• Lead the development of the data privacy & AI governance framework
• Support a range of business departments to embed privacy by design and by default into initiatives
• Act as the appointed DPO for UK-based entities
• Appoint & coordinate with local country DPOs & local counsel to ensure a consistent & coherent approach to privacy across Europe
• Advise on personal data incidents
• Advise on DPIAs

• Qualified lawyer, with strong post-qualification experience in data privacy law - ideally combining both in-house exposure with high-quality private practice experience
• Excellent working knowledge of UK and EU GDPR, PECR & other related privacy regulations
• Proven experience working on privacy matters across multiple European jurisdictions
• Ability to work with senior stakeholders across a range of business functions (e.g. Technology, Security, HR, Marketing etc.)

• Konzeption und Implementierung leistungsfähiger Backend-Services auf Basis von Java und Spring Boot
• Entwicklung und Pflege von Schnittstellen sowie Datenbankanbindungen
• Arbeit mit relationalen Datenbanken, insbesondere Microsoft SQL Server
• Implementierung und Optimierung von Datenbankzugriffen mit Hibernate
• Mitarbeit an einer verteilten Monolith-Architektur (Distributed Monolith)
• Sicherstellung hoher Codequalität und moderner Entwicklungsstandards
• Enge Zusammenarbeit mit dem Entwicklungsteam bei der technischen Konzeption und Umsetzung neuer Features

• Mehrjährige praktische Erfahrung in der professionellen Java-Entwicklung
• Nachweisbare Projekterfahrung mit Spring Boot (Must-have)
• Sehr gute Kenntnisse in modernem Java und aktuellen Java-Versionen
• Fundierte Erfahrung mit Hibernate
• Gute Kenntnisse relationaler Datenbanken, insbesondere SQL Server
• Erfahrung mit komplexen Softwarearchitekturen, idealerweise im Umfeld einer Distributed-Monolith-Architektur
• Du hast bereits kontinuierlich in Deutschland gearbeitet und kennst die entsprechenden Projekt- und Arbeitsumfelder
• Gute Deutschkenntnisse sind von Vorteil

• Erfahrung mit Docker und Docker Compose
• Kenntnisse im Umgang mit Kubernetes
• Erfahrung mit modernen DevOps- und Deployment-Prozessen

• -100 % Homeoffice möglich
• Alternativ hybrides Arbeiten am Standort Karlsruhe
• Mitarbeit an eigenen Softwareprodukten und innovativen SaaS-Lösungen im Cybersecurity-Umfeld
• Anspruchsvolle technische Herausforderungen mit modernen Technologien
• Ein Umfeld, in dem du die Weiterentwicklung eigener Softwarelösungen aktiv mitgestalten kannst

• Role: Offensive Security Specialist
• Location: Bristol OR Belfast, 1 day per week (flexible)
• Salary: up to £60,000 basic + 10% bonus + certification sponsorship + excellent benefits

Do you want end-to-end ownership over Offensive Security for a market-leading, globally recognised and award-winning Law Firm?

This is an excellent opportunity to really own the projects you work on. We're looking for someone to proactively identify the areas they want to work on, and this firm will genuinely back you to pursue them. You'll be proactively hunting around their networks and identifying vulnerabilities, cracking passwords, testing the SOC team and building your own tooling from scratch.

What a day could look like:

• Executing penetration tests across networks, applications, infrastructure and cloud environments.
• Devising and developing the strategy and roadmap for pentests and general red team activities across the firm
• Conducting red team exercises and emulating real-world threat actor TTPs
• Developing custom scripts, tools and exploits for offensive security engagements.
• Identifying vulnerabilities across APIs, web applications, cloud platforms and enterprise systems.
• Producing technical reports and communicating findings to technical and business stakeholders.
• Collaborating with defensive teams to improve detection, response and security controls.

This is an incredible opportunity if you're looking for:

• End to end ownership over a super exciting function - your work dictates where this function is headed
• An excellent mentor and reporting line in the Head of Cyber
• Genuine flexibility - work on your own terms, just get the work done
• An amazing culture - I know multiple people in this team. They are all close and work together very well
• Investment into your development. They'll send you to conferences, speeches and sponsor any certification you're targeting

Key Requirements:

• Ideally 3+ years across Penetration Testing, Offensive Security or Red Team roles.
• A genuine passion for Offensive Security. You understand how things work, you build them - and you break them.
• A true "attackers mindset"
• Certifications like OSCP, CRTO, CRTP and any GIAC or CREST will be advantageous

I'm not looking for a long list of skills experience and projects, this isn't a massively senior role (still need hands-on experience) but I'm looking for someone that is genuinely passionate and excited by offensive security. This firm will develop, train and buy in to you - they're hiring the PERSON - is that person you?

Get in touch on j.walsh@lawrenceharvey.com for the specifics

• Build and lead a new Third-Party Security Monitoring function from the ground up
• Establish governance, KPIs and reporting around supplier security
• Identify gaps, drive remediation and improve supplier risk management
• Lead security monitoring transformation and work across Security, Risk, Legal & Procurement

• MUST have strong Third-Party Security Risk experience, ideally in a leadership role
• Strong experience building or transforming security assurance functions
• Preference for Financial Services experience, with other highly regulated industries considered
• Excellent knowledge of security controls, regulations and supplier risk
• Experience leading teams and large-scale security programmes
• Very strong stakeholder management and influencing skills

• Role: Security Engineer (DevSecOps)
• Location: London office 2-3 days per week
• Salary: up to £85,000 basic + benefits

Lawrence Harvey are partnered with a seriously exciting, rapidly growing digital trading platform that serve as the backbone for a multitude of high-profile financial services players. As part of a massive re-engineering project, they are searching for a Senior DevSecOps Engineer to work closely with the CISO, Platform Engineering and Development teams.

You'll be responsible for embedding security throughout the software development lifecycle, strengthening cloud and CI/CD security, and enabling engineering teams to build and deploy secure, scalable services. This is a hands-on engineering role where you'll design and implement security controls, automate security into development pipelines, and help shape the DevSecOps strategy across a modern cloud-native environment.

Key Responsibilities

• Embed security across CI/CD, cloud infrastructure and software development.
• Implement automated security controls, guardrails and testing across pipelines.
• Secure Azure, Kubernetes, containers and Infrastructure-as-Code environments.
• Integrate SAST, DAST, SCA, vulnerability scanning and secrets management.
• Partner with developers and platform engineers to identify and remediate vulnerabilities.
• Develop DevSecOps standards, tooling and automation.

Key Requirements

• Strong experience in DevSecOps, Cloud Security or Security Engineering.
• Hands-on expertise across Azure, Kubernetes, containers and Terraform/IaC.
• Strong understanding of CI/CD and DevOps practices.#
• Experience with application security and automated security tooling.
• Strong scripting/automation skills, ideally Python or PowerShell.
• Pragmatic approach to embedding security without impacting engineering velocity.

This is an incredible opportunity to join a high-growth financial technology business and play a key role in building security into its engineering lifecycle from the ground up

** candidates must be based in and have right to work in UK with no restrictions - No VISA sponsorship is on offer unfortunately **