Job Search

Cyber Security Engineer

Secure by Design & Security Platforms

6-Month Contract | Inside IR35 | London 1-2 Days Per Week

We're seeking a hands-on Cyber Security Engineer to embed Secure by Design principles across technology programmes while helping improve and optimise a suite of enterprise security platforms.

This is an excellent opportunity for a security professional who enjoys working across architecture, engineering and delivery teams, influencing projects from inception through to deployment while providing practical, pragmatic security guidance.

Key Experience

✅ Secure by Design & Security Assurance
✅ Security Architecture & Design Reviews
✅ Threat Modelling & Risk Identification
✅ Microsoft Security Stack (Identity, Endpoint, Cloud & Monitoring)
✅ Security Platform Configuration & Support
✅ Security Standards, Controls & Governance
✅ Vendor & Security Tool Management
✅ Stakeholder Engagement Across Engineering & Delivery Teams

What You'll Be Doing

Embed security into projects and programmes from day oneConduct security design reviews and lightweight threat modellingDrive security assurance throughout the delivery lifecycleEnhance configuration, adoption and effectiveness of security platformsSupport onboarding and implementation of new security toolingAct as a key liaison between Security, Architecture, Engineering and Delivery teamsDevelop practical standards, templates and guidance to improve secure-by-design outcomesManage platform-related requests, vendor engagement and continuous improvement initiatives

Ideal Background

Strong experience delivering Secure by Design outcomes within complex enterprise environmentsExperience reviewing solution architectures and identifying pragmatic security controlsHands-on experience with Microsoft security technologiesExposure to cloud, infrastructure, applications and integration securityExperience supporting or administering security tooling and platformsAbility to operate independently and quickly add value in a fast-paced environment

Desirable

Security Architecture or Engineering backgroundIAM technologies such as One Identity, Delinea or StrongDMExperience within regulated, utilities, energy or critical infrastructure environments

A great opportunity for a delivery-focused security contractor to influence major technology initiatives, improve security engineering practices and help drive a Secure by Design culture across a large and complex organisation.

GCS is acting as an Employment Business in relation to this vacancy.

Read less

We are looking for an experienced IAM Delivery Lead with strong Identity Governance & Administration (IGA) expertise to support a large-scale IAM transformation programme.

Location: Sheffield (Hybrid - 2 days/week in office)
Contract: Initial 6 months with potential extension

Key Requirements:

Proven experience delivering IAM/IGA projects.Strong understanding of identity governance, access management, and IAM controls.Experience managing technical workstreams, stakeholders, and vendors.Strong knowledge of Agile delivery, JIRA, and Confluence.Ability to work with cybersecurity, infrastructure, and technology teams.

An excellent opportunity to play a key role in delivering secure, modern identity solutions within a complex enterprise environment.

Interested? Apply now to be considered for this exciting IAM transformation opportunity.

GCS is acting as an Employment Business in relation to this vacancy.

Read less

Senior Back-end Engineer
Location: Abu Dhabi, UAE - Remote Global Type: Contract
Role Summary

We are seeking a Senior Back-end Engineer to build the production-grade application architecture for a large-scale AI transformation programme. You will be the architect behind the "nervous system" of AI agents, designing the secure API gateways and orchestration layers that allow Large Language Models (LLMs) to interact with enterprise ERPs and sensitive engineering data.

You will act as the technical anchor for critical build initiatives across flagship programmes. Your mandate is to move beyond simple model serving and build robust, on-premise micro-services that power enterprise engineering platforms and autonomous AI agents. Working within a structured "Stage Gate" delivery model, you will ensure software meets strict security and reliability standards required in highly regulated environments.

