Cyber Security Jobs

• United Kingdom - Field
• Director · manages people

Leads the R&D organisation building the Entrust Agentic Trust platform, translating a four-plane reference architecture into development strategy, operating model and roadmap. Accountable for engineering execution, quality, security and delivery predictability across cloud-native services, APIs, SDKs, policy and authorization components, and tamper-evident evidence systems. Partners with Product, Architecture, Security and Cloud Operations, and builds a multi-discipline software organisation.

FIPS 140-3 · Common Criteria · SOC 2 +4

• United Kingdom - Field
• Senior

Designs, builds, tests and operates significant capabilities of the Agentic Trust solution within R&D, delivering complex features across the full software development lifecycle. Develops secure APIs, services, integrations and SDKs, mentors less experienced developers, and troubleshoots production issues. Works with Product, Architecture and Security peers to keep the platform secure, scalable and reliable.

Kubernetes · MCP · LLM

• Redmond, United States
• Hybrid · 2 days in office
• US$140,000 – US$220,000 pa
• Senior

Owns the product strategy for CrowdStrike Falcon Privileged Access, driving just-in-time access, secrets management, and isolated session brokering across endpoint, cloud, and infrastructure. Works with design and engineering to build frictionless, AI-native PAM experiences that eliminate standing privileges and integrate privileged context with Falcon telemetry.

CrowdStrike Falcon · CyberArk · BeyondTrust +7

• New York, United States
• Hybrid · 2 days in office
• US$140,000 – US$220,000 pa
• Senior

Owns the product strategy for CrowdStrike's Falcon Privileged Access, driving just-in-time access, secrets management and session brokering across endpoint, cloud and infrastructure. Works with design and other product teams to embed privileged context into the Falcon platform, using AI agents for research, specs and customer synthesis.

CrowdStrike Falcon · CyberArk · BeyondTrust +7

• London
• Remote
• Senior

Technical pre-sales role covering the UK&I region, driving the technology evaluation stage of the sales cycle for the Idira Identity Security Platform. You will run solution demonstrations, architecture reviews and customer proof-of-concepts, designing Zero-Trust access approaches for human and non-human identities across cloud and datacenter environments, and mentoring other solutions engineers.

Azure · AWS · Google Cloud +6

• London
• Remote
• Mid-level

As a Solutions Consultant in the Defence and Intelligence team, you translate complex cybersecurity solutions into strategic business value for defence clients, acting as the evolution of the traditional sales engineering role. You provide technical leadership across on-prem, cloud and security operations, running discovery, demos, workshops and technical validation to secure the technical win. The role requires deep Defence sector experience and work with Defence Systems Integrators.

Palo Alto Networks · SASE · SaaS +2

• London
• US$215,000 – US$225,000 pa
• Lead

Lead research, design and evaluation of detection models identifying automated, fraudulent and malicious activity across Internet-scale traffic. Own the detection measurement framework for noisy or delayed ground truth, mentor others, and drive cross-functional detection strategy with ML, data and product teams.

Python · SQL

• London
• Lead

Owns product strategy, roadmap and commercial model for a new publicly trusted certificate authority, spanning ACME issuance, certificate lifecycle automation, revocation and Certificate Transparency. Works across engineering, compliance, legal and go-to-market on high-consequence infrastructure, with an ACME-first, automation-first and post-quantum-ready design.

AWS Certificate Manager · AWS Private CA · Google Trust Services +7

• Cambridge
• On-site
• Mid-level
• Permanent

Consultants assess critical systems for vulnerabilities, building proof-of-concept demonstrators that combine software, hardware and user interaction. The role spans reverse engineering, low-level programming and rapid prototyping for UK defence and national security clients, working on-site alongside around 40 scientists and engineers.

• London

Customer-facing technical role supporting sales teams with pre-sales and post-sales engagements, including running Proof of Value exercises and presenting threat intelligence reports to audiences from technical teams to C-level executives. Also involves designing custom client integrations and defining solution architectures across network and security systems such as firewalls, IDS/IPS and SIEM.

Cisco · Juniper · Firewalls +1

• Chislehurst
• On-site
• £26,000 pa
• Entry level

Provide first and second-line IT support, troubleshooting hardware, software and connectivity issues while administering Microsoft 365, user accounts and device management. Work in a small team supporting Intune, Autopilot, cybersecurity and emerging technologies such as AI and Copilot, with involvement in IT projects and upgrades.

Microsoft 365 · Exchange Online · SharePoint +7

• Cheshire West and Chester
• Hybrid · 2 days in office
• £50,000 – £55,000 pa

Hands-on role strengthening an organisation's ability to respond to, recover from and learn from cyber incidents. Combines practical system recovery and resilience testing with maintaining Business Continuity, Incident Response and Cyber Recovery plans, plus stakeholder coordination across IT and the wider business. Involves analysing system dependencies, incident reviews and producing resilience documentation.

Microsoft Azure · Azure Site Recovery · Azure Recovery Services +2

• Newport
• Hybrid
• Mid-level
• Permanent

Hands-on role managing the full lifecycle of security incidents within an international CSIRT, investigating SOC alerts and performing host forensic analysis and reverse-engineering. You will industrialise SIEM and EDR tooling, build detection use cases and automated response workflows, and support SOC Level 1 and 2 processes, including on-call crisis response.

SIEM · EDR

• London

Investigates emerging cyber threats and attacker TTPs across production and lab environments, analysing security data to improve detection and response. Works closely with development teams, using scripting and data analysis to test new approaches to spotting malicious or anomalous activity, with a focus on AI and agentic AI security challenges.

Python · Bash · PowerShell +1

• London
• Hybrid
• £89,000 pa
• Senior

Architect secure, resilient network connectivity spanning AWS cloud platforms and on-premise infrastructure, supporting clinicians and researchers accessing sensitive genomic data. The role balances long-term network strategy with practical delivery, defining target architectures, standards and reusable patterns across cloud, hybrid, remote-access and partner connectivity. Involves designing AWS networking, hybrid multi-site connectivity, zero-trust security, and providing architectural governance through delivery.

AWS · Cisco · NVIDIA +7