application security engineer

Cognism

<div><div><h2 class="jobSectionHeader"><b>WHO ARE WE</b></h2>
<p>
Cognism is the leading provider of European B2B data and sales intelligence. Ambitious businesses of every size use our platform to discover, connect, and engage with qualified decision-makers faster and close more deals. Headquartered in London with global offices, Cognism's contact data and contextual signals are trusted by thousands of revenue teams to eliminate the guesswork from prospecting.</p></div><p><b>
THE ROLE</b></p>
<p>
The Senior<b> Application Security Engineer</b> is a key member of Cognism's Information Security Team, reporting into the Application &amp; Infrastructure Security Manager. Your mission is to <b>embed security by design</b> across our engineering and product organization by integrating modern application security practices throughout the full development lifecycle. We focus on building secure, scalable, and resilient systems while enabling the business to innovate quickly and safely. It is to drive a culture where the fastest path for our engineers is the securest path.</p>
<p>
You will work closely with Product, Engineering, Architecture, and Data teams to understand risks within our platform, including risks introduced by AI powered features, and ensure the right controls, guardrails, and security patterns are built into the product at its inception &ndash; all the while ensuring a balanced approach to the product experience that our thousands of large global enterprise customers use every day.</p>
<p>
This role is ideal for a senior IC who is <b>technical, collaborative, and pragmatic</b>, with the ability to influence engineering teams while driving hands on improvements to Cognism's secure SDLC.</p>
<p><b>
KEY RESPONSIBILITIES</b></p>
<p><b>
Security by Design &amp; Product Integration</b></p>
<ul>
<li>Partner with Product, Web and Data Engineering teams from the ideation stage to ensure security requirements are considered early in feature and model design.</li>
<li>Translate product and application risks into actionable security controls, making recommendations repeatable to build guardrails and guidance that product, design, and engineering teams can apply as they scale and build the products in the teams they own.</li>
<li>Help shape security acceptance criteria and guide engineering teams during design reviews and backlog planning.</li>
</ul>
<p><b>Application Risk Assessment &amp; AI Security</b></p>
<ul>
<li>Identify and assess application risks across Cognism's SaaS platform, data processing pipelines, including emerging risks associated with AI/ML capabilities.</li>
<li>Contribute to AI feature reviews and participate in AI risk assessments to ensure responsible and secure use of models, in a way that balances the need to innovate and challenge the status quo in AI implementation.</li>
<li>Assess and pragmatically recommend mitigations for security risks in data pipelines, model-training workflows, feature stores, and ML systems, ensuring strong controls for data access, data lineage, model integrity, and protection of sensitive datasets.</li>
</ul>
<p><b>Secure SDLC &amp; DevSecOps Enablement</b></p>
<ul>
<li>Partner with our engineering and platform team to embed security guardrails into our software development lifecycle and agile engineering workflows.</li>
<li>Partner with engineering teams to integrate and optimize security tooling into CI/CD pipelines (SAST, SCA, DAST, container scanning, IaC scanning).</li>
<li>Drive automation and developer-friendly security processes that minimize friction and support rapid delivery.</li>
</ul>
<p><b>Threat Modelling &amp; Architecture Support</b></p>
<ul>
<li>Conduct and facilitate a self-serve, risk-driven approach to pragmatic threat modelling sessions for new features, services, and AI components.</li>
<li>Conduct threat modelling for data architectures, including ingestion, transformation, storage, streaming, and ML model deployment patterns, ensuring data confidentiality, integrity, and responsible use.</li>
<li>Provide hands-on application security guidance to engineering teams, helping them implement secure APIs, microservices, data flows, and integrations.</li>
<li>Maintain and expand Cognism's secure coding standards, guidance, and reusable security patterns.</li>
</ul>
<p><b>Application Security Testing &amp; Engineering</b></p>
<ul>
<li>Perform hands-on security testing (manual and automated) for web applications, microservices, APIs, and cloud components.</li>
<li>Plan, coordinate, and oversee penetration tests, red team exercises, and third-party security assessments, ensuring findings are addressed and tracked.</li>
<li>Validate findings, assist with prioritization, and partner with engineering teams on remediation strategies.</li>
</ul>
<p><b>Collaboration, Education &amp; Influence</b></p>
<ul>
<li>Work directly with product squads, acting as a trusted advisor and embedded security partner. Take the time to understand what other teams are working on, what business priorities are, and partner with teams to recommend risk mitigations that balance risk with opportunity and that take into account the threat landscape.</li>
<li>Deliver security training, workshops, and guidance to improve engineering teams' security maturity.Communicate security risk and tradeoffs clearly and constructively to technical and nontechnical stakeholders.</li>
</ul>
<p><b>CORE COMPETENCIES</b></p>
<ul>
<li>Strong technical depth in application security, cloud security, and secure development.</li>
<li>Understanding of modern data stack components (e.g., data pipelines, feature stores) and the ability to collaborate effectively with data practitioners.</li>
<li>Deep understanding of communication protocols used for web development is a must-have.</li>
<li>Hands on experience with web application development, specifically for back-end development is a must-have competency.</li>
<li><b>Risk-Based Prioritization</b>: Ability to distinguish between theoretical security risks and actual business threats, demonstrating a &quot;risk-driven&quot; rather than &quot;compliance-driven&quot; mindset. Comfortable balancing security risk with product and commercial realities.</li>
<li><b>Contextual Communication</b>: Capacity to translate complex technical vulnerabilities into business-impact stories that resonate with non-technical stakeholders and product owners.</li>
<li><b>Collaborative Conflict Resolution</b>: Proven track record of approaching engineering friction with transparency and pragmatism, balancing a firm stance on security with a deep care for the developer experience. Pragmatic problem solver with a growth mindset and bias toward action.</li>
<li><b>Architectural Empathy: </b>Ability to put yourself in the position of your users (the engineers) to build security guardrails that are repeatable and embedded into existing workflows rather than added as hurdles.</li>
</ul>
<p><b>EDUCATION &amp; EXPERIENCE</b></p>
<ul>
<li>5&ndash;10+ years of experience in Application Security, Product Security, or Security Engineering roles.</li>
<li>Strong experience securing cloud native SaaS platforms (AWS preferred) and Data pipelines.</li>
<li>Handson experience with secure coding, application testing, and CI/CD security automation.</li>
<li>Experience working closely with engineering and product teams in agile environments.</li>
<li>Familiarity with security frameworks such as OWASP ASVS, OWASP Top 10, NIST, ISO 27001/2.</li>
<li>Experience evaluating and securing AI/ML enabled features is a strong advantage.</li>
<li>Experience in SME or high-growth SaaS environments preferred.</li>
</ul><div>
<h2 class="jobSectionHeader"><b>WHY COGNISM</b></h2>
<p>
At Cognism, we're not just building a company - we're building an inclusive community of brilliant, diverse people who <b>support, challenge, and inspire each other every day</b>. If you're looking for a place where your work truly <b>makes an impact</b>, you're in the right spot!</p>
<p>
Our values aren't just words on a page&mdash;they guide how we work, how we treat each other, and how we grow together. They shape our culture, drive our success, and ensure that everyone feels valued, heard, and empowered to do their best work.</p>
<p>
Here's what we stand for:</p>
<p>
 <b>We Own the Outcome Together.</b><br>
 <b>We Deeply Understand our Customers.</b><br>
 <b>We Celebrate Impact Wherever It Comes From.</b></p>
<p>
At Cognism, we are committed to fostering an inclusive, diverse, and supportive workplace. We welcome applications from individuals typically underrepresented in tech, so if this role excites you but you're unsure if you meet every requirement, we encourage you to apply!</p></div></div><p></p>

