Job Search

GCS is acting as an Employment Agency in relation to this vacancy.

Read less

Digital Forensics Investigator

Digital Forensics | Cyber Investigations | Incident Response

Are you passionate about uncovering digital evidence, investigating cyber incidents, and helping organisations understand what really happened during a security event?

We're looking for a Digital Forensics Investigator to support complex cyber investigations, incident response activities, and evidence-led enquiries. This role offers the opportunity to work across endpoints, cloud environments, mobile devices, and enterprise security platforms, applying forensic techniques to identify, preserve, analyse, and present digital evidence.

You'll work closely with internal investigation teams, security stakeholders, legal professionals, and law enforcement to ensure investigations are thorough, accurate, and conducted in accordance with appropriate evidence-handling procedures.

What You'll Be Doing

Conduct digital forensic investigations, collecting and analysing electronic evidence to support internal investigations, legal proceedings, and cybersecurity incident response.Identify, acquire, preserve, and analyse digital evidence across laptops, servers, mobile devices, cloud platforms, and enterprise environments.Investigate suspicious activity, unauthorised access, compromised accounts, data breaches, and other potential security incidents through forensic artefacts and log analysis.Analyse Microsoft 365 and other cloud-based environments to identify relevant activity, establish timelines, and support attribution of user or threat actor actions.Use digital forensic and eDiscovery tools to investigate incidents, refine large datasets, and develop effective evidence-collection strategies.Support incident response activities by analysing logs, endpoint telemetry, network traffic, malware, and other digital artefacts.Maintain the integrity, confidentiality, and admissibility of evidence through accurate documentation and strict chain-of-custody procedures.Prepare clear, factual forensic reports documenting investigative processes, findings, analysis, and conclusions.Collaborate with internal security, compliance, ethics, and investigations teams, as well as external legal advisers, law enforcement, and technology vendors.Contribute to the continuous improvement of forensic procedures, investigation methodologies, and evidence-handling protocols.Keep up to date with emerging cyber threats, forensic techniques, industry standards, and developments in digital investigation practices.

What We're Looking For

Education and Qualifications

An undergraduate qualification in IT, computer science, digital forensics, or a related discipline - or equivalent relevant experience.Professional certifications in information security, digital forensics, or incident response are advantageous.A postgraduate qualification in computer science, digital forensics, or a related field would be beneficial.

Technical Experience and Knowledge

Strong understanding of the digital forensic lifecycle: identification, preservation, collection, examination, analysis, documentation, and presentation of evidence.Knowledge of the ACPO Good Practice Guide for Digital Evidence and its application to forensic investigations.Practical experience using digital forensic and eDiscovery tools such as Magnet AXIOM, Cellebrite, FTK, EnCase, Nuix, Relativity, or Paladin.Strong working knowledge of Microsoft 365, cloud platforms, and log analysis, including the ability to investigate suspicious or unauthorised account activity.Experience working with Endpoint Detection and Response (EDR) technologies and analysing endpoint telemetry.Understanding of SIEM platforms, security monitoring, IDS/IPS, firewalls, and network traffic analysis.Experience collecting and analysing evidence from Windows, Linux, and macOS systems, as well as mobile devices, servers, and cloud environments.Knowledge of incident response methodologies, cyberattack techniques, threat actors, malware behaviour, and digital artefact analysis.Understanding of networking fundamentals, including TCP/IP, routing, subnetting, network architecture, and common network protocols.Familiarity with cloud security, encryption, data loss prevention (DLP), and relevant cybersecurity standards and regulations.

Essential Skills and AttributesStrong analytical thinking and the ability to connect evidence from multiple systems to establish an accurate sequence of events.Excellent attention to detail and a methodical, evidence-led approach to investigations.Ability to develop effective evidence-collection and eDiscovery strategies based on the nature of an allegation or incident.Strong written communication skills, with the ability to produce clear, objective, and defensible forensic reports.An understanding of legal and jurisdictional considerations relating to digital evidence, investigations, and data breaches.High levels of integrity, discretion, and professionalism when handling sensitive or confidential information.Ability to manage competing priorities, work collaboratively with multidisciplinary teams, and communicate technical findings to non-technical stakeholders.A proactive approach to problem-solving, continuous learning, and improving investigative processes.

