Cyber Security Jobs

• United Kingdom
• £600 pd
• Lead
• Contract

Lead the response to major and Priority 1 cyber security incidents, coordinating technical and business stakeholders during live situations and driving containment, eradication and recovery. The role involves crisis decision-making, senior stakeholder communications, incident reviews and close work with security operations, infrastructure and technology teams to build resilience.

• Royal Leamington Spa
• Hybrid · 3 days in office
• £550 – £650 pd
• Senior
• Contract

Hands-on contract role owning the end-to-end detection engineering lifecycle, translating threat intelligence, hunting findings and adversary techniques into effective detection rules. Builds behavioural analytics and detection content across endpoint, identity, cloud, network and email telemetry using KQL, SPL, Sigma, Python and PowerShell, with tuning, purple teaming and Detection-as-Code work alongside SOC, IR and Red Team specialists.

Microsoft Sentinel · Splunk · Elastic +6

• United Kingdom
• Remote
• Mid-level

Customer-facing technical role guiding higher-education and research clients through security transformation, running discovery, demos, workshops and technical validation across on-prem, cloud and SOC solutions. Works with Professional Services, Customer Success and channel partners to drive adoption, and requires a strong pre-sales background plus experience with Systems Integrators.

Palo Alto Networks

• London
• Hybrid
• £700 – £900 pd
• Lead
• Contract

Lead an organisation-wide OT cybersecurity transformation programme for a global manufacturer, translating assessments into prioritised remediation plans and establishing governance, policies and risk frameworks. Engage senior stakeholders across Technology, Cyber, Manufacturing and Operations, manage specialist suppliers, and define a sustainable long-term OT security operating model.

IEC 62443 · NIST CSF

• Lincolnshire
• Hybrid
• £55,000 pa
• Senior

Lead the design, implementation and governance of OT network and security across multiple manufacturing sites, working alongside the Global Head of IT Operations. Act as subject matter expert for industrial networks, SCADA, PLCs, ICS and network risk assessment, securing and modernising environments while ensuring availability and resilience of business systems.

SCADA · PLC · VPN +3

• Lincoln
• Hybrid
• £55,000 pa
• Senior

Lead the design, implementation and governance of OT network and security across multiple manufacturing sites, working alongside the Global Head of IT Operations. Act as subject matter expert for SCADA, PLCs, ICS networks and industrial protocols, securing and modernising environments while ensuring availability and resilience of business systems.

SCADA · PLC · ICS Networks +4

• London
• Senior
• Permanent

Security Architect role shaping security across a cloud-native environment, working closely with Architecture, Engineering, Product and Operations teams. Focus areas include GCP security, Kubernetes, DevSecOps, application and API security, identity, resilience and compliance (PCI DSS, GDPR, ISO 27001, SOC 2). Strong commercial GCP and Kubernetes experience is essential.

GCP · Kubernetes · API Gateways +4

• London
• Senior

Shapes and strengthens security architecture across a cloud-native environment, working closely with Architecture, Engineering, Product and Operations teams. Focuses on GCP and Kubernetes security, DevSecOps, application and API security, identity, resilience and compliance, influencing technical decisions rather than just reviewing designs.

GCP · Kubernetes · API Gateways +4

• Aberdeen
• Hybrid
• £650 – £720 pd
• Senior
• Contract

Lead and coordinate cybersecurity assessments, risk remediation and control improvements across Operational Technology environments, translating security gaps into practical remediation plans. Work with OT/ICS engineers, IT, technical authorities and third-party suppliers to strengthen critical operational systems, covering asset inventories, privileged access, network segmentation, monitoring and incident response.

SIEM · NIST Cybersecurity Framework · ISO 27001

• Farnborough
• Hybrid
• Mid-level
• Permanent

Protects a critical defence IT application and infrastructure by running vulnerability scans, managing endpoint security, responding to incidents and hardening systems. Works with frameworks such as Government Functional Standard 007 and standards like CIS, STIG and NIST, leading security implementation and assurance on a major UK government programme.

CIS · STIG · NIST +2

• Farnborough
• Hybrid
• Senior
• Permanent

Lead protective and information security engineering on a critical MOD programme, shaping secure designs, assuring controls, and managing vulnerabilities across infrastructure, endpoints, identity and AWS cloud. Combines hands-on hardening, incident response leadership and ST&V with governance, reporting and mentoring, working largely autonomously on-site in Farnborough with some remote work.

AWS

• London
• £124,000 – £186,000 pa
• Senior

Owns architectural direction for Mimecast's Email & Collaboration Security product line, spanning email threat detection, DMARC, data platforms and response capabilities. Works across product, engineering and the Architecture Leadership Team to define integration contracts, ADRs and NFR targets, with cost-per-outcome reasoning and daily AI tooling use.

AWS · Kafka · MCP +4

• Filton
• Hybrid
• £45,000 – £55,000 pa
• Senior

Join a defence and security organisation's Cyber Operations team to test security controls, validate SOC detection capabilities and uncover vulnerabilities before exploitation. You'll support Red Team exercises, conduct infrastructure and web application testing, produce risk reports and brief stakeholders, working alongside Threat Intelligence and Incident Response specialists.

Kali Linux · Parrot OS · Active Directory +7

• London
• £65,000 – £79,000 pa
• Senior · manages people
• Permanent

Hands-on security leadership role managing the technical cyber security environment and SOC, owning policies, ISO 27001 implementation and incident response. Works with the Head of IT on the Cyber Security Roadmap, manages a third-party SOC and one direct report, and uses tools such as Rapid 7, Sophos MTR, Solarwinds and ServiceNow. Based at Marylebone with travel across the Chiltern network and CTC clearance required.

Rapid7 · Sophos MTR · SolarWinds +4

• Working From Home, UK
• Remote
• Senior
• Permanent

Lead full-scope red team engagements spanning cyber, physical, social engineering and process attack surfaces, emulating real-world adversaries. Build phishing infrastructure and payloads, operate C2 frameworks like Cobalt Strike, and develop custom tooling and EDR evasion tradecraft. Set methodology and mentor operators while working closely with defensive teams.

Cobalt Strike · Nighthawk