Senior Application Security Engineer

ByDesign Secure

<p><i><b>This role is delivered within secure environments. Candidates must be eligible for UK Security Clearance (SC and DV) and hold UK Citizenship.</b></i></p><p><b>Opening: Join the Mission</b></p><p>At ByDesign Secure, we design and deliver secure-by-default digital platforms for high‑assurance environments. We are currently building a new secure cloud platform based on Google Distributed Cloud (GDC) and are looking for a Security Engineer (SIEM) to lead the design and implementation of its security monitoring and observability capabilities.</p><p>This role offers the opportunity to build a SIEM capability from the ground up, influence security architecture decisions, and directly support SOC operations protecting critical public‑sector services.</p><p><b>About the Opportunity</b></p><p>As a Security Engineer (SIEM) at ByDesign Secure, you will be responsible for building and enhancing our security monitoring and detection capabilities across complex environments. You will design and maintain SIEM use cases, onboard and normalise data sources, and continuously tune detections to improve threat visibility and response.</p><p>Working closely with incident response and platform teams, you will turn security data into actionable insight, helping to strengthen detection coverage, reduce noise, and advance the organisation&rsquo;s overall security maturity.</p><p><b>Role Purpose</b></p><ul><li>As a Security Engineer, you will be responsible for designing, building, and operating the Security Information and Event Management (SIEM) and security observability stack for a new GDC‑based platform.</li><li>You will:</li><li>Define how security logs, metrics, alerts, and telemetry are collected, processed, retained, and visualised.</li><li>Establish a cloud-native SIEM tool and monitoring capability.</li><li>Integrate cloud‑native monitoring with existing on‑premise SOC tooling.</li><li>Enable SOC analysts by providing reliable, actionable security insights.</li><li>You will work closely with cloud engineers, security architects, SOC teams, and external vendors to ensure the solution meets security, operational, and compliance requirements.</li></ul><p><b>What You&rsquo;ll Be Doing</b></p><p><b>SIEM Architecture &amp; Design</b></p><ul><li>Work with security and solution architects to design the end‑to‑end SIEM architecture for a secure Google Distributed Cloud (GDC) environment.</li><li>Define log, event and telemetry standards across platform, infrastructure, Kubernetes, and application layers.</li><li>Decide which data sources are monitored locally versus forwarded to an existing on‑prem SIEM.</li></ul><p><b>SIEM Implementation &amp; Integration</b></p><ul><li>Deploy Elastic SIEM using standard or shared Kubernetes clusters where appropriate.</li><li>Configure secure log forwarding from GDC components to an on‑prem SIEM over dedicated, encrypted network links.</li><li>Integrate cloud audit logs, Kubernetes logs, workload logs, and security tooling into Elastic and on‑prem platforms.</li></ul><p><b>Detection Engineering &amp; SOC Enablement</b></p><ul><li>Implement detections‑as‑code, version‑controlled and automated through CI/CD pipelines.</li><li>Create and tune detection rules, alerts, and dashboards for SOC analysts.</li><li>Align detections with threat intelligence and playbooks (e.g. Mandiant‑aligned SOC workflows).</li></ul><p><b>Observability &amp; Troubleshooting</b></p><ul><li>Support monitoring of logs, metrics, and security signals to aid both security response and operational debugging.</li><li>Enable Platform Admins and Application Operators to self‑serve diagnostics while maintaining security boundaries.</li></ul><p><b>Documentation &amp; Guidance</b></p><ul><li>Produce clear guidance for:</li><li>Platform Administrators configuring SIEM integrations</li><li>Application teams onboarding workloads and logs</li><li>SOC analysts using dashboards, alerts, and queries</li><li>Contribute to runbooks, operational procedures, and incident response documentation.</li></ul><p><b>Security &amp; Compliance</b></p><ul><li>Ensure logging and monitoring meet UK Government and high‑assurance security requirements.</li><li>Support audits, assurance activities, and continuous improvement of the monitoring posture.</li></ul><p><b>What You&rsquo;ll Bring</b></p><p><b>Essential Skills &amp; Experience</b></p><ul><li>Strong experience as a Security Engineer, Detection Engineer or SIEM Engineer.</li><li>Hands‑on experience designing or operating SIEM solutions in cloud or hybrid environments.</li><li>Practical knowledge of Elastic SIEM / Elastic Stack, including:</li><li>Indexing and ingest pipelines</li><li>Detection rules and alerts</li><li>Dashboards and visualisations</li><li>Experience working with Kubernetes environments and their logging/monitoring patterns.</li><li>Familiarity with secure log forwarding, encryption, and network‑restricted environments.</li><li>Ability to work closely with SOC teams and translate security requirements into technical implementations.</li></ul><p><b>Cloud &amp; Platform Knowledge</b></p><ul><li>Experience with Google Cloud Platform (GCP) or Google Distributed Cloud (GDC).</li><li>Understanding of cloud audit logs, identity logs, and platform‑level telemetry.</li><li>Experience deploying tools through cloud marketplaces or CI/CD pipelines.</li></ul><p><b>Ways of Working</b></p><ul><li>Comfortable working in high‑assurance, regulated environments.</li><li>Strong documentation and communication skills.</li><li>Able to work independently and take ownership of complex security integrations.</li></ul><p><b>Bonus Points For</b></p><ul><li>Existing UK Government Security Clearance (SC or above)</li><li>Hands‑on experience with Elastic Cloud on Kubernetes (ECK).</li><li>Experience implementing detections as code using Git, CI/CD, and infrastructure‑as‑code.</li><li>Knowledge of threat frameworks.</li><li>Familiarity with UK Government security standards and assurance processes</li></ul><p><b>Clearance Requirements:</b></p><ul><li><i><b>This role requires either an existing Security Clearance (SC level) or for one to be passed before commencement. There must be a willingness to undergo Developed Vetting (DV)</b></i></li></ul><p><b>Work Location: </b>Hybrid remote in London</p><p><b>Job Types: </b>Temporary, Fixed term contract</p><p>Job Types: Fixed term contract, Temporary</p><p>Pay: &pound;625.00 per day</p><p>Application question(s):</p><ul><li>Do you currently hold active UK SC clearance? </li><li>Do you hold UK nationality? (Required due to client security restrictions) </li><li>Are you eligible and willing to undergo UK SC/DV clearance for this role? (Applications without this cannot be considered)</li><li>Does your delivery approach allow for on-site presence in London when required (typically around 3 days per week)?</li></ul><p>Work Location: Hybrid remote in London</p>

