Cyber Security Jobs

Appvia · London · £75,000 – £90,000 pa

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for public and private sector clients. You will own technical delivery in your area, create reusable modules and deployment patterns, and mentor less experienced engineers within multi-disciplinary consulting teams.

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

Experis · London · £500 pd

Lead end-to-end management of cyber security incidents and major security events within a secure government programme, coordinating technical response teams through containment, eradication and recovery. Act as primary point of contact for incident communications, run response bridges and war-rooms, and produce post-incident reports and root cause analysis. Works alongside SOC, analysts, infrastructure teams and third-party suppliers to improve cyber resilience.

Immersive · United Kingdom

Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.

Sophos · United Kingdom

Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.

Sophos · United Kingdom

Owns the strategy, roadmap and execution for the Endpoint Windows Platform, translating OS and security requirements into product priorities. Partners closely with Engineering, Microsoft and cross-portfolio teams on agent architecture, performance and platform change management, and supports go-to-market enablement.

CrowdStrike · Germany

Internship on CrowdStrike's Technical Analysis Cell, researching nation-state and criminal intrusions through reverse engineering of malware and tooling. The role involves building automation for malware analysis, creating host- and network-based detection signatures, and producing finished threat intelligence reporting for customers.

NCC Group · Remote

Designs, builds and maintains security automations that detect, investigate and respond to cyber threats, working closely with Incident Response to identify improvements and create new playbooks. Delivers scalable automation within the Splunk ecosystem, covering advanced analytics, scripting, new use cases, validation of automation behaviour and documentation, plus mentoring junior engineers.

CrowdStrike · United Kingdom

Monitor and analyse security alerts on the CrowdStrike platform, handling incidents across Windows, Mac and Linux, performing malware analysis and remote remediation. The role sits in a virtual security operations centre, producing written findings for customer management and improving detection and triage processes.

Palo Alto Networks · London

Lead strategic advisor for enterprise customers modernising their Security Operations Centres through XSIAM deployment, covering log ingestion, detection engineering and automation. The role combines executive-level consulting with hands-on SIEM/SOAR/EDR technical work, mentoring professional services teams and feeding field insights back to Product and R&D. Requires security clearance eligibility and up to 30% travel.

Palo Alto Networks · United Kingdom

Deliver white-glove onboarding and ongoing technical guidance for Managed XSIAM customers, analysing security data to improve detection coverage, alert quality and tenant hygiene. Lead customer touchpoints and security reviews while partnering with Unit 42 SOC engineering, Product and MDR teams to build automation workflows and scalable service frameworks.

ECS Resource Group · Newbury · £450 – £500 pd

Security architecture and independent assurance role on a large-scale telecoms programme, focused on Privileged Access Management and securing administrative access to critical Network Management Systems. You will review network and security designs, assure HLDs, LLDs, PoCs and test strategies, and advise on segmentation, least privilege and secure management access. Requires strong IP networking (MPLS, VPNs, VRFs) plus AAA, TACACS+, MFA and RBAC expertise.

Creideas · Thame · £600 – £850 pd

Part-time consultant guiding a client's migration from traditional data centres to AWS, acting as an escalation point and mentor for a small team of engineers. Works closely with the CISO on security reviews and strategy, applying SIEM, EDR and vulnerability management skills. Mostly remote with occasional in-person catch-ups.

Circle Recruitment · Reading · £70,000 – £100,000 pa

Deliver practical cyber security advice to clients across complex IT and OT environments, managing engagements and building trusted relationships with senior stakeholders. Assess information security risks, review controls and apply frameworks such as ISO 27001, NIST CSF and NCSC CAF, while progressively taking responsibility for OT security engagements.

Experis · United Kingdom · £70,000 – £90,000 pa

Lead OT cyber risk assessments on client sites, which makes up around 80% of the role, and carry out site surveys across ICS, SCADA, DCS and wider OT environments. Build improvement roadmaps and security programmes, applying standards such as IEC 62443, NCSC CAF, NIST SP 800-82 and HSE OG86, while supporting the sales team on follow-on opportunities and proposals.

Ex-Mil Recruitment Ltd · Southampton · £75,000 – £85,000 pa

Principal-level technical security lead on a high-assurance UK defence programme moving from MVP towards operational capability. The role covers secure-by-design architecture, cross-domain information exchange, cyber risk and assurance, IAM, cryptography, cloud and network security, working with solution architects, DevOps and assurance teams. Distinct for its defence focus and ex-military requirement.

Tank Recruitment · United Kingdom · £80,000 – £90,000 pa

Designs and reviews security architectures across cyber, cloud and enterprise environments for defence customers, acting as a trusted technical adviser. Develops secure AWS or Azure cloud architectures, produces assurance documentation and designs, and travels to customer sites to engage stakeholders. Requires live SC clearance and CISSP, with a genuine voice in shaping the consultancy's security offering.