Cyber Security Jobs

• Cambridge
• Hybrid
• Senior
• Permanent

Designs, implements and maintains AWS cloud infrastructure supporting microservices-based applications, with heavy focus on EKS, Kubernetes and Terraform/OpenTofu IaC. Also covers service mesh (ISTIO), CI/CD with Jenkins, Splunk and Datadog monitoring, and day-2 operations such as upgrades, backup/restore and cost optimisation.

AWS · EKS · Kubernetes +7

• Cambridge
• Hybrid · 3 days in office
• Senior
• Permanent

Leads the design and delivery of complex features in a cryptographic security product, working hands-on across embedded software, platform components, client tools and APIs. Sets technical direction, mentors engineers and supports system-level architecture decisions on availability, latency and data models. Hybrid role in Cambridge, three days onsite.

C · Python

• London
• Hybrid
• Entry level
• Internship

Internship on CrowdStrike's Technical Analysis Cell, researching nation-state and criminal intrusions through reverse engineering, malware analysis and automation tooling. Interns build host- and network-based detection signatures and produce finished threat intelligence reporting for varied audiences.

CrowdStrike · Disassemblers · Decompilers +1

• Germany
• Remote
• Entry level
• Internship

Internship on CrowdStrike's Technical Analysis Cell, researching nation-state and criminal intrusions through reverse engineering of malware and tooling. The role involves building automation for malware analysis, creating host- and network-based detection signatures, and producing finished threat intelligence reporting for customers.

CrowdStrike · Disassemblers · Decompilers +1

• United Kingdom
• Remote
• Mid-level

Customer-facing technical role guiding higher-education and research clients through security transformation, running discovery, demos, workshops and technical validation across on-prem, cloud and SOC solutions. Works with Professional Services, Customer Success and channel partners to drive adoption, and requires a strong pre-sales background plus experience with Systems Integrators.

Palo Alto Networks

• London
• On-site
• Senior

Provide advanced technical support for Cortex XSIAM customers, triaging tickets, calls and escalations within SLAs and performing application- and OS-level troubleshooting. Work with developers to reproduce issues and implement permanent fixes, and with technical account managers to mitigate risk in customer environments. Requires SIEM, EDR and endpoint security expertise plus UK security clearance.

Cortex XSIAM · Kubernetes · GCP +10

• Cambridge
• Hybrid · 2 days in office
• Director · manages people

Lead the strategy, roadmap and execution of Darktrace's interactive demo estate, shaping how products are showcased to prospects, customers and internal teams. Manage a small team of technical content specialists while partnering with Product, Marketing, Enablement and Sales Engineering to evolve demos from on-rails walkthroughs into live sandbox environments.

Reprise · Storylane · Navattic

• London
• Hybrid · 2 days in office
• Senior

Customer-facing pre-sales technical role supporting Key Account Managers to design and manage Darktrace deployments for the UK's largest enterprise customers. Involves building technical relationships, responding to RFIs/RFPs, designing deployment architectures, and evangelising products at events, with roughly 20% travel.

AWS · Azure · Security+ +2

• London
• Mid-level

Builds and maintains a Chromium-based browser engine, remote rendering and streaming tech, and distributed services that run browser sessions across a global network. Day-to-day work spans C++ browser code, Go/Rust/TypeScript services, debugging across browser processes and Linux hosts, and improving latency and reliability, with production on-call.

Chromium · Cloudflare Workers · Nomad +3

• London
• Senior

Builds and operates Cloudflare's Chromium-based browser isolation engine, working across C++, Rust, Go and TypeScript on remote rendering, streaming and distributed session services. The role spans systems programming, distributed systems and security, leading multi-component initiatives and on-call incident response.

Chromium · Cloudflare Workers · Nomad +3

• Remote
• Remote
• Senior
• Permanent

Designs, builds and maintains security automations that detect, investigate and respond to cyber threats, working closely with Incident Response to identify improvements and create new playbooks. Delivers scalable automation within the Splunk ecosystem, covering advanced analytics, scripting, new use cases, validation of automation behaviour and documentation, plus mentoring junior engineers.

Splunk · SOAR

• Remote
• Remote
• Permanent

Hands-on security engineering role focused on protecting both Operational Technology (OT) and Information Technology (IT) environments against cyber threats. The position involves identifying risks and vulnerabilities specific to these environments and developing mitigation strategies, with a Tanium and Sentinel tooling focus. Remote-based with occasional travel to the West Midlands.

Tanium · Sentinel

• Leeds

Deliver continuous security testing across customer external attack surfaces, combining automated scanning with hands-on manual assessment. Validate scanner findings, chain vulnerabilities to demonstrate realistic attack paths, and produce proof-of-concepts and remediation advice. Work directly with customers while contributing to internal tooling and methodology.

Burp Suite Professional · SQLMap · Python +7

• London
• On-site
• Senior · manages people
• Permanent

Lead and work hands-on with a small team to identify, design and deliver business automation that replaces manual processes across Sales, Finance, Marketing, Customer Success and HR. Build automations using AI, workflow platforms (Zapier, Make, n8n, Workato), APIs and data integration, balancing rapid prototyping with robust, maintainable solutions while mentoring the team.

Zapier · Make · n8n +2

• Leeds

Join a Continuous Security Testing team delivering ongoing penetration testing that blends automated scanning with hands-on manual assessment across customers' external attack surfaces. You'll validate scanner findings, chain vulnerabilities to demonstrate realistic attack paths, produce proof-of-concepts and remediation advice, and communicate risks directly to customers while improving internal tooling and methodology.

Burp Suite Professional · SQLMap · Python +7