Cyber Security Jobs

• Spain
• Remote
• Senior · manages people

Lead a team of data scientists applying machine learning, large language models and reverse engineering to cybersecurity problems at massive scale, handling trillions of events daily. The role blends technical leadership, roadmap planning and stakeholder buy-in with hands-on work on malware detection, behavioural threat analysis and AI-driven security automation.

AWS · Linux

• United Kingdom
• Remote
• Senior

Technical authority in the pre-sales process, scoping and designing CrowdStrike Falcon platform deployments across endpoint, threat intelligence, identity and cloud security. Builds SOWs, effort estimates and architecture roadmaps, and partners with Services Sales Executives and delivery teams to align services with customer outcomes.

CrowdStrike Falcon · AWS · Azure +7

• Malvern, England, United Kingdom
• Hybrid · 3 days in office
• £65,700 – £73,000 pa
• Senior

Lead cyber security consultancy for defence and government customers, developing business risk models, running ISO 27001 audits and detailed vulnerability assessments using NIST and MITRE ATT&CK frameworks. You will translate technical threats into clear risk cases and mitigation strategies for senior stakeholders, embedding Secure by Design principles across projects. Based on a multi-site UK estate with at least three days a week on site and customer travel.

NIST · ISO 27001 · MITRE ATT&CK

• Getafe, Spain
• Senior
• Permanent

Owns the long-term data protection strategy and technology roadmap across hybrid, multi-cloud, container and on-premise environments. Leads technical design of resilient disaster recovery architectures, evaluates immutable and air-gapped backup technologies, and automates backup and recovery processes. Acts as the top escalation point for complex data recovery failures, bridging operations, security and business continuity.

Veritas · Cohesity · Veeam +4

• Bristol
• Senior
• Permanent

Owns the long-term data protection strategy and technical design of resilient disaster recovery architectures across hybrid, multi-cloud, container and on-premise environments. Acts as the highest escalation point for complex recovery failures, evaluating immutable and air-gapped storage while automating backup and orchestration processes.

Veritas · Cohesity · Veeam +4

• Moore, United States
• Hybrid
• Senior · manages people

Lead delivery of OT cybersecurity consultancy for high-hazard sectors, managing site audits, compliance assessments, vulnerability analyses and risk assessments. Build CSMS aligned to IEC 62443, CAF, OG86 and NIS, advise clients on roadmaps, mentor junior staff and drive business development. Hybrid role with UK travel.

Microsoft Office Suite

• Remote
• Hybrid
• Lead · manages people

Oversee Security Operations Centre activities, lead incident response efforts, and mentor a team of analysts. The role centres on cyber threat detection and incident investigation, with strong hands-on use of the Splunk Enterprise Security platform. It is a lead-level position within a remote security operations team.

Splunk Enterprise Security

• London
• Hybrid · 3 days in office
• £90,000 – £100,000 pa
• Senior · manages people

Lead and develop a Security Operations Centre within a technology-led law firm, combining people management with hands-on security operations expertise. Oversee threat detection, monitoring, threat hunting and complex incident response, while shaping security tooling and the wider cyber security roadmap. Hybrid working in Central London, circa three days per week in the office.

Microsoft Security

• Lincolnshire
• Hybrid
• £55,000 pa
• Senior

Lead the design, implementation and governance of OT network and security across multiple manufacturing sites, working alongside the Global Head of IT Operations. Act as subject matter expert for industrial networks, SCADA, PLCs, ICS and network risk assessment, securing and modernising environments while ensuring availability and resilience of business systems.

SCADA · PLC · VPN +3

• London
• Hybrid · 3 days in office
• £500 – £600 pd
• Senior
• Contract

Supports cyber governance, risk management and control execution across core business functions in a high-assurance, regulated environment. Day-to-day work covers cyber risk assessments, security issue management and close collaboration with cross-functional stakeholders. Contract role with hybrid working, three days a week in office.

• West Byfleet
• Senior

Hands-on architecture role shaping AWS cloud strategies, standards and governance for secure, business-critical environments. You will design resilient, highly available solutions, lead infrastructure automation and migration projects, and provide technical leadership to engineering teams while engaging directly with customers. Distinct for its focus on Defence, National Security and Public Sector work requiring existing DV clearance.

AWS · EC2 · S3 +7

• Ashford
• Hybrid
• £50,000 – £55,000 pa
• Senior
• Permanent

Lead operational delivery of data protection and information governance across a healthcare organisation, acting as primary internal lead alongside an external DPO. Oversee UK GDPR and DSPT compliance, SARs, FOIs, DPIAs and information sharing, and support cyber security, incident response and audits while advising senior leaders and clinical colleagues.

DSPT

• Fleet
• Hybrid
• Mid-level

Owns day-to-day security alerting, investigations and incident response across a cloud-native microservice platform and internal IT estate, directing a Platform Ops team on remediation. Manages SIEM, endpoint and Microsoft 365 security tooling, vulnerability management, IAM and penetration testing engagements, while maintaining ISO 27001 documentation and UK GDPR compliance.

AWS · Kubernetes · EKS +5

• Dublin, Ireland
• Hybrid
• Senior · manages people
• Permanent

Lead a cloud-first security operations function, owning detection, investigation and response across cloud, endpoint, identity and SaaS estates. Manage a small team and an outsourced monitoring partner, drive detection tuning, and shape a measured plan for AI and automation in the SOC. The role is operational rather than shift-based, with a clear boundary from architecture.

Microsoft

• United Kingdom
• Hybrid
• Senior

Produce tactical, operational and strategic threat intelligence assessments, analysing threat actors, intrusion techniques and emerging threats. Correlate OSINT, commercial intelligence and internal telemetry, translating findings into recommendations for SOC, detection engineering, threat hunting and red team exercises, and presenting to senior stakeholders.

MITRE ATT&CK