Cyber Security Jobs

Exceed Cyber limited · London · £800 – £900 pd

Translate high-level SecOps transition strategies into detailed, low-level implementation plans across security engineering, threat and vulnerability management and security testing. Define operational readiness criteria, phase-gate checklists and multi-year delivery roadmaps, coordinating dependencies with architecture, GRC and technical SMEs. Requires active SC clearance and UK Government or regulated-environment experience.

Spectrum IT Recruitment · Basingstoke · £55,000 pa

Deliver and support Cyber Essentials and Cyber Essentials Plus assessments, working directly with clients to review evidence, discuss security controls and explain findings. Assess technical controls across networks, endpoints and cloud environments, then produce clear audit reports and practical recommendations, with scope to grow into wider ISO 27001 and IASME assurance work.

VIQU IT · Belfast · £80,000 – £100,000 pa

Independent assurance voice across a sovereign AI platform's cloud estate, corporate environment and AI capability. Sets security baselines for DevOps, IT and Product Security Engineering, then verifies them through continuous monitoring and independent testing, including AI controls such as prompt injection defences and agent permissions. One of the founding roles in a scaling assurance function, working with defence and government customers.

NCC Group · Remote

Hands-on security engineering role focused on protecting both Operational Technology (OT) and Information Technology (IT) environments against cyber threats. The position involves identifying risks and vulnerabilities specific to these environments and developing mitigation strategies, with a Tanium and Sentinel tooling focus. Remote-based with occasional travel to the West Midlands.

Randstad Technologies Recruitment · London · £400 – £450 pd

Acts as the primary liaison between global cybersecurity functions and regional business lines, embedding security controls into initiatives from concept to launch. Provides end-to-end security consultancy, oversees cyber risk profiles and governance forums, and leads the regional rollout of global transformation and remediation programmes, including M&A support.

CBSbutler Holdings Limited trading as CBSbutler · Aberdeen · £650 – £720 pd

Lead and coordinate cybersecurity assessments, risk remediation and control improvements across Operational Technology environments, translating security gaps into practical remediation plans. Work with OT/ICS engineers, IT, technical authorities and third-party suppliers to strengthen critical operational systems, covering asset inventories, privileged access, network segmentation, monitoring and incident response.

Gleeson Recruitment Group · West Midlands (Region)

Lead the development and delivery of an organisation's information security strategy, governance, risk and compliance programme, including ISO 27001 and Cyber Essentials. Provide technical oversight across infrastructure, cloud, networking and security platforms, manage incident response and third-party security providers, and influence senior stakeholders while shaping the future security function and team structure.

Thomas Search · Tidworth

Lead organisation-wide IT security for a large PFI support services contract, owning the security strategy, roadmap and compliance activities. Manage incidents, breaches, disaster recovery and business continuity, and extend controls across the supply chain. The role sits in the central business services function, working with cyber and quality teams on audit readiness and business change.

Hays Technology · Birmingham · £80,000 – £87,000 pa

Acts as the University's authority for security architecture and protective controls, running a continuous control validation programme using breach and attack simulation, purple teaming and posture monitoring. Owns control standards and baselines, governs exceptions and drives remediation, and acts as design authority embedding secure-by-design and threat modelling into major technology change across cloud, identity and AI.

Infosec · London · £65,000 – £75,000 pa

Delivers cyber risk, technology risk and operational resilience engagements for a consulting firm's Digital Risk & Cyber practice, serving Financial Services, Energy, CNI and Government clients. The role involves maturity assessments, risk reviews, governance and control frameworks, and advising CISOs and executive stakeholders on regulatory compliance including CAF, DORA and NIST CSF.

Hays Technology · Birmingham · £80,000 – £87,000 pa

Acts as the University's authority for security architecture and protective controls, running a continuous control validation programme using breach and attack simulation, purple teaming and posture monitoring. Owns control standards and baselines, governs exceptions and drives remediation, and serves as design authority embedding secure-by-design and threat modelling into major technology change across zero trust, multi-cloud and AI.

Opus Recruitment Solutions · London · £600 – £800 pd

Lead and strengthen a modern information security function, working hands-on with the CTO and engineering teams to embed security across the product lifecycle. Own the security strategy and drive ISO 27001, SOC 2, NIST, GDPR and PCI DSS compliance, while improving detection and response through AI, automation and technical controls.

SoCode · Cambridge · £80,000 – £100,000 pa

Owns software security strategy, architecture and standards across a diverse product portfolio, embedding threat modelling and secure-by-design into the full lifecycle. Works with engineering and product teams on architecture reviews, vulnerability management, CI/CD security and release criteria, plus EU Cyber Resilience Act compliance. Desirable background includes embedded systems, IoT, Android and embedded Linux.

Amazon · Manchester

Monitors networks and systems for threats, triages security alerts and documents suspicious activity, working with partner teams on daily threat detection and incident response across AWS technologies at scale. Involves security automation, tracking detective controls like GuardDuty, CrowdStrike Falcon and Wiz Defend, and periodic on-call including weekends.

QinetiQ · Manchester

Bridges compliance and hands-on technical security, managing ISO 27001 and Cyber Essentials Plus frameworks, running internal audits and third-party risk assessments. Also hardens AWS/Azure cloud environments, runs vulnerability scans and remediation, and supports incident response and identity/access management. Reports to the Head of Security in a Salford-based team.