Job Search

Product Security Analyst - Vulnerability Management

Department

Software Technology

Reports to

Business Information Security Officer (BISO)

Role Summary

We are seeking a Product Security Analyst - Vulnerability Management to operate and continuously improve the vulnerability management lifecycle across software products, cloud environments, and supporting technology platforms.

The role consolidates security findings, validates and prioritizes exposure using technical and business context, coordinates accountable remediation, and provides reliable product security posture reporting.

The successful candidate is technically credible, analytical, and highly structured, working closely with product and engineering teams to reduce risk rather than merely administer findings. This is a product security and vulnerability management role, not a 24/7 SOC monitoring position.

Responsibilities

Operate the end-to-end vulnerability management process across applications, APIs, cloud services, infrastructure components, containers, and third-party dependencies.Consolidate findings from vulnerability scanners, penetration tests, application security tools, cloud security services, vendor advisories, and enterprise cybersecurity sources.Validate findings, remove duplicates and false positives, and enrich records with asset ownership, exposure, exploitability, and business context.Prioritize vulnerabilities using severity, known exploitation, reachability, internet exposure, compensating controls, product criticality, and customer impact.Assign accountable remediation owners, agree target dates, track progress, challenge overdue items, and verify closure evidence.Maintain an accurate inventory and mapping of covered products, repositories, services, and technical owners in coordination with Product, Architecture, and Platform teams.Develop and maintain vulnerability dashboards, heatmaps, KRIs, and aging metrics for security leadership, business leadership, product teams, and governance forums.Identify systemic weakness patterns and recommend preventive actions, platform improvements, secure configurations, and remediation campaigns.Support risk treatment and exception workflows by preparing evidence, documenting residual exposure, and escalating material or overdue risks.Coordinate operational follow-up from penetration tests, audits, incidents, external disclosures, and security advisories.Perform focused vulnerability assessments and technical validation using approved tools and methods.Monitor emerging vulnerabilities and threat intelligence relevant to the technology stack and initiate rapid assessment when urgent exposure is suspected.Use CISA Known Exploited Vulnerabilities and other verified threat intelligence as inputs to risk-based vulnerability prioritization.Use EPSS as one empirical exploitation likelihood signal alongside CVSS, reachability, exposure, product criticality, and customer impact.Support Cyber Resilience Act reporting readiness through rapid assessment of active exploitation, evidence collection, and escalation to security leadership.Maintain visibility of product versions, declared support periods, and end-of-support status to inform vulnerability treatment and customer obligations.Use SBOM and dependency data to determine which products, versions, and services contain affected components and accelerate impact assessment.Support security advisories, customer notifications, and coordinated vulnerability disclosure with Product Management, Legal, Quality, and Security stakeholders.Support audit, regulatory, and ISO 27001 evidence requirements related to vulnerability management and operational security controls.Collaborate with Application Security, DevSecOps, Platform Engineering, and Security teams on complex findings, scanning coverage, and automation.Continuously improve workflows, service levels, data quality, and reporting to drive measurable exposure reduction.

Required Qualifications

Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field, or equivalent practical experience.Several years of experience in vulnerability management, vulnerability analysis, security operations, cloud security, or a related technical cybersecurity role.Hands-on experience with vulnerability scanning and security posture tools across applications, cloud, or infrastructure environments.Strong understanding of CVE, CVSS, common vulnerability classes, exploitability, attack paths, and risk-based prioritization.Ability to validate findings using logs, configurations, source information, command-line tools, and targeted technical testing.Knowledge of cloud services, operating systems, networks, containers, identity and access management, APIs, and software dependencies.Experience managing remediation workflows, security exceptions, evidence, and service-level reporting.Strong data analysis skills and experience producing dashboards, metrics, and concise management reporting.Excellent analytical, organizational, and problem-solving skills with strong attention to data quality.Ability to communicate clearly with engineers, product owners, and senior stakeholders and drive accountable follow-through.Strong written and verbal communication skills in English.High level of integrity, judgment, and commitment to protecting customers and software assets.Ability to travel internationally when required for key workshops, assessments, or team collaboration.Ability to collaborate effectively across global time zones with teams distributed across multiple continents.

