Cyber Security Jobs

Akkodis · Prudhoe · £35,000 – £45,000 pa

Hands-on security operations role covering alert triage, incident response and root-cause analysis, alongside tuning SIEM, EDR/XDR and monitoring tooling to improve detection and cut false positives. You will also drive security automation, deliver improvement projects and act as liaison with a managed SOC and internal infrastructure, cloud and application teams.

ITSS Recruitment · London · £60,000 – £70,000 pa

Hands-on security engineering role protecting critical systems and sensitive data across a broad estate covering cloud security, vulnerability management, incident response and security monitoring. Day to day involves operating the vulnerability management programme, administering Microsoft Defender, Purview, Entra ID, Sentinel and Azure security services, and advising infrastructure, application and business stakeholders on risk-based controls.

GCS · London · £600 – £700 pd

Lead a risk-based technical assurance programme across a global enterprise, independently assessing security control effectiveness in infrastructure, cloud, identity, applications and incident response. Manage and mentor a small team of Technical Assurance Analysts while producing board-level reporting and driving continuous controls monitoring and automated assurance.

Darktrace · Cambridge

Lead the strategy, roadmap and execution of Darktrace's interactive demo estate, shaping how products are showcased to prospects, customers and internal teams. Manage a small team of technical content specialists while partnering with Product, Marketing, Enablement and Sales Engineering to evolve demos from on-rails walkthroughs into live sandbox environments.

Darktrace · London

Investigates emerging cyber threats, performing in-depth malware analysis and reverse engineering while hunting for new attack trends and adversary TTPs. Produces threat intelligence reports, blogs and conference presentations, and develops data-driven methodologies and detections using Python, PowerShell or C/C++. Works hybrid, at least two days a week in the Cambridge or London office, alongside security researchers, analysts and product teams.

Hays Technology · Sheffield · £450 – £500 pd

Owns end-to-end solution design across cybersecurity initiatives, producing architecture documents, high-level designs, patterns, decision records and risk assessments. Provides technical leadership and presents designs to Design Authorities and senior stakeholders, with deep IAM and HashiCorp Vault expertise. Requires three days per week onsite in Sheffield.

Netcraft · London

Join the Novel Classification team to build and operate machine learning systems that detect phishing sites and online scams at scale. You'll train, evaluate and serve classifiers on GPU-backed Kubernetes, run live experiments on precision and recall, and deploy LLM inference and computer vision models into production.

Planet Recruitment · Manchester · £40,000 – £50,000 pa

Hands-on role delivering a Cyber Security Roadmap and hardening a Microsoft-centric technology estate. Day to day involves configuring and maintaining Defender, Intune, Entra ID and Microsoft 365 security and compliance tooling, plus vulnerability management, alert triage and incident remediation. Works with the Cyber Security Operations Manager, Group Head of Cyber, IT teams and external partners, and supports Cyber Essentials and CIS Controls accreditation.

Harnham - Data and Analytics Recruitment · Newcastle upon Tyne · £73,000 – £84,000 pa

Own and operate a business-critical enterprise data platform on Microsoft Azure, acting as technical lead for architecture, scalability, governance and operational excellence. Work with Infrastructure, Security and Architecture teams on CI/CD, automation, monitoring and Infrastructure-as-Code, supporting production and incident management while enabling Data Engineers and shaping platform strategy.

Michael Page · Liverpool · £60,000 – £65,000 pa

Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.

Manufacturing Recruitment Ltd · Polegate · £70,000 – £80,000 pa

Designs and implements cloud-native security solutions on Microsoft Azure, applying Security as Code and automation tooling. Works with Security Architects to define cloud security strategy, establish guardrails for developers, and ensure compliance with GDPR, ISO 27001 and NIST. Involves AKS, DevSecOps, Defender, SIEM and scripting with BICEP, ARM, PowerShell and Python in an agile, hybrid team.

Amazon · London

Join a global team responsible for discovering, assessing, triaging and driving remediation of vulnerabilities across Amazon's infrastructure, services and applications. The role involves analysing disclosures and exploit code, engineering scalable detection mechanisms, and building automation and tooling, with periodic on-call duties.

JAM Recruitment · London · £700 – £750 pd

Day-to-day, you will manage and configure production databases, provide first to third-line support across full-stack applications, and administer Linux and Windows virtual machines with a focus on vulnerability management and hardening. The role also involves automation with Ansible, Docker containerisation, ETL processes and shared services such as identity brokers and observability platforms, within a national-security context requiring DV clearance.

TRIA · Sheffield · £500 – £600 pd

Lead the response to high-severity IT incidents across network, infrastructure, cloud and security environments, coordinating technical teams, suppliers and stakeholders to restore services within agreed targets. The role involves chairing incident and crisis calls, post-incident reviews, root cause analysis, ITIL processes, disaster recovery and business continuity planning, plus executive reporting and on-call duties.

DCV Technologies · Royal Leamington Spa · £550 – £650 pd

Hands-on contract role owning the end-to-end detection engineering lifecycle, translating threat intelligence, hunting findings and adversary techniques into effective detection rules. Builds behavioural analytics and detection content across endpoint, identity, cloud, network and email telemetry using KQL, SPL, Sigma, Python and PowerShell, with tuning, purple teaming and Detection-as-Code work alongside SOC, IR and Red Team specialists.