Senior Security Architect (Active SC Clearance)

Location: Fully Remote (UK)
Clearance: Active SC Clearance Required
Contract Length: Until February 2027
Rate: Up to £600 per day (Outside IR35)

Shape the Security of Critical UK Government Services

We are seeking an experienced Senior Security Architect to join a major public sector programme, playing a key role in designing and assuring the security of large-scale digital services operating across cloud environments.

This is an excellent opportunity for a senior cyber security professional with strong government experience to provide strategic security leadership, influence architectural direction, and support the secure delivery of business-critical platforms.

What You’ll Be Doing

• Providing security architecture leadership throughout the full project lifecycle, from discovery through to service retirement.
• Advising stakeholders on Secure by Design principles and security best practices.
• Reviewing and assuring solution designs against established security standards, patterns and architectural frameworks.
• Leading threat modelling, risk assessments and security design reviews.
• Identifying security risks and recommending effective mitigation strategies.
• Supporting cloud-first solutions across Azure and wider multi-cloud environments.
• Reviewing penetration testing and IT Health Check outcomes and developing remediation plans.
• Working closely with engineering, assurance and risk teams to validate security controls.
• Producing high-quality security architecture artefacts, standards and blueprints.
• Monitoring emerging cyber threats and incorporating threat intelligence into security decision-making.

Experience Required

• Extensive experience in Security Architecture within Central Government or the wider Public Sector.
• Strong understanding of ISO 27001, NIST CSF and CIS Controls.
• Deep knowledge of NCSC and HMG security standards and guidance.
• Expertise in Azure security technologies, including Entra ID, Azure Policy, Key Vault and Identity & Access Management.
• Experience securing cloud-native and microservices-based architectures.
• Strong background in threat modelling, risk analysis and security assurance.
• Experience supporting penetration testing and control effectiveness reviews.

Desirable Certifications

• CISSP
• CISM
• SABSA
• TOGAF
• Azure Solutions Architect

Security Architect (Active SC Clearance) x 2

Location: Fully Remote (UK)
Clearance: Active SC Clearance Required
Contract Length: Until February 2027
Rate: Up to £550 per day (Outside IR35)

Security Architect

We are looking for two Security Architects to support the secure design and delivery of large-scale cloud-based services within a major public sector programme.

You’ll work across project teams to ensure security is embedded throughout the development lifecycle, helping teams manage risk, apply security standards, and deliver resilient solutions in complex environments.

Key Responsibilities

• Provide expert security design guidance to delivery and engineering teams.
• Review solution and product designs to ensure compliance with security standards and best practice.
• Conduct threat modelling and security risk assessments.
• Design security controls aligned to organisational risk appetite.
• Support the deployment of cloud-based services, predominantly within Azure environments.
• Work with technical teams to validate security control effectiveness.
• Assist with penetration testing and IT Health Check scoping activities.
• Review security findings and provide practical remediation guidance.
• Contribute to security standards, patterns and architecture documentation.
• Stay informed on evolving cyber threats and attack techniques.

What We’re Looking For

• 5+ years’ experience within Security Architecture, Cyber Security or a closely related technical security role.
• Experience working within government or highly regulated environments.
• Good knowledge of ISO 27001, NIST CSF and CIS Controls.
• Experience with Azure security services, identity management and cloud-native security controls.
• Exposure to threat modelling and risk assessment methodologies.
• Understanding of security assurance and controls testing activities.
• Excellent stakeholder engagement and communication skills.

Desirable Skills & Certifications

• CISSP, CISM, SABSA or TOGAF
• Azure or AWS cloud certifications
• Knowledge of PKI, Encryption, PAM and RBAC
• Experience with cloud security posture management tools

Senior Security Engineer – Monitoring & Detection

📍 Hybrid Working (Bristol, London, Manchester or Swansea)

💰 £55,000 – £85,000 + Benefits

🔒 Active SC Clearance Required

Join a Team Protecting Critical Digital Services

We’re looking for an experienced Senior Security Engineer – Monitoring & Detection to play a key role in securing large-scale, cloud-based environments supporting critical public sector and government services.

This is a hands-on engineering role focused on threat detection, SIEM engineering, security monitoring, log management, and SOC optimisation. You’ll design and enhance detection capabilities, improve security visibility, and ensure organisations can rapidly identify and respond to emerging cyber threats.

Working alongside SOC analysts, engineers, architects, and stakeholders, you’ll help build modern security monitoring capabilities that improve resilience while enabling faster, risk-based decision-making.

