Cyber Security Jobs

CrowdStrike · Reading

Six-month graduate internship in the Falcon Complete team, working from the Reading office on security alert triage, incident investigation and response, and basic malware analysis. Interns learn the Falcon platform and internal tooling, handle customer inquiries, and deliver a project to improve security controls.

CrowdStrike · United Kingdom

Monitor and analyse security alerts on the CrowdStrike platform, handling incidents across Windows, Mac and Linux, performing malware analysis and remote remediation. The role sits in a virtual security operations centre, producing written findings for customer management and improving detection and triage processes.

Sophos · United Kingdom

Hands-on engineering role managing a modern identity stack across the full lifecycle, from passwordless authentication and adaptive access controls to identity governance and non-human identities. You will configure and operate Microsoft Entra ID, Saviynt and Active Directory directly, integrate applications via SAML, OIDC, OAuth and SCIM, and join an out-of-hours support rota.

Cloudflare · London

Lead the Threat Application Services team within Cloudforce One, owning the Threat Events platform, external Threat Intel APIs, and backend systems that feed IOCs into WAF and Gateway for automated mitigation. Set architectural direction and operational excellence for distributed, high-latency-sensitive services, while hiring and mentoring engineers building agentic threat intelligence tools.

Cloudflare · London

Acts as primary technical responder for premium enterprise customers, autonomously investigating complex threat telemetry and handling live incident response for volumetric DDoS and application-layer attacks. Implements mitigation across OSI Layers 3, 4 and 7 using Cloudflare's security suite, performs packet and traffic flow analysis, and advises customers during active incidents. Requires 24x7 rotating shifts.

eFinancialCareers · Belfast

Operational role running penetration tests, vulnerability assessments and Red Team adversarial evaluations across a global bank's application portfolio. The work is twofold: testing GenAI, agentic and LLM-backed systems for prompt injection, retrieval poisoning and tool misuse, and using AI tooling to speed up security testing. Involves building triage pipelines and containment architectures for AI agents at enterprise scale.

airbus · Stevenage

Maintains and manages security products including EDR, multi-antivirus and email sandboxing, while supporting SecDevOps and secure development automation. Defines and implements a company-wide threat modeling framework and leads the end-to-end vulnerability management lifecycle, including risk prioritisation, remediation tracking and scan policy optimisation using Tenable. Also supports security incident and request management, authorising policies, firewall rules and access controls within an international defence environment.

TXP · United Kingdom · £440 – £490 pd

Monitor, investigate and respond to cyber security incidents within a Microsoft security environment, using Microsoft Sentinel and the Defender suite. The role covers alert triage, threat hunting, log and telemetry analysis, and creating and tuning Sentinel analytics rules, workbooks and detection use cases. You will also support incident response containment and recovery, produce reports, and work with infrastructure, cloud and application teams to improve SOC processes and detection engineering.

Amazon · London

Builds AI/ML-driven security automation systems that detect, analyse and respond to threats at Amazon scale, integrating automated detection into the company's security infrastructure. Works alongside security engineers and scientists on proactive, offensive and defensive tooling, researching and prototyping new approaches. Distinct for its focus on autonomous security across one of the world's largest tech ecosystems.

Darktrace · London

Take technical ownership of a portfolio of SaaS platforms supporting the global revenue organisation, starting with Gong and expanding over time. Combine platform administration, product ownership and stakeholder management, maintaining a technical backlog covering health, configuration, integrations, security and compliance while coordinating releases with Architecture, Data and Security teams.

Immersive · United Kingdom

Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.

Red Sift · London

Lead and work hands-on with a small team to identify, design and deliver business automation that replaces manual processes across Sales, Finance, Marketing, Customer Success and HR. Build automations using AI, workflow platforms (Zapier, Make, n8n, Workato), APIs and data integration, balancing rapid prototyping with robust, maintainable solutions while mentoring the team.

Kingdom People · Birmingham

Security Architect role focused on embedding secure-by-design, Zero Trust and IAM across complex, high-assurance systems spanning cloud, networks, applications and data platforms. Involves technical assurance, cryptography, monitoring and pre-sales support, working with solution architects, engineers and customer security stakeholders. Requires current or recently lapsed SC clearance.

Amazon · Virtual Location - Uk

Adversarial security testing role on AWS's Continuous Security Testing team, turning threat intelligence and scanner signals into testable hypotheses against live production services. Combines hands-on penetration testing with AI-augmented source code review, tracing chained attack paths and building lasting detections, canaries and fuzzers. Also involves testing agentic AI systems and mentoring engineers.

Kingdom People · Birmingham

Security Architect role focused on embedding secure-by-design, Zero Trust and IAM across complex, high-assurance systems spanning cloud, networks, applications and data platforms. Involves technical assurance, cryptography, monitoring and pre-sales support, working with solution architects, engineers and customer security stakeholders. Requires current or recently lapsed SC clearance.