senior security engineer

Cognism

<div><div><h2 class="jobSectionHeader">WHO ARE WE</h2>

Cognism is the leading provider of European B2B data and sales intelligence. Ambitious businesses of every size use our platform to discover, connect, and engage with qualified decision-makers faster and close more deals. Headquartered in London with global offices, Cognism's contact data and contextual signals are trusted by thousands of revenue teams to eliminate the guesswork from prospecting.</div>
THE ROLE

The Senior Application Security Engineer is a key member of Cognism's Information Security Team, reporting into the Application &amp; Infrastructure Security Manager. Your mission is to embed security by design across our engineering and product organization by integrating modern application security practices throughout the full development lifecycle. We focus on building secure, scalable, and resilient systems while enabling the business to innovate quickly and safely. It is to drive a culture where the fastest path for our engineers is the securest path.

You will work closely with Product, Engineering, Architecture, and Data teams to understand risks within our platform, including risks introduced by AI powered features, and ensure the right controls, guardrails, and security patterns are built into the product at its inception &ndash; all the while ensuring a balanced approach to the product experience that our thousands of large global enterprise customers use every day.

This role is ideal for a senior IC who is technical, collaborative, and pragmatic, with the ability to influence engineering teams while driving hands on improvements to Cognism's secure SDLC.

KEY RESPONSIBILITIES

Security by Design &amp; Product Integration
<ul>
<li>Partner with Product, Web and Data Engineering teams from the ideation stage to ensure security requirements are considered early in feature and model design.</li>
<li>Translate product and application risks into actionable security controls, making recommendations repeatable to build guardrails and guidance that product, design, and engineering teams can apply as they scale and build the products in the teams they own.</li>
<li>Help shape security acceptance criteria and guide engineering teams during design reviews and backlog planning.</li>
</ul>
Application Risk Assessment &amp; AI Security
<ul>
<li>Identify and assess application risks across Cognism's SaaS platform, data processing pipelines, including emerging risks associated with AI/ML capabilities.</li>
<li>Contribute to AI feature reviews and participate in AI risk assessments to ensure responsible and secure use of models, in a way that balances the need to innovate and challenge the status quo in AI implementation.</li>
<li>Assess and pragmatically recommend mitigations for security risks in data pipelines, model-training workflows, feature stores, and ML systems, ensuring strong controls for data access, data lineage, model integrity, and protection of sensitive datasets.</li>
</ul>
Secure SDLC &amp; DevSecOps Enablement
<ul>
<li>Partner with our engineering and platform team to embed security guardrails into our software development lifecycle and agile engineering workflows.</li>
<li>Partner with engineering teams to integrate and optimize security tooling into CI/CD pipelines (SAST, SCA, DAST, container scanning, IaC scanning).</li>
<li>Drive automation and developer-friendly security processes that minimize friction and support rapid delivery.</li>
</ul>
Threat Modelling &amp; Architecture Support
<ul>
<li>Conduct and facilitate a self-serve, risk-driven approach to pragmatic threat modelling sessions for new features, services, and AI components.</li>
<li>Conduct threat modelling for data architectures, including ingestion, transformation, storage, streaming, and ML model deployment patterns, ensuring data confidentiality, integrity, and responsible use.</li>
<li>Provide hands-on application security guidance to engineering teams, helping them implement secure APIs, microservices, data flows, and integrations.</li>
<li>Maintain and expand Cognism's secure coding standards, guidance, and reusable security patterns.</li>
</ul>
Application Security Testing &amp; Engineering
<ul>
<li>Perform hands-on security testing (manual and automated) for web applications, microservices, APIs, and cloud components.</li>
<li>Plan, coordinate, and oversee penetration tests, red team exercises, and third-party security assessments, ensuring findings are addressed and tracked.</li>
<li>Validate findings, assist with prioritization, and partner with engineering teams on remediation strategies.</li>
</ul>
Collaboration, Education &amp; Influence
<ul>
<li>Work directly with product squads, acting as a trusted advisor and embedded security partner. Take the time to understand what other teams are working on, what business priorities are, and partner with teams to recommend risk mitigations that balance risk with opportunity and that take into account the threat landscape.</li>
<li>Deliver security training, workshops, and guidance to improve engineering teams' security maturity.Communicate security risk and tradeoffs clearly and constructively to technical and nontechnical stakeholders.</li>
</ul>
CORE COMPETENCIES
<ul>
<li>Strong technical depth in application security, cloud security, and secure development.</li>
<li>Understanding of modern data stack components (e.g., data pipelines, feature stores) and the ability to collaborate effectively with data practitioners.</li>
<li>Deep understanding of communication protocols used for web development is a must-have.</li>
<li>Hands on experience with web application development, specifically for back-end development is a must-have competency.</li>
<li>Risk-Based Prioritization: Ability to distinguish between theoretical security risks and actual business threats, demonstrating a &quot;risk-driven&quot; rather than &quot;compliance-driven&quot; mindset. Comfortable balancing security risk with product and commercial realities.</li>
<li>Contextual Communication: Capacity to translate complex technical vulnerabilities into business-impact stories that resonate with non-technical stakeholders and product owners.</li>
<li>Collaborative Conflict Resolution: Proven track record of approaching engineering friction with transparency and pragmatism, balancing a firm stance on security with a deep care for the developer experience. Pragmatic problem solver with a growth mindset and bias toward action.</li>
<li>Architectural Empathy: Ability to put yourself in the position of your users (the engineers) to build security guardrails that are repeatable and embedded into existing workflows rather than added as hurdles.</li>
</ul>
EDUCATION &amp; EXPERIENCE
<ul>
<li>5&ndash;10+ years of experience in Application Security, Product Security, or Security Engineering roles.</li>
<li>Strong experience securing cloud native SaaS platforms (AWS preferred) and Data pipelines.</li>
<li>Handson experience with secure coding, application testing, and CI/CD security automation.</li>
<li>Experience working closely with engineering and product teams in agile environments.</li>
<li>Familiarity with security frameworks such as OWASP ASVS, OWASP Top 10, NIST, ISO 27001/2.</li>
<li>Experience evaluating and securing AI/ML enabled features is a strong advantage.</li>
<li>Experience in SME or high-growth SaaS environments preferred.</li>
</ul><div>
<h2 class="jobSectionHeader">WHY COGNISM</h2>