Why Consider This Opportunity?This is an opportunity to apply your digital forensic expertise to meaningful cyber investigations, working across a broad range of technologies and evidence sources. You'll play an important role in uncovering facts, supporting incident response, protecting organisational interests, and ensuring that digital evidence is handled to the highest professional standards.

Interested in learning more?
If you have a background in digital forensics, cyber investigations, or DFIR and enjoy solving complex technical challenges through evidence-based analysis, we'd love to hear from you.

Apply today or get in touch for a confidential conversation.

GCS is acting as an Employment Agency in relation to this vacancy.

Read less

Data Engineer (Python / Distributed Data Platforms)

📍 Relocation to Malta Required | 💼 Permanent | 🏠 Remote from Malta

We have partnered with a growing European technology company that is investing heavily in its data platform and engineering capabilities.

As part of their expansion, they are seeking Data Engineers across multiple levels, including:

Data Engineer II (3-5 years)Data Engineer III (5-8 years)Staff Data Engineer (10-12 years)

This is an opportunity to build and scale modern distributed data platforms capable of handling large-scale data workloads while working with a cutting-edge open-source technology stack.

What You'll Be Doing

Design and develop scalable batch and real-time data pipelinesBuild reliable distributed data systems handling large-scale datasetsWork with diverse data sources, APIs, legacy systems, and modern applicationsOwn data products and pipelines throughout their lifecycleImprove platform reliability, observability, and performanceContribute to architecture and technical design decisionsSupport production environments and drive operational excellence

Technology Stack

PythonPySpark & PandasSQL & PostgreSQLApache SparkKafka / RedpandaAirflow / TemporalApache Iceberg / HudiS3-Compatible Object StorageKubernetesGitOpsPrometheus & GrafanaGo (or willingness to learn)

What We're Looking For

Strong experience in Data Engineering, aligned to the level applied forSolid Python and SQL expertiseExperience building and maintaining production-grade data pipelinesHands-on experience with distributed data processing technologiesUnderstanding of batch and streaming architecturesExperience with orchestration frameworks such as Airflow, Temporal, or similarFamiliarity with cloud-native environments and KubernetesStrong software engineering and problem-solving skills

Why Join?

✅ Competitive salary and benefits package
✅ Relocation support to Malta
✅ Work on large-scale distributed data platforms
✅ Modern open-source technology stack
✅ Strong engineering culture and technical autonomy
✅ International and collaborative environment
✅ Clear career progression from Data Engineer to Staff Engineer

Why Malta?

☀️ Over 300 days of sunshine each year
🌊 Mediterranean lifestyle with excellent work-life balance
🌍 English-speaking, international business environment
✈️ Easy access to major European destinations
🚀 Growing technology and innovation ecosystem
💰 Malta offers attractive tax frameworks for eligible highly skilled professionals, which may result in a lower effective tax burden compared to many other European jurisdictions, subject to individual eligibility and applicable regulations

📌 Important: Relocation to Malta is a mandatory requirement for this position.

📩 Interested? Apply with your latest CV for a confidential discussion.

GCS is acting as an Employment Agency in relation to this vacancy.

Read less

Data Engineer (Python / Distributed Data Platforms)

📍 Relocation to Malta Required | 💼 Permanent | 🏠 Remote from Malta

We have partnered with a growing European technology company that is investing heavily in its data platform and engineering capabilities.

As part of their expansion, they are seeking Data Engineers across multiple levels, including:

Data Engineer II (3-5 years)Data Engineer III (5-8 years)Staff Data Engineer (10-12 years)

This is an opportunity to build and scale modern distributed data platforms capable of handling large-scale data workloads while working with a cutting-edge open-source technology stack.