What You’ll Be Doing

Detection Engineering & Threat Monitoring

• Develop, tune, and maintain detection rules across SIEM, EDR, and threat detection platforms.
• Create and optimise detection logic using technologies such as Splunk and endpoint security solutions.
• Map detections against the MITRE ATT&CK framework to ensure comprehensive threat coverage.
• Continuously improve detection quality by analysing alert fidelity, false positives, and operational effectiveness.
• Validate detections through testing, simulation exercises, and red-team scenarios.

Security Data & Log Engineering

• Manage and optimise log ingestion pipelines to ensure high-quality, actionable security data.
• Configure routing, filtering, enrichment, and normalisation of security telemetry.
• Improve data efficiency through deduplication, data reduction, and flow summarisation techniques.
• Support cloud-native data streaming and storage solutions.
• Ensure security data aligns with industry standards such as OCSF while maintaining strong encryption and access controls.

Stakeholder Engagement

• Translate complex technical risks into clear business-focused recommendations.
• Collaborate with technical and non-technical stakeholders to improve security outcomes.
• Act as a trusted technical advisor across engineering and security teams.
• Mentor junior engineers and contribute to the growth of the wider cyber security function.

What We’re Looking For

Essential Experience

• Strong hands-on experience within Security Operations, Detection Engineering, Threat Detection, or Security Monitoring.
• Experience securing cloud environments across AWS, Azure, or GCP.
• Expertise in one or more of the following:
  • Splunk and SPL
  • YARA rule development
  • EDR detection engineering
  • SIEM content development and tuning
• Experience mapping detections to the MITRE ATT&CK framework.
• Strong understanding of modern security principles including Zero Trust, identity-first security, secrets management, and network segmentation.

Desirable Experience

• Experience with Cribl and security data pipeline management.
• Knowledge of Kinesis, Amazon S3, Amazon Security Lake, or similar technologies.
• Understanding of OCSF and security data normalisation.
• Experience working within government, defence, highly regulated industries, or the wider public sector.
• Experience mentoring or leading engineers within a SOC or cyber security function.

PAM Engineer (CyberArk / BeyondTrust)

Contract | 2 Positions Available

📍 Location: Manchester (5 Days Onsite)
💰 Rate: £440 – £540 per day Inside IR35
🕒 Duration: 3 months

About the Role

I’m actively searching for two experienced BeyondTrust Endpoint Privilege Management (EPM) Engineers to support a large-scale, highly customised endpoint privilege management environment within a secure enterprise setting.

This is an excellent opportunity for individuals with strong expertise in BeyondTrust EPM, endpoint security, application control, and privilege management. You will work closely with Application Packaging, Endpoint Engineering, and Security teams to ensure the ongoing operation, optimisation, and enhancement of a complex EPM estate.

Candidates with significant CyberArk Endpoint Privilege Manager experience who are interested in cross-training into BeyondTrust EPM are also encouraged to apply.

Key Responsibilities

• Administer, support, and maintain a highly customised BeyondTrust EPM platform.
• Design, implement, and manage policies covering privilege elevation, application control, allow-listing, and endpoint security.
• Collaborate with Application Packaging and Endpoint Engineering teams to support application deployment and compatibility.
• Analyse application requirements and define appropriate privilege management solutions.
• Troubleshoot complex endpoint privilege management and application control issues.
• Develop, test, and deploy policy changes while maintaining operational stability and security.
• Support the on-boarding of new applications into the EPM environment.
• Investigate and resolve incidents relating to privilege elevation, application execution, and endpoint security controls.
• Work closely with infrastructure, packaging, and security teams to ensure seamless service delivery.
• Produce and maintain technical documentation, support procedures, and operational standards.
• Contribute to continuous improvement initiatives and platform optimisation activities.

Essential Skills & Experience

• Extensive hands-on experience with BeyondTrust Endpoint Privilege Management (EPM) administration and engineering.
• Strong understanding of Windows endpoint security architecture.
• Proven experience creating, modifying, and troubleshooting BeyondTrust EPM policies.
• Experience supporting application packaging and software deployment processes.
• Strong knowledge of:
  • Windows Desktop Operating Systems
  • Application Control
  • Privilege Elevation
  • Endpoint Security
  • Software Packaging and Deployment
  • Group Policy Administration
• Ability to analyse software requirements and design effective privilege management solutions.
• Experience supporting highly customised enterprise EPM environments.
• Excellent troubleshooting and root cause analysis skills.
• Experience working within secure, controlled, or highly regulated environments.
• Strong documentation and technical communication skills.
• Ability to work independently in a complex operational setting.

