Cyber Security Jobs

CrowdStrike · Romania

Security researcher role on CrowdStrike Intelligence's Advanced Research Team, developing automated solutions for large-scale data collection, operating and extending honeypots, performing vulnerability research, and reproducing emerging vulnerabilities. The position also involves publishing research on the blog or at conferences and building GenAI/LLM workflows to support analysis and security research.

CrowdStrike · Germany

Security researcher role on CrowdStrike Intelligence's Advanced Research Team, developing automated solutions for large-scale data collection, operating and extending honeypots, performing vulnerability research, and reproducing emerging vulnerabilities. Involves reverse engineering, Linux/Windows internals, Python tooling, and GenAI/LLM workflows, with published research on the CrowdStrike blog or at conferences.

Sophos · United Kingdom

Leads incident response engagements for customers hit by cyberattacks, directing a team of consultants, running kick-off and daily update calls, and delegating forensic tasks. Handles multiple ransomware and BEC investigations concurrently, performing root cause analysis and producing executive-summary reports mapped to MITRE ATT&CK.

NCC Group · Remote

Designs, builds and maintains security automations that detect, investigate and respond to cyber threats, working closely with Incident Response to identify improvements and create new playbooks. Delivers scalable automation within the Splunk ecosystem, covering advanced analytics, scripting, new use cases, validation of automation behaviour and documentation, plus mentoring junior engineers.

QinetiQ · Bristol · £65,700 – £73,000 pa

Lead cyber security vulnerability analysis, audit processes and business risk modelling for defence customers, while shaping cyber exercise scenarios and advising on security posture against NIST and ISO27001 frameworks. The role involves applying MITRE ATT&CK and Secure by Design approaches, working largely on-site at a customer site in Corsham.

QinetiQ · Malvern, England, United Kingdom · £65,700 – £73,000 pa

Technically leads multidisciplinary teams on complex cryptosecurity bids and projects, interpreting user, system and security requirements for crypto systems. Advises on high-grade crypto and key management, analyses algorithms and secure protocols, and engages regularly with customers and stakeholders. Based on-site at Malvern, with travel to customer sites expected.

Appcast Enterprise · Whiteley · £61,500 – £78,800 pa

Designs, develops and maintains manual and automated test scripts and reporting for a flagship National Security programme, using frameworks such as Katalon Studio, Selenium, SoapUI and JUnit. Analyses requirements and designs to build risk-based test approaches, working within hybrid Waterfall and Agile scrum teams alongside software and systems engineers.

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

Entrust · London

Owns a core area of the document verification platform, setting strategy and roadmap for identity document checks used in onboarding and account opening. Works with Engineering, AI/ML, Data Science, Design, Growth and Compliance to improve verification accuracy, conversion, operational efficiency and fraud prevention, using experimentation and analytics to prioritise investments.

Entrust · Cambridge

Leads the design and delivery of complex features in a cryptographic security product, working hands-on across embedded software, platform components, client tools and APIs. Sets technical direction, mentors engineers and supports system-level architecture decisions on availability, latency and data models. Hybrid role in Cambridge, three days onsite.

Adecco · London · £473 – £800 pd

Senior role driving first-line cyber risk management and regulatory compliance across EMEA, coordinating responses to DORA and EBA requirements and translating them into actionable controls. Involves enhancing the Cyber GRC framework, managing risk registers and policy exceptions, and producing monthly metrics and KRIs for senior stakeholders. Acts as the Cyber GRC contact across the region, communicating complex regulatory matters in business language.

Cambridge University Press & Assessment (CUPA) · Cambridge · £69,600 – £85,000 pa

Leads a global business continuity, crisis management and incident response programme across operations in over 170 countries, owning the BCR framework, business impact analysis, testing and assurance. Partners with senior leaders, IT disaster recovery, Group Security and local continuity leads to embed resilience in a federated, matrixed organisation.

Amtis Professional · Shenstone · £50,000 – £60,000 pa

Hands-on Azure engineering role designing and delivering secure, scalable cloud services across IaaS and PaaS. You'll build Infrastructure-as-Code with Terraform or Bicep, develop CI/CD pipelines, drive automation, governance, security and hybrid identity, and lead root-cause analysis. Distinct for shaping a modernising environment rather than pure support.

Palo Alto Networks · London

Technical pre-sales role covering the UK&I region, driving the technology evaluation stage of the sales cycle for the Idira Identity Security Platform. You will run solution demonstrations, architecture reviews and customer proof-of-concepts, designing Zero-Trust access approaches for human and non-human identities across cloud and datacenter environments, and mentoring other solutions engineers.

HAYS Specialist Recruitment · London

Client-facing consulting role helping major organisations assess cyber risk, maturity and capability, then turn strategy into practical transformation programmes. Work spans strategy and risk-based roadmaps, governance structures and operating models, using frameworks such as NIST CSF, ISO 27001, NCSC CAF and NIS2. Senior Consultants also own workstreams, manage deliverables and coach junior colleagues.