Preferred Qualifications

Experience with tools such as Tenable, Qualys, Rapid7, Wiz, Microsoft Defender for Cloud, AWS Security Hub, Snyk, SonarQube, or equivalent.Knowledge of CISA Known Exploited Vulnerabilities, EPSS, NIST guidance, CIS Benchmarks, and ISO 27001-aligned vulnerability management practices.Experience with scripting, APIs, workflow automation, and reporting tools such as Power BI.Familiarity with application security tooling and software development concepts sufficient to collaborate effectively with engineering teams.Experience supporting incident response, coordinated vulnerability disclosure, or penetration testing follow-up.Relevant certifications such as Security+, CySA+, GSEC, or equivalent.Familiarity with engineering or technical software environments is advantageous

GCS is acting as an Employment Agency in relation to this vacancy.

Read less

We are looking for Security Cleared Product Owner having strong epxerience with API integration environment. We are looking for either SC as Active or recently lasped.

Principal Accountabilities

Incorporate feature requests into a product roadmapReview and prioritise backlogDevelop user stories and define acceptance criteriaSet sprint goalsWrite acceptance testsPlan releases and upgradesFollow progress of work and address production issues during sprintsAnalyse preferences and requests of end usersRefine our agile methodology based on results and client feedbackKeep track of industry trends

Complexity, Planning And Time Spans

Management of own workload and time.Coordinating delivery datesTracking and monitoring of Development workReviewing, collating, maintaining and highlighting changes to agreed feature requestsIdentifying, assessing and reporting product risks and issues, engaging with internal and external contacts where necessaryMaintaining financial controls and systems for recording, monitoring, forecasting and budgeting development expenditure and resourcesOrganising and facilitating release closures, as well as ensuring release notes and user guides are available at releaseMaintaining and communicating product management standards and best practicesAssisting in the maintenance, reviewing, and improving of departmental and product management office policies and proceduresProducing weekly and monthly performance/status reports for the IT SLT and Stakeholders

Difficulties And Demands Of The Role

Balancing the changing demands of the businessEnsuring all elements of the product development are aligned to meet tight and demanding deadlines.Understanding and keeping on top of all the work that is going on across the business to ensure all work is aligned and doesn't' conflict.Strong organisation skills and management of time and information gathering skills.Clear understanding of the systems and a clear understanding of what needs to be delivered.

Typical Decisions Made By The Jobholder

How best to implement a request and what impact it has on delivery.How to prioritise and weigh demands of requests from business based on impact and urgency. When a serious issue will delay the product release significantly or increase costsWhere a major change in approach needs to be followed that will impact other teams working

GCS is acting as an Employment Business in relation to this vacancy.

Read less

Project Manager - Digital & Streaming Advertising

Looking for an experienced Project Manager to support the development and execution of custom advertising solutions across digital and streaming platforms.

The role sits withi an Ad Sales Creative Group, an award-winning team creating custom campaigns and marketing experiences for major brands. The Project Manager will be a key partner to creative, production, strategy, development, and commerce teams, helping bring projects from concept to delivery.

A major focus of this position will be supporting the ad product process.

What You'll Be Responsible For

Lead project coordination across multiple concurrent digital, streaming, and creative initiatives.

Manage project timelines from intake through final creative delivery.

Coordinate stakeholders across creative, production, development, commerce, and external partners.

Establish clear ownership, priorities, deadlines, and next steps.

Manage creative asset intake, distribution, tracking, and delivery.

Monitor project progress and adjust timelines as requirements evolve.

Identify risks and dependencies and work with stakeholders to resolve them.

Keep detailed project documentation and trackers current.

Help improve project workflows, processes, and operational consistency.

Serve as a dependable point of coordination in a fast-paced environment.

Proactively drive projects forward and ensure deliverables stay on track.

Qualifications

5+ years of project management experience in media, advertising, creative, marketing, production, or entertainment.

Strong experience managing multiple projects and stakeholders simultaneously.

Experience working with creative assets and post-production processes.

Excellent organizational, communication, and interpersonal skills.

Ability to manage competing priorities and tight deadlines.

Strong problem-solving and critical-thinking skills.

Ability to understand broader project objectives and translate them into actionable plans.

Collaborative and adaptable approach.

Bachelor's degree in Marketing, Communications, or related field.

GCS is acting as an Employment Business in relation to this vacancy.

Read less

Prefered candidate from public sector such as Home Office, Defra, FCDO, MOJ, MOD, Cabinet Office, Centeral Gov bodies. SC Active or recently lapsed would be preferred.

