Cyber Security Jobs

• United Kingdom
• Remote
• Lead

Serve as technical lead on front-page incident response engagements for Fortune 100 organisations, conducting intrusion investigations under outside counsel and performing host and network forensics across Windows, Mac and Linux. The role also involves hunting threat actors in large datasets, cloud IR in AWS, Azure or GCP, and communicating findings to executives, regulators and legal teams.

CrowdStrike · AWS · Azure +6

• Germany
• Remote
• Senior

Senior consultants join the technical team on front-page incident response engagements for Fortune 100 organisations, conducting intrusion investigations under project leadership and outside counsel. The role spans host and network forensics across Windows, Mac and Linux, threat hunting across large data sets, and producing written and verbal findings for customers, regulators and legal counsel.

CrowdStrike · Bro/Zeek · Suricata +6

• Newport
• Hybrid
• Mid-level
• Permanent

Hands-on role managing the full lifecycle of security incidents within an international CSIRT, investigating SOC alerts and performing host forensic analysis and reverse-engineering. You will industrialise SIEM and EDR tooling, build detection use cases and automated response workflows, and support SOC Level 1 and 2 processes, including on-call crisis response.

SIEM · EDR

• Chippenham
• Hybrid
• Senior
• Permanent

Provide end-to-end cyber security support for Spacecraft Control Centre Systems and Satellite Communications infrastructures, analysing functional needs, setting criticality levels and proposing protection concepts. Coordinate security architecture across disciplines, manage risks and ensure defences stay ahead of evolving threats. Requires CISSP/CISM and hands-on knowledge of Solaris, Linux, Windows, Cisco and JSP440.

Solaris · Linux · Windows +1

• Sunbury-on-Thames
• Hybrid
• Lead · manages people

Lead bp's global GRC engineering and compliance management teams, owning the technology, AI and data strategies and overseeing delivery squads. Drive platform, tooling and dashboard delivery for continuous control health monitoring, plus a compliance framework for global regulations and industry certifications. Hybrid role based in Sunbury-on-Thames, moving to Timber Square, Southwark around Q4 2027.

• Cardiff
• Remote
• £62,000 – £72,000 pa
• Mid-level

Hands-on security engineering role focused on building and improving controls across a Microsoft-centric estate, including Defender, Sentinel, Azure and Entra ID. Involves vulnerability management, data protection with Purview, incident response support and embedding security into projects, with influence over strategy rather than pure SOC operations.

Microsoft Defender · Microsoft Sentinel · Azure +2

• Wolverhampton
• Hybrid
• Director

Lead information security across multiple UK sites for a defence and aerospace manufacturer, owning accreditation, compliance and incident response. Act as the key security point of contact within a global matrix, driving frameworks such as NCSC CAF, ITAR and export control, and supporting secure-by-design across IT, engineering and industrial teams. Requires regular UK and international travel.

NCSC CAF · IGI 1300

• United Kingdom
• Hybrid
• Mid-level

Joins the Information Security Service Delivery team to assess, design, configure and integrate security technology controls, acting as a technical escalation point for security concepts. Works hands-on with Zscaler, Okta, Crowdstrike, cloud and endpoint security, threat modelling and security architecture frameworks, ensuring designs meet policies and regulatory requirements.

Zscaler · Okta · CrowdStrike +5

• Farnborough
• Senior

Customer-facing Solution Architect shaping and winning strategic UK Central Government opportunities, working with account, capture and bid teams from early qualification through contract award. Leads solution development, discovery workshops and architecture reviews across Data & Analytics, Cloud, Cyber, AI/ML and Systems Integration, and supports handover into delivery.

Azure · AWS

• Bath
• Hybrid · 2 days in office
• £30,000 pa
• Entry level

Join a technical operations team conducting cybercrime incident response, classifying malicious websites, apps, emails and phone numbers, and communicating findings to customers and affected parties. The role involves shift work covering weekends, with hybrid flexibility from a Bath office, and full training is provided for candidates without prior cybersecurity experience.

Udemy · Coursera

• London
• Hybrid · 2–3 days in office
• £50,000 – £75,000 pa
• Mid-level

Client-facing security role within a UK consultancy's growing Security Architecture practice, supporting government, defence and critical infrastructure programmes. Day to day involves threat modelling, risk assessment, reviewing solution and infrastructure designs, defining security requirements and controls, and running client workshops. Suits security engineers or consultants wanting to move into architecture, with occasional client site visits rather than frequent travel.

NIST · SABSA · TOGAF +5

• Manchester
• Hybrid · 3 days in office
• £54,000 – £55,000 pa
• Senior

Day-to-day operation of a SIEM platform, including monitoring, administration and optimisation, plus developing detection rules and investigating alerts through to resolution. Works with Infrastructure, Networking, DevOps and external partners on incident response, EDR management and control testing, with Google SecOps (Chronicle) experience advantageous.

Google SecOps · Chronicle · SIEM +4

• Malvern, England, United Kingdom
• Hybrid
• £69,975 – £77,750 pa
• Senior

Deliver cyber security consultancy by leading the design and development of secure technical system and solution architectures across a range of technologies and environments. Work in partnership with clients to drive security outcomes, develop security plans, policies and processes, and advise on security-related technology selection. Collaborate with other architect disciplines, mentor staff, and shape security architectural solutions that meet governance and regulatory requirements.

• Malvern, England, United Kingdom
• Hybrid · 3 days in office
• £65,700 – £73,000 pa
• Senior

Lead cyber security consultancy for defence and government customers, developing business risk models, running ISO 27001 audits and detailed vulnerability assessments using NIST and MITRE ATT&CK frameworks. You will translate technical threats into clear risk cases and mitigation strategies for senior stakeholders, embedding Secure by Design principles across projects. Based on a multi-site UK estate with at least three days a week on site and customer travel.

NIST · ISO 27001 · MITRE ATT&CK

• London
• Hybrid
• £57,000 – £67,000 pa
• Mid-level
• Permanent

Hands-on role implementing and maintaining technical security controls across endpoints, networks, servers, cloud and clinical systems. Involves vulnerability scanning and remediation, security monitoring and incident response, plus IAM, MFA and logging work in a Microsoft-centric estate, collaborating with a wider group cybersecurity function in a regulated environment.

Microsoft Defender · Microsoft 365 · Microsoft Entra +6