Abrar Admin

ByDesign Secure

This role is delivered within secure environments. Candidates must be eligible for UK Security Clearance (SC and DV) and hold UK Citizenship.Opening: Join the MissionAt ByDesign Secure, we design and deliver secure-by-default digital platforms for high‑assurance environments. We are currently building a new secure cloud platform based on Google Distributed Cloud (GDC) and are looking for a Security Engineer (SIEM) to lead the design and implementation of its security monitoring and observability capabilities.This role offers the opportunity to build a SIEM capability from the ground up, influence security architecture decisions, and directly support SOC operations protecting critical public‑sector services.About the OpportunityAs a Security Engineer (SIEM) at ByDesign Secure, you will be responsible for building and enhancing our security monitoring and detection capabilities across complex environments. You will design and maintain SIEM use cases, onboard and normalise data sources, and continuously tune detections to improve threat visibility and response.Working closely with incident response and platform teams, you will turn security data into actionable insight, helping to strengthen detection coverage, reduce noise, and advance the organisation&rsquo;s overall security maturity.Role Purpose<ul><li>As a Security Engineer, you will be responsible for designing, building, and operating the Security Information and Event Management (SIEM) and security observability stack for a new GDC‑based platform.</li><li>You will:</li><li>Define how security logs, metrics, alerts, and telemetry are collected, processed, retained, and visualised.</li><li>Establish a cloud-native SIEM tool and monitoring capability.</li><li>Integrate cloud‑native monitoring with existing on‑premise SOC tooling.</li><li>Enable SOC analysts by providing reliable, actionable security insights.</li><li>You will work closely with cloud engineers, security architects, SOC teams, and external vendors to ensure the solution meets security, operational, and compliance requirements.</li></ul>What You&rsquo;ll Be DoingSIEM Architecture &amp; Design<ul><li>Work with security and solution architects to design the end‑to‑end SIEM architecture for a secure Google Distributed Cloud (GDC) environment.</li><li>Define log, event and telemetry standards across platform, infrastructure, Kubernetes, and application layers.</li><li>Decide which data sources are monitored locally versus forwarded to an existing on‑prem SIEM.</li></ul>SIEM Implementation &amp; Integration<ul><li>Deploy Elastic SIEM using standard or shared Kubernetes clusters where appropriate.</li><li>Configure secure log forwarding from GDC components to an on‑prem SIEM over dedicated, encrypted network links.</li><li>Integrate cloud audit logs, Kubernetes logs, workload logs, and security tooling into Elastic and on‑prem platforms.</li></ul>Detection Engineering &amp; SOC Enablement<ul><li>Implement detections‑as‑code, version‑controlled and automated through CI/CD pipelines.</li><li>Create and tune detection rules, alerts, and dashboards for SOC analysts.</li><li>Align detections with threat intelligence and playbooks (e.g. Mandiant‑aligned SOC workflows).