Contract OUTSIDE IR35

6 days ago

England, United Kingdom Vallum Associates Full time

We are looking for an experienced Attack Surface Management (ASM) Consultant to lead efforts in identifying, monitoring, and reducing the organization's digital attack surface. In this role, you will assess the exposure of assets, evaluate potential vulnerabilities, and work with cross-functional teams to implement risk mitigation strategies. You will leverage ASM tools, threat intelligence, and manual assessments to provide a comprehensive view of the organization's attack surface, ensuring ongoing protection against emerging threats.

This position requires a strong understanding of cybersecurity principles, extensive experience with ASM tools, and the ability to assess and communicate security risks effectively.


Key Responsibilities

  • Attack Surface Analysis and Assessment
  • Conduct regular assessments of the organization’s attack surface, including network, cloud, and application assets.
  • Utilize ASM tools (e.g., RiskIQ, Expanse, CyCognito) and threat intelligence to identify internet-facing assets and assess their exposure to potential threats.
  • Perform continuous asset discovery to identify shadow IT, misconfigured services, and third-party risks.
  • Map and document all exposed assets, ensuring an accurate inventory of the digital footprint across the organization.
  • Risk Evaluation and Mitigation
  • Evaluate the security posture of identified assets and prioritize risks based on potential impact and likelihood of exploitation.
  • Work closely with IT, DevOps, and Security Operations teams to address high-risk exposures through configuration changes, access controls, or network segmentation.
  • Provide recommendations for securing exposed assets, reducing the attack surface, and mitigating identified vulnerabilities.
  • Ensure asset owners are aware of ASM findings and provide actionable guidance for risk mitigation.
  • Monitoring and Threat Intelligence Integration
  • Continuously monitor the attack surface for changes and newly discovered assets.
  • Integrate threat intelligence to identify and assess the relevance of emerging threats to the organization’s digital assets.
  • Stay current on new attack techniques, tools, and threat actor activities that could impact the organization’s attack surface.
  • Establish alerting and response protocols for identified high-risk exposures.
  • Reporting and Communication
  • Develop and deliver clear, actionable reports on attack surface findings, risk assessments, and remediation progress.
  • Communicate risks and recommendations effectively to technical and non-technical stakeholders, including executive leadership.
  • Create metrics and dashboards to provide visibility into the organization’s attack surface and ASM program effectiveness.
  • Security Program Development and Continuous Improvement
  • Assist in the development and enhancement of the Attack Surface Management program, including setting standards for asset discovery and risk management.
  • Develop processes and workflows to automate attack surface discovery, monitoring, and assessment.
  • Provide training and awareness sessions to teams on reducing the attack surface and mitigating risks.
  • Identify opportunities to enhance security policies and procedures based on ASM findings and emerging best practices.


Required Qualifications

  • Education: Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field. Equivalent experience may be considered.
  • Experience:
  • Minimum of [3-5] years of experience in cybersecurity, with a focus on Attack Surface Management, Threat Intelligence, Vulnerability Management, or related fields.
  • Hands-on experience with ASM tools (e.g., RiskIQ, Expanse, CyCognito) and asset discovery methodologies.
  • Familiarity with vulnerability management processes and tools, along with an understanding of network and cloud security principles.
  • Experience working in large-scale enterprise environments, including cloud (AWS, Azure, GCP) and hybrid infrastructures.
  • Certifications (preferred): CISSP, CISM, OSCP, CEH, CompTIA CySA+, or relevant security certifications.

  • SOC Lead

    5 months ago

    England, United Kingdom La Fosse Associates Full time

    **Location**: - England - **Disciplines**: - Change and Transformation Information Security - **Job types**: - Contract - **Salary**: €700 - €800 per day **Functions**: - Cyber Security Project Manager Project Manager Security - **Seniority**: - Senior - **Technologies**: - Angular - **Job reference**: BBBH96624_1699380822 Security Operations...

