• Monitoring and investigating DLP alerts across Microsoft Purview, Zscaler and Mimecast
• Assessing alerts to identify genuine incidents, policy violations and false positives
• Escalating confirmed security incidents to Privacy and Cyber Security teams
• Investigating user activity, data classification and business context to determine risk
• Supporting the tuning and optimisation of DLP policies to improve detection accuracy
• Reducing alert noise and helping improve the maturity of the DLP capability
• Producing clear documentation and maintaining accurate audit trails
• Working closely with Security Operations, Privacy and Legal teams throughout investigations

• Microsoft Purview DLP
• Enterprise Data Loss Prevention technologies
• Security Operations or Cyber Security Analyst roles
• Incident investigation and alert triage
• Data classification and information protection
• GDPR and data protection principles
• Policy tuning and reducing false positives
• Working within regulated enterprise environments

• Zscaler
• Mimecast
• Insider Risk Management
• Microsoft Defender
• Financial Services or other regulated industries

• Initial 6-month contract
• Inside IR35
• Hybrid working – 2 days every two weeks in the London office

• Lead vulnerability management across enterprise network infrastructure.
• Identify, assess, prioritise and coordinate remediation of security vulnerabilities.
• Ensure network platforms remain compliant with security standards and policies.
• Drive remediation activities across multiple technical teams.
• Support internal and external audit requirements.
• Respond to emerging threats and security incidents.
• Improve automation and operational efficiency across vulnerability management processes.

• Cisco
• Palo Alto
• F5
• Qualys
• Skybox
• Tufin
• Ansible

• Strong experience managing vulnerabilities across enterprise network environments.
• Excellent understanding of vulnerability and risk management processes.
• Experience working with security and compliance frameworks including CIS and ISO 27001.
• Proven track record of reducing Critical and High-risk vulnerabilities.
• Experience improving patch compliance and remediation SLAs.
• Ability to drive automation and operational improvements.
• Strong stakeholder engagement and cross-functional coordination skills.

• Design secure, scalable and highly available enterprise network solutions.
• Provide technical leadership and governance across network projects.
• Translate business requirements into effective technical designs.
• Work collaboratively with internal teams, customers and suppliers.
• Support projects through design, implementation and delivery.
• Ensure solutions meet security, resilience and performance requirements.

• Extensive experience in enterprise network architecture, design and support.
• Expert knowledge of Cisco networking technologies.
• Experience with Juniper and F5 technologies.
• Strong understanding of network security principles and best practice.
• Experience delivering technical projects within high-availability environments.
• Excellent stakeholder management and communication skills.
• Strong planning, analytical and problem-solving abilities.
• Relevant networking certification (CCNP or above preferred).
• Eligible for UK Security Clearance.

• Design and deliver an enterprise-wide cyber education and engagement strategy focused on the secure use of Agentic AI.
• Engage directly with Software Engineers, DevOps Engineers, Technical Architects and Engineering Leaders to promote secure AI adoption.
• Partner with Cyber Security, Engineering and DevOps teams to define the secure behaviours expected when using AI-powered development tools.
• Translate complex cyber security concepts into practical guidance that resonates with highly technical engineering audiences.
• Develop and deliver a variety of engagement activities including:
  • Technical training sessions
  • Webinars
  • Engineering workshops
  • Tech community events
  • Video content
  • Written guidance and playbooks
  • Internal communications
• Build an 18-month engagement roadmap that supports the ongoing evolution of Agentic AI capabilities across the organisation.
• Gather feedback from engineering teams to continually improve security guidance and influence future security controls.
• Support the development of security principles, best practices and behavioural standards for AI-assisted software development.
• Act as the bridge between Engineering, DevOps and Cyber Security, ensuring security is embedded into engineering workflows rather than imposed upon them.

• Strong background in Software Engineering, DevOps or Platform Engineering.
• Experience working within Cyber Security, Application Security or Secure Software Development.
• Excellent understanding of modern software engineering practices and CI/CD environments.
• Experience working with AI-assisted software development tools or a strong understanding of Agentic AI and Large Language Models.
• Proven ability to communicate complex technical concepts to engineering audiences.
• Experience designing or delivering technical education, enablement or behavioural change programmes.
• Strong stakeholder management skills with the ability to influence senior engineers and technical leaders.

• Experience working within large global enterprises or regulated financial services environments.
• Knowledge of Secure by Design principles.
• Understanding of AI security risks including prompt injection, data leakage, model misuse and AI governance.
• Experience creating technical learning content, engineering playbooks or developer enablement programmes.
• Familiarity with modern engineering tooling and developer experience platforms.

#LI_DNI

• Monitor SIEM dashboards and security alerts relating to AI platform activity.
• Investigate and triage security events, escalating confirmed incidents where appropriate.
• Develop and fine-tune detection rules for AI-specific attack scenarios, including prompt injection and data exfiltration attempts.
• Review audit logs and produce regular security reporting and operational metrics.
• Support AI-focused incident response exercises and tabletop simulations.
• Maintain and enhance SOC playbooks and incident response runbooks for AI environments.
• Work closely with security engineering and threat detection teams to continually improve monitoring capabilities.

• 3+ years' experience within a Security Operations Centre or security monitoring environment.
• Strong hands-on experience with Splunk, Microsoft Sentinel or IBM QRadar.
• Excellent analytical, investigation and incident triage skills.
• Good understanding of the MITRE ATT&CK framework.
• Experience analysing API traffic and web-based security events.

#LI_DNI