What You'll Be Doing

Design and develop scalable batch and real-time data pipelinesBuild reliable distributed data systems handling large-scale datasetsWork with diverse data sources, APIs, legacy systems, and modern applicationsOwn data products and pipelines throughout their lifecycleImprove platform reliability, observability, and performanceContribute to architecture and technical design decisionsSupport production environments and drive operational excellence

Technology Stack

PythonPySpark & PandasSQL & PostgreSQLApache SparkKafka / RedpandaAirflow / TemporalApache Iceberg / HudiS3-Compatible Object StorageKubernetesGitOpsPrometheus & GrafanaGo (or willingness to learn)

What We're Looking For

Strong experience in Data Engineering, aligned to the level applied forSolid Python and SQL expertiseExperience building and maintaining production-grade data pipelinesHands-on experience with distributed data processing technologiesUnderstanding of batch and streaming architecturesExperience with orchestration frameworks such as Airflow, Temporal, or similarFamiliarity with cloud-native environments and KubernetesStrong software engineering and problem-solving skills

Why Join?

✅ Competitive salary and benefits package
✅ Relocation support to Malta
✅ Work on large-scale distributed data platforms
✅ Modern open-source technology stack
✅ Strong engineering culture and technical autonomy
✅ International and collaborative environment
✅ Clear career progression from Data Engineer to Staff Engineer

Why Malta?

☀️ Over 300 days of sunshine each year
🌊 Mediterranean lifestyle with excellent work-life balance
🌍 English-speaking, international business environment
✈️ Easy access to major European destinations
🚀 Growing technology and innovation ecosystem
💰 Malta offers attractive tax frameworks for eligible highly skilled professionals, which may result in a lower effective tax burden compared to many other European jurisdictions, subject to individual eligibility and applicable regulations

📌 Important: Relocation to Malta is a mandatory requirement for this position.

📩 Interested? Apply with your latest CV for a confidential discussion.

GCS is acting as an Employment Agency in relation to this vacancy.

Read less

Data Engineer (Python / Distributed Data Platforms)

📍 Relocation to Malta Required | 💼 Permanent | 🏠 Remote from Malta

We have partnered with a growing European technology company that is investing heavily in its data platform and engineering capabilities.

As part of their expansion, they are seeking Data Engineers across multiple levels, including:

Data Engineer II (3-5 years)Data Engineer III (5-8 years)Staff Data Engineer (10-12 years)

This is an opportunity to build and scale modern distributed data platforms capable of handling large-scale data workloads while working with a cutting-edge open-source technology stack.

What You'll Be Doing

Design and develop scalable batch and real-time data pipelinesBuild reliable distributed data systems handling large-scale datasetsWork with diverse data sources, APIs, legacy systems, and modern applicationsOwn data products and pipelines throughout their lifecycleImprove platform reliability, observability, and performanceContribute to architecture and technical design decisionsSupport production environments and drive operational excellence

Technology Stack

PythonPySpark & PandasSQL & PostgreSQLApache SparkKafka / RedpandaAirflow / TemporalApache Iceberg / HudiS3-Compatible Object StorageKubernetesGitOpsPrometheus & GrafanaGo (or willingness to learn)

What We're Looking For

Strong experience in Data Engineering, aligned to the level applied forSolid Python and SQL expertiseExperience building and maintaining production-grade data pipelinesHands-on experience with distributed data processing technologiesUnderstanding of batch and streaming architecturesExperience with orchestration frameworks such as Airflow, Temporal, or similarFamiliarity with cloud-native environments and KubernetesStrong software engineering and problem-solving skills

Why Join?

✅ Competitive salary and benefits package
✅ Relocation support to Malta
✅ Work on large-scale distributed data platforms
✅ Modern open-source technology stack
✅ Strong engineering culture and technical autonomy
✅ International and collaborative environment
✅ Clear career progression from Data Engineer to Staff Engineer

Why Malta?

☀️ Over 300 days of sunshine each year
🌊 Mediterranean lifestyle with excellent work-life balance
🌍 English-speaking, international business environment
✈️ Easy access to major European destinations
🚀 Growing technology and innovation ecosystem
💰 Malta offers attractive tax frameworks for eligible highly skilled professionals, which may result in a lower effective tax burden compared to many other European jurisdictions, subject to individual eligibility and applicable regulations

📌 Important: Relocation to Malta is a mandatory requirement for this position.

📩 Interested? Apply with your latest CV for a confidential discussion.

GCS is acting as an Employment Agency in relation to this vacancy.