Security Engineer (SIEM) – SC Eligible – Government Projects

<p>This role is delivered within secure environments. Candidates must be eligible for UK SC and DV clearance and hold UK Citizenship.</p><p><b>Opening: Join the Mission</b></p><p>At ByDesign Secure, we believe that world-class security shouldn't be an afterthought&mdash;it should be the foundation. We are an independent, outputs-based consultancy dedicated to solving the most complex data assurance challenges in the UK public sector. Currently, we are working on a landmark transformation of a cross-government secure IT system. This is an exciting opportunity to help architect a private cloud environment from the ground up and modernize the end-user services that power national decision-making. We don't believe in &quot;billing by the hour&quot; or rigid hierarchies; we are a lean, expert team focused on delivering high-impact technical outcomes. If you are a self-starter who thrives on autonomy and wants to see your engineering or architectural decisions shape the future of sovereign security, we want to talk to you.</p><p><b>About the Opportunity</b></p><ul><li>We are seeking a skilled Cloud Security Engineer to design and implement secure workloads within a Google Distributed Cloud (GDC) environment.</li><li>This role is ideal for a security professional with a strong GCP background (Other CSP experience also considered) and an active Professional Cloud Security Engineer certification, as these competencies are directly transferable to managing security in air-gapped or edge configurations.</li><li>You will be responsible for ensuring security, rigour, and compliance within mission-critical government secure delivery.</li></ul><p><b>What You&rsquo;ll Be Doing</b></p><ul><li>Identity &amp; Access Management: Designing and managing complex identity architectures, including single sign-on (SSO) integration, multi-factor authentication (MFA), and the automated lifecycle management of privileged user accounts.</li><li>Authorisation &amp; Resource Hierarchy: Defining granular resource hierarchies and implementing the principle of least privilege using advanced identity policies, conditions, and organizational constraints.</li><li>Boundary &amp; Perimeter Protection: Configuring robust network defences, including next-generation firewalls, web application firewalls (WAF), and secure service perimeters to isolate sensitive workloads.</li><li>Data Protection &amp; Encryption: Implementing discovery and redaction services for sensitive data (PII) and managing full-lifecycle encryption through hardware or software-based key management systems.</li><li>Securing the Software Supply Chain: Automating vulnerability scanning and policy enforcement within continuous integration and delivery (CI/CD) pipelines to ensure only authorised code is deployed.</li></ul><p><b>Key Tools/Working practices</b></p><ul><li>Use GDC Console, gdcloud CLI, and kubectl to manage infrastructure, users, workloads, security policies, and platform resources across projects and clusters</li><li>Implement Terraform and Ansible with Git‑based workflows to deliver repeatable, version‑controlled infrastructure and configuration (GitOps), including Config Sync for consistent environments</li><li>Configure IAM, RBAC, service accounts, and identity provider integration to enforce least‑privilege access and secure authentication, with policy enforcement via OPA Gatekeeper</li><li>Define and secure network boundaries using project network policies (ingress/egress control) and manage encryption and trust with KMS and Certificate Authority services</li><li>Build and package applications using Docker and Helm, store images in Harbor, and integrate vulnerability scanning (e.g. Trivy) to detect and remediate issues before deployment</li><li>Test and interact with APIs using curl/REST tools and develop AI capabilities using Vertex AI libraries and notebook environments (e.g. JupyterLab)</li><li>Monitor and troubleshoot using Grafana, Prometheus, and Loki for metrics and logs, with audit logging and SIEM integration for security and compliance</li><li>Configure alerting for failures, anomalies, and SLO breaches, and implement backup and restore processes for resilience and disaster recovery</li><li>Use platform documentation and support channels to validate configurations, follow operational procedures, and resolve issues</li></ul><p><b>What You&rsquo;ll Bring</b></p><ul><li>Demonstrable experience as a practicing Security Engineer, with the ability to transition cloud-native security best practices to a distributed/edge platform.</li><li>Deep proficiency in configuring network security defences, threat monitoring, and regulatory compliance controls.</li></ul><p><b>Bonus Points For</b></p><ul><li>Current, non-expired Professional Cloud Security Engineer certification.</li><li>Experience operating within or alongside classified UK Government secure environments (e.g., SECRET or above).</li><li>Familiarity with GDS Service Standards or equivalent public sector delivery frameworks.</li><li>Experience working in air-gapped or disconnected environments with little or no internet connectivity</li></ul><p>Clearance Requirements:</p><ul><li>This role requires either an existing Security Clearance (SC level) or for one to be passed before commencement. There must be a willingness to undergo Developed Vetting (DV).</li></ul><p><b>Work Location:</b> Hybrid remote in London</p><p><b>Job Types:</b> Temporary, Fixed term contract (Outside of IR35)</p><p>Job Types: Fixed term contract, Temporary</p><p>Pay: &pound;650.00 per day</p><p>Application question(s):</p><ul><li>Do you currently hold active UK SC clearance? </li><li>Do you hold UK nationality? (Required due to client security restrictions) </li><li>Are you eligible and willing to undergo UK SC/DV clearance for this role? (Applications without this cannot be considered)</li><li>Does your delivery approach allow for on-site presence in London when required (typically around 3 days per week)?</li></ul><p>Work Location: Hybrid remote in London</p>

