Cyber Security Jobs

• Cambridge
• Hybrid · 2 days in office
• Mid-level

Backend engineering role focused primarily on TypeScript, prototyping and building new features for AI-driven cybersecurity products. You'll work with a cross-functional team of engineers, designers and strategists, using Docker and cloud environments, with opportunities to specialise across languages like Python, Rust and C++. Hybrid, requiring at least two days a week in the Cambridge office.

Docker

• Cambridge
• Hybrid · 2 days in office
• Mid-level

Partners with developers and product teams to embed quality from the start, designing and maintaining automated test frameworks across API, UI, integration and regression layers. Builds scalable suites into CI/CD pipelines, drives shift-left testing, and contributes to test strategy, code reviews and architecture discussions.

Cypress · Playwright · pytest +7

• Newbury
• Senior

Monitors and manages network equipment and infrastructure for customer services across EMEA and North America, with a strong focus on firewall and network security administration. Day-to-day work covers Cisco ASA, Firepower and Palo Alto firewalls, VMware vSphere and NetApp storage, plus automation and out-of-hours support on a rota.

Cisco ASA · Cisco Firepower Threat Defense · Palo Alto PA-Series +7

• United Kingdom - Field
• Director · manages people

Leads the R&D organisation building the Entrust Agentic Trust platform, translating a four-plane reference architecture into development strategy, operating model and roadmap. Accountable for engineering execution, quality, security and delivery predictability across cloud-native services, APIs, SDKs, policy and authorization components, and tamper-evident evidence systems. Partners with Product, Architecture, Security and Cloud Operations, and builds a multi-discipline software organisation.

FIPS 140-3 · Common Criteria · SOC 2 +4

• United Kingdom
• Remote
• Mid-level

Lead incident response engagements, hunting adversaries across large data sets and conducting intrusion investigations under outside counsel. Perform host, network and cloud forensics across Windows, Mac and Linux, plus basic malware analysis, and deliver findings to executives, regulators and legal teams.

CrowdStrike · Zeek · Suricata +6

• United Kingdom
• Remote
• Entry level

Delivers integration and advisory services for Falcon Next-Gen SIEM, guiding customers through log management, XDR and SOAR use cases while acting as a trusted technical advisor. Partners with Falcon engineers and product management to operationalise the platform and feed customer requirements back into product enhancements.

CrowdStrike Falcon · Falcon Next-Gen SIEM · Falcon LogScale +7

• United Kingdom
• Remote
• Lead

Deliver white-glove onboarding and ongoing technical guidance for Managed XSIAM customers, analysing security data to improve detection coverage, alert quality and tenant hygiene. Lead customer touchpoints and security reviews while partnering with Unit 42 SOC engineering, Product and MDR teams to build automation workflows and scalable service frameworks.

XSIAM · Unit 42

• Paris, France
• Remote
• Mid-level

Owns the end-to-end migration of enterprise customers from legacy security platforms to Cortex, executing data cutovers, policy mappings, API setups and log ingestion validations. Runs practitioner-focused Day in the Life workshops and Value Realization sessions with customer leadership, using dashboards to demonstrate ROI and secure project sign-off.

Palo Alto Networks Cortex XDR · Cortex XSIAM · Prisma Cloud +2

• London
• Senior · manages people

Lead the Threat Application Services team within Cloudforce One, owning the Threat Events platform, external Threat Intel APIs, and backend systems that feed IOCs into WAF and Gateway for automated mitigation. Set architectural direction and operational excellence for distributed, high-latency-sensitive services, while hiring and mentoring engineers building agentic threat intelligence tools.

Cloudflare Workers · SQLite · D1 +4

• London
• Mid-level

Own the full software development lifecycle for distributed systems supporting threat disruption and legal response, building data pipelines that collect and expose threat intelligence for analysts and customers. Work primarily in Golang and TypeScript with Rust, Kafka, Redis, Kubernetes, Terraform and Postgres, collaborating with Threat Intelligence, Trust & Safety, Legal and Product teams, plus on-call rotations and mentoring.

Golang · TypeScript · Rust +7

• Aylesbury
• Hybrid · 2 days in office
• £67,493 – £70,954 pa
• Lead

Defines and governs the organisation's testing strategy across a diverse portfolio of technology projects, system upgrades and service changes. Sets standards, frameworks, processes and tools, and provides training, coaching, oversight and quality assurance reporting rather than hands-on testing. Works in a hybrid pattern, in the office a couple of times a week.

• Cobridge
• On-site
• £45,000 – £55,000 pa
• Senior · manages people
• Permanent

Owns the day-to-day technology environment for an engineering and manufacturing business, covering infrastructure management, systems and database administration, cybersecurity, ERP and global support. Leads and mentors an IT team, runs projects such as system upgrades and software implementations, manages budgets and vendors, and ensures compliance and disaster recovery across UK and international offices.

Microsoft Dynamics AX · Jira · Confluence

• Farnborough
• Senior

Customer-facing Solution Architect shaping and winning strategic UK Central Government opportunities, working with account, capture and bid teams from early qualification through contract award. Leads solution development, discovery workshops and architecture reviews across Data & Analytics, Cloud, Cyber, AI/ML and Systems Integration, and supports handover into delivery.

Azure · AWS

• London
• US$104,435 pa
• Director

Leads and matures an enterprise-wide information governance and records management programme, owning policies, retention schedules, legal hold and defensible disposition across paper and electronic records. Also supports data classification, data governance, privacy by design and AI governance, advising Legal, Compliance, Technology and business stakeholders through cross-functional forums.

• Huntingdon
• Mid-level

Second-line engineer providing advanced troubleshooting, fault rectification and problem management across highly utilised, multi-security-level IT systems. Duties include server and VM maintenance, WSUS/SCCM patching, documentation, change requests and infrastructure project work, liaising with customers to meet SLA and KPI targets.

WSUS · SCCM · SD+ +1