Key Responsibilities
1. Agent Orchestration & System Architecture
*
Agentic Frameworks: Architect the orchestration layer (Agent of Agents) that coordinates specialised AI workers (e.g., Controllership Agent, Treasury Agent), managing state, task routing, and error handling.
*
Workflow Logic: Design the "Task Router & Intent Classifier" services that map user prompts to specific skills/playbooks, ensuring deterministic execution of critical financial and engineering workflows.
*
Microservices Design: Build scalable, containerized microservices that handle high-concurrency requests, ensuring low-latency responses for real-time market intelligence and design trade-off analysis.
2. Enterprise Integration & API Gateways
*
Secure SAP Connectivity: Build the "Data Access Layer" (DAL) that serves as the secure gateway for AI agents to read/write to SAP S/4HANA and Ariba, enforcing strict validation logic before any transaction is committed.
*
Scalable Data Lakehouse Connectivity: Build a scalable, secure, observable connection layer to the central data platform, ensuring all read transactions are authenticated, authorized, and properly audited.
*
RAG Integration: Develop the backend logic to interface with Vector Databases (e.g., Weaviate) and Retrieval Models, enabling AI-powered knowledge mining solutions to securely query historical proposals and technical documents.
*
External API Managers: Construct robust connectors for external data feeds (e.g., S&P Global, Orbis), handling rate limiting, caching, and data normalization.
3. Security, Performance & Deployment
*
Enterprise-Grade Security: Implement "Gateway & Policy Guard" services that enforce Authentication, Role-Based Access Control (RBAC), and PII/ITAR redaction before data reaches an LLM.
*
On-Premise Optimization: Engineer systems for strictly air-gapped or on-premise deployment, optimizing efficient resource usage on local GPU clusters.
*
Reliability Engineering: Implement comprehensive logging, tracing, monitoring, and observability mechanisms while adhering to enterprise best practices and governance standards.
Technical Requirements
*
Core Languages: Expert proficiency in Python (FastAPI/Django) for AI integration and Go or Java for high-performance microservices.
*
Containerization & Orchestration: Deep experience with Docker and Kubernetes (K8s) for deploying scalable applications in on-premise environments.
*
API Architecture: Strong background in designing RESTful APIs and gRPC services. Experience building API Gateways (e.g., Kong, NGINX) for traffic management and security.
*
Database Management: Proficiency with Relational Databases (PostgreSQL) for transactional data and Vector Databases (Weaviate, Milvus) for semantic search applications.
*
Integration Protocols: Familiarity with enterprise integration patterns and ERP protocols (OData, SOAP) is a strong plus.
Professional Qualifications
*
Experience: 5+ years of experience in Backend Engineering, with a focus on building distributed systems or platforms that serve ML/AI models in production.
*
Structured Delivery: Ability to thrive in a "Governance Collision" environment, delivering Agile software (Sprints, MVPs) that passes rigorous "Stage Gate" reviews and Systems Engineering audits.
*
Operational Mindset: Experience building systems that require high availability and auditability, preferably in Fintech, Healthcare, Defence, or other highly regulated sectors.
*
Collaboration: Proven track record of working with Data Scientists to productize models and Front-end Engineers to deliver seamless user experiences.

Why This Role?
You are not just building APIs; you are building the "hands" that allow AI to do real work. Your code will enable AI agents to automate complex workflows, forecast critical operational risks, and support engineering and business decision-making. If you want to build the secure, high-performance architecture that makes AI tangible, this role is for you.

GCS is acting as an Employment Business in relation to this vacancy.

Read less

🔐 Information Security Consultant | Remote (UK & Ireland)

📍 Remote (UK & Ireland)
💼 Permanent
🚫 Sponsorship is not available

Ideal Background

GCS is acting as an Employment Agency in relation to this vacancy.

Read less

Cyber Security Engineer - Microsoft 365 & Azure

6-Month Contract | Outside IR35 | £350-400 per day | Remote (UK) | 1-2 Days per Month On-Site (South West London)

A leading public sector organisation is looking for a Cyber Security Engineer to support a major cyber security improvement programme.

Working alongside the Cyber Security, Infrastructure and Platform teams, you'll help deliver a range of security enhancements across Microsoft 365, Azure and AWS, strengthening the organisation's overall security posture while improving identity, endpoint, cloud and data protection capabilities.

