Darkshield

Role Description We are seeking a Security Analyst to join our team and play a key role in threat detection, incident response, and security monitoring. The ideal candidate will have a strong analytical mindset, an understanding of cyber threats and attack techniques, and the ability to implement effective security controls to mitigate risks. This role involves proactively monitoring security events, investigating potential breaches, and supporting clients with vulnerability management and security best practices. Key Responsibilities - Threat Detection & Security Monitoring - Continuously monitor SIEM, IDS/IPS, firewalls, and endpoint security tools to identify suspicious activity. - Analyze and correlate security alerts to detect potential cyber threats and data breaches. - Perform log analysis and anomaly detection to identify patterns indicative of compromise. - Incident Response & Threat Investigation - Investigate security incidents, phishing attempts, malware infections, and unauthorized access events. - Develop and implement remediation strategies to mitigate security risks. - Conduct digital forensics and root cause analysis on security breaches. - Work closely with internal teams and clients to ensure swift containment and resolution of threats. - Vulnerability Management & Security Operations - Perform regular vulnerability scans and assessments, identifying security gaps and misconfigurations. - Recommend and implement security improvements based on assessment findings. - Optimize security configurations and policies across cloud and on-premise environments. - Assist in security patch management and tracking remediation efforts. - Security Policy & Awareness - Assist in the development and enforcement of security policies, procedures, and best practices. - Provide security awareness training to employees and clients to mitigate human-related risks. - Stay informed on emerging cyber threats, attack techniques, and security technologies. Qualifications - Experience in security monitoring, threat detection, or incident response. - Strong understanding of security tools including SIEM, IDS/IPS, firewalls, and endpoint security platforms. - Familiarity with log analysis, malware analysis, and digital forensics techniques. - Knowledge of threat intelligence platforms and cyber threat hunting techniques. - Experience with vulnerability assessment tools such as Nessus, Qualys, or OpenVAS. - Understanding of network security, cloud security, and endpoint protection. Requirements - Scripting & Automation (Preferred, Not Required) - Basic proficiency in Python, PowerShell, or Bash for security automation. - Ability to write scripts for log analysis, threat hunting, or security automation is a plus. - Certifications (Preferred, Not Required) - CompTIA Security+, CEH (Certified Ethical Hacker), GCIH (GIAC Certified Incident Handler), or similar certifications are desirable. - Soft Skills & Work Environment - Strong problem-solving skills and ability to think like an attacker. - Ability to work both independently and collaboratively within a security team. - Effective communication and reporting skills to convey security findings to technical and non-technical stakeholders. - Strong attention to detail with a methodical approach to security investigations. - A passion for learning and keeping up with the latest security threats and technologies. Benefits - Work on real-world cybersecurity threats and gain experience in high-impact security operations. - Opportunity to develop and implement security controls across various industries. - Career growth opportunities in a fast-growing cybersecurity agency. - Flexible work environment – remote and hybrid options available. - Competitive salary and performance-based incentives.

Role Description We are looking for an experienced Penetration Tester to join our team. You will conduct security assessments and ethical hacking activities to identify vulnerabilities in client systems. This role requires a deep understanding of attack techniques, security frameworks, and risk mitigation strategies. - Conduct penetration testing on networks, applications, and infrastructure. - Identify, analyse, and report security vulnerabilities. - Simulate cyberattacks to evaluate security defences. - Develop security testing methodologies and improve existing processes. - Collaborate with clients to provide security recommendations and mitigation strategies. - Stay up to date with the latest security threats, exploits, and hacking techniques. - Assist in security awareness training and red team exercises. - Provide clear and actionable reports to both technical and non-technical audiences. Qualifications - Proven experience in penetration testing and ethical hacking. - Proficiency in tools such as Burp Suite, Metasploit, Nmap, Wireshark, and Kali Linux. - Strong knowledge of web application, network, and infrastructure security. - Experience with scripting and automation using Python, Bash, or PowerShell. - Certifications such as OSCP, OSCE, CEH, or similar are highly desirable. - Understanding of regulatory compliance standards (ISO 27001, GDPR, NIST, etc.). - Excellent problem-solving skills and attention to detail. - Ability to communicate findings and recommendations effectively to clients. Benefits - Work with a passionate and expert cybersecurity team. - Engage in challenging and diverse projects. - Support for professional development, including training and certification assistance. - Flexible working arrangements, including remote options. - A collaborative and innovative work environment.

