Cyber Security Jobs

• Derby
• £26,100 pa
• Junior

Support the monitoring and protection of business systems for a growing financial services organisation, identifying security threats and helping keep critical financial data secure. Day to day involves monitoring alerts, reviewing logs, escalating potential threats, investigating incidents and maintaining documentation, with hands-on exposure to security monitoring tools and incident management processes.

• Manchester
• Remote
• Mid-level
• Permanent

Monitor, detect and respond to cyber incidents for customers from a 24/7 Global Security Operations Centre, working with the Microsoft Security Stack, Splunk, EDR, IDS and IPS tools integrated into a Unified Cyber Platform. The L2 role sits within an MXDR team of over 100 accredited experts handling hundreds of millions of log events daily.

Microsoft Security Stack · Splunk · EDR +3

• Manchester
• Hybrid
• Permanent

Proactively hunts advanced threats across customer environments using a proprietary hunting framework, conducting intelligence-led, hypothesis-driven analysis of TTPs and behaviours. Works cross-functionally with SOC Analysts, Global Detection Engineers, Privacy and Engineering teams to align threat models and mitigate risks.

• United Kingdom
• Remote
• £65,000 – £75,000 pa
• Mid-level
• Permanent

A security engineering role focused on detection and automation within a CSOC, building SOAR playbooks and SIEM content to improve threat detection and response. The position involves tuning and enriching alerts across security tools, developing automations with Azure Functions and Logic Apps, and using KQL, Python and PowerShell. It is primarily remote with occasional visits to a Midlands head office.

Azure · AWS · Microsoft 365 +1

• Ireland
• Remote
• Senior

Builds AI agents and automated workflows that help threat analysts investigate, enrich and act on intelligence across the Falcon platform and third-party tools. Writes Python tooling and integrations, tests agents for accuracy and safety, and partners with analysts to turn their needs into practical solutions.

CrowdStrike Falcon · Charlotte AI · Falcon Fusion SOAR +7

• Romania
• Remote
• Senior

Builds AI agents and automated workflows that help threat analysts investigate, enrich and act on intelligence across the Falcon platform and third-party tools. Writes Python code for integrations and services, tests agents for accuracy and safety, and partners with analysts to turn their needs into practical solutions.

CrowdStrike Falcon · Charlotte AI · Falcon Fusion SOAR +7

• London
• Remote
• £500 pd
• Senior
• Contract

Lead end-to-end management of cyber security incidents and major security events within a secure government programme, coordinating technical response teams through containment, eradication and recovery. Act as primary point of contact for incident communications, run response bridges and war-rooms, and produce post-incident reports and root cause analysis. Works alongside SOC, analysts, infrastructure teams and third-party suppliers to improve cyber resilience.

SIEM · EDR

• United Kingdom
• On-site
• £750 – £850 pd
• Senior
• Contract

Hands-on engineering role building and securing production-grade Kubernetes clusters on bare-metal and on-premises infrastructure, spanning Linux, networking, storage and compute layers. Involves implementing security hardening, logging and observability pipelines (Fluent Bit, OpenTelemetry, Grafana), SIEM integration and EDR/vulnerability tooling, plus an on-call rota for critical infrastructure.

Kubernetes · Fluent Bit · OpenTelemetry +6

• Paris, France
• Remote
• Mid-level

Owns the end-to-end migration of enterprise customers from legacy security platforms to Cortex, executing data cutovers, policy mappings, API setups and log ingestion validations. Runs practitioner-focused Day in the Life workshops and Value Realization sessions with customer leadership, using dashboards to demonstrate ROI and secure project sign-off.

Palo Alto Networks Cortex XDR · Cortex XSIAM · Prisma Cloud +2

• Berlin, Germany
• Remote
• Mid-level

Owns the end-to-end migration of enterprise customers from legacy security platforms to modern Cortex, Prisma Cloud or Strata deployments within a high-velocity sprint model. Executes data cutovers, policy mappings, API and log ingestion work, and runs Day-in-the-Life workshops and value realization sessions with customer security leadership.

Cortex XDR · Cortex XSIAM · Prisma Cloud +2

• London
• Hybrid · 3 days in office
• Lead
• Contract

Oversees cyber assurance across multiple domains or tribes, embedding security by design and ensuring controls meet risk appetite. Works with Digital Delivery leadership, the Cyber Team and the Cyber Security Office, advising on risk, policy and regulatory requirements. Requires threat and risk assessment across varied technology stacks and senior stakeholder influence.

CISSP · ISO 27001 · SANS GIAC +5

• London
• Hybrid
• £70,000 – £80,000 pa
• Lead

Hands-on owner of governance, risk and compliance, maintaining the ISO 27001 ISMS, leading external audits and taking SOC 2 from Type 1 to Type 2. Owns the enterprise risk framework and risk register, manages compliance tooling and supports customer security questionnaires, working across engineering, sales and leadership.

Risk Ledger

• London
• Hybrid · 3 days in office
• £50,000 – £60,000 pa
• Mid-level

Own a cloud-first Microsoft Azure environment for a growing London SaaS business, covering security, reliability and cost-effectiveness. Manage Microsoft 365, identity and internal IT while supporting product engineers and working with compliance colleagues and an external MSP. AI tools, scripting and automation are actively encouraged.

Microsoft Azure · Microsoft 365 · Entra ID +4

• London
• Hybrid
• Mid-level
• Permanent

Join a global team responsible for discovering, assessing, triaging and driving remediation of vulnerabilities across Amazon's infrastructure, services and applications. The role involves analysing disclosures and exploit code, engineering scalable detection mechanisms, and building automation and tooling, with periodic on-call duties.

• Knutsford
• On-site
• Entry level
• Internship

Ten-week summer internship in Barclays' Chief Security Office, working alongside experts to reduce risk, protect customers and improve security delivery. Interns collaborate with cross-functional teams on real projects, gaining exposure to threat intelligence, controls and secure engineering while building technical skills.