</li></ul>Observability &amp; Troubleshooting<ul><li>Support monitoring of logs, metrics, and security signals to aid both security response and operational debugging.</li><li>Enable Platform Admins and Application Operators to self‑serve diagnostics while maintaining security boundaries.</li></ul>Documentation &amp; Guidance<ul><li>Produce clear guidance for:</li><li>Platform Administrators configuring SIEM integrations</li><li>Application teams onboarding workloads and logs</li><li>SOC analysts using dashboards, alerts, and queries</li><li>Contribute to runbooks, operational procedures, and incident response documentation.</li></ul>Security &amp; Compliance<ul><li>Ensure logging and monitoring meet UK Government and high‑assurance security requirements.</li><li>Support audits, assurance activities, and continuous improvement of the monitoring posture.</li></ul>What You&rsquo;ll BringEssential Skills &amp; Experience<ul><li>Strong experience as a Security Engineer, Detection Engineer or SIEM Engineer.</li><li>Hands‑on experience designing or operating SIEM solutions in cloud or hybrid environments.</li><li>Practical knowledge of Elastic SIEM / Elastic Stack, including:</li><li>Indexing and ingest pipelines</li><li>Detection rules and alerts</li><li>Dashboards and visualisations</li><li>Experience working with Kubernetes environments and their logging/monitoring patterns.</li><li>Familiarity with secure log forwarding, encryption, and network‑restricted environments.</li><li>Ability to work closely with SOC teams and translate security requirements into technical implementations.</li></ul>Cloud &amp; Platform Knowledge<ul><li>Experience with Google Cloud Platform (GCP) or Google Distributed Cloud (GDC).</li><li>Understanding of cloud audit logs, identity logs, and platform‑level telemetry.</li><li>Experience deploying tools through cloud marketplaces or CI/CD pipelines.</li></ul>Ways of Working<ul><li>Comfortable working in high‑assurance, regulated environments.</li><li>Strong documentation and communication skills.</li><li>Able to work independently and take ownership of complex security integrations.</li></ul>Bonus Points For<ul><li>Existing UK Government Security Clearance (SC or above)</li><li>Hands‑on experience with Elastic Cloud on Kubernetes (ECK).</li><li>Experience implementing detections as code using Git, CI/CD, and infrastructure‑as‑code.</li><li>Knowledge of threat frameworks.</li><li>Familiarity with UK Government security standards and assurance processes</li></ul>Clearance Requirements:<ul><li>This role requires either an existing Security Clearance (SC level) or for one to be passed before commencement. There must be a willingness to undergo Developed Vetting (DV)</li></ul>Work Location: Hybrid remote in LondonJob Types: Temporary, Fixed term contractJob Types: Fixed term contract, TemporaryPay: &pound;625.00 per dayApplication question(s):<ul><li>Do you currently hold active UK SC clearance? </li><li>Do you hold UK nationality? (Required due to client security restrictions) </li><li>Are you eligible and willing to undergo UK SC/DV clearance for this role? (Applications without this cannot be considered)</li><li>Does your delivery approach allow for on-site presence in London when required (typically around 3 days per week)?</li></ul>Work Location: Hybrid remote in London