Role Description We are looking for a Cloud Security Engineer to join our growing team. This role involves designing, implementing, and managing security solutions across AWS, Azure, and Google Cloud. The ideal candidate will have a deep understanding of cloud security architectures, automation, and compliance frameworks. Key Responsibilities - Cloud Security Architecture & Implementation - Design and implement cloud security architectures across AWS, Azure, or Google Cloud. - Develop and enforce cloud security controls, including IAM policies, encryption, and network security. - Threat Monitoring & Incident Response - Monitor cloud environments for security threats, vulnerabilities, and misconfigurations. - Lead incident response efforts related to cloud security breaches and misconfigurations. - Implement SIEM and security monitoring tools for real-time threat detection. - Cloud Security Assessments & Compliance - Conduct cloud security assessments, penetration testing, and risk analysis. - Ensure compliance with ISO 27001, NIST, CIS Benchmarks, GDPR, and other security standards. - Collaborate with DevOps teams to integrate security into CI/CD pipelines. - Security Automation & Infrastructure as Code (IaC) - Automate security policies and compliance enforcement using Python, Terraform, Ansible, or CloudFormation. - Develop security automation scripts for vulnerability scanning and patch management. - Collaboration & Knowledge Sharing - Provide guidance and best practices to internal teams on cloud security. - Work closely with developers, DevOps, and compliance teams to align security requirements. Qualifications - At least three years of experience in cloud security engineering or a related role. - Hands-on expertise securing AWS, Azure, or Google Cloud platforms. - Strong knowledge of IAM, firewalls, WAFs, encryption, and security groups. - Experience with security automation using Python, Terraform, or CloudFormation. - Familiarity with container security (Kubernetes, Docker) and microservices security. Certifications (Preferred, Not Required) - AWS Certified Security – Specialty - Azure Security Engineer Associate (AZ-500) - Google Professional Cloud Security Engineer - CISSP, OSCP, CEH, or relevant security certifications are a plus. Soft Skills & Work Environment - Strong problem-solving skills and ability to think like an attacker. - Excellent communication and collaboration skills to work with cross-functional teams. - Ability to work independently and handle multiple projects in a fast-paced environment. Success Criteria (Performance Expectations) - Implement cloud security controls across at least one major cloud provider within the first three months. - Conduct at least two full cloud security assessments per quarter. - Develop automated security enforcement scripts that reduce vulnerabilities by 30 percent within the first six months. Benefits - Work on cutting-edge cybersecurity projects with top-tier clients. - Career growth opportunities in a fast-growing cybersecurity agency. - Flexible work environment – remote and hybrid options available. - Competitive salary and bonuses based on security impact and research.

Role Description We are looking for a skilled and motivated Cybersecurity Engineer to join our team. You will play a key role in designing, implementing, and maintaining security solutions that protect our clients from evolving threats. This role requires a strong technical background in cybersecurity, problem-solving skills, and the ability to work collaboratively with clients and internal teams. - Design, implement, and maintain security solutions to protect networks, applications, and data. - Conduct security assessments, penetration testing, and vulnerability management. - Monitor and respond to security incidents, ensuring swift mitigation and resolution. - Develop and enforce security policies, procedures, and best practices. - Perform security audits and risk assessments to identify potential vulnerabilities. - Work closely with clients to provide expert advice and tailored security solutions. - Keep up to date with emerging cyber threats, attack techniques, and security technologies. - Automate security processes and develop scripts/tools to enhance security operations. - Assist with compliance efforts, ensuring alignment with industry standards and regulations. Qualifications - Proven experience in cybersecurity engineering or a related field. - Strong understanding of network security, cryptography, and security frameworks. - Experience with penetration testing, vulnerability management, and incident response. - Familiarity with security tools such as SIEMs, IDS/IPS, firewalls, and endpoint security solutions. - Proficiency in scripting languages (e.g., Python, Bash, PowerShell) for security automation. - Knowledge of cloud security (AWS, Azure, or Google Cloud) is a plus. - Strong problem-solving and analytical skills. - Certifications such as CISSP, OSCP, CEH, or equivalent are desirable but not mandatory. - Excellent communication skills and the ability to work both independently and in a team environment. Benefits - Work with a passionate team dedicated to cybersecurity excellence. - Opportunity to work on a variety of challenging projects across different industries. - Support for professional development, including training and certification assistance. - Flexible working arrangements, including remote options. - A culture that values innovation, collaboration, and continuous learning.

Role Description We are looking for a Network Security Engineer to design, implement, and maintain robust security solutions that protect our clients' networks from cyber threats. - Design, implement, and maintain secure network architectures. - Monitor and respond to security threats across network infrastructure. - Conduct firewall configurations, VPN implementations, and intrusion prevention. - Perform security audits and risk assessments on network environments. Qualifications - Proven experience in network security engineering. - Strong understanding of networking protocols, firewalls, IDS/IPS, and VPN technologies. - Hands-on experience with security tools such as Cisco ASA, Palo Alto, Fortinet, and others. - Knowledge of cloud networking and security (AWS, Azure, or Google Cloud) is a plus. Company Description Darkshield is an expert cybersecurity agency based in York, UK. We help organisations navigate an increasingly complex digital landscape by providing expert services in penetration testing, vulnerability assessment, managed security, and more. Our mission is to protect businesses by delivering tailored, cutting-edge cybersecurity solutions that keep them resilient and ahead of cyber threats.