Cyber Security Jobs

• Preston
• On-site
• £450 – £500 pd
• Mid-level
• Contract

Governance and coordination role tracking security incidents across a complex multi-supplier SIAM environment, from identification through to closure. You coordinate updates between suppliers and security stakeholders, monitor SLAs and escalation trends, and produce incident reports, dashboards and audit-ready records. Distinct from a hands-on SOC position, with no threat hunting or technical remediation involved.

• Sheffield
• Hybrid · 2–3 days in office
• £500 – £600 pd
• Senior
• Contract

Lead the response to high-severity IT incidents across network, infrastructure, cloud and security environments, coordinating technical teams, suppliers and stakeholders to restore services within agreed targets. The role involves chairing incident and crisis calls, post-incident reviews, root cause analysis, ITIL processes, disaster recovery and business continuity planning, plus executive reporting and on-call duties.

Cisco · VMware · ServiceNow +3

• Aberdeen
• Hybrid
• £650 – £720 pd
• Senior
• Contract

Lead and coordinate cybersecurity assessments, risk remediation and control improvements across Operational Technology environments, translating security gaps into practical remediation plans. Work with OT/ICS engineers, IT, technical authorities and third-party suppliers to strengthen critical operational systems, covering asset inventories, privileged access, network segmentation, monitoring and incident response.

SIEM · NIST Cybersecurity Framework · ISO 27001

• Reading
• Hybrid · 2 days in office
• £500 – £600 pd
• Contract

Owns the end-to-end major incident lifecycle in a complex, multi-supplier enterprise IT environment, coordinating technical teams, suppliers and business stakeholders to restore services quickly. Drives root-cause investigations, post-incident reviews and continual service improvement, using ITIL 4 and ServiceNow. Requires active SC clearance and sole British, Italian or Japanese citizenship.

ServiceNow

• Lincoln
• Hybrid
• £55,000 pa
• Senior

Lead the design, implementation and governance of OT network and security across multiple manufacturing sites, working alongside the Global Head of IT Operations. Act as subject matter expert for SCADA, PLCs, ICS networks and industrial protocols, securing and modernising environments while ensuring availability and resilience of business systems.

SCADA · PLC · ICS Networks +4

• London
• Remote

Owns the end-to-end migration and security operations transformation for enterprise customers moving from legacy platforms to Cortex XDR/XSIAM, Prisma Cloud or Strata. Runs data cutovers, policy mapping, API and log ingestion work, plus Day-in-the-Life workshops and executive value realization sessions. Combines hands-on Python, CLI and REST API automation with customer-facing delivery in a global, remote-first team.

Cortex XDR · Cortex XSIAM · Prisma Cloud +2

• Ipswich
• £50,000 – £55,000 pa
• Mid-level

Hands-on infrastructure role covering Microsoft Azure, cloud infrastructure, cyber security and internal IT systems, working alongside another Infrastructure Engineer. Day to day involves managing and supporting Azure, maintaining reliability, performance and security, handling endpoint protection, MFA, access management and email security, troubleshooting complex incidents, patching, disaster recovery and Azure cost optimisation, plus infrastructure projects and documentation.

Microsoft Azure · Windows Server · Microsoft 365

• Virtual Location - Uk
• Permanent

Adversarial security testing role on AWS's Continuous Security Testing team, turning threat intelligence and scanner signals into testable hypotheses against live production services. Combines hands-on penetration testing with AI-augmented source code review, tracing chained attack paths and building lasting detections, canaries and fuzzers. Also involves testing agentic AI systems and mentoring engineers.

AWS

• London
• Director · manages people

Lead and develop the organisation's cyber security strategy, owning the information security framework including ISO 27001 and Cyber Essentials Plus. Reporting to the CIO, you will run security operations, manage an outsourced SOC, oversee incident response and vulnerability management, and mentor the security team. Legal-sector experience is mandatory, and the role spans Microsoft/Azure cloud security and SaaS assurance.

Microsoft Azure · SOC

• London
• Remote
• Lead

Lead and deliver reactive incident response engagements for clients, managing scoping, forensic investigations and containment of security incidents. Perform host-based analysis across Windows, Linux and macOS, examine firewall, web and database logs, and use tools such as EnCase, FTK, X-Ways, SIFT and Splunk to determine breach scope. Also mentors junior team members and provides remediation guidance to customers.

EnCase · FTK · X-Ways +5

• London
• Remote
• Lead · manages people

Lead strategic advisor for enterprise customers modernising their Security Operations Centres through XSIAM deployment, covering log ingestion, detection engineering and automation. The role combines executive-level consulting with hands-on SIEM/SOAR/EDR technical work, mentoring professional services teams and feeding field insights back to Product and R&D. Requires security clearance eligibility and up to 30% travel.

XSIAM · Splunk · IBM QRadar

• London
• £124,000 – £186,000 pa
• Senior

Owns architectural direction for Mimecast's Email & Collaboration Security product line, spanning email threat detection, DMARC, data platforms and response capabilities. Works across product, engineering and the Architecture Leadership Team to define integration contracts, ADRs and NFR targets, with cost-per-outcome reasoning and daily AI tooling use.

AWS · Kafka · MCP +4

• London
• On-site
• £115,000 – £135,000 pa
• Lead

Owns security end to end for a confidential investment-data platform and its AI agents, split roughly 60% hands-on product and cloud security and 40% assurance and client-facing work. Sets AWS IAM, encryption and detection patterns, defines agent authorisation and prompt-injection defences, and drives SOC 2, ISO 27001 and AI Act readiness with penetration testing and client due diligence.

AWS · ISO 27001 · SOC 2 +2

• Virtual Location - Uk
• Senior
• Permanent

Leads complex security testing engagements end-to-end across interconnected AWS microservice architectures, performing penetration testing and AI-augmented source code review. Investigates high-consequence risk hypotheses to documented conclusions, builds reusable mechanisms like fuzzers and detection rules, and mentors engineers while setting the team's peer-review bar.

AWS · Agentic AI

• Lincolnshire
• Hybrid
• £55,000 pa
• Senior

Lead the design, implementation and governance of OT network and security across multiple manufacturing sites, working alongside the Global Head of IT Operations. Act as subject matter expert for industrial networks, SCADA, PLCs, ICS and network risk assessment, securing and modernising environments while ensuring availability and resilience of business systems.

SCADA · PLC · VPN +3