Cyber Security Jobs

Sophos · United Kingdom

Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.

Sophos · United Kingdom

Owns the strategy, roadmap and execution for the Endpoint Windows Platform, translating OS and security requirements into product priorities. Partners closely with Engineering, Microsoft and cross-portfolio teams on agent architecture, performance and platform change management, and supports go-to-market enablement.

Experis · United Kingdom

Supports the delivery of security architecture and cyber security services across Defence and Government projects, including security assessments, risk analysis, threat identification and security documentation. Works alongside experienced Security Architects and technical specialists on areas such as Identity & Access Management, Security Testing, Privacy and Cloud Security, and requires SC Clearance.

QinetiQ · Bristol · £65,700 – £73,000 pa

Lead cyber security vulnerability analysis, audit processes and business risk modelling for defence customers, while shaping cyber exercise scenarios and advising on security posture against NIST and ISO27001 frameworks. The role involves applying MITRE ATT&CK and Secure by Design approaches, working largely on-site at a customer site in Corsham.

QinetiQ · Malvern, England, United Kingdom · £65,700 – £73,000 pa

Lead cyber security consultancy for defence and government customers, developing business risk models, running ISO 27001 audits and detailed vulnerability assessments using NIST and MITRE ATT&CK frameworks. You will translate technical threats into clear risk cases and mitigation strategies for senior stakeholders, embedding Secure by Design principles across projects. Based on a multi-site UK estate with at least three days a week on site and customer travel.

Michael Page · Liverpool · £60,000 – £65,000 pa

Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

Darktrace · Cambridge

Works at the intersection of security engineering and generative AI, researching, prototyping and shaping agentic workflows within the Darktrace product ecosystem. Collaborates with product, engineering and machine learning teams to turn ideas into prototypes, while maintaining product knowledge through open-ended research projects.

Darktrace · London

Security researcher role at the intersection of security engineering and generative AI, exploring, prototyping and shaping agentic workflows within the Darktrace product ecosystem. Involves identifying product use cases, designing prototypes, and coordinating with product, engineering and machine learning teams, while maintaining expertise through open-ended research.

Adecco · London · £473 – £800 pd

Senior role driving first-line cyber risk management and regulatory compliance across EMEA, coordinating responses to DORA and EBA requirements and translating them into actionable controls. Involves enhancing the Cyber GRC framework, managing risk registers and policy exceptions, and producing monthly metrics and KRIs for senior stakeholders. Acts as the Cyber GRC contact across the region, communicating complex regulatory matters in business language.

eFinancialCareers · London

Engineering-led role building defensive capability against AI-driven threats, spanning AI-assisted vulnerability management, security architecture for agentic AI, and detection and response for AI-originated attacks. Sits within Citi's CISO organisation across four teams, with a mandate to ship production tooling rather than work in an innovation lab.

HAYS Specialist Recruitment · London

Client-facing consulting role helping major organisations assess cyber risk, maturity and capability, then turn strategy into practical transformation programmes. Work spans strategy and risk-based roadmaps, governance structures and operating models, using frameworks such as NIST CSF, ISO 27001, NCSC CAF and NIS2. Senior Consultants also own workstreams, manage deliverables and coach junior colleagues.

DCV Technologies · Royal Leamington Spa · £550 – £650 pd

Hands-on contract role owning the end-to-end detection engineering lifecycle, translating threat intelligence, hunting findings and adversary techniques into effective detection rules. Builds behavioural analytics and detection content across endpoint, identity, cloud, network and email telemetry using KQL, SPL, Sigma, Python and PowerShell, with tuning, purple teaming and Detection-as-Code work alongside SOC, IR and Red Team specialists.

Entrust · United Kingdom - Field (Onfido)

Customer-facing role leading enterprise onboarding and implementation of identity and security solutions, guiding customer engineering teams through design, integration, testing and go-live. Involves hands-on troubleshooting of REST APIs, mobile and web SDKs, log and API traffic analysis, and advising on performance, scalability and security. Requires independently managing multiple concurrent engagements and mentoring junior team members.

airbus · Toulouse, France

Owns the long-term data protection strategy and technical design of resilient disaster recovery architectures across hybrid, multi-cloud, container and on-premise environments. Acts as the highest escalation point for complex recovery failures, evaluating immutable and air-gapped storage and driving automation of backup and recovery processes.