At Cognism, we're not just building a company - we're building an inclusive community of brilliant, diverse people who support, challenge, and inspire each other every day. If you're looking for a place where your work truly makes an impact, you're in the right spot!

Our values aren't just words on a page&mdash;they guide how we work, how we treat each other, and how we grow together. They shape our culture, drive our success, and ensure that everyone feels valued, heard, and empowered to do their best work.

Here's what we stand for:

 We Own the Outcome Together. 
 We Deeply Understand our Customers. 
 We Celebrate Impact Wherever It Comes From.

At Cognism, we are committed to fostering an inclusive, diverse, and supportive workplace. We welcome applications from individuals typically underrepresented in tech, so if this role excites you but you're unsure if you meet every requirement, we encourage you to apply!</div></div>

Senior Application Security Engineer

<div>How You'll Support Our Mission

ESO's teams are growing, and our software is in demand globally by firefighters, paramedics, hospitals and governments. To meet this demand, we are building an industry-leading cyber security team in Belfast to protect our customers and data from a variety of fast moving and constantly evolving threats.

We are looking for a Security Engineering Team Leader to join our UK team, working alongside teams in Belfast, Denmark, Czechia and the United States. Work alongside our fire, hospital and EMS Engineering teams to secure our mission-critical applications. These applications are used to help our customers go about their daily job of protecting their communities and saving lives.

You'll lead our team of Security Engineers, supporting and directing our Product &amp; Technology team to ensure our products and systems are designed and implemented with a priority on security. You'll collaborate closely with our Product &amp; Technology teams, contributing to application architecture and steering system implementation. Your teams work will draw on principles like defence in depth and leverage practices such as threat modelling and zero trust across a multi-cloud environment - with focus on best practice, security by design and implementation of standards and frameworks across our portfolio.

Our Security Engineers have a high degree of autonomy, and are part of a high functioning, motivated and forward-thinking team. You have the chance to join a diverse, growing and passionate team, working on critical products, whilst being supported with training opportunities and mentoring.

What You'll Be Doing &ndash; the day to day
<ul>
<li>Lead our team of Security Engineers &ndash; assisting with decision making and solution analysis, and enabling them to deliver security consulting to the wider business</li>
</ul><ul><li>Work directly with, and provide escalated support and guidance to, our Product &amp; Technology teams to assist in how our platform is built and how our applications behave; supporting everything from the security of our users inside our products to how our applications connect to the Internet.</li>
</ul><ul><li>Have significant impact on the security of our systems that are used by thousands of fire fighters, paramedics and hospitals worldwide.</li>
</ul><ul><li>Be a key part of our cyber security team, with demonstrable impact on the security of our systems and applications.</li>
</ul><ul><li>Help our teams to model threats using the STRIDE model, against new designs, ensuring appropriate protection and controls are in place.</li>
</ul><ul><li>Make a difference by mitigating vulnerabilities across our systems, helping developers to produce secure code and evaluating new next-gen security technologies.</li>
</ul><ul><li>Respond to security and compliance issues generated via analysis or automated tools.</li>
</ul><ul><li>Work collaboratively cross-team, to impart your expertise across the organisation.</li>
</ul><ul><li>Be in the detail, working shoulder-to-shoulder with our technology teams.</li></ul> 


