and remediate vulnerbilities discovered through scans. Worked on escalating critical issues. Utilizing Qualys to monitor for emerging threats and potential security incidents. Worked closely with other team members to identify and mitigating critical issues using Qualys before they exploited. Consulted with departments and customers to discuss project development and proposals. Developing Custom Qualys policies and dashboard to streamline security operations.

London, UK

Negotiable Salary

Workable

Lead Security Engineer

At Fuse, we're building a fully integrated energy company, from developing solar, wind, and hydrogen to power trading & distributed energy installations. We sell directly to energy consumers, cutting out the middleman to reduce costs and pass on savings to customers. But we’re not stopping there. We’re also building the Energy Network: a decentralised network of smart devices where users get rewarded in Energy Dollars for electrifying their homes, shifting usage to off-peak hours, and helping balance the grid. The energy network helps the grid achieve energy stability, a crucial requirement for growth of AI data centers and energy intensive industries. We are looking for a seasoned and proactive Lead Security Engineer to help lead our security strategy. This role is crucial to protecting our core infrastructure, applications, and sensitive data as we continue to scale. The ideal candidate brings deep security expertise and thrives in fast-paced, product-focused environments. You will play a critical role in shaping secure architecture, implementing scalable protection mechanisms, and driving a security-first culture across the company. Key Responsibilities Security Architecture & Design Design and implement secure infrastructure across cloud, web, and distributed application environments. Provide architectural guidance for cryptographic key management, signing workflows, and secure APIs. Evaluate and enhance security of components related to digital asset management, identity systems, or transaction flows. Risk Management & Threat Modelling Conduct comprehensive threat modelling and risk assessments, especially around distributed or high-value transaction systems. Define controls for securing sensitive operations such as wallet integrations, off-chain/on-chain data flows, and internal tooling. Develop and manage internal threat intelligence processes to proactively identify and mitigate emerging risks. Security Operations & Incident Response Lead response to advanced threats and incidents, including analysis, containment, and remediation. Build and optimise detection mechanisms and playbooks for novel attack vectors, including abuse prevention and fraud detection. Governance, Compliance & Best Practices Help define internal standards for security development practices, secrets management, and infrastructure hardening. Maintain compliance with relevant frameworks (e.g., SOC 2, ISO 27001, GDPR), and support any industry-specific due diligence. Cross-Functional Collaboration Partner with engineering, product, and infrastructure teams to embed security best practices into all stages of development. Provide guidance on secure system design, especially in areas involving sensitive financial, identity, or cryptographic components. Requirements Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field. Proven experience as a Security Engineer or in a similar role. Strong understanding of security protocols, cryptography, authentication, and authorisation. Familiarity with securing systems that involve digital transactions, cryptographic operations, or high-privilege user actions. Knowledge of operating systems, network protocols, and software development security. Experience with AWS cloud security. Excellent analytical and problem-solving skills. Benefits Competitive salary and a stock options sign-on bonus Biannual bonus scheme Fully expensed tech to match your needs! Paid annual leave Breakfast and dinner for office based employees

