• Support clients with data privacy compliance activities (incl. Data Protection Impact Assessments, Data Subject Access Requests etc.)
• Support clients with drafting/negotiating data protection aspects of commercial agreements
• Support clients with data breaches & incidents
• Optional support with business development activities (not an expected responsibility - but you will be rewarded with a % of fees brought in with new clients)

• Minimum of 4 years PQE
• Experience working in private practice
• In-house (or secondment) experience is highly desirable

• Lead the development of the data privacy & AI governance framework
• Support a range of business departments to embed privacy by design and by default into initiatives
• Act as the appointed DPO for UK-based entities
• Appoint & coordinate with local country DPOs & local counsel to ensure a consistent & coherent approach to privacy across Europe
• Advise on personal data incidents
• Advise on DPIAs

• Qualified lawyer, with strong post-qualification experience in data privacy law - ideally combining both in-house exposure with high-quality private practice experience
• Excellent working knowledge of UK and EU GDPR, PECR & other related privacy regulations
• Proven experience working on privacy matters across multiple European jurisdictions
• Ability to work with senior stakeholders across a range of business functions (e.g. Technology, Security, HR, Marketing etc.)

• Konzeption und Implementierung leistungsfähiger Backend-Services auf Basis von Java und Spring Boot
• Entwicklung und Pflege von Schnittstellen sowie Datenbankanbindungen
• Arbeit mit relationalen Datenbanken, insbesondere Microsoft SQL Server
• Implementierung und Optimierung von Datenbankzugriffen mit Hibernate
• Mitarbeit an einer verteilten Monolith-Architektur (Distributed Monolith)
• Sicherstellung hoher Codequalität und moderner Entwicklungsstandards
• Enge Zusammenarbeit mit dem Entwicklungsteam bei der technischen Konzeption und Umsetzung neuer Features

• Mehrjährige praktische Erfahrung in der professionellen Java-Entwicklung
• Nachweisbare Projekterfahrung mit Spring Boot (Must-have)
• Sehr gute Kenntnisse in modernem Java und aktuellen Java-Versionen
• Fundierte Erfahrung mit Hibernate
• Gute Kenntnisse relationaler Datenbanken, insbesondere SQL Server
• Erfahrung mit komplexen Softwarearchitekturen, idealerweise im Umfeld einer Distributed-Monolith-Architektur
• Du hast bereits kontinuierlich in Deutschland gearbeitet und kennst die entsprechenden Projekt- und Arbeitsumfelder
• Gute Deutschkenntnisse sind von Vorteil

• Erfahrung mit Docker und Docker Compose
• Kenntnisse im Umgang mit Kubernetes
• Erfahrung mit modernen DevOps- und Deployment-Prozessen

• -100 % Homeoffice möglich
• Alternativ hybrides Arbeiten am Standort Karlsruhe
• Mitarbeit an eigenen Softwareprodukten und innovativen SaaS-Lösungen im Cybersecurity-Umfeld
• Anspruchsvolle technische Herausforderungen mit modernen Technologien
• Ein Umfeld, in dem du die Weiterentwicklung eigener Softwarelösungen aktiv mitgestalten kannst

• Role: Offensive Security Specialist
• Location: Bristol OR Belfast, 1 day per week (flexible)
• Salary: up to £60,000 basic + 10% bonus + certification sponsorship + excellent benefits

Do you want end-to-end ownership over Offensive Security for a market-leading, globally recognised and award-winning Law Firm?

This is an excellent opportunity to really own the projects you work on. We're looking for someone to proactively identify the areas they want to work on, and this firm will genuinely back you to pursue them. You'll be proactively hunting around their networks and identifying vulnerabilities, cracking passwords, testing the SOC team and building your own tooling from scratch.

What a day could look like:

• Executing penetration tests across networks, applications, infrastructure and cloud environments.
• Devising and developing the strategy and roadmap for pentests and general red team activities across the firm
• Conducting red team exercises and emulating real-world threat actor TTPs
• Developing custom scripts, tools and exploits for offensive security engagements.
• Identifying vulnerabilities across APIs, web applications, cloud platforms and enterprise systems.
• Producing technical reports and communicating findings to technical and business stakeholders.
• Collaborating with defensive teams to improve detection, response and security controls.

This is an incredible opportunity if you're looking for:

• End to end ownership over a super exciting function - your work dictates where this function is headed
• An excellent mentor and reporting line in the Head of Cyber
• Genuine flexibility - work on your own terms, just get the work done
• An amazing culture - I know multiple people in this team. They are all close and work together very well
• Investment into your development. They'll send you to conferences, speeches and sponsor any certification you're targeting

Key Requirements:

• Ideally 3+ years across Penetration Testing, Offensive Security or Red Team roles.
• A genuine passion for Offensive Security. You understand how things work, you build them - and you break them.
• A true "attackers mindset"
• Certifications like OSCP, CRTO, CRTP and any GIAC or CREST will be advantageous

I'm not looking for a long list of skills experience and projects, this isn't a massively senior role (still need hands-on experience) but I'm looking for someone that is genuinely passionate and excited by offensive security. This firm will develop, train and buy in to you - they're hiring the PERSON - is that person you?

Get in touch on j.walsh@lawrenceharvey.com for the specifics

• Build and lead a new Third-Party Security Monitoring function from the ground up
• Establish governance, KPIs and reporting around supplier security
• Identify gaps, drive remediation and improve supplier risk management
• Lead security monitoring transformation and work across Security, Risk, Legal & Procurement

• MUST have strong Third-Party Security Risk experience, ideally in a leadership role
• Strong experience building or transforming security assurance functions
• Preference for Financial Services experience, with other highly regulated industries considered
• Excellent knowledge of security controls, regulations and supplier risk
• Experience leading teams and large-scale security programmes
• Very strong stakeholder management and influencing skills