Cyber Security Jobs

• Sheffield
• On-site
• £40,000 pa
• Mid-level
• Permanent

Supports day-to-day IT security across a national care home provider, covering security monitoring, vulnerability management, endpoint and email security, and incident response. Coordinates audits, penetration testing and assurance activities against frameworks such as NCSC CAF, Cyber Essentials and NHS DSPT, and produces security metrics and awareness training.

Microsoft 365 · Intune · NCSC CAF +3

• Malmesbury
• On-site
• £130,000 – £140,000 pa
• Director · manages people

A senior leadership role reporting to the CFO, owning the strategic and operational direction of the IT function across a diverse private group. The remit spans technology strategy, AI and emerging tech adoption, data governance, cybersecurity, cloud, infrastructure and service delivery, plus budget, supplier and team leadership. It is distinct for its board-level influence and mandate to define a new technology roadmap rather than inherit one.

• Manchester
• Hybrid
• £60,000 – £70,000 pa
• Lead

Owns the Group's infrastructure estate across Microsoft 365, Azure, networks, security and end-user services, defining the technology roadmap and leading modernisation and transformation initiatives. Acts as primary technical owner of the MSP and key suppliers, driving resilience, identity and endpoint security, and multi-site networking. Hybrid role in Manchester within a growing property investment business.

Microsoft 365 · Azure · Entra ID +7

• United Kingdom
• Remote
• Senior

Owns the strategy, roadmap and execution for the Endpoint Windows Platform, translating OS and security requirements into product priorities. Partners closely with Engineering, Microsoft and cross-portfolio teams on agent architecture, performance and platform change management, and supports go-to-market enablement.

Microsoft · Windows · Sophos Endpoint +6

• Bradford
• On-site
• £50,000 – £60,000 pa
• Mid-level · manages people

Owns day-to-day IT and operational technology at a Bradford manufacturing site, keeping infrastructure, production systems and networks reliable and secure. Hands-on work spans Windows Server, VMware, Microsoft 365, Entra ID, Cisco and Aruba networking, plus ServiceNow incident management and OT support. Also supervises an associate administrator, delivers regional projects and deputises for the Regional IT Manager, with UK and Ireland travel.

VMware · Windows Server · Microsoft 365 +5

• Manchester
• Entry level
• Permanent

Monitors networks and systems for threats, triages security alerts and documents suspicious activity, working with partner teams on daily threat detection and incident response across AWS technologies at scale. Involves security automation, tracking detective controls like GuardDuty, CrowdStrike Falcon and Wiz Defend, and periodic on-call including weekends.

AWS · Amazon GuardDuty · CrowdStrike Falcon +1

• London
• Hybrid
• £70,000 – £75,000 pa
• Senior
• Permanent

This role involves leading information security governance, risk management, and compliance activities within a multinational organisation. The Information Security Manager will drive security risk assessments, audit programmes, and regulatory certification efforts including ISO 27001, PCI DSS, and NIS2. With a focus on cloud security governance, the role requires strong engagement with senior stakeholders and expertise in securing AWS and Azure environments.

• Bristol
• Hybrid · 2 days in office
• £80,000 pa
• Director

Lead the UK information security strategy for a large healthcare provider, owning IT risk, governance and compliance across the business. The role involves running risk registers, maintaining an ISO 27001-aligned ISMS, leading internal and external audits, overseeing supplier risk assessments and directing incident response, reporting to the UK CIO and working with the Group CISO.

ISO 27001 · NIST · Cyber Essentials +1

• Bristol
• Hybrid · 2 days in office
• £80,000 pa
• Director · manages people
• Permanent

Lead the UK information security strategy for a healthcare provider, owning governance, risk and compliance across systems and data. You'll develop the ISMS to ISO 27001, NIST, Cyber Essentials and GDPR standards, run internal and external audits, manage third-party supplier risk and lead incident response, reporting to the UK CIO and working with the Group CISO.

ISO 27001 · NIST · Cyber Essentials +1

• Aylesbury
• Hybrid · 2 days in office
• £67,493 – £70,954 pa
• Lead

Defines and governs the organisation's testing strategy across a diverse portfolio of technology projects, system upgrades and service changes. Sets standards, frameworks, processes and tools, and provides training, coaching, oversight and quality assurance reporting rather than hands-on testing. Works in a hybrid pattern, in the office a couple of times a week.

• Manchester
• Hybrid · 3 days in office
• Mid-level
• Permanent

Bridges compliance and hands-on technical security, managing ISO 27001 and Cyber Essentials Plus frameworks, running internal audits and third-party risk assessments. Also hardens AWS/Azure cloud environments, runs vulnerability scans and remediation, and supports incident response and identity/access management. Reports to the Head of Security in a Salford-based team.

AWS · Azure · GCP +4

• Manchester
• Hybrid
• £50,000 – £55,000 pa
• Senior

Hands-on infrastructure engineering role maintaining, securing and improving a UK and international company's IT estate, reporting to the Head of IT. Covers Windows Server, Active Directory, Hyper-V, Microsoft 365/Azure hybrid environments, networking, Sophos firewalls, cybersecurity and PowerShell automation, plus delivering server migrations and upgrades rather than service desk work.

Windows Server · Active Directory · Group Policy +11

• Swindon
• Hybrid · 3 days in office
• £100,000 – £110,000 pa
• Director · manages people

Owns the technology roadmap for a global multi-site business, translating senior stakeholder priorities into a practical improvement programme. Focus on ERP and wider business systems, data integration, and applying AI and automation to commercial and customer-facing challenges, while leading the technology team, external partners, governance and investment. Three days per week on site.

• London
• Mid-level

Acts as primary technical responder for premium enterprise customers, autonomously investigating complex threat telemetry and handling live incident response for volumetric DDoS and application-layer attacks. Implements mitigation across OSI Layers 3, 4 and 7 using Cloudflare's security suite, performs packet and traffic flow analysis, and advises customers during active incidents. Requires 24x7 rotating shifts.

Cloudflare · Magic Transit · Magic Firewall +7

• London
• Hybrid · 2 days in office
• Senior

Design, build and operate distributed systems behind Cloudflare's Application Security products (WAF, Page Shield, API Shield) at internet scale, using Go or Rust and devops tooling like Kubernetes and Kafka. The role includes reviewing RFCs and code, on-call shifts, and mentoring other engineers.

Kubernetes · Salt · Kafka +7