cloud security engineer

ByDesign Secure

This role is delivered within secure environments. Candidates must be eligible for UK SC and DV clearance and hold UK Citizenship.Opening: Join the MissionAt ByDesign Secure, we believe that world-class security shouldn't be an afterthought&mdash;it should be the foundation. We are an independent, outputs-based consultancy dedicated to solving the most complex data assurance challenges in the UK public sector. Currently, we are working on a landmark transformation of a cross-government secure IT system. This is an exciting opportunity to help architect a private cloud environment from the ground up and modernize the end-user services that power national decision-making. We don't believe in &quot;billing by the hour&quot; or rigid hierarchies; we are a lean, expert team focused on delivering high-impact technical outcomes. If you are a self-starter who thrives on autonomy and wants to see your engineering or architectural decisions shape the future of sovereign security, we want to talk to you.About the Opportunity<ul><li>We are seeking a skilled Cloud Security Engineer to design and implement secure workloads within a Google Distributed Cloud (GDC) environment.</li><li>This role is ideal for a security professional with a strong GCP background (Other CSP experience also considered) and an active Professional Cloud Security Engineer certification, as these competencies are directly transferable to managing security in air-gapped or edge configurations.</li><li>You will be responsible for ensuring security, rigour, and compliance within mission-critical government secure delivery.</li></ul>What You&rsquo;ll Be Doing<ul><li>Identity &amp; Access Management: Designing and managing complex identity architectures, including single sign-on (SSO) integration, multi-factor authentication (MFA), and the automated lifecycle management of privileged user accounts.</li><li>Authorisation &amp; Resource Hierarchy: Defining granular resource hierarchies and implementing the principle of least privilege using advanced identity policies, conditions, and organizational constraints.</li><li>Boundary &amp; Perimeter Protection: Configuring robust network defences, including next-generation firewalls, web application firewalls (WAF), and secure service perimeters to isolate sensitive workloads.</li><li>Data Protection &amp; Encryption: Implementing discovery and redaction services for sensitive data (PII) and managing full-lifecycle encryption through hardware or software-based key management systems.</li><li>Securing the Software Supply Chain: Automating vulnerability scanning and policy enforcement within continuous integration and delivery (CI/CD) pipelines to ensure only authorised code is deployed.</li></ul>Key Tools/Working practices<ul><li>Use GDC Console, gdcloud CLI, and kubectl to manage infrastructure, users, workloads, security policies, and platform resources across projects and clusters</li><li>Implement Terraform and Ansible with Git‑based workflows to deliver repeatable, version‑controlled infrastructure and configuration (GitOps), including Config Sync for consistent environments</li><li>Configure IAM, RBAC, service accounts, and identity provider integration to enforce least‑privilege access and secure authentication, with policy enforcement via OPA Gatekeeper</li><li>Define and secure network boundaries using project network policies (ingress/egress control) and manage encryption and trust with KMS and Certificate Authority services</li><li>Build and package applications using Docker and Helm, store images in Harbor, and integrate vulnerability scanning (e.g. Trivy) to detect and remediate issues before deployment</li><li>Test and interact with APIs using curl/REST tools and develop AI capabilities using Vertex AI libraries and notebook environments (e.g. JupyterLab)</li><li>Monitor and troubleshoot using Grafana, Prometheus, and Loki for metrics and logs, with audit logging and SIEM integration for security and compliance</li><li>Configure alerting for failures, anomalies, and SLO breaches, and implement backup and restore processes for resilience and disaster recovery</li><li>Use platform documentation and support channels to validate configurations, follow operational procedures, and resolve issues</li></ul>What You&rsquo;ll Bring<ul><li>Demonstrable experience as a practicing Security Engineer, with the ability to transition cloud-native security best practices to a distributed/edge platform.</li><li>Deep proficiency in configuring network security defences, threat monitoring, and regulatory compliance controls.</li></ul>Bonus Points For<ul><li>Current, non-expired Professional Cloud Security Engineer certification.</li><li>Experience operating within or alongside classified UK Government secure environments (e.g., SECRET or above).</li><li>Familiarity with GDS Service Standards or equivalent public sector delivery frameworks.</li><li>Experience working in air-gapped or disconnected environments with little or no internet connectivity</li></ul>Clearance Requirements:<ul><li>This role requires either an existing Security Clearance (SC level) or for one to be passed before commencement. There must be a willingness to undergo Developed Vetting (DV).</li></ul>Work Location: Hybrid remote in LondonJob Types: Temporary, Fixed term contract (Outside of IR35)Job Types: Fixed term contract, TemporaryPay: &pound;650.00 per dayApplication question(s):<ul><li>Do you currently hold active UK SC clearance? </li><li>Do you hold UK nationality? (Required due to client security restrictions) </li><li>Are you eligible and willing to undergo UK SC/DV clearance for this role? (Applications without this cannot be considered)</li><li>Does your delivery approach allow for on-site presence in London when required (typically around 3 days per week)?</li></ul>Work Location: Hybrid remote in London

