Cyber Security Jobs

eFinancialCareers · London

Engineer, operate and optimise Microsoft Sentinel across one or more Log Analytics workspaces, owning platform health, ingestion pipelines, normalisation and enrichment. Build and maintain log onboarding from cloud, on-prem, SaaS and security tools, and integrate the SIEM with EDR, SOAR, threat intel and ITSM platforms. Also supports M&A onboarding of acquired environments into the enterprise SIEM.

Darktrace · London

Investigates emerging cyber threats, performing in-depth malware analysis and reverse engineering while hunting for new attack trends and adversary TTPs. Produces threat intelligence reports, blogs and conference presentations, and develops data-driven methodologies and detections using Python, PowerShell or C/C++. Works hybrid, at least two days a week in the Cambridge or London office, alongside security researchers, analysts and product teams.

Darktrace · Cambridge

Investigates emerging cyber threats, performing in-depth malware analysis and reverse engineering of adversary tactics, techniques and procedures. Builds data-driven threat hunting methodologies, produces intelligence reports and detections, and presents findings at conferences. Works hybrid with security researchers, analysts and product teams, at least two days a week in Cambridge or London.

Hays Technology · Sheffield · £450 – £500 pd

Owns end-to-end solution design across cybersecurity initiatives, producing architecture documents, high-level designs, patterns, decision records and risk assessments. Provides technical leadership and presents designs to Design Authorities and senior stakeholders, with deep IAM and HashiCorp Vault expertise. Requires three days per week onsite in Sheffield.

Netcraft · London

Join the Novel Classification team to build and operate machine learning systems that detect phishing sites and online scams at scale. You'll train, evaluate and serve classifiers on GPU-backed Kubernetes, run live experiments on precision and recall, and deploy LLM inference and computer vision models into production.

Planet Recruitment · Manchester · £40,000 – £50,000 pa

Hands-on role delivering a Cyber Security Roadmap and hardening a Microsoft-centric technology estate. Day to day involves configuring and maintaining Defender, Intune, Entra ID and Microsoft 365 security and compliance tooling, plus vulnerability management, alert triage and incident remediation. Works with the Cyber Security Operations Manager, Group Head of Cyber, IT teams and external partners, and supports Cyber Essentials and CIS Controls accreditation.

Harnham - Data and Analytics Recruitment · Newcastle upon Tyne · £73,000 – £84,000 pa

Own and operate a business-critical enterprise data platform on Microsoft Azure, acting as technical lead for architecture, scalability, governance and operational excellence. Work with Infrastructure, Security and Architecture teams on CI/CD, automation, monitoring and Infrastructure-as-Code, supporting production and incident management while enabling Data Engineers and shaping platform strategy.

Michael Page · Liverpool · £60,000 – £65,000 pa

Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.

Barclays · Glasgow

Owns the optimisation and strategy of transaction monitoring controls across Barclays UK and International, tuning surveillance systems and developing detection solutions. Involves data exploration, coding in SQL, Scala, Spark or Python, and engaging technical and non-technical stakeholders on financial crime risk. Based in Glasgow within a regulated governance and control environment.

Manufacturing Recruitment Ltd · Polegate · £70,000 – £80,000 pa

Designs and implements cloud-native security solutions on Microsoft Azure, applying Security as Code and automation tooling. Works with Security Architects to define cloud security strategy, establish guardrails for developers, and ensure compliance with GDPR, ISO 27001 and NIST. Involves AKS, DevSecOps, Defender, SIEM and scripting with BICEP, ARM, PowerShell and Python in an agile, hybrid team.

Amazon · London

Builds AI/ML-driven security automation systems that detect, analyse and respond to threats at Amazon scale, integrating automated detection into the company's security infrastructure. Works alongside security engineers and scientists on proactive, offensive and defensive tooling, researching and prototyping new approaches. Distinct for its focus on autonomous security across one of the world's largest tech ecosystems.

Amazon · London

Join a global team responsible for discovering, assessing, triaging and driving remediation of vulnerabilities across Amazon's infrastructure, services and applications. The role involves analysing disclosures and exploit code, engineering scalable detection mechanisms, and building automation and tooling, with periodic on-call duties.

JAM Recruitment · London · £700 – £750 pd

Day-to-day, you will manage and configure production databases, provide first to third-line support across full-stack applications, and administer Linux and Windows virtual machines with a focus on vulnerability management and hardening. The role also involves automation with Ansible, Docker containerisation, ETL processes and shared services such as identity brokers and observability platforms, within a national-security context requiring DV clearance.

Carbon 60 · Stevenage · £70 – £75 ph

Day-to-day BAU support, administration and configuration management across Windows infrastructure and workplace environments, including patching, change implementation and asset documentation. Acts as Tier 2/Tier 3 escalation for complex Windows issues, handling incident response, root cause analysis, monitoring, backups and security compliance. Requires active DV clearance and 100% onsite work in a highly secure, restricted environment.

TRIA · Sheffield · £500 – £600 pd

Lead the response to high-severity IT incidents across network, infrastructure, cloud and security environments, coordinating technical teams, suppliers and stakeholders to restore services within agreed targets. The role involves chairing incident and crisis calls, post-incident reviews, root cause analysis, ITIL processes, disaster recovery and business continuity planning, plus executive reporting and on-call duties.