Cyber Security Jobs

CrowdStrike · Reading

A customer-facing technical role supporting the Value Selling sales play through TDDs, POVs, RFIs and RFPs, architecting and demonstrating complex security solutions. The position also involves competitive research, internal enablement sessions, technical documentation, and mentoring junior Sales Engineers, with a focus on the Falcon platform and incident response, forensics or security analytics.

CrowdStrike · United Kingdom

Lead incident response engagements for a global cybersecurity firm, conducting intrusion investigations under outside counsel direction. Perform host and network forensics across Windows, Mac and Linux, basic malware analysis, and threat hunting across large data sets, while producing reports for customers, regulators and legal counsel.

Amazon · London

Builds and operates automation platforms that onboard threat detection, remediate security risk and accelerate incident response across every AWS account. Day to day involves designing loosely specified features, writing well-tested Python and TypeScript on AWS services, instrumenting systems for operational excellence, and participating in an on-call rotation. The team runs foundational services at very high scale with a strong 'you build it, you run it' culture.

Mentmore Recruitment · Reading · £86,000 – £87,000 pa

Develops and implements automated control testing and continuous monitoring across IT, OT and business functions, identifying automation opportunities and improving control testing processes. Builds automation workflows using Python, PowerShell, RPA or audit automation tools, reviews results, escalates control deficiencies and maintains documentation. Works with technical teams, control owners and stakeholders to support risk, compliance and cybersecurity objectives.

Sellick Partnership · Newcastle upon Tyne · £57,000 pa

Protect business systems, infrastructure and data by monitoring, investigating and responding to cyber threats and incidents. Manage vulnerability remediation, patching and endpoint security while securing cloud, network and endpoint environments. Support governance, audits and compliance with standards such as ISO 27001 and Cyber Essentials Plus, working with internal teams and third-party suppliers.

Netcraft · London

Lead a newly formed backend team owning several key products, including an integration layer for SIEM platforms, a system engaging conversational scammers at scale, and email analysis for phishing detection. Split time between hands-on engineering (30-50%) and managing a delivery roadmap, modernising legacy platforms while commercialising new ones.

Hays Technology · Leeds · £65,000 – £70,000 pa

Lead a cyber security team day to day, covering resource planning, rotas and performance management, while overseeing incident response, vulnerability management and cloud security migration. Act as escalation point for security incidents and lead war-gaming exercises within an ITIL and ISO 27001 framework, requiring hands-on Azure security expertise.

airbus · Manching, Germany

Owns the global IP telephony product across Airbus Defence and Space, covering strategy, design, go-live, operations and obsolescence for on-premise Cisco softphone, fixed telephony and instant messaging. Manages the full ITIL lifecycle, steers an international support team, holds CAPEX/OPEX budget and validates product readiness within a highly regulated security environment.

Amazon · London

Builds and operates automation platforms that onboard threat detection, remediate security risk and accelerate incident response across every AWS account. The role spans designing loosely specified features, owning operational health through instrumentation and automation, and participating in an on-call rotation, using AWS services, Python and TypeScript at very high scale.

Darktrace · London

Hands-on technical leadership role maintaining and evolving the Workday integration ecosystem across HR and Finance, reporting to the Digital Transformation Lead. You will design, build and support integrations using Workday Studio, EIB, web services and APIs, govern the Workday security model, and develop reporting and analytics. The role combines technical delivery with architecture, security, compliance and service management responsibilities.

Darktrace · Cambridge

Hands-on technical leadership role maintaining and evolving the Workday integration ecosystem across HR and Finance, reporting to the Digital Transformation Lead. You will design, build and support integrations using Workday Studio, EIB, web services and APIs, govern the Workday security model, and develop reporting and analytics, while balancing project delivery with operational support.

Hays Technology · London · £644 pd

Senior technical authority providing leadership across a large-scale AWS platform estate, covering cloud infrastructure, applications, ingest pipelines and live services. Defines engineering standards, governance and assurance, owns platform reliability and leads major incident response for critical 24/7 services, coordinating multiple teams and suppliers.

ECS Resource Group · Solihull · £32,000 – £38,400 pa

Join a brand-new 24/7 support team providing advanced diagnostics and resolution of network incidents across enterprise environments. You will troubleshoot routing, switching, firewalls, wireless and connectivity issues, manage escalations with vendors, and handle major incident response on a 4 on/4 off shift pattern.

Brio Digital · London · £500 pd

Builds and runs CI/CD pipelines in Azure DevOps and provisions Azure infrastructure with Terraform or Bicep for a major NHS programme. Automates builds, testing and releases across environments, monitors platform health and cost, and embeds security and compliance controls. Works with developers, testers and architects, and supports incident response in live services.

CPS Group · Cardiff · £40,000 – £45,000 pa

Client-facing technical role in a Microsoft-focused security partner's Cyber Security Delivery Team, acting as a trusted point of contact for customers. Day to day involves tuning Defender and Entra controls, building KQL detections in Microsoft Sentinel, running phishing simulations and vulnerability scans, and supporting incident response and reporting.