Hackney Security Job Listings

Workable

Security Architect

Security Architect Permanent role Job Location : London ( Hybrid) Languages: Python, Bash Tech Stack: NIST, Cyber Essentials, ISO27001, SOC 2, Azure Sentinel, IAM, SOAR, SIEM Security Standards: NIST, Cyber Essentials Plus, NCSC Security Guidelines, ISO27001, SOC 2 Cloud Platforms: Microsoft Azure (Security and Architecture frameworks, Well-Architected Framework, Cloud Adoption Framework) Security Areas: IAM, SIEM (Splunk, Azure Sentinel), SOAR, Threat Prevention Tools: Palo Alto Networks, FireEye, Nessus, Azure Key Vault, Terraform, Ansible Must Have : 5+ years in security architecture, Azure (Well- Architected Framework), Identity G Access Management (IAM), SIEM (Splunk, Azure Sentinel) Nice to have : Ansible, Terraform, TOGAF, Palo Alto Networks, FireEye, Nessus, data privacy regulations (GDPR, HIPAA) Requirements Tech Stack: NIST, Cyber Essentials, ISO27001, SOC 2, Azure Sentinel, IAM, SOAR, SIEM Security Standards: NIST, Cyber Essentials Plus, NCSC Security Guidelines, ISO27001, SOC 2 Cloud Platforms: Microsoft Azure (Security and Architecture frameworks, Well-Architected Framework, Cloud Adoption Framework)

London, UK

Negotiable Salary

Workable

Qualys Engineer

Job title : Qualys Engineer Job Type : Contract role 6+ Months - Inside Ir35 Job Location: London, UK( Hybrid-2/3 days in a week) Client: Mphasis Job description Implemented and managed Qualys deployments across diverse enviroments (on-premise,cloud,hybrid). Proficiency in writing Qualys queries and filters to target specific assets and vulnerbilities. Performing regular vulnerability scans and assessments using Qualys, identifying high-priority vulnerabilities. Worked extensively on collaborating with IT teams to prioritize and remediate vulnerbilities discovered through scans. Worked on escalating critical issues. Utilizing Qualys to monitor for emerging threats and potential security incidents. Worked closely with other team members to identify and mitigating critical issues using Qualys before they exploited. Consulted with departments and customers to discuss project development and proposals. Developing Custom Qualys policies and dashboard to streamline security operations.

London, UK

Negotiable Salary

Workable

Lead Security Engineer

At Fuse, we're building a fully integrated energy company, from developing solar, wind, and hydrogen to power trading & distributed energy installations. We sell directly to energy consumers, cutting out the middleman to reduce costs and pass on savings to customers. But we’re not stopping there. We’re also building the Energy Network: a decentralised network of smart devices where users get rewarded in Energy Dollars for electrifying their homes, shifting usage to off-peak hours, and helping balance the grid. The energy network helps the grid achieve energy stability, a crucial requirement for growth of AI data centers and energy intensive industries. We are looking for a seasoned and proactive Lead Security Engineer to help lead our security strategy. This role is crucial to protecting our core infrastructure, applications, and sensitive data as we continue to scale. The ideal candidate brings deep security expertise and thrives in fast-paced, product-focused environments. You will play a critical role in shaping secure architecture, implementing scalable protection mechanisms, and driving a security-first culture across the company. Key Responsibilities Security Architecture & Design Design and implement secure infrastructure across cloud, web, and distributed application environments. Provide architectural guidance for cryptographic key management, signing workflows, and secure APIs. Evaluate and enhance security of components related to digital asset management, identity systems, or transaction flows. Risk Management & Threat Modelling Conduct comprehensive threat modelling and risk assessments, especially around distributed or high-value transaction systems. Define controls for securing sensitive operations such as wallet integrations, off-chain/on-chain data flows, and internal tooling. Develop and manage internal threat intelligence processes to proactively identify and mitigate emerging risks. Security Operations & Incident Response Lead response to advanced threats and incidents, including analysis, containment, and remediation. Build and optimise detection mechanisms and playbooks for novel attack vectors, including abuse prevention and fraud detection. Governance, Compliance & Best Practices Help define internal standards for security development practices, secrets management, and infrastructure hardening. Maintain compliance with relevant frameworks (e.g., SOC 2, ISO 27001, GDPR), and support any industry-specific due diligence. Cross-Functional Collaboration Partner with engineering, product, and infrastructure teams to embed security best practices into all stages of development. Provide guidance on secure system design, especially in areas involving sensitive financial, identity, or cryptographic components. Requirements Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or related field. Proven experience as a Security Engineer or in a similar role. Strong understanding of security protocols, cryptography, authentication, and authorisation. Familiarity with securing systems that involve digital transactions, cryptographic operations, or high-privilege user actions. Knowledge of operating systems, network protocols, and software development security. Experience with AWS cloud security. Excellent analytical and problem-solving skills. Benefits Competitive salary and a stock options sign-on bonus Biannual bonus scheme Fully expensed tech to match your needs! Paid annual leave Breakfast and dinner for office based employees

