Cyber Security Jobs in Woking

• United Kingdom
• Remote
• Mid-level

Lead and support cloud incident response engagements and security assessments for clients, analysing cloud and hybrid architectures and providing remediation guidance. The role also involves mentoring junior consultants, developing internal and open-source tooling, and researching emerging cloud security techniques.

AWS · Azure · GCP +4

• United States
• Remote
• US$120,000 – US$185,000 pa
• Mid-level

Builds and operates core systems for the Falcon Complete team, developing features that help security analysts triage and remediate threats at scale. Work spans Golang, microservices, Kafka, Kubernetes and cloud observability, with on-call rotation and heavy asynchronous remote collaboration.

AWS · Azure · GCP +7

• Sunbury-on-Thames
• Hybrid · 3 days in office
• Mid-level

Monitors and administers anti-malware, EDR, application control and DLP tooling plus OS patch deployment across bp's global operational technology and process control networks. The role sits in the OT Security Operations service, managing secure file transfer, vulnerability and asset inventory tooling, and supporting incident response while working closely with site teams. Requires a minimum of three days per week on-site at Sunbury.

Trellix · Microsoft WSUS · Layer 2 Networking +1

• Farnborough
• Hybrid
• Mid-level
• Permanent

Protects a critical defence IT application and infrastructure by running vulnerability scans, managing endpoint security, responding to incidents and hardening systems. Works with frameworks such as Government Functional Standard 007 and standards like CIS, STIG and NIST, leading security implementation and assurance on a major UK government programme.

CIS · STIG · NIST +2

• London
• Hybrid
• £80,000 – £90,000 pa
• Senior
• Permanent

Hands-on application security role embedding security across the SDLC, working with engineering, architecture and cloud teams. Involves application security testing (SAST, DAST, IAST, SCA), securing CI/CD pipelines and GitHub Actions, API and Kubernetes/AKS security, plus security-as-code and automation using Terraform and Python. Requires Azure and KQL expertise within a health research charity.

Microsoft Azure · KQL · GitHub +7

• Liverpool
• Hybrid
• Mid-level
• Permanent

Day-to-day work centres on information security risk assessments across technology, applications, projects and business processes, tracking mitigations and escalating significant risks. The role also covers third-party supplier due diligence, security assurance reviews, vulnerability remediation tracking, policy maintenance and incident support, working alongside Security Operations and IT teams.

ISO 27001 · NIST

• London
• Lead

Technical owner for a portfolio of EMEA strategic accounts and US identity/workforce platform partners, split roughly 70/30. Drives API and SDK integration, product adoption, RFPs, trials and proofs of concept while mentoring solutions engineers globally and feeding market insight into the product roadmap.

RESTful APIs · SDKs

• United Kingdom - Field
• Director · manages people

Leads the R&D organisation building the Entrust Agentic Trust platform, translating a four-plane reference architecture into development strategy, operating model and roadmap. Accountable for engineering execution, quality, security and delivery predictability across cloud-native services, APIs, SDKs, policy and authorization components, and tamper-evident evidence systems. Partners with Product, Architecture, Security and Cloud Operations, and builds a multi-discipline software organisation.

FIPS 140-3 · Common Criteria · SOC 2 +4

• Knutsford
• Mid-level · manages people

Hands-on engineering role safeguarding encryption keys and cryptographic services across enterprise applications, working with Hardware Security Modules and Thales/Entrust tooling. Involves BAU and 24/7 on-call support, security assessments, penetration testing, and key management across Windows and Linux environments, with occasional off-site data centre work.

Thales · Entrust · SharePoint +5

• London
• Mid-level

Builds and maintains a Chromium-based browser engine, remote rendering and streaming tech, and distributed services that run browser sessions across a global network. Day-to-day work spans C++ browser code, Go/Rust/TypeScript services, debugging across browser processes and Linux hosts, and improving latency and reliability, with production on-call.

Chromium · Cloudflare Workers · Nomad +3

• United Kingdom
• Remote
• Senior

Provide advanced technical support for Cortex XSIAM customers, triaging issues via ticketing, phone and remote sessions, and performing application- and OS-level troubleshooting. Work with developers to reproduce faults and implement permanent fixes, and with technical account managers to mitigate risks in customer environments.

Cortex XSIAM · Kubernetes · GCP +10

• London
• Remote
• Senior

Senior technical product engineer role advising partners, customers and internal teams on cloud-native security, Cortex capabilities and SOC automation. Involves cross-functional projects, product roadmap feedback, and building playbooks and integrations across AWS, Azure and GCP.

AWS · Azure · GCP +3

• London
• Hybrid · 3 days in office
• £100,000 – £120,000 pa
• Lead · manages people
• Permanent

Hands-on leadership of an MDR security operations function, owning SLA and KPI delivery across a varied mid-market client base while line-managing SOC Analysts and Senior Analysts. Sets investigation quality standards, handles major incidents and escalations, and matures detection, runbooks and automation, including AI-assisted SOC tooling. Combines client-facing service governance with people development and pre-sales support.

Microsoft Sentinel · Microsoft Defender

• Reading
• Hybrid
• £72,000 pa

Supports the design, implementation and maintenance of threat and vulnerability management controls across a large water utility's IT estate. Conducts network, application and code penetration testing, exploits vulnerabilities via proof-of-concept testing, and helps build an internal pen testing function. Works hybrid in Reading, liaising with Digital teams on remediation, patching and threat hunting.

Tenable · Burp Suite · Kali Linux +2

• London
• US$215,000 – US$225,000 pa
• Lead

Lead research, design and evaluation of detection models identifying automated, fraudulent and malicious activity across Internet-scale traffic. Own the detection measurement framework for noisy or delayed ground truth, mentor others, and drive cross-functional detection strategy with ML, data and product teams.

Python · SQL