Who You Are - some of the essential things required to be successful in the role
<ul>
<li>At least 5 years' experience in securing software or infrastructure in cloud platforms (e.g. Microsoft Azure, AWS, GCP)</li>
</ul><ul><li>Your experience should include;</li>
</ul><ul><li>Securing systems in line with 'Well Architected Frameworks' e.g. Azure Well Architected Framework</li>
</ul><ul><li>Network experience &ndash; whether designing and building, managing or troubleshooting &ndash; you should have experience and confidence in your networking knowledge</li>
</ul><ul><li>Applying security to networks, hosts, web applications and cloud native deployments</li>
</ul><ul><li>Working with toolsets from one or more of: asset management, vulnerability management, firewalls, SIEM, PAM, IDS/IPS, EDR/XDR, DLP, SWG, WAF, CSPM, CNAPP</li>
</ul><ul><li>A solid understanding and ideally experience in the design, implementation or run of one or more of: SAST / DAST / IAST / RASP</li>
</ul>
You should also:
<ul>
<li>Having knowledge of Continuous Integration / Continuous Deployment best practices, and securing pipelines</li>
</ul><ul><li>Understand current attack tactics, techniques and procedures along with the use of MITRE Attack framework and associated MITRE security research</li>
</ul><ul><li>Be inquisitive, have a passion for what you do and understanding how your work impacts and contributes ESO's success</li></ul> 


Who You Are &ndash; it's desirable if you have any of the following
<ul>
<li>Exposure to Infrastructure as Code and Azure native technologies</li>
</ul><ul><li>Experience with threat modelling, NIST and CIS frameworks</li>
</ul><ul><li>Knowledge of application security standards such as OWASP Top 10, SANS / CWE 25</li>
</ul>
<div></div><div>Benefits &amp; Perks! You will have fantastic benefits at ESO including but not limited to;</div>
<div><ul><li>Life insurance (4 x base salary)</li>
<li>Income protection insurance</li>
<li>A generous pension contribution</li>
<li>Private medical insurance including optical and dental</li>
<li>A health cash plan</li>
<li>Modern City Centre office in Belfast - Northern Ireland, and a flexible hybrid working policy (this role is Remote within UK)</li>
<li>AwardCo Recognition Program</li>
<li>Enhanced paternity leave and pay, enhanced adoptive pay, enhanced maternity pay - 12 weeks full pay after 6 months' service.</li>
<li>Enhanced short and long-term sick pay</li>
<li>25 days holiday which increases year on year until you reach 5 years of service + 14 additional days</li>
</ul>
</div><div></div><div>About ESO</div>
<div></div>
<div>ESO is a fast-paced, growing data, technology and research company passionate about improving community health and safety through the power of data. We pioneer innovative, user-friendly software to meet the changing needs of today's EMS agencies, fire departments, and hospitals. We serve thousands of customers out of our offices across the US, Canada and Northern Ireland.</div>
<div></div>
<div>Are you ready to Make a Difference?</div>
<div></div>
<div>ESO is committed to creating a diverse and inclusive work environment and is proud to be an equal opportunity employer. We invite you to consider opportunities at ESO regardless of your gender; gender identity; gender reassignment; age; religious or similar philosophical belief; race; national origin; political opinion; sexual orientation; disability; marital or civil partnership status or other non-merit factor.</div>
<div></div>
<div>Our Equal Opportunity Statement of Policy for Northern Ireland is available on request.</div><div></div><div> 
Applicant Privacy Notice &ndash; please click here to review the privacy policy which details how your data is collected, used and protected.</div></div>