Cloud Security Engineer – SC Eligible – Government Projects

HCLTech

<p>We are a $13+ billion global technology company, home to more than 224,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud, and AI, powered by a broad portfolio of technology services and products.</p><p>HCLTech is a globally recognized leader in the Tech and IT industry, but we&rsquo;ve never forgotten the startup mindset that got us here. We&rsquo;ve always approached our work with an idea-first attitude because every one of our accomplishments &mdash;no matter how big or small &mdash;can be traced back to an idea&rsquo;s single spark.</p><p>It&rsquo;s that spark &mdash;that inner drive &mdash;that sets our people apart from our competitors. It enables us not just to pull off game-changing feat after game-changing feat but to better our world in the process. We want you to find your spark. Because that&rsquo;s what drives you to be better, be more and ultimately, be more fulfilled.</p><p><b>ROLE SUMMARY</b></p><p>The Senior Endpoint Engineer is responsible for engineering, enhancing, and supporting the organization&rsquo;s Azure Virtual Desktop (AVD) and Microsoft Intune environments for both physical devices and virtual workspaces. The role requires strong technical expertise, disciplined operational processes, and deep knowledge of endpoint technologies to ensure stable, secure, and efficient end‑user computing services across the enterprise. This position directly impacts nearly all users and plays a critical role in maintaining a reliable and secure endpoint ecosystem.</p><p><b>ROLE RESPONSIBILITIES</b></p><ul><li>Drive to deliver technology and products in the roadmap on schedule and with the highest quality.</li><li>Provide advice, guidance, and direction to carry out plans and procedures, ensuring schedule attainment, product development process adherence and performance.</li><li>Provide last tier support for operations and support teams, including root cause analysis and preventative analysis.</li><li>Provide technical support with expert knowledge and act as an escalation point for the Desktop Operations team and anything related to the End User Computing environment, focusing on our Endpoint Security Protection, and application management.</li><li>Partner with other Engineering teams to develop solutions.</li><li>Manage the Azure Virtual Desktop (AVD) environment including creating images, deploy VMs, monitor VM performance.</li><li>Develop automated solutions for deploying software packages, application patches/updates and workstation images.</li><li>Engineer and support multiple Windows desktop images.</li><li>Manage the entire lifecycle of our global standard desktop and laptop models.</li><li>Design and implement Microsoft Intune solutions that meet end user requirements.</li><li>Create and manage Intune policies for application deployment, device compliance, and security configurations.</li><li>Ensure seamless integration with other Microsoft 365 services.</li><li>Windows 11 Provisioning: Design and deploy Windows 11 provisioning processes using Intune Autopilot. Configure and manage Windows Update for Business policies. Develop and maintain standardized 11 deployment images.</li><li>Active Directory Group Policy Management: Design and manage Group Policy Objects (GPOs) in Active Directory to enforce security and configuration policies. Collaborate with the Active Directory team to ensure alignment with broader infrastructure goals.</li><li>Security and Compliance: Implement security best practices and compliance policies within Intune. Monitor and respond to security incidents related to mobile devices and endpoints.</li><li>Documentation and Training: Create detailed documentation of Intune configurations, Windows provisioning processes, and Group Policy settings.</li><li>Maintain desktop images and modify SCCM task sequences as needed.</li><li>Package, test, and deploy new applications as needed.</li><li>Maintain and expand existing Knowledge Base.</li><li>Create new and maintain existing support documents to maintain high standards of quality in the delivery of End User Computing services.</li></ul><p><b>TECHNICAL QUALIFICATIONS</b></p><ul><li>8+ years total work experience, 5+ of those years with proven experience in designing and implementing Microsoft Intune solutions.</li><li>5 years&rsquo; experience as a system engineer.</li><li>Desktop engineering and support experience in an enterprise environment.</li><li>Proven experience with Windows 11, Active Directory Structure, and Managing Group Policies.</li><li>Experience developing and testing software packages using Install shield, or equivalent.</li><li>Skills managing a VDI environment (Azure Virtual Desktop preferred).</li><li>Expert level experience within End Point Protection Engineering.</li><li>Expertise in MECM and Intune.</li><li>Expert in patch management including bios and firmware updates, service pack upgrades, and application-based updates.</li><li>Basic Database Administration experience, particularly in SQL Server.</li></ul><p><b>GENERAL QUALIFICATIONS</b></p><ul><li>Proficient communication skills, both written and verbal.</li><li>Possess sound organization and problem-solving skills.</li><li>Excellent ability to work in a team environment.</li><li>Motivated to learn and grow professionally.</li></ul><p><b>EDUCATION REQUIREMENTS</b></p><ul><li>Bachelor&rsquo;s degree from an accredited college or university.</li></ul><p><b>Benefits:</b></p><ul><li>A supportive, diverse and global team with a brilliant culture.</li><li>Great opportunities to make the role your own, upskill yourself and get involved with exciting projects.</li><li>Total Wellbeing is our focus. Alongside your professional excellence, you join the likeminded colleagues to create a larger impact within the company and society at large in your chosen area of passion - CSR Council, Diversity Council, Women Connect, Sparks &ndash; Engagement Champion to name a few.</li><li>To know more about us visit &ndash; <b>www.hcltech.com</b></li><li>For more information on how we process your personal data, please refer to HCLTech&rsquo;s <b>Candidate Data Privacy Notice.</b></li></ul><p>Pay: &pound;24,420.00-&pound;50,000.00 per year</p><p>Work Location: In person</p>