Security Engineer (SIEM) – SC Eligible – Government Projects

This role is delivered within secure environments. Candidates must be eligible for UK SC and DV clearance and hold UK citizenship.Opening: Join the MissionAt ByDesign Secure, we believe that world-class security shouldn't be an afterthought&mdash;it should be the foundation. We are an independent, outputs-based consultancy dedicated to solving the most complex data assurance challenges in the UK public sector. Currently, we working on a landmark transformation of a cross-government secure IT system. This is an exciting opportunity to help architect a private cloud environment from the ground up and modernize the end-user services that power national decision-making. We don't believe in &quot;billing by the hour&quot; or rigid hierarchies; we are a lean, expert team focused on delivering high-impact technical outcomes. If you are a self-starter who thrives on autonomy and wants to see your engineering or architectural decisions shape the future of sovereign security, we want to talk to you.About the OpportunityWe're looking for an experienced Application Support Engineer with strong Google Cloud expertise to join our team. You&rsquo;ll be part of a multi-year transformation programme, shaping and implementing some of the most strategically significant government systems in operation today.What You&rsquo;ll Be Doing<ul><li>Engineering secure, scalable, and resilient applications in Google Cloud Platform (GCP) and Google Distributed Cloud (GDC) environments.</li><li>Working within disconnected environments on data-severing solutions. </li><li>Collaborating closely with architecture, engineering and security teams to ensure seamless integration from design through delivery.</li><li>Deploy, monitor and support applications on Google, including Cloud Functions, GKE, Compute Engine, and App Engine.</li><li>Use Google Cloud Operations Suite (Cloud Monitoring, Logging, Trace) to maintain service health and identify potential issues.</li><li>Execute routine operational tasks such as configuration updates, performance checks, restarts, permissions reviews, and patching activities.</li><li>Support deployments and releases through controlled CI/CD pipelines.</li><li>Assist with maintaining service accounts, IAM roles, and organisational policies following least-privilege principles.</li><li>Support with application migration activities including the technical analysis, deployment and testing alongside the architecture teams.</li><li>Develop and maintain documentation including Low Level Designs, runbooks and guidance.</li></ul>What You&rsquo;ll Bring<ul><li>Proven hands-on experience as a Google Application Operator specialising in Google Cloud.</li><li>Practical hands-on knowledge of Google Distributed Cloud (GDC), </li><li>Experience working in environments without direct internet connectivity.</li><li>Strong engineering background with deep understanding of IaC (Terraform, Deployment Manager), automation, and CI/CD pipelines.</li><li>Expertise in networking, IAM, containerisation (GKE/Kubernetes), and secure systems design.</li><li>Confident working within highly regulated or classified environments where reliability and compliance are paramount.</li><li>Strong communicator &mdash; able to bridge technical and non-technical stakeholders effectively.</li></ul>Bonus Points For<ul><li>Prior experience working on government classified systems or within secure data centre environments.</li><li>Experience of configuring and using AI technologies within cloud environments, including GCP AI technologies.</li><li>Familiarity with NCSC guidance, UK Government cloud policies, or cross-domain architectures.</li><li>Knowledge of multi-cloud integrations, edge computing, and data sovereignty requirements.</li><li>Google Certifications.</li><li>Existing UK Government Security Clearance (SC or above)</li></ul>Why This Role?<ul><li>Work on high-impact, nationally significant projects that make a real difference.</li><li>Join a trusted specialist integrator with a proven record of secure delivery into UK Government.</li></ul>Clearance Requirements:<ul><li>This role requires either an existing Security Clearance (SC level) or for one to be passed before commencement. There must be a willingness to undergo Developed Vetting (DV).</li></ul>Work Location: Hybrid remote in LondonJob Types: Temporary, Fixed term contract (Outside of IR35)Job Types: Fixed term contract, TemporaryPay: &pound;550.00 per dayApplication question(s):<ul><li>Do you currently hold active UK SC clearance? </li><li>Do you hold UK nationality? (Required due to client security restrictions) </li><li>Are you eligible and willing to undergo UK SC/DV clearance for this role? (Applications without this cannot be considered)</li><li>Does your delivery approach allow for on-site presence in London when required (typically around 3 days per week)?</li></ul>Work Location: Hybrid remote in London

Google Cloud Application Support Engineer (SC Eligible)