London, UK

Negotiable Salary

IT Security Administrator63500060625027123

Workable

IT Security Administrator

PXO creates industry-leading Virtual Production and Visual Effects for premium Film and Episodic content. With over 20 industry awards and nominations, PXO, a Sony Pictures Entertainment company, is a trusted partner for storytellers and showrunners worldwide. PXO has been creating iconic work since 2001, from Martin Scorsese’s Academy Award winning Hugo and HBO’s Emmy winning Game of Thrones, House of the Dragon, through to Amazon’s The Boys, Marvel’s Ant-Man and the Wasp: Quantumania and many more. We're looking for an IT Security Administrator to join our IT team. In this role, you will provide expert guidance on IT security, contribute to the development of policies and procedures, and support the maintenance of enterprise-wide security solutions across multiple global regions. You will also hold responsibility for decision-making within your area of expertise, ensuring clear ownership and accountability. The ideal candidate will have a strong understanding of IT infrastructure and information security in large-scale, fast-paced environments. Responsibilities Information Security & Compliance Lead and coordinate incident response remediation activities across Office tenant and related infrastructure. Oversee the application security request review process, including white paper evaluations and coordination with InfoSec teams. Conduct Infosec Criticality Assessments (ICAs) and participate in DAART and IR meetings. Represent PXO in Sony CISO meetings and ensure alignment with broader Sony InfoSec policies. Enforce Sony security policies and standards in production environments. Manage and maintain IT Risk Register. Coordinate client security audits and support external certifications (e.g., TPN). Complete and manage client security questionnaires during bidding or audit processes. Conduct internal penetration tests and vulnerability assessments to proactively identify and mitigate security risks. Infrastructure & Systems Security Manage the firewall whitelisting and approval process. Oversee vulnerability and patch management workflows. Maintain sandbox and production environments; support workflow and network hardening (e.g., Microsoft 365, HiBob). Own and manage I/O and data transfer security procedures. Participate in systems design and implementation from a security perspective. Develop user and technical security documentation and training resources. Document and maintain critical security and infrastructure policies, e.g., Incident Response Plan, Business Continuity Plan, Change Management Procedures, and Disaster Recovery Plan. Test and improve Disaster Recovery capabilities and identify process gaps. Physical & On-Set Security Manage and maintain physical security systems including CCTV, alarm, and access control systems in collaboration with vendors. Advise on on-set data handling procedures, ensuring certified media and secure practices are in place. Legal & Regulatory Compliance Act as the liaison between IT/InfoSec and Legal on matters related to GDPR, data retention policies, and compliance. Ensure proper documentation, communication, and enforcement of data protection practices in line with regulatory standards. Requirements Five plus years of hands-on experience in security and/or infrastructure within an enterprise environment. Familiarity with enterprise information security standards such as Cyber Essentials, ISO 27001, 27002, Data Protection Act, and GDPR. Proficiency in Microsoft O365 Security solutions, Networking, Security operations, Vulnerability Management, and Security Auditing. Experience in security testing, vulnerability scanning, and risk management. Ability to create formal documents such as reports or procedures. Detailed knowledge of Microsoft O365 environment, Threat Intelligence analysis, Security Incident Response, and Disaster Recovery principles. Strong interpersonal skills, analytical mindset, and ability to communicate in non-technical language. Good organisational skills and the ability to manage and prioritise workload, along with experience in key security areas such as Zero Trust architecture, secure remote access, and security practices relevant to the digital content/VFX industry (e.g., TPN). Familiarity with SIEM tools, such as Splunk, is also highly desirable. An ITIL certification or similar would be preferred. Benefits Pixomondo is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, age, sexual orientation, gender identity, or other protected characteristics. Benefits may vary by location due to regional regulations and company policies. PXO does not accept resumes from recruiters. Unsolicited resumes are accepted directly from candidates only. PXO will not pay any fees associated with unsolicited resumes.

