Cyber Security Jobs

• Israel
• Remote
• Senior

Join the Advanced Research Team to perform vulnerability research across a wide range of targets, including analyzing vendor patches to identify vulnerabilities and develop proof-of-concept exploits. You will build automated solutions for collecting and processing data at scale, reverse engineer malicious payloads, and publish findings on the CrowdStrike blog or at conferences.

CrowdStrike · Windows · Linux +5

• Germany
• Remote
• Senior

Conducts vulnerability research and exploit development, analysing vendor patches to identify flaws and building proof-of-concept exploits. Reviews logs and payloads to confirm 0-day and n-day exploitation, and develops automated tooling for large-scale data collection and analysis. Publishes findings on the CrowdStrike blog or at conferences and supports other intelligence teams with ad-hoc technical solutions.

CrowdStrike · GenAI · LLM +3

• Hamburg, Germany
• Senior
• Permanent

Owns the long-term data protection strategy and technical design of resilient disaster recovery architectures across hybrid, multi-cloud, container and on-premise environments. Acts as the top escalation point for complex recovery failures, evaluating immutable and air-gapped storage while automating backup and orchestration processes.

Veritas · Cohesity · Veeam +4

• Reading
• Remote
• Senior

Designs, develops and reviews secure architectures across cyber security, cloud and enterprise environments for defence customers, acting as a trusted technical adviser. Produces architecture documentation and assurance artefacts, supports risk assessments, and embeds security throughout the solution lifecycle, with occasional travel to customer sites.

AWS · Azure

• Sunbury-on-Thames
• Hybrid
• Lead · manages people

Lead bp's global GRC engineering and compliance management teams, owning the technology, AI and data strategies and overseeing delivery squads. Drive platform, tooling and dashboard delivery for continuous control health monitoring, plus a compliance framework for global regulations and industry certifications. Hybrid role based in Sunbury-on-Thames, moving to Timber Square, Southwark around Q4 2027.

• Sunbury-on-Thames
• Hybrid · 3 days in office
• Mid-level

Monitors and administers anti-malware, EDR, application control and DLP tooling plus OS patch deployment across bp's global operational technology and process control networks. The role sits in the OT Security Operations service, managing secure file transfer, vulnerability and asset inventory tooling, and supporting incident response while working closely with site teams. Requires a minimum of three days per week on-site at Sunbury.

Trellix · Microsoft WSUS · Layer 2 Networking +1

• London
• Mid-level

Acts as a technical authority leading application security reviews for high-risk products, running SAST, DAST, API security and fuzz testing, and assessing against the OWASP Top 10. Embeds shift-left security into CI/CD pipelines and secure coding practices across Java, C, C++ and other languages, while advising developers, architects and product owners across Ricoh Europe.

Java · C · C++ +7

• London
• Mid-level

Lead the Health and Care Account for a fast-growing technology consultancy, delivering cyber security, data and AI services. Day to day involves client relationship building, managing a healthcare delivery portfolio, supporting sales and bids, running risk and maturity assessments, and implementing security controls aligned to NIST, CAF and ISO27001. Requires SC clearance eligibility and sole British nationality.

NIST · CAF · ISO 27001

• United Kingdom
• Remote
• Senior

Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.

SIEM · SOAR · LLMs +1

• London
• Hybrid
• £80,000 – £90,000 pa
• Senior
• Permanent

Hands-on application security role embedding security across the SDLC, working with engineering, architecture and cloud teams. Involves application security testing (SAST, DAST, IAST, SCA), securing CI/CD pipelines and GitHub Actions, API and Kubernetes/AKS security, plus security-as-code and automation using Terraform and Python. Requires Azure and KQL expertise within a health research charity.

Microsoft Azure · KQL · GitHub +7

• Liverpool
• Hybrid
• Mid-level
• Permanent

Day-to-day work centres on information security risk assessments across technology, applications, projects and business processes, tracking mitigations and escalating significant risks. The role also covers third-party supplier due diligence, security assurance reviews, vulnerability remediation tracking, policy maintenance and incident support, working alongside Security Operations and IT teams.

ISO 27001 · NIST

• Tidworth
• Hybrid · 3 days in office
• Mid-level

Lead organisation-wide IT security for a large PFI support services contract, owning the security strategy, roadmap and compliance activities. Manage incidents, breaches, disaster recovery and business continuity, and extend controls across the supply chain. The role sits in the central business services function, working with cyber and quality teams on audit readiness and business change.

• United Kingdom
• Remote
• Senior · manages people

Leads incident response engagements for customers hit by cyberattacks, directing a team of consultants, running kick-off and daily update calls, and delegating forensic tasks. Handles multiple ransomware and BEC investigations concurrently, performing root cause analysis and producing executive-summary reports mapped to MITRE ATT&CK.

Splunk · ELK · Sophos

• London
• Hybrid
• £80,000 – £100,000 pa
• Senior
• Permanent

Defines and delivers secure architectures across enterprise IT and operational technology environments, working with technical and solution architects to embed security through the design lifecycle. Applies threat modelling, NIST/ISO/CIS frameworks and advises on protective monitoring, IAM and risk mitigation. Client-facing, requiring active SC clearance and strong stakeholder communication.

NIST · ISO · CIS +1

• London
• Hybrid
• £67,000 pa
• Permanent

Designs and implements security solutions across cloud, on-premises and hybrid environments for a global technology consultancy's client projects. Day-to-day work covers SIEM log ingestion and routing, firewall and network security management, CIS benchmark assessments, and automating security processes with Python, Bash or PowerShell, Terraform and cloud platforms. Involves client-dependent on-call support and requires British passport holders without dual nationality for clearance.

Splunk · Microsoft Sentinel · Cribl +11