Cyber Security Jobs

• USA, NY
• Remote
• US$140,000 – US$215,000 pa
• Lead · manages people

Lead a growing team of engineers building self-service infrastructure-as-code primitives, high-availability core services and cloud cost optimization across a multi-cloud environment. The role combines people management, architecture review and roadmap planning, with hands-on work in Terraform, Pulumi, Python or Go, Linux and SRE practices at massive scale.

Chef · Puppet · Salt +7

• Canada - Remote ON
• Remote
• CA$150,000 – CA$200,000 pa
• Lead · manages people

Lead a growing team of engineers building self-service infrastructure-as-code primitives, architecting large-scale core services, and driving cloud cost optimization across a multi-cloud environment. The role blends people management with hands-on technical direction, including design reviews, roadmap planning, and SRE practices such as SLO management and on-call.

Chef · Puppet · Salt +7

• London
• Hybrid · 2–3 days in office
• £110,000 – £135,000 pa
• Lead · manages people

Lead the Enablement platform group, owning infrastructure, CI/CD pipelines and reliability practices across engineering. Set platform strategy and roadmap, manage SLOs, incident response and AWS cloud spend, while partnering with the Expansion product group to balance platform capacity against feature delivery. Also coach engineers and lead hiring for platform and SRE roles.

AWS · Kubernetes · Docker +6

• Reading
• On-site
• £30,000 – £35,000 pa
• Mid-level

Provide first and second line support remotely and onsite for a managed service provider, owning tickets in Autotask and troubleshooting Windows, Microsoft 365, printers and connectivity. Alongside helpdesk duties you assist with client installations, school projects and wireless networking work, developing skills in Intune, Ekahau surveys and 3CX telephony.

Autotask · IT Glue · Intune +7

• United Kingdom
• Remote
• Mid-level

Performs advanced investigative, forensic and containment work during active cyber incidents for Managed Detection and Response customers, correlating alerts and telemetry to establish scope and root cause. Mentors junior IR and SOC analysts, maintains engagement documentation and playbooks, and supports Incident Advisors with validated technical findings. Includes weekend and holiday rotation cover.

OSQuery · SQL · KQL +2

• London
• Senior

Review and remediate software supplier agreements, including reseller agreements, EULAs and MSAs, negotiating revised terms through to signature. Advise on software licensing, vendor risk, and draft technology, operations and procurement contracts across EMEA, applying DORA, GDPR, EBA outsourcing and EU AI Act requirements. Manage a portfolio of 20-30 live matters while developing templates and negotiation playbooks.

DORA · GDPR · EU AI Act +1

• Fleet
• Hybrid
• Mid-level

Owns day-to-day security alerting, investigations and incident response across a cloud-native microservice platform and internal IT estate, directing a Platform Ops team on remediation. Manages SIEM, endpoint and Microsoft 365 security tooling, vulnerability management, IAM and penetration testing engagements, while maintaining ISO 27001 documentation and UK GDPR compliance.

AWS · Kubernetes · EKS +5

• Birmingham
• Hybrid
• Mid-level
• Permanent

Champion SRE best practices across engineering, platform and service operations teams, implementing SLOs, SLIs and error budgets for critical services. Build observability through monitoring, logging, tracing and alerting, automate operational tasks, and support incident response and resilience testing. Also involves AIOps adoption and embedding reliability into delivery pipelines.

AIOps

• London
• Lead

Security lead for an AI engineering team's products and platform, owning security reviews, threat modelling and sign-off from design through production. Covers AI/LLM risks like prompt injection, CVE remediation, scanning tooling in CI/CD, pen testing and incident response, reporting directly to the CIO.

Azure · GCP · GitHub Actions +7

• Milton Keynes
• Senior

Lead second-line risk oversight across technology, change and operational resilience, providing independent assurance on IT risk, transformation programmes and important business services. Act as a trusted adviser to senior technology and change leaders, working with the parent building society on risk appetite and Group standards. Involves control reviews, scenario testing, RCSA and reporting to Risk Committee, ExCo and Board audiences.

Cloud

• Sunbury-on-Thames
• Hybrid · 3 days in office
• Mid-level

Monitors and administers anti-malware, EDR, application control and DLP tooling plus OS patch deployment across bp's global operational technology and process control networks. The role sits in the OT Security Operations service, managing secure file transfer, vulnerability and asset inventory tooling, and supporting incident response while working closely with site teams. Requires a minimum of three days per week on-site at Sunbury.

Trellix · Microsoft WSUS · Layer 2 Networking +1

• London
• Lead

Technical owner for a portfolio of EMEA strategic accounts and US identity/workforce platform partners, split roughly 70/30. Drives API and SDK integration, product adoption, RFPs, trials and proofs of concept while mentoring solutions engineers globally and feeding market insight into the product roadmap.

RESTful APIs · SDKs

• Working From Home, UK
• Remote
• Senior
• Permanent

Lead full-scope red team engagements spanning cyber, physical, social engineering and process attack surfaces, emulating real-world adversaries. Build phishing infrastructure and payloads, operate C2 frameworks like Cobalt Strike, and develop custom tooling and EDR evasion tradecraft. Set methodology and mentor operators while working closely with defensive teams.

Cobalt Strike · Nighthawk

• Aylesbury
• Hybrid · 2 days in office
• £67,493 – £70,954 pa
• Lead

Defines and governs the organisation's testing strategy across a diverse portfolio of technology projects, system upgrades and service changes. Sets standards, frameworks, processes and tools, and provides training, coaching, oversight and quality assurance reporting rather than hands-on testing. Works in a hybrid pattern, in the office a couple of times a week.

• London
• Mid-level

Acts as primary technical responder for premium enterprise customers, autonomously investigating complex threat telemetry and handling live incident response for volumetric DDoS and application-layer attacks. Implements mitigation across OSI Layers 3, 4 and 7 using Cloudflare's security suite, performs packet and traffic flow analysis, and advises customers during active incidents. Requires 24x7 rotating shifts.

Cloudflare · Magic Transit · Magic Firewall +7