Cyber Security Jobs

• London
• Remote
• £24,000 – £45,000 pa
• Entry level

A traineeship combining self-paced online CompTIA, Microsoft and Cisco training with Livelabs practical work, leading to a guaranteed IT Technician placement and later a cyber security role. Candidates study from home with a tutor, sit official exams, and must complete two years in an IT Technician post before progressing into cyber security.

CompTIA A+ · CompTIA · Microsoft +1

• Warrington
• £24,000 – £45,000 pa
• Entry level

A traineeship combining self-paced online training in CompTIA, Microsoft and Cisco courses with Livelabs practical work, leading to CompTIA A+ exams. Candidates are then placed as an IT Technician for two years before progressing into a cyber security technician role, with a job guarantee on completion.

CompTIA A+ · CompTIA · Microsoft +1

• Dagenham
• Remote
• £30,000 – £40,000 pa
• Entry level

A training and placement programme for career changers with no prior IT experience, combining accredited CompTIA online courses, tutor support, practice labs and official A+ and Network+ exams. Participants are then helped into an IT Technician placement before progressing into cyber security roles via Security+ and optional ethical hacking courses.

CompTIA A+ · CompTIA Network+ · CompTIA Security+ +2

• Lincoln
• Remote
• £28,000 – £40,000 pa
• Entry level

A training programme rather than a standard job: you complete accredited CompTIA A+ and Network+ online courses with tutor and mentor support, then practical labs, before being placed as an IT Technician. After roughly two years in that role, further Security+ training (with optional Ethical Hacker and Network Defender courses) prepares you to move into cybersecurity.

CompTIA A+ · CompTIA Network+ · CompTIA Security+ +2

• London
• Hybrid
• Senior
• Permanent

Consulting role focused on designing and deploying Microsoft Purview solutions across Microsoft 365 and Azure, covering DLP, Information Protection, Insider Risk Management, eDiscovery and data classification. Works directly with C-level stakeholders and compliance teams to align data governance and regulatory requirements, producing technical designs and documentation.

Microsoft Purview · Microsoft 365 · Azure +4

• London
• Hybrid
• Lead
• Permanent

Lead the identity practice within a cyber security services company, shaping and delivering identity-focused security capabilities for clients in critical sectors. The role sits at the centre of a team protecting essential services, combining practice leadership with client-facing security transformation work.

• Leicester
• On-site
• £50,000 – £60,000 pa
• Mid-level
• Permanent

First in-house IT role for a growing care group, acting as the intelligent client to an outsourced IT provider. You'll manage SLAs, own Microsoft 365 access and cyber controls, run monthly multi-site health checks, and oversee IT governance and licence spend, reporting directly to the CFO.

Microsoft 365 · VoIP · AI

• United Kingdom
• Remote
• Senior
• Permanent

Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.

Snowflake · dbt · Power BI +4

• Farnborough
• Hybrid · 2 days in office
• £70,000 – £80,000 pa
• Senior
• Permanent

Hands-on detection engineering role designing, testing and deploying detection content across Microsoft Sentinel and Splunk, writing KQL and SPL logic, tuning alerts to cut false positives and onboarding log sources from cloud, identity and network telemetry. Works closely with SOC, Threat Intelligence and Security Architecture teams in a live SOC environment.

Microsoft Sentinel · Splunk · Logic Apps +2

• London
• On-site
• £450 – £455 pd
• Mid-level
• Contract

Hands-on SOC and incident response role monitoring, triaging and investigating cyber security threats across macOS endpoints, Linux cloud workloads, microservices and containerised platforms. You will contain and remediate incidents, document findings and evidence, and contribute to detection rules and response playbooks while working closely with security and engineering teams.

macOS · Linux · Containers +4

• London
• On-site
• £475 – £525 pd
• Contract · Shift work

Hands-on SOC and incident response role investigating cyber security threats across macOS endpoints, Linux cloud workloads, microservices and containerised environments. Responsibilities include alert triage, severity assessment, containment and remediation, telemetry correlation, evidence documentation and improving detection playbooks. On-site shift work covering 10-hour shifts between 06:00 and 16:00.

SIEM · EDR · XDR +3

• London
• Mid-level

Hands-on incident response role covering detection, triage, investigation, containment and recovery of cyber incidents in a complex enterprise environment. Day to day involves monitoring SIEM and EDR/XDR alerts, analysing logs, packet captures and forensic images, threat hunting, and mapping activity to MITRE ATT&CK. Also maintains playbooks, evidence records and post-incident reports, and briefs senior stakeholders.

Microsoft Sentinel · Defender XDR · Defender for Identity +7

• Manchester
• Hybrid
• Lead
• Permanent

Senior technical authority in the Sales Engineering & Field Strategy team, shaping and delivering complex cyber security solutions across professional and managed services. Acts as strategic partner to clients, translating business challenges into secure, scalable designs, while mentoring and quality-assuring the wider Solution Architect team.

• Royal Leamington Spa
• Hybrid · 3 days in office
• £550 – £650 pd
• Senior
• Contract

Hands-on contract role owning the end-to-end detection engineering lifecycle, translating threat intelligence, hunting findings and adversary techniques into effective detection rules. Builds behavioural analytics and detection content across endpoint, identity, cloud, network and email telemetry using KQL, SPL, Sigma, Python and PowerShell, with tuning, purple teaming and Detection-as-Code work alongside SOC, IR and Red Team specialists.

Microsoft Sentinel · Splunk · Elastic +6

• Gloucestershire
• Hybrid
• £60,000 – £80,000 pa
• Mid-level
• Permanent

Investigate and respond to security incidents across endpoint, identity, network and cloud environments for a growing cyber security consultancy and MSSP. The role involves digital forensics, evidence collection, containment and recovery, plus developing IR playbooks and tabletop exercises, working alongside SOC, Threat Intelligence and Detection Engineering teams. It includes an on-call rota and occasional customer travel.

Velociraptor · KAPE · Timesketch +8