  • Rail Project Manager

    1 week ago

    England, United Kingdom Carrington West Full time

    Are you a Project Manager with a strong understanding of NEC contracts?Are you looking for your next Outside ir35 contract?Location: Crewe - ChesterRate: DOE (Outside ir35)Duration: 2 Months fixedThis is a short term contract to work on an infrastructure project out of Crewe and Cheshire.Due to the nature of the role only candidates with experience working...

  • Scheme Manager

    4 weeks ago

    England, United Kingdom Carrington West Full time

    Schemes Manager required for Outside IR35 contract, leading a public realm improvement project in Surrey. This long-term opportunity focuses on delivering a range of schemes, including highways and transport enhancements, to improve the local infrastructure. Oversee multiple schemes, managing planning, delivery, and stakeholder engagement. ·Manage...

  • Production Engineer

    4 weeks ago

    England, United Kingdom Premier Engineering Full time €35 - €40

    Job: Production Engineer Location: Sheffield IR35: Outside Hybrid: Mainly on site, approx. 10% remote Length: 6 months+ Rate: £35-40ph An exciting outside IR35 contract opportunity for a Production Engineer working for an innovative manufacturing company. Required skills: +5 years work as Production Engineer / NPI Engineer / Continuous Improvement...

  • Electronics Engineer

    4 weeks ago

    England, United Kingdom Vantage Consulting Full time

    Job Title: Electronics Engineer (Contract) Location: On-site (3 days/week) Contract Duration: 6 months IR35 Status: Outside IR35 Industry: Automotive / Emergency Service Vehicles Project: Infotainment Systems Role Summary: We are seeking an Electronics Engineer for a 6-month contract to work on infotainment systems for emergency service vehicles. The role...

  • Contract Performance Manager

    2 months ago

    England, United Kingdom Arguile Search Full time

    Job Title: Contract Performance ManagerContract Type: Outside IR35Location: Hybrid (just outside of London)Contract Length: 18-Month Day Rate ContractOverview:Our client is undergoing significant transformation programmes and is seeking an experienced Contract Performance Manager with Security Clearance to support the delivery of key performance metrics and...

  • Contract Performance Manager

    2 months ago

    England, United Kingdom Arguile Search Full time

    Job Title: Contract Performance ManagerContract Type: Outside IR35Location: Hybrid (just outside of London)Contract Length: 18-Month Day Rate ContractOverview:Our client is undergoing significant transformation programmes and is seeking an experienced Contract Performance Manager with Security Clearance to support the delivery of key performance metrics and...

  • Commercial Contracts Manager

    3 weeks ago

    england, United Kingdom Arguile Search Full time

    Job Title: Commercial Contracts Manager Contract Type: Outside IR35 Duration: 18 Months Location: Hybrid (1 day a week M3/M4 Corridor) Security Clearance Highly Preferable Job Overview: We are seeking a skilled Commercial Contracts Manager to oversee the day-to-day delivery and management of contracts, focusing on large NEC contracts and programmes....

  • PLC Software Engineer

    3 weeks ago

    England, United Kingdom KO2 Embedded Recruitment Solutions Ltd Full time €60

    Contract Opportunity- PLC Software Engineer with Modbus experience Rate: Up to £60 per hour, outside IR35 Sheffield - 1-2 days per week onsite KO2's client is seeking an experienced PLC Software Engineer with Modbus expertise for a 4-week contract. The role involves conducting an engineering review of Modbus code to resolve existing field issues. As a...

  • Project Quantity surveyor

    4 weeks ago

    England, United Kingdom Fawkes & Reece London Full time

    Currently searching Project Quantity Surveyor for a major highways maintenance project in Hertfordshire. The project involves a diverse scope of works including earthworks, surfacing, and drainage. This is a fantastic opportunity to contribute to a high-profile infrastructure project while benefiting from a flexible, hybrid working arrangement. The role is...

