Cyber Security Jobs in Woking

• Spain
• Remote
• Senior

Lead applied research applying LLMs, deep learning and other modern AI techniques to cybersecurity problems, architecting research strategy and production systems at massive scale. Provide technical leadership and mentoring while driving GenAI model architecture, training and deployment decisions, with a research-to-production and publication focus.

LLM · Deep Learning Frameworks · GPU +1

• Ireland
• Remote
• Senior

Lead applied research applying LLMs, deep learning and other modern AI techniques to cybersecurity problems, architecting research strategy and making decisions on model architectures, training and deployment. Build production AI systems at massive scale while mentoring scientists and partnering with software engineers and senior leadership. Distinct for its greenfield, research-to-production focus and technical leadership remit.

CrowdStrike · LLM · Deep Learning Frameworks +2

• London
• On-site
• £475 – £525 pd
• Contract · Shift work

Hands-on SOC and incident response role investigating cyber security threats across macOS endpoints, Linux cloud workloads, microservices and containerised environments. Responsibilities include alert triage, severity assessment, containment and remediation, telemetry correlation, evidence documentation and improving detection playbooks. On-site shift work covering 10-hour shifts between 06:00 and 16:00.

SIEM · EDR · XDR +3

• Cardiff
• Remote
• £62,000 – £72,000 pa
• Mid-level

Hands-on security engineering role focused on building and improving controls across a Microsoft-centric estate, including Defender, Sentinel, Azure and Entra ID. Involves vulnerability management, data protection with Purview, incident response support and embedding security into projects, with influence over strategy rather than pure SOC operations.

Microsoft Defender · Microsoft Sentinel · Azure +2

• London
• Hybrid · 2 days in office
• £115,000 – £125,000 pa
• Director

Own the information and cyber security agenda for an international organisation, defining strategy, policies and technical baselines across networks, cloud, identity and endpoints. A senior individual-contributor role without line management, working with infrastructure, technology and external providers to drive vulnerability management, monitoring, incident response and security architecture. Requires hands-on technical depth plus the ability to influence senior stakeholders.

Microsoft Azure · Microsoft 365 · Google Enterprise +3

• Cambridge
• Hybrid
• £60,000 – £70,000 pa
• Senior

Senior role shaping system design and test criteria for Linux-based embedded systems, leading software security work including Hardware Root of Trust, Secure Boot and TPM integration. Day to day involves embedded C development, Yocto build systems and Linux kernel work, integrating software with hardware via I2C, SPI and UART, plus root-cause debugging. The position also includes mentoring junior engineers within an Agile R&D environment.

Linux · Yocto · Jenkins +6

• Liverpool
• Hybrid
• £60,000 – £65,000 pa
• Senior
• Contract

Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.

SIEM · IAM · DLP +1

• Stevenage
• On-site
• £67 – £74 ph
• Senior
• Contract

Operational support, administration and configuration management across Infrastructure and Workplace Windows environments for a defence client, including patching, change management and asset/inventory auditing. Acts as Tier 2/Tier 3 escalation for Windows incidents, performing incident response, root-cause analysis and remediation within highly restricted, fully on-site environments.

Windows Server · Windows OS · Active Directory

• London
• Hybrid · 1 day in office
• £800 – £900 pd
• Senior
• Contract

Translate high-level SecOps transition strategies into detailed, low-level implementation plans across security engineering, threat and vulnerability management and security testing. Define operational readiness criteria, phase-gate checklists and multi-year delivery roadmaps, coordinating dependencies with architecture, GRC and technical SMEs. Requires active SC clearance and UK Government or regulated-environment experience.

SIEM · IAM · PAM +1

• London
• £50,000 – £55,000 pa
• Mid-level

Owns information security policies, risk management, data protection and business continuity within a global Group IT function, working alongside senior security managers. Hands-on role embedding security into business processes, maintaining ISO 27001 documentation, running audits and DPIAs, and supporting incident response and awareness training.

Microsoft Purview · Entra ID · Microsoft Defender +5

• Birmingham
• Hybrid
• £35,000 – £50,000 pa
• Senior

A newly created role at the heart of service delivery for a growing managed services team, focused on improving automation, security, monitoring, patch management and endpoint management across a diverse customer base. The engineer leads development of service standards and tooling, builds PowerShell and API automation, manages RMM platforms, and acts as senior escalation point for infrastructure, endpoint, security, networking and backup issues, working closely with projects, support and service delivery teams.

Microsoft 365 · Windows Server · Entra ID +6

• London
• Senior

Builds and operates Cloudflare's Chromium-based browser isolation engine, working across C++, Rust, Go and TypeScript on remote rendering, streaming and distributed session services. The role spans systems programming, distributed systems and security, leading multi-component initiatives and on-call incident response.

Chromium · Cloudflare Workers · Nomad +3

• United Kingdom
• Remote
• Senior
• Permanent

Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.

Snowflake · dbt · Power BI +4

• Cambridge

Join a global team developing and improving threat detection capabilities across key product areas. You'll respond to customer incidents, analyse cyber threat intelligence, and build detection schemes aligned to adversary techniques, collaborating with Development, Security Research and SOC teams.

Darktrace · GitLab

• Cambridge
• On-site
• Mid-level
• Permanent

Consultants assess critical systems for cyber-physical vulnerabilities, combining deep hardware research, testing and reverse engineering with rapid prototyping of proof-of-concept demonstrators. Work spans niche defence and national security projects, interfacing with hardware via protocols like JTAG and UART and using test equipment such as oscilloscopes. The role is fully on-site in Cambridge labs within a flat, collaborative ~40-person consultancy.

JTAG · UART · Oscilloscopes