Cyber Security Jobs

• Reading
• On-site
• Entry level
• Internship

Six-month graduate internship in the Falcon Complete team, working from the Reading office on security alert triage, incident investigation and response, and basic malware analysis. Interns learn the Falcon platform and internal tooling, handle customer inquiries, and deliver a project to improve security controls.

CrowdStrike Falcon

• Germany
• Remote
• Senior

Builds AI agents and automated workflows that help threat analysts investigate, enrich and act on intelligence across the Falcon platform and third-party tools. Combines Python development and REST API integration with LLM and SOAR tooling, testing agents for accuracy and safety before they reach customer environments.

CrowdStrike Falcon · Charlotte AI · Falcon Fusion SOAR +7

• United Kingdom - Field
• Senior

Senior individual contributor providing cross-team technical leadership for the Agentic Trust solution, owning complex problem areas spanning multiple services and platform planes. Remains deeply hands-on, shaping designs, prototyping high-risk capabilities, resolving systemic issues, and creating reusable patterns. Involves identity, delegated authority, policy enforcement, and trustworthy execution, with mentoring and architecture reviews.

MCP · C2PA

• United Kingdom - Field
• Director · manages people

Leads the R&D organisation building the Entrust Agentic Trust platform, translating a four-plane reference architecture into development strategy, operating model and roadmap. Accountable for engineering execution, quality, security and delivery predictability across cloud-native services, APIs, SDKs, policy and authorization components, and tamper-evident evidence systems. Partners with Product, Architecture, Security and Cloud Operations, and builds a multi-discipline software organisation.

FIPS 140-3 · Common Criteria · SOC 2 +4

• Stevenage
• On-site
• £67 – £74 ph
• Senior
• Contract

Operational support, administration and configuration management across Infrastructure and Workplace Windows environments for a defence client, including patching, change management and asset/inventory auditing. Acts as Tier 2/Tier 3 escalation for Windows incidents, performing incident response, root-cause analysis and remediation within highly restricted, fully on-site environments.

Windows Server · Windows OS · Active Directory

• Reading
• Hybrid · 2 days in office
• £500 – £600 pd
• Contract

Owns the end-to-end major incident lifecycle in a complex, multi-supplier enterprise IT environment, coordinating technical teams, suppliers and business stakeholders to restore services quickly. Drives root-cause investigations, post-incident reviews and continual service improvement, using ITIL 4 and ServiceNow. Requires active SC clearance and sole British, Italian or Japanese citizenship.

ServiceNow

• United Kingdom
• Remote
• £65,000 – £75,000 pa
• Mid-level
• Permanent

A security engineering role focused on detection and automation within a CSOC, building SOAR playbooks and SIEM content to improve threat detection and response. The position involves tuning and enriching alerts across security tools, developing automations with Azure Functions and Logic Apps, and using KQL, Python and PowerShell. It is primarily remote with occasional visits to a Midlands head office.

Azure · AWS · Microsoft 365 +1

• Cambridge

Acts as the go-to authority in a chosen reliability specialism—observability, performance engineering, data infrastructure, security-focused SRE or network reliability—defining standards and best practices across SRE, Platform Engineering and DevSecOps. Builds tooling and automation, leads deep-dive investigations into systemic issues, and contributes to incident response and on-call rotations in a cloud-native, Kubernetes-based environment.

AWS · GCP · Azure +1

• United Kingdom
• £600 pd
• Lead
• Contract

Lead the response to major and Priority 1 cyber security incidents, coordinating technical and business stakeholders during live situations and driving containment, eradication and recovery. The role involves crisis decision-making, senior stakeholder communications, incident reviews and close work with security operations, infrastructure and technology teams to build resilience.

• Manchester
• Hybrid
• £60,000 – £75,000 pa
• Mid-level

Lead and evolve the security, privacy and governance framework for a UK software business, acting as Data Protection Officer. Day to day you own the ISMS and ISO 27001/Cyber Essentials Plus certifications, run UK GDPR and DPIA work, build AI governance, manage cyber risk and supplier assurance, and present to board-level stakeholders.

ISO 27001 · Cyber Essentials Plus

• London
• Senior
• Permanent

Builds greenfield security software that automates pentest workflows and surfaces critical security details about every Amazon application. Works with local and international security teams on scalable, mission-critical systems, rapidly prototyping tools that reduce manual security processes and protect customer data across Amazon's ecosystem.

AWS

• Lincoln
• Hybrid
• £55,000 pa
• Senior

Lead the design, implementation and governance of OT network and security across multiple manufacturing sites, working alongside the Global Head of IT Operations. Act as subject matter expert for SCADA, PLCs, ICS networks and industrial protocols, securing and modernising environments while ensuring availability and resilience of business systems.

SCADA · PLC · ICS Networks +4

• Alfreton
• £70,000 – £90,000 pa
• Lead · manages people

Owns cyber security strategy, governance, risk and resilience across a complex, safety-critical and highly regulated organisation, covering both corporate IT and Operational Technology environments. Leads risk management, incident response, ISO 27001 and NCSC alignment, third-party risk and Board-level assurance, while developing internal capability and reporting KPIs and KRIs to senior management.

ISO 27001 · NIST · Cyber Essentials Plus +6

• London
• Hybrid · 3 days in office
• £45,000 – £50,000 pa
• Mid-level

Supports continuous improvement of cyber security processes, tools and operational practices, including vulnerability management, threat detection and security monitoring. Works with technical teams to optimise and integrate SIEM, EDR and identity security platforms, and develops reporting to track security performance. Exposure to Microsoft Logic Apps or Power BI is advantageous.

SIEM · EDR · Microsoft Logic Apps +1

• Nottingham
• Hybrid
• £72,277 – £86,060 pa
• Senior
• Permanent

Owns cyber security compliance across PCI-DSS, the Smart Energy Code, Retail Energy Code and ITGC, managing external audits end-to-end. Leads protective monitoring with SOC/CERT and managed service providers, vulnerability management and penetration testing, and incident response up to Board level. Also mentors junior colleagues and supports DevSecOps teams with threat assessments and IaC reviews.

Splunk · Microsoft Sentinel · Qualys +7