Read less

Senior DevSecOps Engineer

Primary focus: Secure software delivery, IAM governance, and security automation

Location: Pune, India

Category

Details

Function

Production Operations / DevOps

Reports to

Head of Production Operations

Global job alignment

DevOps / IT Infrastructure Engineer 4

People responsibility

No direct reports

Employment level / grade

G17

Travel

Up to 20% domestic and international travel, as required

Working model

Hybrid office environment

General Summary

The Senior DevSecOps Engineer is a hands-on Senior DevOps Engineer with focused responsibility for integrating security into cloud infrastructure, delivery pipelines, developer workflows, and production platform practices across a global technology organization.

The role combines broad AWS, Kubernetes/EKS, Infrastructure as Code, CI/CD, automation, and troubleshooting capability with deep expertise in IAM governance, vulnerability and open-source scanning, static analysis, policy as code, software supply chain security, cloud and container security, and automated compliance evidence.

The job holder enables product teams to deliver securely by translating enterprise requirements into practical, reusable controls rather than relying on manual reviews or end-stage security gates.

The role works closely with Product, Development, Architecture, Security, BISO, Quality, SRE, cloud service owners, and compliance stakeholders, bringing strong communication, sound judgment, and end-to-end ownership.

Primary Duties and Responsibilities

Senior DevOps Engineering Foundation

Design, build, and improve reliable, scalable, and automated AWS, Kubernetes/EKS, Infrastructure as Code, and CI/CD capabilities while applying security as an integrated engineering requirement.

DevSecOps Capability Ownership

Drive practical adoption of secure software delivery practices across product teams, translating enterprise security, architecture, and compliance requirements into reusable engineering controls and implementation patterns.

Secure CI/CD and Policy Enforcement

Embed automated security checks, approvals, evidence, and policy enforcement into GitLab CI/CD and related delivery workflows while keeping controls understandable, maintainable, and proportionate to risk.

Application and Dependency Security

Implement and improve static analysis, software composition and open-source dependency scanning, vulnerability detection, secrets detection, artifact controls, and actionable remediation workflows using approved tools.

Software Supply Chain Security

Strengthen provenance, artifact integrity, dependency governance, build security, access boundaries, and traceability across source, pipeline, registry, deployment, and runtime stages.

IAM Governance and Automation

Engineer reusable IAM patterns, least-privilege controls, role and access lifecycle automation, secrets/configuration management, access reviews, and evidence collection across AWS and delivery platforms.

Cloud, Container, and Infrastructure Security

Implement secure AWS, Kubernetes/EKS, network, workload, container, and Infrastructure as Code patterns, including scanning, hardening, admission controls, policy as code, and remediation automation.

Vulnerability Remediation Enablement

Partner with product teams and security stakeholders to triage findings, clarify ownership and risk, prioritize remediation, remove false-positive noise, track exceptions, and drive high-value actions to verified closure.

Compliance and Audit Readiness

Automate control evidence where practical, improve traceability, support ISO 27001 and related assurance needs, and maintain clear documentation for security controls, exceptions, decisions, and remediation status.

Security Enablement and Influence

Coach engineers, create practical standards and examples, facilitate threat-aware design and secure delivery discussions, and influence teams without becoming a manual approval bottleneck.

Operational Security Partnership

Support investigation and long-term corrective actions for security-related production issues in partnership with SRE, Architecture, Security, and responsible product teams.

Other Duties

Perform other related duties as needed or assigned.

