**Permanent role**

£80k to £130k per annum

**Hybrid home/office model**

Sponsorship - NOT AVAILABLE

The company

A global investment management firm.

The role

You will play an integral role ensuring that the security strategy and security architecture are integrated effectively into the wider Enterprise Architecture domains.

The responsibilities

• Maintain and support Azure Active Directory in a hybrid cloud/on-premise environment

• Build, administer, and/or support enterprise IAM systems and solutions for privileged access management (PAM) and identity governance and administration (IGA).

• Support of access management services, such as single sign-on (SSO), multi-factor authentication (MFA), and self-service password reset (SSPR).

Essential experience

• 7-10 years of relevant experience

• IAM solutions and processes

• Privilege Identity Management

• Scripting (Powershell)

• Active Directory

Desirable experience

• Azure Active Directory

McGregor Boyall is an equal opportunity employer and do not discriminate on any grounds.

**Permanent role**

£90k to £140k per annum

**Hybrid home/office model**

Sponsorship - NOT AVAILABLE

The company

A Global Investment Management Firm

The role

As an Enterprise Security Architect, you will play an integral role in ensuring that the Security Strategy and security Architecture are integrated effectively into the wider Enterprise Architecture domains, with strong focus on end-to-end secure application development lifecycle, and DevSecOps practice.

The responsibilities

• Advance practices in application management, cloud management policies and standards security domains

• Develop secure coding/software development standards, patterns and “shift left” best practice, enable DevSecOps practice, and serve as technical security advisor to value stream teams to ensure secure coding practice and security related non-functional requirement are met.

• As part of architectural governance process, review security technologies, tools and services, and makes recommendations to the broader security team for their use, based on security, financial and operational metrics

Essential experience

• 8-12 years relevant experience

• Public Cloud (AWS/Azure)

• Certified in TOGAF

• CI/CD Pipeline exerience

Desirable experience

• Longevity in a permanent position

• Full-stack knowledge of IT systems

McGregor Boyall is an equal opportunity employer and do not discriminate on any grounds.

**Permanent role**

£65k to £75k per annum

**Hybrid home/office model**

Candidates must be permanent residents in the UK with at least 5 years history

The company

A leading UK based Legal Practice

The role

The mission is to establish a risk-managed environment that enables the firm to adequately and reasonably protect the confidentiality, integrity and availability of information used by the business and on behalf of clients.

The focus is on technical operational security and developing actionable information security and risk policies, processes, standards, plans, guidelines, controls, and frameworks to ensure people, processes and technology architectures within the enterprise are consistent, usable, and risk-managed.

The responsibilities

• Configure and optimise security and threat detection products and services providing DLP, SIEM, advanced email protection, EDR, antivirus, cloud security products, intrusion detection/prevention systems, and other industry standard security technologies.

• Proactively identify vulnerabilities through scans and assessment reports, penetration tests, targeted network traffic analysis and other methodologies

• Plan and recommend changes to increase the security of the network, computer hardware and operating systems, business and peripheral applications.

Essential experience

• Network Security experience
• Experience working in a past paced Information Security/Cyber Security environment
• Knowledge of SIEM, EDR, Trustwave, Vulnerability Management, Firewalls, and industry standard security tools.

Desirable experience

• Experience working in a Legal/Insurance company

McGregor Boyall is an equal opportunity employer and do not discriminate on any grounds.

**Permanent role**

£90k to £95k per annum

**Hybrid home/office model**

Sponsorship - NOT AVAILABLE

The company

A global foreign exchange service.

The role

Reporting to the Engineering Manager, you would be required to engineer and re-engineer the latest technologies including but not limited to, the evolution of the Desktop Transformation; complementing the London IT Engineering team, bringing subject matter expertise in several areas.

You would be responsible for the specific technical design, build and deployment of both new solutions and enhancements to existing solutions.

When asked to do so, you would represent the Engineering team and speak with authority, providing the necessary expertise to technically drive the project though the full lifecycle, from the initial concept, design, implementation and the handover into production support.

The responsibilities

• Provide third level support, where required, to assist the Infrastructure Service Operations teams with the investigation, escalation and resolution of technical Infrastructure issues that cannot be resolved by the team.

• Working with third parties, where relevant, to assist in their deployment of new services.

• Provide third level support, where required, to assist the second level Service Operations support team.

Essential experience

• Creation of technical governance documentation, such as Solution Outline and High Level Design as well as authoring Low Level Designs

• Exchange On Premise/Microsoft 365

• Strong understanding of designing to meet security principles and compliance

• Strong Understanding and appreciation of working on business-critical production infrastructure, applications and database services

Desirable experience

• Experience of working in a network heavily segregated by firewalls

• Understanding of building a product that will result in zero findings on a penetration test

• Demonstrate good problem management ownership and prevention of SLA breach under Incident/Problem Management processes

McGregor Boyall is an equal opportunity employer and do not discriminate on any grounds.