Security Engineering Team Lead

HOMETRACK

<div>Hybrid working pattern - 2 days per week from London Bridge Office
Hometrack is seeking an experienced Senior Data Engineer to join our product team to help us deliver Hometrack's Data Services ambitions. By building the best property data sets available, which back the market leading AVM, trusted by 17 out of the top 20 mortgage lenders in the UK, we open the door to helping all our customers make the decisions that matter to them - to buy, to lend, to build.
The Data Services team works with 100s of customers across the property sector ranging from mortgage lenders, house builders, investors, fin &amp; proptech, insurers, telco, retail and utilities, as well as others involved in the housing market. Our mission is to inform decision makers by putting the UK&rsquo;s most trusted property data and insights at the heart of the property ecosystem.
Our market intelligence and customer acquisition, retention and engagement solutions are relied upon by leading industry professionals.
Data Services has a diverse product range covering market, property and mover intelligence, delivered through varying mechanisms including data platforms, reports and APIs, providing maximum flexibility when matching our customers&rsquo; needs to the most effective data solution.
Hometrack is looking for an experienced senior data engineer to help us make this a reality.
What we&rsquo;re looking for in a Senior Data Engineer:<ul><li>
Be accountable for team outcomes, playing your part in achieving team goals and ensuring your contribution positively impacts overall success</li><li>
Be a continual improver, looking for ways to help the team do better and be better, again and again</li><li>
Write maintainable, testable code and enjoy providing code reviews</li><li>
Be experienced with Databricks, Delta Lake and Lakehouse architecture for efficient data management; experience with ETL processes and optimizing data pipelines for performance</li><li>
Be strong in Python, SQL, and PySpark</li><li>
Be passionate about building data products for stakeholders and customers, ensuring they are stable, scalable, secure, accurate, observable, and performant</li><li>
Enjoy collaborating closely with colleagues in Product, Analytics, Security, and Software, explaining technical concepts to non-technical audiences</li></ul></div>

Senior Data Engineer

JPMorganChase

<div>JOB DESCRIPTION 
 
 
Join us to directly influence the future of technology at JPMorganChase. As a Senior DevSecOps Architect, you'll collaborate with top cybersecurity and engineering talent, solving complex challenges and enabling safe, secure innovation. Your passion for security and drive to make a real impact are valued here. Grow your skills in a dynamic environment designed for achievers. Help us build products that prioritize security from the start.
Job Summary:
As a Senior DevSecOps Architect in the Cybersecurity &amp; Technology Controls team for International Consumer, you will proactively partner with technology and business colleagues to identify and address security issues. You will embed security culture, lead threat modeling, and drive architecture reviews to ensure our products are secure by design. Your role will be pivotal in managing emerging risks, influencing product strategy, and serving as the subject matter expert for the DevSecOps strategy as well as embedding automated security controls into CI/CD pipelines. You will collaborate globally, supporting audit, regulatory, and risk initiatives, with a focus on cloud computing and emerging technologies.
Job Responsibilities:
<ul><li>Pipeline Security Architecture - Design, implement, and continuously improve security architecture for CI/CD pipelines and DevOps toolchains, ensuring automated security checks are embedded at every stage from code commit to production deployment.</li>
<li>Security-as-Code Leadership - Champion Infrastructure as Code (IaC) and Security-as-Code practices, including policy enforcement, security linting, and automated compliance validation across cloud environments.</li>
<li>Threat Modeling &amp; Architecture Reviews - Lead advanced threat modeling (e.g., STRIDE-LM) for pipelines, microservices, and cloud-native applications, and conduct architecture reviews to drive adoption of secure design patterns.</li>
<li>Automated Guardrails at Scale - Design and deploy automated preventive and detective guardrails to proactively reduce risk across CICD pipelines, cloud and SaaS environments.</li>
<li>Security Culture &amp; Enablement - Cultivate a security-first culture across product, technology, and business teams by providing developer-friendly tooling, training, and reusable secure patterns that accelerate rather than hinder delivery.</li>
<li>Risk &amp; Issue Management - Act with urgency to manage emerging security issues, monitor risk indicators, and recommend resolutions. Serve as the escalation point for IT Risk and Cyber domains related to DevSecOps and Change Management.</li>
<li>Stakeholder Partnership - Partner with engineering leads, product owners, and vendors to ensure effective technology risk management, translating regulatory and policy requirements into actionable, engineer-friendly controls.</li>
<li>Audit &amp; Regulatory Support - Support audit, regulatory, and risk activities by providing evidence of control effectiveness and translating compliance requirements into automated, repeatable processes.</li>
<li>Continuous Improvement - Identify and address unfamiliar technology components, share best practices, and influence peers to drive continuous improvement in DevSecOps maturity across the organization.</li>
</ul>Required Qualifications, Capabilities, and Skills:
<ul><li>Advanced threat modeling experience (e.g., STRIDE-LM) for DevOps/CICD Pipelines and toolchains.</li>
<li>Expert ability to advise and influence secure pipeline architecture using Policy-as-Code and automated gates.</li>
<li>Hands-on security expertise in AWS and GCP.</li>
<li>Practical experience creating reference architectures and patterns for engineering teams.</li>
<li>Proven ability to design and deploy automated preventive and detective guardrails at scale.
</li><li>Expertise in leveraging IaC scanning to detect misconfigurations and compliance violations across Terraform and Kubernetes manifests</li>
<li>Hands-on experience in integrating a comprehensive DevSecOps tooling stack, including SAST, SCA, RASP, IAST, container and image scanning, secrets detection, and AI-powered DAST solutions</li>
<li>Experience implementing and managing SBOMs to track internal, third-party risk and supply chain security.</li>
<li>Ability to solve design and functionality problems independently.</li>
<li>Strong written and verbal communication skills.</li>
<li>Demonstrated success in influencing peers and stakeholders.</li>
<li>Ability to evaluate and recommend emerging technologies for future state architecture.</li>
</ul>Preferred Qualifications, Capabilities, and Skills:
<ul><li>Shift-Left/Start-Left Evangelism - A proven track record of mentoring developers and fostering a culture where security is a shared responsibility</li>
<li>Relevant certifications: AWS Certified Security - Specialty, GCP Professional Cloud Security Engineer, CISSP, CKS, OSCP.</li>
<li>Experience operating in regulated organizations with a 3LoD model.</li>
<li>Willingness to challenge existing processes respectfully.</li>
<li>Experience translating policy and regulatory requirements into control design for engineers and architects.</li>
<li>Proven ability to upskill and learn modern technologies.</li>
<li>Experience in financial services consumer businesses or Fintech organizations.</li>
</ul>#ICBCareers
ABOUT US
 
