Cyber Security Jobs

• United Kingdom
• Remote
• Lead

Serve as technical lead on front-page incident response engagements for Fortune 100 organisations, conducting intrusion investigations under outside counsel and performing host and network forensics across Windows, Mac and Linux. The role also involves hunting threat actors in large datasets, cloud IR in AWS, Azure or GCP, and communicating findings to executives, regulators and legal teams.

CrowdStrike · AWS · Azure +6

• Germany
• Remote
• Senior

Senior consultants join the technical team on front-page incident response engagements for Fortune 100 organisations, conducting intrusion investigations under project leadership and outside counsel. The role spans host and network forensics across Windows, Mac and Linux, threat hunting across large data sets, and producing written and verbal findings for customers, regulators and legal counsel.

CrowdStrike · Bro/Zeek · Suricata +6

• Manchester
• Hybrid · 1 day in office
• £70,000 – £75,000 pa
• Mid-level

Hands-on security engineering role focused on Microsoft security platforms, including Defender XDR, Sentinel, Purview, Defender for Cloud and Entra. You will build security monitoring, telemetry and SOAR automation, investigate incidents and embed controls into cloud and development processes alongside security, cloud and engineering teams.

Microsoft Defender XDR · Microsoft Sentinel · Microsoft Purview +5

• Manchester
• £60,000 – £75,000 pa
• Mid-level

Hands-on security engineering role centred on the Microsoft and Azure security stack, covering Defender, Sentinel, Entra, Purview and Azure. The engineer owns security controls, detection rules, telemetry, alerting, automation and response workflows, and helps embed security into delivery processes while contributing to emerging AI security capabilities.

Microsoft Defender · Microsoft Sentinel · Microsoft Entra +3

• Royston
• £58,000 – £60,000 pa
• Senior

Owns AI security initiatives within a Cyber Security and Compliance team, evaluating and integrating AI security tooling and defending against threats such as prompt injection, data leakage and model poisoning. Also builds AI-driven detection, vulnerability management and incident response capabilities, running threat modelling and adversarial testing of AI systems alongside stakeholders.

Python · OWASP Top 10 for LLM Applications · MITRE ATLAS +1

• Farnborough
• Hybrid
• £45,000 – £55,000 pa
• Mid-level

Hands-on information security role combining ISO 27001 compliance, data protection and technical support. You will troubleshoot hardware, software and network issues, triage and escalate security incidents, maintain audit trails and support the implementation of security controls. Works closely with customer service, field teams and data protection colleagues, requiring security clearance and vetting.

CompTIA Security+ · CISSP · ISO 27001 Lead Implementer +1

• Birmingham
• £50,000 – £60,000 pa
• Lead

Owns the technical administration and optimisation of the Mimecast email security platform across a group and its subsidiaries, acting as the group subject-matter expert. Configures enterprise email-security policies, manages mail flow, DNS and SPF/DKIM/DMARC authentication, and investigates phishing, spoofing and BEC incidents while liaising with an external SOC/MDR provider.

Mimecast · SOC · MDR

• London
• Hybrid · 3 days in office
• £80,000 – £85,000 pa

Hands-on role strengthening application security and embedding automated testing into CI/CD pipelines. You'll run SAST, DAST and SCA tooling, validate and remediate vulnerabilities, manage external attack surface risk, and assess AI/LLM security risks alongside engineering and DevOps teams.

Checkmarx · Snyk · Semgrep +6

• Warwick
• Remote
• £70,000 – £85,000 pa
• Senior

Drive secure-by-design and DevSecOps practices across the SDLC, integrating security controls into CI/CD pipelines and managing SAST, DAST, SCA and IAST tooling including Checkmarx. Act as a subject matter expert advising Development, DevOps and Platform Engineering teams in a complex enterprise environment, with a remote-first pattern and occasional Midlands office visits.

Checkmarx · Prisma Cloud · Cortex +3

• Reading
• Hybrid · 2 days in office
• £40,000 – £42,500 pa
• Junior
• Permanent

First line of defence for day-to-day security hygiene at a SaaS vendor: patching the Windows estate, monitoring CrowdStrike, and assessing the impact of new vulnerabilities. Works closely with the infrastructure team, with a structured route into Azure and wider cloud security engineering.

CrowdStrike · Microsoft Defender · Azure +2

• Greater Manchester
• Hybrid
• £40,000 – £46,500 pa
• Mid-level
• Permanent

Hands-on security role covering SIEM, EDR, email security and vulnerability platforms, plus IDS/IPS monitoring and incident investigation. You'll embed security into project lifecycles and SDLC, work with an MSP on alert management, and support Cyber Essentials and ISO 27001 governance and third-party risk assurance.

SIEM · EDR · XDR +2

• London
• Mid-level

Acts as a technical authority leading application security reviews for high-risk products, running SAST, DAST, API security and fuzz testing, and assessing against the OWASP Top 10. Embeds shift-left security into CI/CD pipelines and secure coding practices across Java, C, C++ and other languages, while advising developers, architects and product owners across Ricoh Europe.

Java · C · C++ +7

• Tidworth
• Hybrid · 3 days in office
• Mid-level

Lead organisation-wide IT security for a large PFI support services contract, owning the security strategy, roadmap and compliance activities. Manage incidents, breaches, disaster recovery and business continuity, and extend controls across the supply chain. The role sits in the central business services function, working with cyber and quality teams on audit readiness and business change.

• London
• Hybrid
• £67,000 pa
• Permanent

Designs and implements security solutions across cloud, on-premises and hybrid environments for a global technology consultancy's client projects. Day-to-day work covers SIEM log ingestion and routing, firewall and network security management, CIS benchmark assessments, and automating security processes with Python, Bash or PowerShell, Terraform and cloud platforms. Involves client-dependent on-call support and requires British passport holders without dual nationality for clearance.

Splunk · Microsoft Sentinel · Cribl +11

• United Kingdom
• Remote
• £70,000 – £90,000 pa
• Senior
• Permanent

Lead OT cyber risk assessments on client sites, which makes up around 80% of the role, and carry out site surveys across ICS, SCADA, DCS and wider OT environments. Build improvement roadmaps and security programmes, applying standards such as IEC 62443, NCSC CAF, NIST SP 800-82 and HSE OG86, while supporting the sales team on follow-on opportunities and proposals.

IEC 62443 · NCSC CAF · NIST SP 800-82 +1