Cyber Security Jobs

CrowdStrike · United Kingdom

Serve as technical lead on front-page incident response engagements for Fortune 100 organisations, conducting host and network forensics across Windows, Mac and Linux and hunting adversaries in large data sets. Work under outside counsel on intrusion investigations and present findings to executives, regulators and legal teams.

CrowdStrike · Ireland

Investigates emerging malware and cyber threats across the full adversary kill chain, validating and improving Falcon's detection coverage. Works with Threat Research, Engineering, Data Science and Red Team to turn findings into product improvements, using automation, AI and machine learning to scale analysis.

Erin Associates · Manchester · £45,000 – £50,000 pa

Hands-on role strengthening an organisation's security posture and delivering initiatives across its Cyber Security Roadmap. Day to day involves managing Microsoft Defender, Intune, Entra ID and Microsoft 365 security controls, supporting vulnerability remediation, alert triage and incident response, and maintaining Cyber Essentials and CIS Controls compliance.

Akkodis · Hessle · £35,000 – £45,000 pa

Hands-on security operations role covering alert triage, incident response and root-cause analysis, plus tuning SIEM, EDR/XDR and monitoring tooling to cut false positives. You will drive automation and security improvement projects while liaising with a managed SOC and internal infrastructure, cloud and application teams.

ITSS Recruitment · London · £60,000 – £70,000 pa

Hands-on security engineering role protecting critical systems and sensitive data across a broad estate covering cloud security, vulnerability management, incident response and security monitoring. Day to day involves operating the vulnerability management programme, administering Microsoft Defender, Purview, Entra ID, Sentinel and Azure security services, and advising infrastructure, application and business stakeholders on risk-based controls.

Palo Alto Networks · London

Lead strategic advisor for enterprise customers modernising their Security Operations Centres through XSIAM deployment, covering log ingestion, detection engineering and automation. The role combines executive-level consulting with hands-on SIEM/SOAR/EDR technical work, mentoring professional services teams and feeding field insights back to Product and R&D. Requires security clearance eligibility and up to 30% travel.

Sophos · United Kingdom

Performs advanced investigative, forensic and containment work during active cyber incidents for Managed Detection and Response customers, correlating alerts and telemetry to establish scope and root cause. Mentors junior IR and SOC analysts, maintains engagement documentation and playbooks, and supports Incident Advisors with validated technical findings. Includes weekend and holiday rotation cover.

Cloudflare · London

Own the full software development lifecycle for distributed systems supporting threat disruption and legal response, building data pipelines that collect and expose threat intelligence for analysts and customers. Work primarily in Golang and TypeScript with Rust, Kafka, Redis, Kubernetes, Terraform and Postgres, collaborating with Threat Intelligence, Trust & Safety, Legal and Product teams, plus on-call rotations and mentoring.

Darktrace · Cambridge

Lead the strategy, roadmap and execution of Darktrace's interactive demo estate, shaping how products are showcased to prospects, customers and internal teams. Manage a small team of technical content specialists while partnering with Product, Marketing, Enablement and Sales Engineering to evolve demos from on-rails walkthroughs into live sandbox environments.

Palo Alto Networks · United Kingdom

Deliver white-glove onboarding and ongoing technical guidance for Managed XSIAM customers, analysing security data to improve detection coverage, alert quality and tenant hygiene. Lead customer touchpoints and security reviews while partnering with Unit 42 SOC engineering, Product and MDR teams to build automation workflows and scalable service frameworks.

Hays Technology · Sheffield · £450 – £500 pd

Owns end-to-end solution design across cybersecurity initiatives, producing architecture documents, high-level designs, patterns, decision records and risk assessments. Provides technical leadership and presents designs to Design Authorities and senior stakeholders, with deep IAM and HashiCorp Vault expertise. Requires three days per week onsite in Sheffield.

Netcraft · London

Join the Novel Classification team to build and operate machine learning systems that detect phishing sites and online scams at scale. You'll train, evaluate and serve classifiers on GPU-backed Kubernetes, run live experiments on precision and recall, and deploy LLM inference and computer vision models into production.

eFinancialCareers · London

Own and lead the end-to-end Threat Intelligence Platform, driving strategic design, delivery and development to maximise value across a global cyber defense organisation. Build API integrations and connectors across commercial intelligence sources, govern intelligence standards such as source reliability, confidence scoring and TLP handling, and mentor junior analysts while producing intelligence for technical and executive audiences.

Planet Recruitment · Manchester · £40,000 – £50,000 pa

Hands-on role delivering a Cyber Security Roadmap and hardening a Microsoft-centric technology estate. Day to day involves configuring and maintaining Defender, Intune, Entra ID and Microsoft 365 security and compliance tooling, plus vulnerability management, alert triage and incident remediation. Works with the Cyber Security Operations Manager, Group Head of Cyber, IT teams and external partners, and supports Cyber Essentials and CIS Controls accreditation.

Darktrace · Paris, France

Customer-facing technical role partnering with security and IT stakeholders to drive platform adoption, reduce risk and demonstrate measurable value. You build technical success plans, spot adoption gaps and retention risks early, and feed technical health insights into renewals, QBRs and expansion discussions alongside Account Executives and Solutions Engineering.