Cyber Security Jobs

• United Kingdom
• Remote
• Mid-level

Lead incident response engagements, hunting adversaries across large data sets and conducting intrusion investigations under outside counsel. Perform host, network and cloud forensics across Windows, Mac and Linux, plus basic malware analysis, and deliver findings to executives, regulators and legal teams.

CrowdStrike · Zeek · Suricata +6

• United Kingdom
• Remote
• Lead

Serve as technical lead on front-page incident response engagements for Fortune 100 organisations, conducting intrusion investigations under outside counsel and performing host and network forensics across Windows, Mac and Linux. The role also involves hunting threat actors in large datasets, cloud IR in AWS, Azure or GCP, and communicating findings to executives, regulators and legal teams.

CrowdStrike · AWS · Azure +6

• Bristol
• £40,704 – £59,390 pa
• Senior
• Permanent

Conducts novel academic and high-TRL research into agentic AI security assurance for autonomous network management, characterising threat landscapes, running adversarial testing, and building runtime decision validation and dynamic trust scoring. Develops automated mitigation such as rollback and agent isolation, with experimental evaluation on a partner's agentic AI platform and the JOINER national open-networks testbed.

O-RAN · 3GPP · ETSI +2

• Southampton
• Remote
• £75,000 – £85,000 pa
• Senior
• Permanent

Principal-level technical security lead on a high-assurance UK defence programme moving from MVP towards operational capability. The role covers secure-by-design architecture, cross-domain information exchange, cyber risk and assurance, IAM, cryptography, cloud and network security, working with solution architects, DevOps and assurance teams. Distinct for its defence focus and ex-military requirement.

DevOps

• Leeds
• Hybrid
• Senior

Operational owner of an enterprise identity platform, maintaining SailPoint IdentityIQ workflows, connectors and lifecycle processes while troubleshooting provisioning and integration issues across Okta and Microsoft Entra. Acts as the bridge between technical IAM delivery and BAU operations, handling audit evidence, JML automation and access reviews, and providing delegated guidance to team members across global regions.

SailPoint IdentityIQ · Okta · Microsoft Entra +3

• London
• Hybrid · 2–3 days in office
• £90,000 – £100,000 pa
• Senior

Owns and matures security operations across cloud, endpoint and SaaS environments, covering detection engineering, incident response, vulnerability management and AWS/GCP security posture. Over time shifts toward security engineering and architecture, designing scalable telemetry and detection platforms and embedding secure-by-design principles with engineering teams.

AWS · GCP · SIEM +7

• London
• Lead

Security lead for an AI engineering team's products and platform, owning security reviews, threat modelling and sign-off from design through production. Covers AI/LLM risks like prompt injection, CVE remediation, scanning tooling in CI/CD, pen testing and incident response, reporting directly to the CIO.

Azure · GCP · GitHub Actions +7

• London
• £80,000 – £90,000 pa
• Senior

Do you have a background in Application Security, DevSecOps or Product Security, with hands-on experience embedding application security into the SDLC If so, this could be an opportunity worth considering.Join a well-established health research organisation and charity supporting large-scale medical…

• London
• Hybrid · 1 day in office
• £90,000 – £120,000 pa
• Lead · manages people
• Permanent

Lead platform engineering engagements for a cloud consultancy's enterprise clients, from early solution design through delivery. Set technical direction, mentor platform engineers and consultants, and define reusable standards and patterns across AWS, Kubernetes, Terraform and CI/CD. Combines hands-on engineering, architecture and pre-sales consultancy.

AWS · Azure · GCP +7

• United Kingdom - Field (Onfido)
• Senior

Customer-facing role leading enterprise onboarding and implementation of identity and security solutions, guiding customer engineering teams through design, integration, testing and go-live. Involves hands-on troubleshooting of REST APIs, mobile and web SDKs, log and API traffic analysis, and advising on performance, scalability and security. Requires independently managing multiple concurrent engagements and mentoring junior team members.

REST APIs · Android Studio · Xcode +7

• United States - Field
• Senior · manages people

Defines and governs a four-plane reference architecture (Identity, Authority, Execution, Assurance) for an agentic trust layer, owning specs like the Agent Passport, Permission Slip framework, Evidence Ledger and Policy Engine. Chairs architecture and boundary review boards, sets dependency contracts across product lines, and represents the company in standards bodies such as FIDO, OpenID and IETF.

Azure · AWS · Google Cloud +7

• London
• Remote
• Mid-level

Customer-facing pre-sales role in the Central Government team, translating complex cybersecurity solutions into strategic business value. You lead discovery, technical validation, demos and workshops across the PANW portfolio, working with Systems Integrators and internal specialist teams to drive adoption and value realisation.

Palo Alto Networks · SASE · SaaS +2

• London
• Hybrid
• £80,000 – £120,000 pa
• Senior

Hands-on engineering role embedded in the Incydr product team, working directly with customers on technical health checks, custom integrations and troubleshooting. You get full access to the codebase and deployment tooling to diagnose and ship fixes, using AI coding tools to build purpose-built scripts and integrations. Expect some travel to customer sites, with most engagement remote under a hybrid model.

Incydr · Mihra AI · SCIM

• London
• On-site
• Senior

Provide advanced technical support for Cortex XSIAM customers, triaging tickets, calls and escalations within SLAs and performing application- and OS-level troubleshooting. Work with developers to reproduce issues and implement permanent fixes, and with technical account managers to mitigate risk in customer environments. Requires SIEM, EDR and endpoint security expertise plus UK security clearance.

Cortex XSIAM · Kubernetes · GCP +10

• London
• €54,000 – €75,000 pa
• Mid-level

Join the Security Rules team to design, build and operate microservices behind Cloudflare's Application Security products such as Rate Limiting and Web Application Firewall. Work mainly in Rust and Go across distributed systems, databases, Docker and Kubernetes, with on-call duties and mentoring responsibilities.

Rust · Go · Docker +7