Cyber Security Jobs

Peregrine · Blackpool

Forward-deployed engineer embedded in a Cyber Capability Unit, building and deploying AI-powered security and fraud prevention solutions. Day to day covers AWS infrastructure, Terraform IaC, GitLab CI pipelines, testing, observability and incident response in regulated environments. Requires active SC clearance.

Akkodis · Hessle · £35,000 – £45,000 pa

Hands-on security operations role covering alert triage, incident response and root-cause analysis, plus tuning SIEM, EDR/XDR and monitoring tooling to cut false positives. You will drive automation and security improvement projects while liaising with a managed SOC and internal infrastructure, cloud and application teams.

Akkodis · Prudhoe · £35,000 – £45,000 pa

Hands-on security operations role covering alert triage, incident response and root-cause analysis, alongside tuning SIEM, EDR/XDR and monitoring tooling to improve detection and cut false positives. You will also drive security automation, deliver improvement projects and act as liaison with a managed SOC and internal infrastructure, cloud and application teams.

Immersive · United Kingdom

Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.

Planet Recruitment · Manchester · £40,000 – £50,000 pa

Hands-on role delivering a Cyber Security Roadmap and hardening a Microsoft-centric technology estate. Day to day involves configuring and maintaining Defender, Intune, Entra ID and Microsoft 365 security and compliance tooling, plus vulnerability management, alert triage and incident remediation. Works with the Cyber Security Operations Manager, Group Head of Cyber, IT teams and external partners, and supports Cyber Essentials and CIS Controls accreditation.

Barclays · Glasgow

Owns the optimisation and strategy of transaction monitoring controls across Barclays UK and International, tuning surveillance systems and developing detection solutions. Involves data exploration, coding in SQL, Scala, Spark or Python, and engaging technical and non-technical stakeholders on financial crime risk. Based in Glasgow within a regulated governance and control environment.

Amazon · London

Builds and operates large-scale distributed systems that process security-relevant data with high availability and low latency, owning services end to end including architecture, deployment, monitoring and on-call. Works with very large datasets and cross-functional security, compliance and service teams, contributing to technical direction and mentoring engineers.

Amazon · London

Builds AI/ML-driven security automation systems that detect, analyse and respond to threats at Amazon scale, integrating automated detection into the company's security infrastructure. Works alongside security engineers and scientists on proactive, offensive and defensive tooling, researching and prototyping new approaches. Distinct for its focus on autonomous security across one of the world's largest tech ecosystems.

NCC Group · Remote

Designs, builds and maintains security automations that detect, investigate and respond to cyber threats, working closely with Incident Response to identify improvements and create new playbooks. Delivers scalable automation within the Splunk ecosystem, covering advanced analytics, scripting, new use cases, validation of automation behaviour and documentation, plus mentoring junior engineers.

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

Entrust · London

Owns a core area of the document verification platform, setting strategy and roadmap for identity document checks used in onboarding and account opening. Works with Engineering, AI/ML, Data Science, Design, Growth and Compliance to improve verification accuracy, conversion, operational efficiency and fraud prevention, using experimentation and analytics to prioritise investments.

Entrust · Cambridge

Leads the design and delivery of complex features in a cryptographic security product, working hands-on across embedded software, platform components, client tools and APIs. Sets technical direction, mentors engineers and supports system-level architecture decisions on availability, latency and data models. Hybrid role in Cambridge, three days onsite.

CrowdStrike · Reading

Internship on CrowdStrike's Technical Analysis Cell, researching nation-state and criminal intrusions through reverse engineering of malware and tooling. The intern builds automation for malware analysis, creates host- and network-based detection signatures, and produces threat intelligence reporting for varied audiences.

CrowdStrike · London

Internship on CrowdStrike's Technical Analysis Cell, researching nation-state and criminal intrusions through reverse engineering, malware analysis and automation tooling. Interns build host- and network-based detection signatures and produce finished threat intelligence reporting for varied audiences.

Humanoid · London

Lead product cybersecurity assurance across the HMND 01 humanoid robot platforms, defining security requirements, threat modelling and risk artefacts for safety-critical electromechanical systems. Own TARA, security management plans and remediation actions, drive compliance with IEC 62443, the EU Machinery Regulation and the Cyber Resilience Act, and build a PSIRT process while guiding a cross-functional security team.