Cyber Security Jobs

• United Kingdom
• Hybrid
• Mid-level

Joins the Information Security Service Delivery team to assess, design, configure and integrate security technology controls, acting as a technical escalation point for security concepts. Works hands-on with Zscaler, Okta, Crowdstrike, cloud and endpoint security, threat modelling and security architecture frameworks, ensuring designs meet policies and regulatory requirements.

Zscaler · Okta · CrowdStrike +5

• Reading
• Hybrid
• £72,000 pa

Supports the design, implementation and maintenance of threat and vulnerability management controls across a large water utility's IT estate. Conducts network, application and code penetration testing, exploits vulnerabilities via proof-of-concept testing, and helps build an internal pen testing function. Works hybrid in Reading, liaising with Digital teams on remediation, patching and threat hunting.

Tenable · Burp Suite · Kali Linux +2

• Farnborough
• Hybrid · 2 days in office
• £70,000 – £80,000 pa
• Senior
• Permanent

Hands-on detection engineering role designing, testing and deploying detection content across Microsoft Sentinel and Splunk, writing KQL and SPL logic, tuning alerts to cut false positives and onboarding log sources from cloud, identity and network telemetry. Works closely with SOC, Threat Intelligence and Security Architecture teams in a live SOC environment.

Microsoft Sentinel · Splunk · Logic Apps +2

• London
• On-site
• £450 – £455 pd
• Mid-level
• Contract

Hands-on SOC and incident response role monitoring, triaging and investigating cyber security threats across macOS endpoints, Linux cloud workloads, microservices and containerised platforms. You will contain and remediate incidents, document findings and evidence, and contribute to detection rules and response playbooks while working closely with security and engineering teams.

macOS · Linux · Containers +4

• London
• On-site
• £475 – £525 pd
• Contract · Shift work

Hands-on SOC and incident response role investigating cyber security threats across macOS endpoints, Linux cloud workloads, microservices and containerised environments. Responsibilities include alert triage, severity assessment, containment and remediation, telemetry correlation, evidence documentation and improving detection playbooks. On-site shift work covering 10-hour shifts between 06:00 and 16:00.

SIEM · EDR · XDR +3

• London
• Mid-level

Hands-on incident response role covering detection, triage, investigation, containment and recovery of cyber incidents in a complex enterprise environment. Day to day involves monitoring SIEM and EDR/XDR alerts, analysing logs, packet captures and forensic images, threat hunting, and mapping activity to MITRE ATT&CK. Also maintains playbooks, evidence records and post-incident reports, and briefs senior stakeholders.

Microsoft Sentinel · Defender XDR · Defender for Identity +7

• Royal Leamington Spa
• Hybrid · 3 days in office
• £550 – £650 pd
• Senior
• Contract

Hands-on contract role owning the end-to-end detection engineering lifecycle, translating threat intelligence, hunting findings and adversary techniques into effective detection rules. Builds behavioural analytics and detection content across endpoint, identity, cloud, network and email telemetry using KQL, SPL, Sigma, Python and PowerShell, with tuning, purple teaming and Detection-as-Code work alongside SOC, IR and Red Team specialists.

Microsoft Sentinel · Splunk · Elastic +6

• Gloucestershire
• Hybrid
• £60,000 – £80,000 pa
• Mid-level
• Permanent

Investigate and respond to security incidents across endpoint, identity, network and cloud environments for a growing cyber security consultancy and MSSP. The role involves digital forensics, evidence collection, containment and recovery, plus developing IR playbooks and tabletop exercises, working alongside SOC, Threat Intelligence and Detection Engineering teams. It includes an on-call rota and occasional customer travel.

Velociraptor · KAPE · Timesketch +8

• London
• Hybrid
• £36,000 – £40,000 pa

Finance Assistant – Central London – Hybrid - £40,000A highly successful tech company based in Central London are looking for a highly organised and detail-oriented Finance Assistantto support the financial operations of a growing Managed Services and Cyber Security business.The…

• Portsmouth
• Hybrid
• Mid-level
• Permanent

Systems engineering role focused on radiation and nuclear hardening for military fixed ground installations, spanning requirements elicitation, mitigation planning, test plans and architecture definition. You will lead customer and test house engagement, working with IS/IT specialists on end-to-end system lifecycles for defence communications equipment. Based on-site in Portsmouth with hybrid and flexible working, on stable long-term MOD, Government and SATCOM projects.

SATCOM

• London
• £75,000 – £110,000 pa

This role involves conducting manual penetration testing and security assessments of web applications, APIs, and enterprise platforms. You will identify and exploit vulnerabilities, produce detailed technical reports, and work closely with application owners and security stakeholders to improve the organization's cyber resilience.

• Remote
• Remote
• Mid-level
• Contract

Monitor, detect, investigate and respond to cyber security threats using the Splunk Enterprise Security toolset. Day-to-day work centres on analysing alerts, investigating incidents and helping strengthen the organisation's cyber defence capabilities within a security operations team.

Splunk Enterprise Security · Splunk

• London
• Remote
• £40,000 – £50,000 pa
• Mid-level

Build and improve web applications for a cyber security business, working across the full stack with React interfaces and Node.js services and RESTful APIs. You'll own tasks from requirement to delivery, embed application security, and use AI-assisted development tools daily, joining a small team where you can influence technical and architectural decisions.

React · Node.js · Git +7

• London
• Hybrid
• £650 – £750 pd
• Mid-level
• Contract

Investigate and respond to cyber security incidents across enterprise environments, triaging alerts from SIEM, EDR/XDR, cloud, identity and network tools. Conduct digital forensics, proactive threat hunting and detection tuning, coordinating containment and recovery with infrastructure, cloud and identity teams. Six-month contract within a collaborative security function defending a large enterprise.

SIEM · EDR · XDR +7

• Winchester
• On-site
• £41,000 – £50,000 pa
• Mid-level

Monitor, triage and investigate security alerts across SIEM and wider security tooling, identifying indicators of compromise and conducting initial incident investigations. Support the full incident response lifecycle including containment, remediation and post-incident learning, while tuning detection rules to reduce false positives. Work with security and infrastructure teams on threat intelligence, trend reporting and continual service improvement.

Microsoft Sentinel · Microsoft Defender · QRadar +2