This is a fantastic opportunity for someone who enjoys hands-on engineering and wants to be involved in delivering meaningful security improvements across a large enterprise environment.

Key ResponsibilitiesDeliver security improvement projects across Microsoft 365, Azure and AWS.Implement and enhance security controls across identity, endpoint, cloud and data protection.Configure and support Microsoft Intune, Microsoft Defender, Microsoft Purview and related Microsoft security technologies.Assist with SIEM configuration, alert tuning and security monitoring.Support Identity & Access Management improvements, including MFA, Conditional Access and Microsoft Entra ID.Work closely with Infrastructure, Platform and Service Desk teams to plan and implement security changes.Assist with vulnerability management and endpoint security improvements.Support cloud security initiatives across Azure and AWS.Produce clear technical documentation and operational handover documentation.Work collaboratively with internal technical teams to ensure successful delivery of security initiatives.Essential Experience

We're looking for someone with experience across several of the following areas:

Experience working as a Cyber Security Engineer within an enterprise environment.Good knowledge of Microsoft 365 and Azure security.Experience with Microsoft Intune and Microsoft Defender.Understanding of Identity & Access Management, including Microsoft Entra ID, MFA and Conditional Access.Experience supporting or configuring SIEM platforms (Microsoft Sentinel or similar).Knowledge of endpoint security and vulnerability management.Experience working within Azure and/or AWS environments.Basic PowerShell scripting skills.Experience delivering technical projects and working with multiple technology teams.Strong communication skills with the ability to produce clear technical documentation.Desirable Experience

Experience in any of the following would be beneficial but is not essential:

Microsoft Purview, DLP or Information Protection.Zscaler (ZIA/ZPA).AWS Security.Infrastructure-as-Code (Terraform, Bicep or ARM Templates).Experience within the UK Public Sector or another regulated environment.Knowledge of UK GDPR, PSN or PCI DSS.Contract DetailsRole: Cyber Security Engineer - Microsoft 365 & AzureContract: 6 MonthsDay Rate: £350-400 per dayIR35 Status: Outside IR35Location: Remote (UK)Travel: 1-2 days per month on-site in South West LondonStart Date: ASAP

This is an excellent opportunity to join a high-profile cyber security programme, working on modern Microsoft security technologies within a collaborative team while enjoying the flexibility of a predominantly remote contract.

GCS is acting as an Employment Business in relation to this vacancy.

Read less

As a Senior Cyber Security Engineer, you will play a critical role in delivering cyber strategies, with responsibility for the design, implementation, and ongoing effectiveness of security capabilities across IT and OT environments.

You will engineer and maintain the technical capabilities that enable early threat detection, rapid and consistent response, and sustained cyber risk reduction, while translating cyber risk, regulatory, and business demands into practical, measurable, and operationally sustainable security controls.

This is a hands‑on engineering role for individuals who enjoy building resilient security capabilities, integrating platforms and telemetry, and turning strategy, risk, and incident learnings into practical engineering outcomes. The role requires a strong understanding of security engineering concepts, infrastructure technologies, and best practices, along with the ability to collaborate effectively across IT, OT, and security operations to drive continuous improvement.

You must be able to obtain Counter Terrorist Check (CTC) Clearance to be eligible for this position.

