Cyber Security Jobs

• Romania
• Remote
• Senior

Builds and operates large-scale data processing pipelines, storage systems and presentation layers for the Intelligence team, owning systems from design and prototyping through production operations. Works autonomously on a distributed remote team, gathering requirements from analysts and choosing the technology stack, with existing Go and Python codebases to maintain.

AWS · GCP · EC2 +3

• United Kingdom
• Remote
• Senior

Builds and operates large-scale data processing pipelines, storage systems and presentation layers for the Intelligence team, owning systems from design and prototyping through production deployment and long-term maintenance. Works autonomously on a distributed remote team, gathering requirements from analysts and choosing the technology stack, with existing Go and Python codebases to maintain and improve.

AWS · GCP · EC2 +3

• United Kingdom
• Remote
• Senior · manages people

Leads incident response engagements for customers hit by cyberattacks, directing a team of consultants, running kick-off and daily update calls, and delegating forensic tasks. Handles multiple ransomware and BEC investigations concurrently, performing root cause analysis and producing executive-summary reports mapped to MITRE ATT&CK.

Splunk · ELK · Sophos

• Basingstoke
• On-site
• £45,000 – £60,000 pa
• Mid-level
• Permanent

New-business sales role targeting the Higher Education sector, selling networking and cyber security solutions to universities and colleges. Day to day involves heavy outbound prospecting (minimum 70 call attempts daily), managing pipeline in CRM, preparing proposals and quotations, and working with Account Directors and technical teams to grow revenue. Predominantly office-based in Fleet, Hampshire.

Microsoft Office · CRM

• London
• Hybrid · 2–3 days in office
• £90,000 – £100,000 pa
• Senior

Owns and matures security operations across cloud, endpoint and SaaS environments, covering detection engineering, incident response, vulnerability management and AWS/GCP security posture. Over time shifts toward security engineering and architecture, designing scalable telemetry and detection platforms and embedding secure-by-design principles with engineering teams.

AWS · GCP · SIEM +7

• Lincoln
• Hybrid
• £55,000 pa
• Senior

Lead the design, implementation and governance of OT network and security across multiple manufacturing sites, working alongside the Global Head of IT Operations. Act as subject matter expert for SCADA, PLCs, ICS networks and industrial protocols, securing and modernising environments while ensuring availability and resilience of business systems.

SCADA · PLC · ICS Networks +4

• Southampton
• Hybrid · 3 days in office
• £65,000 pa
• Mid-level

Operational security role monitoring alerts, investigating incidents and maintaining controls across on-prem, cloud and SaaS environments. You'll handle firewalls, VPNs, endpoint protection, vulnerability management and secure configuration, supporting audits, pen tests and NIST/NIS compliance alongside infrastructure and service delivery teams.

Microsoft Azure · Microsoft 365 · Entra ID +7

• London
• £80,000 – £90,000 pa
• Senior

Strengthen and maintain cyber security posture through assurance, incident response coordination, vulnerability management and governance. Work with frameworks including ISO 27001, SOC2, NIST and GDPR, overseeing MSSP and SOC activities, with technical involvement in investigations, threat analysis and major incidents.

EDR · SIEM · NDR +1

• Guildford
• £55,000 – £60,000 pa
• Mid-level

Hands-on role covering 3rd line infrastructure and security support across cloud and on-premise environments, including system hardening, patching, vulnerability remediation, IAM, and network security. You will monitor systems, investigate incidents, and help build security into new systems supporting spacecraft engineering teams. Distinct for its space technology context rather than a typical corporate IT setting.

AWS · Azure · GCP +7

• London
• Hybrid
• £67,000 pa
• Permanent

Designs and implements security solutions across cloud, on-premises and hybrid environments for a global technology consultancy's client projects. Day-to-day work covers SIEM log ingestion and routing, firewall and network security management, CIS benchmark assessments, and automating security processes with Python, Bash or PowerShell, Terraform and cloud platforms. Involves client-dependent on-call support and requires British passport holders without dual nationality for clearance.

Splunk · Microsoft Sentinel · Cribl +11

• Manchester
• Hybrid · 3 days in office
• £54,000 – £55,000 pa
• Senior

Day-to-day operation of a SIEM platform, including monitoring, administration and optimisation, plus developing detection rules and investigating alerts through to resolution. Works with Infrastructure, Networking, DevOps and external partners on incident response, EDR management and control testing, with Google SecOps (Chronicle) experience advantageous.

Google SecOps · Chronicle · SIEM +4

• Stoke-on-Trent
• On-site
• £42,000 – £45,000 pa
• Senior

Hands-on role combining cyber-security and infrastructure engineering, reporting to the Head of IT. You'll monitor and respond to threats, manage identity and access, endpoint protection, patching, backups and disaster recovery, while supporting Microsoft 365, Azure, Windows Server, Active Directory, VMware, networking and firewalls. The position is based on site five days a week and includes mentoring the wider IT team.

Microsoft 365 · Azure · Windows Server +2

• United Kingdom
• Junior

Supports the delivery of security architecture and cyber security services across Defence and Government projects, including security assessments, risk analysis, threat identification and security documentation. Works alongside experienced Security Architects and technical specialists on areas such as Identity & Access Management, Security Testing, Privacy and Cloud Security, and requires SC Clearance.

AWS · Azure · Google Cloud +7

• Sunderland
• £26,100 pa
• Junior

Support a manufacturing organisation's security team by monitoring SIEM alerts, investigating potential threats and assisting with vulnerability management across business and production systems. The role also covers access reviews, compliance with information security standards, awareness activities and risk assessments, working closely with IT, engineering and production colleagues.

SIEM

• Ashington
• £26,100 pa
• Junior

Support a manufacturing organisation's security operations by monitoring SIEM alerts, investigating potential threats and assisting with vulnerability management across business and production systems. The role involves access reviews, compliance support, awareness activities and risk assessments, working with IT, engineering and external providers to keep production disruption to a minimum.

SIEM