Cyber Security Jobs

• Ireland
• Remote
• Senior
• Permanent

Owns major components of the Windows kernel-mode sensor, architecting and building next-generation anti-virus and EDR security software. Works across core OS subsystems like file system, memory, process and networking, with cross-platform deliverables for Windows, Mac and Linux. Leads projects end to end, mentoring and collaborating with distributed teams.

Windows · Mac · Linux +2

• United Kingdom
• Remote
• Senior
• Permanent

Owns major components of the Windows kernel-mode endpoint sensor, architecting and building anti-virus and EDR features that span file system, memory, process and networking subsystems. Leads projects from design to delivery, mentors engineers and collaborates with distributed, cross-platform teams on shared Windows, Mac and Linux components.

Windows · Mac · Linux +1

• Swansea
• Hybrid · 3 days in office
• £45,900 pa
• Senior
• Permanent

Maintains and secures enterprise Windows, Linux and UNIX server infrastructure within a 24/7 operational environment, leading incident and problem resolution across live services. Drives monitoring, alerting and automation improvements while supporting cloud adoption and legacy platform migration, with technical leadership across engineering and service teams.

• Hounslow
• On-site
• £70,000 – £75,000 pa
• Senior

Lead security, compliance and resilience for a multinational business, running risk assessments, business continuity and audit programmes. Oversee ISO 27001, PCI DSS and NIS2 certification activities while advising on AWS and Azure cloud security governance and controls. Highly visible role working with senior technology and business stakeholders.

AWS · Azure · NIS2

• Guildford
• £55,000 – £60,000 pa
• Mid-level

Hands-on role covering 3rd line infrastructure and security support across cloud and on-premise environments, including system hardening, patching, vulnerability remediation, IAM, and network security. You will monitor systems, investigate incidents, and help build security into new systems supporting spacecraft engineering teams. Distinct for its space technology context rather than a typical corporate IT setting.

AWS · Azure · GCP +7

• London
• Remote
• £75,000 – £95,000 pa
• Mid-level

Hands-on infrastructure role maintaining the security, availability and resilience of core systems on GCP. You'll design and manage cloud infrastructure with Terraform and Chef, support Linux, MySQL, Apache and PHP environments, run vulnerability assessments and patching, and work with SRE and compliance teams on SOC 2 alignment and CI/CD automation.

GCP · Kubernetes · Docker +7

• Virtual Location - Uk
• Permanent

Adversarial security testing role on AWS's Continuous Security Testing team, turning threat intelligence and scanner signals into testable hypotheses against live production services. Combines hands-on penetration testing with AI-augmented source code review, tracing chained attack paths and building lasting detections, canaries and fuzzers. Also involves testing agentic AI systems and mentoring engineers.

AWS

• Manchester
• Hybrid · 2 days in office

Owns the end-to-end lifecycle of security products such as IAM, EDR, SIEM and cloud security, defining roadmaps, backlogs and measurable outcomes around risk reduction and control coverage. Works with engineering, GRC and vendors to deliver usable, auditable controls, balancing risk, cost and usability while acting as the main stakeholder contact.

IAM · EDR · SIEM

• Chichester
• Hybrid · 3 days in office
• £50,000 – £65,000 pa
• Mid-level

Hands-on role supporting and maintaining cloud-hosted production, development and test environments, resolving infrastructure, application, database and networking issues. Focus on Microsoft Azure, Windows, monitoring, security vulnerability remediation, automation and disaster recovery planning within a growing international software organisation.

Microsoft Azure · Windows

• United Kingdom
• Remote
• Mid-level

Performs advanced investigative, forensic and containment work during active cyber incidents for Managed Detection and Response customers, correlating alerts and telemetry to establish scope and root cause. Mentors junior IR and SOC analysts, maintains engagement documentation and playbooks, and supports Incident Advisors with validated technical findings. Includes weekend and holiday rotation cover.

OSQuery · SQL · KQL +2

• London
• Senior

Review and remediate software supplier agreements, including reseller agreements, EULAs and MSAs, negotiating revised terms through to signature. Advise on software licensing, vendor risk, and draft technology, operations and procurement contracts across EMEA, applying DORA, GDPR, EBA outsourcing and EU AI Act requirements. Manage a portfolio of 20-30 live matters while developing templates and negotiation playbooks.

DORA · GDPR · EU AI Act +1

• Fleet
• Hybrid
• Mid-level

Owns day-to-day security alerting, investigations and incident response across a cloud-native microservice platform and internal IT estate, directing a Platform Ops team on remediation. Manages SIEM, endpoint and Microsoft 365 security tooling, vulnerability management, IAM and penetration testing engagements, while maintaining ISO 27001 documentation and UK GDPR compliance.

AWS · Kubernetes · EKS +5

• United Kingdom
• Remote
• Senior

Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.

SIEM · SOAR · LLMs +1

• London
• Hybrid
• £67,000 pa
• Permanent

Designs and implements security solutions across cloud, on-premises and hybrid environments for a global technology consultancy's client projects. Day-to-day work covers SIEM log ingestion and routing, firewall and network security management, CIS benchmark assessments, and automating security processes with Python, Bash or PowerShell, Terraform and cloud platforms. Involves client-dependent on-call support and requires British passport holders without dual nationality for clearance.

Splunk · Microsoft Sentinel · Cribl +11

• London
• Hybrid
• Senior
• Permanent

Deliver PCI DSS consultancy engagements across merchant and service provider environments, covering gap assessments, readiness reviews and compliance assessments, plus RoC and AoC documentation. Also supports wider consulting work in ISO 27001, NIST, NCSC CAF, risk management and security maturity, reviewing complex infrastructure, cloud and third-party environments.

PCI DSS v4.x · RoC · AoC +2