Cyber Security Jobs

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

Appvia · London · £75,000 – £90,000 pa

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for public and private sector clients. You will own technical delivery in your area, create reusable modules and deployment patterns, and mentor less experienced engineers within multi-disciplinary consulting teams.

DB Cargo (UK) Limited · Doncaster · £70,000 – £75,000 pa

Acts as the cyber security subject matter expert within an IT Governance & Security function, leading governance, risk, compliance and resilience across business-critical applications, cloud services and operational railway systems. Owns the ISMS and NIS/GDPR compliance while managing security operations, threat monitoring, incident response and vulnerability management. Develops Microsoft Sentinel and Defender XDR capabilities and provides governance across Azure, AWS, Microsoft 365, Entra ID and Intune, including support for ERTMS/ETCS transformation.

Experis · London · £500 pd

Lead end-to-end management of cyber security incidents and major security events within a secure government programme, coordinating technical response teams through containment, eradication and recovery. Act as primary point of contact for incident communications, run response bridges and war-rooms, and produce post-incident reports and root cause analysis. Works alongside SOC, analysts, infrastructure teams and third-party suppliers to improve cyber resilience.

Immersive · United Kingdom

Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.

Sophos · United Kingdom

Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.

Sophos · United Kingdom

Owns the strategy, roadmap and execution for the Endpoint Windows Platform, translating OS and security requirements into product priorities. Partners closely with Engineering, Microsoft and cross-portfolio teams on agent architecture, performance and platform change management, and supports go-to-market enablement.

QinetiQ · Bristol · £65,700 – £73,000 pa

Lead cyber security vulnerability analysis, audit processes and business risk modelling for defence customers, while shaping cyber exercise scenarios and advising on security posture against NIST and ISO27001 frameworks. The role involves applying MITRE ATT&CK and Secure by Design approaches, working largely on-site at a customer site in Corsham.

Maxwell Bond · London · £115,000 – £135,000 pa

Owns security end to end for a confidential investment-data platform and its AI agents, split roughly 60% hands-on product and cloud security and 40% assurance and client-facing work. Sets AWS IAM, encryption and detection patterns, defines agent authorisation and prompt-injection defences, and drives SOC 2, ISO 27001 and AI Act readiness with penetration testing and client due diligence.

Adecco · London · £473 – £800 pd

Senior role driving first-line cyber risk management and regulatory compliance across EMEA, coordinating responses to DORA and EBA requirements and translating them into actionable controls. Involves enhancing the Cyber GRC framework, managing risk registers and policy exceptions, and producing monthly metrics and KRIs for senior stakeholders. Acts as the Cyber GRC contact across the region, communicating complex regulatory matters in business language.

QinetiQ · Malvern, England, United Kingdom · £65,700 – £73,000 pa

Technically leads multidisciplinary teams on complex cryptosecurity bids and projects, interpreting user, system and security requirements for crypto systems. Advises on high-grade crypto and key management, analyses algorithms and secure protocols, and engages regularly with customers and stakeholders. Based on-site at Malvern, with travel to customer sites expected.

NCC Group · Remote

Designs, builds and maintains security automations that detect, investigate and respond to cyber threats, working closely with Incident Response to identify improvements and create new playbooks. Delivers scalable automation within the Splunk ecosystem, covering advanced analytics, scripting, new use cases, validation of automation behaviour and documentation, plus mentoring junior engineers.

Darktrace · Cambridge

Lead strategic and hands-on UX research across multiple cybersecurity products, defining a cross-product research roadmap and running qualitative and quantitative studies such as interviews, contextual enquiry and usability testing. Translate findings into personas, journey maps and workflow models that shape platform unification and information architecture, while building scalable research practices with Product, Design and Engineering.

Humanoid · London

Lead product cybersecurity assurance across the HMND 01 humanoid robot platforms, defining security requirements, threat modelling and risk artefacts for safety-critical electromechanical systems. Own TARA, security management plans and remediation actions, drive compliance with IEC 62443, the EU Machinery Regulation and the Cyber Resilience Act, and build a PSIRT process while guiding a cross-functional security team.

CrowdStrike · United Kingdom

Monitor and analyse security alerts on the CrowdStrike platform, handling incidents across Windows, Mac and Linux, performing malware analysis and remote remediation. The role sits in a virtual security operations centre, producing written findings for customer management and improving detection and triage processes.

CrowdStrike · Jacksonville, United States · £72,000 – £130,000 pa

Technical analyst role in a virtual security operations centre, monitoring and investigating security alerts in real time. Involves incident handling across Windows, Mac and Linux, malware analysis, remote remediation, and serving as escalation point and mentor for junior analysts while producing customer-facing findings.

Palo Alto Networks · London

Lead strategic advisor for enterprise customers modernising their Security Operations Centres through XSIAM deployment, covering log ingestion, detection engineering and automation. The role combines executive-level consulting with hands-on SIEM/SOAR/EDR technical work, mentoring professional services teams and feeding field insights back to Product and R&D. Requires security clearance eligibility and up to 30% travel.