Cyber Security Jobs

Darktrace · Cambridge

Conducts independent and collaborative research into large language models, statistical methods and classical machine learning, prototyping ideas and implementing models into the wider software stack. Produces latency- and memory-optimised solutions for deployment on edge devices, working closely with software engineers and security analysts.

Darktrace · Cambridge

Backend engineering role focused primarily on TypeScript, prototyping and building new features for AI-driven cybersecurity products. You'll work with a cross-functional team of engineers, designers and strategists, using Docker and cloud environments, with opportunities to specialise across languages like Python, Rust and C++. Hybrid, requiring at least two days a week in the Cambridge office.

airbus · Bremen, Germany

Owns the long-term data protection strategy and technical design of resilient disaster recovery architectures across hybrid, multi-cloud, container and on-premise environments. Acts as the top escalation point for complex recovery failures, evaluating immutable backups and air-gapped storage while automating backup and recovery processes. Bridges operations, security and business continuity within the public and private cloud team.

Square One Resources · Coventry · £455 pm

Designs, implements and maintains enterprise network security across on-prem, cloud and hybrid environments, leading Zero Trust and segmentation initiatives. Hands-on with enterprise firewalls, Azure/AWS network security, VPNs and secure remote access, while collaborating with SOC teams on detection and response. Contract role with three days per week on-site in Coventry.

NCC Group · Remote

Designs, builds and maintains security automations that detect, investigate and respond to cyber threats, working closely with Incident Response to identify improvements and create new playbooks. Delivers scalable automation within the Splunk ecosystem, covering advanced analytics, scripting, new use cases, validation of automation behaviour and documentation, plus mentoring junior engineers.

CrowdStrike · London

Designs, implements and operates a global multi-vendor, multi-cloud and hybrid data center network, covering subnetting, VPC peering, direct connects and hub-spoke topologies. Builds IaC and automation tooling (Ansible, Terraform, Python, Go) in CI/CD pipelines and handles complex production troubleshooting plus on-call rotations.

Humanoid · London

Lead product cybersecurity assurance across the HMND 01 humanoid robot platforms, defining security requirements, threat modelling and risk artefacts for safety-critical electromechanical systems. Own TARA, security management plans and remediation actions, drive compliance with IEC 62443, the EU Machinery Regulation and the Cyber Resilience Act, and build a PSIRT process while guiding a cross-functional security team.

Sophos · United Kingdom

Hands-on engineering role managing a modern identity stack across the full lifecycle, from passwordless authentication and adaptive access controls to identity governance and non-human identities. You will configure and operate Microsoft Entra ID, Saviynt and Active Directory directly, integrate applications via SAML, OIDC, OAuth and SCIM, and join an out-of-hours support rota.

eFinancialCareers · London · £105,000 pa

Plan and deliver penetration-testing engagements across IT and OT estates, assessing industrial control systems, operational networks and connected infrastructure, plus cloud, mobile, network, web and API environments. Produce technical and executive reports, present remediation advice to clients, and support internal tooling, methodologies and CREST-accredited training. Work spans energy, wind, nuclear, CNI and manufacturing programmes.

Cloudflare · London

Lead the Threat Application Services team within Cloudforce One, owning the Threat Events platform, external Threat Intel APIs, and backend systems that feed IOCs into WAF and Gateway for automated mitigation. Set architectural direction and operational excellence for distributed, high-latency-sensitive services, while hiring and mentoring engineers building agentic threat intelligence tools.

Mentmore Recruitment · Reading · £86,000 – £87,000 pa

Develops and implements automated control testing and continuous monitoring across IT, OT and business functions, identifying automation opportunities and improving control testing processes. Builds automation workflows using Python, PowerShell, RPA or audit automation tools, reviews results, escalates control deficiencies and maintains documentation. Works with technical teams, control owners and stakeholders to support risk, compliance and cybersecurity objectives.

CrowdStrike · Ireland

Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats, and builds dashboards and reporting workflows in SQL, Python and Logscale. Works cross-functionally with product and data engineering teams to turn raw security data into actionable insights and KPIs for the Office of Adversary Strategy.

Entrust · London

Entry-level analyst role supporting demand generation and go-to-market strategy, tracking campaign performance against pipeline and conversion targets, monitoring funnel metrics from MQL to Closed Won, and analysing win/loss and retention data. Works cross-functionally with Marketing, Sales, SDRs and Customer Success, using Excel/Google Sheets and CRM or BI tools to turn data into actionable pipeline insights.

Palo Alto Networks · London

Lead strategic advisor for enterprise customers modernising their Security Operations Centres through XSIAM deployment, covering log ingestion, detection engineering and automation. The role combines executive-level consulting with hands-on SIEM/SOAR/EDR technical work, mentoring professional services teams and feeding field insights back to Product and R&D. Requires security clearance eligibility and up to 30% travel.

Palo Alto Networks · United Kingdom

Deliver white-glove onboarding and ongoing technical guidance for Managed XSIAM customers, analysing security data to improve detection coverage, alert quality and tenant hygiene. Lead customer touchpoints and security reviews while partnering with Unit 42 SOC engineering, Product and MDR teams to build automation workflows and scalable service frameworks.