Cyber Security Jobs

• United Kingdom
• Remote
• Lead · manages people

Lead a team of three data scientists building machine learning and agentic AI systems for threat detection, malware analysis and security automation. Set technical standards, own ML roadmaps from research to production, and partner with security research, engineering and product teams while staying hands-on with Python, ML frameworks and large-scale data.

AWS · Linux

• Spain
• Remote
• Lead · manages people

Lead a team of three data scientists building machine learning and agentic AI systems for threat detection, malware analysis and security automation. Set technical standards, drive ML strategy from research to production, and partner with security research, engineering and product teams. Requires dual expertise in ML and cybersecurity.

AWS · Linux

• London
• Remote
• Senior

Senior technical product engineer role advising partners, customers and internal teams on cloud-native security, Cortex capabilities and SOC automation. Involves cross-functional projects, product roadmap feedback, and building playbooks and integrations across AWS, Azure and GCP.

AWS · Azure · GCP +3

• London
• Mid-level
• Permanent

Join Amazon's Application Security team to conduct security reviews, design secure architectures, and perform threat modeling across a vast range of products and services. You'll also deliver security training, create guidance documentation, and track security metrics while working with builders to protect customer trust at global scale.

AWS

• London
• Director · manages people
• Permanent

Lead and grow a team of security engineers and incident managers, owning incident response processes, SLAs and metrics at AWS scale. Partner with service teams on prioritisation and remediation, drive automation and process improvements, and guide architectural and technical strategy across organisations.

AWS

• Malvern, England, United Kingdom
• Hybrid · 3 days in office
• £65,700 – £73,000 pa
• Senior

Lead cyber security consultancy for defence and government customers, developing business risk models, running ISO 27001 audits and detailed vulnerability assessments using NIST and MITRE ATT&CK frameworks. You will translate technical threats into clear risk cases and mitigation strategies for senior stakeholders, embedding Secure by Design principles across projects. Based on a multi-site UK estate with at least three days a week on site and customer travel.

NIST · ISO 27001 · MITRE ATT&CK

• London
• Hybrid · 3 days in office
• Senior
• Permanent

Builds and operates production ML systems for document classification and extraction, using LLMs/VLMs and traditional ML to power identity verification at scale. Leads technical design from RFC to deployment, optimises GPU inference, and develops training and evaluation pipelines. Works in a squad-based team alongside Applied Science, Product and Data Science.

AWS · Kubernetes · TensorFlow +4

• Lisbon, Portugal
• Hybrid · 3 days in office
• Senior
• Permanent

Builds and operates production ML systems for document extraction powering identity verification, working with VLMs/LLMs and traditional ML at scale. Owns technical design from RFC to deployment, optimising GPU inference, training and evaluation pipelines, and labelling workflows. Mentors engineers and collaborates with Applied Science, Product and Data Science in a squad-based team.

AWS · Kubernetes · TensorFlow +4

• Newport
• Hybrid
• Mid-level
• Permanent

Hands-on role managing the full lifecycle of security incidents within an international CSIRT, investigating SOC alerts and performing host forensic analysis and reverse-engineering. You will industrialise SIEM and EDR tooling, build detection use cases and automated response workflows, and support SOC Level 1 and 2 processes, including on-call crisis response.

SIEM · EDR

• Leicester
• On-site
• £50,000 – £60,000 pa
• Mid-level
• Permanent

First in-house IT role for a growing care group, acting as the intelligent client to an outsourced IT provider. You'll manage SLAs, own Microsoft 365 access and cyber controls, run monthly multi-site health checks, and oversee IT governance and licence spend, reporting directly to the CFO.

Microsoft 365 · VoIP · AI

• Manchester
• £58,500 – £71,500 pa
• Lead
• Permanent

Owns the Group's infrastructure estate across Microsoft 365, Azure, networks, security and end-user services, acting as primary technical owner of the MSP and suppliers. Leads modernisation of multi-site networking, identity and endpoint security using Entra ID, Intune and Autopilot, plus resilience, DR and governance work.

Microsoft 365 · Azure · Entra ID +4

• London
• Hybrid · 2 days in office
• £55,000 – £70,000 pa
• Mid-level

Owns the Business Resilience function, covering Business Continuity, Disaster Recovery, Crisis Management and Incident Response. Writes, tests and implements BCPs, BIAs and DR plans, runs resilience exercises and works with Technology and Cyber Security teams on recovery solutions. Also contributes to Enterprise Risk, GRC, audit and third-party risk, with heavy senior stakeholder engagement.

ISO 31000 · ISO 27001 · NIST

• London
• £90,000 – £110,000 pa
• Senior

Hands-on platform role spanning platform engineering, SRE, developer experience and DevSecOps. You'll build and maintain cloud infrastructure in AWS and GCP with Terraform and container orchestration, create CI/CD pipelines and self-service golden paths, and embed shift-left security, observability and SRE practices across a small, growing platform team.

AWS · GCP · Grafana +7

• Manchester
• Hybrid
• £70,000 – £85,000 pa
• Senior

Own AWS infrastructure, CI/CD pipelines and observability for a new fintech platform, reporting to the CTO. Hands-on work spans Terraform IaC, Kubernetes, security controls, incident response and PCI-DSS/FCA compliance, with significant influence over tooling and scaling decisions in an early-stage team.

AWS · Terraform · Docker +1

• Stevenage
• On-site
• £67 – £74 ph
• Senior
• Contract

Operational support, administration and configuration management across Infrastructure and Workplace Windows environments for a defence client, including patching, change management and asset/inventory auditing. Acts as Tier 2/Tier 3 escalation for Windows incidents, performing incident response, root-cause analysis and remediation within highly restricted, fully on-site environments.

Windows Server · Windows OS · Active Directory