Cloud Security Engineer – SC Eligible – Government Projects

This role is delivered within secure environments. Candidates must be eligible for UK Security Clearance (SC and DV) and hold UK Citizenship.Opening: Join the MissionAt ByDesign Secure, we design and deliver secure-by-default digital platforms for high‑assurance environments. We are currently building a new secure cloud platform based on Google Distributed Cloud (GDC) and are looking for a Security Engineer (SIEM) to lead the design and implementation of its security monitoring and observability capabilities.This role offers the opportunity to build a SIEM capability from the ground up, influence security architecture decisions, and directly support SOC operations protecting critical public‑sector services.About the OpportunityAs a Security Engineer (SIEM) at ByDesign Secure, you will be responsible for building and enhancing our security monitoring and detection capabilities across complex environments. You will design and maintain SIEM use cases, onboard and normalise data sources, and continuously tune detections to improve threat visibility and response.Working closely with incident response and platform teams, you will turn security data into actionable insight, helping to strengthen detection coverage, reduce noise, and advance the organisation&rsquo;s overall security maturity.Role Purpose<ul><li>As a Security Engineer, you will be responsible for designing, building, and operating the Security Information and Event Management (SIEM) and security observability stack for a new GDC‑based platform.</li><li>You will:</li><li>Define how security logs, metrics, alerts, and telemetry are collected, processed, retained, and visualised.</li><li>Establish a cloud-native SIEM tool and monitoring capability.</li><li>Integrate cloud‑native monitoring with existing on‑premise SOC tooling.</li><li>Enable SOC analysts by providing reliable, actionable security insights.</li><li>You will work closely with cloud engineers, security architects, SOC teams, and external vendors to ensure the solution meets security, operational, and compliance requirements.</li></ul>What You&rsquo;ll Be DoingSIEM Architecture &amp; Design<ul><li>Work with security and solution architects to design the end‑to‑end SIEM architecture for a secure Google Distributed Cloud (GDC) environment.</li><li>Define log, event and telemetry standards across platform, infrastructure, Kubernetes, and application layers.</li><li>Decide which data sources are monitored locally versus forwarded to an existing on‑prem SIEM.</li></ul>SIEM Implementation &amp; Integration<ul><li>Deploy Elastic SIEM using standard or shared Kubernetes clusters where appropriate.</li><li>Configure secure log forwarding from GDC components to an on‑prem SIEM over dedicated, encrypted network links.</li><li>Integrate cloud audit logs, Kubernetes logs, workload logs, and security tooling into Elastic and on‑prem platforms.</li></ul>Detection Engineering &amp; SOC Enablement<ul><li>Implement detections‑as‑code, version‑controlled and automated through CI/CD pipelines.</li><li>Create and tune detection rules, alerts, and dashboards for SOC analysts.</li><li>Align detections with threat intelligence and playbooks (e.g. Mandiant‑aligned SOC workflows).</li></ul>Observability &amp; Troubleshooting<ul><li>Support monitoring of logs, metrics, and security signals to aid both security response and operational debugging.</li><li>Enable Platform Admins and Application Operators to self‑serve diagnostics while maintaining security boundaries.</li></ul>Documentation &amp; Guidance<ul><li>Produce clear guidance for:</li><li>Platform Administrators configuring SIEM integrations</li><li>Application teams onboarding workloads and logs</li><li>SOC analysts using dashboards, alerts, and queries</li><li>Contribute to runbooks, operational procedures, and incident response documentation.</li></ul>Security &amp; Compliance<ul><li>Ensure logging and monitoring meet UK Government and high‑assurance security requirements.</li><li>Support audits, assurance activities, and continuous improvement of the monitoring posture.</li></ul>What You&rsquo;ll BringEssential Skills &amp; Experience<ul><li>Strong experience as a Security Engineer, Detection Engineer or SIEM Engineer.</li><li>Hands‑on experience designing or operating SIEM solutions in cloud or hybrid environments.</li><li>Practical knowledge of Elastic SIEM / Elastic Stack, including:</li><li>Indexing and ingest pipelines</li><li>Detection rules and alerts</li><li>Dashboards and visualisations</li><li>Experience working with Kubernetes environments and their logging/monitoring patterns.</li><li>Familiarity with secure log forwarding, encryption, and network‑restricted environments.</li><li>Ability to work closely with SOC teams and translate security requirements into technical implementations.</li></ul>Cloud &amp; Platform Knowledge<ul><li>Experience with Google Cloud Platform (GCP) or Google Distributed Cloud (GDC).</li><li>Understanding of cloud audit logs, identity logs, and platform‑level telemetry.</li><li>Experience deploying tools through cloud marketplaces or CI/CD pipelines.</li></ul>Ways of Working<ul><li>Comfortable working in high‑assurance, regulated environments.</li><li>Strong documentation and communication skills.</li><li>Able to work independently and take ownership of complex security integrations.</li></ul>Bonus Points For<ul><li>Existing UK Government Security Clearance (SC or above)</li><li>Hands‑on experience with Elastic Cloud on Kubernetes (ECK).</li><li>Experience implementing detections as code using Git, CI/CD, and infrastructure‑as‑code.</li><li>Knowledge of threat frameworks.</li><li>Familiarity with UK Government security standards and assurance processes</li></ul>Clearance Requirements:<ul><li>This role requires either an existing Security Clearance (SC level) or for one to be passed before commencement. There must be a willingness to undergo Developed Vetting (DV)</li></ul>Work Location: Hybrid remote in LondonJob Types: Temporary, Fixed term contractJob Types: Fixed term contract, TemporaryPay: &pound;625.00 per dayApplication question(s):<ul><li>Do you currently hold active UK SC clearance? </li><li>Do you hold UK nationality? (Required due to client security restrictions) </li><li>Are you eligible and willing to undergo UK SC/DV clearance for this role? (Applications without this cannot be considered)</li><li>Does your delivery approach allow for on-site presence in London when required (typically around 3 days per week)?</li></ul>Work Location: Hybrid remote in London