**Permanent role**

Up to £110k per annum

**Hybrid home/office model**

Sponsorship - NOT AVAILABLE

The company

A growing Digital Fintech Enterprise who's leading the way in the UK.

The role

As an application security architect, you will perform application security reviews to identify application design flaws; Provide hands-on technical security guidance to protect our products from known and emerging threats, vulnerabilities, and intrusion attacks

The responsibilities

• Define and evolve application security architecture and patterns based on enterprise reference architecture and threat landscape

• Integrate static and dynamic vulnerability checks for applications, open-source libraries, container registries, Kubernetes runtime workloads and APIs

• Define/Maintain guidelines, standards, and baselines for application security and secure deployments

Essential experience

• Either mobile, Front-End, or Back-End Application Security Experience

• Stakeholder Management Experience

• Experience in Threat Modelling and Risk Assessments

• Strong API Security Experience

Desirable experience

• Experience with AWS

• Relevanbt Security Certifications (SANS, CASE, OWASP, etc)

McGregor Boyall is an equal opportunity employer and do not discriminate on any grounds.

**Permanent role**

£70k to £80k per annum

**Hybrid home/office model**

Sponsorship - NOT AVAILABLE

The company

A global foreign exchange service.

The role

As part of the IT Security team, develop and implement the firm's IT Strategy in consultation with the IT teams, ensuring that all initiatives are mirrored in respective strategies including the overall Strategy

Provide security advice and support for information technology projects

Research new security related products and services to ensure that the firm is equipped with appropriate industry best tools and solutions

The responsibilities

• Responding to control failures, working internally with SecOps, stakeholder engaging to course correct incidents.

• Operate and maintain controls related to SIEM, DLP, Vulnerability Management, DLP, Cyber Threat Intelligence, Endpoint Protection, etc with an emphasis on cloud deployments and implementations.

Essential experience

• 5+ years of industry experience

• Someone who has got their hands dirty in cyber

• VM, SOC, IR, DLP experience

Desirable experience

• Architecture background a plus

• Broad security experience will stand out to them.

• Communication is key

McGregor Boyall is an equal opportunity employer and do not discriminate on any grounds.

**Permanent role**

£85 - £95k per annum

**Hybrid home/office model**

Sponsorship - NOT AVAILABLE

The company

A global metal trading firm.

The role

The Cyber Offence Team Lead runs a team that focus on offensive cyber security services whilst working closely with peers within the Information Security function and stakeholders across the wider group. The function will focus on offensive security (Red Team, Penetration Testing, Bug Bounty) but will also support defensive cyber security capabilities where needed by working with the Cyber Defense Lead.

The responsibilities

• Manage offensive security assessments and penetration testing against the firm's systems and infrastructure; Including red team testing, penetration testing, breach and attack simulation, bug bounty, and purple team testing.

• Support security incidents and act as stretch capacity for incident response and threat handling; Including on-call activity for major incidents.

• Optimise detection and response rules; Support the testing and recertify SIEM rules against threat models and detection frameworks

Essential experience

• Direct experience on penetration testing, red-team exercise and compromise assessment.

• Experience scoping penetration tests and other security assessments.

• Scripting and automation tools.

• Stakeholder Management.

Desirable experience

• Relevant security certifications such as GPEN, CEH, OWASP, etc.

• Working knowledge of the exchange industry and technologies is of benefit

McGregor Boyall is an equal opportunity employer and do not discriminate on any grounds.

**Contract Role**

£700pd Inside IR 35

**Hybrid home/office model**

The company

A global metal trading firm.

The role

You will be woring within the Threat Detection & Response Team and will be working closely with peers within the Information Security function and stakeholders across the wider group. The role will focus on offensive security (Red Team, Penetration Testing, Bug Bounty) or defensive security (SOC, DFIR, Threat Hunting, Detection Engineering) where needed by working directly with the respective Cyber Offense/Defense Lead.

The responsibilities

• Participate in defensive security operations (threat hunting, incident handling, investigation and forensics, detection engineering) for the firm's systems and infrastructure; Support offensive assessments (red team, penetration testing, breach and attack simulation, bug bounty)

• Participate in Red/Blue Team testing, identify gaps/weaknesses in monitoring capabilities and recommend/implement changes

• Optimise detection and response rules; Support the testing and recertify SIEM rules against threat models and detection frameworks

Essential experience

• Significant relevant experience in IT security, preferably within Security Testing or Operations roles.

• Relevant experience of cyber threat analytics, and offensive and defensive security.

• Scripting/coding languages such as Python, Golang and Bash.

• Stakeholder Management

Desirable experience

• Relevant security certifications such as GPEN, CEH, OWASP, etc.

• Working knowledge of the exchange industry and technologies is of benefit

McGregor Boyall is an equal opportunity employer and do not discriminate on any grounds.