Cyber Security Jobs

• London
• Mid-level

Customer-facing role combining technical depth and commercial awareness to drive adoption of AI cybersecurity products across DACH enterprise accounts. Partners with security and IT stakeholders on technical success plans, use-case activation, health monitoring and renewal readiness, working alongside Account Executives, Solutions Engineering and Renewals. Requires fluency in German and English.

• Manchester
• Hybrid
• Permanent

Proactively hunts advanced threats across customer environments using a proprietary hunting framework, conducting intelligence-led, hypothesis-driven analysis of TTPs and behaviours. Works cross-functionally with SOC Analysts, Global Detection Engineers, Privacy and Engineering teams to align threat models and mitigate risks.

• Cambridge

Join a global team developing and improving threat detection capabilities across key product areas. You'll respond to customer incidents, analyse cyber threat intelligence, and build detection schemes aligned to adversary techniques, collaborating with Development, Security Research and SOC teams.

Darktrace · GitLab

• Cambridge
• Hybrid · 2 days in office
• Senior

Conducts independent and collaborative research into large language models, statistical methods and classical machine learning, prototyping ideas and implementing models into the wider software stack. Produces latency- and memory-optimised solutions for deployment on edge devices, working closely with software engineers and security analysts.

PyTorch · TensorFlow · scikit-learn +7

• Staffordshire
• Hybrid · 2 days in office
• £50,000 – £55,000 pa
• Senior
• Permanent

Hands-on role taking technical ownership of Microsoft cloud environments, initially strengthening internal systems before moving into customer consultancy, solution design and pre-sales. Day to day covers Microsoft 365, Azure, Entra ID, Intune and SharePoint, plus security and governance work such as vulnerability scanning, remediation and Cyber Essentials compliance. Automation via Power Automate and acting as escalation point for complex cloud issues are also central.

Microsoft 365 · Azure · Entra ID +6

• Cambridge
• Hybrid · 2 days in office

Explore and prototype machine learning solutions across domains, using language models, neural networks, statistical methods and classical ML, then implement models into the wider software stack. Work independently and with software engineers and security analysts, optimising models for latency and memory on edge devices. Hybrid role with two compulsory days a week in the Cambridge office.

PyTorch · TensorFlow · scikit-learn +2

• Cambridge
• Hybrid · 2 days in office
• Mid-level

Partners with developers and product teams to embed quality from the start, designing and maintaining automated test frameworks across API, UI, integration and regression layers. Builds scalable suites into CI/CD pipelines, drives shift-left testing, and contributes to test strategy, code reviews and architecture discussions.

Cypress · Playwright · pytest +7

• United Kingdom
• Remote
• Mid-level

Performs advanced investigative, forensic and containment work during active cyber incidents for Managed Detection and Response customers, correlating alerts and telemetry to establish scope and root cause. Mentors junior IR and SOC analysts, maintains engagement documentation and playbooks, and supports Incident Advisors with validated technical findings. Includes weekend and holiday rotation cover.

OSQuery · SQL · KQL +2

• United Kingdom
• Remote
• Director · manages people

Defines and scales a global partner enablement strategy across VARs, MSPs, MSSPs and distributors, covering role-based learning journeys, certifications and content lifecycle governance. Leads a matrixed global team, using generative AI and prompt-driven workflows to scale curriculum and technical content, with accountability for AI-related OKRs and enablement metrics such as partner ramp time and pipeline contribution.

Salesforce · LMS · LXP +1

• United Kingdom
• Remote
• Senior

Hands-on engineering role managing a modern identity stack across the full lifecycle, from passwordless authentication and adaptive access controls to identity governance and non-human identities. You will configure and operate Microsoft Entra ID, Saviynt and Active Directory directly, integrate applications via SAML, OIDC, OAuth and SCIM, and join an out-of-hours support rota.

Microsoft Entra ID · Active Directory · Saviynt +4

• United Kingdom
• Remote
• Senior

Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.

SIEM · SOAR · LLMs +1

• United Kingdom
• Remote
• Senior · manages people

Leads incident response engagements for customers hit by cyberattacks, directing a team of consultants, running kick-off and daily update calls, and delegating forensic tasks. Handles multiple ransomware and BEC investigations concurrently, performing root cause analysis and producing executive-summary reports mapped to MITRE ATT&CK.

Splunk · ELK · Sophos

• London
• Hybrid
• Senior

Designs, implements and operates a global multi-vendor, multi-cloud and hybrid data center network, covering subnetting, VPC peering, direct connects and hub-spoke topologies. Builds IaC and automation tooling (Ansible, Terraform, Python, Go) in CI/CD pipelines and handles complex production troubleshooting plus on-call rotations.

Ansible · Terraform · Python +7

• London
• On-site
• Lead · manages people
• Permanent

Lead product cybersecurity assurance across the HMND 01 humanoid robot platforms, defining security requirements, threat modelling and risk artefacts for safety-critical electromechanical systems. Own TARA, security management plans and remediation actions, drive compliance with IEC 62443, the EU Machinery Regulation and the Cyber Resilience Act, and build a PSIRT process while guiding a cross-functional security team.

CAN bus · Ethernet · KinetIQ +4

• London
• Hybrid · 2–3 days in office
• £55,000 – £65,000 pa
• Senior

Owns the entire IT estate for a cybersecurity SaaS company, covering identity and access management, macOS device management, SaaS administration and end-to-end joiners, movers and leavers. An engineering-led role focused on automation, AI enablement and security controls that support SOC 2, ISO 27001 and Cyber Essentials Plus audits, working alongside the Director of Information Security and a Senior SecOps Engineer.

macOS · MDM · SSO +6