What you'll be doing as a Senior Cyber Security Engineer

Collaborate with stakeholders to design, implement and maintain security controls to meet business, compliance, and risk mitigation requirements; ensuring controls are effective, measurable, and operationally sustainable.Implement and maintain detection and response capabilities through SIEM integration with security controls and IT systems, with a focus on reducing time‑to‑detect and time‑to‑remediate through improved pre‑incident engineering.Participation in a 24x7 on‑call support rota, responding to SIEM health alerts and restoring log ingestion where required.Manage use cases, perform data enrichment, and define standardised and automated containment workflows.Develop and manage operational procedures and reporting methodology.Manage and oversee security technology platforms (e.g. SIEM, SOAR, EDR, and email security).Monitor ongoing control performance and coordinate remediation where gaps are found.Automate operation procedures and reporting processes and integrate outputs into risk reporting frameworks.Liaise with IT and OT teams to ensure controls are implemented according to agreed baselines.Align control design with industry standards, regulations, and best practices. (e.g. NIS, ISO27001, GDPR).Support audits, reviews, and assessments of security controls.Identify and implement improvements to control coverage and resilience.Proactively advise on technology, best practices, and delivery models.

What you should bring to the role

Experience in Security Engineering, with a focus on detection & response engineering in an enterprise environment.Strong understanding of both IT and OT systems and infrastructure.Experience in identifying and remediating cyber risks in evolving digital environments.Familiarity with SIEM, EDR, email security and identity and access management technologies (e.g. Entra ID, CyberArk).Familiarity with a range of operating systems and security considerations across SaaS, IaaS, end-user computing, and server estate.Sound knowledge of cloud and network security technologies.Strong analytical, planning, and organisational skills.Ability to communicate technical issues clearly to non-technical stakeholders.Degree in Cyber Security, Computer Science, Information Technology, Engineering, or a related field.Industry certification(s) such as CISSP, CCSP, CompTIA Security+, or SC-200.

It would be great if you also had

Previous experience working in a large, complex infrastructure-based or water utility organisation.Experience in systems or network administration in IT and/or OT environments.Experience leading or mentoring others in delivering cybersecurity outcomes.Security engineering vendor or product certifications such as Microsoft Certified: Azure Security Engineer Associate, Tenable, or CyberArk.

GCS is acting as an Employment Agency in relation to this vacancy.

Read less

Application Security Engineer

ZZP / Freelance

Industry: AAA Gaming Studio
Location: Fully Remote (Netherlands)
Contract Length: 12-18 months

About the Role

A fast‑growing gaming studio is looking for an Application Security Engineer to embed secure development practices into their high‑velocity game and platform engineering teams. You'll help secure game engines, back‑end services, and player‑facing APIs used by millions worldwide.

Key Responsibilities

Conduct secure code reviews and help dev teams fix vulnerabilities.Integrate SAST, SCA, and DAST tools into build pipelines.Perform threat modelling on gameplay features and backend microservices.Respond to application‑level vulnerabilities and guide remediation efforts.Promote a developer‑friendly security culture within the studio.

Skills & Experience

Strong experience with modern languages (C++, C#, Go, Python).Solid understanding of CI/CD security and cloud-native app security.Gaming sector experience is a bonus, not a requirement.

GCS is acting as an Employment Business in relation to this vacancy.

Read less

Role Overview

This position provides leadership within the Cyber Solutions Consulting function, supporting senior management in achieving team and organisational objectives. The role combines technical oversight, delivery excellence, and cross‑functional collaboration across presales and project engagements. It also includes guiding internal technology architecture initiatives.

Key Responsibilities

Manage and supervise the Cyber Solutions Consulting team.

Design solutions and capabilities for cyber transformation programmes, assessments, remediation activities, roadmap development, systems integration, and solution deployments.

Contribute to the organisation's project delivery framework and provide technical oversight across internal and client-facing projects.

Support the ongoing development of Cyber Solutions Delivery policies, procedures, and standards.

Help define and implement standard operating procedures for various delivery activities.

Collaborate with partners, vendors, QA teams, and account managers to provide technical direction and solution design guidance.

Generate innovative ideas that drive meaningful change in client environments-improving efficiency, reducing costs, or increasing value.

Lead the design of solutions aligned with client strategy and present clear, quantifiable value propositions.

Translate client objectives and success factors into actionable strategies, plans, and enterprise architecture.

Work closely with clients to deliver end‑to‑end cyber resilience advisory, transformation, and operational support.

