Cyber Security Jobs

• Cambridge
• Hybrid
• Senior
• Permanent

Designs, implements and maintains AWS cloud infrastructure supporting microservices-based applications, with heavy focus on EKS, Kubernetes and Terraform/OpenTofu IaC. Also covers service mesh (ISTIO), CI/CD with Jenkins, Splunk and Datadog monitoring, and day-2 operations such as upgrades, backup/restore and cost optimisation.

AWS · EKS · Kubernetes +7

• London
• Lead

Technical owner for a portfolio of EMEA strategic accounts and US identity/workforce platform partners, split roughly 70/30. Drives API and SDK integration, product adoption, RFPs, trials and proofs of concept while mentoring solutions engineers globally and feeding market insight into the product roadmap.

RESTful APIs · SDKs

• United Kingdom
• Remote
• Mid-level

Hands-on SRE role focused on CrowdStrike's Commercial Cloud, covering operational ownership of availability, latency, throughput, monitoring, incident response and capacity planning across thousands of bare metal servers and VMs. Involves building automation and tooling in C++, Java, Python or Go, working with monitoring stacks like Prometheus, Grafana and ELK, and joining a global on-call rotation.

CrowdStrike · ELK · Prometheus +15

• Boston, United States
• Hybrid · 2 days in office
• US$140,000 – US$220,000 pa
• Senior

Owns the product strategy for CrowdStrike Falcon Privileged Access, driving just-in-time access, secrets management, session brokering and zero standing privileges across endpoint, infrastructure and cloud. Works with designers and other product teams to embed privileged context into the Falcon platform, and uses AI agents and rapid prototyping as core parts of the workflow.

CrowdStrike Falcon · CyberArk · BeyondTrust +7

• United Kingdom
• Remote
• Mid-level

Customer-facing technical role guiding higher-education and research clients through security transformation, running discovery, demos, workshops and technical validation across on-prem, cloud and SOC solutions. Works with Professional Services, Customer Success and channel partners to drive adoption, and requires a strong pre-sales background plus experience with Systems Integrators.

Palo Alto Networks

• Amsterdam, Netherlands
• Remote
• Senior

Develops and runs technical enablement programs for Professional Services, Customer Success and delivery partners across the Cortex and Cloud portfolio, covering XSIAM, XSOAR, XDR and Prisma Cloud. Delivers workshops, labs, boot camps and coaching during live customer engagements, and builds capability frameworks, assessments and reusable learning assets. Works cross-functionally as a technical advisor without direct authority.

Cortex XSIAM · Cortex XSOAR · Cortex XDR +3

• Cambridge
• Hybrid · 2 days in office
• Senior

Conducts independent and collaborative research into large language models, statistical methods and classical machine learning, prototyping ideas and implementing models into the wider software stack. Produces latency- and memory-optimised solutions for deployment on edge devices, working closely with software engineers and security analysts.

PyTorch · TensorFlow · scikit-learn +7

• Cambridge
• Hybrid · 2 days in office

Explore and prototype machine learning solutions across domains, using language models, neural networks, statistical methods and classical ML, then implement models into the wider software stack. Work independently and with software engineers and security analysts, optimising models for latency and memory on edge devices. Hybrid role with two compulsory days a week in the Cambridge office.

PyTorch · TensorFlow · scikit-learn +2

• London
• Hybrid · 2 days in office
• Senior

Design, build and operate distributed systems behind Cloudflare's Application Security products (WAF, Page Shield, API Shield) at internet scale, using Go or Rust and devops tooling like Kubernetes and Kafka. The role includes reviewing RFCs and code, on-call shifts, and mentoring other engineers.

Kubernetes · Salt · Kafka +7

• London

Identifies, analyses and supports remediation of vulnerabilities across Cloudflare's infrastructure and cloud environments, triaging findings from Qualys, Nessus and Rapid7 against defined SLAs. Works with engineering, infrastructure and compliance teams on DoD IL4 and FedRAMP preparation, using AI-driven tooling to improve scanning, triage and automated remediation.

Qualys · Nessus · Rapid7 InsightVM +2

• London
• On-site
• £473 – £800 pd
• Senior
• Contract

Senior role driving first-line cyber risk management and regulatory compliance across EMEA, coordinating responses to DORA and EBA requirements and translating them into actionable controls. Involves enhancing the Cyber GRC framework, managing risk registers and policy exceptions, and producing monthly metrics and KRIs for senior stakeholders. Acts as the Cyber GRC contact across the region, communicating complex regulatory matters in business language.

DORA · EBA · NIST +2

• Warwick
• Hybrid
• £65,000 – £75,000 pa
• Mid-level

Hands-on role securing enterprise cloud environments across Azure and GCP, covering vulnerability remediation, cloud security tooling, Microsoft Defender, Conditional Access and identity controls. Works with infrastructure and engineering teams to embed best practice, support governance and compliance, and contribute to incident response, with remote on-call expected within six months.

Microsoft Azure · Google Cloud Platform · Microsoft Defender

• United Kingdom
• Remote
• £65,000 – £75,000 pa
• Mid-level
• Permanent

A security engineering role focused on detection and automation within a CSOC, building SOAR playbooks and SIEM content to improve threat detection and response. The position involves tuning and enriching alerts across security tools, developing automations with Azure Functions and Logic Apps, and using KQL, Python and PowerShell. It is primarily remote with occasional visits to a Midlands head office.

Azure · AWS · Microsoft 365 +1

• Nottingham
• Hybrid
• £72,277 – £86,060 pa
• Senior
• Permanent

Owns cyber security compliance across PCI-DSS, the Smart Energy Code, Retail Energy Code and ITGC, managing external audits end-to-end. Leads protective monitoring with SOC/CERT and managed service providers, vulnerability management and penetration testing, and incident response up to Board level. Also mentors junior colleagues and supports DevSecOps teams with threat assessments and IaC reviews.

Splunk · Microsoft Sentinel · Qualys +7

• London
• On-site
• £60,000 – £92,000 pa
• Mid-level
• Permanent

Day-to-day security engineering for a UK asset manager, validating and actioning escalations from a managed service provider, approving security changes and incidents, and owning Microsoft security tooling in-house. Roughly 70% BAU and 30% project work, covering Entra, Defender, Sentinel, Purview, Zscaler, Palo Alto firewalls, vulnerability management and email security, within a small globally distributed team.

Microsoft Entra · Microsoft Defender · Microsoft Sentinel +7