Security Engineer (SIEM) – SC Eligible – Government Projects

Bridewell

<div>Start Date: 14th September 2026
About Bridewell
One of the most exciting prospects in the UK cyber security sector today, Bridewell is a leading cyber security services company specialising in protecting and transforming critical business functions for some of the world&rsquo;s most trusted organisations. We are the trusted partner for operators of essential services and provide end-to-end cyber security capabilities that help our clients overcome their security challenges, allowing them to operate safely and securely.
Bridewell holds the Gold level, Investors in People award which we feel solidifies and reflects on the outstanding calibre that makes us truly one team.
The Opportunity
In the first three months of the Bridewell Academy, you will undergo comprehensive onboarding, where you will meet your manager and assigned buddy, who will guide you through the initial stages of your journey. During this period, you will gain exposure to our Cloud Engineering team, allowing you to familiarise yourself with cloud architecture, modern engineering practices, and the Microsoft 365 security stack &mdash; including Microsoft Defender (XDR), Microsoft Sentinel, and Microsoft Purview &mdash; alongside equivalent capabilities across other hyper-scalers. You will complete foundational training, such as the Microsoft Certified: Azure Fundamentals (AZ-900), Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900), and AWS Certified Cloud Practitioner courses, and become acquainted with our learning management systems, setting a solid foundation for your professional development.
As you progress into the three to six-month mark, you will begin shadowing and contributing to client-facing cloud projects, where you'll apply your skills in real-world scenarios. This hands-on experience will be invaluable as you collaborate with senior consultants on deployments, configuration tasks, and technical documentation across Microsoft Azure, Microsoft 365, AWS, and GCP environments &mdash; with early exposure to security tooling such as Microsoft Defender, Microsoft Entra and Microsoft Sentinel.
Between six to eighteen months, you will continue working on client-facing projects both independently and as part of a squad, enhancing your practical experience in the field. During this time, you will focus on completing essential certifications such as:
<ul><li>Microsoft Certified: Azure Administrator Associate (AZ-104)</li><li>
Microsoft Certified: Security Operations Analyst Associate (SC-200)</li><li>
Microsoft Certified: Information Protection and Compliance Administrator Associate (SC-401)
</li><li>Microsoft Certified: Cloud and AI Security Engineer (SC-500)</li><li>
AWS Certified Solutions Architect &ndash; Associate or Google Associate Cloud Engineer</li></ul>
Achieving these qualifications will further prepare you for your future role, culminating in your pathway to becoming academy certified. This structured progression ensures you are well-equipped with the knowledge and hands-on experience needed to thrive in a modern multi-cloud and cloud-security engineering career. 
Requirements 
Responsibilities<ul><li>
Support Client Engagements: Assist in the delivery of high-quality cloud engineering projects. Help clients design, deploy, and operate workloads across Microsoft Azure, Microsoft 365, AWS, and GCP, contributing to activities such as landing zone builds, identity and access configuration, network design, and the deployment and tuning of Microsoft Defender, Microsoft Sentinel, and Microsoft Purview alongside equivalent native security services in other clouds.</li><li>
Stay Informed: Actively engage in professional development by attending relevant training sessions, hackathons, vendor workshops (Microsoft, AWS, Google), and industry conferences to remain current with the latest cloud services, security tooling, architectural patterns, and engineering best practices.</li><li>
Collaborate with Consultants: Work closely with senior cloud and security engineers on project tasks &mdash; helping to gather requirements, build proofs-of-concept, author detections and analytics rules in Sentinel, configure Defender policies, script automation (e.g. PowerShell, KQL, Bicep, Terraform, ARM, CloudFormation), and prepare technical documentation to ensure project objectives are met efficiently and effectively.</li><li>
Participate in Team Meetings: Join regular squad stand-ups, design reviews, and retrospectives to discuss project progress, share insights, and gather feedback, fostering a collaborative engineering culture and enhancing your personal learning.</li><li>
Conduct Technical Research: Help with preliminary research on emerging cloud and security services, reference architectures, and comparative analysis between vendors (Azure/M365 vs. AWS vs. GCP) to support project work and internal capability development.</li><li>
Engage with Clients: Participate in client meetings, technical workshops, and whiteboarding sessions as needed, providing support and gathering information to understand client requirements and contribute to high-quality service delivery.</li></ul>
Experience<ul><li>
A degree in Computer Science, Cloud Computing, Cyber Security, an equivalent qualification, or completion of a cloud/engineering-focused training course or bootcamp.</li><li>
Minimum grade of 4/C in GCSE English Language and Maths (or equivalent).</li><li>
Three A-levels or five Highers (or equivalent).</li><li>
No work experience is needed as this is an entry-level position. We are looking for someone who will show potential for these roles through their transferable skills. Curiosity about cloud and security technology, confidence, relationship building, and a self-starter mentality are all welcome &mdash; alongside a huge eagerness to learn and build!</li></ul> 

Benefits 
Why join us?
Our vision is to create a safe, inclusive digital world where people and organisations can thrive. Our values of Do the Right Thing, One Team and Above and Beyond emphasises the importance of the part we play in society, and our commitment to our people and clients. Our story to-date has been phenomenal, but success doesn&rsquo;t end here and as we continue to grow and scale, we want to keep the same culture, passion and commitment to high quality that has enabled us to get this far. Bridewell will provide a great career opportunity with continual development as well as the following:
<ul><li>25 Days Holiday - Plus buy and sell options
</li><li>Flexible Working (around core office hours)
</li><li>Company Pension
</li><li>Employee Shareholder Scheme
</li><li>Personal Day &amp; Birthday Off - After 1 year of service
</li><li>Family Leave &ndash; After 1 year of service
</li><li>Life Assurance
</li><li>Electric Vehicle Scheme &amp; Cycle to Work Scheme</li><li>
Private Healthcare (incl. Gym discounts and vison care)</li></ul>
Location: Bridewell operates a hybrid and flexible working policy, however you will be required to travel to different sites on occasion, in particular our London office.
Note: To be eligible for this job you must either hold UK Security Clearance or be eligible and willing to go through this security clearance Bridewell values diversity and is an equal opportunity employer. We are dedicated to fostering an inclusive environment where all employees feel respected, supported, and empowered to do their best work. If you require any reasonable adjustments throughout the interview process please let us know.</div>

Academy Cloud Security Consultant

AI Security Institute

<div><h3 class="jobSectionHeader">Application Process &amp; Requirements:</h3>
Interview Process<ul><li>
Technical roles: Our technical roles' process includes submitting a CV and short written statement, 1-2 skills assessments such as technical interviews and take-home coding tests and 2-4 interviews, including a conversation with leadership. We tailor this process as needed for each role and candidate. If you're applying to our technical roles, this privacy policy applies.</li><li>
Non-technical roles: Our non-technical roles' process includes submitting a CV, 2-4 interviews including a conversation with leadership and sometimes presentation or take-home task assessments. While our interviews follow civil service requirements, we do not require answering in STAR or other rigid formats. We recommend preparing to speak about your past career experience and how you would approach problems you would face in your AISI role.</li></ul>
Nationality Requirements &amp; Visas<ul><li>
Technical roles: we can hire almost all nationalities and sponsor visas.
</li><li>Non-technical roles: you must meet civil service nationality requirements (by having Commonwealth citizenship, indefinite leave to remain, EU settled status, or meeting some other criteria).</li></ul>
National Security Vetting 
 
<ul><li>Requirements vary by role and not all roles require vetting; check each job ad.</li><li>
Counter Terrorism Check (CTC) and Security Clearance (SC) vettings usually require 2+ years of recent UK residency. Developed Vetting (DV) clearances usually require 10+ years.</li></ul>
Technical Salaries 
<ul><li>
On technical job ads, you'll see our total packages include a &quot;base salary&quot; and a &quot;technical talent allowance&quot;. This is civil service terminology. The technical talent allowance is part of your total salary and paychecks; there are no restrictions on how you spend it.</li></ul></div>
 <div><div><h2 class="jobSectionHeader">About the AI Security Institute</h2>

The AI Security Institute is the world's largest and best-funded team dedicated to understanding advanced AI risks and translating that knowledge into action. We&rsquo;re in the heart of the UK government with direct lines to No. 10 (the Prime Minister's office), and we work with frontier developers and governments globally.

