ai engineer

software engineer

platform engineer

infrastructure engineer

engineering director

principal engineer

<div><div><div>Entity:
Technology 
Job Family Group:
IT&amp;S Group 
Job Description:
The Principal Platform Engineer is a senior individual contributor role responsible for defining the strategy and architecture for how bp's portfolio of engineering and data platforms connect, converge, and serve the organisation. This role sits at the intersection of platform engineering and enterprise architecture, providing technical leadership and strategic direction without direct line management.
The role exists to bring coherence to a distributed platform landscape, ensuring that internal engineering platforms, cloud-native infrastructure, and enterprise software-as-a-service (SaaS) solutions are integrated in a consistent, scalable, and well-governed manner. The Principal Platform Engineer is the technical authority on platform integration and convergence, influencing design decisions across teams and functions.
Key Accountabilities<ul><li>
Define and maintain a platform convergence strategy that articulates the current-state landscape, the target architecture, and a credible transition path &mdash; enabling bp's engineering platforms and SaaS solutions to operate as an integrated whole.</li><li>
Lead architectural design and decision-making at the intersection of internal platforms and enterprise SaaS, establishing integration patterns, data contracts, and governance standards that apply consistently across the platform estate.</li><li>
Act as the principal technical authority for platform engineering across the digital delivery organisation, providing expert guidance on platform design, cloud-native patterns, and systems integration to engineering teams and senior stakeholders.</li><li>
Drive resolution of complex cross-platform integration challenges, including identity, data flow, event-driven architecture, and API design &mdash; ensuring that integration decisions are durable, secure, and aligned with enterprise standards.</li><li>
Produce and maintain high-quality architecture strategy documents, reference architectures, and decision records that are accessible to both engineering and executive audiences, building shared understanding of the platform direction.</li><li>
Collaborate with AI engineering, software engineering, and external vendor and partner teams to ensure that platform architecture decisions enable and do not constrain the delivery of business and AI-powered capabilities.</li></ul>
This is a role with organisation-wide technical influence. The successful candidate will work closely with engineering managers, delivery teams, and external partners across a complex, multi-platform environment. The role requires a balance of critical thinking and hands-on technical credibility &mdash; candidates should be comfortable both authoring architecture strategy documents and engaging deeply in technical design discussions.<h1 class="jobSectionHeader">
What you will bring...</h1><ul><li>
Extensive experience in platform engineering (including Kubernetes) and the design, delivery, and operation of large-scale, multi-component platform estates in a cloud-native environment.</li><li>
Proven enterprise architecture capability, including experience producing target-state architecture strategies and navigating complex system landscapes spanning internal platforms and third-party SaaS.</li><li>
Deep knowledge of cloud-native architecture patterns: containerisation and orchestration, service mesh, API gateway design, event streaming, and infrastructure-as-code.</li><li>
Demonstrable experience integrating enterprise SaaS solutions &mdash; including ERP or business application platforms &mdash; with internally developed systems, covering API, identity, and data integration patterns.</li><li>
Track record of operating as a senior technical authority in a large organisation, influencing architecture and engineering decisions at scale without direct management responsibility.</li><li>
Strong communication and documentation skills, with the ability to convey complex architectural concepts clearly to technical peers, delivery teams, and senior business stakeholders.</li><li>
Bachelor's degree or higher in Computer Science, Software Engineering, Systems Engineering, or a related technical subject area or equivalent experience.</li><li>
Familiarity with regulatory and compliance considerations (e.g., data residency, audit logging, access control) as they apply to enterprise platform design.</li></ul>
Desirable Criteria<ul><li>
Familiarity with enterprise data platform architectures, including data mesh, data fabric, or data lakehouse patterns, and how these intersect with application and integration platforms.</li><li>
Prior experience working at the boundary of AI/ML infrastructure and broader platform engineering, including understanding of how MLOps capabilities are hosted and operated within an enterprise platform.</li><li>
Experience engaging with external software vendors and system integrators on integration architecture and platform alignment.</li><li>
Relevant professional certifications in cloud architecture or enterprise architecture (e.g., AWS Solutions Architect Professional, Azure Solutions Architect) are advantageous.</li></ul><h1 class="jobSectionHeader">
Why join us?</h1>
We&rsquo;re committed to supporting leaders who want to make an impact. At bp, you&rsquo;ll have the chance to shape and influence outcomes across businesses. You&rsquo;ll be part of an inclusive environment where diverse perspectives are valued, and where your contribution to performance and integration matters. We invest in the growth and wellbeing of our people, providing the resources, networks, and development opportunities needed to thrive.
Our total rewards package includes competitive pay, bonuses, share options, and a range of flexible benefits designed to meet your needs &mdash; from healthcare and retirement plans to paid time off and agile working. We recognise that people have multifaceted lives, and we strive to offer a career experience that reflects that.
Apply now!
Location
Please note that while this position can be based in our Sunbury office, this will move to Southwark, London by end 2027. 
Travel Requirement
Negligible travel should be expected with this role 
Relocation Assistance:
This role is not eligible for relocation 
Remote Type:
This position is a hybrid of office/remote working 
Skills:
Agility core practices, Agility core practices, API and platform design, Cloud Platforms, Collaboration, Communication, Configuration management and release, Continuous deployment and release, Creating a high performing team, Database Design, Digital Project Management, Documentation and knowledge sharing, Emerging technology monitoring, Facilitation, Information Security, Mentoring, Metrics definition and instrumentation, NoSql data modelling, Problem Solving, Relational Data Modelling, Risk Management, Scripting, Secure development, Service operations and resiliency, Software Design and Development {+ 7 more} 
Legal Disclaimer:
We are an equal opportunity employer. We do not discriminate on the basis of protected characteristics like race, religion, color, sex, national origin, sexual orientation, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp&rsquo;s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us. 
 