Required Qualifications and Experience

Bachelor's degree in Computer Science, Software Engineering, Information Technology, or a related technical field, or equivalent practical experience.Five or more years of hands-on experience in DevOps, Cloud Engineering, Platform Engineering, Infrastructure Engineering, Software Engineering, or a closely related technical role.Strong hands-on experience with AWS services such as EC2, VPC, S3, IAM, RDS/Aurora, Load Balancing, Lambda, and related cloud services.Production-level experience with Kubernetes, preferably Amazon EKS, including containerized workloads, networking, security, scalability, upgrades, and operational readiness.Strong experience with Infrastructure as Code, preferably Terraform, and infrastructure automation practices.Experience designing, building, and improving CI/CD pipelines, preferably GitLab CI/CD, for consistent, secure, and reliable deployments.Strong scripting and automation experience in Linux-based or cloud-native environments using Bash, Python, or a similar language.Ability to troubleshoot complex infrastructure, application, deployment, networking, security, and operational issues across multiple layers.Strong written and verbal English communication skills, including the ability to clarify ambiguity, align stakeholders, document decisions, communicate risk, and influence without formal authority.Demonstrated curiosity, ownership, technical judgment, and the ability to balance strategic improvement with hands-on delivery.Demonstrated hands-on DevSecOps experience embedding security controls into CI/CD pipelines, cloud infrastructure, container platforms, or developer workflows.Strong experience with IAM design and governance, least privilege, access lifecycle controls, secrets management, and security automation in AWS-based environments.Experience with static application security testing, software composition analysis, open-source dependency governance, vulnerability management, and secrets detection using enterprise or equivalent tools.Experience implementing policy as code, Infrastructure as Code scanning, container or Kubernetes security, and secure software supply chain controls.Ability to communicate security risk and remediation expectations clearly to engineers, product stakeholders, architects, and leadership without relying on security jargon or formal authority.

Preferred Qualifications

Five or more years of experience in DevOps, Cloud, Platform, Infrastructure, Security, or Software Engineering environments.Experience working in an enterprise or global organization with distributed teams.Experience collaborating with Security, Compliance, Enterprise Architecture, Cloud Platform, SRE, vendor, and product teams.Experience with Datadog, CloudWatch, SonarQube/SonarQ, JFrog, Veracode, LaunchDarkly, Helm, Ansible, secrets management, or similar platforms.Familiarity with application stacks such as PostgreSQL, .NET, Angular, APIs, or cloud-native microservices.Relevant AWS, Kubernetes, Terraform, DevOps, Platform Engineering, or Security certifications.Experience mentoring engineers, raising technical standards, and enabling adoption through documentation, coaching, reusable examples, and hands-on collaboration.Experience supporting ISO 27001, audit readiness, secure software development lifecycle practices, or regulated environments.Experience with Veracode, SonarQube/SonarQ, JFrog, GitLab security capabilities, AWS security services, Open Policy Agent, Gatekeeper, or equivalent tools.Familiarity with threat modeling, security architecture reviews, SBOM, artifact signing, provenance, or supply chain security frameworks.Relevant Cloud Security, DevSecOps, Application Security, Kubernetes Security, or Information Security certifications.

GCS is acting as an Employment Agency in relation to this vacancy.

Read less

Product Security Analyst - Vulnerability Management

Department

Software Technology

Reports to

Business Information Security Officer (BISO)

Role Summary

We are seeking a Product Security Analyst - Vulnerability Management to operate and continuously improve the vulnerability management lifecycle across software products, cloud environments, and supporting technology platforms.

The role consolidates security findings, validates and prioritizes exposure using technical and business context, coordinates accountable remediation, and provides reliable product security posture reporting.

The successful candidate is technically credible, analytical, and highly structured, working closely with product and engineering teams to reduce risk rather than merely administer findings. This is a product security and vulnerability management role, not a 24/7 SOC monitoring position.

Responsibilities

Operate the end-to-end vulnerability management process across applications, APIs, cloud services, infrastructure components, containers, and third-party dependencies.Consolidate findings from vulnerability scanners, penetration tests, application security tools, cloud security services, vendor advisories, and enterprise cybersecurity sources.Validate findings, remove duplicates and false positives, and enrich records with asset ownership, exposure, exploitability, and business context.Prioritize vulnerabilities using severity, known exploitation, reachability, internet exposure, compensating controls, product criticality, and customer impact.Assign accountable remediation owners, agree target dates, track progress, challenge overdue items, and verify closure evidence.Maintain an accurate inventory and mapping of covered products, repositories, services, and technical owners in coordination with Product, Architecture, and Platform teams.Develop and maintain vulnerability dashboards, heatmaps, KRIs, and aging metrics for security leadership, business leadership, product teams, and governance forums.Identify systemic weakness patterns and recommend preventive actions, platform improvements, secure configurations, and remediation campaigns.Support risk treatment and exception workflows by preparing evidence, documenting residual exposure, and escalating material or overdue risks.Coordinate operational follow-up from penetration tests, audits, incidents, external disclosures, and security advisories.Perform focused vulnerability assessments and technical validation using approved tools and methods.Monitor emerging vulnerabilities and threat intelligence relevant to the technology stack and initiate rapid assessment when urgent exposure is suspected.Use CISA Known Exploited Vulnerabilities and other verified threat intelligence as inputs to risk-based vulnerability prioritization.Use EPSS as one empirical exploitation likelihood signal alongside CVSS, reachability, exposure, product criticality, and customer impact.Support Cyber Resilience Act reporting readiness through rapid assessment of active exploitation, evidence collection, and escalation to security leadership.Maintain visibility of product versions, declared support periods, and end-of-support status to inform vulnerability treatment and customer obligations.Use SBOM and dependency data to determine which products, versions, and services contain affected components and accelerate impact assessment.Support security advisories, customer notifications, and coordinated vulnerability disclosure with Product Management, Legal, Quality, and Security stakeholders.Support audit, regulatory, and ISO 27001 evidence requirements related to vulnerability management and operational security controls.Collaborate with Application Security, DevSecOps, Platform Engineering, and Security teams on complex findings, scanning coverage, and automation.Continuously improve workflows, service levels, data quality, and reporting to drive measurable exposure reduction.

