Cyber Security Jobs

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

Appvia · London · £75,000 – £90,000 pa

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for public and private sector clients. You will own technical delivery in your area, create reusable modules and deployment patterns, and mentor less experienced engineers within multi-disciplinary consulting teams.

CrowdStrike · United Kingdom

Monitor and analyse security alerts on the CrowdStrike platform, handling incidents across Windows, Mac and Linux, performing malware analysis and remote remediation. The role sits in a virtual security operations centre, producing written findings for customer management and improving detection and triage processes.

Experis · Winchester · £41,000 – £50,000 pa

Monitor, triage and investigate security alerts across SIEM and wider security tooling, identifying indicators of compromise and conducting initial incident investigations. Support the full incident response lifecycle including containment, remediation and post-incident learning, while tuning detection rules to reduce false positives. Work with security and infrastructure teams on threat intelligence, trend reporting and continual service improvement.

CrowdStrike · Ireland

Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats, and builds dashboards and reporting workflows in SQL, Python and Logscale. Works cross-functionally with product and data engineering teams to turn raw security data into actionable insights and KPIs for the Office of Adversary Strategy.

Reed Technology · Newcastle upon Tyne · £35,000 – £45,000 pa

Investigating and responding to security incidents at 2nd Line level, monitoring customer environments and SIEM alerts, and threat hunting across a Microsoft security stack including Sentinel, Defender and Entra. Uses KQL and PowerShell for investigations and automation, acts as an escalation point for junior analysts, and supports vulnerability assessment and remediation. Initially on a 4-on, 4-off night shift pattern before moving to an 8-hour shift model.

Entrust · London

Entry-level analyst role supporting demand generation and go-to-market strategy, tracking campaign performance against pipeline and conversion targets, monitoring funnel metrics from MQL to Closed Won, and analysing win/loss and retention data. Works cross-functionally with Marketing, Sales, SDRs and Customer Success, using Excel/Google Sheets and CRM or BI tools to turn data into actionable pipeline insights.

Entrust · Paris, France

You will analyse EU digital identity and financial regulation, including eIDAS 2.0, ETSI standards and AML rules, assessing their impact on products and customers across EMEA. The role sits inside the Product organisation, so your assessments, comparison tables and recommendations feed directly into roadmaps, alongside certification work and external engagement with regulators.

CBSbutler Holdings Limited trading as CBSbutler · Preston · £450 – £500 pd

Governance and coordination role tracking security incidents across a complex multi-supplier SIAM environment, from identification through to closure. You coordinate updates between suppliers and security stakeholders, monitor SLAs and escalation trends, and produce incident reports, dashboards and audit-ready records. Distinct from a hands-on SOC position, with no threat hunting or technical remediation involved.

Exemplar Health Care · Sheffield · £40,000 pa

Supports day-to-day IT security across a national care home provider, covering security monitoring, vulnerability management, endpoint and email security, and incident response. Coordinates audits, penetration testing and assurance activities against frameworks such as NCSC CAF, Cyber Essentials and NHS DSPT, and produces security metrics and awareness training.

GEDU · London · £40,000 – £42,500 pa

The Information Security GRC Analyst will perform risk assessments, support the implementation of the ISO 27001 framework, and maintain information security policies. They will work closely with stakeholders to identify and mitigate risks, and assist in security certifications and technical investigations.

Circle Recruitment · London · £30,000 – £45,000 pa

Hands-on security operations role monitoring and triaging alerts from SIEM, EDR and cloud platforms, investigating incidents and supporting containment and response. Also provides second-line support across Azure, AWS, identity, network and end-user infrastructure, with log analysis, vulnerability remediation and runbook upkeep. Majority onsite in Manchester or London, with occasional on-call and shift handovers.

eFinancialCareers · London

Engineer, operate and optimise Microsoft Sentinel across one or more Log Analytics workspaces, owning platform health, ingestion pipelines, normalisation and enrichment. Build and maintain log onboarding from cloud, on-prem, SaaS and security tools, and integrate the SIEM with EDR, SOAR, threat intel and ITSM platforms. Also supports M&A onboarding of acquired environments into the enterprise SIEM.

Eclectic Recruitment · Stevenage · £45,000 – £50,000 pa

Designs, configures and maintains network security solutions including next-generation firewalls, secure proxies and IDS/IPS, while supporting 24/7 incident response alongside SOC analysts. Involves analysing network traffic and packet captures, remediating vulnerabilities and standardising security tooling in a highly secure engineering environment.

DB Cargo (UK) Limited · Doncaster · £70,000 – £75,000 pa

Acts as the cyber security subject matter expert within an IT Governance & Security function, leading governance, risk, compliance and resilience across business-critical applications, cloud services and operational railway systems. Owns the ISMS and NIS/GDPR compliance while managing security operations, threat monitoring, incident response and vulnerability management. Develops Microsoft Sentinel and Defender XDR capabilities and provides governance across Azure, AWS, Microsoft 365, Entra ID and Intune, including support for ERTMS/ETCS transformation.

Sophos · United Kingdom

Performs advanced investigative, forensic and containment work during active cyber incidents for Managed Detection and Response customers, correlating alerts and telemetry to establish scope and root cause. Mentors junior IR and SOC analysts, maintains engagement documentation and playbooks, and supports Incident Advisors with validated technical findings. Includes weekend and holiday rotation cover.

Experis · London · £500 pd

Lead end-to-end management of cyber security incidents and major security events within a secure government programme, coordinating technical response teams through containment, eradication and recovery. Act as primary point of contact for incident communications, run response bridges and war-rooms, and produce post-incident reports and root cause analysis. Works alongside SOC, analysts, infrastructure teams and third-party suppliers to improve cyber resilience.