  • Schemes Manager

    4 weeks ago

    England, United Kingdom Carrington West Full time

    Schemes Manager required for Outside IR35 contract, leading a public realm improvement project in Surrey. This long-term opportunity focuses on delivering a range of schemes, including highways and transport enhancements, to improve the local infrastructure. Key Responsibilities: Oversee multiple schemes, managing planning, delivery, and stakeholder...

  • Contract Systems Engineer

    4 weeks ago

    England, United Kingdom Redline Group Ltd Full time

    Redline has a fantastic hybrid opportunity for a Contract Systems Engineer based in Herefordshire to join an ever-growing company that is making huge waves within their industry. This role has an indicative OUTSIDE IR35 determination therefore we can accept candidates who would like to operate through their own PSC. Involved in some of the most...

  • Contract Test Engineer

    4 weeks ago

    England, United Kingdom Redline Group Ltd Full time

    Long-Term Contract Test Engineer - Electronics opportunity with a world-leader in mission-critical systems at their Berkshire offices. This role has an indicative OUTSIDE IR35 determination therefore we can accept candidates who would like to operate through their own PSC. With a significant presence in the electronics industry, our customer designs,...

  • GRC Analyst

    4 weeks ago

    England, United Kingdom Michael Page Full time €350 - €450

    This is an exciting opportunity to join a market leading manufacturer based in Gloucestershire as a GRC Analyst on an initial 3 month contract. This role is inside IR35 and will require a presence on-site 1-2 days per week. Client Details My client is a market leading manufacturer, due to continued growth and an evolving regulatory landscape they require...

  • Contract Performance Specialist

    4 weeks ago

    Eastern England, United Kingdom Arguile Search Full time

    Job Title: Contract Performance ManagerContract Type: Outside IR35Location: Hybrid (just outside of London)Contract Length: 18-Month Day Rate ContractOverview:Arguile Search is seeking an experienced Contract Performance Manager with Security Clearance to support the delivery of key performance metrics and improve supplier performance. This role will focus...

  • Contract Quality Inspector

    1 week ago

    England, United Kingdom Redline Group Ltd Full time

    Would you like the opportunity to play a pivotal role in ensuring the highest quality of standards and precision throughout a ground-breaking project, for our esteemed client, a global leader in bespoke machinery manufacturing?The Redline Group are looking for a highly-skilled Contract Quality Inspector, to join a close-knit, amiable team situated in...

  • Technical Consultant

    4 weeks ago

    England, United Kingdom iO Associates - UKEU Full time

    SC or DV Cleared Technical Consultant - OUTSIDE IR35 - 12 Month Contract iO Associates are currently looking for an SC Cleared Technical Consultant for an initial 12 month contract role (OUTSIDE IR35) starting from mid November / early December - we can work this around you. Rates depend on experience. Any experience with M-LINK or Openfire will be a...

  • Technical Consultant

    4 weeks ago

    England, United Kingdom iO Associates - UKEU Full time

    SC or DV Cleared Technical Consultant - OUTSIDE IR35 - 12 Month Contract iO Associates are currently looking for an SC Cleared Technical Consultant for an initial 12 month contract role (OUTSIDE IR35) starting from mid November / early December - we can work this around you. Rates depend on experience. Any experience with M-LINK or Openfire will be a...

  • Technical Consultant

    4 weeks ago

    England, United Kingdom iO Associates - UKEU Full time

    SC or DV Cleared Technical Consultant - OUTSIDE IR35 - 12 Month Contract iO Associates are currently looking for an SC Cleared Technical Consultant for an initial 12 month contract role (OUTSIDE IR35) starting from mid November / early December - we can work this around you. Rates depend on experience. Any experience with M-LINK or Openfire will be a...

  • Contract Assembly Technician

    1 week ago

    England, United Kingdom Redline Group Ltd Full time

    Long-Term Contract Assembly Technician - Electronics opportunity with a world-leader in mission-critical systems at their Berkshire offices.This role has an indicative OUTSIDE IR35 determination therefore we can accept candidates who would like to operate through their own PSC.With a significant presence in the electronics industry, our customer designs,...