Engineering better digital environments.

Help assess, harden and validate the systems that organisations depend on. The role spans identity, Microsoft 365, endpoints, networks and cloud environments, with a strong emphasis on evidence and safe implementation.

What you would contribute
• Review technical configurations and architecture.
• Translate observations into practical risk-reduction work.
• Implement agreed safeguards with change records and validation.
• Produce clear technical and executive-facing documentation.

We are looking for disciplined troubleshooting, sound security fundamentals, careful written communication and the judgement to distinguish verified evidence from assumption. Certifications may support an application but are not treated as a substitute for demonstrated capability.

Design and improve secure cloud foundations for business workloads. This role focuses on identity, network boundaries, logging, storage, secrets, configuration management and recoverability across modern cloud environments.

What you would contribute
• Review cloud accounts, subscriptions and workload architecture.
• Engineer guardrails using infrastructure as code and policy controls.
• Strengthen privileged access, logging and incident readiness.
• Work with application teams to make secure delivery practical.

We value hands-on cloud engineering, automation discipline, an understanding of shared responsibility and the ability to explain trade-offs without overstating certainty or provider capability.

Support the investigation and coordination of security signals across identity, email, endpoint, cloud and network sources. The role is designed around useful analysis and accountable escalation rather than alert volume alone.

What you would contribute
• Triage and enrich security alerts using available evidence.
• Maintain investigation records and escalation timelines.
• Help develop detection logic, response playbooks and exercises.
• Identify recurring control gaps and recommend improvements.

We are looking for analytical curiosity, calm communication, respect for evidence handling and a willingness to learn unfamiliar systems. Any shift or standby expectations will be disclosed and agreed before appointment.

Build dependable internal tools, security automation and future client-facing software using secure engineering practices. This is a software role with responsibility for maintainability, testing, observability and threat-aware design.

What you would contribute
• Design and implement maintainable application and automation components.
• Integrate security checks into development and deployment workflows.
• Review authentication, authorisation, data handling and failure modes.
• Document architecture decisions and meaningful test evidence.

We value strong programming fundamentals, thoughtful code review, practical testing and the ability to work across software and infrastructure boundaries. No completed VALCORYN product is implied by this vacancy.

Strengthen the infrastructure layer across networks, servers, secure remote access, segmentation, monitoring and recovery. This role includes practical work in client environments and requires careful coordination around production systems.

What you would contribute
• Assess network paths, administrative access and infrastructure configuration.
• Plan and implement segmentation, hardening and visibility improvements.
• Support secure server, backup and remote-access engineering.
• Troubleshoot complex issues without bypassing change or safety controls.

We are looking for broad infrastructure experience, methodical diagnostics, clear documentation and confidence working respectfully with client technology teams. Travel and site requirements will be discussed for each assignment.

Improve identity, email and collaboration security across Microsoft 365 environments. The role combines tenant assessment, careful configuration and clear guidance for administrators and business owners.

What you would contribute
• Review authentication, privileged roles and Conditional Access design.
• Assess Exchange Online, Teams, SharePoint and external-sharing controls.
• Support SPF, DKIM and DMARC implementation and investigation readiness.
• Document changes, exceptions and validation evidence.

We are looking for practical Microsoft 365 administration experience, strong identity fundamentals and the judgement to test changes without disrupting legitimate work. Current feature and licensing behaviour must always be verified against official documentation.

Connect technical evidence to clear risk decisions, accountable remediation and useful leadership reporting. This role supports assessments, control reviews and security improvement programmes.

What you would contribute
• Scope assessments and gather evidence through interviews and technical records.
• Describe findings in business language without losing the technical cause.
• Maintain risk, action and exception registers with clear ownership.
• Help validate completed work and prepare decision-focused reporting.

We value structured analysis, precise writing and the ability to distinguish verified facts, management statements and assumptions. Legal and regulatory interpretation remains with appropriately qualified advisers.

Help organisations prepare the decisions, evidence and recovery coordination required during cybersecurity incidents. The emphasis is readiness and authorised support rather than unsupported claims of forensic or emergency-response capability.