Track Lead - MDM Intune

Securitas

<div><p><b>AWS Infrastructure Engineer</b></p><p>
Location: United Kingdom</p><p></p><p><b>
Purpose</b></p><p>
Design, build, and operate AWS infrastructure that underpins key platforms and services as the organisation continues its transition to cloud.</p><p></p><p>
Work as a hands-on AWS engineer, focused on delivering secure, scalable, and highly available environments. Take ownership of components of the migration and operation of business-critical platforms and services within AWS.</p><p></p><p><b>
Major Responsibilities</b></p><ul><li><p>
Design, build, and maintain AWS infrastructure using infrastructure-as-code principles</p></li><li><p>
Support production and non-production environments with a focus on availability, performance, and security</p></li><li><p>
Deliver backend infrastructure operations including server management, updates, storage, failover, and logging</p></li><li><p>
Build and maintain core AWS services across compute, networking, storage, and identity (e.g. EC2, S3, VPC, IAM, RDS, CloudWatch)</p></li><li><p>
Collaborate with application, DevOps, and security teams to deliver resilient cloud solutions</p></li><li><p>
Integrate infrastructure with CI/CD pipelines to enable reliable, repeatable deployments</p></li><li><p>
Implement monitoring, logging, alerting, and observability practices</p></li><li><p>
Investigate incidents, contribute to root cause analysis, and drive continuous improvement</p></li><li><p>
Support security, compliance, and audit requirements within cloud environments, including regulated or security-sensitive contexts</p></li><li><p>
Work with cloud partners and vendors, including AWS and third parties, on architecture reviews and optimisation</p></li><li><p>
Automate infrastructure provisioning and operational processes to reduce manual effort</p></li><li><p>
Document infrastructure, standards, and operational processes</p></li><li><p>
Primary working hours aligned to European time zones. Participation in a global on-call rotation.</p></li></ul><p></p><p><b>
What Success Looks Like</b></p><ul><li><p>
Deliver stable, secure, and scalable AWS environments that support business-critical platforms</p></li><li><p>
Contribute to the successful migration and operation of core business platforms and services in AWS</p></li><li><p>
Maintain strong system availability and performance across production environments</p></li><li><p>
Identify and resolve infrastructure issues proactively, improving reliability over time</p></li><li><p>
Collaborate effectively with cross-functional teams to deliver consistent, high-quality solutions</p></li><li><p>
Establish reliable and repeatable infrastructure practices</p></li></ul><p></p><p><b>
Education</b></p><ul><li><p>
Degree or equivalent experience in Computer Science, Information Technology, or a related field</p></li></ul><p></p><p><b>
Experience &amp; Knowledge</b></p><ul><li><p>
Hands-on experience with AWS in production environments</p></li><li><p>
Strong knowledge of core AWS services such as VPC, IAM, EC2, containers, storage, and monitoring</p></li><li><p>
Experience with infrastructure-as-code tools (e.g. Terraform, AWS CDK, or similar)</p></li><li><p>
Understanding of cloud networking, security, and identity management</p></li><li><p>
Experience supporting highly available, business-critical systems</p></li><li><p>
Familiarity with cloud migration initiatives</p></li><li><p>
Experience integrating infrastructure with CI/CD pipelines and automation tooling</p></li><li><p>
Exposure to containerised workloads or orchestration platforms (e.g. ECS, EKS)</p></li><li><p>
Experience working within regulated or security-focused environments</p></li><li><p>
Experience working with distributed teams</p></li><li><p>
AWS certifications (e.g. Solutions Architect, SysOps Administrator) are beneficial</p></li></ul><p></p><p><b>
Skills &amp; Competencies</b></p><ul><li><p>
Strong problem-solving and troubleshooting skills</p></li><li><p>
Clear communication across technical and non-technical teams</p></li><li><p>
Collaborative approach to working with engineering, security, and operations</p></li><li><p>
Ability to prioritise and manage workload effectively</p></li><li><p>
Adaptability in a changing environment</p></li><li><p>
Commitment to continuous learning and improvement</p></li></ul><p></p><p><b>
Why Join Us</b></p><p>
Work on meaningful cloud transformation initiatives, helping to move critical platforms into AWS. Contribute to real-world infrastructure challenges while collaborating with experienced teams across the organisation.</p><p>
Develop AWS expertise, expand technical capability, and operate in an environment that values collaboration, learning, and practical problem solving.</p><p></p><p><b>
Our People Promise &ndash; Securitas Technology EVP</b></p><p>
Alongside the opportunity to work on modern AWS infrastructure, you&rsquo;ll be part of an organisation that values people, growth, and purpose. We offer clear career pathways, growth opportunities, recognition for achievements, and a global, collaborative team.</p><p></p><p>
As part of our EVP, we offer:</p><ul><li><p>
Career pathways and growth opportunities</p></li><li><p>
A global, values-driven team</p></li><li><p>
Recognition for achievements</p></li><li><p>
An inclusive, collaborative culture</p></li><li><p>
Purposeful work that makes the world safer</p></li><li><p>
Support for innovation and sustainability</p></li></ul><p></p><p>
Securitas Technology is committed to diversity and is an equal opportunity employer; all qualified applicants are welcome.</p></div>