If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.</div>
<div>Legal Disclaimer:

We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, socioeconomic status, neurodiversity/neurocognitive functioning, veteran status or disability status. Individuals with an accessibility need may request an adjustment/accommodation related to bp&rsquo;s recruiting process (e.g., accessing the job application, completing required assessments, participating in telephone screenings or interviews, etc.). If you would like to request an adjustment/accommodation related to the recruitment process, please contact us.

If you are selected for a position and depending upon your role, your employment may be contingent upon adherence to local policy. This may include pre-placement drug screening, medical review of physical fitness for the role, and background checks.</div>
</div><div>Expand job description</div></div>
 <div><div>Disclaimer 


This is a high-level summary only of terms and current discretionary benefits applicable to certain roles. Some rewards, benefits and policies are at managers&rsquo; discretion and vary depending on where you work within the business. All terms subject to contract and all discretionary benefits subject to policy and eligibility.</div></div>

Principal Platform Engineer

Houseful

<div>6 months Initial Contract - Must work from the UK
Alto Software Group (ASG) is a leading B2B SaaS platform serving the UK property industry. We power thousands of estate agency branches and support a significant proportion of UK housing transactions each year.
We are building a data-driven, operationally efficient platform business. AI will be a structural lever in improving internal productivity, reducing operational cost, and enhancing customer experience.
This is a hands-on delivery role responsible for building the automations and AI integrations that embed AI into how we operate.
The Role
We are hiring a contract AI Engineer to build, deploy and maintain AI-enabled automations across our core systems stack. Working with the Principal Engineer and the Head of AI Operations, you will take prioritised automation opportunities from design through to production.
You will deliver against an internal AI roadmap spanning Customer Operations, Marketing, Finance, Education and Training to:<ul><li>Automate high-volume, manual administrative workflows</li><li>Build AI-enabled workflows in Salesforce, Zendesk, HubSpot, Zuora and Thrive LMS</li><li>Turn the Mission Control data platform into an engine for event-triggered automation</li><li>Reduce operational overhead and improve reporting speed and accuracy</li></ul>
Core ResponsibilitiesAutomation Build &amp; Integration<ul><li>Build and maintain automation pipelines using n8n, Zapier/Make and direct LLM API integrations (OpenAI/Anthropic)</li><li>Develop API and webhook integrations across Salesforce, Zendesk, HubSpot, Zuora and Thrive LMS</li><li>Implement workflows such as ticket summarisation, tagging, routing and AI triage</li></ul>
AI Engineering<ul><li>Design and implement RAG pipelines and vector database integrations over internal knowledge</li><li>Develop, test and version prompts; evaluate and improve output quality</li><li>Build event-triggered automations and AI-enabled reporting on Mission Control</li></ul>
Quality, Security &amp; Handover<ul><li>Apply sound engineering standards: error handling, logging and monitoring of automations in production</li><li>Ensure GDPR-compliant, secure handling of customer and company data</li><li>Document solutions clearly and hand over to internal teams for ongoing operation</li></ul>
What Success Looks Like (First 6 Months)<ul><li>Priority automation workflows live, stable and monitored in production</li><li>Measurable reduction in manual effort in targeted workflows</li><li>Reliable integrations across the core systems stack</li><li>Clear documentation enabling internal teams to operate and extend what you build</li></ul>
Required ExperienceTechnical<ul><li>Proven delivery of LLM-based automation in production environments</li><li>Strong experience with automation platforms (n8n, Make or Zapier)</li><li>Proficiency in Python and SQL</li><li>Strong API and webhook integration capability</li><li>Experience working with OpenAI/Anthropic APIs and prompt engineering</li><li>Experience building RAG pipelines and working with vector databases</li><li>Experience automating CRM (Salesforce) and support (Zendesk) environments preferred</li></ul>
Delivery<ul><li>Experience operating in B2B SaaS or similar fast-moving environments</li><li>Track record of delivering as a contractor: scoping, building and handing over cleanly</li><li>Comfortable working with non-technical stakeholders to refine requirements</li></ul>
Personal Attributes<ul><li>Delivery-focused and pragmatic</li><li>High agency and accountability</li><li>Structured, with strong attention to reliability and security</li><li>Comfortable working in ambiguity</li><li>Clear communicator with technical and non-technical audiences</li></ul>
Why This Role Matters
AI will be a structural margin lever for ASG. The automations you build will directly reduce operational cost, increase capacity without incremental headcount, and embed AI as core operational infrastructure rather than experimentation.</div>

AI Engineer (Contract)

<div>Role description 
Senior / Principal Data Platform Engineer (Snowflake &amp; dbt)

London (Hybrid)

ASAP

We are seeking accomplished Data Platform Engineers with extensive experience in Snowflake and dbt to lead the design and delivery of scalable, enterprise-grade data solutions.

This role combines deep technical expertise with strategic influence, shaping data architecture, enabling modern CI/CD practices, and partnering closely with stakeholders to deliver high-impact, production-ready data capabilities. You will play a key role in driving data platform excellence, ensuring robustness, performance, and long-term scalability across the ecosystem. 