Desirable Skills

• Experience with CyberArk Endpoint Privilege Manager (EPM).
• Experience migrating between endpoint privilege management platforms.
• Knowledge of Microsoft Intune, MECM/SCCM, or similar endpoint management solutions.
• PowerShell scripting and automation experience.
• Experience supporting large-scale enterprise endpoint estates.
• Familiarity with ITIL-based operational environments.
• Experience working within secure facilities or restricted-access environments.

What’s Required?

To be considered for this opportunity, you must:

✅ Be eligible for BPSS clearance
✅ Be able to work 5 days per week onsite in Manchester or Inverness
✅ Be available to participate in a 24×7 support rota

If you have strong BeyondTrust EPM expertise and are looking to work on a complex, enterprise-scale deployment within a secure environment, apply to be considered.

Location: UK (Hybrid, London 3 days per week)
Security Clearance: Active SC Clearance Required
Contract Length: 6-18 Months
Rate: £545-£590 per day (Inside IR35)
Positions Available: 2

About the Role

We are seeking two experienced Security Engineers (SRE) to join a specialist consultancy delivering cyber security services across a portfolio of government projects and digital transformation programmes.

This role is ideal for security professionals with strong experience in security engineering, platform security, enterprise security architecture, and operational resilience. You will play a pivotal role in designing, implementing, and maintaining secure, scalable, and resilient systems while ensuring security best practices are embedded across complex technology environments.

Working alongside engineering, operations, architecture, DevSecOps, and security teams, you will help protect critical applications, infrastructure, data, and services against evolving cyber threats. You will be expected to operate independently, provide technical leadership, and contribute to the continual improvement of security capabilities across multiple client engagements.

Key Responsibilities

Security Engineering & Platform Protection

• Design, build, implement, and maintain security controls across enterprise platforms, applications, and infrastructure.
• Protect systems, services, networks, and data from cyber threats and security risks.
• Ensure security is integrated throughout the system development and operational lifecycle.
• Promote Secure by Design and Secure by Default principles across technology solutions.

Security Architecture

• Apply Enterprise Security Architecture principles to support secure solutions and services.
• Contribute to the development and implementation of security architecture strategies and standards.
• Review solution designs and provide security recommendations aligned to business and regulatory requirements.
• Support architectural decision-making to ensure platforms remain secure, scalable, and resilient.

Splunk Engineering & Security Monitoring

• Develop and maintain security monitoring capabilities using Splunk.
• Create dashboards, alerts, reports, and use cases to enhance threat detection and security visibility.
• Support log ingestion, optimisation, data onboarding, and security analytics.
• Collaborate with SOC and Threat Intelligence teams to improve monitoring and response capabilities.

Security Assessments & Risk Management

• Conduct security assessments, reviews, and audits to identify vulnerabilities and weaknesses.
• Assess risks and recommend appropriate mitigation strategies.
• Support vulnerability management and remediation activities.
• Validate the effectiveness of implemented security controls.

Collaboration & Stakeholder Engagement

• Work closely with engineering, operations, architecture, DevOps, and security teams to embed security controls throughout the environment.
• Act as a trusted security advisor to project teams and stakeholders.
• Participate in technical workshops, design reviews, and architecture discussions.
• Provide expert security guidance and contribute to key technical decisions.

Continuous Improvement

• Monitor emerging threats, vulnerabilities, technologies, and industry trends.
• Identify opportunities to improve security capabilities, automation, resilience, and operational efficiency.
• Support the development of security standards, policies, and best practices.
• Drive continual improvements across security engineering and platform security functions.

Essential Skills & Experience

• Strong experience as a Security Engineer, Security-focused SRE, Platform Security Engineer, or similar role.
• Advanced knowledge of Enterprise Security Architecture principles.
• Hands-on experiencewithSplunk, including:
  • Security monitoring
  • Dashboard development
  • Alerting and reporting
  • Log analysis
  • Security analytics
• Experience implementing security controls across cloud, infrastructure, and application environments.
• Strong understanding of security architecture and secure design principles.
• Experience conducting security assessments, audits, and risk reviews.
• Knowledge of vulnerability management and remediation processes.
• Excellent analytical and problem-solving capabilities.
• Ability to work independently and provide technical leadership.
• Active SC Clearance.