Principal Accountabilities

Incorporate feature requests into a product roadmapReview and prioritise backlogDevelop user stories and define acceptance criteriaSet sprint goalsWrite acceptance testsPlan releases and upgradesFollow progress of work and address production issues during sprintsAnalyse preferences and requests of end usersRefine our agile methodology based on results and client feedbackKeep track of industry trends

Complexity, Planning And Time Spans

Management of own workload and time.Coordinating delivery datesTracking and monitoring of Development workReviewing, collating, maintaining and highlighting changes to agreed feature requestsIdentifying, assessing and reporting product risks and issues, engaging with internal and external contacts where necessaryMaintaining financial controls and systems for recording, monitoring, forecasting and budgeting development expenditure and resourcesOrganising and facilitating release closures, as well as ensuring release notes and user guides are available at releaseMaintaining and communicating product management standards and best practicesAssisting in the maintenance, reviewing, and improving of departmental and product management office policies and proceduresProducing weekly and monthly performance/status reports for the IT SLT and Stakeholders

Difficulties And Demands Of The Role

Balancing the changing demands of the businessEnsuring all elements of the product development are aligned to meet tight and demanding deadlines.Understanding and keeping on top of all the work that is going on across the business to ensure all work is aligned and doesn't' conflict.Strong organisation skills and management of time and information gathering skills.Clear understanding of the systems and a clear understanding of what needs to be delivered.

Typical Decisions Made By The Jobholder

How best to implement a request and what impact it has on delivery.How to prioritise and weigh demands of requests from business based on impact and urgency. When a serious issue will delay the product release significantly or increase costsWhere a major change in approach needs to be followed that will impact other teams working

Facts And Figures

Detail the main variables against which the role will be measured. These variables can include sales targets, costs, profits, turnover, etc.

Success will be measured successful by continued product development completed on time and on budget.

Principal Measures

Quality of project and request completionDelivery of client agreed commitmentsUptake of IT developments within the business.Amount of Re-work IT Development that needs to be undertook.

GCS is acting as an Employment Business in relation to this vacancy.

Read less

Principal Accountabilities

Incorporate feature requests into a product roadmapReview and prioritise backlogDevelop user stories and define acceptance criteriaSet sprint goalsWrite acceptance testsPlan releases and upgradesFollow progress of work and address production issues during sprintsAnalyse preferences and requests of end usersRefine our agile methodology based on results and client feedbackKeep track of industry trends

Complexity, Planning And Time Spans

Management of own workload and time.Coordinating delivery datesTracking and monitoring of Development workReviewing, collating, maintaining and highlighting changes to agreed feature requestsIdentifying, assessing and reporting product risks and issues, engaging with internal and external contacts where necessaryMaintaining financial controls and systems for recording, monitoring, forecasting and budgeting development expenditure and resourcesOrganising and facilitating release closures, as well as ensuring release notes and user guides are available at releaseMaintaining and communicating product management standards and best practicesAssisting in the maintenance, reviewing, and improving of departmental and product management office policies and proceduresProducing weekly and monthly performance/status reports for the IT SLT and Stakeholders

Difficulties And Demands Of The Role

Balancing the changing demands of the businessEnsuring all elements of the product development are aligned to meet tight and demanding deadlines.Understanding and keeping on top of all the work that is going on across the business to ensure all work is aligned and doesn't' conflict.Strong organisation skills and management of time and information gathering skills.Clear understanding of the systems and a clear understanding of what needs to be delivered.

Typical Decisions Made By The Jobholder

How best to implement a request and what impact it has on delivery.How to prioritise and weigh demands of requests from business based on impact and urgency. When a serious issue will delay the product release significantly or increase costsWhere a major change in approach needs to be followed that will impact other teams working

Facts And Figures

Detail the main variables against which the role will be measured. These variables can include sales targets, costs, profits, turnover, etc.

Success will be measured successful by continued product development completed on time and on budget.

Principal Measures

Quality of project and request completionDelivery of client agreed commitmentsUptake of IT developments within the business.Amount of Re-work IT Development that needs to be undertook.

GCS is acting as an Employment Business in relation to this vacancy.

Read less

GCS is acting as an Employment Business in relation to this vacancy.

Read less

GCS is acting as an Employment Agency in relation to this vacancy.