Key Responsibilities:
<ul>
<li>Lead the end-to-end delivery of data solutions on Snowflake, ensuring scalability, resilience, and performance</li>
<li>Design and implement modular, testable, and well-documented dbt models, embedding best practices across transformation layers</li>
<li>Build, optimise, and manage CI/CD pipelines using Azure DevOps to enable seamless, automated deployments across environments</li>
<li>Establish and champion engineering standards, including Git workflows, code quality, peer reviews, and release management</li>
<li>Optimise large-scale data workloads through advanced SQL techniques and Snowflake performance enhancements</li>
<li>Partner with business and technical stakeholders to translate requirements into scalable, outcome-driven data solutions</li>
<li>Ensure production readiness, including monitoring, ing, incident resolution, and structured handover to support teams</li></ul> 


What You Will Bring:
<ul>
<li>Extensive experience working with the Snowflake data platform in complex, enterprise environments</li>
<li>Advanced proficiency in SQL, including data modelling, optimisation, and performance tuning</li>
<li>Strong hands-on experience with dbt, including modelling, testing, macros, and incremental processing</li>
<li>Extensive experience with Git-based version control, including branching strategies and code governance</li>
<li>Proven capability in building and maintaining Azure DevOps CI/CD pipelines, supporting automated and scalable deployments</li>
<li>Strong understanding of software development lifecycle and production support models</li>
<li>Ability to engage effectively with cross-functional stakeholders, translating business needs into technical solutions</li>
<li>Strong communication skills, with the ability to convey complex concepts in a clear and structured manner</li>
<li>A proactive, solution-oriented mindset with a focus on delivering measurable outcomes</li></ul> 


Desirable Experience:
<ul>
<li>Experience within data-intensive or regulated industries, such as financial services</li>
<li>Familiarity with data quality frameworks and automated testing approaches</li>
<li>Exposure to the Azure data ecosystem</li></ul> 


Hurry &amp; apply for a more detailed conversation with our team!

#UST 
Skills 
sql server,database triggers,database migration,disaster recovery,query optimization, 
About UST 
UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world&rsquo;s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients&rsquo; organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact&mdash;touching billions of lives in the process.</div>

Principal Data Platform Engineer (Snowflake & dbt) - Lead II - Software Engineering

Mastercard

<div>Our Purpose
Mastercard powers economies and empowers people in 200+ countries and territories worldwide. Together with our customers, we&rsquo;re helping build a sustainable economy where everyone can prosper. We support a wide range of digital payments choices, making transactions secure, simple, smart and accessible. Our technology and innovation, partnerships and networks combine to deliver a unique set of products and services that help people, businesses and governments realize their greatest potential.
Title and Summary
Senior Principal Agentic Platforms Architect
Overview
 
 
The AI Center of Excellence is seeking a Senior Principal Agentic Platforms Architect to lead the technical vision, architecture, and hands-on development of Mastercard's enterprise agentic AI platforms. This role demands deep, demonstrated expertise in building and shipping production-grade AI and agentic systems at enterprise scale, combined with the architectural rigor required to operate within one of the most highly regulated and security-conscious environments in the world. Reporting to senior leadership, you will own the E2E platform architecture for agentic AI systems, from runtime orchestration and governance infrastructure through to production deployment and operational lifecycle management. This is not a strategy-only role. You will write code, review code, and hold the team to the highest standards of engineering excellence. The right candidate has spent their career building AI systems that run in production, not prototypes, not proofs of concept, but systems that operate at scale, under load, and under scrutiny 
 
Role
 
 
<ul><li>Serve as the principal technical authority for agentic AI platform architecture, owning the design and evolution of runtime environments, governance layers, orchestration engines, and multi-tenancy infrastructure that support enterprise-grade AI agent deployment</li></ul> 
<ul><li>Lead hands-on architecture and development of agentic systems, including agent orchestration frameworks, tool and model integration layers, policy enforcement engines, guardrail systems, behavioral monitoring pipelines, and evaluation infrastructure</li></ul> 
<ul><li>Design and implement scalable, resilient platform architectures that support multi-agent coordination, A2A communication protocols, memory governance, and real-time observability across distributed deployments</li></ul> 
<ul><li>Drive the technical strategy for model integration and abstraction, enabling model-agnostic agent execution across multiple providers while enforcing cost optimization, routing intelligence, and governance controls at the platform level</li></ul> 
<ul><li>Architect and build API-first platform interfaces that enable both internal teams and external consumers to build, deploy, govern, and operate AI agents through programmatic, language-agnostic access patterns</li></ul> 
<ul><li>Define and enforce engineering standards, code quality practices, and architectural governance across the platform engineering team, ensuring every component meets production-grade requirements for security, resilience, performance, and compliance</li></ul> 
<ul><li>Provide deep technical leadership on agentic AI design patterns, including retrieval-augmented generation, tool calling via Model Context Protocol, multi-step orchestration, human-in-loop workflows, and autonomous decision-making architectures</li></ul> 
<ul><li>Act as a trusted technical advisor to senior leadership, translating complex platform architecture decisions into clear, business-oriented language that supports informed decision-making at the executive level</li></ul> 
<ul><li>Mentor and develop a high-performing engineering team, fostering a culture of technical excellence, intellectual honesty, rigorous code review, and continuous improvement</li></ul> 
<ul><li>Produce and maintain authoritative architectural documentation, including system design documents, architecture decision records, and integration specifications that meet Mastercard's engineering principles and security standards</li></ul> 
All About You
 