 
J.P. Morgan is a global leader in financial services, providing strategic advice and products to the world's most prominent corporations, governments, wealthy individuals and institutional investors. Our first-class business in a first-class way approach to serving clients drives everything we do. We strive to build trusted, long-term partnerships to help our clients achieve their business objectives. 
<div><div>We recognize that our people are our strength and the diverse talents they bring to our global workforce are directly linked to our success. We are an equal opportunity employer and place a high value on diversity and inclusion at our company. We do not discriminate on the basis of any protected attribute, including race, religion, color, national origin, gender, sexual orientation, gender identity, gender expression, age, marital or veteran status, pregnancy or disability, or any other basis protected under applicable law. We also make reasonable accommodations for applicants' and employees' religious practices and beliefs, as well as mental health or physical disability needs. Visit our FAQs for more information about requesting an accommodation. 
</div></div> 
 
ABOUT THE TEAM
 
 
Our professionals in our Corporate Functions cover a diverse range of areas from finance and risk to human resources and marketing. Our corporate teams are an essential part of our company, ensuring that we're setting our businesses, clients, customers and employees up for success.</div>

Senior DevSecOps Architect

Voxquill

<div>I'm looking for our founding engineer!
 
The person who takes a live, paying fintech product and makes it truly ours.
We build receipt-and-proof automation for the self-employed: the app quietly finds your receipts (email, bank feeds, camera roll, texts), sorts them, matches them to your bank transactions, and produces accountant-ready exports. It's live on iOS and Android, it's SOC 2 certified, and people are paying for it. The model works.
I need one person who treats this codebase as theirs, ships fast, and owns the platform end-to-end. This is a founding engineer role with a real path to CTO.
Your first job is to take the keys.
 
Move the platform off the agency's Azure into ours, take custody of production, and the headline deliverable.
 
Build the automated test suite this codebase never had, with a CI/CD pipeline where a green build genuinely means &quot;safe to ship.&quot; Then you own the roadmap.
How we build matters as much as what we build.
 
We are not rebuilding an IT shop of tickets and manual QA.
 
Terrapin runs as an AI-native pod: Claude Code and agents do the repetitive work and produce tested, PR-ready changes; you own architecture, review, security, and the hard 20%.
 
AI gives you the velocity, your tests and pipeline are what keep that velocity from turning into breakage!
We want to ship multiple times a week and almost never break anything, and hold our SOC 2 line the whole way. If that model excites you rather than worries you, you're the person.
This is genuinely full-stack.
 