Required Qualifications

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience.Several years of experience in vulnerability management, vulnerability analysis, security operations, cloud security, or a related technical cybersecurity role.Hands-on experience with vulnerability scanning and security posture tools across applications, cloud, or infrastructure environments.Strong understanding of CVE, CVSS, common vulnerability classes, exploitability, attack paths, and risk-based prioritization.Ability to validate findings using logs, configurations, source information, command-line tools, and targeted technical testing.Knowledge of cloud services, operating systems, networks, containers, identity and access management, APIs, and software dependencies.Experience managing remediation workflows, security exceptions, evidence, and service-level reporting.Strong data analysis skills and experience producing dashboards, metrics, and concise management reporting.Excellent analytical, organizational, and problem-solving skills with strong attention to data quality.Ability to communicate clearly with engineers, product owners, and senior stakeholders and drive accountable follow-through.Strong written and verbal communication skills in English.High level of integrity, judgment, and commitment to protecting customers and software assets.Ability to travel internationally when required for key workshops, assessments, or team collaboration.Ability to collaborate effectively across global time zones with teams distributed across multiple continents.

Preferred Qualifications

Experience with tools such as Tenable, Qualys, Rapid7, Wiz, Microsoft Defender for Cloud, AWS Security Hub, Snyk, SonarQube, or equivalent.Knowledge of CISA Known Exploited Vulnerabilities, EPSS, NIST guidance, CIS Benchmarks, and ISO 27001-aligned vulnerability management practices.Experience with scripting, APIs, workflow automation, and reporting tools such as Power BI.Familiarity with application security tooling and software development concepts sufficient to collaborate effectively with engineering teams.Experience supporting incident response, coordinated vulnerability disclosure, or penetration testing follow-up.Relevant certifications such as Security+, CySA+, GSEC, or equivalent.Familiarity with engineering or technical software environments is advantageous

GCS is acting as an Employment Agency in relation to this vacancy.

Read less

Application Security Engineer

Reports to

Business Information Security Officer (BISO)

Role Summary

We are seeking a hands-on Application Security Engineer to strengthen the security of software products, platforms, APIs, cloud services, and supporting development practices. The role embeds security throughout the software development lifecycle by partnering with product, architecture, engineering, and platform teams to prevent, identify, and remediate vulnerabilities early.

The successful candidate combines strong software engineering capability with practical application security expertise and enables development teams through automation, reusable patterns, coaching, and risk-based guidance rather than acting as a late-stage approval gate. The role supports a secure-by-design approach in which software producers take ownership of customer security outcomes.

