Cyber Security Jobs

• Bucharest, Romania
• Remote
• Senior
• Permanent

Owns major components of the Windows kernel-mode Falcon sensor, architecting and building anti-virus and EDR features that span file system, memory, process and networking subsystems. Leads projects end to end, from design through unit and component testing, while mentoring and collaborating with a distributed, cross-platform team.

Windows · Mac · Linux +1

• Reading
• Remote
• Senior
• Permanent

Owns major components of the Falcon endpoint sensor, a Windows kernel-mode driver that observes system activity, detects malicious behaviour and provides on-box prevention plus telemetry to the cloud. Work spans architecture, design and delivery across file system, memory, process and networking subsystems, with shared components across Windows, Mac and Linux. Involves leading projects, mentoring and collaborating with distributed teams.

Windows · Mac · Linux +2

• London
• Remote

Presales domain consultant providing technical expertise for network security and zero trust transformation. Partners with sales to architect on-prem, cloud and SASE/SD-WAN solutions, lead customer demos and technical validation, and respond to RFIs/RFPs. Acts as the main technical point of contact, presenting to audiences from practitioners to senior leadership.

SD-WAN · CASB · DLP +5

• Bangor
• £21,805 pa
• Entry level
• Contract

Fully funded three-year PhD studentship researching physical-layer network security within Bangor University's DSP Centre, supported by EPSRC and regional innovation projects. The role involves theoretical and experimental work on optical, wireless and 5G/6G communications, joint communications and sensing, and signal processing, alongside publishing, presenting and assisting with undergraduate supervision.

• United Kingdom
• Remote
• Senior

Provide advanced technical support for Cortex XSIAM customers, triaging issues via ticketing, phone and remote sessions, and performing application- and OS-level troubleshooting. Work with developers to reproduce faults and implement permanent fixes, and with technical account managers to mitigate risks in customer environments.

Cortex XSIAM · Kubernetes · GCP +10

• London
• On-site
• Senior
• Permanent

Founding engineer role building a cloud intrusion-detection product using canaries, working across the stack mainly in C# on .NET Core 10, plus Terraform and an HTMX frontend. You'll work face to face with both founders, the engineering team and customers, shipping daily with little bureaucracy and encouraged AI-assisted development.

C# · .NET Core · Terraform +6

• Remote
• Remote
• Senior
• Permanent

Designs, builds and maintains security automations that detect, investigate and respond to cyber threats, working closely with Incident Response to identify improvements and create new playbooks. Delivers scalable automation within the Splunk ecosystem, covering advanced analytics, scripting, new use cases, validation of automation behaviour and documentation, plus mentoring junior engineers.

Splunk · SOAR

• Leeds

Deliver continuous security testing across customer external attack surfaces, combining automated scanning with hands-on manual assessment. Validate scanner findings, chain vulnerabilities to demonstrate realistic attack paths, and produce proof-of-concepts and remediation advice. Work directly with customers while contributing to internal tooling and methodology.

Burp Suite Professional · SQLMap · Python +7

• London
• Hybrid
• Director · manages people
• Permanent

Lead and grow a Cloud Security practice, defining vision, capability and commercial success while ensuring high delivery standards for clients. Drive adoption of cloud and AI security technologies, strengthen partnerships with Microsoft and other vendors, and build a team of cloud security specialists. Combines technical leadership, business development, partner engagement and client-facing consulting.

Microsoft

• Cambridge
• Hybrid · 3 days in office
• Senior
• Permanent

Leads the design and delivery of complex features in a cryptographic security product, working hands-on across embedded software, platform components, client tools and APIs. Sets technical direction, mentors engineers and supports system-level architecture decisions on availability, latency and data models. Hybrid role in Cambridge, three days onsite.

C · Python

• London
• Lead

Technical owner for a portfolio of EMEA strategic accounts and US identity/workforce platform partners, split roughly 70/30. Drives API and SDK integration, product adoption, RFPs, trials and proofs of concept while mentoring solutions engineers globally and feeding market insight into the product roadmap.

RESTful APIs · SDKs

• Daventry
• Hybrid
• £45,000 – £55,000 pa
• Lead

Lead Cyber Essentials Basic and Plus assessments end to end, arranging customer sessions, reviewing submissions, running vulnerability scans and sample testing, and giving clear remediation feedback. Also supports managed-service customers through Vulnerability Management as a Service, reviewing open vulnerabilities and advising on fixes, while acting as a senior point of contact guiding other assessors and contributing to automation and process improvements.

VMaaS · CSTM · IASME List A +4

• Manchester
• Remote
• £550 – £650 pd
• Lead
• Contract

Lead and deliver penetration testing engagements for a public sector customer, covering complex infrastructure, cloud, containerised and enterprise environments. The role involves identifying vulnerabilities, strengthening security posture, and providing expert guidance, coaching and technical leadership to colleagues and clients.

AWS · Docker · Kubernetes

• Northampton
• Remote
• £50,000 – £55,000 pa
• Lead

Lead end-to-end Cyber Essentials Basic and Plus assessments, arranging customer sessions, reviewing submissions, running vulnerability scans and sample testing, and giving clear remediation feedback. Also support managed-service clients through Vulnerability Management as a Service, acting as a senior point of contact guiding other assessors and contributing to automation and process improvements.

VMaaS

• London
• Hybrid
• Senior
• Permanent

Investigate and respond to security incidents for critical national infrastructure and other clients, covering endpoint, network and cloud environments. The role spans both managed SOC services and consulting engagements, contributing to incident preparation, recovery and improving clients' security posture.

SIEM