AWS Infrastructure Engineer

UK Government - Department for Science, Innovation & Technology

<div><div><h2 class="jobSectionHeader"><b>Details</b></h2>
<div><h3 class="jobSectionHeader"><b>Reference number</b></h3>
<div>468917
</div></div><div><h3 class="jobSectionHeader"><b>Salary</b></h3><div>
&pound;69,675 - &pound;90,756</div></div><div><div>
Salary is paid within the grade range shown below.
<br>
As this is a GDAD role, the maximum salary includes a non-pensionable technical allowance, and successful candidates will be appointed somewhere within that range depending on assessment.
<br>
<br>
Grade 6
<br>
National: &pound;69,675 to &pound;82,318 (maximum includes &pound;12,643 non-pensionable allowance)
<br>
London: &pound;74,605 to &pound;90,756 (maximum includes &pound;16,151 non-pensionable allowance)</div></div><div><div>
A Civil Service Pension with an employer contribution of 28.97%</div></div>
<div>GBP</div>
<div><h3 class="jobSectionHeader"><b>Job grade</b></h3><div><div>
Grade 6</div></div></div><div><h3 class="jobSectionHeader"><b>
Contract type</b></h3><div>
Permanent</div></div><div><h3 class="jobSectionHeader"><b>
Business area</b></h3><div>
DSIT - Digital, Technologies and Telecoms</div></div><div><h3 class="jobSectionHeader"><b>
Type of role</b></h3><div>
Other</div></div><div><h3 class="jobSectionHeader"><b>
Working pattern</b></h3><div>
Flexible working, Full-time, Job share, Part-time</div></div><div><h3 class="jobSectionHeader"><b>
Number of jobs available</b></h3><div>
2</div></div></div>
<div><div><h2 class="jobSectionHeader"><b>Contents</b></h2></div><div><ul><li>
Location</li><li>
About the job</li><li>
Benefits</li><li>
Things you need to know</li><li>
Apply and further information</li></ul></div><div><h2 class="jobSectionHeader"><b>
Location</b></h2></div><div><div>
Bristol, London, Manchester</div></div><div><h2 class="jobSectionHeader"><b>
About the job</b></h2></div><div><h3 class="jobSectionHeader"><b>
Job summary</b></h3><div><h2 class="jobSectionHeader"><b>
Incubator for AI, i.AI</b></h2><h3 class="jobSectionHeader"><b>
Help build the platform behind some of the most ambitious AI products in government</b></h3><p>
This is not a conventional platform engineering role.</p><p>
At i.AI, you will help build the cloud platform that enables teams to deliver frontier AI products into real world public services. Your work will shape the foundations that allow AI systems to move from idea to production securely, reliably and at pace.</p><p>
You will join a highly capable engineering team with a flat structure, strong technical standards and a high degree of autonomy. This is an environment for engineers who want to solve hard problems, influence architecture, improve how teams build, and work on technology that has visible impact beyond the organisation itself.</p><p>
If you are excited by platform engineering, modern cloud infrastructure, AI enabled systems and the challenge of making advanced technology work in the real world, this is a rare opportunity to do all of that in one role.</p></div></div><div><h3 class="jobSectionHeader"><b>
Job description</b></h3><div><h2 class="jobSectionHeader"><b>
About the role</b></h2><p>
We are looking for a Lead Cloud Platform Engineer to help design, build and operate the platform that powers AI product delivery.</p><p>
This is a hands-on technical leadership role for an engineer who combines deep cloud platform expertise with broad strength across architecture, security, software engineering and AI platform concerns. You will operate as a T shaped engineer, bringing both technical depth and the judgement to work across disciplines when needed.</p><p>
You will play a central role in defining how platform capabilities are built, adopted and evolved. You will lead through technical credibility, not hierarchy, helping teams solve complex problems while raising the bar for engineering quality across the platform.</p><h2 class="jobSectionHeader"><b>
What you will work on</b></h2><ul><li><b>
End to end platform engineering: </b>You will own the technical delivery of platform initiatives from concept through to production. That means taking ambiguous problems, making clear architectural decisions, and building secure, scalable cloud components that teams can depend on.</li><li><b>
Platform as a product: </b>You will work backwards from user needs to build technical capabilities that improve the developer experience. You will create reusable patterns for local development, pipelines, environments, observability and operational ergonomics, helping teams ship faster with less friction.</li><li><b>
AI workload enablement: </b>You will support the delivery of production AI systems and agentic workloads. You will build and maintain platform capabilities for model access, routing, tracing, evaluation, reliability and cost control.</li><li><b>
Intelligent automation and security: </b>You will treat security as a first class engineering concern, building automated controls for software supply chain security, secrets management and policy as code. You will also actively use GenAI capabilities to reduce operational toil, introduce intelligent guardrails and streamline developer workflows.</li><li><b>
Technical leadership: </b>You will help shape platform direction through strong engineering judgement and hands on delivery. You will mentor other engineers, introduce better patterns and balance the needs of individual teams with platform wide coherence.<br>
</li></ul><h2 class="jobSectionHeader"><b>
Why join i.AI</b></h2><p>
This is a chance to work on platform engineering at a point where cloud, software delivery and AI are converging fast.</p><p>
You will have the opportunity to:</p><ul><li>
Build for real production AI use cases rather than isolated experiments</li><li>
Work with frontier models and modern AI tooling as part of day to day engineering</li><li>
Solve platform problems that span reliability, developer experience, security and AI enablement</li><li>
Influence architecture and technical standards in a high trust, high agency team</li><li>
Contribute to products with meaningful real world impact</li></ul><p>
For the right engineer, this role offers a combination that is hard to find elsewhere: complex platform work, genuine technical ownership, access to advanced AI tooling, and the chance to help shape how ambitious AI products are delivered in practice.</p><h2 class="jobSectionHeader"><b>
Our stack</b></h2><p>
You do not need to be an expert in every tool from day one, but our technical ecosystem includes:</p><ul><li><b>
Cloud infrastructure: </b>AWS including ECS, Lambda, CloudFront, RDS and S3, alongside multi cloud integration patterns across Azure and GCP.</li><li><b>
Containerisation and delivery: Docker and podman, container orchestration, GitHub Actions for CI and CD, infrastructure automation, and robust deployment patterns including rolling, canary and blue green.</b></li><li><b>
Development: </b>Terraform, Python with FastAPI, and JavaScript or TypeScript with Next.js, Astro and Node.js.AI platform layer: Tooling for model routing, tracing and evaluation, such as LiteLLM and Langfuse, integrated with modern AI frameworks including LangGraph, DSPy and Inspect.</li><li><b>
AI harness: </b>OpenCode and Claude Code, with full access to frontier models from OpenAI, Anthropic and Google for both developer augmentation and platform integration.</li><li><b>
Observability: </b>AWS CloudWatch for logs, metrics and alarms, alongside Grafana, Sentry and X Ray for monitoring and tracing.</li><li><b>
Security: </b>Supply chain tooling including SAST, SCA and SBOMs, policy as code, runtime assurance including CSPM and DAST, and automated IAM and secrets management.</li></ul></div></div><div><h3 class="jobSectionHeader"><b>
Person specification</b></h3><div><h2 class="jobSectionHeader"><b>
Who we think will thrive in this role</b></h2><p>
We are looking for an experienced lead level engineer who is energised by building platforms that matter.</p><p>
You may be a strong fit if you bring some of the following:</p><ul><li>
Strong hands on experience building and operating cloud platforms in production, with AWS strongly preferred</li><li>