London, UK

Negotiable Salary

Cloud Security Engineer63500058475137124

Workable

Cloud Security Engineer

Kurt Geiger | About Us We are an inclusive, creative footwear and accessories brand powered by kindness. We want to empower our talent to be confident and true to themselves, the London way. London is our home, our heartbeat, and we draw inspiration from the energy and spirit of the city; its diversity and creativity. For over fifty years our team of in-house shoe and accessory designers have been creating authentic, distinctive designs from our London headquarters. The rainbow is our signature. It represents the good energy and love we have for our community and the many ways we collectively express our individual style. Cloud Security Engineer (InfoSec) We are seeking a Cloud Security Engineer (InfoSec) to join our Technology and Information security team. You’ll play a key role in designing, implementing, and supporting secure infrastructure, cloud services, and applications across the organisation. This position requires strong expertise in AWS, Microsoft cloud services (Intune, Azure, Entra), security auditing, and modern endpoint protection such as CrowdStrike. Responsibilities Monitor and respond to security incidents using EDR/XDR tools such as CrowdStrike, Microsoft Defender, and SIEM platforms. Perform regular audits and security assessments across cloud (AWS, Azure) and SaaS platforms to identify risks and ensure compliance with internal policies and industry standards (ISO 27001, CIS, NIST). Manage and enforce Identity and Access Management (IAM) controls, including conditional access, MFA policies, role-based access control (RBAC), and least-privilege enforcement across Microsoft Entra and AWS IAM. Support incident response processes including investigation, containment, eradication, and recovery of security events. Conduct vulnerability scanning and remediation follow-ups using tools. Develop and maintain security baselines, configuration hardening, and patch compliance reporting across endpoints and cloud systems. Assist in third-party risk assessments and ensure vendors meet security requirements. Participate in change advisory boards (CAB) to review infrastructure and application changes from a security perspective. Support internal and external compliance audits by gathering evidence, ensuring policy alignment, and reporting findings. Collaborate with SOC, DevOps, and IT operations teams to integrate security automation and build secure-by-design practices. Support the IT helpdesk with complex application and system security issues. Patch and secure endpoints (Windows/macOS), and mobile devices via Microsoft Intune, Jamf, or Meraki. Implement and support endpoint and network-level security controls: FortiGate, Cisco Meraki, and Zero Trust Network Access (ZTNA) principles. Provide technical documentation, runbooks, and SOPs for security operations and system configurations. Requirements Skills Required Previous experience in a technical IT security, cloud engineering, or InfoSec-focused role. Proven experience with Microsoft 365 Security, Azure Entra ID, Intune, and AWS IAM/Security Services. Strong background in cloud security (AWS/Azure), including the shared responsibility model. Familiarity with compliance frameworks (ISO 27001, GDPR, SOC 2, NIST). Hands-on experience with EDR tools (CrowdStrike, Defender for Endpoint) and SIEM/SOAR platforms. Basic scripting for automation and reporting using PowerShell or Python. Working knowledge of network security protocols, VPNs, firewalls, and web filtering tools. Understanding of patch management, application control, and vulnerability remediation. Desirable Qualifications Certifications such as CISSP, CISM, Security+, AWS Security Specialty, AZ-500, or MS-500. Experience working in or with a Security Operations Centre (SOC). Familiarity with DevSecOps, infrastructure-as-code, or cloud-native security practices. Benefits Competitive basic salary Pension and life assurance Enviable discounts Gym Discounts Summer Hours - 3pm Friday finish Half Day, Pay Day Friday (once per month) RetailTrust support And so much more! Our Culture We’re an energic fast-paced brand that embraces progress and strives for innovation. Hard work is rewarded with new opportunities at every level and kindness is celebrated in everything we do. Our summer working hours accommodate a healthy work life balance. Wellbeing is important to our working culture, which is why we nurture a friendly environment for talent to thrive in, alongside a vibrant social community. Our Stores The first Kurt Geiger store opened on London Bond street in 1963. Today, our brand has global appeal and is distributed in hundreds of cities around the world. We operate over 70 stand-alone stores nationwide, including our new flagship store on London Oxford street, and in over 400 stores globally. Beyond stand-alone stores and retail pop ups, our retail partners include some of the world’s most famous department stores. We Are One: For Love | For Diversity | For Change | For Equality | For Kindness | For Freedom | For Unity Against Racism INDRETAIL

