Cyber Security Jobs

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

Appvia · London · £75,000 – £90,000 pa

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for public and private sector clients. You will own technical delivery in your area, create reusable modules and deployment patterns, and mentor less experienced engineers within multi-disciplinary consulting teams.

CrowdStrike · United Kingdom

Monitor and analyse security alerts on the CrowdStrike platform, handling incidents across Windows, Mac and Linux, performing malware analysis and remote remediation. The role sits in a virtual security operations centre, producing written findings for customer management and improving detection and triage processes.

CrowdStrike · Ireland

Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats, and builds dashboards and reporting workflows in SQL, Python and Logscale. Works cross-functionally with product and data engineering teams to turn raw security data into actionable insights and KPIs for the Office of Adversary Strategy.

Reed Technology · Newcastle upon Tyne · £35,000 – £45,000 pa

Investigating and responding to security incidents at 2nd Line level, monitoring customer environments and SIEM alerts, and threat hunting across a Microsoft security stack including Sentinel, Defender and Entra. Uses KQL and PowerShell for investigations and automation, acts as an escalation point for junior analysts, and supports vulnerability assessment and remediation. Initially on a 4-on, 4-off night shift pattern before moving to an 8-hour shift model.

Sophos · United Kingdom

Performs advanced investigative, forensic and containment work during active cyber incidents for Managed Detection and Response customers, correlating alerts and telemetry to establish scope and root cause. Mentors junior IR and SOC analysts, maintains engagement documentation and playbooks, and supports Incident Advisors with validated technical findings. Includes weekend and holiday rotation cover.

Experis · London · £500 pd

Lead end-to-end management of cyber security incidents and major security events within a secure government programme, coordinating technical response teams through containment, eradication and recovery. Act as primary point of contact for incident communications, run response bridges and war-rooms, and produce post-incident reports and root cause analysis. Works alongside SOC, analysts, infrastructure teams and third-party suppliers to improve cyber resilience.

Immersive · United Kingdom

Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.

Sophos · United Kingdom

Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.

Matchtech · London · £580 pd

Hands-on penetration testing and vulnerability assessments across infrastructure, networks and applications, producing technical reports and remediation recommendations. Works with technical and project teams on risk assessments and security assurance, aligning testing with industry standards. Short-term contract, fully remote, inside IR35.

TrueWatch · Dublin, Ireland · £77,691 – £86,324 pa

Maintains reliability, availability and performance of cloud infrastructure, monitoring production environments and managing observability tooling for metrics, logs and alerts. Handles incident response, root cause analysis and post-incident reviews, while automating deployments with IaC and CI/CD and optimising AWS, Azure or GCP resources. Works with engineering and platform teams on scalability, security compliance and capacity planning.

NCC Group · Remote

Designs, builds and maintains security automations that detect, investigate and respond to cyber threats, working closely with Incident Response to identify improvements and create new playbooks. Delivers scalable automation within the Splunk ecosystem, covering advanced analytics, scripting, new use cases, validation of automation behaviour and documentation, plus mentoring junior engineers.

Adecco · Colchester · £51,000 – £55,000 pa

Hands-on role maintaining and improving an organisation's cyber security posture across its IT infrastructure, covering security operations, incident response, vulnerability management and compliance. Day to day involves SIEM, endpoint security and Microsoft tooling such as Entra ID, Defender, Purview and Intune, plus audit support and security improvement projects. Predominantly remote with occasional travel to the Essex office.

Palo Alto Networks · London

Technical pre-sales role covering the UK&I region, driving the technology evaluation stage of the sales cycle for the Idira Identity Security Platform. You will run solution demonstrations, architecture reviews and customer proof-of-concepts, designing Zero-Trust access approaches for human and non-human identities across cloud and datacenter environments, and mentoring other solutions engineers.

Palo Alto Networks · London

Deliver expert-level technical support to top-tier cybersecurity customers, owning complex cases from initiation to resolution through multi-vendor troubleshooting, fault isolation and root cause analysis. Act as a designated customer advocate running weekly reviews, QBRs and upgrade planning, while working with Engineering and QA on bug reports and test plans.

Akkodis · West Midlands (Region) · £65,000 – £75,000 pa

The role focuses on detection engineering and security automation within a CSOC, building SOAR playbooks and SIEM content to improve threat detection and response. Day to day involves analysing workflows, creating automations and enrichments across security tools, and managing an engineering backlog. It is primarily remote with occasional travel to the Midlands head office.