This role is delivered within secure environments. Candidates must be eligible for UK SC and DV clearance and hold UK Citizenship.Opening: Join the MissionAt ByDesign Secure, we believe that world-class security shouldn't be an afterthought&mdash;it should be the foundation. We are an independent, outputs-based consultancy dedicated to solving the most complex data assurance challenges in the UK public sector. Currently, we are working on a landmark transformation of a cross-government secure IT system. This is an exciting opportunity to help architect a private cloud environment from the ground up and modernize the end-user services that power national decision-making. We don't believe in &quot;billing by the hour&quot; or rigid hierarchies; we are a lean, expert team focused on delivering high-impact technical outcomes. If you are a self-starter who thrives on autonomy and wants to see your engineering or architectural decisions shape the future of sovereign security, we want to talk to you.About the Opportunity<ul><li>We are seeking a skilled Cloud Security Engineer to design and implement secure workloads within a Google Distributed Cloud (GDC) environment.</li><li>This role is ideal for a security professional with a strong GCP background (Other CSP experience also considered) and an active Professional Cloud Security Engineer certification, as these competencies are directly transferable to managing security in air-gapped or edge configurations.</li><li>You will be responsible for ensuring security, rigour, and compliance within mission-critical government secure delivery.</li></ul>What You&rsquo;ll Be Doing<ul><li>Identity &amp; Access Management: Designing and managing complex identity architectures, including single sign-on (SSO) integration, multi-factor authentication (MFA), and the automated lifecycle management of privileged user accounts.</li><li>Authorisation &amp; Resource Hierarchy: Defining granular resource hierarchies and implementing the principle of least privilege using advanced identity policies, conditions, and organizational constraints.</li><li>Boundary &amp; Perimeter Protection: Configuring robust network defences, including next-generation firewalls, web application firewalls (WAF), and secure service perimeters to isolate sensitive workloads.</li><li>Data Protection &amp; Encryption: Implementing discovery and redaction services for sensitive data (PII) and managing full-lifecycle encryption through hardware or software-based key management systems.</li><li>Securing the Software Supply Chain: Automating vulnerability scanning and policy enforcement within continuous integration and delivery (CI/CD) pipelines to ensure only authorised code is deployed.</li></ul>Key Tools/Working practices<ul><li>Use GDC Console, gdcloud CLI, and kubectl to manage infrastructure, users, workloads, security policies, and platform resources across projects and clusters</li><li>Implement Terraform and Ansible with Git‑based workflows to deliver repeatable, version‑controlled infrastructure and configuration (GitOps), including Config Sync for consistent environments</li><li>Configure IAM, RBAC, service accounts, and identity provider integration to enforce least‑privilege access and secure authentication, with policy enforcement via OPA Gatekeeper</li><li>Define and secure network boundaries using project network policies (ingress/egress control) and manage encryption and trust with KMS and Certificate Authority services</li><li>Build and package applications using Docker and Helm, store images in Harbor, and integrate vulnerability scanning (e.g. Trivy) to detect and remediate issues before deployment</li><li>Test and interact with APIs using curl/REST tools and develop AI capabilities using Vertex AI libraries and notebook environments (e.g. JupyterLab)</li><li>Monitor and troubleshoot using Grafana, Prometheus, and Loki for metrics and logs, with audit logging and SIEM integration for security and compliance</li><li>Configure alerting for failures, anomalies, and SLO breaches, and implement backup and restore processes for resilience and disaster recovery</li><li>Use platform documentation and support channels to validate configurations, follow operational procedures, and resolve issues</li></ul>What You&rsquo;ll Bring<ul><li>Demonstrable experience as a practicing Security Engineer, with the ability to transition cloud-native security best practices to a distributed/edge platform.</li><li>Deep proficiency in configuring network security defences, threat monitoring, and regulatory compliance controls.</li></ul>Bonus Points For<ul><li>Current, non-expired Professional Cloud Security Engineer certification.</li><li>Experience operating within or alongside classified UK Government secure environments (e.g., SECRET or above).</li><li>Familiarity with GDS Service Standards or equivalent public sector delivery frameworks.</li><li>Experience working in air-gapped or disconnected environments with little or no internet connectivity</li></ul>Clearance Requirements:<ul><li>This role requires either an existing Security Clearance (SC level) or for one to be passed before commencement. There must be a willingness to undergo Developed Vetting (DV).</li></ul>Work Location: Hybrid remote in LondonJob Types: Temporary, Fixed term contract (Outside of IR35)Job Types: Fixed term contract, TemporaryPay: &pound;650.00 per dayApplication question(s):<ul><li>Do you currently hold active UK SC clearance? </li><li>Do you hold UK nationality? (Required due to client security restrictions) </li><li>Are you eligible and willing to undergo UK SC/DV clearance for this role? (Applications without this cannot be considered)</li><li>Does your delivery approach allow for on-site presence in London when required (typically around 3 days per week)?</li></ul>Work Location: Hybrid remote in London

Cloud Security Engineer – SC Eligible – Government Projects

Join ByDesign Secure and explore 3   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

ByDesign Secure

About Company

Security Engineer (SIEM) – SC Eligible – Government Projects

Google Cloud Application Support Engineer (SC Eligible)

Cloud Security Engineer – SC Eligible – Government Projects