 
<ul><li>15+ years of hands-on experience in software engineering and AI engineering, with a significant and demonstrable portion spent designing, building, and shipping AI and machine learning systems to production at enterprise scale</li></ul> 
<ul><li>Proven track record of architecting and delivering agentic AI systems, autonomous agents, multi-agent orchestration platforms, or AI-powered automation systems that operate in production with real users, real data, and real consequences</li></ul> 
<ul><li>Deep hands-on coding proficiency. You write production code, you review production code, and you hold others to the same standard. This is a building role, not a diagram-drawing role</li></ul> 
<ul><li>Advanced expertise in Python and modern AI/ML frameworks, with hands-on experience across agentic toolkits such as LangChain, LangGraph, CrewAI, or equivalent orchestration frameworks</li></ul> 
<ul><li>Strong architectural experience with cloud-native platforms including AWS, Databricks, and Kubernetes, with demonstrated ability to design for high availability, fault tolerance, and horizontal scalability</li></ul> 
<ul><li>Deep understanding of AI governance, trust, and safety architectures, including guardrail systems, policy engines, behavioral analytics, evaluation frameworks, red teaming methodologies, and compliance mapping</li></ul> 
<ul><li>Experience designing and building multi-tenant platforms with fine-grained access control, workspace isolation, and enterprise-grade identity and authorization systems</li></ul> 
<ul><li>Proven ability to design API-first architectures, RESTful interfaces, and SDK abstractions that serve both internal platform teams and external consumers</li></ul> 
<ul><li>Strong understanding of data architectures including Delta Lake, data lakehouse patterns, vector databases and retrieval-augmented generation pipelines</li></ul> 
<ul><li>Demonstrated experience with tool calling architectures and model-agnostic integration patterns across multiple LLM providers</li></ul> 
<ul><li>Exceptional communicator who can articulate deeply technical architecture decisions to engineering teams and translate complex platform concepts into business language for non-technical stakeholders</li></ul> 
<ul><li>Known for building trust, holding high standards, and mentoring engineers. You make the people around you better. Motivated by hard problems, not titles. You bring intellectual curiosity, resilience, and relentless energy to complex technical challenges</li></ul> 
<ul><li>Bachelor's degree in Computer Science, Engineering, or a related field. Advanced degree preferred but not required if the experience speaks for itself</li></ul>
Corporate Security Responsibility 
All activities involving access to Mastercard assets, information, and networks comes with an inherent risk to the organization and, therefore, it is expected that every person working for, or on behalf of, Mastercard is responsible for information security and must:<ul><li>
Abide by Mastercard&rsquo;s security policies and practices;</li><li>
Ensure the confidentiality and integrity of the information being accessed;</li><li>
Report any suspected information security violation or breach, and</li><li>
Complete all periodic mandatory security trainings in accordance with Mastercard&rsquo;s guidelines.</li></ul></div>