London, UK

Negotiable Salary

Embedded Corporate Regional Security Manager UK/EU- Speculative Applications63500054749313125

Workable

Embedded Corporate Regional Security Manager UK/EU- Speculative Applications

Provide relevant business first, risk proportionate, pragmatic security advice and support for all client sites and personnel within area of operations aligned to the global Corporate Security Operations & Resilience strategy Provide leadership, advice and support to Security function across geographic area of responsibility ensuring capabilities and competencies are developed development to meet business needs and act as a force multiplier for the Corporate Security Operations & Resilience strategy. Support the client's product security and cross functional anti-counterfeiting programmes across geographic area of responsibility. Support programmes that secure the client’s end-to-end supply chain. Support the Crisis Management and Business Continuity programmes throughout the region. Oversee the security at client Headquarters in London and secondary executive premises. Oversee the security of board and executive-sponsored events in the UK and the wider Region. Deliver the Region’s Security Awareness and Education initiatives (to include: operational, security risk management, resilience and brand protection) Effective security incident management, investigations and advice to personnel at all levels. Undertake Site Security Assurance audits and manage the Global Security Services contract within area of responsibility, ensuring the highest levels of delivery and performance management. Advise on development and strategy for site technical security projects including security technology, equipment requirements and simplification processes. Develop & deliver strategic security awareness briefings for management teams and employees including other security education material as appropriate. Establish and maintain liaison with international and national intelligence and law enforcement agencies within area of responsibility to support the global Corporate Security Operations and Resilience response activities within geographic area of responsibility to limit disruption to business operations, including a 24/7 Corporate Security response service within area of responsibility as necessary. Identify threats to the BUs, assess risk and provide proportionate advice to effectively treat the risks. Requirements This role must have a strong understanding of Corporate Security procedures, risk management methodologies, investigation, incident management, crisis & continuity management, operational security threat management, business/security intelligence and security tech. Excellent written and oral communication skills and presentation skills are required to support all levels of client leadership with reliable and meaningful information to enable fact-based business decisions Strong leadership experience as well as extensive project management experience. The individual must be able to work on matrix teams to identify and address a variety of challenges with global security threat and risk management. Regional experience of the UK/EU is desired. Benefits As this is a speculative application, benefits are not disclosed here.

London, UK

Negotiable Salary