Cyber Security Jobs

• United Kingdom
• Remote
• Senior · manages people

Leads incident response engagements for customers hit by cyberattacks, directing a team of consultants, running kick-off and daily update calls, and delegating forensic tasks. Handles multiple ransomware and BEC investigations concurrently, performing root cause analysis and producing executive-summary reports mapped to MITRE ATT&CK.

Splunk · ELK · Sophos

• Milton Keynes
• Senior

Lead second-line risk oversight across technology, change and operational resilience, providing independent assurance on IT risk, transformation programmes and important business services. Act as a trusted adviser to senior technology and change leaders, working with the parent building society on risk appetite and Group standards. Involves control reviews, scenario testing, RCSA and reporting to Risk Committee, ExCo and Board audiences.

Cloud

• Reading
• On-site
• Entry level
• Internship

Six-month graduate program within the Falcon Complete team, triaging and analysing security alerts, investigating customer inquiries, performing basic malware analysis and managing the Falcon platform through configuration and tuning. Graduates work from the Reading office in a structured, collaborative environment and present a project to improve security controls.

CrowdStrike Falcon

• Reading
• On-site
• Entry level
• Internship

Six-month graduate internship in the Falcon Complete team, working from the Reading office on security alert triage, incident investigation and response, and basic malware analysis. Interns learn the Falcon platform and internal tooling, handle customer inquiries, and deliver a project to improve security controls.

CrowdStrike Falcon

• London
• Senior · manages people

Lead the Threat Application Services team within Cloudforce One, owning the Threat Events platform, external Threat Intel APIs, and backend systems that feed IOCs into WAF and Gateway for automated mitigation. Set architectural direction and operational excellence for distributed, high-latency-sensitive services, while hiring and mentoring engineers building agentic threat intelligence tools.

Cloudflare Workers · SQLite · D1 +4

• London
• Hybrid · 2–3 days in office
• £55,000 – £65,000 pa
• Senior

Owns the entire IT estate for a cybersecurity SaaS company, covering identity and access management, macOS device management, SaaS administration and end-to-end joiners, movers and leavers. An engineering-led role focused on automation, AI enablement and security controls that support SOC 2, ISO 27001 and Cyber Essentials Plus audits, working alongside the Director of Information Security and a Senior SecOps Engineer.

macOS · MDM · SSO +6

• Huntingdon
• Mid-level

Second-line engineer providing advanced troubleshooting, fault rectification and problem management across highly utilised, multi-security-level IT systems. Duties include server and VM maintenance, WSUS/SCCM patching, documentation, change requests and infrastructure project work, liaising with customers to meet SLA and KPI targets.

WSUS · SCCM · SD+ +1