About the role
You will find and fix security risks across cloud and on-premises systems, run vulnerability management, and help clients prepare for the move to post-quantum (quantum-safe) cryptography.
What you will do
- Run vulnerability management: scanning, risk rating and remediation tracking
- Monitor cloud environments for misconfigurations and threats
- Deploy and tune security tools (EDR, SIEM, firewalls, scanners)
- Plan cryptography inventories and quantum-safe migrations for clients
- Support incident response and lessons learned
- Help keep clients compliant with ISO 27001, Cyber Essentials and UK GDPR
Minimum qualifications
- Bachelor's degree in Cyber Security, Computer Science or a related field, or equivalent practical experience
- 5+ years in security engineering
- Current CISSP, CCSP or GIAC (GSEC, GCIH or GCLD)
- Running vulnerability management with Nessus, Qualys or Defender
- Cloud security on AWS or Azure (AWS Security Specialty or AZ-500 certification)
- Work delivered to ISO 27001, NIST CSF or Cyber Essentials Plus
- Willing to pass BPSS screening
- English at CEFR C1 or above (IELTS 7.0 or equivalent)
Expert knowledge
- Applied cryptography: TLS 1.3, certificate chains, key management and HSMs
- Post-quantum migration: hybrid key exchange, crypto agility and cryptography inventories
- Risk-based vulnerability prioritisation with CVSS v4, EPSS and the CISA KEV catalogue
- Secure configuration baselines for Windows, Linux and cloud (CIS Benchmarks)
Preferred qualifications
- Knowledge of NIST post-quantum standards (FIPS 203, 204, 205)
- ISO 27001 Lead Implementer
- PKI and certificate lifecycle management
- Eligible for UK SC clearance
Before any offer we verify your certificates, qualifications, references and right to work in the UK. Security roles also need background screening (BPSS) and may need security clearance.
SOWTK is an equal opportunity employer. We welcome applicants of every background and do not discriminate on any characteristic protected by the Equality Act 2010.