We&rsquo;re here because governments are critical for advanced AI going well, and UK AISI is uniquely positioned to mobilise them. With our resources, unique agility and international influence, this is the best place to shape both AI development and government action.</div><div><h2 class="jobSectionHeader">
The deadline for applying to this role is Sunday 19th July 2026, end of day, anywhere on Earth.</h2>
<h2 class="jobSectionHeader"> 
About the Team:</h2>

Security Engineering at the AI Security Institute (AISI) exists to help our researchers move fast, safely. We treat security as a measurable, researcher-centric product.

We build secure-by-design platforms, automated governance, and intelligence-led detection that protects our people, partners, models, and data. We work shoulder to shoulder with research units and core technology teams, and we optimise for enablement over gatekeeping, proportionate controls, low ego, and high ownership. 

<h2 class="jobSectionHeader">
What you might work on:</h2>
<ul><li>Help design and ship paved roads and secure defaults across our platform so researchers can build quickly and safely</li>
<li>Build tooling and reusable infrastructure-as-code modules that make the secure path the easy path</li>
<li>Build provenance and integrity into the software supply chain (signing, attestation, artefact verification, reproducibility)</li>
<li>Support strengthened identity, segmentation, secrets, and key management to create a defensible foundation for evaluations at scale</li>
<li>Develop automated, evidence-driven assurance mapped to relevant standards, reducing audit toil and improving signal</li>
<li>Create detections and response playbooks tailored to model evaluations and research workflows, and run exercises to validate them</li>
<li>Threat model new evaluation pipelines with research and core technology teams, fixing classes of issues at the platform layer</li>
<li>Assess third-party services and hardware/software supply chains, and introduce lightweight controls that raise the bar</li>
<li>Contribute to open standards and open source, and share lessons with the broader community where appropriate</li>
</ul>
If you want to build security that accelerates frontier-scale AI safety research, and see your work land in production quickly, this is a good place to do it.<h2 class="jobSectionHeader"> 
</h2>
<h2 class="jobSectionHeader">Role Summary:</h2>
<div>
We're looking for a strong software engineer who's drawn to security. Someone who would rather ship a paved road than write a policy, and who's excited by the prospect of building the security foundations for frontier-scale AI safety research. You don't need to be a career security specialist. You do need to be a genuinely good engineer who thinks adversarially, cares about getting the defaults right, and wants to go deep on security over the coming years.

Working as a hands-on engineer on AISI's Security Engineering team, building the secure-by-default patterns, reusable controls, and guardrails that the rest of the organisation builds on top of. You'll spend at least your first year focused on platform and product security, embedding safe practices across the development lifecycle, hardening our cloud and CI/CD foundations, and partnering with engineers to fix classes of issues rather than one-off bugs.

You'll build influence through enablement, not enforcement. Over time, you'll extend these patterns. We expect your security depth to grow on the job; we'll back that with mentorship, learning budget, and real ownership early. 

</div>
<h2 class="jobSectionHeader">Responsibilities:</h2>
<ul><li>Write production-quality code and reusable infrastructure-as-code (Terraform, CDK, etc.) that delivers secure-by-default modules, bootstrap templates, and reference architectures</li>
<li>Build tooling for identity, secrets, environment isolation, and pipeline hardening</li>
<li>Develop and help maintain a baseline cloud control set (e.g. SCPs, logging, tagging) and improve cloud posture with automated feedback loops</li>
<li>Provide consulting and coaching to platform and product teams to support secure delivery</li>
<li>Threat model new and existing systems with research and core technology teams, and fix issues at the platform layer</li>
<li>Build provenance and integrity into the software supply chain (signing, attestation, artefact verification)</li>
<li>Help create detections and response playbooks, support post-incident reviews, and design for resilience</li>
<li>Align technical controls with governance and shared responsibility boundaries</li></ul> 

<h2 class="jobSectionHeader">
Profile requirements:</h2>

You may be a good fit if you have some of the following skills, experience, and attitudes:
<ul>
<li>Writing production-quality code at a fast pace, and designing, shipping, and maintaining complex tech products</li>
<li>A genuine pull towards security, you think adversarially, enjoy understanding how systems break, and want to make the secure path the default path</li>
<li>Strong Python and/or another production language, including the good vs. bad ways of doing things and a feel for the wider ecosystem and tooling</li>
<li>Experience building and maintaining systems on AWS or other cloud providers using infrastructure-as-code (Terraform, CDK, etc.)</li>
<li>Solid understanding of CI/CD pipelines and the software development lifecycle</li>
<li>You take the trajectory of frontier AI seriously, and you're motivated by the mission of making it safe</li>
<li>Strong written and verbal communication, and the ability to build influence in cross-functional environments</li>
<li>Improving technical standards across a team through mentoring and feedback</li>
</ul>
Motivated candidates are encouraged to apply even if you don't meet all the above criteria. We care more about engineering ability, security instinct, and trajectory than a long security CV.
<h2 class="jobSectionHeader">
Desired experience:</h2>

