Cyber Security Jobs

Darktrace · Cambridge

Partners with developers and product teams to embed quality from the start, designing and maintaining automated test frameworks across API, UI, integration and regression layers. Builds scalable suites into CI/CD pipelines, drives shift-left testing, and contributes to test strategy, code reviews and architecture discussions.

CrowdStrike · Ireland

Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats, and builds dashboards and reporting workflows in SQL, Python and Logscale. Works cross-functionally with product and data engineering teams to turn raw security data into actionable insights and KPIs for the Office of Adversary Strategy.

CrowdStrike · Romania

Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats. Builds dashboards, reports and data pipelines using SQL, Python, Logscale and graph databases, partnering with product and data engineering teams to turn raw security data into actionable insights and KPIs.

Palo Alto Networks · London

Lead and deliver reactive incident response engagements for clients, managing scoping, forensic investigations and containment of security incidents. Perform host-based analysis across Windows, Linux and macOS, examine firewall, web and database logs, and use tools such as EnCase, FTK, X-Ways, SIFT and Splunk to determine breach scope. Also mentors junior team members and provides remediation guidance to customers.

Planet Recruitment · Newbury · £60,000 – £65,000 pa

Senior hands-on role acting as technical authority for Professional Services and Field Engineering, leading discovery, design, implementation and migration of complex client solutions across infrastructure, cloud, networking, security and modern workplace technologies. Combines solution architecture and documentation with personal delivery on multiple projects, plus technical leadership through design reviews and escalation ownership, without formal line management.

Identify Solutions · Swansea · £45,000 – £55,000 pa

Hands-on role taking technical ownership of cyber security across a predominantly Microsoft environment, working with an infrastructure team and external SOC partners. Day to day involves assessing the estate for security gaps, hardening systems, operating Defender/XDR, EDR and Sentinel, managing Entra ID access controls, and responding to incidents and vulnerabilities.

Yolk Recruitment · Cardiff · £62,000 – £72,000 pa

Hands-on security engineering role focused on building and improving controls across a Microsoft-centric estate, including Defender, Sentinel, Azure and Entra ID. Involves vulnerability management, data protection with Purview, incident response support and embedding security into projects, with influence over strategy rather than pure SOC operations.

Immersive · United Kingdom

Designs, writes and peer-reviews hands-on GRC labs, challenges and gamified learning content on the Immersive One platform, researching standards such as NIST, ISO 27001 and MITRE ATLAS/D3FEND to build realistic simulations of incidents in regulated sectors. Acts as GRC subject matter expert for engineering and product teams, embedding security and privacy by design into the SDLC.

Yolk Recruitment · Cardiff · £62,000 – £72,000 pa

Hands-on security engineering role within an established Cyber Resilience function, strengthening security operations across a complex technology estate. Day to day covers Microsoft Defender and Sentinel, Azure and Entra ID security, vulnerability management, Purview data protection and threat detection, plus security input into projects and architecture. Also acts as a security SME to technical and non-technical stakeholders.

Ashdown Group · Northampton · £65,000 – £80,000 pa

Standalone security role maintaining and enhancing controls across identity, endpoint, cloud and application in enterprise environments. Hands-on work spans IAM, MFA, privileged access, zero-trust, Windows endpoint management, EDR, cloud security monitoring, vulnerability assessment and incident investigation, with frameworks such as ISO 27001 or NIST CSF. Hybrid, around three days a week in an office on the outskirts of Northampton.

Seetec · Hockley · £70,000 – £75,000 pa

Lead the organisation's cyber security strategy, governance, assurance and operational security, owning the roadmap, vulnerability management and compliance. Provide hands-on technical leadership across Microsoft Sentinel, Defender, Huntress, Tenable, identity and cloud security, and incident response, while line-managing a Cyber Security Engineer and advising senior stakeholders.

Harvey Nash · Newport

Design and review security architectures across cloud, on-premises and hybrid environments, assessing technical risks and advising teams on networking, identity management, authentication and cryptography. The role champions Secure by Design and supports governance, compliance and assurance, working closely with senior security leaders to embed best practice.

Eden James Consulting Ltd · London

Lead the Health and Care Account for a fast-growing technology consultancy, delivering cyber security, data and AI services. Day to day involves client relationship building, managing a healthcare delivery portfolio, supporting sales and bids, running risk and maturity assessments, and implementing security controls aligned to NIST, CAF and ISO27001. Requires SC clearance eligibility and sole British nationality.

Appcast Enterprise · Farnborough

Protects a critical defence IT application and infrastructure by running vulnerability scans, managing endpoint security, responding to incidents and hardening systems. Works with frameworks such as Government Functional Standard 007 and standards like CIS, STIG and NIST, leading security implementation and assurance on a major UK government programme.

Proactive Appointments · Baldock

Hands-on security role covering identity and access management, endpoint protection, cloud security, vulnerability management and incident response across a broad technology estate. Works closely with IT operations, development and platform teams plus external security providers, embedding least-privilege and zero-trust practices and producing risk reporting for audits and customer assurance.