Cyber Security Jobs

• Sheffield
• £40,704 – £45,641 pa
• Mid-level
• Contract

Deliver and develop undergraduate and postgraduate Cyber Security and Computer Networks teaching, with a focus on technical areas, within an applied, project-based learning environment. Engage in industry consultancy and knowledge exchange, helping regional businesses achieve certifications such as Cyber Essentials. The role sits in an NCSC-certified department where staff and students collaborate closely.

NCSC

• London
• Remote
• £70,000 – £100,000 pa

Assess OT systems and networks through site surveys, risk assessments, audits and gap analyses, then recommend control improvements to reduce cyber risk. You'll develop security policies and roadmaps and advise technical and business stakeholders across defence, manufacturing, energy, utilities and transport. The role is mostly remote with expensed UK client travel and requires active SC clearance.

SCADA · PLC · RTU +1

• Warwick
• Hybrid
• £65,000 – £75,000 pa
• Mid-level

Hands-on role securing enterprise cloud environments across Azure and GCP, covering vulnerability remediation, cloud security tooling, Microsoft Defender, Conditional Access and identity controls. Works with infrastructure and engineering teams to embed best practice, support governance and compliance, and contribute to incident response, with remote on-call expected within six months.

Microsoft Azure · Google Cloud Platform · Microsoft Defender

• Cheltenham
• Hybrid
• Mid-level
• Permanent

Research new and innovative solutions to challenging client problems and assess existing client solutions to prove or disprove their security fundamentals. Contribute to team growth through knowledge sharing and mentoring, within a newly formed National Security Business Unit working on varied client projects.

• Warwick
• Remote
• £70,000 – £85,000 pa
• Senior

Hands-on role securing Azure, identity, endpoint and network environments in a complex enterprise estate. You will design and maintain security controls, manage cloud security posture, strengthen identity with Conditional Access and PAM, administer Defender and Palo Alto tooling, and automate workflows via scripting and APIs. The position is senior and autonomous, mentoring juniors and working with architecture, infrastructure, GRC and suppliers.

Microsoft Azure · Microsoft Defender · Defender for Cloud +7

• Manchester
• Hybrid · 3 days in office
• £54,000 – £55,000 pa
• Senior

Day-to-day operation of a SIEM platform, including monitoring, administration and optimisation, plus developing detection rules and investigating alerts through to resolution. Works with Infrastructure, Networking, DevOps and external partners on incident response, EDR management and control testing, with Google SecOps (Chronicle) experience advantageous.

Google SecOps · Chronicle · SIEM +4

• Sunderland
• £26,100 pa
• Junior

Support a manufacturing organisation's security team by monitoring SIEM alerts, investigating potential threats and assisting with vulnerability management across business and production systems. The role also covers access reviews, compliance with information security standards, awareness activities and risk assessments, working closely with IT, engineering and production colleagues.

SIEM

• Ashington
• £26,100 pa
• Junior

Support a manufacturing organisation's security operations by monitoring SIEM alerts, investigating potential threats and assisting with vulnerability management across business and production systems. The role involves access reviews, compliance support, awareness activities and risk assessments, working with IT, engineering and external providers to keep production disruption to a minimum.

SIEM

• Liverpool
• Hybrid
• £60,000 – £65,000 pa
• Senior
• Contract

Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.

SIEM · IAM · DLP +1

• London
• £50,000 – £55,000 pa
• Mid-level

Owns information security policies, risk management, data protection and business continuity within a global Group IT function, working alongside senior security managers. Hands-on role embedding security into business processes, maintaining ISO 27001 documentation, running audits and DPIAs, and supporting incident response and awareness training.

Microsoft Purview · Entra ID · Microsoft Defender +5

• Farnborough
• Mid-level

Monitors and investigates security alerts across a 24x7 multi-customer CSOC, analysing telemetry from SIEM, EDR and XDR platforms to determine scope, severity and business impact. Correlates logs, maps adversary behaviour to MITRE ATT&CK, runs threat hunts and tunes detections, while maintaining incident records and coordinating containment and recovery actions.

Microsoft Sentinel · Microsoft Defender XDR · Microsoft Defender Vulnerability Management +2

• Corsham
• Hybrid
• £56 – £600 pd
• Mid-level
• Contract

Coordinate security governance, risk management and compliance across MOD OpNET environments, ensuring systems meet Secure by Design and JSP 440/604 requirements. Conduct NIST-based risk assessments, produce assurance evidence and SyOPs, and coordinate CHECK penetration testing and remediation. Chair Security Working Groups and support security architects and engineers on a critical Defence programme.

NIST 800 · JSP 440 · JSP 604 +4

• Aberdeen
• Hybrid
• £38,000 – £40,000 pa
• Mid-level

Hands-on security role strengthening an Aberdeen organisation's posture across infrastructure and operations. You will maintain policies, run vulnerability management, monitoring and incident response, oversee enterprise backups, and support audits and awareness training alongside IT and MSSP partners.

CISSP · CCSP · ISSAP

• Preston
• On-site
• £450 – £500 pd
• Mid-level
• Contract

Governance and coordination role tracking security incidents across a complex multi-supplier SIAM environment, from identification through to closure. You coordinate updates between suppliers and security stakeholders, monitor SLAs and escalation trends, and produce incident reports, dashboards and audit-ready records. Distinct from a hands-on SOC position, with no threat hunting or technical remediation involved.

• Warwick
• Remote
• £70,000 – £85,000 pa
• Senior

Drive secure-by-design and DevSecOps practices across the SDLC, integrating security controls into CI/CD pipelines and managing SAST, DAST, SCA and IAST tooling including Checkmarx. Act as a subject matter expert advising Development, DevOps and Platform Engineering teams in a complex enterprise environment, with a remote-first pattern and occasional Midlands office visits.

Checkmarx · Prisma Cloud · Cortex +3