We additionally may factor in experience with areas like:
<ul>
<li>Cloud security, identity, networking, and org-level services</li>
<li>Cybersecurity expertise (threat modelling, detection and response, supply-chain security, secrets management)</li>
<li>Software supply-chain security and provenance</li>
<li>ML Ops and AI/ML platform surfaces</li>
<li>Practical understanding of AI/ML risks</li>
</ul><h2 class="jobSectionHeader">Key Competencies:</h2>
<ul><li>Strong software engineering and the ability to design reusable IaC components</li>
<li>Security instinct: threat modelling, secure defaults, and paved paths</li>
<li>Collaboration across platform and research teams</li>
<li>Cloud fundamentals (AWS), with appetite to go deep on cloud security</li>
<li>Growing capability in securing AI/ML workloads and artefacts</li>
<li>Clear communication and influence without authority</li></ul> 

<h2 class="jobSectionHeader">
Security Clearance:</h2>

Appointment is conditional on successfully completing UK Government SC clearance. Prior clearance is not required&mdash;we will sponsor and support you. You should normally have been resident in the UK for the past 5 years. More detail on clearance eligibility can be found on the UK Government website: National security vetting: clearance levels - GOV.UK.</div><div><h2 class="jobSectionHeader"> 
What We Offer</h2>

Impact you couldn't have anywhere else
<ul>
<li>Incredibly talented, mission-driven and supportive colleagues.</li>
</ul><ul><li>Direct influence on how frontier AI is governed and deployed globally.</li>
</ul><ul><li>Work with the Prime Minister&rsquo;s AI Advisor and leading AI companies.</li>
</ul><ul><li>Opportunity to shape the first &amp; best-resourced public-interest research team focused on AI security.</li>
</ul>
Resources &amp; access
<ul>
<li>Pre-release access to multiple frontier models and ample compute.</li>
</ul><ul><li>Extensive operational support so you can focus on research and ship quickly.</li>
</ul><ul><li>Work with experts across national security, policy, AI research and adjacent sciences.</li>
</ul>
Growth &amp; autonomy
<ul>
<li>If you&rsquo;re talented and driven, you&rsquo;ll own important problems early.</li>
</ul><ul><li>5 days off and annual stipends for learning and development, and funding for conferences and external collaborations.</li>
</ul><ul><li>Freedom to pursue research bets without product pressure.</li>
</ul><ul><li>Opportunities to publish and collaborate externally.</li>
</ul>
Life &amp; family*
<ul>
<li>Modern central London office (cafes, food court, gym), or where applicable, option to work in similar government offices in Birmingham, Cardiff, Darlington, Edinburgh, Salford or Bristol.</li>
</ul><ul><li>Hybrid working, flexibility for occasional remote work abroad and stipends for work-from-home equipment.</li>
</ul><ul><li>At least 25 days&rsquo; annual leave, 8 public holidays, extra team-wide breaks and 3 days off for volunteering.</li>
</ul><ul><li>Generous paid parental leave (36 weeks of UK statutory leave shared between parents + 3 extra paid weeks + option for additional unpaid time).</li>
</ul><ul><li>On top of your salary, we contribute 28.97% of your base salary to your pension.</li>
</ul><ul><li>Discounts and benefits for cycling to work, donations and retail/gyms.</li> 
</ul>
<ul><li>These benefits apply to direct employees. Benefits may differ for individuals joining through other employment arrangements such as secondments.</li></ul>
<h2 class="jobSectionHeader">
Salary</h2>

Annual salary is benchmarked to role scope and relevant experience. Most offers land between &pound;65,000 and &pound;145,000 made up of a base salary plus a technical allowance (take-home salary = base + technical allowance). An additional 28.97% employer pension contribution is paid on the base salary.

This role sits outside of the DDaT pay framework given the scope of this role requires in depth technical expertise in frontier AI safety, robustness and advanced AI architectures.

The full range of salaries are available below:
<ul>
<li>Level 3: &pound;65,000&ndash;&pound;75,000 (Base &pound;39,850 + Technical Allowance &pound;25,150&ndash;&pound;35,150)</li>
<li>Level 4: &pound;85,000&ndash;&pound;95,000 (Base &pound;47,355 + Technical Allowance &pound;37,645&ndash;&pound;47,645)</li>
<li>Level 5: &pound;105,000&ndash;&pound;115,000 (Base &pound;61,620 + Technical Allowance &pound;43,380&ndash;&pound;53,380)</li>
<li>Level 6: &pound;125,000&ndash;&pound;135,000 (Base &pound;74,605 + Technical Allowance &pound;50,395&ndash;&pound;60,395)</li>
<li>Level 7: &pound;145,000 (Base &pound;74,605 + Technical Allowance &pound;70,395)</li></ul> 


<h4 class="jobSectionHeader">Additional Information</h4>
<div><div><h3 class="jobSectionHeader">Use of AI in Applications</h3>

Artificial Intelligence can be a useful tool to support your application, however, all examples and statements provided must be truthful, factually accurate and taken directly from your own experience. Where plagiarism has been identified (presenting the ideas and experiences of others, or generated by artificial intelligence, as your own) applications may be withdrawn and internal candidates may be subject to disciplinary action. Please see our candidate guidance for more information on appropriate and inappropriate use.
<h3 class="jobSectionHeader">
Internal Fraud Database</h3>

The Internal Fraud function of the Fraud, Error, Debt and Grants Function at the Cabinet Office processes details of civil servants who have been dismissed for committing internal fraud, or who would have been dismissed had they not resigned. The Cabinet Office receives the details from participating government organisations of civil servants who have been dismissed, or who would have been dismissed had they not resigned, for internal fraud. In instances such as this, civil servants are then banned for 5 years from further employment in the civil service. The Cabinet Office then processes this data and discloses a limited dataset back to DLUHC as a participating government organisations. DLUHC then carry out the pre employment checks so as to detect instances where known fraudsters are attempting to reapply for roles in the civil service. In this way, the policy is ensured and the repetition of internal fraud is prevented. For more information please see - Internal Fraud Register.
<h3 class="jobSectionHeader">
Security</h3>
Successful candidates must undergo a criminal record check and get baseline personnel security standard (BPSS) clearance before they can be appointed. Additionally, there is a strong preference for eligibility for counter-terrorist check (CTC) clearance. Some roles may require higher levels of clearance, and we will state this by exception in the job advertisement. See our vetting charter here.</div>
</div><div><h3 class="jobSectionHeader">Nationality requirements</h3>