Responsibilities

Embed application security requirements and activities across requirements, architecture, design, development, testing, release, and operations.Facilitate threat modeling and security design reviews for applications, APIs, integrations, cloud-native services, and AI-enabled capabilities.Perform secure code reviews and targeted manual security testing; reproduce vulnerabilities and provide actionable remediation guidance.Engineer, integrate, and continuously improve SAST, DAST, software composition analysis, secrets detection, and related controls in CI/CD workflows.Define and maintain secure coding standards, reusable security patterns, reference implementations, and developer guidance.Partner with Solution Architects, Security Architects, and platform teams to address authentication, authorization, data protection, cryptography, logging, and secure configuration.Triage technically complex application and dependency findings, validate exploitability, and advise on severity, business impact, and remediation options.Support development teams in correcting vulnerabilities and verify that fixes address root causes without introducing regressions.Coordinate application penetration tests and security assessments; translate findings into sustainable engineering improvements.Contribute application security evidence to product risk reviews, audits, and regulatory readiness, including expectations arising from the Cyber Resilience Act.Engineer security for desktop clients and hybrid desktop-to-cloud products, including secure update mechanisms, code signing, release integrity, and artifact provenance.Implement SBOM generation and dependency governance workflows that support software component visibility, vulnerability response, and regulatory readiness.Define and verify security requirements for engineering calculation, configuration, and specification workflows, protecting the integrity and correctness of customer outcomes and project data.Support security incident analysis where application behavior, source code, APIs, or software dependencies are involved.Support coordinated vulnerability disclosure and product security response by validating reported issues and helping define sustainable corrective actions.Establish and coach a network of security champions; deliver practical training and improve developer self-service capabilities.Track application security coverage, recurring weakness patterns, remediation performance, and effectiveness of preventive controls.Collaborate with cybersecurity, application security, architecture, DevSecOps, product teams, and enterprise security functions.

Required Qualifications

Bachelor's degree in Computer Science, Software Engineering, Cybersecurity, or a related field, or equivalent practical experience.Several years of hands-on experience in software engineering, application security, product security, or DevSecOps.Strong programming and scripting skills in at least one language commonly used in modern software development.Demonstrated experience with threat modeling, secure code review, and security testing of web applications and APIs.Practical knowledge of common vulnerability classes, including the OWASP Top 10, authentication and authorization flaws, injection, insecure design, and software supply chain risks.Experience integrating and tuning SAST, DAST, SCA, and secrets scanning tools within CI/CD pipelines.Understanding of cloud-native architectures, containers, identity, encryption, logging, and secure configuration.Ability to investigate findings, assess exploitability, and communicate technically precise remediation guidance.Strong collaboration and coaching skills, with the ability to influence engineering teams without direct authority.Strong written and verbal communication skills in English.High level of integrity, ownership, and commitment to protecting customers and software assets.Experience working with global teams.Ability to travel internationally when required for key workshops, assessments, or team collaboration.Ability to collaborate effectively across global time zones with teams distributed across multiple continents.

Preferred Qualifications

Experience securing AWS-based, SaaS, microservices, mobile, or desktop applications.Knowledge of NIST Secure Software Development Framework, secure-by-design principles, and risk-driven software assurance using OWASP ASVS and SAMM.Experience applying OWASP ASVS at a risk-appropriate assurance level rather than treating every control as universally mandatory.Experience with tools such as Burp Suite, OWASP ZAP, Semgrep, SonarQube, Snyk, Checkmarx, GitHub Advanced Security, or equivalent.Knowledge of API security, OAuth 2.0, OpenID Connect, JWT, secrets management, and software bill of materials practices.Experience applying security to AI-enabled applications and modern software supply chains.Relevant certifications such as CSSLP, GIAC GWEB/GWAPT, OSWE, or equivalent.Familiarity with engineering or technical software environments is advantageous.

GCS is acting as an Employment Agency in relation to this vacancy.

Read less

We are looking for a a Senior Cyber Security Engineer specialising in privileged access management, with CyberArk as the core platform. This is the senior tooling and identity specialist role in the Cyber Security team under our 2026 operating model: you own the design, deployment and health of the security tooling estate across our managed clients, with PAM as your deepest expertise.
Beyond CyberArk, the role carries breadth across the modern security stack: hands-on experience with Zscaler (ZIA/ZPA) and working capability across EDR, SIEM, vulnerability management and the wider cyber product set we operate for clients.
You will report to the Cyber Operations Lead and work closely with the SOC engineers, the Pre-sales Security Consultant and the Platform & Infrastructure teams.

