Cyber Security Jobs in Woking

• United Kingdom
• Remote
• Mid-level

Lead incident response engagements, hunting adversaries across large data sets and conducting intrusion investigations under outside counsel. Perform host, network and cloud forensics across Windows, Mac and Linux, plus basic malware analysis, and deliver findings to executives, regulators and legal teams.

CrowdStrike · Zeek · Suricata +6

• Germany
• Remote
• Senior

Senior consultants join the technical team on front-page incident response engagements for Fortune 100 organisations, conducting intrusion investigations under project leadership and outside counsel. The role spans host and network forensics across Windows, Mac and Linux, threat hunting across large data sets, and producing written and verbal findings for customers, regulators and legal counsel.

CrowdStrike · Bro/Zeek · Suricata +6

• London
• Hybrid
• Senior
• Permanent

Client-facing consulting role helping major organisations assess cyber risk, maturity and capability, then turn strategy into practical transformation programmes. Work spans cyber strategy and risk, governance and operating models, and transformation delivery, using frameworks such as NIST CSF, ISO 27001, NCSC CAF and NIS2. Senior Consultants also own workstreams, manage deliverables and coach junior colleagues.

NIST CSF · ISO 27001 · NCSC CAF +1

• Malvern, England, United Kingdom
• On-site
• £65,700 – £73,000 pa
• Senior

Technically leads multidisciplinary teams on complex cryptosecurity bids and projects, interpreting user, system and security requirements for crypto systems. Advises on high-grade crypto and key management, analyses algorithms and secure protocols, and engages regularly with customers and stakeholders. Based on-site at Malvern, with travel to customer sites expected.

• Leeds

Deliver continuous security testing across customer external attack surfaces, combining automated scanning with hands-on manual assessment. Validate scanner findings, chain vulnerabilities to demonstrate realistic attack paths, and produce proof-of-concepts and remediation advice. Work directly with customers while contributing to internal tooling and methodology.

Burp Suite Professional · SQLMap · Python +7

• Fleet
• Hybrid
• Mid-level

Owns day-to-day security alerting, investigations and incident response across a cloud-native microservice platform and internal IT estate, directing a Platform Ops team on remediation. Manages SIEM, endpoint and Microsoft 365 security tooling, vulnerability management, IAM and penetration testing engagements, while maintaining ISO 27001 documentation and UK GDPR compliance.

AWS · Kubernetes · EKS +5

• London
• Senior

Shapes and strengthens security architecture across a cloud-native environment, working closely with Architecture, Engineering, Product and Operations teams. Focuses on GCP and Kubernetes security, DevSecOps, application and API security, identity, resilience and compliance, influencing technical decisions rather than just reviewing designs.

GCP · Kubernetes · API Gateways +4

• United Kingdom
• Hybrid
• Senior

Produce tactical, operational and strategic threat intelligence assessments, analysing threat actors, intrusion techniques and emerging threats. Correlate OSINT, commercial intelligence and internal telemetry, translating findings into recommendations for SOC, detection engineering, threat hunting and red team exercises, and presenting to senior stakeholders.

MITRE ATT&CK

• United Kingdom
• Senior

Lead the development and delivery of an organisation's information security strategy, governance, risk and compliance programme, including ISO 27001 and Cyber Essentials. Provide technical oversight across infrastructure, cloud, networking and security platforms, manage incident response and third-party security providers, and influence senior stakeholders. Suits a security leader with a background in IT infrastructure or networking.

Windows Server · Active Directory · Microsoft 365 +7

• Farnborough
• Hybrid
• Senior
• Permanent

Lead protective and information security engineering on a critical MOD programme, shaping secure designs, assuring controls, and managing vulnerabilities across infrastructure, endpoints, identity and AWS cloud. Combines hands-on hardening, incident response leadership and ST&V with governance, reporting and mentoring, working largely autonomously on-site in Farnborough with some remote work.

AWS

• Sunbury-on-Thames
• Hybrid
• Lead · manages people

Lead bp's global GRC engineering and compliance management teams, owning the technology, AI and data strategies and overseeing delivery squads. Drive platform, tooling and dashboard delivery for continuous control health monitoring, plus a compliance framework for global regulations and industry certifications. Hybrid role based in Sunbury-on-Thames, moving to Timber Square, Southwark around Q4 2027.

• St Albans
• Director · manages people

Owns the global information security strategy as acting CISO, reporting to the CIO and advising the PLC Board on cyber risk. Leads a security function spanning IT and OT, including ICS, SCADA and IoT, with responsibility for NIST-aligned frameworks, incident response, threat intelligence and SOC capability.

NIST Cybersecurity Framework · ISO 27001 · GDPR +7

• London
• Mid-level

Lead the Health and Care Account for a fast-growing technology consultancy, delivering cyber security, data and AI services. Day to day involves client relationship building, managing a healthcare delivery portfolio, supporting sales and bids, running risk and maturity assessments, and implementing security controls aligned to NIST, CAF and ISO27001. Requires SC clearance eligibility and sole British nationality.

NIST · CAF · ISO 27001

• Reading
• Remote
• Senior

Designs, develops and reviews secure architectures across cyber security, cloud and enterprise environments for defence customers, acting as a trusted technical adviser. Produces architecture documentation and assurance artefacts, supports risk assessments, and embeds security throughout the solution lifecycle, with occasional travel to customer sites.

AWS · Azure

• Hull
• On-site
• Lead

Senior escalation point for complex L2/L3 infrastructure incidents, owning them through to resolution across Microsoft 365, Entra ID, Active Directory, Intune, and Windows/Linux estates. The role also covers security hardening, patching, vulnerability management, and PowerShell automation, while mentoring L1/L2 engineers and working with the IT Architect.

Microsoft 365 · Entra ID · Active Directory +7