Cyber Security Jobs

• United Kingdom
• Remote
• Entry level

As an Associate Consultant on the Platform Professional Services team, you'll act as a trusted advisor helping customers operationalize Falcon Next-Gen SIEM, answering technical questions, demonstrating capabilities, and laying out a roadmap. You'll work with log management, XDR and SOAR features alongside other Falcon engineers and cross-functional teams, feeding customer insights back to product management.

CrowdStrike Falcon · Falcon Next-Gen SIEM · Falcon LogScale +7

• United Kingdom
• Remote
• Entry level

Monitors and performs in-depth analysis of security alerts on the CrowdStrike platform, handling incidents across Windows, Mac and Linux, including malware analysis and remote remediation. Works in a virtual security operations centre, responding to threats in real time and producing written and verbal findings for customer management.

CrowdStrike · Windows · Mac OS +6

• London
• Remote

Owns the end-to-end migration and security operations transformation for enterprise customers moving from legacy platforms to Cortex XDR/XSIAM, Prisma Cloud or Strata. Runs data cutovers, policy mapping, API and log ingestion work, plus Day-in-the-Life workshops and executive value realization sessions. Combines hands-on Python, CLI and REST API automation with customer-facing delivery in a global, remote-first team.

Cortex XDR · Cortex XSIAM · Prisma Cloud +2

• London
• Remote
• Lead · manages people

Lead strategic advisor for enterprise customers modernising their Security Operations Centres through XSIAM deployment, covering log ingestion, detection engineering and automation. The role combines executive-level consulting with hands-on SIEM/SOAR/EDR technical work, mentoring professional services teams and feeding field insights back to Product and R&D. Requires security clearance eligibility and up to 30% travel.

XSIAM · Splunk · IBM QRadar

• London
• On-site
• Mid-level
• Permanent

Application security engineer role focused on security reviews, secure architecture design, threat modeling, and security guidance for internal development teams. Distinct for automating and enhancing security review processes using AI agents, LLMs, and generative AI tooling, alongside security metrics and training outreach.

AI Agents · LLMs · Generative AI

• Birmingham
• Hybrid · 3 days in office
• £300 – £400 pd
• Senior
• Contract

Lead a six-month AI and digital platform security initiative, defining controls and guardrails for GenAI and machine learning across global operations. Architect defences spanning AWS, Azure, hybrid and on-prem environments, aligning with NIST and ISO 27001 while mentoring a senior team of security architects and advising C-suite stakeholders.

AWS · Azure · GenAI

• London
• Mid-level
• Permanent

Conduct application security reviews, secure architecture design and threat modeling across Amazon's products and services. Deliver security training, guidance documentation and metrics to internal development teams, with a strong emphasis on cloud computing and ownership.

AWS

• Gloucester
• £70,000 – £75,000 pa
• Mid-level

Mid-level role in a Security Support team maintaining enterprise network security, focusing on firewalls and SASE services. Day to day involves ITIL-based incident, change and problem management, controlled production changes, root-cause analysis, and vendor escalation. Hands-on work with Palo Alto and Fortinet NGFWs, routing protocols, and troubleshooting via PCAPs and logs in a regulated environment.

Palo Alto · Fortinet · Panorama +7

• Abingdon
• £37,000 – £45,000 pa
• Mid-level

Hands-on security operations role within an MSP, monitoring and investigating alerts across Microsoft 365, Sophos and other platforms for both internal and client environments. Acts as a technical escalation point for the Service Desk and Infrastructure teams, covering incident response, vulnerability and patch management, tenant hardening and remediation tracking.

Microsoft 365 · Sophos · Microsoft Defender +3

• Bromley
• Hybrid
• £55,000 – £62,000 pa
• Mid-level
• Permanent

Operational security role focused on monitoring alerts across endpoints, identities, email and cloud using Rapid7 SIEM, Microsoft Defender and Sophos. You will triage and investigate incidents such as malware, phishing and identity compromise, tune detection tooling, and help build incident response playbooks and runbooks.

Microsoft Defender · Microsoft 365 Defender · Entra ID +7

• Fleet
• Hybrid
• Mid-level

Owns day-to-day security alerting, investigations and incident response across a cloud-native microservice platform and internal IT estate, directing a Platform Ops team on remediation. Manages SIEM, endpoint and Microsoft 365 security tooling, vulnerability management, IAM and penetration testing engagements, while maintaining ISO 27001 documentation and UK GDPR compliance.

AWS · Kubernetes · EKS +5

• London
• £50,000 – £55,000 pa
• Mid-level

Owns information security policies, risk management, data protection and business continuity within a global Group IT function, working alongside senior security managers. Hands-on role embedding security into business processes, maintaining ISO 27001 documentation, running audits and DPIAs, and supporting incident response and awareness training.

Microsoft Purview · Entra ID · Microsoft Defender +5

• Bolton
• Hybrid
• £60,000 – £75,000 pa
• Director · manages people

Lead IT operations across two Bolton sites and home workers for an FCA-regulated financial services business, managing the service desk and infrastructure team while staying hands-on with complex projects and major incidents. Own SLAs, change management, security, backup and DR, and the IT budget, working with Windows Server, Hyper-V, Microsoft 365, networking and Veeam.

Jira Service Management · Windows Server · Hyper-V +7

• Birmingham
• £600 – £601 pd
• Senior

Designs secure Azure architectures and embeds security controls into cloud environments, working hands-on with engineering and application teams. Produces target-state roadmaps, hardened configuration standards and threat models, and leads through influence across security, development and senior stakeholders. Requires deep Azure security architecture expertise plus ARM templates and Terraform.

Azure · AWS · GCP +7

• Manchester
• Hybrid · 3 days in office
• Mid-level
• Permanent

Bridges compliance and hands-on technical security, managing ISO 27001 and Cyber Essentials Plus frameworks, running internal audits and third-party risk assessments. Also hardens AWS/Azure cloud environments, runs vulnerability scans and remediation, and supports incident response and identity/access management. Reports to the Head of Security in a Salford-based team.

AWS · Azure · GCP +4