Senior Principal Agentic Platforms Architect

Humanoid

<div>Here at Humanoid, we believe in a future where robots amplify human potential. That&rsquo;s why we&rsquo;ve set out on a mission to build the world&rsquo;s most capable, commercially-scalable, and safe humanoid robots. We&rsquo;re bringing that mission to life with HMND‑01 Alpha - our rapidly developed humanoid platform now running in real industrial pilots - and we&rsquo;re growing the team to take it even further.<h1 class="jobSectionHeader">
About the Role</h1>
We are seeking a Principal Product Cybersecurity Assurance Engineer with deep expertise in product security, threat modelling, and risk assurance for highly regulated electromechanical systems. In this role, you will lead the delivery of product cybersecurity across Humanoid's HMND 01 platform family &mdash; the Alpha Wheeled industrial robot and the Alpha Bipedal home robot &mdash; both powered by our KinetIQ VLM/VLA-based AI framework. Working alongside product, firmware, autonomy, and hardware teams as part of the Systems Engineering and Architecture Team, you will define and maintain the cybersecurity assurance strategy for all product security activities from first concept through post-market deployment. Security at Humanoid is an engineering discipline inseparable from functional safety and central to our mission of creating the world's most reliable, commercially scalable, and safe humanoid robots. To excel in this position, you must demonstrate the authority to influence security architecture decisions across complex, cross-functional programmes, the rigour to build defensible security cases for novel cyber-physical systems, and the leadership to grow and guide a cross team of security engineers operating at the frontier of robotics.<h1 class="jobSectionHeader">
What You'll Do</h1><ul><li>
Team Leadership &amp; Product Security Delivery<ul><li>
Lead and develop a cross-functional team of security engineers, maintaining accountability for the delivery of product security services within product teams throughout the HMND 01 development lifecycle.</li><li>
Define product security requirements and advise development teams on suitable implementation standards, techniques, and toolchains for embedded and AI-enabled robotic systems.</li><li>
Partner with cross-functional teams to develop security protocols, tools, and processes that keep HMND 01 technologies ahead of emerging threats &mdash; including attack surfaces specific to the KinetIQ AI inference pipeline and cloud-to-robot communication architecture.</li><li>
Own and maintain key security artefacts for audit-ready cybersecurity documentation including Security Management Plans, Threat Analysis and Risk Assessment (TARA) reports, Risk Assessments, and Remediation Action Plans across both platforms.</li></ul>
Security Assurance &amp; Certification<ul><li>
Drive security assurance through the full product lifecycle, ensuring every HMND 01 design is robust, compliant, and resilient. Contribute to the continual improvement of security engineering capability across the organisation.</li><li>
Ensure compliance with cybersecurity obligations under the EU Machinery Regulation 2023/1230 where cyber controls intersect with safety-critical functions and compliance to IEC 62443 (for industrial/OT product security), and the EU Cyber Resilience Act.</li><li>
Provide independent Information Assurance (IA) reviews and risk assessments on complex, high-impact projects &mdash; with particular focus on cyber-physical systems where a digital compromise could result in physical harm to operators or end users.</li><li>
Review and provide guidance on security risk assessments, risk mitigation plans, mitigation gap analysis, and security management documentation in support of system cybersecurity certification.</li></ul>
Incident Response &amp; Lifecycle Security<ul><li>
Establish and maintain a Product Security Incident Response (PSIR) process, encompassing coordinated vulnerability disclosure, patch deployment pipelines, and post-field incident analysis.</li><li>
Define and oversee security monitoring requirements for deployed fleets, ensuring field data feeds back into risk files and security artefacts in line with post-market surveillance obligations.</li></ul>
Commercial &amp; Bid Support<ul><li>
Support the production of work package descriptions and cost estimates for product bids, services, and proposals that include product security scope.</li><li>
Represent Humanoid's security posture in customer and partner engagements, including regulatory consultations and certification body interactions.</li></ul></li></ul><h1 class="jobSectionHeader">
What We're Looking For</h1><ul><li>
Proven, hands-on experience with ISO 27001/27004/27005 and the NIST Risk Management Framework (RMF), applied to regulated hardware or embedded product programmes.</li><li>
Experience owning a security risk management system for highly regulated, safety-critical products &mdash; with background drawn from automotive, commercial vehicle, or industrial automation environments.</li><li>
Working knowledge of IEC 62443, with the ability to adapt ISO/SAE 21434 lifecycle methodologies to robotic or electromechanical product context.</li><li>
Solid understanding of engineering development lifecycles and how the product cybersecurity specialism aligns with systems engineering, functional safety, and hardware/software co-development.</li><li>
Ability to interpret Penetration Test reports and author Remediation Action Plans that address identified vulnerabilities in a structured, risk-prioritised manner.</li><li>
Clear, structured communication skills &mdash; able to articulate complex security risk arguments to both technical engineers and executive stakeholders with equal confidence.</li></ul>
Preferred:<ul><li>
Familiarity with Threat Analysis and Risk Assessment (TARA) or equivalent threat modelling methodologies (STRIDE, PASTA) applied to embedded or OT/IT convergent systems.</li><li>
Understanding of secure-by-design principles for AI/ML-enabled systems, including securing inference pipelines, model integrity, and cloud-to-edge communication paths.</li><li>
Exposure to CAN bus, Ethernet backbone, or wireless interface security in mobile, vehicular, or robotic systems.</li><li>
Experience contributing to or establishing a Product Security Incident Response (PSIRT) process or coordinated vulnerability disclosure programme.</li><li>
Knowledge of UL 4600, UL 3300, or ISO 13482 and an appreciation of how cybersecurity evidence integrates into safety case arguments.</li><li>
Prior engagement with certification bodies (TUV, UL, BSI) or standards development organisations (ISO TC 184, IEC TC 65, SAE, IEEE RAS).</li></ul><h1 class="jobSectionHeader">
What We Offer</h1><ul><li>
Competitive equity: stock options with meaningful upside as we scale.</li><li>
30+ days off, including 23 days annual leave, all UK bank holidays, and additional company closure days (including Christmas&ndash;New Year shutdown).</li><li>
Private healthcare, including virtual and in-person care.</li><li>
Pension scheme with 8% total contribution (5% employee, 3% employer) on full earnings.</li><li>
Free daily breakfast, catered lunch, and snacks in-office.</li><li>
Work at the frontier - collaborate daily with world-class engineers, researchers, and product experts building the next generation of AI and humanoid robotics.</li><li>
Real ownership - direct access to founding leadership, meaningful input on product direction, and the ability to drive key initiatives from day one.</li></ul></div>

