Cyber Security Jobs in Woking

• Romania
• Remote
• Senior · manages people

Lead applied research applying LLMs, deep learning and other modern AI techniques to cybersecurity, architecting research strategy and making decisions on model architectures, training and deployment. Build production AI systems at massive scale while mentoring scientists and aligning technical strategy with senior leadership.

LLM · Deep Learning Frameworks · GPU +1

• Germany
• Remote
• Senior

Security researcher role on CrowdStrike Intelligence's Advanced Research Team, developing automated solutions for large-scale data collection, operating and extending honeypots, performing vulnerability research, and reproducing emerging vulnerabilities. Involves reverse engineering, Linux/Windows internals, Python tooling, and GenAI/LLM workflows, with published research on the CrowdStrike blog or at conferences.

CrowdStrike · Python · Android +4

• Cambridge
• On-site
• Mid-level
• Permanent

Consultants assess critical systems for vulnerabilities, building proof-of-concept demonstrators that combine software, hardware and user interaction. The role spans reverse engineering, low-level programming and rapid prototyping for UK defence and national security clients, working on-site alongside around 40 scientists and engineers.

• Thame
• Remote
• £600 – £850 pd
• Senior
• Contract · Part time

Part-time consultant guiding a client's migration from traditional data centres to AWS, acting as an escalation point and mentor for a small team of engineers. Works closely with the CISO on security reviews and strategy, applying SIEM, EDR and vulnerability management skills. Mostly remote with occasional in-person catch-ups.

AWS · SentinelOne · Microsoft Security +1

• Redhill
• On-site
• £50,000 – £52,500 pa
• Mid-level
• Permanent

Hands-on security engineering role owning security operations, defining standards and responding to incidents across internal and customer networks. Involves monitoring threat intelligence, vulnerability assessments, and building SIEM and IDS/IPS solutions, with Cisco networking and compliance work (ISO27001, GDPR). Requires SC clearance eligibility and at least five years in secure network environments.

Cisco · Juniper · Linux +7

• Manchester
• Hybrid · 1 day in office
• £70,000 – £75,000 pa
• Mid-level

Hands-on security engineering role focused on Microsoft security platforms, including Defender XDR, Sentinel, Purview, Defender for Cloud and Entra. You will build security monitoring, telemetry and SOAR automation, investigate incidents and embed controls into cloud and development processes alongside security, cloud and engineering teams.

Microsoft Defender XDR · Microsoft Sentinel · Microsoft Purview +5

• Newcastle upon Tyne
• Senior

Lead and deliver infrastructure, web application and cloud penetration testing engagements, plus Cyber Essentials Plus assessments and technical security reviews. As one of the practice's early senior hires, you will shape methodologies, assure report quality, mentor junior consultants and support pre-sales for a growing national cyber security consultancy.

Nessus · Qualys · OpenVAS +5

• United Kingdom
• Remote
• £65,000 – £75,000 pa
• Mid-level
• Permanent

A security engineering role focused on detection and automation within a CSOC, building SOAR playbooks and SIEM content to improve threat detection and response. The position involves tuning and enriching alerts across security tools, developing automations with Azure Functions and Logic Apps, and using KQL, Python and PowerShell. It is primarily remote with occasional visits to a Midlands head office.

Azure · AWS · Microsoft 365 +1

• London
• Hybrid
• £80,000 – £100,000 pa
• Senior

You will define and challenge IAM business requirements, design and implement identity solutions, and advise clients on strategy, transformation and Target Operating Models. The role spans Access Management, Identity Governance and Privileged Access Management, working with tools such as Azure, Okta, SailPoint and CyberArk in a vendor-independent consulting practice.

Microsoft Azure · Ping Identity · Okta +6

• Devon
• £600 pd
• Mid-level
• Contract

Hands-on operational support for identity and access management in a busy Higher Education IT team, covering Active Directory and Microsoft Entra ID. Day-to-day work includes user lifecycle management, group memberships and permissions, troubleshooting identity incidents, and cloud authentication administration, freeing senior specialists for project delivery.

Active Directory · Microsoft Entra ID · Azure AD +2

• Bristol
• Hybrid · 2 days in office
• £80,000 pa
• Director

Lead the UK information security strategy for a large healthcare provider, owning IT risk, governance and compliance across the business. The role involves running risk registers, maintaining an ISO 27001-aligned ISMS, leading internal and external audits, overseeing supplier risk assessments and directing incident response, reporting to the UK CIO and working with the Group CISO.

ISO 27001 · NIST · Cyber Essentials +1

• Bristol
• Hybrid · 2 days in office
• £80,000 pa
• Director · manages people
• Permanent

Lead the UK information security strategy for a healthcare provider, owning governance, risk and compliance across systems and data. You'll develop the ISMS to ISO 27001, NIST, Cyber Essentials and GDPR standards, run internal and external audits, manage third-party supplier risk and lead incident response, reporting to the UK CIO and working with the Group CISO.

ISO 27001 · NIST · Cyber Essentials +1

• Bristol
• Hybrid · 3 days in office
• £86,400 – £96,000 pa
• Lead

Provides strategic cyber security consultancy to senior stakeholders, helping organisations understand and respond to evolving security challenges and business risks. Applies frameworks such as NIST, ISO27001, MITRE ATT&CK and Zero Trust to assess vulnerabilities and maturity, while leading teams, supporting bids and developing business within defence and critical national infrastructure.

NIST · MITRE ATT&CK · ISO 27001

• Farnborough
• On-site
• £48,000 – £58,000 pa
• Senior
• Shift work

Investigating and triaging complex security alerts across SIEM, EDR, network traffic and log data, supporting incident response and escalation. Threat hunting using MITRE ATT&CK, developing detection rules and playbooks, and producing incident reports. Fully on-site in Farnborough on a 24/7 shift pattern supporting defence and national security environments.

Microsoft Sentinel · Splunk · Elastic +2

• Manchester
• Hybrid · 3 days in office
• Mid-level
• Permanent

Bridges compliance and hands-on technical security, managing ISO 27001 and Cyber Essentials Plus frameworks, running internal audits and third-party risk assessments. Also hardens AWS/Azure cloud environments, runs vulnerability scans and remediation, and supports incident response and identity/access management. Reports to the Head of Security in a Salford-based team.

AWS · Azure · GCP +4