What you would contribute
• Develop practical incident plans, contact structures and scenario playbooks.
• Facilitate tabletop exercises and record improvement actions.
• Review logging, evidence availability and technical escalation paths.
• Connect response planning to restoration and business continuity priorities.

We are looking for calm facilitation, disciplined documentation and experience coordinating technical and business stakeholders. Any live-incident responsibility is defined separately through explicit scope and availability.

Develop practical security engineering capability through supervised assessment, hardening, documentation and validation work. This role is intended for an early-career technologist with strong fundamentals and a careful approach.

What you would contribute
• Collect and organise technical evidence under defined procedures.
• Support endpoint, identity, email and infrastructure reviews.
• Document configurations, changes and test results accurately.
• Build lab exercises and learn from peer review.

We value curiosity, ethical judgement, clear communication and evidence of hands-on learning. Formal qualifications can help but are not the only way to demonstrate potential.

Coordinate security engineering work so scope, access, dependencies, decisions and evidence remain visible. This is an operational role for someone comfortable working between clients, engineers and delivery records.

What you would contribute
• Maintain project plans, action registers and decision logs.
• Coordinate workshops, access requirements and delivery dependencies.
• Track evidence, review dates and client-facing documentation.
• Escalate ambiguity or blockers without hiding delivery risk.

We are looking for excellent organisation, concise written communication and respect for technical change control. The role supports engineering decisions; it does not replace accountable technical authority.

Work with software teams to identify and reduce security weaknesses across design, implementation and delivery. The role connects threat modelling, secure code review, testing and remediation guidance.

What you would contribute
• Review application architecture, trust boundaries and abuse cases.
• Examine authentication, authorisation, input handling and sensitive-data flows.
• Support secure code review and evidence-led remediation.
• Help teams adopt practical security checks within development workflows.

We are looking for strong software fundamentals, familiarity with common application-security failure modes and the ability to work constructively with engineers. Findings must be reproducible, proportionate and clearly documented.

Improve the security and dependability of software delivery platforms, build pipelines and infrastructure automation. This role treats the delivery system itself as production infrastructure requiring controlled access and observable change.

What you would contribute
• Review source-control, CI/CD and artifact-management security.
• Protect deployment identities, secrets and approval boundaries.
• Introduce useful code, dependency and configuration checks.
• Strengthen infrastructure-as-code review, testing and auditability.

We value practical automation, strong access-control thinking and experience balancing delivery speed with controlled change. Tools are selected for the engineering outcome they support, not for checklist coverage.

Develop and improve detection logic across identity, endpoint, cloud, email and network evidence. The role focuses on meaningful signals, investigation context and measurable detection quality.

What you would contribute
• Translate plausible attack paths into observable behaviours and data requirements.
• Build, test and tune detection logic using authorised evidence.
• Document assumptions, coverage limits and escalation guidance.
• Review false positives, missed signals and source-health problems.

We are looking for analytical depth, familiarity with logs and query languages, and the discipline to test detections rather than equating rule count with coverage.

Turn vulnerability and exposure data into prioritised, accountable improvement work. The role connects technical findings to asset importance, attack paths, operational constraints and validation.

What you would contribute
• Review scanner, configuration and asset evidence for quality and coverage.
• Prioritise remediation using exploitability, exposure and business consequence.
• Coordinate owners, exceptions, due dates and safe remediation windows.
• Validate that completed work removed or reduced the relevant exposure.

We value careful analysis, strong systems understanding and the ability to challenge both alarmism and complacency. A severity score is an input to judgement, not the final risk decision.

Design coherent security improvements across identity, cloud, infrastructure, applications and resilience. The role connects executive requirements to implementable technical patterns and decision-ready trade-offs.

What you would contribute
• Model current and target-state architecture, trust and dependencies.
• Define control patterns, integration requirements and managed exceptions.
• Guide engineering teams through sequencing and design decisions.
• Establish validation criteria and preserve architecture decisions.

We are looking for broad technical depth, clear visual and written communication, and the judgement to design within real operational constraints. Architecture must remain connected to implementation and evidence.