Principal Product Cybersecurity Assurance

AJ Bell

<div>Job Description 
Due to growth within our security engineering department we are now looking for a Principal Information Security Engineer to join the team. The role will support the Senior Information Security Engineering Manager by providing technical leadership and oversight across the Information Security Engineering team.
This role is responsible for the day-to-day technical execution by our security engineering team, ensuring that project engagements are delivered to a high standard and support activities are dealt with in line with organisational SLAs.
You will act as the team&rsquo;s primary technical lead and escalation point, driving efficiency, validating designs, and ensuring that all engineering outputs remain consistent and aligned with the security strategy.
The key responsibilities of the role are:<ul><li>
Act as the primary technical escalation point for the team, providing hands-on guidance and decision-making for complex technical challenges.</li><li>
Oversee the day-to-day execution of security engineering, ensuring that BAU work is delivered to high standards and that all team SLAs are consistently met.</li><li>
Ensure the quality and consistency of engineering outputs, specifically for project engagements, technical tasks, and documentation, ensuring they align with established security standards.</li><li>
Support the technical delivery of our security tooling roadmap, helping to bridge the gap between high-level strategic objectives and operational outcomes.</li><li>
Work closely with the Information Security Architecture team to validate design concepts, ensuring solutions are robust, scalable, and fit for our enterprise environment.</li><li>
Collaborate with the Information Security Operations team to drive operational efficiency, quality improvements, and the seamless integration of security controls across the estate.</li><li>
Provide technical leadership and mentoring to the engineering team, ensuring they have the support and direction needed to deliver secure, automated, and effective solutions</li></ul>
Technical Skills:<ul><li>
Demonstrable experience implementing enterprise security platforms</li><li>
Strong hands-on experience with of Microsoft security stack</li><li>
Strong hands-on experience using, managing, and securing diverse end-user compute environments, including Windows, MacOS, Linux, and mobile device platforms.</li><li>
Knowledge/experience working with firewalls and cloud security solutions is highly advantageous</li><li>
Deep understanding of Information Security solutions e.g. email / web gateways, Privileged Account Management (PAM), Identity Governance and Administration (IGA), Security Information and Event Management (SIEM), Endpoint protection</li><li>
Strong understanding and knowledge of Information Security risk management tools and techniques.</li><li>
Awareness of Information Security control standards and frameworks</li><li>
Knowledge/experience working with firewalls and cloud security solutions is highly advantageous.</li><li>
Knowledge/experience working with firewalls is highly advantageous</li><li>
Experience of Cloud security solutions and standards is highly advantageous</li><li>
Hands-on experience with automation and scripting highly desirable</li></ul>
Competence, knowledge and skills
Competence<ul><li>
Experience working within recognised Information Security frameworks and best practices such as ISO27001, NIST etc.</li><li>
5 years&rsquo; experience in an Information Security role gained in a financial services or e-commerce environment is preferred</li></ul>
Knowledge &amp; Skills<ul><li>
Significant experience in the area of Information Technology (IT) security</li><li>
Strong knowledge of core IT and networking concepts</li><li>
Well versed in IT security capabilities, framework and concepts</li><li>
Extensive experience implementing industry-standard IT security platforms</li><li>
Strong ownership of tasks, attention to detail and following through to conclusion</li><li>
Ability to challenge approach, strategy and implementation to ensure Information Security is consistently considered and improved</li><li>
Ability to work under own initiative to plan and communicate effectively with colleagues and customers</li><li>
Structured, self-starting, flexible and enjoy working in fast-paced environments</li><li>
Effective communication skills, both written and verbal</li><li>
Ability to plan, organise and follow through on assigned tasks and complete with little or no prompting from management</li><li>
Excellent attention to detail</li><li>
Attained or working towards CISSP certification</li></ul>
About AJ Bell
At AJ Bell, we believe investing should feel good. Whether you're looking for an ISA, pension or dealing account, whether you want to invest with the help of a financial adviser or do it yourself, we have easy-to-use solutions to suit people from all walks of life.
We're one of the UK's fastest-growing investment platform businesses, trusted by everyone from professional financial advisers to first-time investors.
Today, over 723,000 customers trust us to manage more than &pound;108.7 billion of assets. By continually striving to make investing simpler and more accessible, we're helping more people take control of their financial futures.
We're proud to be recognised as one of the UK's Best 100 Companies to Work For for six consecutive years, and a Great Place to Work&reg; in 2025 and 2026, a reflection of our supportive and collaborative culture.
What we offer<ul><li>
Competitive starting salary</li><li>
26 days holiday, increasing with service + buy/sell scheme + bank holidays</li><li>
7% Pension with matched contributions</li><li>
Discretionary bonus scheme</li><li>
Share schemes (including free shares and BAYE)</li><li>
Health Cash Plan and discounted private healthcare</li><li>
Free gym</li><li>
Enhanced family leave (subject to qualifying criteria)</li><li>
Travel and bike loan schemes</li><li>
Employee Assistance Programme</li></ul>
Life at AJ Bell<ul><li>
Regular social events including summer and Christmas parties</li><li>
Learning and development opportunities tailored to you</li><li>
Casual dress code</li><li>
Friendly, supportive team environment</li></ul>
Our ways of working
At AJ Bell, our people are the heart of our culture. We believe in building strong connections by working together. That's why we offer a hybrid working model, where you'll spend a minimum of 50% of working time per month in the office. For new team members, an initial period will be spent full-time in the office to help you immerse yourself in our business and build valuable relationships with your colleagues.
Inclusion &amp; diversity
We&rsquo;re committed to creating an inclusive environment where everyone feels respected, supported and able to be themselves at work.
We welcome applications from all backgrounds and make hiring decisions based on skills, experience and potential.
Agency information
This vacancy is being managed exclusively by our in-house Recruitment team. We are not partnering with recruitment agencies on this opportunity and will only accept applications submitted directly by candidates.</div>

Principal Information Security Engineer

<div><h2 class="jobSectionHeader">Description</h2>
<div>
The Principal Microsoft Defender XDR, IRM &amp; Deception Engineer, working within the Global Information and Cyber Security Defence (ICSD) function, is the technical leader for enterprise cyber deception and unified detection and response across the Microsoft security ecosystem. The role focuses on building, operating, and continuously evolving an enterprise-grade Insider Risk Management (IRM) and deception programme - including honeypots, honeytokens, decoy users, decoy devices, deceptive credentials, and breadcrumbs - fully integrated with Microsoft Defender XDR (Defender for Endpoint, Defender for Identity, Defender for Office 365, and Defender for Cloud Apps), Microsoft Sentinel, and Microsoft Security Copilot.