We may be able to offer roles to applicant from any nationality or background. As such we encourage you to apply even if you do not meet the standard nationality requirements (opens in a new window).
</div>
<div><h3 class="jobSectionHeader">Working for the Civil Service</h3>
<div><div>The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants. The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria. The Civil Service also offers a Redeployment Interview Scheme to civil servants who are at risk of redundancy, and who meet the minimum requirements for the advertised vacancy.</div>
</div></div><div><h3 class="jobSectionHeader">Diversity and Inclusion</h3>
<div>The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window). As part of the application process, we monitor statistics on D&amp;I. You can see how we process this data here: Recruitment privacy notice - GOV.UK.</div></div></div></div>

Frontier Research Engineer, Security

Resolution

<div><h1 class="jobSectionHeader">About Resolution</h1>
Resolution does research on how to align artificial superintelligence (ASI). ASI may be developed in the next few years, but it is unclear whether alignment is on track to be ready in the same timeframe. We aim at higher a priori confidence in aligned outcomes by pursuing a portfolio of theory and empirics bets, any one of which &mdash; if it succeeds &mdash; would meaningfully advance the field. We invest heavily in research automation to accelerate progress, and we believe that stronger alignment theory unlocks higher automation: more principled approaches give us better filters for which directions of automated research are promising.
Resolution was founded in 2026 by researchers from UK AISI's Alignment Team, who ran the &pound;30m Alignment Project, and Timaeus, who pioneered applying singular learning theory to alignment.
For more information, see our announcement.<h1 class="jobSectionHeader">
About the Team</h1>
Resolution's work will involve sensitive frontier-relevant research and partnerships with AI labs. This role exists both to protect that work and to enable it: good security is what makes deeper lab partnerships possible. We draw a distinction between two closely related areas of security:<ul><li>
Research &amp; infrastructure security. Securing how research actually runs: CI/CD pipelines, automated research agents, multi-cloud compute, and code/data/model-weight handling.</li><li>
Corporate IT &amp; security. The endpoint, identity, and collaboration scaffolding a distributed research org runs on, in combination with the compliance frameworks that unlock lab partnerships.</li></ul>
This role focuses on the former, covering security on the technical side of the organization. You would report to senior leadership and work closely with our security and engineering teams (as well as with our operations team).
In practice, we expect to grow the security team one hire at a time, so your initial set of responsibilities is likely to span both areas. We expect the distinction to clarify over time.<h2 class="jobSectionHeader">
About the Role</h2>
You are the security architect for our research pipeline. You'll define how we securely conduct research across multiple cloud environments, partnering closely with engineering to make CI/CD, automated research agents, and large-scale compute secure by default. You would build a hardened environment where researchers and agents iterate at speed without risking data leakage, supply-chain compromise, and other security failures.<h2 class="jobSectionHeader">
Responsibilities</h2>
1. Secure DevSecOps &amp; CI/CD Orchestration<ul><li>
Pipeline Hardening: Build security guardrails directly into our CI/CD pipelines. Ensure that every deployment, whether manual or agent-driven, is automatically scanned, verified, and compliant.</li><li>
Automated Verification: Establish workflows where our agents can test their own code and infrastructure changes against security policies before deploying to production environments.</li><li>
Infrastructure as Code (IaC): Lead the implementation of &quot;Compliance as Code.&quot; Automate the auditing and enforcement of security configurations across our AWS, GCP &amp; neocloud footprints.</li></ul>
2. Supply Chain Security for Automated Research<ul><li>
Provenance and Integrity: In an environment where we rely heavily on automated coding agents, build systems to ensure the provenance of code and dependencies. Implement robust signing, SBOM (Software Bill of Materials) generation, and automated vulnerability management.</li><li>
Agent Sandbox Security: Define and enforce security models for our research agents. Ensure that agents have the &quot;least privilege&quot; access required to execute experiments while remaining isolated from sensitive IP and credentials.</li></ul>
3. Multi-Cloud Research Infrastructure<ul><li>
Compute Security: Manage the security architecture for our high-compute research environments. We operate in a multi-cloud ecosystem; you will be responsible for consistent, zero-trust network segmentation and identity management across disparate cloud providers.</li><li>
Research Data Protection: Develop and maintain the data handling protocols necessary for working with pre-publication research and potentially sensitive model weights.</li></ul>
4. Enabling Frontier Access<ul><li>
Compliance as a Competitive Advantage: Partner with AI labs to navigate security audits. You will bridge the gap between our &quot;move fast&quot; research culture and the high-bar security requirements of frontier model providers, turning compliance into an accelerator for our research agenda.</li></ul><h2 class="jobSectionHeader">
You May Be a Good Fit If You</h2><ul><li>
Are a seasoned security engineer who writes code, with deep experience in Terraform, Kubernetes, and CI/CD tools (GitHub Actions, GitLab CI).</li><li>
Have managed security across multiple cloud providers (AWS / GCP / neoclouds) and understand the nuance of securing ephemeral, high-compute research clusters.</li><li>
Take a pragmatic approach to modern software supply chains and understand the unique risks of AI-driven development and how to mitigate them without killing velocity.</li><li>
Understand the threat model of a high-value target for state-level actors and IP theft, and can build systems robust against sophisticated adversaries.</li><li>
Can explain complex security trade-offs to lead researchers and scientists, saying &quot;yes, safely&quot; rather than just &quot;no.&quot;</li><li>
Are willing to use AI tools aggressively in your own workflow, with appropriate care to not get fooled!</li><li>
Are motivated by alignment of artificial superintelligence (ASI) and want to contribute to it full-time.</li></ul><h2 class="jobSectionHeader">
Why This Role is Unique</h2>
At this organization, &quot;Corporate Security&quot; is a separate function. This role is focused on the Research Infrastructure. You will be working at the frontier of how automated alignment research is actually done. You will be building the security primitives for a new way of doing science: one where humans and machines collaborate to solve the most important problem of the 21st century.<h1 class="jobSectionHeader">
Logistics</h1>
Salary: Your salary depends on the scope, autonomy, and impact we expect you to have while working at Resolution. The expected range of in-person salaries for this role is:<ul><li>
L4 (SWE II): $346,000
</li><li>L5 (Senior SWE): $451,000
</li><li>L6 (Staff SWE): $670,000
</li><li>L7 (Senior Staff SWE): $930,000
</li></ul>We level using an internal adaptation of Google's standard levelling; the band above is indicative of where a strong candidate might come in.
Location: Berkeley, California. Remote may be considered in exceptional cases.
Benefits:<ul><li>
5 weeks of paid vacation per year, in addition to public holidays.</li><li>
Comprehensive healthcare insurance (medical, dental, vision).</li><li>
Unlimited sick leave to prioritize your well-being.</li><li>
An unconditional 401(k) contribution equal to 4% of your salary.</li></ul>
Visa sponsorship: We can sponsor visas for relocation to Berkeley.
Minimum education: A bachelor's degree in a field relevant to the role, or an equivalent combination of education, training, and/or professional experience that demonstrates comparable knowledge.
Deadline: Applications are rolling &mdash; please apply ASAP. We'll respond to applications within one week of receipt.
Start date: ASAP.
Compensation Range: $346K - $930K</div>