Read less

Principal Accountabilities

Incorporate feature requests into a product roadmapReview and prioritise backlogDevelop user stories and define acceptance criteriaSet sprint goalsWrite acceptance testsPlan releases and upgradesFollow progress of work and address production issues during sprintsAnalyse preferences and requests of end usersRefine our agile methodology based on results and client feedbackKeep track of industry trends

Complexity, Planning And Time Spans

Management of own workload and time.Coordinating delivery datesTracking and monitoring of Development workReviewing, collating, maintaining and highlighting changes to agreed feature requestsIdentifying, assessing and reporting product risks and issues, engaging with internal and external contacts where necessaryMaintaining financial controls and systems for recording, monitoring, forecasting and budgeting development expenditure and resourcesOrganising and facilitating release closures, as well as ensuring release notes and user guides are available at releaseMaintaining and communicating product management standards and best practicesAssisting in the maintenance, reviewing, and improving of departmental and product management office policies and proceduresProducing weekly and monthly performance/status reports for the IT SLT and Stakeholders

Difficulties And Demands Of The Role

Balancing the changing demands of the businessEnsuring all elements of the product development are aligned to meet tight and demanding deadlines.Understanding and keeping on top of all the work that is going on across the business to ensure all work is aligned and doesn't' conflict.Strong organisation skills and management of time and information gathering skills.Clear understanding of the systems and a clear understanding of what needs to be delivered.

Typical Decisions Made By The Jobholder

How best to implement a request and what impact it has on delivery.How to prioritise and weigh demands of requests from business based on impact and urgency. When a serious issue will delay the product release significantly or increase costsWhere a major change in approach needs to be followed that will impact other teams working

Facts And Figures

Detail the main variables against which the role will be measured. These variables can include sales targets, costs, profits, turnover, etc.

Success will be measured successful by continued product development completed on time and on budget.

Principal Measures

Quality of project and request completionDelivery of client agreed commitmentsUptake of IT developments within the business.Amount of Re-work IT Development that needs to be undertook.

GCS is acting as an Employment Business in relation to this vacancy.

Read less

Technical Program Manager - Technology Integration & Transformation

We're seeking a senior Technical Program Manager to help drive a critical technology integration initiative within a Connected Living Engineering organization.

The team is working on the next phase of Commercial Business integration with a Connected Living Platform, creating an opportunity for a program leader who enjoys working through complex technology, organizational, and business challenges.

This is a highly visible role requiring someone who can connect the dots across multiple projects, technical teams, business stakeholders, and senior leadership.

Responsibilities

Lead large-scale technology programs from strategy through execution

Develop program roadmaps, business cases, milestones, and integrated delivery plans

Coordinate multiple projects and Project Managers within a larger enterprise program

Identify and manage cross-project dependencies, risks, resource constraints, and issues

Evaluate changes to scope, timing, budget, and priorities and recommend appropriate adjustments

Partner with engineering, IT, business teams, and leadership to maintain alignment

Provide clear program updates, risks, decisions, and recommendations to senior stakeholders

Track key milestones and overall program performance

Help identify opportunities where technology can support broader business goals

Ensure projects deliver on time, within budget, and according to business and technical requirements

Establish structure and governance across complex programs

Drive accountability across project teams and stakeholders

Ideal Background

10-15+ years of IT and/or business experience

5-8+ years managing technology projects

3+ years of leadership experience

Proven experience leading complex, multi-project programs

Strong understanding of enterprise IT environments and program management methodologies

Experience working with senior business and technology leaders

Excellent communication, organization, and stakeholder management skills

Bachelor's or Master's degree in Computer Science, Business, or related field, or equivalent experience

Project Management certification required

This is a great opportunity for a senior TPM who enjoys enterprise transformation, technology integration, and leading complex initiatives across organizational boundaries.

GCS is acting as an Employment Business in relation to this vacancy.

Read less

Databricks Data LeadRole Overview

We are seeking an experienced Databricks Data Lead to provide technical leadership in the design, development, and delivery of modern cloud-based data platforms using Databricks. The role will be responsible for establishing data engineering standards, leading technical delivery, and ensuring that data solutions are scalable, secure, reliable, and aligned with business objectives.

The Databricks Data Lead will work closely with data architects, data engineers, analysts, data scientists, business stakeholders, and cloud engineering teams to deliver enterprise data and analytics capabilities.

