Daintta are a rapidly growing, values-driven team of specialists who work with government clients across Cyber, Telecommunications and Data. We are seeking a talented and motivated CyberSecurity Technical Security Manager to join our team and contribute to our mission of protecting the UK through data-driven insights and solutions. As a technical Manager, you will be expected to demonstrate versatility as you work closely with our public sector clients, governmental departments and project teams. You will lead a team to design, document and support the build of secure networks or systems, helping solve some of the UK's most exciting cyber security challenges.
Responsibilities
-
Leading client engagements as a cyber security technical authority
- Developing, justifying and implementing organisational and system security management strategies that address risk and control requirements, ensuring a UK Gov't Secure by Design approach
- Selecting, understanding and adapting/adopting appropriate security control frameworks
- Identifying security risk business and stakeholder security requirements and proposing proportionate assessment, design and implementation of secure systems to meet the requirements
- Performing threat modelling and risk assessments to develop a holistic picture of threat
- Ensuring security principles are applied during solution planning, design, test, deployment and operations to reduce risk and ensure compliance, including:
- Developing secure solution designs to mitigate the risks posed by new technologies and business practices
- Leading third-party and supply chain security assessments, including vendor due diligence, secure procurement, software supply chain risk and ongoing assurance of externally sourced technology
- Applying identity-led and zero-trust security principles, including strong authentication, least privilege, contextual access control and segmentation of services, users and devices
- Defining and reviewing security assurance activities, including design assurance, verification, validation, vulnerability assessment, penetration testing inputs and interpretation of assurance evidence
- Developing and communicating corporate and domain information security policy, standards, guidelines and design guardrails
- Identifying and monitoring environmental and market trends and proactively assessing impact on business strategies, benefits and risks
- Assessing our client needs, understanding how these may differ from their wants, and appropriately managing stakeholder relationships
- Delivering high-quality work to agreed milestones and adapting quickly to unfamiliar client environments.
- Leading the client technical engagements, including pitches and presentations
- Helping to support & grow Daintta by actively inputting into the company strategy and helping to shape our future
- Representing us and our core values: Transparency, fairness and being daring.
Skills/Knowledge
-
You have 5+ years of practical experience in cyber security engineering, architecture, design and technical assurance, with evidence of applying that knowledge credibly in client-facing consulting engagements
- You have led technical client deliveries and teams across a range of cyber security related projects
- You have demonstrable working-level experience across several of the following domains: Security Architecture; Security Operations; Identity & Access Management; Cloud, Infrastructure and Platform Security; Network and Connectivity Security; Application Security and DevSecOps; Data Security and Privacy; Governance, Risk & Compliance.
- You have experience embedding security into agile, DevSecOps and iterative delivery models, including design reviews, security requirements management and pragmatic risk treatment in fast-moving projects
- You have experience aligning business requirements with security control standards and frameworks including: ISO27001, NIST, NCSC guidance and NCSC CAF, JSP 440 or others
- You have demonstrable continuous personal development, supported by relevant certifications and accreditations
- You have good interpersonal skills at both the business and technical level
- You have UK security clearance at SC or above or are eligible and willing to go through clearance
Desirable:
- You have experience working with security controls within cloud-based infrastructure (e.g. Azure, AWS, GCP). This may include design, configuration, or protective monitoring.
- Knowledge of digital identity and authentication systems
- Experience applying data classification, handling requirements, data residency and sovereignty considerations to solution design, particularly where sensitive, regulated or operationally critical data is involved
- Understanding of security risks and controls for AI-enabled systems, including data governance, access control, prompt injection, model misuse, third-party AI services and monitoring of sensitive data exposure
- Application and governance of fine-grained access control and permissions
- Experience in UK Gov't public sector or defence
Benefits
We believe in supporting our people both professionally and personally. Here's what you can expect when you join us:
Time Off
- 25 days annual leave, plus bank holidays
-
Up to 5 days annual training leave with a dedicated training budget
-
Up to 3 days annual volunteering leave - give back to the community
-
Competitive maternity, paternity, shared parental leave & compassionate leave
Health & Wellness
- Comprehensive Private Health Insurance
-
Employee Assistance Programme - 24/7 support services
-
£2,000 Flex Cash Allowance, paid pro-rata over the year
Financial Benefits
- 5% pension contribution
-
Discretionary company awards and bonuses, based on performance and company targets
-
Access to Electric Vehicle (EV) Salary Sacrifice scheme
Professional Development
- Up to £1,000 annual training budget (access to additional training and development budget via business case)
-
Up to 5 days annual training leave
-
1 professional membership paid annually
-
Up to £200 of additional IT budget for new joiners
Perks
- Free breakfast every Tuesday in the London office
-
Fortnightly drinks – in London
-
Regular social events, quizzes, and guest workshops
-
Huckletree perks – including gym and restaurant discounts
-
Employee referral programme
-
Monthly breakfast club in our Cheltenham office
Location?
Hybrid, with 2-3 days working from Daintta office (London/Cheltenham) or on client site as required
Security Informatio
Due to the nature of this position and our client engagements, you must be willing and eligible to achieve a minimum of SC clearance. To qualify, you must be a British Citizen and have resided in the UK for the last 5 years. For more information about clearance eligibility, please see https://www.gov.uk/government/organisations/united-kingdom-security-vetting (https://www.gov.uk/government/organisations/united-kingdom-security-vetting)