Cyber Security Jobs

Akkodis · Hessle · £35,000 – £45,000 pa

Hands-on security operations role covering alert triage, incident response and root-cause analysis, plus tuning SIEM, EDR/XDR and monitoring tooling to cut false positives. You will drive automation and security improvement projects while liaising with a managed SOC and internal infrastructure, cloud and application teams.

Forward Role · Leeds · £54,000 – £65,000 pa

Owns day-to-day SIEM operations, defining and tuning detection rules and investigating alerts through to resolution. Runs incident response, threat intelligence and hunting, and EDR management while collaborating with Infrastructure, Networks, DevOps and an outsourced SOC. Also helps design and document security policies, standards and control test methods.

Erin Associates · Manchester · £45,000 – £50,000 pa

Hands-on role strengthening an organisation's security posture and delivering initiatives across its Cyber Security Roadmap. Day to day involves managing Microsoft Defender, Intune, Entra ID and Microsoft 365 security controls, supporting vulnerability remediation, alert triage and incident response, and maintaining Cyber Essentials and CIS Controls compliance.

Planet Recruitment · Manchester · £40,000 – £50,000 pa

Hands-on role delivering a Cyber Security Roadmap and hardening a Microsoft-centric technology estate. Day to day involves configuring and maintaining Defender, Intune, Entra ID and Microsoft 365 security and compliance tooling, plus vulnerability management, alert triage and incident remediation. Works with the Cyber Security Operations Manager, Group Head of Cyber, IT teams and external partners, and supports Cyber Essentials and CIS Controls accreditation.

Experis · Winchester · £41,000 – £50,000 pa

Monitor, triage and investigate security alerts across SIEM and wider security tooling, identifying indicators of compromise and conducting initial incident investigations. Support the full incident response lifecycle including containment, remediation and post-incident learning, while tuning detection rules to reduce false positives. Work with security and infrastructure teams on threat intelligence, trend reporting and continual service improvement.

Global Technology Solutions Ltd · Reading · £50,000 – £60,000 pa

Senior technical authority in Security Operations, leading serious incidents, forensic investigations and root cause analysis while improving detection and response. Engineers Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune and Darktrace, develops automation and conducts proactive threat hunting, and mentors colleagues.

CBSbutler Holdings Limited trading as CBSbutler · Preston · £450 – £500 pd

Governance and coordination role tracking security incidents across a complex multi-supplier SIAM environment, from identification through to closure. You coordinate updates between suppliers and security stakeholders, monitor SLAs and escalation trends, and produce incident reports, dashboards and audit-ready records. Distinct from a hands-on SOC position, with no threat hunting or technical remediation involved.

Randstad Technologies Recruitment · London · £500 – £600 pd

Supports cyber governance, risk management and control execution across core business functions in a high-assurance, regulated environment. Day-to-day work covers cyber risk assessments, security issue management and close collaboration with cross-functional stakeholders. Contract role with hybrid working, three days a week in office.

GCS · London · £600 – £700 pd

Lead a risk-based technical assurance programme across a global enterprise, independently assessing security control effectiveness in infrastructure, cloud, identity, applications and incident response. Manage and mentor a small team of Technical Assurance Analysts while producing board-level reporting and driving continuous controls monitoring and automated assurance.

eFinancialCareers · London

Supports integrated business and technology audits across a global portfolio, assessing whether technology risks are managed and controls operate as intended. Uses data analytics and AI for audit testing, control evidence analysis and issue validation, engaging stakeholders on control design and emerging cyber and regulatory risks.

Tank Recruitment · London

Hands-on incident response role covering detection, triage, investigation, containment and recovery of cyber incidents in a complex enterprise environment. Day to day involves monitoring SIEM and EDR/XDR alerts, analysing logs, packet captures and forensic images, threat hunting, and mapping activity to MITRE ATT&CK. Also maintains playbooks, evidence records and post-incident reports, and briefs senior stakeholders.

Immersive · United Kingdom

Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.

Peregrine · Blackpool

Forward-deployed engineer embedded in a Cyber Capability Unit, building and deploying AI-powered security and fraud prevention solutions. Day to day covers AWS infrastructure, Terraform IaC, GitLab CI pipelines, testing, observability and incident response in regulated environments. Requires active SC clearance.

GEDU · London · £40,000 – £42,500 pa

The Information Security GRC Analyst will perform risk assessments, support the implementation of the ISO 27001 framework, and maintain information security policies. They will work closely with stakeholders to identify and mitigate risks, and assist in security certifications and technical investigations.

Reed Technology · Newcastle upon Tyne · £35,000 – £45,000 pa

Investigating and responding to security incidents at 2nd Line level, monitoring customer environments and SIEM alerts, and threat hunting across a Microsoft security stack including Sentinel, Defender and Entra. Uses KQL and PowerShell for investigations and automation, acts as an escalation point for junior analysts, and supports vulnerability assessment and remediation. Initially on a 4-on, 4-off night shift pattern before moving to an 8-hour shift model.