Technical Experience

Experience with some of the following technologies would be advantageous:

Security & Monitoring

• Splunk Enterprise Security
• SIEM & Security Analytics Platforms
• SOAR Technologies
• Identity & Access Management (IAM)

Cloud & Infrastructure

• AWS Security Services
• Microsoft Azure Security
• Kubernetes Security
• Docker Security
• Terraform (Infrastructure as Code)

Preferred Certifications

The following certifications would be advantageous:

• CISSP
• CCSP
• SABSA
• GIAC Certifications
• AWS Security Specialty
• Microsoft Certified: Azure Security Engineer Associate
• Security+ or equivalent

Threat Intelligence Analyst x3

Location: UK (Hybrid/Remote as required)
Security Clearance: Active SC Clearance Required
Contract Length: 6-18 Months
Rate: £545-£590 per day (Inside IR35)
Positions Available: 3

About the Role

We are seeking three Threat Intelligence Analysts to join a specialist consultancy supporting the delivery of cyber security services across a range of government projects and digital transformation programmes.

This is an exciting opportunity to work within a complex and evolving threat landscape, supporting the protection of critical public services and highly sensitive environments. As a Threat Intelligence Analyst, you will be responsible for identifying, analysing, and communicating cyber threats that may impact clients, systems, and services.

Working closely with Security Operations, Incident Response, Engineering, and wider Cyber Security teams, you will help build situational awareness, deliver actionable intelligence, and strengthen detection and response capabilities across multiple government-focused engagements.

Key Responsibilities

Threat Monitoring & Intelligence Analysis

• Monitor and assess a wide range of intelligence sources, including OSINT, commercial intelligence platforms, security telemetry, online databases, and intelligence feeds.
• Identify, analyse, and prioritise actionable cyber threats relevant to client environments.
• Maintain awareness of emerging threat actors, campaigns, vulnerabilities, and attack techniques.
• Develop intelligence-led insights to support proactive cyber defence activities.

Research & Reporting

• Conduct in-depth research into cyber threats, threat actors, vulnerabilities, and industry trends.
• Produce high-quality intelligence reports, threat assessments, executive summaries, and technical briefings.
• Deliver actionable intelligence products to both technical and non-technical stakeholders.
• Communicate complex cyber threats in a clear and accessible manner.

Threat Hunting & Indicators of Compromise

• Analyse Indicators of Compromise (IoCs), including malicious IP addresses, domains, file hashes, and malware indicators.
• Support the identification of threat actor behaviours, tactics, techniques, and procedures (TTPs).
• Develop recommendations to strengthen defensive controls and improve detection capabilities.
• Contribute to proactive threat hunting and intelligence-led investigations.

Incident Response Support

• Support cyber incident investigations throughout the intelligence lifecycle.
• Work closely with Incident Response and Security Operations teams to enrich investigations with threat intelligence.
• Assist with incident containment, remediation activities, and post-incident analysis.

Threat Modelling & Intelligence Frameworks

• Apply recognised threat intelligence methodologies including:
  • MITRE ATT&CK
  • Cyber Kill Chain
  • Pyramid of Pain
  • Diamond Model
• Identify intelligence gaps and opportunities to improve threat detection and response capabilities.

Strategic Threat Intelligence

• Contribute to tactical, operational, and strategic intelligence activities.
• Support the development and maturity of threat intelligence capabilities.
• Provide proactive threat warnings and situational awareness to stakeholders.
• Support the protection of critical systems, services, and infrastructure through intelligence-led decision making.

Essential Skills & Experience

• Minimum one year’s experience in Cyber Security or a related discipline.
• Strong understanding of:
  • Cyber Threat Intelligence principles
  • Threat Actor Analysis
  • Intelligence Collection and Dissemination Processes
  • Cyber Security Operations
• Experience using threat intelligence and analysis platforms such as:
  • Recorded Future
  • OpenCTI
  • Cribl
  • Splunk
  • Other intelligence and SIEM technologies
• Knowledge of threat intelligence frameworks including:
  • MITRE ATT&CK
  • Cyber Kill Chain
  • Pyramid of Pain
  • Diamond Model
• Strong analytical, investigative, and problem-solving skills.
• Ability to identify, assess, and prioritise actionable intelligence.
• Excellent communication and stakeholder engagement skills.
• Active SC Clearance.

Preferred Certifications

The following certifications would be advantageous but are not essential:

• GIAC Cyber Threat Intelligence (GCTI)
• CISSP
• CEH
• GIAC Certifications
• CompTIA Security+
• CREST Certifications
• SANS Cyber Security Certifications