Vetted on a call by a Wave consultant, not scraped. Up to £90,000.
Secure-by-default Terraform modules are the thing they keep coming back to. Hardening multi-account AWS estates with Control Tower and service control policies, embedding Checkov, Trivy and SAST into pipelines so developers ship safely without security becoming the bottleneck, and running EKS with RBAC and network policies. Nine years of it across a European airline, a UK high-street bank under PCI DSS and a central government department.
Looking forContracting at the moment and wants permanent, and was refreshingly blunt about why. Mortgages are hard to get as a contractor and they want to move up the property ladder. Fully remote is the requirement, with travel once a month if it's covered.
How they came acrossNo complaints about the work itself, which makes this a straightforward hire rather than a rescue. Practical, and happy to travel to Nottingham or London occasionally if the business pays for it.
AWS, Azure, Terraform, Control Tower, SCPs · Kubernetes, EKS, Docker, Trivy, Checkov · GuardDuty, Security Hub, Splunk, Microsoft Sentinel
Cloud and platform security at a UK central government department, a UK high-street bank and a European low-cost airline. 3 employers, average stint 3 years 2 months.
Fully remote is the line, with monthly travel the only flex. The current contract was due to end in mid-July 2026, so check where they are now.
Masters in finance, with the whole technical career built on certifications rather than a computing degree.
Second security hire at a business banking app for small firms, which later became part of a banking group of more than 60,000 people, and they built the application security function from nothing to a 5-person team. Securing the software lifecycle at scale is the specialism, done through automation in Python and Terraform rather than through policy documents. Snyk, Bugcrowd and Synack for the programme side, RASP and 3DS on the mobile and payments side, and a research interest in AI and machine learning security threats.
Looking forBuilt the current security processes to maturity and wants to do it again somewhere newer. Remote-first, tech-oriented, mid-stage. Says explicitly they don't want a large enterprise or a very mature institution.
How they came acrossDescribes the goal as building security "the right way", and the detail behind that phrase held up when we pushed on it. Enjoys being the generalist who covers everything rather than one narrow lane.
Python, Terraform, GitOps · Snyk, Bugcrowd, Synack, Promon RASP · Java, PHP, React, Node.js, cryptography, threat modelling
Software engineering at a global travel platform, security consulting at a Finnish cyber security firm, then application security at a business banking app and now an AI infrastructure company. 6 employers, average stint 2 years 2 months.
2 or more days a week on site is a stated deal-breaker, as is a large enterprise environment. The file shows a move since we last spoke in February 2026, so confirm the current position.
Degree in computer science with industrial experience from a Russell Group university.
Hands-on security operations at a UK bank. Vulnerability management, SIEM detection rules written in KQL against Microsoft Sentinel, Kubernetes security detection tooling with Sysdig, and Snyk wired into CI/CD. Two and a half years before that as an internal security consultant at a global shipping and logistics group, and they write the incident response runbooks as well as running them.
Looking forWants to widen out past hands-on engineering into governance and compliance, which they are open about not having yet. Started looking properly a few months ago and is targeting £70,000 upwards.
How they came acrossCurious, and candid about the gaps rather than talking around them. Manages an outsourced SOC and coordinates third-party pen tests, so they can hold a supplier relationship without escalating everything.
Microsoft Sentinel, KQL, Defender, Qualys · Sysdig, Kubernetes, Snyk · Entra ID, Conditional Access · Python, Linux, CI/CD
3 employers over 6 years, from air traffic engineering into security at a global logistics group and then a UK bank. Average tenure 2 years 1 month, longest stint 2 years 8 months.
Limited GRC and compliance exposure, which our own recruiter flagged as a risk for generalist roles. Currently 2 days a week in the City and our notes are from February.
Bachelors in computer science.
Tell me which came closest and I recalibrate, then come back with 10 to 15 more inside 24 hours.
Show me the wider bank