Cyber Security Jobs

CrowdStrike · Ireland

Security researcher role on CrowdStrike Intelligence's Advanced Research Team, developing automated solutions for large-scale data collection, running Internet-wide scans, operating and extending honeypots, and performing vulnerability research. Involves reverse engineering, patch analysis, and publishing research on the company blog or at conferences, alongside ad-hoc technical support for other intelligence teams.

CrowdStrike · Romania

Security researcher role on CrowdStrike Intelligence's Advanced Research Team, developing automated solutions for large-scale data collection, operating and extending honeypots, performing vulnerability research, and reproducing emerging vulnerabilities. The position also involves publishing research on the blog or at conferences and building GenAI/LLM workflows to support analysis and security research.

Sophos · United Kingdom

Leads incident response engagements for customers hit by cyberattacks, directing a team of consultants, running kick-off and daily update calls, and delegating forensic tasks. Handles multiple ransomware and BEC investigations concurrently, performing root cause analysis and producing executive-summary reports mapped to MITRE ATT&CK.

Harnham - Data and Analytics Recruitment · Newcastle upon Tyne · £73,000 – £84,000 pa

Own and operate a business-critical enterprise data platform on Microsoft Azure, acting as technical lead for architecture, scalability, governance and operational excellence. Work with Infrastructure, Security and Architecture teams on CI/CD, automation, monitoring and Infrastructure-as-Code, supporting production and incident management while enabling Data Engineers and shaping platform strategy.

Michael Page · Liverpool · £60,000 – £65,000 pa

Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.

Barclays · London

Owns the optimisation and strategy of transaction monitoring controls across Barclays UK and International, tuning surveillance systems and ensuring governance and escalation procedures are followed. Uses SQL, Scala, Spark and Python for data exploration and visualisation, collaborating with technical and non-technical stakeholders on financial crime risk.

Experis · United Kingdom

Supports the delivery of security architecture and cyber security services across Defence and Government projects, including security assessments, risk analysis, threat identification and security documentation. Works alongside experienced Security Architects and technical specialists on areas such as Identity & Access Management, Security Testing, Privacy and Cloud Security, and requires SC Clearance.

Amazon · London

Builds AI/ML-driven security automation systems that detect, analyse and respond to threats at Amazon scale, integrating automated detection into the company's security infrastructure. Works alongside security engineers and scientists on proactive, offensive and defensive tooling, researching and prototyping new approaches. Distinct for its focus on autonomous security across one of the world's largest tech ecosystems.

TRIA · Sheffield · £500 – £600 pd

Lead the response to high-severity IT incidents across network, infrastructure, cloud and security environments, coordinating technical teams, suppliers and stakeholders to restore services within agreed targets. The role involves chairing incident and crisis calls, post-incident reviews, root cause analysis, ITIL processes, disaster recovery and business continuity planning, plus executive reporting and on-call duties.

DCV Technologies · Royal Leamington Spa · £550 – £650 pd

Hands-on contract role owning the end-to-end detection engineering lifecycle, translating threat intelligence, hunting findings and adversary techniques into effective detection rules. Builds behavioural analytics and detection content across endpoint, identity, cloud, network and email telemetry using KQL, SPL, Sigma, Python and PowerShell, with tuning, purple teaming and Detection-as-Code work alongside SOC, IR and Red Team specialists.

NCC Group · Remote

Designs, builds and maintains security automations that detect, investigate and respond to cyber threats, working closely with Incident Response to identify improvements and create new playbooks. Delivers scalable automation within the Splunk ecosystem, covering advanced analytics, scripting, new use cases, validation of automation behaviour and documentation, plus mentoring junior engineers.

QinetiQ · Bristol · £65,700 – £73,000 pa

Lead cyber security vulnerability analysis, audit processes and business risk modelling for defence customers, while shaping cyber exercise scenarios and advising on security posture against NIST and ISO27001 frameworks. The role involves applying MITRE ATT&CK and Secure by Design approaches, working largely on-site at a customer site in Corsham.

Maxwell Bond · London · £115,000 – £135,000 pa

Owns security end to end for a confidential investment-data platform and its AI agents, split roughly 60% hands-on product and cloud security and 40% assurance and client-facing work. Sets AWS IAM, encryption and detection patterns, defines agent authorisation and prompt-injection defences, and drives SOC 2, ISO 27001 and AI Act readiness with penetration testing and client due diligence.

QinetiQ · Malvern, England, United Kingdom · £65,700 – £73,000 pa

Technically leads multidisciplinary teams on complex cryptosecurity bids and projects, interpreting user, system and security requirements for crypto systems. Advises on high-grade crypto and key management, analyses algorithms and secure protocols, and engages regularly with customers and stakeholders. Based on-site at Malvern, with travel to customer sites expected.

Appcast Enterprise · Whiteley · £61,500 – £78,800 pa

Designs, develops and maintains manual and automated test scripts and reporting for a flagship National Security programme, using frameworks such as Katalon Studio, Selenium, SoapUI and JUnit. Analyses requirements and designs to build risk-based test approaches, working within hybrid Waterfall and Agile scrum teams alongside software and systems engineers.