Cyber Security Jobs

Darktrace · Cambridge

Works within Cambridge R&D teams on high-impact projects spanning rapid prototyping and structured platform development, providing expert technical direction and mentoring engineers across languages such as Python, JavaScript, Rust and C++. The role advances a unique methodology for defending against unknown cyber-attacks, using Docker, cloud environments and CI/CD pipelines, and involves engaging with executive leadership on technical strategy.

Darktrace · London

Joins R&D teams to build and enhance cybersecurity products, providing technical direction across rapid prototyping and structured platform development. Involves advancing malware-defence methodology, mentoring engineers in Python, JavaScript, Rust and C++, and working with Docker, cloud environments and CI/CD pipelines. Hybrid role with two days a week in the Cambridge office.

airbus · Bristol

Owns the long-term data protection strategy and technical design of resilient disaster recovery architectures across hybrid, multi-cloud, container and on-premise environments. Acts as the highest escalation point for complex recovery failures, evaluating immutable and air-gapped storage while automating backup and orchestration processes.

airbus · Hamburg, Germany

Owns the long-term data protection strategy and technical design of resilient disaster recovery architectures across hybrid, multi-cloud, container and on-premise environments. Acts as the top escalation point for complex recovery failures, evaluating immutable and air-gapped storage while automating backup and orchestration processes.

Reed · Newport · £62,000 – £71,000 pa

Owns end-to-end delivery and performance of critical IT services delivered through a strategic partner and supplier network in a SIAM environment. Acts as service integrator, managing supplier SLAs, KPIs and contracts, leading service reviews, driving continual improvement and ensuring compliance with NIS and CAF standards. Combines technical oversight of Azure, SaaS, SAP and ServiceNow with stakeholder-facing reporting via Power BI.

Sizewell C · Leiston · £66,000 pa

Responsible for the delivery, performance and continual improvement of enterprise IT services supporting the Sizewell C programme, spanning infrastructure, Azure cloud, Microsoft 365, networks, applications and cyber security operations. Combines technical leadership with ITIL service management, supplier governance and operational assurance in a highly regulated nuclear environment, acting as escalation point for senior stakeholders.

Ricoh · London

Builds and operates secure, scalable platforms and services that take enterprise AI solutions from evaluation into production. Works across DevOps, cloud engineering and MLOps, configuring environments, CI/CD pipelines, automation, monitoring and identity controls alongside AI specialists, data scientists and security teams.

Appcast Enterprise · London

Customer-facing Solution Architect shaping and winning strategic UK Central Government opportunities, working with account, capture and bid teams from early qualification through contract award. Leads solution development, discovery workshops and architecture reviews across Data & Analytics, Cloud, Cyber, AI/ML and Systems Integration, then supports handover into delivery.

Sizewell C · London · £66,866 pa

Owns end-to-end delivery, performance and continual improvement of enterprise IT services for a major nuclear energy programme, spanning Microsoft 365, Azure, infrastructure, networks, applications and cyber security operations. Combines technical leadership with ITIL service management, supplier governance and regulatory compliance, acting as escalation point for senior stakeholders and managing multiple managed service providers.

Cloudflare · London

Acts as primary technical responder for premium enterprise customers, autonomously investigating complex threat telemetry and handling live incident response for volumetric DDoS and application-layer attacks. Implements mitigation across OSI Layers 3, 4 and 7 using Cloudflare's security suite, performs packet and traffic flow analysis, and advises customers during active incidents. Requires 24x7 rotating shifts.

Twinstream Limited · Bristol · £50,000 – £60,000 pa

Hands-on senior role taking operational ownership of a corporate IT estate, managing cloud services, Microsoft 365, Entra ID, networking, endpoint security and automation. Involves leading complex incident resolution, patching, backups and business continuity while mentoring colleagues and working with suppliers alongside the IT Technical Lead.

Square One Resources · Coventry · £455 pm

Designs, implements and maintains enterprise network security across on-prem, cloud and hybrid environments, leading Zero Trust and segmentation initiatives. Hands-on with enterprise firewalls, Azure/AWS network security, VPNs and secure remote access, while collaborating with SOC teams on detection and response. Contract role with three days per week on-site in Coventry.

NCC Group · Remote

Designs, builds and maintains security automations that detect, investigate and respond to cyber threats, working closely with Incident Response to identify improvements and create new playbooks. Delivers scalable automation within the Splunk ecosystem, covering advanced analytics, scripting, new use cases, validation of automation behaviour and documentation, plus mentoring junior engineers.

CrowdStrike · London

Designs, implements and operates a global multi-vendor, multi-cloud and hybrid data center network, covering subnetting, VPC peering, direct connects and hub-spoke topologies. Builds IaC and automation tooling (Ansible, Terraform, Python, Go) in CI/CD pipelines and handles complex production troubleshooting plus on-call rotations.

Sophos · United Kingdom

Hands-on engineering role managing a modern identity stack across the full lifecycle, from passwordless authentication and adaptive access controls to identity governance and non-human identities. You will configure and operate Microsoft Entra ID, Saviynt and Active Directory directly, integrate applications via SAML, OIDC, OAuth and SCIM, and join an out-of-hours support rota.