Deep understanding of platform architecture, distributed systems design, networking fundamentals and reliability concepts such as SLOs, tracing and alerting</li><li>
A mindset for applying AI internally, with experience or strong interest in using GenAI and LLM assisted tooling to reduce repetitive operational work and improve platform resilience</li><li>
Practical experience embedding security into delivery workflows, including software supply chain security, IAM, threat modelling and policy as code</li><li>
Experience supporting AI or ML systems in production, including model serving, MLOps, agentic orchestration, or prompt and inference cost trade offs</li><li>
Practical proficiency in software development and strong capability in infrastructure automation</li><li>
A track record of defining reusable patterns and evolving engineering standards, rather than simply delivering one off solutions</li><li>
Strong ownership, sound judgement and comfort working through ambiguity</li><li>
A product mindset, with a clear understanding that developer experience is critical to platform adoption</li><li>
The ability to coach others, raise technical standards through practice, and operate effectively in a flat, high agency team</li></ul><p>
Bonus experience includes multi cloud patterns, GPU or HPC workloads, or building platform telemetry and internal tools.</p></div></div><div><h3 class="jobSectionHeader"><b>
Technical skills</b></h3>
<div><p>We'll assess you against these technical skills during the selection process:</p>
<ul><li>Candidates will assessed technically via interview and potentially take home assessment. Details of this will be communicated to the candidate directly.</li>
</ul></div></div><div><h2 class="jobSectionHeader"><b>Benefits</b></h2></div><div><div>
Alongside your salary of &pound;69,675, Department for Science, Innovation &amp; Technology contributes &pound;20,184 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides .</div></div><div><div><p>
The Department for Science, Innovation and Technology offers a competitive mix of benefits including:</p><ul><li>
A culture of flexible working, such as job sharing, homeworking and compressed hours.</li><li>
Automatic enrolment into the Civil Service Pension Scheme, with an employer contribution of 28.97%.</li><li>
A minimum of 25 days of paid annual leave, increasing by 1 day per year up to a maximum of 30.</li><li>
An extensive range of learning &amp; professional development opportunities, which all staff are actively encouraged to pursue.</li><li>
Access to a range of retail, travel and lifestyle employee discounts.</li></ul><p><b>
Office attendance</b></p><p>
The Department operates a discretionary hybrid working policy, which provides for a combination of working hours from your place of work and from your home in the UK. The current expectation for staff is to attend the office or non-home based location for 40-60% of the time over the accounting period.</p></div></div><div><h2 class="jobSectionHeader"><b>
Things you need to know</b></h2></div><div><h3 class="jobSectionHeader"><b>
Artificial intelligence</b></h3><div>
Artificial intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance for more information on appropriate and inappropriate use.</div></div><div><h3 class="jobSectionHeader"><b>
Selection process details</b></h3><div><div>
This vacancy is using Success Profiles , and will assess your Experience and Technical skills.</div></div><div><div><p><b>
Appointment is conditional on successfully completing UK Government SC clearance. Prior clearance is not requiredwe will sponsor and support you.</b> You should normally have been resident in the UK for 2 of the past 5 years. Employment is conditional on obtaining and maintaining the required clearance(s). More detail on clearance eligibility can be found on the UK Government website: National security vetting: clearance levels - GOV.UK</p><p>
In accordance with the Civil Service Commission rules, the following list contains all elements of the selection process.</p><p>
Candidates should expect to go through some or all of the following stages once an application has been submitted:</p><ul><li>
A short initial conversation</li><li>
Technical take home test</li><li>
Second interview in which well review the technical test</li><li>
Third interview with wider representation from the team</li><li>
Final interview with members of the senior team</li></ul><p>
To apply please follow the instructions on Greenhouse where you will be asked to complete personal statement questions and upload your CV. Should the team receive an abundance of CVs we reserve the right to sift on CV alone.</p><h3 class="jobSectionHeader"><b>
Diversity and Inclusion</b></h3><div>
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan and the Civil Service Diversity and Inclusion Strategy . As part of the application process, we monitor statistics on D&amp;I. You can see how we process this data here: Recruitment privacy notice - GOV.UK.</div><br>
Feedback will only be provided if you attend an interview or assessment.</div></div></div><div><h3 class="jobSectionHeader"><b>
Security</b></h3><div><div>
Successful candidates must undergo a criminal record check.</div></div><div><div>
Successful candidates must meet the security requirements before they can be appointed. The level of security needed is security check .<br>
<br>
See our vetting charter .</div></div><div><div>
People working with government assets must complete baseline personnel security standard (opens in new window) checks.</div></div></div><div><h3 class="jobSectionHeader"><b>
Nationality requirements</b></h3><div><div>
<p>This job is broadly open to the following groups:</p>
<ul><li>UK nationals</li>
<li>nationals of the Republic of Ireland</li>
<li>nationals of Commonwealth countries who have the right to work in the UK</li>
<li>nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS)</li>
<li>nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS)</li>
<li>individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020</li>
<li>Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service</li>
</ul>Further information on nationality requirements
</div></div></div><div><h3 class="jobSectionHeader"><b>Working for the Civil Service</b></h3><div><div>
The Civil Service Code sets out the standards of behaviour expected of civil servants.<br>
<br>
We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles .</div></div><div><div>
The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.</div></div><div><div>
The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.</div></div></div><div><h3 class="jobSectionHeader"><b>
Diversity and Inclusion</b></h3><div>
The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan and the Civil Service Diversity and Inclusion Strategy .</div></div><div><h2 class="jobSectionHeader"><b>
Apply and further information</b></h2></div><div><div>
This vacancy is part of the Great Place to Work for Veterans initiative.</div></div><div><div>
Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.</div></div><div><h3 class="jobSectionHeader"><b>
Contact point for applicants</b></h3><div><h4 class="jobSectionHeader"><b>
Job contact :
</b></h4><ul><li>Name : Ben Sams</li><li>
Email : ben.sams@dsit.gov.uk</li></ul><h4 class="jobSectionHeader"><b>
Recruitment team</b></h4><ul><li>
Email : ben.sams@dsit.gov.uk</li></ul></div></div><div><h3 class="jobSectionHeader"><b>
Further information</b></h3><div><div>
Appointment to the Civil Service is governed by the Civil Service Commissions Recruitment Principles. If you feel that your application has not been treated in accordance with the recruitment principles, and wish to make a complaint, then you should contact in the first instance dsitresourcing.GRS@cabinetoffice.gov.uk. If you are not satisfied with the response that you receive, then you can contact the Civil Service Commission. For further information on bringing a complaint to the Civil Service Commission please visit their web pages at: https://civilservicecommission.independent.gov.uk/contact-us/</div></div></div></div></div><div></div>

