Cyber Security Jobs

• Reading
• Remote
• US$140,000 – US$215,000 pa
• Lead · manages people

Lead a growing engineering team building self-service infrastructure-as-code primitives, architecting large-scale core services and driving cloud cost optimisation across multi-cloud environments. The role combines people management with hands-on technical direction, including design reviews, on-call management and SRE practices.

Chef · Puppet · Salt +7

• London
• Remote
• US$140,000 – US$215,000 pa
• Lead · manages people

Lead a growing engineering team building self-service infrastructure-as-code primitives, architecting large-scale core services, and driving cloud cost optimization across a multi-cloud environment. The role combines people management with hands-on technical direction, setting deployment standards and SRE practices for a platform processing trillions of events daily.

Chef · Puppet · Salt +7

• London
• Mid-level
• Permanent

Builds and operates automation platforms that onboard threat detection, remediate security risk and accelerate incident response across every AWS account. Day to day involves designing loosely specified features, writing well-tested Python and TypeScript on AWS services, instrumenting systems for operational excellence, and participating in an on-call rotation. The team runs foundational services at very high scale with a strong 'you build it, you run it' culture.

AWS

• Birmingham
• Remote
• £90,000 – £95,000 pa
• Lead · manages people

Hands-on lead role split roughly 60/40 between Azure security engineering and SOC leadership, owning Sentinel, KQL detection engineering and incident response while mentoring three analysts. Involves DevSecOps tooling, IaC hardening of AKS and supply chain security across a large multi-tenant SaaS platform.

Microsoft Azure · Microsoft Sentinel · Microsoft Defender for Cloud +7

• Corsham
• Hybrid
• £550 – £600 pd
• Lead
• Contract

Lead enterprise vulnerability management and cyber risk reduction in a secure MOD/Defence environment, owning frameworks, policies and remediation governance. Coordinate identification, prioritisation and remediation across enterprise systems, optimise tools such as Tanium and Elastic, apply CVSS, and produce board-level reporting. Also supports major cyber security incident management and threat intelligence correlation.

Tanium · Elastic

• London
• Mid-level
• Permanent

Builds and operates automation platforms that onboard threat detection, remediate security risk and accelerate incident response across every AWS account. The role spans designing loosely specified features, owning operational health through instrumentation and automation, and participating in an on-call rotation, using AWS services, Python and TypeScript at very high scale.

AWS

• London
• Mid-level

Deploy, integrate and optimise AI-driven cybersecurity across network, cloud, OT and email environments for post-sales customers. Handle deployment projects to SLOs, resolve support tickets and act as a trusted advisor on security infrastructure design, liaising with sales, customer success and operations.

AWS · Microsoft · Cisco +2

• Leeds
• Hybrid · 3 days in office
• £65,000 – £70,000 pa
• Lead · manages people
• Permanent

Lead a cyber security team day to day, covering resource planning, rotas and performance management, while overseeing incident response, vulnerability management and cloud security migration. Act as escalation point for security incidents and lead war-gaming exercises within an ITIL and ISO 27001 framework, requiring hands-on Azure security expertise.

Azure · Windows Server · VMware +7

• London
• Mid-level

Hands-on incident response role covering detection, triage, investigation, containment and recovery of cyber incidents in a complex enterprise environment. Day to day involves monitoring SIEM and EDR/XDR alerts, analysing logs, packet captures and forensic images, threat hunting, and mapping activity to MITRE ATT&CK. Also maintains playbooks, evidence records and post-incident reports, and briefs senior stakeholders.

Microsoft Sentinel · Defender XDR · Defender for Identity +7

• Reading
• Hybrid · 2 days in office
• £500 – £600 pd
• Contract

Owns the end-to-end major incident lifecycle in a complex, multi-supplier enterprise IT environment, coordinating technical teams, suppliers and business stakeholders to restore services quickly. Drives root-cause investigations, post-incident reviews and continual service improvement, using ITIL 4 and ServiceNow. Requires active SC clearance and sole British, Italian or Japanese citizenship.

ServiceNow

• Hessle
• Hybrid
• £35,000 – £45,000 pa
• Mid-level
• Permanent

Hands-on security operations role covering alert triage, incident response and root-cause analysis, plus tuning SIEM, EDR/XDR and monitoring tooling to cut false positives. You will drive automation and security improvement projects while liaising with a managed SOC and internal infrastructure, cloud and application teams.

Microsoft Sentinel · Microsoft Defender XDR · CrowdStrike +7

• Prudhoe
• Hybrid
• £35,000 – £45,000 pa
• Permanent

Hands-on security operations role covering alert triage, incident response and root-cause analysis, alongside tuning SIEM, EDR/XDR and monitoring tooling to improve detection and cut false positives. You will also drive security automation, deliver improvement projects and act as liaison with a managed SOC and internal infrastructure, cloud and application teams.

Microsoft Sentinel · Microsoft Defender XDR · CrowdStrike +6

• London

Customer-facing technical role supporting sales teams with pre-sales and post-sales engagements, including running Proof of Value exercises and presenting threat intelligence reports to audiences from technical teams to C-level executives. Also involves designing custom client integrations and defining solution architectures across network and security systems such as firewalls, IDS/IPS and SIEM.

Cisco · Juniper · Firewalls +1

• London
• Hybrid
• £57,000 – £67,000 pa
• Mid-level
• Permanent

Hands-on role implementing and maintaining technical security controls across endpoints, networks, servers, cloud and clinical systems. Involves vulnerability scanning and remediation, security monitoring and incident response, plus IAM, MFA and logging work in a Microsoft-centric estate, collaborating with a wider group cybersecurity function in a regulated environment.

Microsoft Defender · Microsoft 365 · Microsoft Entra +6

• London
• Remote
• Senior

Deliver expert-level technical support to top-tier cybersecurity customers, owning complex cases from initiation to resolution through multi-vendor troubleshooting, fault isolation and root cause analysis. Act as a designated customer advocate running weekly reviews, QBRs and upgrade planning, while working with Engineering and QA on bug reports and test plans.

Palo Alto Networks · Prisma Access · Cisco Firepower +7