Cyber Security Jobs

Darktrace · London

Joins R&D teams to build and enhance cybersecurity products, providing technical direction across rapid prototyping and structured platform development. Involves advancing malware-defence methodology, mentoring engineers in Python, JavaScript, Rust and C++, and working with Docker, cloud environments and CI/CD pipelines. Hybrid role with two days a week in the Cambridge office.

Darktrace · Cambridge

Conducts independent and collaborative research into large language models, statistical methods and classical machine learning, prototyping ideas and implementing models into the wider software stack. Produces latency- and memory-optimised solutions for deployment on edge devices, working closely with software engineers and security analysts.

airbus · Bristol

Owns the long-term data protection strategy and technical design of resilient disaster recovery architectures across hybrid, multi-cloud, container and on-premise environments. Acts as the highest escalation point for complex recovery failures, evaluating immutable and air-gapped storage while automating backup and orchestration processes.

airbus · Hamburg, Germany

Owns the long-term data protection strategy and technical design of resilient disaster recovery architectures across hybrid, multi-cloud, container and on-premise environments. Acts as the top escalation point for complex recovery failures, evaluating immutable and air-gapped storage while automating backup and orchestration processes.

CrowdStrike · Germany

Internship on CrowdStrike's Technical Analysis Cell, researching nation-state and criminal intrusions through reverse engineering of malware and tooling. The role involves building automation for malware analysis, creating host- and network-based detection signatures, and producing finished threat intelligence reporting for customers.

Sizewell C · London · £66,866 pa

Owns end-to-end delivery, performance and continual improvement of enterprise IT services for a major nuclear energy programme, spanning Microsoft 365, Azure, infrastructure, networks, applications and cyber security operations. Combines technical leadership with ITIL service management, supplier governance and regulatory compliance, acting as escalation point for senior stakeholders and managing multiple managed service providers.

Barclays · Knutsford

A 10-week summer internship in Barclays' Chief Security Office, working on real projects across cyber and security. Interns collaborate with cross-functional teams on risk reduction, threat intelligence and secure engineering, helping protect the bank, its customers and colleagues while building technical skills.

Cloudflare · London

Acts as primary technical responder for premium enterprise customers, autonomously investigating complex threat telemetry and handling live incident response for volumetric DDoS and application-layer attacks. Implements mitigation across OSI Layers 3, 4 and 7 using Cloudflare's security suite, performs packet and traffic flow analysis, and advises customers during active incidents. Requires 24x7 rotating shifts.

Twinstream Limited · Bristol · £50,000 – £60,000 pa

Hands-on senior role taking operational ownership of a corporate IT estate, managing cloud services, Microsoft 365, Entra ID, networking, endpoint security and automation. Involves leading complex incident resolution, patching, backups and business continuity while mentoring colleagues and working with suppliers alongside the IT Technical Lead.

Square One Resources · Coventry · £455 pm

Designs, implements and maintains enterprise network security across on-prem, cloud and hybrid environments, leading Zero Trust and segmentation initiatives. Hands-on with enterprise firewalls, Azure/AWS network security, VPNs and secure remote access, while collaborating with SOC teams on detection and response. Contract role with three days per week on-site in Coventry.

NCC Group · Remote

Designs, builds and maintains security automations that detect, investigate and respond to cyber threats, working closely with Incident Response to identify improvements and create new playbooks. Delivers scalable automation within the Splunk ecosystem, covering advanced analytics, scripting, new use cases, validation of automation behaviour and documentation, plus mentoring junior engineers.

CrowdStrike · London

Designs, implements and operates a global multi-vendor, multi-cloud and hybrid data center network, covering subnetting, VPC peering, direct connects and hub-spoke topologies. Builds IaC and automation tooling (Ansible, Terraform, Python, Go) in CI/CD pipelines and handles complex production troubleshooting plus on-call rotations.

Sophos · United Kingdom

Hands-on engineering role managing a modern identity stack across the full lifecycle, from passwordless authentication and adaptive access controls to identity governance and non-human identities. You will configure and operate Microsoft Entra ID, Saviynt and Active Directory directly, integrate applications via SAML, OIDC, OAuth and SCIM, and join an out-of-hours support rota.

eFinancialCareers · London · £105,000 pa

Plan and deliver penetration-testing engagements across IT and OT estates, assessing industrial control systems, operational networks and connected infrastructure, plus cloud, mobile, network, web and API environments. Produce technical and executive reports, present remediation advice to clients, and support internal tooling, methodologies and CREST-accredited training. Work spans energy, wind, nuclear, CNI and manufacturing programmes.

Cloudflare · London

Lead the Threat Application Services team within Cloudforce One, owning the Threat Events platform, external Threat Intel APIs, and backend systems that feed IOCs into WAF and Gateway for automated mitigation. Set architectural direction and operational excellence for distributed, high-latency-sensitive services, while hiring and mentoring engineers building agentic threat intelligence tools.