Requirements

Key Responsibilities

CyberArk & privileged access managementOwn CyberArk design, deployment and operation across managed clients: vaulting, session management, secrets management and privileged threat analytics.Design PAM onboarding programmes for new clients: discovery, scoping, policy design and rollout.Integrate PAM with the wider identity stack: Entra ID, conditional access, MFA and just-in-time access patterns.Set privileged access standards and evidence them for client audits (ISO 27001, Cyber Essentials Plus).

Security tooling & engineering

Deploy, configure and maintain the security tooling estate: EDR, SIEM integrations, vulnerability scanning and email security.Support Zscaler (ZIA/ZPA) deployment and policy work alongside the zero trust leads.Own tooling health: version currency, coverage gaps, tuning quality and integration reliability.Automate deployment and operational tasks with scripts and APIs; contribute to the shared automation library.

Service & quality

Act as senior escalation for identity and tooling incidents; support major incident response.Document designs, runbooks and standards to a level the wider team can operate from.Contribute tooling and PAM expertise to service reviews and solution scoping when needed.Adopt AI-assisted workflows for diagnostics, configuration review and documentation.

Experience

5+ years in security engineering with 2+ years of hands-on CyberArk design and administration (PAM Self-Hosted or Privilege Cloud).Experience deploying or operating Zscaler (ZIA/ZPA) and at least two of: EDR platforms, SIEM, vulnerability management, email security.Strong scripting capability (PowerShell or Python) applied to security tooling automation and integration.MSP/MSSP or multi-client environment experience preferred; client audit exposure an advantage.

Certifications

Essential (or equivalent hands-on experience): CyberArk Defender certification; CyberArk Sentry strongly preferred.Desirable: CyberArk Guardian, Zscaler professional-level certification (ZIA/ZPA), Microsoft SC-300, SC-200, AZ-500, or EDR vendor certifications.

GCS is acting as an Employment Agency in relation to this vacancy.

Read less

Overall purpose of the job:

Reporting to the CNI Service Assurance and Orchestration Manager, the overall purpose of the role is to:

Support regulatory compliance within the scope of Operational Technology (OT) and Information Technology (IT) support services providedProvide specific guidance on the operational implementation of controls to support compliance against the following:ISO 27001 - Security ManagementCyber Assessment Framework (CAF)Network Information Systems (NIS)Center for Internet Security (CIS) BenchmarksIEC 62443

Key responsibilities for this job:

Governance

Define and maintain operational policies, standards, and procedures for compliance against OT and IT security frameworksProvide technical compliance guidance to project and engineering teams during new builds and ongoing operations.Support the handover and implementation of compliance processes, procedures and controls within operational engineering teams, as part of service implementation or transition

Risk Management

Identify, assess, and prioritise and compliance risks associated with new implementation projects and existing supported systems.Map compliance framework objectives to technical controls within the scope of supported assets under contract.Review and update controls based on regular assessment.

Compliance

Ensure adherence to regulatory frameworks (e.g., CAF, ISO, CIS, IEC 62443).Ensure adherence to customer contractual compliance obligations.Coordinate audits and manage compliance reporting.

Control Framework

Define technical compliance controls for projects and operational environments.Validate implementation of compliance controls during build phases and monitor effectiveness during support phases.

Monitoring & Reporting

Implement continuous monitoring processes for compliance and risk indicators.Provide regular customer aligned reports on compliance status.

Knowledge and experience required:

Active SC clearance or eligibilityStrong knowledge of regulatory standards and industry frameworks, including:Center for Internet Security (CIS) benchmarkingNetwork and Information Systems (NIS)National Cyber Security Centre (NCSC) Cyber Assessment Framework (CAF)ISO Standards - particularly ISO27001 (Information Security Management)IEC 62443 - especially risk management elementsExpertise in risk assessment methodologies and compliance management tools.Excellent communication and stakeholder engagement skills.Experience of implementation/governance of technical compliance regimes in an operational context - ideally within an OT environment

Working knowledge of some or all the following technology types:Server operating systemsNetworkingFire-wallingVirtualisationEndpoint devicesEncryptionAnti-virus and malwareVulnerability ManagementSecurity information and event management (SIEM)Intrusion Detection and Prevention systems (IDS and IPS)

GCS is acting as an Employment Agency in relation to this vacancy.

Read less