Cyber Security Jobs

ITOL Recruit · London · £28,000 – £40,000 pa

A self-funded training programme leading to a SOC analyst role, combining online CompTIA A+, Network+ and Security+ certification study with live labs and hands-on cyber security scenarios. Candidates learn at their own pace with 1-1 tutor support, then receive CV, interview and dedicated recruitment help until placed in a UK cyber security position.

ITOL Recruit · Newport · £28,000 – £40,000 pa

A self-funded training programme leading to a SOC analyst role, combining online CompTIA A+, Network+ and Security+ certification study with live labs, hands-on cyber security scenarios and 1-1 tutor support. It includes CV, LinkedIn and interview preparation plus recruitment support until placement, with no prior experience required.

Darktrace · London

Customer-facing role combining technical depth and commercial awareness to drive adoption of AI cybersecurity products across DACH enterprise accounts. Partners with security and IT stakeholders on technical success plans, use-case activation, health monitoring and renewal readiness, working alongside Account Executives, Solutions Engineering and Renewals. Requires fluency in German and English.

Experis · London · £500 pd

Lead end-to-end management of cyber security incidents and major security events within a secure government programme, coordinating technical response teams through containment, eradication and recovery. Act as primary point of contact for incident communications, run response bridges and war-rooms, and produce post-incident reports and root cause analysis. Works alongside SOC, analysts, infrastructure teams and third-party suppliers to improve cyber resilience.

Palo Alto Networks · United Kingdom

Deliver white-glove onboarding and ongoing technical guidance for Managed XSIAM customers, analysing security data to improve detection coverage, alert quality and tenant hygiene. Lead customer touchpoints and security reviews while partnering with Unit 42 SOC engineering, Product and MDR teams to build automation workflows and scalable service frameworks.

Entrust · United States - Field

Defines and governs a four-plane reference architecture (Identity, Authority, Execution, Assurance) for an agentic trust layer, owning specs like the Agent Passport, Permission Slip framework, Evidence Ledger and Policy Engine. Chairs architecture and boundary review boards, sets dependency contracts across product lines, and represents the company in standards bodies such as FIDO, OpenID and IETF.

Entrust · United Kingdom - Field

Defines and governs a four-plane reference architecture (Identity, Authority, Execution, Assurance) for an agentic trust layer, owning specs like the Agent Passport, Permission Slip framework, Evidence Ledger and Policy Engine. Chairs architecture and boundary review boards, sets dependency contracts across product lines, and represents the company in standards bodies such as FIDO, OpenID and IETF.

CrowdStrike · United Kingdom

As an Associate Consultant on the Platform Professional Services team, you'll act as a trusted advisor helping customers operationalise Falcon Next-Gen SIEM, answering technical questions, demonstrating capabilities and shaping a roadmap. You'll work with log management, XDR and SOAR features, transfer knowledge of Falcon LogScale NGSIEM, and feed customer insights back to product teams.

DCV Technologies · Royal Leamington Spa · £550 – £650 pd

Hands-on contract role owning the end-to-end detection engineering lifecycle, translating threat intelligence, hunting findings and adversary techniques into effective detection rules. Builds behavioural analytics and detection content across endpoint, identity, cloud, network and email telemetry using KQL, SPL, Sigma, Python and PowerShell, with tuning, purple teaming and Detection-as-Code work alongside SOC, IR and Red Team specialists.

Sopra Steria · Farnborough · £70,000 – £80,000 pa

Hands-on detection engineering role designing, testing and deploying detection content across Microsoft Sentinel and Splunk, writing KQL and SPL logic, tuning alerts to cut false positives and onboarding log sources from cloud, identity and network telemetry. Works closely with SOC, Threat Intelligence and Security Architecture teams in a live SOC environment.

Experis · London · £450 – £455 pd

Hands-on SOC and incident response role monitoring, triaging and investigating cyber security threats across macOS endpoints, Linux cloud workloads, microservices and containerised platforms. You will contain and remediate incidents, document findings and evidence, and contribute to detection rules and response playbooks while working closely with security and engineering teams.

Michael Page · Liverpool · £60,000 – £65,000 pa

Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.

CBSbutler Holdings Limited trading as CBSbutler · London · £475 – £525 pd

Hands-on SOC and incident response role investigating cyber security threats across macOS endpoints, Linux cloud workloads, microservices and containerised environments. Responsibilities include alert triage, severity assessment, containment and remediation, telemetry correlation, evidence documentation and improving detection playbooks. On-site shift work covering 10-hour shifts between 06:00 and 16:00.

CPS Group · Cardiff · £40,000 – £45,000 pa

Client-facing technical role in a Microsoft-focused security partner's Cyber Security Delivery Team, acting as a trusted point of contact for customers. Day to day involves tuning Defender and Entra controls, building KQL detections in Microsoft Sentinel, running phishing simulations and vulnerability scans, and supporting incident response and reporting.

Radius Consultancy · London · £80,000 – £90,000 pa

Strengthen and maintain cyber security posture through assurance, incident response coordination, vulnerability management and governance. Work with frameworks including ISO 27001, SOC2, NIST and GDPR, overseeing MSSP and SOC activities, with technical involvement in investigations, threat analysis and major incidents.