London, UK

Negotiable Salary

IT Security Administrator63500060625027124

Workable

IT Security Administrator

PXO creates industry-leading Virtual Production and Visual Effects for premium Film and Episodic content. With over 20 industry awards and nominations, PXO, a Sony Pictures Entertainment company, is a trusted partner for storytellers and showrunners worldwide. PXO has been creating iconic work since 2001, from Martin Scorsese’s Academy Award winning Hugo and HBO’s Emmy winning Game of Thrones, House of the Dragon, through to Amazon’s The Boys, Marvel’s Ant-Man and the Wasp: Quantumania and many more. We're looking for an IT Security Administrator to join our IT team. In this role, you will provide expert guidance on IT security, contribute to the development of policies and procedures, and support the maintenance of enterprise-wide security solutions across multiple global regions. You will also hold responsibility for decision-making within your area of expertise, ensuring clear ownership and accountability. The ideal candidate will have a strong understanding of IT infrastructure and information security in large-scale, fast-paced environments. Responsibilities Information Security & Compliance Lead and coordinate incident response remediation activities across Office tenant and related infrastructure. Oversee the application security request review process, including white paper evaluations and coordination with InfoSec teams. Conduct Infosec Criticality Assessments (ICAs) and participate in DAART and IR meetings. Represent PXO in Sony CISO meetings and ensure alignment with broader Sony InfoSec policies. Enforce Sony security policies and standards in production environments. Manage and maintain IT Risk Register. Coordinate client security audits and support external certifications (e.g., TPN). Complete and manage client security questionnaires during bidding or audit processes. Conduct internal penetration tests and vulnerability assessments to proactively identify and mitigate security risks. Infrastructure & Systems Security Manage the firewall whitelisting and approval process. Oversee vulnerability and patch management workflows. Maintain sandbox and production environments; support workflow and network hardening (e.g., Microsoft 365, HiBob). Own and manage I/O and data transfer security procedures. Participate in systems design and implementation from a security perspective. Develop user and technical security documentation and training resources. Document and maintain critical security and infrastructure policies, e.g., Incident Response Plan, Business Continuity Plan, Change Management Procedures, and Disaster Recovery Plan. Test and improve Disaster Recovery capabilities and identify process gaps. Physical & On-Set Security Manage and maintain physical security systems including CCTV, alarm, and access control systems in collaboration with vendors. Advise on on-set data handling procedures, ensuring certified media and secure practices are in place. Legal & Regulatory Compliance Act as the liaison between IT/InfoSec and Legal on matters related to GDPR, data retention policies, and compliance. Ensure proper documentation, communication, and enforcement of data protection practices in line with regulatory standards. Requirements Five plus years of hands-on experience in security and/or infrastructure within an enterprise environment. Familiarity with enterprise information security standards such as Cyber Essentials, ISO 27001, 27002, Data Protection Act, and GDPR. Proficiency in Microsoft O365 Security solutions, Networking, Security operations, Vulnerability Management, and Security Auditing. Experience in security testing, vulnerability scanning, and risk management. Ability to create formal documents such as reports or procedures. Detailed knowledge of Microsoft O365 environment, Threat Intelligence analysis, Security Incident Response, and Disaster Recovery principles. Strong interpersonal skills, analytical mindset, and ability to communicate in non-technical language. Good organisational skills and the ability to manage and prioritise workload, along with experience in key security areas such as Zero Trust architecture, secure remote access, and security practices relevant to the digital content/VFX industry (e.g., TPN). Familiarity with SIEM tools, such as Splunk, is also highly desirable. An ITIL certification or similar would be preferred. Benefits Pixomondo is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, age, sexual orientation, gender identity, or other protected characteristics. Benefits may vary by location due to regional regulations and company policies. PXO does not accept resumes from recruiters. Unsolicited resumes are accepted directly from candidates only. PXO will not pay any fees associated with unsolicited resumes.

