Jobs at Bridewell

Lead and deliver offensive security assessments (infrastructure, web, API, device reviews), produce high-quality technical and executive reports, support pre-sales/tenders, perform report QA, conduct research/service development, and mentor/collaborate across teams.

The Generative AI Engineer will design and implement AI solutions, focusing on model fine-tuning, prompt engineering, and secure deployment, while collaborating with cybersecurity specialists.

Senior leadership role to define and grow Bridewell's OT cyber security practice. Responsibilities include strategic vision, building cross-functional OT teams, commercial growth, service delivery across OT consulting, SOC, engineering, incident response and vulnerability management, stakeholder engagement, and ensuring technical credibility and compliance with OT security standards.

Join an 18-month Academy to train as an offensive security professional. Support and learn to deliver penetration tests, identify and validate vulnerabilities, capture evidence, author reports, communicate findings to clients, and progress through industry certifications and practical labs under mentorship.

Join Bridewell's Academy to train in cyber security, complete SANS and certification pathways, support client engagements (ISO27001, PCI-DSS), perform research and documentation, participate in team meetings, and work on client-facing projects while progressing toward professional certifications.

Entry-level academy role combining IT support and cybersecurity training. Responsibilities include shadowing IT staff, building and configuring machines, managing IT inventory, handling helpdesk incidents, and assisting with policy updates while progressing through structured security operations training and client exposure.

Manage the technical relationship between clients and Bridewell's managed security services. Oversee incidents, drive automation efforts, and ensure quality assurance of services.

Client-facing senior data privacy consultant delivering privacy programmes and projects: DPIAs, breach investigation and notification, data mapping, DSAR processes, privacy policies, Records of Processing, third-party due diligence, training, risk assessments, DPO duties and regulator liaison, and supporting pre-sales and business development.