Lead Cloud Platform Engineer- i.AI

<p><i><b>This role is delivered within secure environments. Candidates must be eligible for UK SC and DV clearance and hold UK citizenship.</b></i></p><p><b>Opening: Join the Mission</b></p><p>At ByDesign Secure, we believe that world-class security shouldn't be an afterthought&mdash;it should be the foundation. We are an independent, outputs-based consultancy dedicated to solving the most complex data assurance challenges in the UK public sector. Currently, we working on a landmark transformation of a cross-government secure IT system. This is an exciting opportunity to help architect a private cloud environment from the ground up and modernize the end-user services that power national decision-making. We don't believe in &quot;billing by the hour&quot; or rigid hierarchies; we are a lean, expert team focused on delivering high-impact technical outcomes. If you are a self-starter who thrives on autonomy and wants to see your engineering or architectural decisions shape the future of sovereign security, we want to talk to you.</p><p><b>About the Opportunity</b></p><p>We're looking for an experienced Application Support Engineer with strong Google Cloud expertise to join our team. You&rsquo;ll be part of a multi-year transformation programme, shaping and implementing some of the most strategically significant government systems in operation today.</p><p><b>What You&rsquo;ll Be Doing</b></p><ul><li>Engineering secure, scalable, and resilient applications in Google Cloud Platform (GCP) and Google Distributed Cloud (GDC) environments.</li><li>Working within disconnected environments on data-severing solutions. </li><li>Collaborating closely with architecture, engineering and security teams to ensure seamless integration from design through delivery.</li><li>Deploy, monitor and support applications on Google, including Cloud Functions, GKE, Compute Engine, and App Engine.</li><li>Use Google Cloud Operations Suite (Cloud Monitoring, Logging, Trace) to maintain service health and identify potential issues.</li><li>Execute routine operational tasks such as configuration updates, performance checks, restarts, permissions reviews, and patching activities.</li><li>Support deployments and releases through controlled CI/CD pipelines.</li><li>Assist with maintaining service accounts, IAM roles, and organisational policies following least-privilege principles.</li><li>Support with application migration activities including the technical analysis, deployment and testing alongside the architecture teams.</li><li>Develop and maintain documentation including Low Level Designs, runbooks and guidance.</li></ul><p><b>What You&rsquo;ll Bring</b></p><ul><li>Proven hands-on experience as a Google Application Operator specialising in Google Cloud.</li><li>Practical hands-on knowledge of Google Distributed Cloud (GDC), </li><li>Experience working in environments without direct internet connectivity.</li><li>Strong engineering background with deep understanding of IaC (Terraform, Deployment Manager), automation, and CI/CD pipelines.</li><li>Expertise in networking, IAM, containerisation (GKE/Kubernetes), and secure systems design.</li><li>Confident working within highly regulated or classified environments where reliability and compliance are paramount.</li><li>Strong communicator &mdash; able to bridge technical and non-technical stakeholders effectively.</li></ul><p><b>Bonus Points For</b></p><ul><li>Prior experience working on government classified systems or within secure data centre environments.</li><li>Experience of configuring and using AI technologies within cloud environments, including GCP AI technologies.</li><li>Familiarity with NCSC guidance, UK Government cloud policies, or cross-domain architectures.</li><li>Knowledge of multi-cloud integrations, edge computing, and data sovereignty requirements.</li><li>Google Certifications.</li><li>Existing UK Government Security Clearance (SC or above)</li></ul><p><b>Why This Role?</b></p><ul><li>Work on high-impact, nationally significant projects that make a real difference.</li><li>Join a trusted specialist integrator with a proven record of secure delivery into UK Government.</li></ul><p><b>Clearance Requirements:</b></p><ul><li><i><b>This role requires either an existing Security Clearance (SC level) or for one to be passed before commencement. There must be a willingness to undergo Developed Vetting (DV).</b></i></li></ul><p><b>Work Location</b>: Hybrid remote in London</p><p><b>Job Types</b>: Temporary, Fixed term contract (Outside of IR35)</p><p>Job Types: Fixed term contract, Temporary</p><p>Pay: &pound;550.00 per day</p><p>Application question(s):</p><ul><li>Do you currently hold active UK SC clearance? </li><li>Do you hold UK nationality? (Required due to client security restrictions) </li><li>Are you eligible and willing to undergo UK SC/DV clearance for this role? (Applications without this cannot be considered)</li><li>Does your delivery approach allow for on-site presence in London when required (typically around 3 days per week)?</li></ul><p>Work Location: Hybrid remote in London</p>

Google Cloud Application Support Engineer (SC Eligible)

Explore 214+ Application security engineer in London this July. Find roles across top companies and apply now to boost your career.