The role exists to detect adversaries earlier in the kill chain by deceiving attackers into engaging with high-fidelity traps, while delivering unified detection, automated investigation, and response across endpoint, identity, email, and cloud workloads. It combines deep deception engineering expertise with hands-on Defender XDR mastery and the use of Agentic AI to drive proactive, intelligence-led, and largely autonomous security operations.

The Role:
<ul>
<li>Deception Engineering Leadership<ul>
<li>Own and lead the enterprise cyber deception programme end-to-end, including strategy, architecture, deployment, operations, and continuous improvement.</li>
<li>Design, deploy, and operate a layered deception fabric across on-premises, hybrid, and multi-cloud environments using honeypots, honeytokens, decoy accounts, decoy devices, deceptive files / shares, and breadcrumbs.</li>
<li>Act as the technical authority for deception engineering and Microsoft Defender XDR across the enterprise.</li>
</ul></li><li>Honeypots, Honeytokens, Decoys &amp; Breadcrumbs<ul>
<li>Design and operate the full deception asset lifecycle, ensuring high-fidelity, low-noise detections that are realistic, attacker-grade, and resilient to evasion.</li>
<li>Deploy and manage Microsoft Defender for Identity deceptive accounts, deceptive devices, and honeytoken accounts across Active Directory and Microsoft Entra ID.</li>
<li>Build and maintain a portfolio of deception assets, including:<ul>
<li>Honeypot systems (low-, medium-, and high-interaction) across on-prem, Azure, AWS, GCP, and OCI</li>
<li>Honeytoken credentials, API keys, OAuth tokens, secrets, and SaaS accounts</li>
</ul></li><li>Decoy users, decoy devices, decoy shares, decoy files, and decoy databases<ul>
<li>Plant attacker-grade breadcrumbs across endpoints, identities, and cloud workloads, including:</li>
<li>Saved credentials, browser cookies, RDP and SSH artefacts</li>
<li>LSASS-resident credentials and cached tokens on selected lures</li>
<li>Fake Kerberos service accounts and SPNs to bait Kerberoasting and AS-REP roasting</li>
</ul></li><li>Continuously evolve deception techniques, lure design, and trap placement aligned to current attacker TTPs, red-team findings, and breach intelligence.</li>
<li>Govern the deception programme with clear standards for asset realism, segmentation, monitoring, and safe operation (no production impact).</li>
<li>Validate deception coverage through red-team, purple-team, and breach-and-attack simulation (BAS) exercises.</li>
</ul></li><li>Microsoft Defender XDR Leadership<ul>
<li>Lead the design, implementation, and optimisation of Microsoft Defender XDR across endpoint, identity, email, and cloud-app workloads.</li>
<li>Integrate all deception signals (honeypot, honeytoken, decoy, breadcrumb) into Defender XDR and Microsoft Sentinel as first-class, high-fidelity detections.</li>
<li>Define and enforce a unified detection and response strategy across the Microsoft security stack.</li>
</ul></li><li>Defender for Identity &amp; Identity Deception<ul>
<li>Lead operation and optimisation of Microsoft Defender for Identity (MDI) to detect identity-based attacks, including:<ul>
<li>Credential theft, Kerberoasting, AS-REP roasting, Pass-the-Hash, and Pass-the-Ticket</li>
<li>Lateral movement, reconnaissance, and privilege escalation</li>
<li>Misuse of deceptive / honeytoken accounts as early-warning tripwires</li>
</ul></li><li>Integrate MDI, deception, and Microsoft Entra ID signals into Defender XDR, Microsoft Sentinel, and SOAR workflows for unified investigation and response.</li>
</ul>
</li><li>Data Protection, DLP &amp; Insider Risk Management
<ul>
<li>Lead the design and implementation of Microsoft Purview Data Loss Prevention (DLP) policies across endpoints, cloud apps, and collaboration platforms</li>
<li>Define and enforce data protection controls to prevent unauthorised data exfiltration and misuse</li>
<li>Leverage Microsoft Insider Risk Management (IRM) to detect risky user behaviour, including data leaks, policy violations, and insider threats</li>
<li>Correlate DLP, IRM, and identity signals with Microsoft Defender XDR to provide unified incident context</li>
<li>Collaborate with Risk, Compliance, and Legal teams to align DLP and insider risk controls with regulatory and business requirements</li>
<li>Continuously optimise detection use cases combining identity, data, and behavioural analytics</li>
</ul></li><li>Endpoint, Email &amp; Cloud App Detection<ul>
<li>Lead detection engineering across the Defender XDR stack, ensuring deception assets are continuously monitored alongside production telemetry:</li>
<li>Microsoft Defender for Endpoint (MDE) - EDR policies, ASR rules, and decoy-device monitoring</li>
<li>Microsoft Defender for Office 365 (MDO) - anti-phishing, Safe Links, Safe Attachments, and honeytoken inboxes</li>
<li>Optimise automatic attack disruption, automated investigation and response (AIR), and self-healing capabilities to:<ul>
<li>Disrupt in-progress attacks at machine speed, including deception-triggered intrusions</li>
<li>Reduce analyst workload through high-confidence automation</li>
<li>Improve coverage for ransomware, BEC, and identity-based attacks</li>
<li>Ensure consistent telemetry ingestion and detection parity across Windows, macOS, Linux, mobile, and deception assets.</li>
</ul></li></ul></li><li>Multi-Cloud Deception &amp; Detection (AWS, GCP, OCI)<ul>
<li>Extend the deception programme and Defender-style detection capabilities consistently across AWS, GCP, and OCI, including:</li>
<li>Cloud honeypots, decoy IAM roles, and honeytoken cloud credentials / API keys</li>
<li>Control-plane, workload, container, and Kubernetes threat detection</li>
<li>Cross-cloud identity and access misuse detection</li>
<li>Ensure consistent detection, deception, and response coverage across hybrid and multi-cloud environments.</li>
</ul></li><li>Automation, Agentic AI &amp; Continuous Improvement<ul>
<li>Drive automation of deception deployment, detection, investigation, and response workflows using Microsoft Sentinel SOAR, Logic Apps, and Microsoft Security Copilot.</li>
<li>Define KPIs and metrics covering deception engagement, detection coverage, and response maturity.</li>
<li>Continuously improve detection, hunting, and deception capabilities to align with emerging threats and adversary tradecraft.</li>
</ul></li><li>Stakeholder Engagement &amp; Technical Leadership<ul>
<li>Lead and grow a team of Defender XDR and Deception Engineers, setting technical direction, standards, and delivery priorities.</li>
<li>Partner with SOC, CTI, Identity, Cloud, and Engineering teams to embed deception and Defender XDR detection into all enterprise platforms.</li>
<li>Provide mentorship and leadership to deception engineers, detection engineers, threat hunters, and SOC analysts.</li>
<li>Communicate deception strategy, detection coverage, residual risk, and security improvements to senior stakeholders.</li></ul></li></ul> 


