Cyber Security Jobs

Appvia · London · £75,000 – £90,000 pa

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for public and private sector clients. You will own technical delivery in your area, create reusable modules and deployment patterns, and mentor less experienced engineers within multi-disciplinary consulting teams.

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

Netcraft · Bath

Join a technical operations team conducting cybercrime incident response, classifying malicious websites, apps, emails and phone numbers, and communicating threat analysis to clients. The role involves customer feedback, process improvement, and regular weekend shift work to support 24/7 protection, with full training provided for those new to cybersecurity.

Fynity · Leeds · £38,000 pa

Hands-on SOC Analyst role sitting between L1 and L2, triaging and investigating security incidents using Microsoft Sentinel, Defender XDR and SentinelOne. Also acts as escalation point for a shift of around three analysts, monitoring SLAs, QA-ing tickets, leading handovers and coaching the team. Works a 4 on / 4 off, 7am-7pm shift with partial office attendance in Leeds.

Fynity · Leeds · £38,000 pa

Hands-on SOC role sitting between L1 and L2, triaging and investigating security incidents while leading a small shift of around three analysts. Acts as escalation point, monitors SLAs, QA tickets, runs shift handovers and coaches the team, using Microsoft Sentinel, Defender XDR and SentinelOne. Distinct as a stepping stone into shift leadership without full Team Lead responsibility.

Hays Technology · Leeds · £45,000 – £50,000 pa

Support the development and operation of security controls, analyse threat intelligence, manage vulnerabilities and help with incident response across a global technology estate. Work with Azure and Microsoft security tooling such as Sentinel, Defender and Intune, alongside SIEM, EDR and firewalls, in a hybrid Leeds team.

Avanti Recruitment · London · £50,000 – £75,000 pa

Client-facing security role within a UK consultancy's growing Security Architecture practice, supporting government, defence and critical infrastructure programmes. Day to day involves threat modelling, risk assessment, reviewing solution and infrastructure designs, defining security requirements and controls, and running client workshops. Suits security engineers or consultants wanting to move into architecture, with occasional client site visits rather than frequent travel.

BRAINTREE DISTRICT COUNCIL · Braintree · £37,896 – £41,541 pa

Hands-on first point of contact for ICT security issues, monitoring systems, investigating threats and responding to incidents while maintaining documentation and response procedures. The role also covers firewall, IDS, anti-virus and log management controls, security awareness training, and wider ICT support including Microsoft 365 administration and network monitoring within ITIL frameworks.

Spectrum IT Recruitment · Southampton · £65,000 pa

Operational security role monitoring alerts, investigating incidents and maintaining controls across on-prem, cloud and SaaS environments. You'll handle firewalls, VPNs, endpoint protection, vulnerability management and remediation tracking, supporting penetration tests and audits while aligning with NIST CSF, NIS Regulations and Cyber Essentials alongside infrastructure and service delivery teams.

Addition · Leeds · £26,000 – £28,000 pa

First point of contact for customers needing product support across phone and email, diagnosing and resolving technical queries with a focus on high first-line resolution rates. Owns issues from initial contact to resolution, escalates complex problems to the Product team, and maintains product documentation. Hybrid role in a cyber security SaaS scale-up, with SQL and support desk tools like Freshdesk or Jira advantageous.

Maru Search & Consultancy · Bournemouth · £44,000 – £50,000 pa

Maintains and improves an ISO 27001-certified ISMS, running internal audits, risk assessments and third-party supplier due diligence. Also matures Data Loss Prevention and Access Management and embeds security into the SDLC with project managers. Sits in a growing team at a UK health and life insurer, with broad exposure across risk, audit and compliance.

VIQU IT · Portsoken · £350 – £400 pd

Day-to-day BAU security operations role focused on Rapid7, SIEM monitoring, alert triage and vulnerability management, including clearing an existing alert backlog. Also covers Mimecast email security, Microsoft Purview eDiscovery/DSAR/DLP, CrowdStrike and Netskope administration, plus security investigations and documentation.

Sellick Partnership · Manchester · £40,000 – £45,000 pa

Provide independent oversight and assurance across SAP security, user access and Segregation of Duties, managing GRC policies, governance frameworks and access models. Review roles, support control testing and risk reporting, and use data analytics to spot trends, partnering with Finance, Technology and Audit stakeholders.

Addition · Leeds · £26,000 – £28,000 pa

First point of contact for customers needing product support across phone and email, diagnosing and resolving technical queries with a focus on high first-line resolution rates. Owns issues from initial contact through to resolution, escalates complex problems to the Product team, and maintains product documentation. Hybrid role in a cyber security SaaS scale-up, with SQL and support desk tools like Freshdesk or Jira advantageous.

Amtis Professional · Deeside · £45,000 – £55,000 pa

Hands-on role strengthening an organisation's ability to respond to, recover from and learn from cyber incidents. Combines practical system recovery and resilience testing with Business Continuity, Incident Response and Cyber Recovery planning, working with technical and non-technical stakeholders across IT and the wider business.

NCC Group · Remote

Oversee Security Operations Centre activities, lead incident response efforts, and mentor a team of analysts. The role centres on cyber threat detection and incident investigation, with strong hands-on use of the Splunk Enterprise Security platform. It is a lead-level position within a remote security operations team.

TRIA · Cardiff · £45,000 – £50,000 pa

Hands-on engineering role in a Microsoft security partner's Security Operations team, building and tuning Sentinel detection rules with KQL and configuring Defender XDR and Microsoft 365 controls. Involves automation playbooks via Azure Logic Apps, vulnerability scanning and phishing simulations, DevOps/CI-CD work, and escalation-focused incident response rather than routine alert monitoring.