London, UK

Negotiable Salary

Cloud Security Engineer63500058475137125

Workable

Cloud Security Engineer

Kurt Geiger | About Us We are an inclusive, creative footwear and accessories brand powered by kindness. We want to empower our talent to be confident and true to themselves, the London way. London is our home, our heartbeat, and we draw inspiration from the energy and spirit of the city; its diversity and creativity. For over fifty years our team of in-house shoe and accessory designers have been creating authentic, distinctive designs from our London headquarters. The rainbow is our signature. It represents the good energy and love we have for our community and the many ways we collectively express our individual style. Cloud Security Engineer (InfoSec) We are seeking a Cloud Security Engineer (InfoSec) to join our Technology and Information security team. You’ll play a key role in designing, implementing, and supporting secure infrastructure, cloud services, and applications across the organisation. This position requires strong expertise in AWS, Microsoft cloud services (Intune, Azure, Entra), security auditing, and modern endpoint protection such as CrowdStrike. Responsibilities Monitor and respond to security incidents using EDR/XDR tools such as CrowdStrike, Microsoft Defender, and SIEM platforms. Perform regular audits and security assessments across cloud (AWS, Azure) and SaaS platforms to identify risks and ensure compliance with internal policies and industry standards (ISO 27001, CIS, NIST). Manage and enforce Identity and Access Management (IAM) controls, including conditional access, MFA policies, role-based access control (RBAC), and least-privilege enforcement across Microsoft Entra and AWS IAM. Support incident response processes including investigation, containment, eradication, and recovery of security events. Conduct vulnerability scanning and remediation follow-ups using tools. Develop and maintain security baselines, configuration hardening, and patch compliance reporting across endpoints and cloud systems. Assist in third-party risk assessments and ensure vendors meet security requirements. Participate in change advisory boards (CAB) to review infrastructure and application changes from a security perspective. Support internal and external compliance audits by gathering evidence, ensuring policy alignment, and reporting findings. Collaborate with SOC, DevOps, and IT operations teams to integrate security automation and build secure-by-design practices. Support the IT helpdesk with complex application and system security issues. Patch and secure endpoints (Windows/macOS), and mobile devices via Microsoft Intune, Jamf, or Meraki. Implement and support endpoint and network-level security controls: FortiGate, Cisco Meraki, and Zero Trust Network Access (ZTNA) principles. Provide technical documentation, runbooks, and SOPs for security operations and system configurations. Requirements Skills Required Previous experience in a technical IT security, cloud engineering, or InfoSec-focused role. Proven experience with Microsoft 365 Security, Azure Entra ID, Intune, and AWS IAM/Security Services. Strong background in cloud security (AWS/Azure), including the shared responsibility model. Familiarity with compliance frameworks (ISO 27001, GDPR, SOC 2, NIST). Hands-on experience with EDR tools (CrowdStrike, Defender for Endpoint) and SIEM/SOAR platforms. Basic scripting for automation and reporting using PowerShell or Python. Working knowledge of network security protocols, VPNs, firewalls, and web filtering tools. Understanding of patch management, application control, and vulnerability remediation. Desirable Qualifications Certifications such as CISSP, CISM, Security+, AWS Security Specialty, AZ-500, or MS-500. Experience working in or with a Security Operations Centre (SOC). Familiarity with DevSecOps, infrastructure-as-code, or cloud-native security practices. Benefits Competitive basic salary Pension and life assurance Enviable discounts Gym Discounts Summer Hours - 3pm Friday finish Half Day, Pay Day Friday (once per month) RetailTrust support And so much more! Our Culture We’re an energic fast-paced brand that embraces progress and strives for innovation. Hard work is rewarded with new opportunities at every level and kindness is celebrated in everything we do. Our summer working hours accommodate a healthy work life balance. Wellbeing is important to our working culture, which is why we nurture a friendly environment for talent to thrive in, alongside a vibrant social community. Our Stores The first Kurt Geiger store opened on London Bond street in 1963. Today, our brand has global appeal and is distributed in hundreds of cities around the world. We operate over 70 stand-alone stores nationwide, including our new flagship store on London Oxford street, and in over 400 stores globally. Beyond stand-alone stores and retail pop ups, our retail partners include some of the world’s most famous department stores. We Are One: For Love | For Diversity | For Change | For Equality | For Kindness | For Freedom | For Unity Against Racism INDRETAIL

London, UK

Negotiable Salary

Embedded Corporate Regional Security Manager UK/EU- Speculative Applications63500054749313126

Workable

Embedded Corporate Regional Security Manager UK/EU- Speculative Applications

Provide relevant business first, risk proportionate, pragmatic security advice and support for all client sites and personnel within area of operations aligned to the global Corporate Security Operations & Resilience strategy Provide leadership, advice and support to Security function across geographic area of responsibility ensuring capabilities and competencies are developed development to meet business needs and act as a force multiplier for the Corporate Security Operations & Resilience strategy. Support the client's product security and cross functional anti-counterfeiting programmes across geographic area of responsibility. Support programmes that secure the client’s end-to-end supply chain. Support the Crisis Management and Business Continuity programmes throughout the region. Oversee the security at client Headquarters in London and secondary executive premises. Oversee the security of board and executive-sponsored events in the UK and the wider Region. Deliver the Region’s Security Awareness and Education initiatives (to include: operational, security risk management, resilience and brand protection) Effective security incident management, investigations and advice to personnel at all levels. Undertake Site Security Assurance audits and manage the Global Security Services contract within area of responsibility, ensuring the highest levels of delivery and performance management. Advise on development and strategy for site technical security projects including security technology, equipment requirements and simplification processes. Develop & deliver strategic security awareness briefings for management teams and employees including other security education material as appropriate. Establish and maintain liaison with international and national intelligence and law enforcement agencies within area of responsibility to support the global Corporate Security Operations and Resilience response activities within geographic area of responsibility to limit disruption to business operations, including a 24/7 Corporate Security response service within area of responsibility as necessary. Identify threats to the BUs, assess risk and provide proportionate advice to effectively treat the risks. Requirements This role must have a strong understanding of Corporate Security procedures, risk management methodologies, investigation, incident management, crisis & continuity management, operational security threat management, business/security intelligence and security tech. Excellent written and oral communication skills and presentation skills are required to support all levels of client leadership with reliable and meaningful information to enable fact-based business decisions Strong leadership experience as well as extensive project management experience. The individual must be able to work on matrix teams to identify and address a variety of challenges with global security threat and risk management. Regional experience of the UK/EU is desired. Benefits As this is a speculative application, benefits are not disclosed here.

London, UK

Negotiable Salary