</div><h2 class="jobSectionHeader">Qualifications</h2>
<div>
What you'll bring:

Required Skills &amp; Experience:
<ul>
<li>Proven experience designing and operating enterprise cyber deception programmes (honeypots, honeytokens, decoy users, decoy devices, breadcrumbs) at scale.</li>
<li>Extensive hands-on experience operating and engineering Microsoft Defender XDR (MDE, MDI, MDO, MDA) in large enterprises.</li>
<li>Deep expertise across the Microsoft security stack, including:<ul>
<li>Microsoft Defender for Identity (MDI) deceptive accounts, deceptive devices, and honeytokens</li>
<li>Microsoft Sentinel (analytics rules, workbooks, hunting, SOAR)</li>
<li>Microsoft Security Copilot, automated investigation &amp; response, and attack disruption</li>
<li>Microsoft Defender for Cloud Apps and Defender for Cloud</li>
</ul></li><li>Hands-on experience with:<ul>
<li>Open-source and commercial deception / honeypot platforms (e.g., Thinkst Canary, T-Pot, Cowrie, OpenCanary, Zscaler Deception)</li>
<li>Advanced KQL for detection engineering and threat hunting at scale</li>
<li>Detection-as-code, CI/CD of detection content, and security content management</li>
</ul></li><li>Strong knowledge of adversary tradecraft and frameworks:<ul>
<li>MITRE ATT&amp;CK, MITRE Engage, MITRE D3FEND, and the cyber kill chain</li>
<li>Experience leveraging Agentic AI, Microsoft Security Copilot, or AI/ML in security operations (detection, hunting, IR, automation).</li>
</ul></li><li>Proven experience leading incident response across identity, endpoint, email, and cloud domains.</li>
<li>Strong scripting / automation experience (PowerShell, Python, or equivalent).</li>
<li>Deep understanding of Zero Trust architecture and identity-centric defence.</li></ul> 


Preferred Qualifications:
<ul>
<li>Experience contributing to red-team / purple-team exercises and breach-and-attack simulation (BAS) programmes.</li>
<li>Microsoft certifications:<ul>
<li>Microsoft Certified: Security Operations Analyst Associate (SC-200)</li>
<li>Microsoft Certified: Azure Security Engineer Associate (AZ-500)</li>
<li>Microsoft Certified: Cybersecurity Architect Expert (SC-100)</li>
<li>Industry certifications (CISSP, GCIA, GCFA, GCIH, OSCP, or equivalent)</li>
<li>Cloud certifications across AWS, GCP, or OCI</li></ul></li> 
</ul>
What we offer:

Enjoy a benefits package designed to help you thrive, both professionally and personally. You'll receive 25 days of annual leave plus an extra WTW day to relax and recharge. Our comprehensive health and wellbeing offering includes private healthcare, life insurance, group income protection, and regular health assessments, all giving you peace of mind. Secure your future with our defined contribution pension scheme, featuring matched contributions up to 10% from the company.

We support your growth and balance with hybrid working options, access to an employee assistance programme, and a fully paid volunteer day to make a difference in your community. On top of these, you can opt into a variety of additional perks including an electric vehicle car scheme, share scheme, cycle-to-work programme, dental and optical cover, critical illness protection, and much more. Start making the most of your career and wellbeing with a range of benefits tailored for you.

Equal Opportunity Employer

We&rsquo;re committed to equal employment opportunity and provide application, interview and workplace adjustments and accommodations to all applicants. If you foresee any barriers, from the application process through to joining WTW, please email candidatehelpdesk@wtwco.com</div></div>

Principal Microsoft Defender XDR & Deception Engineer

Explore 108+ Principal engineer in London this July. Find roles across top companies and apply now to boost your career.