Cyber Security Jobs in Reading

Appvia · London · £75,000 – £90,000 pa

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for public and private sector clients. You will own technical delivery in your area, create reusable modules and deployment patterns, and mentor less experienced engineers within multi-disciplinary consulting teams.

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

Global Technology Solutions Ltd · Reading · £50,000 – £60,000 pa

Senior technical authority in Security Operations, leading serious incidents, forensic investigations and root cause analysis while improving detection and response. Engineers Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune and Darktrace, develops automation and conducts proactive threat hunting, and mentors colleagues.

CrowdStrike · Reading

Six-month graduate internship in the Falcon Complete team, working from the Reading office on security alert triage, incident investigation and response, and basic malware analysis. Interns learn the Falcon platform and internal tooling, handle customer inquiries, and deliver a project to improve security controls.

CrowdStrike · Reading

Internship on CrowdStrike's Technical Analysis Cell, researching nation-state and criminal intrusions through reverse engineering of malware and tooling. The intern builds automation for malware analysis, creates host- and network-based detection signatures, and produces threat intelligence reporting for varied audiences.

Mimecast · London · £80,000 – £120,000 pa

Hands-on engineering role embedded in the Incydr product team, working directly with customers on technical health checks, custom integrations and troubleshooting. You get full access to the codebase and deployment tooling to diagnose and ship fixes, using AI coding tools to build purpose-built scripts and integrations. Expect some travel to customer sites, with most engagement remote under a hybrid model.

Exceed Cyber limited · London · £800 – £900 pd

Translate high-level SecOps transition strategies into detailed, low-level implementation plans across security engineering, threat and vulnerability management and security testing. Define operational readiness criteria, phase-gate checklists and multi-year delivery roadmaps, coordinating dependencies with architecture, GRC and technical SMEs. Requires active SC clearance and UK Government or regulated-environment experience.

VIQU IT Recruitment · Birmingham · £50,000 – £55,000 pa

Hands-on infrastructure and security role in a small IT team of three, acting as the most technical member. Around 80% of the work is project and improvement focused, covering cloud and Microsoft 365, patching, backup and recovery, identity and access, vulnerability scanning and pen tests, plus ISO 27001 controls and supplier management. Includes third-line support and deputising for the Head of IT.

Entrust · London

Builds and operates production ML systems for document classification and extraction, using LLMs/VLMs and traditional ML to power identity verification at scale. Leads technical design from RFC to deployment, optimises GPU inference, and develops training and evaluation pipelines. Works in a squad-based team alongside Applied Science, Product and Data Science.

Entrust · Lisbon, Portugal

Builds and operates production ML systems for document extraction powering identity verification, working with VLMs/LLMs and traditional ML at scale. Owns technical design from RFC to deployment, optimising GPU inference, training and evaluation pipelines, and labelling workflows. Mentors engineers and collaborates with Applied Science, Product and Data Science in a squad-based team.

Palo Alto Networks · London

Senior field engineer role owning complex end-user support across desktop, network and SaaS environments, with deep work in Google Workspace, Okta, CyberArk, Intune and JAMF. Combines hands-on troubleshooting and automation scripting (PowerShell, Python) with mentoring junior engineers and partnering with global IT teams across the Americas, EMEA and APAC.

Guidant Global · Cheltenham · £550 – £750 pd

An IdAM Architect role within a Security Architecture team, shaping enterprise identity and access capabilities across cloud transformation and service management convergence programmes. Day to day involves security architecture reviews, risk and vulnerability assessments, threat modelling, and designing identity solutions using SSO, MFA, IGA, PAM and federation standards. Works closely with solution architects, engineers and risk advisors to embed security by design.

Guidant Global · London · £500 ph

A contract IdAM Architect role within a Security Architecture team, shaping enterprise identity and access capabilities across cloud transformation and service management convergence programmes. Day to day involves security architecture reviews, risk and vulnerability assessments, threat modelling, and designing identity solutions covering SSO, MFA, IGA, PAM and federation standards. Works closely with solution architects, engineering, risk advisors and business stakeholders to embed security by design.

airbus · Bristol

Acts as a trusted advisor to clients across sectors, delivering governance, risk and compliance guidance spanning secure architecture, IDAM, PAM and DLP, and frameworks such as ISO 27001, NIST CSF and NIS2. Produces risk assessments, gap analyses and remediation roadmaps, while supporting bids, content creation and marketing events. Requires UK Government Security Clearance and works hybrid from the Bristol office 2-3 days a week.

CrowdStrike · London

Internship on CrowdStrike's Technical Analysis Cell, researching nation-state and criminal intrusions through reverse engineering, malware analysis and automation tooling. Interns build host- and network-based detection signatures and produce finished threat intelligence reporting for varied audiences.