Cyber Security Jobs

• United Kingdom
• Remote
• Lead

Deliver white-glove onboarding and ongoing technical guidance for Managed XSIAM customers, analysing security data to improve detection coverage, alert quality and tenant hygiene. Lead customer touchpoints and security reviews while partnering with Unit 42 SOC engineering, Product and MDR teams to build automation workflows and scalable service frameworks.

XSIAM · Unit 42

• Amsterdam, Netherlands
• Remote
• Senior

Develops and runs technical enablement programs for Professional Services, Customer Success and delivery partners across the Cortex and Cloud portfolio, covering XSIAM, XSOAR, XDR and Prisma Cloud. Delivers workshops, labs, boot camps and coaching during live customer engagements, and builds capability frameworks, assessments and reusable learning assets. Works cross-functionally as a technical advisor without direct authority.

Cortex XSIAM · Cortex XSOAR · Cortex XDR +3

• Paris, France
• Remote
• Mid-level

Owns the end-to-end migration of enterprise customers from legacy security platforms to Cortex, executing data cutovers, policy mappings, API setups and log ingestion validations. Runs practitioner-focused Day in the Life workshops and Value Realization sessions with customer leadership, using dashboards to demonstrate ROI and secure project sign-off.

Palo Alto Networks Cortex XDR · Cortex XSIAM · Prisma Cloud +2

• Berlin, Germany
• Remote
• Mid-level

Owns the end-to-end migration of enterprise customers from legacy security platforms to modern Cortex, Prisma Cloud or Strata deployments within a high-velocity sprint model. Executes data cutovers, policy mappings, API and log ingestion work, and runs Day-in-the-Life workshops and value realization sessions with customer security leadership.

Cortex XDR · Cortex XSIAM · Prisma Cloud +2

• Chessington
• Hybrid
• Director · manages people
• Permanent

Lead the IT function across a multi-site FMCG business, assessing the existing technology estate and transitioning away from services provided by the former parent group. Own infrastructure, cloud, enterprise applications (notably D365 Business Central), cybersecurity governance and supplier relationships, while building a roadmap and developing the IT team.

Microsoft Dynamics 365 Business Central · Azure · Microsoft 365 +3

• United Kingdom
• Remote
• Senior

Provide advanced technical support for Cortex XSIAM customers, triaging issues via ticketing, phone and remote sessions, and performing application- and OS-level troubleshooting. Work with developers to reproduce faults and implement permanent fixes, and with technical account managers to mitigate risks in customer environments.

Cortex XSIAM · Kubernetes · GCP +10

• United Kingdom
• Remote
• £550 – £600 pd
• Senior
• Contract

Hands-on engineering role deploying, configuring and troubleshooting Prisma Access, DLP, CASB and SSPM within a large enterprise SASE and cloud security transformation. You act as a trusted technical adviser, handling escalations, root cause analysis and data protection policy work alongside cybersecurity, networking and cloud teams.

Prisma Access · GlobalProtect · Palo Alto Networks +3

• Exeter
• £21,805 pa
• Entry level
• Contract

A PhD project investigating end-to-end guarantees for security systems by verifying translations between programs and the representations used by security protocols. The work centres on Isabelle/HOL, developing semantic models and compilation techniques, with zero-knowledge proof systems such as STARK-style protocols as a key application area. It spans formal methods, programming languages, cybersecurity and cryptography, with scope to shape the direction around the student's interests.

Isabelle/HOL · STARK

• London
• Permanent

Join a Security Operations Centre to build detections for suspicious and malicious behaviour, respond to security incidents, and engineer automation and AI-driven solutions that improve team efficiency. You'll collaborate with data scientists, software engineers and security experts to protect AWS infrastructure and UK customers at massive scale.

AWS

• London
• Remote
• Senior

Senior technical product engineer role advising partners, customers and internal teams on cloud-native security, Cortex capabilities and SOC automation. Involves cross-functional projects, product roadmap feedback, and building playbooks and integrations across AWS, Azure and GCP.

AWS · Azure · GCP +3

• Manchester
• £550 – £650 pd

SC Penetration Tester£600 - £700 A Day Outside IR356 MonthsRemote (Occasional Manchester travel)We are looking for a security cleared penetration tester to support a public sector customer to deliver high-assurance security testing.The role offers the opportunity to work on complex…

• London
• Remote

Owns the end-to-end migration and security operations transformation for enterprise customers moving from legacy platforms to Cortex XDR/XSIAM, Prisma Cloud or Strata. Runs data cutovers, policy mapping, API and log ingestion work, plus Day-in-the-Life workshops and executive value realization sessions. Combines hands-on Python, CLI and REST API automation with customer-facing delivery in a global, remote-first team.

Cortex XDR · Cortex XSIAM · Prisma Cloud +2

• London
• Remote
• Senior

Deliver expert-level technical support to top-tier cybersecurity customers, owning complex cases from initiation to resolution through multi-vendor troubleshooting, fault isolation and root cause analysis. Act as a designated customer advocate running weekly reviews, QBRs and upgrade planning, while working with Engineering and QA on bug reports and test plans.

Palo Alto Networks · Prisma Access · Cisco Firepower +7

• London
• Remote
• Lead

Lead and deliver reactive incident response engagements for clients, managing scoping, forensic investigations and containment of security incidents. Perform host-based analysis across Windows, Linux and macOS, examine firewall, web and database logs, and use tools such as EnCase, FTK, X-Ways, SIFT and Splunk to determine breach scope. Also mentors junior team members and provides remediation guidance to customers.

EnCase · FTK · X-Ways +5

• London
• Remote
• Lead · manages people

Lead strategic advisor for enterprise customers modernising their Security Operations Centres through XSIAM deployment, covering log ingestion, detection engineering and automation. The role combines executive-level consulting with hands-on SIEM/SOAR/EDR technical work, mentoring professional services teams and feeding field insights back to Product and R&D. Requires security clearance eligibility and up to 30% travel.

XSIAM · Splunk · IBM QRadar