Security Engineer (Research Infrastructure)

Cognism

<div><div><h2 class="jobSectionHeader">WHO ARE WE</h2>

Cognism is the leading provider of European B2B data and sales intelligence. Ambitious businesses of every size use our platform to discover, connect, and engage with qualified decision-makers faster and close more deals. Headquartered in London with global offices, Cognism's contact data and contextual signals are trusted by thousands of revenue teams to eliminate the guesswork from prospecting.</div>
THE ROLE

The Senior Application Security Engineer is a key member of Cognism's Information Security Team, reporting into the Application &amp; Infrastructure Security Manager. Your mission is to embed security by design across our engineering and product organization by integrating modern application security practices throughout the full development lifecycle. We focus on building secure, scalable, and resilient systems while enabling the business to innovate quickly and safely. It is to drive a culture where the fastest path for our engineers is the securest path.

You will work closely with Product, Engineering, Architecture, and Data teams to understand risks within our platform, including risks introduced by AI powered features, and ensure the right controls, guardrails, and security patterns are built into the product at its inception &ndash; all the while ensuring a balanced approach to the product experience that our thousands of large global enterprise customers use every day.

This role is ideal for a senior IC who is technical, collaborative, and pragmatic, with the ability to influence engineering teams while driving hands on improvements to Cognism's secure SDLC.

KEY RESPONSIBILITIES

Security by Design &amp; Product Integration
<ul>
<li>Partner with Product, Web and Data Engineering teams from the ideation stage to ensure security requirements are considered early in feature and model design.</li>
<li>Translate product and application risks into actionable security controls, making recommendations repeatable to build guardrails and guidance that product, design, and engineering teams can apply as they scale and build the products in the teams they own.</li>
<li>Help shape security acceptance criteria and guide engineering teams during design reviews and backlog planning.</li>
</ul>
Application Risk Assessment &amp; AI Security
<ul>
<li>Identify and assess application risks across Cognism's SaaS platform, data processing pipelines, including emerging risks associated with AI/ML capabilities.</li>
<li>Contribute to AI feature reviews and participate in AI risk assessments to ensure responsible and secure use of models, in a way that balances the need to innovate and challenge the status quo in AI implementation.</li>
<li>Assess and pragmatically recommend mitigations for security risks in data pipelines, model-training workflows, feature stores, and ML systems, ensuring strong controls for data access, data lineage, model integrity, and protection of sensitive datasets.</li>
</ul>
Secure SDLC &amp; DevSecOps Enablement
<ul>
<li>Partner with our engineering and platform team to embed security guardrails into our software development lifecycle and agile engineering workflows.</li>
<li>Partner with engineering teams to integrate and optimize security tooling into CI/CD pipelines (SAST, SCA, DAST, container scanning, IaC scanning).</li>
<li>Drive automation and developer-friendly security processes that minimize friction and support rapid delivery.</li>
</ul>
Threat Modelling &amp; Architecture Support
<ul>
<li>Conduct and facilitate a self-serve, risk-driven approach to pragmatic threat modelling sessions for new features, services, and AI components.</li>
<li>Conduct threat modelling for data architectures, including ingestion, transformation, storage, streaming, and ML model deployment patterns, ensuring data confidentiality, integrity, and responsible use.</li>
<li>Provide hands-on application security guidance to engineering teams, helping them implement secure APIs, microservices, data flows, and integrations.</li>
<li>Maintain and expand Cognism's secure coding standards, guidance, and reusable security patterns.</li>
</ul>
Application Security Testing &amp; Engineering
<ul>
<li>Perform hands-on security testing (manual and automated) for web applications, microservices, APIs, and cloud components.</li>
<li>Plan, coordinate, and oversee penetration tests, red team exercises, and third-party security assessments, ensuring findings are addressed and tracked.</li>
<li>Validate findings, assist with prioritization, and partner with engineering teams on remediation strategies.</li>
</ul>
Collaboration, Education &amp; Influence
<ul>
<li>Work directly with product squads, acting as a trusted advisor and embedded security partner. Take the time to understand what other teams are working on, what business priorities are, and partner with teams to recommend risk mitigations that balance risk with opportunity and that take into account the threat landscape.</li>
<li>Deliver security training, workshops, and guidance to improve engineering teams' security maturity.Communicate security risk and tradeoffs clearly and constructively to technical and nontechnical stakeholders.</li>
</ul>
CORE COMPETENCIES
<ul>
<li>Strong technical depth in application security, cloud security, and secure development.</li>
<li>Understanding of modern data stack components (e.g., data pipelines, feature stores) and the ability to collaborate effectively with data practitioners.</li>
<li>Deep understanding of communication protocols used for web development is a must-have.</li>
<li>Hands on experience with web application development, specifically for back-end development is a must-have competency.</li>
<li>Risk-Based Prioritization: Ability to distinguish between theoretical security risks and actual business threats, demonstrating a &quot;risk-driven&quot; rather than &quot;compliance-driven&quot; mindset. Comfortable balancing security risk with product and commercial realities.</li>
<li>Contextual Communication: Capacity to translate complex technical vulnerabilities into business-impact stories that resonate with non-technical stakeholders and product owners.</li>
<li>Collaborative Conflict Resolution: Proven track record of approaching engineering friction with transparency and pragmatism, balancing a firm stance on security with a deep care for the developer experience. Pragmatic problem solver with a growth mindset and bias toward action.</li>
<li>Architectural Empathy: Ability to put yourself in the position of your users (the engineers) to build security guardrails that are repeatable and embedded into existing workflows rather than added as hurdles.</li>
</ul>
EDUCATION &amp; EXPERIENCE
<ul>
<li>5&ndash;10+ years of experience in Application Security, Product Security, or Security Engineering roles.</li>
<li>Strong experience securing cloud native SaaS platforms (AWS preferred) and Data pipelines.</li>
<li>Handson experience with secure coding, application testing, and CI/CD security automation.</li>
<li>Experience working closely with engineering and product teams in agile environments.</li>
<li>Familiarity with security frameworks such as OWASP ASVS, OWASP Top 10, NIST, ISO 27001/2.</li>
<li>Experience evaluating and securing AI/ML enabled features is a strong advantage.</li>
<li>Experience in SME or high-growth SaaS environments preferred.</li>
</ul><div>
<h2 class="jobSectionHeader">WHY COGNISM</h2>

