Cyber Security Jobs

• United Kingdom
• Remote
• Senior

Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.

SIEM · SOAR · LLMs +1

• United Kingdom
• Remote
• Senior · manages people

Leads incident response engagements for customers hit by cyberattacks, directing a team of consultants, running kick-off and daily update calls, and delegating forensic tasks. Handles multiple ransomware and BEC investigations concurrently, performing root cause analysis and producing executive-summary reports mapped to MITRE ATT&CK.

Splunk · ELK · Sophos

• London
• Hybrid
• Senior
• Permanent

Consulting role focused on designing and deploying Microsoft Purview solutions across Microsoft 365 and Azure, covering DLP, Information Protection, Insider Risk Management, eDiscovery and data classification. Works directly with C-level stakeholders and compliance teams to align data governance and regulatory requirements, producing technical designs and documentation.

Microsoft Purview · Microsoft 365 · Azure +4

• London
• Hybrid
• Senior
• Permanent

Senior overlay role acting as lead technical strategist for BT across the UK and EMEA, driving joint technical alignment and co-architecting security offerings. Involves positioning NetSec, SASE, Zero Trust and Cortex CloudSecOps into BT's managed service architecture, leading complex POCs and demos, and providing targeted post-sales advisory. Requires executive-level engagement with BT leadership and close co-selling with internal sales, with around 30% UK travel.

Palo Alto Networks · Cortex · AWS +6

• Abingdon
• £37,000 – £45,000 pa
• Mid-level

Hands-on security operations role within an MSP, monitoring and investigating alerts across Microsoft 365, Sophos and other platforms for both internal and client environments. Acts as a technical escalation point for the Service Desk and Infrastructure teams, covering incident response, vulnerability and patch management, tenant hardening and remediation tracking.

Microsoft 365 · Sophos · Microsoft Defender +3

• Bristol
• Hybrid · 2–3 days in office
• Senior
• Permanent

Acts as a trusted advisor to clients across sectors, delivering governance, risk and compliance guidance spanning secure architecture, IDAM, PAM and DLP, and frameworks such as ISO 27001, NIST CSF and NIS2. Produces risk assessments, gap analyses and remediation roadmaps, while supporting bids, content creation and marketing events. Requires UK Government Security Clearance and works hybrid from the Bristol office 2-3 days a week.

IDAM · PAM · DLP +5

• Thame
• Remote
• £600 – £850 pd
• Senior
• Contract · Part time

Part-time consultant guiding a client's migration from traditional data centres to AWS, acting as an escalation point and mentor for a small team of engineers. Works closely with the CISO on security reviews and strategy, applying SIEM, EDR and vulnerability management skills. Mostly remote with occasional in-person catch-ups.

AWS · SentinelOne · Microsoft Security +1

• Birmingham
• Hybrid · 3 days in office
• £300 – £400 pd
• Senior
• Contract

Lead a six-month AI and digital platform security initiative, defining controls and guardrails for GenAI and machine learning across global operations. Architect defences spanning AWS, Azure, hybrid and on-prem environments, aligning with NIST and ISO 27001 while mentoring a senior team of security architects and advising C-suite stakeholders.

AWS · Azure · GenAI

• London
• Hybrid
• Senior
• Permanent

Client-facing consulting role helping major organisations assess cyber risk, maturity and capability, then turn strategy into practical transformation programmes. Work spans cyber strategy and risk, governance and operating models, and transformation delivery, using frameworks such as NIST CSF, ISO 27001, NCSC CAF and NIS2. Senior Consultants also own workstreams, manage deliverables and coach junior colleagues.

NIST CSF · ISO 27001 · NCSC CAF +1

• Milton Keynes
• Senior

Lead second-line risk oversight across technology, change and operational resilience, providing independent assurance on IT risk, transformation programmes and important business services. Act as a trusted adviser to senior technology and change leaders, working with the parent building society on risk appetite and Group standards. Involves control reviews, scenario testing, RCSA and reporting to Risk Committee, ExCo and Board audiences.

Cloud

• London
• Mid-level

Acts as primary technical responder for premium enterprise customers, autonomously investigating complex threat telemetry and handling live incident response for volumetric DDoS and application-layer attacks. Implements mitigation across OSI Layers 3, 4 and 7 using Cloudflare's security suite, performs packet and traffic flow analysis, and advises customers during active incidents. Requires 24x7 rotating shifts.

Cloudflare · Magic Transit · Magic Firewall +7

• London
• £124,000 – £186,000 pa
• Senior

Owns architectural direction for Mimecast's Email & Collaboration Security product line, spanning email threat detection, DMARC, data platforms and response capabilities. Works across product, engineering and the Architecture Leadership Team to define integration contracts, ADRs and NFR targets, with cost-per-outcome reasoning and daily AI tooling use.

AWS · Kafka · MCP +4

• Bristol
• Hybrid · 2 days in office
• £80,000 – £90,000 pa
• Senior · manages people
• Permanent

Own and deliver the cyber and information security strategy for a national law firm, acting as a trusted advisor to senior leaders on risk, governance and compliance. Lead the ISMS and ISO 27001, NIST CSF and Cyber Essentials Plus agenda, oversee security operations, incident response and supplier management, and develop a small team of security professionals.

ISO 27001 · NIST CSF · Cyber Essentials Plus

• Sheffield
• £55,000 – £60,000 pa
• Senior

Senior escalation point for complex technical issues, leading infrastructure and cloud project delivery for clients and internal systems. Runs discovery workshops, produces designs and statements of work, and acts as technical lead on Priority 1 incidents, while mentoring engineers and setting technical standards.

Microsoft 365 · Azure · Entra ID +7

• Cheltenham
• On-site
• £550 – £750 pd
• Senior
• Contract

An IdAM Architect role within a Security Architecture team, shaping enterprise identity and access capabilities across cloud transformation and service management convergence programmes. Day to day involves security architecture reviews, risk and vulnerability assessments, threat modelling, and designing identity solutions using SSO, MFA, IGA, PAM and federation standards. Works closely with solution architects, engineers and risk advisors to embed security by design.

Microsoft Entra ID · Azure AD · SailPoint +3