Job Search

📍 Remote (UK & Ireland)
💼 Permanent
🚫 Sponsorship is not available

GCS is acting as an Employment Agency in relation to this vacancy.

A leading organisation specialising in cybersecurity and digital transformation is seeking a Principal OT Security Solution Architect to join their team. The company delivers strategic advisory services and customised security solutions to large enterprises and public‑sector clients.

Develop high‑quality technical content for proposals, including diagrams, project plans, compliance documentation, and other formal submission materials.

Plan, coordinate, and oversee customer proof‑of‑concept (POC) engagements, defining scope, success criteria, technical requirements, timelines, and presenting outcomes.

Produce and maintain OT‑security‑related technical documentation such as design concepts, use cases, integration approaches, high‑ and low‑level designs, best practices, and POC reports.

Strong understanding of industrial cybersecurity standards (e.g., IEC 62443, IEC 62351, NERC CIP, NIST 800‑82).

Deep knowledge of OT cybersecurity principles and architectures.

Solid grounding in IT security technologies, including firewalls, IPS, DDoS protection, proxies, vulnerability management, endpoint security, data diodes, and related tools.

Proven consulting and pre‑sales capabilities, with both technical and commercial awareness.

Attractive tax‑free compensation package.

Opportunities for career development through complex and high‑impact projects.

A dynamic, professional environment with exposure to emerging technologies and product roadmaps.

Inclusive, diverse culture with flexible or hybrid working options.

GCS is acting as an Employment Agency in relation to this vacancy.

Lead and manage 24×7 SOC operations, ensuring effective monitoring and rapid response to security events.

Oversee the full incident response lifecycle: detection, containment, eradication, recovery, and post‑incident analysis.

Serve as the primary escalation point for high‑severity (P1/P2) cybersecurity incidents.

Ensure all incidents are handled in line with defined SLAs, playbooks, and escalation procedures.

Maintain optimal configuration, tuning, and performance of security technologies such as SIEM, SOAR, EDR/XDR, NDR, and UEBA.

Lead the development and refinement of detection use cases, correlation logic, and alerting rules.

Drive proactive threat‑hunting and continuous monitoring activities aligned with evolving threat landscapes.

Ensure SOC operations follow MITRE ATT&CK methodologies, leverage threat intelligence, and align with industry best practices.

Ensure SOC operations adhere to regulatory and internal requirements, including:

National cyber risk regulations

Internal information security policies and standards

International frameworks (e.g., NIST, ISO 27001)

Support audits, regulatory reviews, and compliance assessments.

Maintain accurate and up‑to‑date SOC documentation, including SOPs, runbooks, incident reports, and dashboards.

Lead, mentor, and develop SOC analysts and incident responders across all levels (L1-L3).

Define shift schedules, competency matrices, training plans, and performance goals.

Drive continuous capability improvement through training, simulations, tabletop exercises, and lessons learned.

Foster a strong security culture and operational discipline within the SOC.

Manage relationships with SOC vendors, MSSPs, and technology partners.

Track vendor performance against SLAs and KPIs.

Coordinate vendor involvement during incidents, investigations, and forensic activities.

Support vendor assessments, renewals, and service improvement initiatives.

Deliver regular SOC performance and risk reports to senior leadership, covering:

Incident metrics and trends

SLA adherence

Threat landscape updates

Brief senior stakeholders during major incidents or crisis situations.

Collaborate closely with IT, Cloud, GRC, and business teams.

Mean Time to Detect (MTTD)

Mean Time to Respond (MTTR)

Incident SLA compliance

Reduction in recurring or high‑severity incidents

Audit and regulatory compliance outcomes

Education

Bachelor's degree in Cybersecurity, Information Security, Computer Science, IT, or a related field.

Experience

At least 10 years of cybersecurity experience, including 5+ years in SOC or Incident Response leadership roles.

Strong background operating SOC functions within banking or other regulated sectors.

Preferred Certifications

CISSP / CISM

GIAC certifications (e.g., GCIH, GCED, GCIA)

Cloud security certifications (AWS or Azure)

Strong knowledge of SIEM, SOAR, EDR/XDR, and threat intelligence platforms.

Deep understanding of cyber threats, malware, ransomware, and advanced persistent threats.

Hands‑on experience with incident handling, digital forensics, and log analysis.

Strong analytical, decision‑making, and crisis‑management capabilities.

Leadership and accountability

Ability to perform under pressure

Clear communication with senior stakeholders

Risk‑based decision‑making

Strong collaboration and stakeholder engagement

GCS is acting as an Employment Agency in relation to this vacancy.

Role: Cyber Threat and Controls Consultant - B2B

Duration: 6-month rolling contract

Working Pattern: Krakow, Hybrid (handful of days per month)

GCS Cyber are partnered with a global financial services organisation undergoing multiple large-scale transformation programmes across their Cyber Security division.

In this role you will perform threat and control assessments across the business, you'll partner with architects, developers and cloud specialists across the business to review designs, challenge assumptions, and ensure services are built with strong security foundations. You'll also contribute to improving the threat‑assessment process, sharing your expertise across a global community and helping uplift security practices across the organisation.

Must have:

To find out more, please apply now or send a copy of your CV to [email protected]

GCS is acting as an Employment Business in relation to this vacancy.

Role: Security Operations Engineer

Duration: 6-month rolling contract

Working Pattern: Hybrid - multiple UK locations

GCS Cyber are partnered with a global organisation enhancing their Cyber Security Operations capability as part of a wider security transformation. They are now seeking a Security Operations Engineer with deep hands‑on experience across SecOps tooling, detection engineering and incident response enablement.

Key Responsibilities

Required Experience

To find out more, please apply now or send a copy of your CV to [email protected]

GCS is acting as an Employment Business in relation to this vacancy.

Role: Security Architect (AppSec and Network Security) - B2B

Duration: 6-month rolling contract

Working Pattern: Krakow, Hybrid (handful of days per month)

GCS Cyber are partnered with a global financial services organisation undergoing multiple large-scale transformation programmes across their Cyber Security division. They are now looking for a Security Architect who has extensive experience managing end-to-end solution designs within large-scale transformation programmes with a heavy focus on Network Security and Application Security

To find out more, please apply now or drop an email with a copy of your CV to [email protected]

GCS is acting as an Employment Agency in relation to this vacancy.