Cyber Security Jobs

• Romania
• Remote
• Senior
• Permanent

Owns major components of the Windows kernel-mode sensor, architecting and building next-generation anti-virus and EDR security software. Works across core OS subsystems like file system, memory, process and networking, with cross-platform deliverables for Windows, Mac and Linux. Leads projects end to end, mentoring and collaborating with distributed teams.

Windows · Mac · Linux +4

• United Kingdom
• Remote
• Senior

Technical authority in the pre-sales process, scoping and designing CrowdStrike Falcon platform deployments across endpoint, threat intelligence, identity and cloud security. Builds SOWs, effort estimates and architecture roadmaps, and partners with Services Sales Executives and delivery teams to align services with customer outcomes.

CrowdStrike Falcon · AWS · Azure +7

• United Kingdom
• Remote
• Senior

Hands-on engineering role managing a modern identity stack across the full lifecycle, from passwordless authentication and adaptive access controls to identity governance and non-human identities. You will configure and operate Microsoft Entra ID, Saviynt and Active Directory directly, integrate applications via SAML, OIDC, OAuth and SCIM, and join an out-of-hours support rota.

Microsoft Entra ID · Active Directory · Saviynt +4

• United Kingdom
• Remote
• Senior

Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.

SIEM · SOAR · LLMs +1

• London
• Hybrid
• £67,000 pa
• Permanent

Designs and implements security solutions across cloud, on-premises and hybrid environments for a global technology consultancy's client projects. Day-to-day work covers SIEM log ingestion and routing, firewall and network security management, CIS benchmark assessments, and automating security processes with Python, Bash or PowerShell, Terraform and cloud platforms. Involves client-dependent on-call support and requires British passport holders without dual nationality for clearance.

Splunk · Microsoft Sentinel · Cribl +11

• London
• Hybrid
• Senior
• Permanent

Deliver PCI DSS consultancy engagements across merchant and service provider environments, covering gap assessments, readiness reviews and compliance assessments, plus RoC and AoC documentation. Also supports wider consulting work in ISO 27001, NIST, NCSC CAF, risk management and security maturity, reviewing complex infrastructure, cloud and third-party environments.

PCI DSS v4.x · RoC · AoC +2

• London
• On-site
• Entry level

Entry-level analyst role supporting demand generation and go-to-market strategy, tracking campaign performance against pipeline and conversion targets, monitoring funnel metrics from MQL to Closed Won, and analysing win/loss and retention data. Works cross-functionally with Marketing, Sales, SDRs and Customer Success, using Excel/Google Sheets and CRM or BI tools to turn data into actionable pipeline insights.

Salesforce · Tableau · Power BI +1

• Newbury
• Senior

Monitors and manages network equipment and infrastructure for customer services across EMEA and North America, with a strong focus on firewall and network security administration. Day-to-day work covers Cisco ASA, Firepower and Palo Alto firewalls, VMware vSphere and NetApp storage, plus automation and out-of-hours support on a rota.

Cisco ASA · Cisco Firepower Threat Defense · Palo Alto PA-Series +7

• London
• Hybrid
• Senior
• Contract

Hands-on Tanium SME role embedded within a long-term strategic client's cyber security team, starting with Tanium Discovery to map the environment before broadening into other modules. Involves assessing the current setup, advising on best practice, optimising capabilities and transferring knowledge to the internal team, working autonomously with occasional on-site presence in London.

Tanium · Tanium Discovery · Tanium Certified Administrator +3

• London

Investigates emerging cyber threats and attacker TTPs across production and lab environments, analysing security data to improve detection and response. Works closely with development teams, using scripting and data analysis to test new approaches to spotting malicious or anomalous activity, with a focus on AI and agentic AI security challenges.

Python · Bash · PowerShell +1

• Cambridge

Investigates emerging cyber threats and attacker TTPs across production and lab environments, analysing security data to improve detection and response. Works closely with development teams to turn research findings into product improvements, using scripting and data analysis to test new detection approaches.

MITRE ATT&CK · PowerShell

• Manchester
• Remote
• £60,000 – £80,000 pa
• Mid-level
• Permanent

This role involves conducting comprehensive penetration tests across networks, web and mobile applications, APIs, and cloud environments using both manual and automated techniques. The tester will simulate real-world cyberattacks, identify vulnerabilities, and produce detailed technical and executive reports with actionable remediation advice. A key focus is translating complex security findings for non-technical stakeholders while adhering to strict ethical and compliance standards in a security-cleared context.

• London
• Hybrid
• Mid-level
• Permanent

Join a global team responsible for discovering, assessing, triaging and driving remediation of vulnerabilities across Amazon's infrastructure, services and applications. The role involves analysing disclosures and exploit code, engineering scalable detection mechanisms, and building automation and tooling, with periodic on-call duties.

• Nottingham
• Hybrid
• £60,875 – £81,543 pa
• Senior
• Permanent

Independently manage operational cybersecurity activities including incident response, risk and vulnerability assessments, and security control implementation across cloud, network and endpoint environments. Maintain regulatory compliance, support audits and governance, and join an out-of-hours incident response rota.

SIEM

• Lincoln
• £30,000 – £38,000 pa
• Entry level

A training programme combining accredited CompTIA online courses, tutor support and practice labs to prepare career changers for entry-level IT roles. Participants sit A+ and Network+ exams, then move into an IT Technician placement before progressing into cybersecurity with Security+ and optional ethical hacking courses.

CompTIA A+ · CompTIA Network+ · CompTIA Security+ +2