Cyber Security Jobs

Appvia · London · £75,000 – £90,000 pa

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for public and private sector clients. You will own technical delivery in your area, create reusable modules and deployment patterns, and mentor less experienced engineers within multi-disciplinary consulting teams.

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

Exemplar Health Care · Sheffield · £40,000 pa

Supports day-to-day IT security across a national care home provider, covering security monitoring, vulnerability management, endpoint and email security, and incident response. Coordinates audits, penetration testing and assurance activities against frameworks such as NCSC CAF, Cyber Essentials and NHS DSPT, and produces security metrics and awareness training.

Circle Recruitment · London · £30,000 – £45,000 pa

Hands-on security operations role monitoring and triaging alerts from SIEM, EDR and cloud platforms, investigating incidents and supporting containment and response. Also provides second-line support across Azure, AWS, identity, network and end-user infrastructure, with log analysis, vulnerability remediation and runbook upkeep. Majority onsite in Manchester or London, with occasional on-call and shift handovers.

Experis · Winchester · £41,000 – £50,000 pa

Monitor, triage and investigate security alerts across SIEM and wider security tooling, identifying indicators of compromise and conducting initial incident investigations. Support the full incident response lifecycle including containment, remediation and post-incident learning, while tuning detection rules to reduce false positives. Work with security and infrastructure teams on threat intelligence, trend reporting and continual service improvement.

CBSbutler Holdings Limited trading as CBSbutler · Preston · £450 – £500 pd

Governance and coordination role tracking security incidents across a complex multi-supplier SIAM environment, from identification through to closure. You coordinate updates between suppliers and security stakeholders, monitor SLAs and escalation trends, and produce incident reports, dashboards and audit-ready records. Distinct from a hands-on SOC position, with no threat hunting or technical remediation involved.

CrowdStrike · Reading

Six-month graduate internship in the Falcon Complete team, working from the Reading office on security alert triage, incident investigation and response, and basic malware analysis. Interns learn the Falcon platform and internal tooling, handle customer inquiries, and deliver a project to improve security controls.

GEDU · London · £40,000 – £42,500 pa

The Information Security GRC Analyst will perform risk assessments, support the implementation of the ISO 27001 framework, and maintain information security policies. They will work closely with stakeholders to identify and mitigate risks, and assist in security certifications and technical investigations.

Reed Technology · Newcastle upon Tyne · £35,000 – £45,000 pa

Investigating and responding to security incidents at 2nd Line level, monitoring customer environments and SIEM alerts, and threat hunting across a Microsoft security stack including Sentinel, Defender and Entra. Uses KQL and PowerShell for investigations and automation, acts as an escalation point for junior analysts, and supports vulnerability assessment and remediation. Initially on a 4-on, 4-off night shift pattern before moving to an 8-hour shift model.

Entrust · Paris, France

You will analyse EU digital identity and financial regulation, including eIDAS 2.0, ETSI standards and AML rules, assessing their impact on products and customers across EMEA. The role sits inside the Product organisation, so your assessments, comparison tables and recommendations feed directly into roadmaps, alongside certification work and external engagement with regulators.

Entrust · London

Analyses digital identity and financial regulation such as eIDAS 2.0, ETSI standards and EU AML rules, assessing their impact on products and customers across EMEA. Supports certification work including ETSI TS 119 461 and UK DVS, drafts consultation responses and position papers, and engages with regulators and industry working groups. Sits within the Product organisation, feeding regulatory insight directly into roadmaps and horizon-scanning.

Sophos · United Kingdom

Performs advanced investigative, forensic and containment work during active cyber incidents for Managed Detection and Response customers, correlating alerts and telemetry to establish scope and root cause. Mentors junior IR and SOC analysts, maintains engagement documentation and playbooks, and supports Incident Advisors with validated technical findings. Includes weekend and holiday rotation cover.

CrowdStrike · Ireland

Investigates emerging malware and cyber threats across the full adversary kill chain, validating and improving Falcon's detection coverage. Works with Threat Research, Engineering, Data Science and Red Team to turn findings into product improvements, using automation, AI and machine learning to scale analysis.

QinetiQ · Portsmouth · £50,850 – £56,500 pa

Advises customers on cyber security vulnerability, risk, audit and compliance, applying NIST and ISO27001 frameworks to risk assessments and security assurance. Supports accreditation, governance and mitigation strategies across government, defence and critical national infrastructure, engaging stakeholders and presenting findings. Based on-site at least three days a week with customer travel required.

Maxwell Bond · London · £115,000 – £135,000 pa

Owns security end to end for a confidential investment-data platform and its AI agents, split roughly 60% hands-on product and cloud security and 40% assurance and client-facing work. Sets AWS IAM, encryption and detection patterns, defines agent authorisation and prompt-injection defences, and drives SOC 2, ISO 27001 and AI Act readiness with penetration testing and client due diligence.

Adecco · Colchester · £51,000 – £55,000 pa

Hands-on role maintaining and improving an organisation's cyber security posture across its IT infrastructure, covering security operations, incident response, vulnerability management and compliance. Day to day involves SIEM, endpoint security and Microsoft tooling such as Entra ID, Defender, Purview and Intune, plus audit support and security improvement projects. Predominantly remote with occasional travel to the Essex office.

TTP · Cambridge

Consultants assess critical systems for cyber-physical vulnerabilities, combining deep hardware research, testing and reverse engineering with rapid prototyping of proof-of-concept demonstrators. Work spans niche defence and national security projects, interfacing with hardware via protocols like JTAG and UART and using test equipment such as oscilloscopes. The role is fully on-site in Cambridge labs within a flat, collaborative ~40-person consultancy.