Key ResponsibilitiesLead the design and implementation of scalable enterprise data platforms using Databricks.Provide technical leadership across data engineering, data integration, data transformation, and analytics initiatives.Define and implement modern data architecture patterns using the Databricks Lakehouse architecture.Design and implement data pipelines using Apache Spark, PySpark, SQL, and Databricks.Establish standards and best practices for data ingestion, transformation, processing, storage, and consumption.Lead the development of batch and real-time/streaming data pipelines.Design and implement data lake and lakehouse solutions using technologies such as Delta Lake.Define approaches for data modelling, data partitioning, optimisation, and storage management.Lead the implementation of data governance, security, access control, data quality, lineage, and metadata management.Work with architects and engineering teams to establish appropriate integration patterns between Databricks and enterprise data sources and platforms.Drive performance optimisation and cost management across Databricks workloads.Establish development standards covering coding, testing, deployment, monitoring, and operational support.Implement and promote CI/CD and DevOps practices for data engineering solutions.Support Infrastructure as Code and automated deployment approaches where appropriate.Lead technical design reviews and provide guidance on complex data engineering challenges.Mentor and support data engineers, helping establish consistent engineering practices and technical standards.Work with delivery managers and product owners to translate business requirements into technical solutions.Estimate technical effort, identify dependencies and risks, and contribute to delivery planning.Troubleshoot and resolve complex data pipeline, performance, reliability, and integration issues.Produce and maintain technical documentation, architecture diagrams, design specifications, and engineering standards.Evaluate new Databricks capabilities and emerging data technologies and recommend opportunities for adoption.Required Skills and ExperienceSignificant experience in data engineering, data architecture, or cloud data platforms.Strong hands-on experience with Databricks and the Lakehouse architecture.Strong knowledge of Apache Spark, PySpark, and SQL.Experience designing and implementing enterprise-scale data pipelines.Strong understanding of Delta Lake and modern data lake/lakehouse architectures.Experience working with cloud platforms such as Azure, AWS, or Google Cloud Platform.Strong understanding of data warehousing, data lakes, data modelling, and data integration.Experience developing both batch and streaming data solutions.Strong understanding of data quality, governance, security, and access-control principles.Experience with source control, CI/CD, automated testing, and DevOps practices.Experience with data orchestration technologies such as Databricks Workflows, Apache Airflow, Azure Data Factory, or equivalent.Experience integrating data from relational databases, APIs, files, event streams, and enterprise applications.Strong programming experience in Python and/or Scala.Experience leading technical teams or providing technical leadership to data engineering teams.Strong problem-solving, communication, and stakeholder-management skills.Desirable SkillsExperience with Unity Catalog and Databricks governance capabilities.Experience with Delta Live Tables / Lakeflow Declarative Pipelines.Experience with Databricks SQL and SQL Warehouses.Experience with Structured Streaming and technologies such as Kafka.Experience with dbt or other modern data transformation frameworks.Experience with Terraform or other Infrastructure as Code technologies.Experience implementing data mesh or domain-oriented data architectures.Experience with data cataloguing, lineage, and data governance platforms.Experience with cloud-native services across Azure, AWS, or GCP.Experience with machine learning, AI, or advanced analytics platforms.Databricks or relevant cloud certifications.Leadership ResponsibilitiesSet technical direction and engineering standards for the data platform.Lead and mentor data engineers and provide technical guidance across delivery teams.Review technical designs and ensure alignment with enterprise architecture principles.Identify opportunities to improve platform scalability, reliability, performance, and cost efficiency.Promote engineering best practices, automation, reusable components, and standardised patterns.Act as a technical point of contact between engineering teams, architecture teams, and business stakeholders.Support recruitment, technical assessments, capability development, and knowledge sharing where required.Key CompetenciesDatabricks & Lakehouse ArchitectureApache Spark & PySparkData EngineeringData Architecture & ModellingDelta LakeCloud Data PlatformsData Governance & SecurityData Pipeline DesignPerformance & Cost OptimisationCI/CD & DevOpsTechnical LeadershipStakeholder ManagementMentoring & Team DevelopmentTypical Experience Level

7-12+ years of experience in data engineering, data architecture, analytics engineering, or related disciplines, including significant hands-on experience with Databricks and cloud-based data platforms.

A strong candidate should be capable of operating at both strategic and hands-on technical levels, providing architectural direction while remaining close enough to the engineering detail to guide implementation and resolve complex technical challenges.

GCS is acting as an Employment Business in relation to this vacancy.

Read less