Cyber Security Jobs

• London
• On-site
• Entry level

Entry-level analyst role supporting demand generation and go-to-market strategy, tracking campaign performance against pipeline and conversion targets, monitoring funnel metrics from MQL to Closed Won, and analysing win/loss and retention data. Works cross-functionally with Marketing, Sales, SDRs and Customer Success, using Excel/Google Sheets and CRM or BI tools to turn data into actionable pipeline insights.

Salesforce · Tableau · Power BI +1

• Newbury
• Senior

Monitors and manages network equipment and infrastructure for customer services across EMEA and North America, with a strong focus on firewall and network security administration. Day-to-day work covers Cisco ASA, Firepower and Palo Alto firewalls, VMware vSphere and NetApp storage, plus automation and out-of-hours support on a rota.

Cisco ASA · Cisco Firepower Threat Defense · Palo Alto PA-Series +7

• Reading
• On-site
• Entry level
• Internship

Six-month graduate internship in the Falcon Complete team, working from the Reading office on security alert triage, incident investigation and response, and basic malware analysis. Interns learn the Falcon platform and internal tooling, handle customer inquiries, and deliver a project to improve security controls.

CrowdStrike Falcon

• Reading
• Hybrid
• Entry level
• Internship

Internship on CrowdStrike's Technical Analysis Cell, researching nation-state and criminal intrusions through reverse engineering of malware and tooling. The intern builds automation for malware analysis, creates host- and network-based detection signatures, and produces threat intelligence reporting for varied audiences.

CrowdStrike · Disassemblers · Decompilers +1

• London
• Hybrid
• Senior
• Permanent

Senior overlay role acting as lead technical strategist for BT across the UK and EMEA, driving joint technical alignment and co-architecting security offerings. Involves positioning NetSec, SASE, Zero Trust and Cortex CloudSecOps into BT's managed service architecture, leading complex POCs and demos, and providing targeted post-sales advisory. Requires executive-level engagement with BT leadership and close co-selling with internal sales, with around 30% UK travel.

Palo Alto Networks · Cortex · AWS +6

• London
• Remote
• Senior

Develops and runs technical enablement for Professional Services and partner consultants across the Cortex and Prisma Cloud portfolio, delivering workshops, labs, boot camps and office hours. Coaches consultants during live customer engagements and builds capability frameworks, assessments and reusable learning assets. Works cross-functionally with product, engineering and partner teams without direct authority.

Cortex · Prisma Cloud · XSIAM +2

• London

Investigates emerging cyber threats and attacker TTPs across production and lab environments, analysing security data to improve detection and response. Works closely with development teams, using scripting and data analysis to test new approaches to spotting malicious or anomalous activity, with a focus on AI and agentic AI security challenges.

Python · Bash · PowerShell +1

• Cambridge

Investigates emerging cyber threats and attacker TTPs across production and lab environments, analysing security data to improve detection and response. Works closely with development teams to turn research findings into product improvements, using scripting and data analysis to test new detection approaches.

MITRE ATT&CK · PowerShell

• London
• Hybrid
• Mid-level

Builds new features and systems for Cloudflare's edge web server, focusing on the rules engine and its control plane. Works in Rust and Go on large-scale distributed systems, performance engineering, and reliability across a platform handling over 100 million HTTP requests per second.

Rust · Go · Cloudflare

• London
• €54,000 – €75,000 pa
• Mid-level

Join the Security Rules team to design, build and operate microservices behind Cloudflare's Application Security products such as Rate Limiting and Web Application Firewall. Work mainly in Rust and Go across distributed systems, databases, Docker and Kubernetes, with on-call duties and mentoring responsibilities.

Rust · Go · Docker +7

• London
• £124,000 – £186,000 pa
• Senior

Owns architectural direction for Mimecast's Email & Collaboration Security product line, spanning email threat detection, DMARC, data platforms and response capabilities. Works across product, engineering and the Architecture Leadership Team to define integration contracts, ADRs and NFR targets, with cost-per-outcome reasoning and daily AI tooling use.

AWS · Kafka · MCP +4

• London
• Hybrid · 2 days in office
• £44,000 – £66,000 pa
• Mid-level

Acts as the trusted technical advisor for a portfolio of mid-market accounts, working in a three-person pod with an Account Manager and Renewals Manager. Owns platform adoption, configuration health and value scoring across email security, HRM and Incydr products, and packages proof-of-value and business reviews for executive audiences. Also leads churn mitigation and identifies expansion signals ahead of renewal.

Mimecast · Microsoft 365 Defender · Okta +7

• London
• £80,000 – £120,000 pa
• Lead · manages people

Lead the EUC Engineering team, owning the modernisation roadmap for secure, persona-led workplace services across physical, virtual and cloud environments. Balance strategic transformation with the stability, security and governance of business-critical platforms, while coaching engineers and influencing senior stakeholders across infrastructure, cyber and architecture.

Microsoft Intune · Windows Autopilot · Azure Virtual Desktop +2

• Farnborough
• Mid-level

Monitors and investigates security alerts across a 24x7 multi-customer CSOC, analysing telemetry from SIEM, EDR and XDR platforms to determine scope, severity and business impact. Correlates logs, maps adversary behaviour to MITRE ATT&CK, runs threat hunts and tunes detections, while maintaining incident records and coordinating containment and recovery actions.

Microsoft Sentinel · Microsoft Defender XDR · Microsoft Defender Vulnerability Management +2

• Working From Home, UK
• Remote
• Senior
• Permanent

Lead full-scope red team engagements spanning cyber, physical, social engineering and process attack surfaces, emulating real-world adversaries. Build phishing infrastructure and payloads, operate C2 frameworks like Cobalt Strike, and develop custom tooling and EDR evasion tradecraft. Set methodology and mentor operators while working closely with defensive teams.

Cobalt Strike · Nighthawk