Cyber Security Jobs

Global Technology Solutions Ltd · Reading · £50,000 – £60,000 pa

Senior technical authority in Security Operations, leading serious incidents, forensic investigations and root cause analysis while improving detection and response. Engineers Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune and Darktrace, develops automation and conducts proactive threat hunting, and mentors colleagues.

Randstad Technologies Recruitment · London · £500 – £600 pd

Supports cyber governance, risk management and control execution across core business functions in a high-assurance, regulated environment. Day-to-day work covers cyber risk assessments, security issue management and close collaboration with cross-functional stakeholders. Contract role with hybrid working, three days a week in office.

GCS · London · £600 – £700 pd

Lead a risk-based technical assurance programme across a global enterprise, independently assessing security control effectiveness in infrastructure, cloud, identity, applications and incident response. Manage and mentor a small team of Technical Assurance Analysts while producing board-level reporting and driving continuous controls monitoring and automated assurance.

eFinancialCareers · London

Supports integrated business and technology audits across a global portfolio, assessing whether technology risks are managed and controls operate as intended. Uses data analytics and AI for audit testing, control evidence analysis and issue validation, engaging stakeholders on control design and emerging cyber and regulatory risks.

Addition · Leeds · £26,000 – £28,000 pa

First point of contact for customers needing product support across phone and email, diagnosing and resolving technical queries with a focus on high first-line resolution rates. Owns issues from initial contact to resolution, escalates complex problems to the Product team, and maintains product documentation. Hybrid role in a cyber security SaaS scale-up, with SQL and support desk tools like Freshdesk or Jira advantageous.

Addition · Leeds · £26,000 – £28,000 pa

First point of contact for customers needing product support across phone and email, diagnosing and resolving technical queries with a focus on high first-line resolution rates. Owns issues from initial contact through to resolution, escalates complex problems to the Product team, and maintains product documentation. Hybrid role in a cyber security SaaS scale-up, with SQL and support desk tools like Freshdesk or Jira advantageous.

Netcraft · Bath

Join a technical operations team conducting cybercrime incident response, classifying malicious websites, apps, emails and phone numbers, and communicating threat analysis to clients. The role involves customer feedback, process improvement, and regular weekend shift work to support 24/7 protection, with full training provided for those new to cybersecurity.

eFinancialCareers · London

Lead a team of 13 Business Analysts across major Cyber, IAM and PAM transformation programmes at a global investment bank. Own requirements gathering, process analysis, solution definition and UAT while managing risks, dependencies and senior escalations. The role also drives continuous improvement and AI adoption across the BA function.

Immersive · United Kingdom

Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.

Darktrace · London

Investigates emerging cyber threats, performing in-depth malware analysis and reverse engineering while hunting for new attack trends and adversary TTPs. Produces threat intelligence reports, blogs and conference presentations, and develops data-driven methodologies and detections using Python, PowerShell or C/C++. Works hybrid, at least two days a week in the Cambridge or London office, alongside security researchers, analysts and product teams.

Darktrace · Cambridge

Investigates emerging cyber threats, performing in-depth malware analysis and reverse engineering of adversary tactics, techniques and procedures. Builds data-driven threat hunting methodologies, produces intelligence reports and detections, and presents findings at conferences. Works hybrid with security researchers, analysts and product teams, at least two days a week in Cambridge or London.

NCC Group · Manchester

Proactively hunts advanced threats across customer environments using a proprietary hunting framework, conducting intelligence-led, hypothesis-driven analysis of TTPs and behaviours. Works cross-functionally with SOC Analysts, Global Detection Engineers, Privacy and Engineering teams to align threat models and mitigate risks.

Reed Technology · Newcastle upon Tyne · £35,000 – £45,000 pa

Investigating and responding to security incidents at 2nd Line level, monitoring customer environments and SIEM alerts, and threat hunting across a Microsoft security stack including Sentinel, Defender and Entra. Uses KQL and PowerShell for investigations and automation, acts as an escalation point for junior analysts, and supports vulnerability assessment and remediation. Initially on a 4-on, 4-off night shift pattern before moving to an 8-hour shift model.

Reed Technology · Manchester · £60,000 – £65,000 pa

Producing threat assessments, intelligence reports and executive briefings, translating complex cyber threats into clear information for senior and non-technical stakeholders. Monitoring intelligence sources, assessing threat actors, TTPs and IOCs, and supporting incident response with security teams. Also leads and develops a small team while shaping the Cyber Threat Intelligence function.

Manpower · Lytham Saint Annes · £50,000 pa

Conducts red team exercises, critical control testing, cyber hygiene assessments and penetration testing to validate security controls and SOC detection capabilities. Produces detailed vulnerability reports for internal resolver groups and briefs leadership on defensive effectiveness. Requires hands-on infrastructure and web app testing with tools like Kali and Parrot across cloud, network and endpoint technologies.