At Cognism, we're not just building a company - we're building an inclusive community of brilliant, diverse people who support, challenge, and inspire each other every day. If you're looking for a place where your work truly makes an impact, you're in the right spot!

Our values aren't just words on a page&mdash;they guide how we work, how we treat each other, and how we grow together. They shape our culture, drive our success, and ensure that everyone feels valued, heard, and empowered to do their best work.

Here's what we stand for:

 We Own the Outcome Together. 
 We Deeply Understand our Customers. 
 We Celebrate Impact Wherever It Comes From.

At Cognism, we are committed to fostering an inclusive, diverse, and supportive workplace. We welcome applications from individuals typically underrepresented in tech, so if this role excites you but you're unsure if you meet every requirement, we encourage you to apply!</div></div>

Senior Application Security Engineer

Tracebit

<div>Our product helps security teams quickly and accurately detect intrusions in their cloud environment using canaries - decoy tripwires deployed to deceive attackers.
We're at a massive inflection point and this is a hugely exciting time to join the company:<ul><li>
We've just raised a $20m Series A led by FirstMark with Accel, MMC, Tapestry and CCL.</li><li>
We doubled ARR last quarter, work with companies like Riot Games, Docker and Snyk, and have grown from 5 people to 26 in 18 months.</li><li>
Our research recently helped fix a P1 security flaw in Google's Gemini CLI.</li></ul>
We&rsquo;re looking for someone who&hellip;<ul><li>
Is genuinely interested in technology and cyber security, and keen to build a career in it.</li><li>
Has a strong academic foundation - an undergraduate or/and master's degree, ideally in a STEM subject like computer science, engineering, maths, physics&hellip; and has demonstrated real academic excellence.</li><li>
Has strong engineering fundamentals and a real appetite to learn - can write clean, correct code in a known language, and is genuinely curious about how things work under the hood.</li><li>
Has built things they're proud of - side projects, open source, hackathons&hellip; And is excited by the pace and rate of change that is inevitable in any successful, early stage startup.</li><li>
Gets their energy from getting things done and in the hands of customers but is also here to have fun along the way!</li></ul>
If you don&rsquo;t fit this bill exactly but think you could make a difference here - please, apply!
Role
Reporting to Niall, our Engineering Lead, and with significant exposure to our CTO and Co-Founder, Sam, you&rsquo;ll join a team of other awesome engineers looking to make their mark on the world.
This includes:<ul><li>
Working face to face with both founders, the whole engineering team and our customers and prospects to build a delightful product that solves real problems.</li><li>
Working across the stack, mostly in C# on .NET Core 10 (here's why), but also Terraform and building out our frontend in HTMX.</li><li>
All the good practices you&rsquo;d expect from technical co-founders who&rsquo;ve done this before (CD, Infrastructure as code, simple but scalable and powerful architecture)</li><li>
We&rsquo;re a small, tight team with demanding customers so expect to be shipping every day with very little bureaucracy.</li><li>
We actively encourage AI-assisted development and give every engineer full access to tools like Claude and Codex.</li><li>
We&rsquo;re based in a Central London office and work here 5 days a week (and everyone we hire will too).</li></ul><h2 class="jobSectionHeader">
FAQs</h2>
How is work organised at Tracebit?
It&rsquo;s a small, tight team - we have a standup everyday, each team member is usually responsible for delivering something reasonably large for customers and we meet every few weeks to talk about longer term plans. Between that - there&rsquo;s a tonne of discussions, customer feedback and analysis, but not a huge amount of process, the team is trusted to prioritise where to spend their time.
Where is the office?
The whole team works together in an office right next to Warren Street tube station - there are lots of great places to grab lunch nearby.
Are you doing hybrid/remote?
&zwj;Short answer: No, but flexible on a day to day basis.
Long answer: We are set on building the company on a foundation of an office based culture. We are a very early stage company and think that we&rsquo;ll build the best company at the fastest pace we can whilst also having a lot of fun by physically working together 5 days a week. On a case by case basis (e.g. leaving early for a holiday, staying home for a builder, working remote for a few days to visit family, etc. etc.) we&rsquo;re very reasonable and flexible. We respect that this is not for everyone.
&zwj;What are the working hours like?
&zwj;We think 9am-6pm will bring a great cadence to work. As a Founding Engineer there will definitely be times you need to pick up work outside of these hours, we&rsquo;re keen to limit this where we can but also offer flexibility in return.
Can you sponsor visas?
We can support various types of working visas in the UK, including:<ul><li>
Skilled Worker Visa (both from within and outside the UK)</li><li>
Intra-Company Transfer Visa</li><li>
Graduate Visa Transition</li></ul>
We are keen to support candidates who require visa sponsorship. Please let us know which specific visa type you might need during the initial application or interview process. Our team is committed to helping talented individuals navigate the necessary visa requirements.
Compensation Range: &pound;50K - &pound;70K</div>

Founding Engineer - Early Careers

Explore 313+ Cloud security engineer in London this July. Find roles across top companies and apply now to boost your career.