Strong .NET / C# backend on Azure, real ownership of infra, security, and DevOps, and polished mobile (React Native + Expo, iOS and Android); Because the app is the product. Testing isn't someone else's job here. It's the core discipline.
The kind of person whose teammates would describe as:<ul><li>
an owner, not a ticket-taker</li><li>
obsessive about shipping quality fast</li><li>
calm owning production for a product with real money moving through it</li><li>
someone who builds automation instead of doing the same thing twice</li><li>
security-minded by instinct, not as an afterthought</li></ul>
What you'd bring:<ul><li>
Senior+ .NET / C# backend, PostgreSQL, solid API design</li><li>
Real Azure ownership: App Services, networking, Key Vault, identity, CI/CD (Azure DevOps or similar)</li><li>
Strong React Native + Expo mobile, with genuine UI/UX taste</li><li>
Test automation and CI/CD as a way of life &mdash; you write the tests with the code</li><li>
Hands-on building with Claude Code / agent tooling, and doing it safely in a SOC 2 world</li></ul>
Bonus points: fintech / payments background, Plaid experience, or applied LLM work.
And the reason the right engineer will actually stay: receipts are just the wedge. We're building toward a verifiable, tamper-evident record of an economic event. Proof that banks, insurers, and AI agents can consume directly. Stripe is a payment rails. We're building proof rails.
You'd work directly with me every day &mdash; 18+ years in fintech and payments, two exits behind me &mdash; so you own the engineering but never carry the hard architecture, security, or product calls alone.
The details:
 
UK or EU-remote(temporarily), with solid overlap to UK hours and business trips.
We're genuinely open to strong candidates across both. Being open to relocating to the UK down the line is a plus, but not a day-one requirement.
 
Competitive base plus real founding-level equity.
One hard line: you build quality in through tests and CI/CD. We're deliberately leaving the manual-testing, hope-it-works world behind, and a dev who treats testing as optional isn't the hire. Everything else, we can talk about.
If you want founder-level ownership, a CTO trajectory, and an AI-native way of building, and owning a live fintech platform from week one lights you up, let's talk.
Apply and tell me about something you shipped that you're proud of, and one thing you broke and how you made sure it never happened again.</div>

Founding Engineer (Full Stack); Patch to CTO

Bridewell

<div>Start Date: 14th September 2026
About Bridewell
One of the most exciting prospects in the UK cyber security sector today, Bridewell is a leading cyber security services company specialising in protecting and transforming critical business functions for some of the world&rsquo;s most trusted organisations. We are the trusted partner for operators of essential services and provide end-to-end cyber security capabilities that help our clients overcome their security challenges, allowing them to operate safely and securely.
Bridewell holds the Gold level, Investors in People award which we feel solidifies and reflects on the outstanding calibre that makes us truly one team.
The Opportunity
In the first three months of the Bridewell Academy, you will undergo comprehensive onboarding, where you will meet your manager and assigned buddy, who will guide you through the initial stages of your journey. During this period, you will gain exposure to our Cloud Engineering team, allowing you to familiarise yourself with cloud architecture, modern engineering practices, and the Microsoft 365 security stack &mdash; including Microsoft Defender (XDR), Microsoft Sentinel, and Microsoft Purview &mdash; alongside equivalent capabilities across other hyper-scalers. You will complete foundational training, such as the Microsoft Certified: Azure Fundamentals (AZ-900), Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900), and AWS Certified Cloud Practitioner courses, and become acquainted with our learning management systems, setting a solid foundation for your professional development.
As you progress into the three to six-month mark, you will begin shadowing and contributing to client-facing cloud projects, where you'll apply your skills in real-world scenarios. This hands-on experience will be invaluable as you collaborate with senior consultants on deployments, configuration tasks, and technical documentation across Microsoft Azure, Microsoft 365, AWS, and GCP environments &mdash; with early exposure to security tooling such as Microsoft Defender, Microsoft Entra and Microsoft Sentinel.
Between six to eighteen months, you will continue working on client-facing projects both independently and as part of a squad, enhancing your practical experience in the field. During this time, you will focus on completing essential certifications such as:
<ul><li>Microsoft Certified: Azure Administrator Associate (AZ-104)</li><li>
Microsoft Certified: Security Operations Analyst Associate (SC-200)</li><li>
Microsoft Certified: Information Protection and Compliance Administrator Associate (SC-401)
</li><li>Microsoft Certified: Cloud and AI Security Engineer (SC-500)</li><li>
AWS Certified Solutions Architect &ndash; Associate or Google Associate Cloud Engineer</li></ul>
Achieving these qualifications will further prepare you for your future role, culminating in your pathway to becoming academy certified. This structured progression ensures you are well-equipped with the knowledge and hands-on experience needed to thrive in a modern multi-cloud and cloud-security engineering career. 
Requirements 
Responsibilities<ul><li>
Support Client Engagements: Assist in the delivery of high-quality cloud engineering projects. Help clients design, deploy, and operate workloads across Microsoft Azure, Microsoft 365, AWS, and GCP, contributing to activities such as landing zone builds, identity and access configuration, network design, and the deployment and tuning of Microsoft Defender, Microsoft Sentinel, and Microsoft Purview alongside equivalent native security services in other clouds.</li><li>
Stay Informed: Actively engage in professional development by attending relevant training sessions, hackathons, vendor workshops (Microsoft, AWS, Google), and industry conferences to remain current with the latest cloud services, security tooling, architectural patterns, and engineering best practices.</li><li>
Collaborate with Consultants: Work closely with senior cloud and security engineers on project tasks &mdash; helping to gather requirements, build proofs-of-concept, author detections and analytics rules in Sentinel, configure Defender policies, script automation (e.g. PowerShell, KQL, Bicep, Terraform, ARM, CloudFormation), and prepare technical documentation to ensure project objectives are met efficiently and effectively.</li><li>
Participate in Team Meetings: Join regular squad stand-ups, design reviews, and retrospectives to discuss project progress, share insights, and gather feedback, fostering a collaborative engineering culture and enhancing your personal learning.</li><li>
Conduct Technical Research: Help with preliminary research on emerging cloud and security services, reference architectures, and comparative analysis between vendors (Azure/M365 vs. AWS vs. GCP) to support project work and internal capability development.</li><li>
Engage with Clients: Participate in client meetings, technical workshops, and whiteboarding sessions as needed, providing support and gathering information to understand client requirements and contribute to high-quality service delivery.</li></ul>
Experience<ul><li>
A degree in Computer Science, Cloud Computing, Cyber Security, an equivalent qualification, or completion of a cloud/engineering-focused training course or bootcamp.</li><li>
Minimum grade of 4/C in GCSE English Language and Maths (or equivalent).</li><li>
Three A-levels or five Highers (or equivalent).</li><li>
No work experience is needed as this is an entry-level position. We are looking for someone who will show potential for these roles through their transferable skills. Curiosity about cloud and security technology, confidence, relationship building, and a self-starter mentality are all welcome &mdash; alongside a huge eagerness to learn and build!</li></ul> 

