Cyber Security Jobs

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

Appvia · London · £75,000 – £90,000 pa

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for public and private sector clients. You will own technical delivery in your area, create reusable modules and deployment patterns, and mentor less experienced engineers within multi-disciplinary consulting teams.

Netcraft · Bath

Join a technical operations team conducting cybercrime incident response, classifying malicious websites, apps, emails and phone numbers, and communicating threat analysis to clients. The role involves customer feedback, process improvement, and regular weekend shift work to support 24/7 protection, with full training provided for those new to cybersecurity.

Proactive Appointments · Nottingham · £28,000 – £31,000 pa

First-line support role handling ticket and incident management, user and device administration, equipment setup, and onboarding/offboarding while maintaining accurate records. Requires administering Microsoft 365, Exchange Online, Intune, Entra ID and Windows 11, plus networking and cloud knowledge, working with third-party support providers. Requires a full UK driving licence and own car.

Entrust · London

Entry-level analyst role supporting demand generation and go-to-market strategy, tracking campaign performance against pipeline and conversion targets, monitoring funnel metrics from MQL to Closed Won, and analysing win/loss and retention data. Works cross-functionally with Marketing, Sales, SDRs and Customer Success, using Excel/Google Sheets and CRM or BI tools to turn data into actionable pipeline insights.

CrowdStrike · Reading

Six-month graduate internship in the Falcon Complete team, working from the Reading office on security alert triage, incident investigation and response, and basic malware analysis. Interns learn the Falcon platform and internal tooling, handle customer inquiries, and deliver a project to improve security controls.

Addition · Leeds · £26,000 – £28,000 pa

First point of contact for customers needing product support across phone and email, diagnosing and resolving technical queries with a focus on high first-line resolution rates. Owns issues from initial contact to resolution, escalates complex problems to the Product team, and maintains product documentation. Hybrid role in a cyber security SaaS scale-up, with SQL and support desk tools like Freshdesk or Jira advantageous.

Proactive Appointments · Nottingham · £28,000 – £31,000 pa

Provide first-line IT support across the business, handling ticket and incident management, user and device administration, equipment setup, and onboarding/offboarding. Administer Microsoft 365, Exchange Online, Intune, Windows 11 and Entra ID while maintaining accurate records and coordinating with third-party support providers. Requires a full UK driving licence and own car.

Addition · Leeds · £26,000 – £28,000 pa

First point of contact for customers needing product support across phone and email, diagnosing and resolving technical queries with a focus on high first-line resolution rates. Owns issues from initial contact through to resolution, escalates complex problems to the Product team, and maintains product documentation. Hybrid role in a cyber security SaaS scale-up, with SQL and support desk tools like Freshdesk or Jira advantageous.

NCC Group · Remote

Oversee Security Operations Centre activities, lead incident response efforts, and mentor a team of analysts. The role centres on cyber threat detection and incident investigation, with strong hands-on use of the Splunk Enterprise Security platform. It is a lead-level position within a remote security operations team.

Constant Recruitment Ltd · Folkestone · £45,000 – £50,000 pa

Hands-on leadership role coordinating a SOC team of around 15, prioritising alerts, acting as escalation point and supporting threat detection, investigation and incident response. Involves client service reviews, reporting, coaching analysts and improving playbooks, using Microsoft Sentinel and Defender XDR, with scope to develop people-management skills.

eFinancialCareers · London

Lead a team of 13 Business Analysts across major Cyber, IAM and PAM transformation programmes at a global investment bank. Own requirements gathering, process analysis, solution definition and UAT while managing risks, dependencies and senior escalations. The role also drives continuous improvement and AI adoption across the BA function.

CrowdStrike · United Kingdom

Serve as technical lead on front-page incident response engagements for Fortune 100 organisations, conducting host and network forensics across Windows, Mac and Linux and hunting adversaries in large data sets. Work under outside counsel on intrusion investigations and present findings to executives, regulators and legal teams.

Palo Alto Networks · London

Lead strategic advisor for enterprise customers modernising their Security Operations Centres through XSIAM deployment, covering log ingestion, detection engineering and automation. The role combines executive-level consulting with hands-on SIEM/SOAR/EDR technical work, mentoring professional services teams and feeding field insights back to Product and R&D. Requires security clearance eligibility and up to 30% travel.

Palo Alto Networks · United Kingdom

Deliver white-glove onboarding and ongoing technical guidance for Managed XSIAM customers, analysing security data to improve detection coverage, alert quality and tenant hygiene. Lead customer touchpoints and security reviews while partnering with Unit 42 SOC engineering, Product and MDR teams to build automation workflows and scalable service frameworks.

Hays Technology · Sheffield · £450 – £500 pd

Owns end-to-end solution design across cybersecurity initiatives, producing architecture documents, high-level designs, patterns, decision records and risk assessments. Provides technical leadership and presents designs to Design Authorities and senior stakeholders, with deep IAM and HashiCorp Vault expertise. Requires three days per week onsite in Sheffield.

eFinancialCareers · London

Own and lead the end-to-end Threat Intelligence Platform, driving strategic design, delivery and development to maximise value across a global cyber defense organisation. Build API integrations and connectors across commercial intelligence sources, govern intelligence standards such as source reliability, confidence scoring and TLP handling, and mentor junior analysts while producing intelligence for technical and executive audiences.