Cyber Security Jobs

• Leeds
• Hybrid · 3 days in office
• £45,000 – £50,000 pa
• Mid-level
• Permanent

Support the development and operation of security controls, analyse threat intelligence, manage vulnerabilities and help with incident response across a global technology estate. Work with Azure and Microsoft security tooling such as Sentinel, Defender and Intune, alongside SIEM, EDR and firewalls, in a hybrid Leeds team.

Microsoft Azure · Microsoft Sentinel · Microsoft Defender for Endpoint +7

• London
• Hybrid
• Senior
• Permanent

Client-facing consulting role helping major organisations assess cyber risk, maturity and capability, then turn strategy into practical transformation programmes. Work spans cyber strategy and risk, governance and operating models, and transformation delivery, using frameworks such as NIST CSF, ISO 27001, NCSC CAF and NIS2. Senior Consultants also own workstreams, manage deliverables and coach junior colleagues.

NIST CSF · ISO 27001 · NCSC CAF +1

• London
• Hybrid
• £80,000 – £100,000 pa
• Senior
• Permanent

Defines and delivers secure architectures across enterprise IT and operational technology environments, working with technical and solution architects to embed security through the design lifecycle. Applies threat modelling, NIST/ISO/CIS frameworks and advises on protective monitoring, IAM and risk mitigation. Client-facing, requiring active SC clearance and strong stakeholder communication.

NIST · ISO · CIS +1

• London
• Hybrid
• Senior
• Permanent

Deliver PCI DSS consultancy engagements across merchant and service provider environments, covering gap assessments, readiness reviews and compliance assessments, plus RoC and AoC documentation. Also supports wider consulting work in ISO 27001, NIST, NCSC CAF, risk management and security maturity, reviewing complex infrastructure, cloud and third-party environments.

PCI DSS v4.x · RoC · AoC +2

• Altrincham
• Hybrid
• £50,000 – £60,000 pa
• Senior

Hands-on senior role taking shared ownership of Azure workloads, VMware virtualisation, Microsoft 365 and Entra ID in a small, close team. Splits time between day-to-day management and project work, including new Azure workloads hosting in-house AI and automation tooling, acting as third-line escalation and working with the Cyber Security team.

Azure · VMware · Microsoft 365 +7

• London
• Mid-level

You will develop and maintain IT security policies, standards and controls, and build compliance dashboards and reporting in Power BI. The role owns the IT Security Risk Register, facilitates risk assessments and supports ISO 27001, Cyber Essentials and internal audit activity across a European IT environment.

Power BI

• Leicester
• Hybrid · 1 day in office
• £40,000 – £55,000 pa
• Mid-level

Day-to-day you will own and improve the ISMS, coordinate internal and external audits, administer the cyber risk register and run supplier assurance and third-party assessments. You will write policies and standards, produce executive reporting and act as a trusted advisor across technology and business teams, with frameworks including NIST CSF 2.0, PCI DSS and UK GDPR.

LogicGate · OneTrust · Archer +1

• London
• Hybrid · 2 days in office
• £115,000 – £125,000 pa
• Director

Own the information and cyber security agenda for an international organisation, defining strategy, policies and technical baselines across networks, cloud, identity and endpoints. A senior individual-contributor role without line management, working with infrastructure, technology and external providers to drive vulnerability management, monitoring, incident response and security architecture. Requires hands-on technical depth plus the ability to influence senior stakeholders.

Microsoft Azure · Microsoft 365 · Google Enterprise +3

• Cheltenham
• Hybrid · 3 days in office
• £100,000 – £110,000 pa
• Senior
• Permanent

Builds backend Java applications and microservices for complex cross-domain security systems, working across the full SDLC from requirements through deployment and support. Uses Spring Boot, AWS, REST APIs, PostgreSQL, MongoDB, DynamoDB and RabbitMQ within containerised, automated environments (Docker, Kubernetes, Terraform, Jenkins, Linux), with TDD, BDD and pair programming.

Spring Boot · AWS · PostgreSQL +7

• London
• Hybrid · 1–2 days in office
• £75,000 – £90,000 pa
• Senior
• Permanent

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for public and private sector clients. You will own technical delivery in your area, create reusable modules and deployment patterns, and mentor less experienced engineers within multi-disciplinary consulting teams.

AWS · Terraform · Kubernetes +7

• London
• £75,000 – £85,000 pa
• Mid-level

Hands-on ownership of technology governance, cyber security, risk, compliance and assurance frameworks across a diverse technology estate. Leads CIS Controls Self Assessment activities, coordinates ISO 27001 gap assessments and ISMS implementation, maintains security policies and risk registers, and provides assurance reporting to senior stakeholders while coordinating external auditors and suppliers.

CIS CSAT · ISO 27001 · ISMS +2

• West Byfleet
• Senior

Hands-on architecture role shaping AWS cloud strategies, standards and governance for secure, business-critical environments. You will design resilient, highly available solutions, lead infrastructure automation and migration projects, and provide technical leadership to engineering teams while engaging directly with customers. Distinct for its focus on Defence, National Security and Public Sector work requiring existing DV clearance.

AWS · EC2 · S3 +7

• Manchester
• Remote
• £60,000 – £80,000 pa
• Mid-level
• Permanent

Deliver penetration testing and consultancy across networks, web and mobile apps, APIs and cloud environments, using manual and automated techniques to simulate real-world attacks. Produce technical reports and executive summaries for technical and non-technical stakeholders, and contribute to service development and research. Requires CHECK Team Member certification and SC clearance eligibility.

Kali Linux · Burp Suite · Metasploit +6

• Cambridge

Acts as the go-to authority in a chosen reliability specialism—observability, performance engineering, data infrastructure, security-focused SRE or network reliability—defining standards and best practices across SRE, Platform Engineering and DevSecOps. Builds tooling and automation, leads deep-dive investigations into systemic issues, and contributes to incident response and on-call rotations in a cloud-native, Kubernetes-based environment.

AWS · GCP · Azure +1

• United Kingdom
• Hybrid
• Senior

Produce tactical, operational and strategic threat intelligence assessments, analysing threat actors, intrusion techniques and emerging threats. Correlate OSINT, commercial intelligence and internal telemetry, translating findings into recommendations for SOC, detection engineering, threat hunting and red team exercises, and presenting to senior stakeholders.

MITRE ATT&CK