Cyber Security Jobs

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

Appvia · London · £75,000 – £90,000 pa

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for public and private sector clients. You will own technical delivery in your area, create reusable modules and deployment patterns, and mentor less experienced engineers within multi-disciplinary consulting teams.

CrowdStrike · Ireland

Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats, and builds dashboards and reporting workflows in SQL, Python and Logscale. Works cross-functionally with product and data engineering teams to turn raw security data into actionable insights and KPIs for the Office of Adversary Strategy.

CrowdStrike · Romania

Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats. Builds dashboards, reports and data pipelines using SQL, Python, Logscale and graph databases, partnering with product and data engineering teams to turn raw security data into actionable insights and KPIs.

Reed Technology · Newcastle upon Tyne · £35,000 – £45,000 pa

Investigating and responding to security incidents at 2nd Line level, monitoring customer environments and SIEM alerts, and threat hunting across a Microsoft security stack including Sentinel, Defender and Entra. Uses KQL and PowerShell for investigations and automation, acts as an escalation point for junior analysts, and supports vulnerability assessment and remediation. Initially on a 4-on, 4-off night shift pattern before moving to an 8-hour shift model.

Constant Recruitment Ltd · Folkestone · £45,000 – £50,000 pa

Hands-on leadership role coordinating a SOC team of around 15, prioritising alerts, acting as escalation point and supporting threat detection, investigation and incident response. Involves client service reviews, reporting, coaching analysts and improving playbooks, using Microsoft Sentinel and Defender XDR, with scope to develop people-management skills.

Palo Alto Networks · London

Lead strategic advisor for enterprise customers modernising their Security Operations Centres through XSIAM deployment, covering log ingestion, detection engineering and automation. The role combines executive-level consulting with hands-on SIEM/SOAR/EDR technical work, mentoring professional services teams and feeding field insights back to Product and R&D. Requires security clearance eligibility and up to 30% travel.

Sophos · United Kingdom

Performs advanced investigative, forensic and containment work during active cyber incidents for Managed Detection and Response customers, correlating alerts and telemetry to establish scope and root cause. Mentors junior IR and SOC analysts, maintains engagement documentation and playbooks, and supports Incident Advisors with validated technical findings. Includes weekend and holiday rotation cover.

Palo Alto Networks · United Kingdom

Deliver white-glove onboarding and ongoing technical guidance for Managed XSIAM customers, analysing security data to improve detection coverage, alert quality and tenant hygiene. Lead customer touchpoints and security reviews while partnering with Unit 42 SOC engineering, Product and MDR teams to build automation workflows and scalable service frameworks.

Matchtech · London · £580 pd

Hands-on penetration testing and vulnerability assessments across infrastructure, networks and applications, producing technical reports and remediation recommendations. Works with technical and project teams on risk assessments and security assurance, aligning testing with industry standards. Short-term contract, fully remote, inside IR35.

TrueWatch · Dublin, Ireland · £77,691 – £86,324 pa

Maintains reliability, availability and performance of cloud infrastructure, monitoring production environments and managing observability tooling for metrics, logs and alerts. Handles incident response, root cause analysis and post-incident reviews, while automating deployments with IaC and CI/CD and optimising AWS, Azure or GCP resources. Works with engineering and platform teams on scalability, security compliance and capacity planning.

Adecco · Colchester · £51,000 – £55,000 pa

Hands-on role maintaining and improving an organisation's cyber security posture across its IT infrastructure, covering security operations, incident response, vulnerability management and compliance. Day to day involves SIEM, endpoint security and Microsoft tooling such as Entra ID, Defender, Purview and Intune, plus audit support and security improvement projects. Predominantly remote with occasional travel to the Essex office.

Hays Technology · London · £644 pd

Senior technical authority providing leadership across a large-scale AWS platform estate, covering cloud infrastructure, applications, ingest pipelines and live services. Defines engineering standards, governance and assurance, owns platform reliability and leads major incident response for critical 24/7 services, coordinating multiple teams and suppliers.

Akkodis · West Midlands (Region) · £65,000 – £75,000 pa

The role focuses on detection engineering and security automation within a CSOC, building SOAR playbooks and SIEM content to improve threat detection and response. Day to day involves analysing workflows, creating automations and enrichments across security tools, and managing an engineering backlog. It is primarily remote with occasional travel to the Midlands head office.