Cyber Security Jobs

eFinancialCareers · London

Lead a team of 13 Business Analysts across major Cyber, IAM and PAM transformation programmes at a global investment bank. Own requirements gathering, process analysis, solution definition and UAT while managing risks, dependencies and senior escalations. The role also drives continuous improvement and AI adoption across the BA function.

Maru Search & Consultancy · Bournemouth · £80,000 – £85,000 pa

Hands-on senior security role owning the ISMS and ISO 27001 compliance across a UK health and life insurer, extending it across the wider UK group. Responsibilities span information security risk management, embedding security into the SDLC and DPIAs, supplier security assurance, policy ownership, awareness training and chairing security committees. Includes leading a growing team starting with one analyst and scaling to three plus a consultant.

eFinancialCareers · London

Engineer, operate and optimise Microsoft Sentinel across one or more Log Analytics workspaces, owning platform health, ingestion pipelines, normalisation and enrichment. Build and maintain log onboarding from cloud, on-prem, SaaS and security tools, and integrate the SIEM with EDR, SOAR, threat intel and ITSM platforms. Also supports M&A onboarding of acquired environments into the enterprise SIEM.

NCC Group · Manchester

Proactively hunts advanced threats across customer environments using a proprietary hunting framework, conducting intelligence-led, hypothesis-driven analysis of TTPs and behaviours. Works cross-functionally with SOC Analysts, Global Detection Engineers, Privacy and Engineering teams to align threat models and mitigate risks.

Peregrine · Blackpool

Forward-deployed engineer embedded in a Cyber Capability Unit, building and deploying AI-powered security and fraud prevention solutions. Day to day covers AWS infrastructure, Terraform IaC, GitLab CI pipelines, testing, observability and incident response in regulated environments. Requires active SC clearance.

DB Cargo (UK) Limited · Doncaster · £70,000 – £75,000 pa

Acts as the cyber security subject matter expert within an IT Governance & Security function, leading governance, risk, compliance and resilience across business-critical applications, cloud services and operational railway systems. Owns the ISMS and NIS/GDPR compliance while managing security operations, threat monitoring, incident response and vulnerability management. Develops Microsoft Sentinel and Defender XDR capabilities and provides governance across Azure, AWS, Microsoft 365, Entra ID and Intune, including support for ERTMS/ETCS transformation.

Akkodis · Hessle · £35,000 – £45,000 pa

Hands-on security operations role covering alert triage, incident response and root-cause analysis, plus tuning SIEM, EDR/XDR and monitoring tooling to cut false positives. You will drive automation and security improvement projects while liaising with a managed SOC and internal infrastructure, cloud and application teams.

Akkodis · Prudhoe · £35,000 – £45,000 pa

Hands-on security operations role covering alert triage, incident response and root-cause analysis, alongside tuning SIEM, EDR/XDR and monitoring tooling to improve detection and cut false positives. You will also drive security automation, deliver improvement projects and act as liaison with a managed SOC and internal infrastructure, cloud and application teams.

Experis · London · £500 pd

Lead end-to-end management of cyber security incidents and major security events within a secure government programme, coordinating technical response teams through containment, eradication and recovery. Act as primary point of contact for incident communications, run response bridges and war-rooms, and produce post-incident reports and root cause analysis. Works alongside SOC, analysts, infrastructure teams and third-party suppliers to improve cyber resilience.

GCS · London · £600 – £700 pd

Lead a risk-based technical assurance programme across a global enterprise, independently assessing security control effectiveness in infrastructure, cloud, identity, applications and incident response. Manage and mentor a small team of Technical Assurance Analysts while producing board-level reporting and driving continuous controls monitoring and automated assurance.

Immersive · United Kingdom

Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.

Hays Technology · Sheffield · £450 – £500 pd

Owns end-to-end solution design across cybersecurity initiatives, producing architecture documents, high-level designs, patterns, decision records and risk assessments. Provides technical leadership and presents designs to Design Authorities and senior stakeholders, with deep IAM and HashiCorp Vault expertise. Requires three days per week onsite in Sheffield.

Planet Recruitment · Manchester · £40,000 – £50,000 pa

Hands-on role delivering a Cyber Security Roadmap and hardening a Microsoft-centric technology estate. Day to day involves configuring and maintaining Defender, Intune, Entra ID and Microsoft 365 security and compliance tooling, plus vulnerability management, alert triage and incident remediation. Works with the Cyber Security Operations Manager, Group Head of Cyber, IT teams and external partners, and supports Cyber Essentials and CIS Controls accreditation.

Michael Page · Liverpool · £60,000 – £65,000 pa

Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.

Barclays · Glasgow

Owns the optimisation and strategy of transaction monitoring controls across Barclays UK and International, tuning surveillance systems and developing detection solutions. Involves data exploration, coding in SQL, Scala, Spark or Python, and engaging technical and non-technical stakeholders on financial crime risk. Based in Glasgow within a regulated governance and control environment.