Gather and analyse client requirements, perform problem‑solving, and support decision‑making.

Review technical and business processes, standards, and procedures, recommending improvements.

Contribute to the Cyber Solutions Consulting strategy to ensure alignment with broader business goals.

Support sales pursuits, including bid development, pricing, and estimations.

Identify new business opportunities and participate in meetings with prospective clients.

Coach team members in preparing proposals, marketing materials, and case studies.

Support financial performance management for Cyber Solutions and Delivery.

Develop commercially viable proposals.

Build and manage technical capabilities within the team, including resource planning, skills development, and ensuring certifications align with business needs.

Define architectural standards for client solution design and deployment.

Implement best practices, optimise processes, and establish performance metrics to enhance team effectiveness.

Lead teams to achieve results by aligning performance plans with operational objectives.

Track team performance, ensure targets are met, and manage communication around shared goals.

Qualifications

Deep expertise in cybersecurity architecture, controls, and industry best practices.

Professional certification such as CISSP (or equivalent experience).

At least 10 years of enterprise‑level experience, ideally in a client‑facing systems integration environment.

Additional industry certifications (e.g., CISM, CISA) are advantageous.

Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field.

GCS is acting as an Employment Agency in relation to this vacancy.

Read less

CrowdStrike SIEM Engineer

Dubai, United Arab Emirates

Role Overview

We are seeking a skilled CrowdStrike Certified SIEM Engineer to design, implement, optimise, and support security monitoring capabilities built on the CrowdStrike Falcon platform and LogScale SIEM. The ideal candidate will have strong experience in detection engineering, log ingestion pipelines, threat analytics, and SOC enablement within modern cloud‑native environments.

You will work closely with security operations teams, threat hunters, incident responders, and infrastructure stakeholders to ensure high‑fidelity detections, efficient log management, and continuous improvement of monitoring capabilities. This role requires strong technical depth, analytical thinking, and the ability to translate security requirements into scalable SIEM solutions.

Key ResponsibilitiesSIEM Engineering & Platform Management

Deploy, configure, and maintain CrowdStrike LogScale and associated Falcon platform components.

Build and optimise log ingestion pipelines, parsers, schemas, and data retention policies.

Ensure reliable onboarding of data sources across cloud, endpoint, network, and application layers.

Maintain SIEM health, performance, and scalability through continuous tuning and optimisation.

Detection Engineering & Threat Analytics

Develop, test, and deploy detection rules, queries, dashboards, and correlation logic in LogScale.

Align detection content with MITRE ATT&CK, threat intelligence, and emerging adversary behaviours.

Reduce false positives through rule tuning, enrichment logic, and contextual data modelling.

Collaborate with SOC analysts to enhance alert quality and response workflows.

Security Monitoring & Incident Support

Support SOC teams with advanced query development, log analysis, and incident investigations.

Provide technical expertise during major incidents, threat hunts, and forensic activities.

Build automated workflows and integrations using Falcon Fusion, SOAR tools, or API‑based automation.

Integration & Architecture

Integrate CrowdStrike SIEM with third‑party tools such as EDR/XDR, NDR, cloud platforms, firewalls, IAM, and vulnerability scanners.

Work with infrastructure and cloud teams to ensure secure, scalable, and compliant log collection.

Contribute to the design of end‑to‑end monitoring architectures and security data strategies.

Governance, Documentation & Best Practices

Maintain documentation including runbooks, ingestion guides, detection catalogues, and architecture diagrams.

Ensure SIEM configurations align with regulatory requirements and internal security standards.

Drive continuous improvement through lessons learned, platform enhancements, and capability uplift.

Collaboration & Stakeholder Engagement

Work closely with SOC, Threat Intelligence, Cloud, DevOps, and IT teams to support monitoring needs.

Provide technical guidance to stakeholders on logging requirements, detection gaps, and platform capabilities.

Participate in workshops, design sessions, and security reviews.

GCS is acting as an Employment Agency in relation to this vacancy.

Read less