Cyber Security Jobs

• Peterborough
• Remote
• £28,000 – £40,000 pa
• Entry level

A training programme combining accredited CompTIA online courses, tutor support and practice labs to prepare candidates with no prior experience for entry-level IT roles. Participants sit A+ and Network+ exams, then move into an IT Technician placement before progressing into cybersecurity with Security+ and optional ethical hacking courses.

CompTIA A+ · CompTIA Network+ · CompTIA Security+ +2

• London
• £30,000 – £40,000 pa
• Entry level

A training and placement programme for career changers with no prior experience, combining accredited online CompTIA A+ and Network+ study with tutor support, practice labs and official exams. Participants are then placed into an IT Technician role, with further Security+ training released to prepare them for a move into cybersecurity after roughly two years.

CompTIA A+ · CompTIA Network+ · CompTIA Security+ +2

• United Kingdom
• Remote
• Lead

Serve as technical lead on front-page incident response engagements for Fortune 100 organisations, conducting intrusion investigations under outside counsel and performing host and network forensics across Windows, Mac and Linux. The role also involves hunting threat actors in large datasets, cloud IR in AWS, Azure or GCP, and communicating findings to executives, regulators and legal teams.

CrowdStrike · AWS · Azure +6

• United Kingdom
• Remote
• Mid-level

Lead and support cloud incident response engagements and security assessments for clients, analysing cloud and hybrid architectures and providing remediation guidance. The role also involves mentoring junior consultants, developing internal and open-source tooling, and researching emerging cloud security techniques.

AWS · Azure · GCP +4

• Cambridge
• Hybrid · 2 days in office
• Director · manages people

Lead the strategy, roadmap and execution of Darktrace's interactive demo estate, shaping how products are showcased to prospects, customers and internal teams. Manage a small team of technical content specialists while partnering with Product, Marketing, Enablement and Sales Engineering to evolve demos from on-rails walkthroughs into live sandbox environments.

Reprise · Storylane · Navattic

• London
• Remote

Owns the end-to-end migration and security operations transformation for enterprise customers moving from legacy platforms to Cortex XDR/XSIAM, Prisma Cloud or Strata. Runs data cutovers, policy mapping, API and log ingestion work, plus Day-in-the-Life workshops and executive value realization sessions. Combines hands-on Python, CLI and REST API automation with customer-facing delivery in a global, remote-first team.

Cortex XDR · Cortex XSIAM · Prisma Cloud +2

• London
• Remote
• Lead

Lead and deliver reactive incident response engagements for clients, managing scoping, forensic investigations and containment of security incidents. Perform host-based analysis across Windows, Linux and macOS, examine firewall, web and database logs, and use tools such as EnCase, FTK, X-Ways, SIFT and Splunk to determine breach scope. Also mentors junior team members and provides remediation guidance to customers.

EnCase · FTK · X-Ways +5

• London
• Lead

Technical owner for a portfolio of EMEA strategic accounts and US identity/workforce platform partners, split roughly 70/30. Drives API and SDK integration, product adoption, RFPs, trials and proofs of concept while mentoring solutions engineers globally and feeding market insight into the product roadmap.

RESTful APIs · SDKs

• United States - Field
• Senior · manages people

Defines and governs a four-plane reference architecture (Identity, Authority, Execution, Assurance) for an agentic trust layer, owning specs like the Agent Passport, Permission Slip framework, Evidence Ledger and Policy Engine. Chairs architecture and boundary review boards, sets dependency contracts across product lines, and represents the company in standards bodies such as FIDO, OpenID and IETF.

Azure · AWS · Google Cloud +7

• United Kingdom
• Junior

Supports the delivery of security architecture and cyber security services across Defence and Government projects, including security assessments, risk analysis, threat identification and security documentation. Works alongside experienced Security Architects and technical specialists on areas such as Identity & Access Management, Security Testing, Privacy and Cloud Security, and requires SC Clearance.

AWS · Azure · Google Cloud +7

• Newcastle upon Tyne
• Hybrid
• £57,000 pa
• Mid-level
• Permanent

Protect business systems, infrastructure and data by monitoring, investigating and responding to cyber threats and incidents. Manage vulnerability remediation, patching and endpoint security while securing cloud, network and endpoint environments. Support governance, audits and compliance with standards such as ISO 27001 and Cyber Essentials Plus, working with internal teams and third-party suppliers.

SIEM · EDR · Microsoft Defender +3

• Southampton
• Hybrid · 3 days in office
• £65,000 pa
• Mid-level

Operational security role monitoring alerts, investigating incidents and maintaining controls across on-prem, cloud and SaaS environments. You'll handle firewalls, VPNs, endpoint protection, vulnerability management and secure configuration, supporting audits, pen tests and NIST/NIS compliance alongside infrastructure and service delivery teams.

Microsoft Azure · Microsoft 365 · Entra ID +7

• Swansea
• Hybrid · 2 days in office
• £45,000 – £55,000 pa
• Mid-level

Hands-on role taking technical ownership of cyber security across a predominantly Microsoft environment, working with an infrastructure team and external SOC partners. Day to day involves assessing the estate for security gaps, hardening systems, operating Defender/XDR, EDR and Sentinel, managing Entra ID access controls, and responding to incidents and vulnerabilities.

Microsoft Sentinel · SIEM · SOC +3

• Cardiff
• Remote
• £62,000 – £72,000 pa
• Mid-level

Hands-on security engineering role focused on building and improving controls across a Microsoft-centric estate, including Defender, Sentinel, Azure and Entra ID. Involves vulnerability management, data protection with Purview, incident response support and embedding security into projects, with influence over strategy rather than pure SOC operations.

Microsoft Defender · Microsoft Sentinel · Azure +2

• Abingdon
• £37,000 – £45,000 pa
• Mid-level

Hands-on security operations role within an MSP, monitoring and investigating alerts across Microsoft 365, Sophos and other platforms for both internal and client environments. Acts as a technical escalation point for the Service Desk and Infrastructure teams, covering incident response, vulnerability and patch management, tenant hardening and remediation tracking.

Microsoft 365 · Sophos · Microsoft Defender +3