Cyber Security Jobs

• United Kingdom
• Remote
• Senior

Joins the Advanced Research Team to perform vulnerability research and exploit development, analysing vendor patches to find vulnerabilities and building proof-of-concept exploits. Also develops automated tooling for large-scale data collection and analysis, and investigates evidence of 0-day and n-day exploitation. Publishes research on the blog or at conferences and supports other intelligence teams with ad-hoc technical work.

CrowdStrike · Windows · Linux +5

• Israel
• Remote
• Senior

Join the Advanced Research Team to perform vulnerability research across a wide range of targets, including analyzing vendor patches to identify vulnerabilities and develop proof-of-concept exploits. You will build automated solutions for collecting and processing data at scale, reverse engineer malicious payloads, and publish findings on the CrowdStrike blog or at conferences.

CrowdStrike · Windows · Linux +5

• Malvern, England, United Kingdom
• On-site

Join a team delivering offensive security solutions in real-time operational mission environments, planning and executing advanced red team engagements that simulate real-world attacks. The role involves exploiting vulnerabilities across infrastructure, applications and cloud platforms, bypassing defences such as firewalls, EDRs and IDS/IPS, and developing realistic adversary TTPs. Work is fully on-site at the Malvern facility, focused on defence and national security.

AWS · Azure · GCP +7

• London
• On-site
• Mid-level

Deliver 2nd line support for laptops, desktops, applications and peripherals across a London hub, managing tickets and resolving issues at first contact. Administer Active Directory and Microsoft 365, handle onboarding and access provisioning, run patching and monitoring checks, and support security tooling such as SentinelOne, Qualys and Mimecast alongside a central IT function.

Microsoft 365 · Active Directory · Windows 11 +5

• Southampton
• Hybrid
• Director · manages people
• Contract

Leads the enterprise architecture function, owning principles, standards, governance and assurance across domains including business applications, SaaS, data, cloud, infrastructure, networks, cyber security, AI and OT. Chairs the Architecture Review Board, manages architecture demand and resources, and acts as senior technical authority reporting to the Director of Information Security & Enterprise Architecture.

SaaS

• London
• Hybrid
• £650 – £750 pd
• Mid-level
• Contract

Investigate and respond to cyber security incidents across enterprise environments, triaging alerts from SIEM, EDR/XDR, cloud, identity and network tools. Conduct digital forensics, proactive threat hunting and detection tuning, coordinating containment and recovery with infrastructure, cloud and identity teams. Six-month contract within a collaborative security function defending a large enterprise.

SIEM · EDR · XDR +7

• Milton Keynes
• Senior

Lead second-line risk oversight across technology, change and operational resilience, providing independent assurance on IT risk, transformation programmes and important business services. Act as a trusted adviser to senior technology and change leaders, working with the parent building society on risk appetite and Group standards. Involves control reviews, scenario testing, RCSA and reporting to Risk Committee, ExCo and Board audiences.

Cloud

• London
• Hybrid
• Senior
• Permanent

Consulting role focused on designing and deploying Microsoft Purview solutions across Microsoft 365 and Azure, covering DLP, Information Protection, Insider Risk Management, eDiscovery and data classification. Works directly with C-level stakeholders and compliance teams to align data governance and regulatory requirements, producing technical designs and documentation.

Microsoft Purview · Microsoft 365 · Azure +4

• London
• Hybrid
• Senior
• Permanent

Deliver PCI DSS consultancy engagements across merchant and service provider environments, covering gap assessments, readiness reviews and compliance assessments, plus RoC and AoC documentation. Also supports wider consulting work in ISO 27001, NIST, NCSC CAF, risk management and security maturity, reviewing complex infrastructure, cloud and third-party environments.

PCI DSS v4.x · RoC · AoC +2

• London
• On-site
• Entry level

Entry-level analyst role supporting demand generation and go-to-market strategy, tracking campaign performance against pipeline and conversion targets, monitoring funnel metrics from MQL to Closed Won, and analysing win/loss and retention data. Works cross-functionally with Marketing, Sales, SDRs and Customer Success, using Excel/Google Sheets and CRM or BI tools to turn data into actionable pipeline insights.

Salesforce · Tableau · Power BI +1

• Winchester
• On-site
• £41,000 – £50,000 pa
• Mid-level

Monitor, triage and investigate security alerts across SIEM and wider security tooling, identifying indicators of compromise and conducting initial incident investigations. Support the full incident response lifecycle including containment, remediation and post-incident learning, while tuning detection rules to reduce false positives. Work with security and infrastructure teams on threat intelligence, trend reporting and continual service improvement.

Microsoft Sentinel · Microsoft Defender · QRadar +2

• Exeter
• Hybrid
• £500 pd
• Mid-level · manages people
• Temporary

Lead digital delivery for ICT services across a police strategic alliance, managing small teams that hold managed service providers and suppliers to account for hosting, networks, telephony, mobile and cyber security. Oversee SLAs, capacity planning, change management and ITIL-aligned service delivery, with hybrid working from Exeter and Winfrith.

Azure · Airwave

• London
• Remote
• £500 pd
• Senior
• Contract

Lead end-to-end management of cyber security incidents and major security events within a secure government programme, coordinating technical response teams through containment, eradication and recovery. Act as primary point of contact for incident communications, run response bridges and war-rooms, and produce post-incident reports and root cause analysis. Works alongside SOC, analysts, infrastructure teams and third-party suppliers to improve cyber resilience.

SIEM · EDR

• Manchester
• Hybrid
• £40,000 – £46,500 pa
• Mid-level
• Permanent

Hands-on security role covering SIEM, EDR, email security and vulnerability platforms, plus IDS/IPS monitoring and incident investigation. You'll embed security into project lifecycles and SDLC, work with a managed service provider on alerts, and support Cyber Essentials and ISO 27001 governance and third-party risk assurance alongside the Cyber Security Manager.

SIEM · EDR · XDR +5

• Paris, France
• Mid-level
• Permanent

Owns the global IP telephony product across Airbus Defence and Space, covering strategy, lifecycle management, operations and decommissioning of Cisco-based softphone, fixed telephony and instant messaging services. Steers an international support team, manages CAPEX/OPEX budgets and external service contracts, and optimises ITIL processes within a highly regulated, on-premise environment.

Cisco · Softphone · Instant Messaging