Cyber Security Jobs

CrowdStrike · Reading

Six-month graduate internship in the Falcon Complete team, working from the Reading office on security alert triage, incident investigation and response, and basic malware analysis. Interns learn the Falcon platform and internal tooling, handle customer inquiries, and deliver a project to improve security controls.

Proactive Appointments · Nottingham · £28,000 – £31,000 pa

Provide first-line IT support across the business, handling ticket and incident management, user and device administration, equipment setup, and onboarding/offboarding. Administer Microsoft 365, Exchange Online, Intune, Windows 11 and Entra ID while maintaining accurate records and coordinating with third-party support providers. Requires a full UK driving licence and own car.

Proactive Appointments · Nottingham · £28,000 – £31,000 pa

First-line support role handling ticket and incident management, user and device administration, equipment setup, and onboarding/offboarding while maintaining accurate records. Requires administering Microsoft 365, Exchange Online, Intune, Entra ID and Windows 11, plus networking and cloud knowledge, working with third-party support providers. Requires a full UK driving licence and own car.

Immersive · United Kingdom

Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.

Peregrine · Blackpool

Forward-deployed engineer embedded in a Cyber Capability Unit, building and deploying AI-powered security and fraud prevention solutions. Day to day covers AWS infrastructure, Terraform IaC, GitLab CI pipelines, testing, observability and incident response in regulated environments. Requires active SC clearance.

Reed Technology · Manchester · £60,000 – £65,000 pa

Producing threat assessments, intelligence reports and executive briefings, translating complex cyber threats into clear information for senior and non-technical stakeholders. Monitoring intelligence sources, assessing threat actors, TTPs and IOCs, and supporting incident response with security teams. Also leads and develops a small team while shaping the Cyber Threat Intelligence function.

Manpower · Lytham Saint Annes · £50,000 pa

Conducts red team exercises, critical control testing, cyber hygiene assessments and penetration testing to validate security controls and SOC detection capabilities. Produces detailed vulnerability reports for internal resolver groups and briefs leadership on defensive effectiveness. Requires hands-on infrastructure and web app testing with tools like Kali and Parrot across cloud, network and endpoint technologies.

eFinancialCareers · London

Own and lead the end-to-end Threat Intelligence Platform, driving strategic design, delivery and development to maximise value across a global cyber defense organisation. Build API integrations and connectors across commercial intelligence sources, govern intelligence standards such as source reliability, confidence scoring and TLP handling, and mentor junior analysts while producing intelligence for technical and executive audiences.

Hays Technology · Sheffield · £450 – £500 pd

Owns end-to-end solution design across cybersecurity initiatives, producing architecture documents, high-level designs, patterns, decision records and risk assessments. Provides technical leadership and presents designs to Design Authorities and senior stakeholders, with deep IAM and HashiCorp Vault expertise. Requires three days per week onsite in Sheffield.

NCC Group · Remote

Oversee Security Operations Centre activities, lead incident response efforts, and mentor a team of analysts. The role centres on cyber threat detection and incident investigation, with strong hands-on use of the Splunk Enterprise Security platform. It is a lead-level position within a remote security operations team.

Sophos · United Kingdom

Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.

Sophos · United Kingdom

Owns the strategy, roadmap and execution for the Endpoint Windows Platform, translating OS and security requirements into product priorities. Partners closely with Engineering, Microsoft and cross-portfolio teams on agent architecture, performance and platform change management, and supports go-to-market enablement.

QinetiQ · Bristol · £65,700 – £73,000 pa

Lead cyber security vulnerability analysis, audit processes and business risk modelling for defence customers, while shaping cyber exercise scenarios and advising on security posture against NIST and ISO27001 frameworks. The role involves applying MITRE ATT&CK and Secure by Design approaches, working largely on-site at a customer site in Corsham.

QinetiQ · Malvern, England, United Kingdom · £65,700 – £73,000 pa

Lead cyber security consultancy for defence and government customers, developing business risk models, running ISO 27001 audits and detailed vulnerability assessments using NIST and MITRE ATT&CK frameworks. You will translate technical threats into clear risk cases and mitigation strategies for senior stakeholders, embedding Secure by Design principles across projects. Based on a multi-site UK estate with at least three days a week on site and customer travel.

Michael Page · Liverpool · £60,000 – £65,000 pa

Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.