Cyber Security Jobs

• United Kingdom - Field
• Senior

Senior individual contributor providing cross-team technical leadership for the Agentic Trust solution, owning complex problem areas spanning multiple services and platform planes. Remains deeply hands-on, shaping designs, prototyping high-risk capabilities, resolving systemic issues, and creating reusable patterns. Involves identity, delegated authority, policy enforcement, and trustworthy execution, with mentoring and architecture reviews.

MCP · C2PA

• United Kingdom - Field
• Director · manages people

Leads the R&D organisation building the Entrust Agentic Trust platform, translating a four-plane reference architecture into development strategy, operating model and roadmap. Accountable for engineering execution, quality, security and delivery predictability across cloud-native services, APIs, SDKs, policy and authorization components, and tamper-evident evidence systems. Partners with Product, Architecture, Security and Cloud Operations, and builds a multi-discipline software organisation.

FIPS 140-3 · Common Criteria · SOC 2 +4

• London
• Hybrid
• Senior

Builds and maintains a high-performance, fault-tolerant production backbone network across multiple cloud providers, spanning IP and optical/DWDM technologies connecting data centers and edge sites. Owns improvement initiatives end to end, drives capacity planning and network automation with Python, Ansible and CI/CD pipelines, and participates in a 24x7 on-call rotation.

AWS · GCP · OCI +7

• United Kingdom
• Remote
• Senior

Senior technical consultant conducting front-page incident response investigations for Fortune 100 clients, performing host and network forensics across Windows, Mac and Linux, hunting threat actors in large data sets, and producing written and verbal findings for customers, regulators and legal counsel.

CrowdStrike · Bro/Zeek · Suricata +6

• United Kingdom
• Remote
• Lead

Deliver white-glove onboarding and ongoing technical guidance for Managed XSIAM customers, analysing security data to improve detection coverage, alert quality and tenant hygiene. Lead customer touchpoints and security reviews while partnering with Unit 42 SOC engineering, Product and MDR teams to build automation workflows and scalable service frameworks.

XSIAM · Unit 42

• Amsterdam, Netherlands
• Remote
• Senior

Develops and runs technical enablement programs for Professional Services, Customer Success and delivery partners across the Cortex and Cloud portfolio, covering XSIAM, XSOAR, XDR and Prisma Cloud. Delivers workshops, labs, boot camps and coaching during live customer engagements, and builds capability frameworks, assessments and reusable learning assets. Works cross-functionally as a technical advisor without direct authority.

Cortex XSIAM · Cortex XSOAR · Cortex XDR +3

• Cambridge
• Hybrid · 2 days in office
• Senior

Works within Cambridge R&D teams on high-impact projects spanning rapid prototyping and structured platform development, providing expert technical direction and mentoring engineers across languages such as Python, JavaScript, Rust and C++. The role advances a unique methodology for defending against unknown cyber-attacks, using Docker, cloud environments and CI/CD pipelines, and involves engaging with executive leadership on technical strategy.

Docker · Git · Cloud Computing

• London
• Hybrid · 2 days in office
• Senior

Joins R&D teams to build and enhance cybersecurity products, providing technical direction across rapid prototyping and structured platform development. Involves advancing malware-defence methodology, mentoring engineers in Python, JavaScript, Rust and C++, and working with Docker, cloud environments and CI/CD pipelines. Hybrid role with two days a week in the Cambridge office.

Docker · Git · Cloud Computing

• London
• US$215,000 – US$225,000 pa
• Lead

Lead research, design and evaluation of detection models identifying automated, fraudulent and malicious activity across Internet-scale traffic. Own the detection measurement framework for noisy or delayed ground truth, mentor others, and drive cross-functional detection strategy with ML, data and product teams.

Python · SQL

• London
• Lead

Owns product strategy, roadmap and commercial model for a new publicly trusted certificate authority, spanning ACME issuance, certificate lifecycle automation, revocation and Certificate Transparency. Works across engineering, compliance, legal and go-to-market on high-consequence infrastructure, with an ACME-first, automation-first and post-quantum-ready design.

AWS Certificate Manager · AWS Private CA · Google Trust Services +7

• Warwick
• Hybrid
• £65,000 – £75,000 pa
• Mid-level

Designs and develops security automation workflows and playbooks, automating alert triage, investigation and response while integrating security tools to cut manual workload. Works closely with Security Operations teams using Python and PowerShell, supporting SIEM/SOAR evolution and a strategic migration to Google SecOps (Chronicle).

Microsoft Sentinel · Logic Apps · Google SecOps +1

• Warwick
• Hybrid
• £65,000 – £75,000 pa
• Mid-level

Embed security into the software development lifecycle, partnering with engineering teams to improve secure coding and conduct application security assessments. Support DevSecOps initiatives, identify vulnerabilities before release, and strengthen security within CI/CD pipelines across a growing technology estate.

SaaS

• Knutsford
• Mid-level · manages people

Hands-on engineering role safeguarding encryption keys and cryptographic services across enterprise applications, working with Hardware Security Modules and Thales/Entrust tooling. Involves BAU and 24/7 on-call support, security assessments, penetration testing, and key management across Windows and Linux environments, with occasional off-site data centre work.

Thales · Entrust · SharePoint +5

• London
• Senior · manages people

Owns the optimisation and strategy of transaction monitoring controls across Barclays UK and International, tuning surveillance systems and ensuring governance and escalation procedures are followed. Uses SQL, Scala, Spark and Python for data exploration and visualisation, collaborating with technical and non-technical stakeholders on financial crime risk.

SQL · Scala · Spark +1

• Manchester
• Remote
• £60,000 – £80,000 pa
• Mid-level
• Permanent

This role involves conducting comprehensive penetration tests across networks, web and mobile applications, APIs, and cloud environments using both manual and automated techniques. The tester will simulate real-world cyberattacks, identify vulnerabilities, and produce detailed technical and executive reports with actionable remediation advice. A key focus is translating complex security findings for non-technical stakeholders while adhering to strict ethical and compliance standards in a security-cleared context.