Benefits 
Why join us?
Our vision is to create a safe, inclusive digital world where people and organisations can thrive. Our values of Do the Right Thing, One Team and Above and Beyond emphasises the importance of the part we play in society, and our commitment to our people and clients. Our story to-date has been phenomenal, but success doesn&rsquo;t end here and as we continue to grow and scale, we want to keep the same culture, passion and commitment to high quality that has enabled us to get this far. Bridewell will provide a great career opportunity with continual development as well as the following:
<ul><li>25 Days Holiday - Plus buy and sell options
</li><li>Flexible Working (around core office hours)
</li><li>Company Pension
</li><li>Employee Shareholder Scheme
</li><li>Personal Day &amp; Birthday Off - After 1 year of service
</li><li>Family Leave &ndash; After 1 year of service
</li><li>Life Assurance
</li><li>Electric Vehicle Scheme &amp; Cycle to Work Scheme</li><li>
Private Healthcare (incl. Gym discounts and vison care)</li></ul>
Location: Bridewell operates a hybrid and flexible working policy, however you will be required to travel to different sites on occasion, in particular our London office.
Note: To be eligible for this job you must either hold UK Security Clearance or be eligible and willing to go through this security clearance Bridewell values diversity and is an equal opportunity employer. We are dedicated to fostering an inclusive environment where all employees feel respected, supported, and empowered to do their best work. If you require any reasonable adjustments throughout the interview process please let us know.</div>

