Cyber Security Jobs

Appvia · London · £75,000 – £90,000 pa

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for public and private sector clients. You will own technical delivery in your area, create reusable modules and deployment patterns, and mentor less experienced engineers within multi-disciplinary consulting teams.

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

Netcraft · Bath

Join a technical operations team conducting cybercrime incident response, classifying malicious websites, apps, emails and phone numbers, and communicating threat analysis to clients. The role involves customer feedback, process improvement, and regular weekend shift work to support 24/7 protection, with full training provided for those new to cybersecurity.

Addition · Leeds · £26,000 – £28,000 pa

First point of contact for customers needing product support across phone and email, diagnosing and resolving technical queries with a focus on high first-line resolution rates. Owns issues from initial contact to resolution, escalates complex problems to the Product team, and maintains product documentation. Hybrid role in a cyber security SaaS scale-up, with SQL and support desk tools like Freshdesk or Jira advantageous.

Addition · Leeds · £26,000 – £28,000 pa

First point of contact for customers needing product support across phone and email, diagnosing and resolving technical queries with a focus on high first-line resolution rates. Owns issues from initial contact through to resolution, escalates complex problems to the Product team, and maintains product documentation. Hybrid role in a cyber security SaaS scale-up, with SQL and support desk tools like Freshdesk or Jira advantageous.

NCC Group · Remote

Oversee Security Operations Centre activities, lead incident response efforts, and mentor a team of analysts. The role centres on cyber threat detection and incident investigation, with strong hands-on use of the Splunk Enterprise Security platform. It is a lead-level position within a remote security operations team.

Constant Recruitment Ltd · Folkestone · £45,000 – £50,000 pa

Hands-on leadership role coordinating a SOC team of around 15, prioritising alerts, acting as escalation point and supporting threat detection, investigation and incident response. Involves client service reviews, reporting, coaching analysts and improving playbooks, using Microsoft Sentinel and Defender XDR, with scope to develop people-management skills.

eFinancialCareers · London

Lead a team of 13 Business Analysts across major Cyber, IAM and PAM transformation programmes at a global investment bank. Own requirements gathering, process analysis, solution definition and UAT while managing risks, dependencies and senior escalations. The role also drives continuous improvement and AI adoption across the BA function.

CrowdStrike · United Kingdom

Serve as technical lead on front-page incident response engagements for Fortune 100 organisations, conducting host and network forensics across Windows, Mac and Linux and hunting adversaries in large data sets. Work under outside counsel on intrusion investigations and present findings to executives, regulators and legal teams.

Palo Alto Networks · London

Lead strategic advisor for enterprise customers modernising their Security Operations Centres through XSIAM deployment, covering log ingestion, detection engineering and automation. The role combines executive-level consulting with hands-on SIEM/SOAR/EDR technical work, mentoring professional services teams and feeding field insights back to Product and R&D. Requires security clearance eligibility and up to 30% travel.

CrowdStrike · United Kingdom

Leads consulting engagement teams delivering front-page incident response investigations for Fortune 500 clients, handling initial triage, scoping and high-level oversight. Partners with sales to win new business, mentors technical analysts, and presents findings to executives, regulators and legal counsel. Requires up to 30% regional travel on short notice.

Darktrace · Cambridge

Lead the strategy, roadmap and execution of Darktrace's interactive demo estate, shaping how products are showcased to prospects, customers and internal teams. Manage a small team of technical content specialists while partnering with Product, Marketing, Enablement and Sales Engineering to evolve demos from on-rails walkthroughs into live sandbox environments.

Palo Alto Networks · United Kingdom

Deliver white-glove onboarding and ongoing technical guidance for Managed XSIAM customers, analysing security data to improve detection coverage, alert quality and tenant hygiene. Lead customer touchpoints and security reviews while partnering with Unit 42 SOC engineering, Product and MDR teams to build automation workflows and scalable service frameworks.

Hays Technology · Sheffield · £450 – £500 pd

Owns end-to-end solution design across cybersecurity initiatives, producing architecture documents, high-level designs, patterns, decision records and risk assessments. Provides technical leadership and presents designs to Design Authorities and senior stakeholders, with deep IAM and HashiCorp Vault expertise. Requires three days per week onsite in Sheffield.

Cambridge University Press & Assessment (CUPA) · Cambridge · £69,600 – £85,000 pa

Leads a global business continuity, crisis management and incident response programme across operations in over 170 countries, owning the BCR framework, business impact analysis, testing and assurance. Partners with senior leaders, IT disaster recovery, Group Security and local continuity leads to embed resilience in a federated, matrixed organisation.

Netcraft · London

Lead a newly formed backend team owning several key products, including an integration layer for SIEM platforms, a system engaging conversational scammers at scale, and email analysis for phishing detection. Split time between hands-on engineering (30-50%) and managing a delivery roadmap, modernising legacy platforms while commercialising new ones.

Hays Technology · Leeds · £65,000 – £70,000 pa

Lead a cyber security team day to day, covering resource planning, rotas and performance management, while overseeing incident response, vulnerability management and cloud security migration. Act as escalation point for security incidents and lead war-gaming exercises within an ITIL and ISO 27001 framework, requiring hands-on Azure security expertise.