Academy Cloud Security Consultant

HCLTech

We are a $13+ billion global technology company, home to more than 224,000 people across 60 countries, delivering industry-leading capabilities centered around digital, engineering, cloud, and AI, powered by a broad portfolio of technology services and products.HCLTech is a globally recognized leader in the Tech and IT industry, but we&rsquo;ve never forgotten the startup mindset that got us here. We&rsquo;ve always approached our work with an idea-first attitude because every one of our accomplishments &mdash;no matter how big or small &mdash;can be traced back to an idea&rsquo;s single spark.It&rsquo;s that spark &mdash;that inner drive &mdash;that sets our people apart from our competitors. It enables us not just to pull off game-changing feat after game-changing feat but to better our world in the process. We want you to find your spark. Because that&rsquo;s what drives you to be better, be more and ultimately, be more fulfilled.ROLE SUMMARYThe Senior Endpoint Engineer is responsible for engineering, enhancing, and supporting the organization&rsquo;s Azure Virtual Desktop (AVD) and Microsoft Intune environments for both physical devices and virtual workspaces. The role requires strong technical expertise, disciplined operational processes, and deep knowledge of endpoint technologies to ensure stable, secure, and efficient end‑user computing services across the enterprise. This position directly impacts nearly all users and plays a critical role in maintaining a reliable and secure endpoint ecosystem.ROLE RESPONSIBILITIES<ul><li>Drive to deliver technology and products in the roadmap on schedule and with the highest quality.</li><li>Provide advice, guidance, and direction to carry out plans and procedures, ensuring schedule attainment, product development process adherence and performance.</li><li>Provide last tier support for operations and support teams, including root cause analysis and preventative analysis.</li><li>Provide technical support with expert knowledge and act as an escalation point for the Desktop Operations team and anything related to the End User Computing environment, focusing on our Endpoint Security Protection, and application management.</li><li>Partner with other Engineering teams to develop solutions.</li><li>Manage the Azure Virtual Desktop (AVD) environment including creating images, deploy VMs, monitor VM performance.</li><li>Develop automated solutions for deploying software packages, application patches/updates and workstation images.</li><li>Engineer and support multiple Windows desktop images.</li><li>Manage the entire lifecycle of our global standard desktop and laptop models.</li><li>Design and implement Microsoft Intune solutions that meet end user requirements.</li><li>Create and manage Intune policies for application deployment, device compliance, and security configurations.</li><li>Ensure seamless integration with other Microsoft 365 services.</li><li>Windows 11 Provisioning: Design and deploy Windows 11 provisioning processes using Intune Autopilot. Configure and manage Windows Update for Business policies. Develop and maintain standardized 11 deployment images.</li><li>Active Directory Group Policy Management: Design and manage Group Policy Objects (GPOs) in Active Directory to enforce security and configuration policies. Collaborate with the Active Directory team to ensure alignment with broader infrastructure goals.</li><li>Security and Compliance: Implement security best practices and compliance policies within Intune. Monitor and respond to security incidents related to mobile devices and endpoints.</li><li>Documentation and Training: Create detailed documentation of Intune configurations, Windows provisioning processes, and Group Policy settings.</li><li>Maintain desktop images and modify SCCM task sequences as needed.</li><li>Package, test, and deploy new applications as needed.</li><li>Maintain and expand existing Knowledge Base.</li><li>Create new and maintain existing support documents to maintain high standards of quality in the delivery of End User Computing services.</li></ul>TECHNICAL QUALIFICATIONS<ul><li>8+ years total work experience, 5+ of those years with proven experience in designing and implementing Microsoft Intune solutions.</li><li>5 years&rsquo; experience as a system engineer.</li><li>Desktop engineering and support experience in an enterprise environment.</li><li>Proven experience with Windows 11, Active Directory Structure, and Managing Group Policies.</li><li>Experience developing and testing software packages using Install shield, or equivalent.</li><li>Skills managing a VDI environment (Azure Virtual Desktop preferred).</li><li>Expert level experience within End Point Protection Engineering.</li><li>Expertise in MECM and Intune.</li><li>Expert in patch management including bios and firmware updates, service pack upgrades, and application-based updates.</li><li>Basic Database Administration experience, particularly in SQL Server.</li></ul>GENERAL QUALIFICATIONS<ul><li>Proficient communication skills, both written and verbal.</li><li>Possess sound organization and problem-solving skills.</li><li>Excellent ability to work in a team environment.</li><li>Motivated to learn and grow professionally.</li></ul>EDUCATION REQUIREMENTS<ul><li>Bachelor&rsquo;s degree from an accredited college or university.</li></ul>Benefits:<ul><li>A supportive, diverse and global team with a brilliant culture.</li><li>Great opportunities to make the role your own, upskill yourself and get involved with exciting projects.</li><li>Total Wellbeing is our focus. Alongside your professional excellence, you join the likeminded colleagues to create a larger impact within the company and society at large in your chosen area of passion - CSR Council, Diversity Council, Women Connect, Sparks &ndash; Engagement Champion to name a few.</li><li>To know more about us visit &ndash; www.hcltech.com</li><li>For more information on how we process your personal data, please refer to HCLTech&rsquo;s Candidate Data Privacy Notice.</li></ul>Pay: &pound;24,420.00-&pound;50,000.00 per yearWork Location: In person

Track Lead - MDM Intune

Explore 214+ Senior security engineer in London this July. Find roles across top companies and apply now to boost your career.