Cyber Security Jobs

• Manchester
• Hybrid · 3 days in office
• Mid-level
• Permanent

Bridges compliance and hands-on technical security, managing ISO 27001 and Cyber Essentials Plus frameworks, running internal audits and third-party risk assessments. Also hardens AWS/Azure cloud environments, runs vulnerability scans and remediation, and supports incident response and identity/access management. Reports to the Head of Security in a Salford-based team.

AWS · Azure · GCP +4

• Norwich
• £20,409 pa
• Entry level
• Contract

Develops quantum-resilient security for connected and autonomous vehicular systems, evaluating post-quantum cryptographic techniques in resource-constrained 6G-enabled networks. Combines system modelling, simulation and algorithmic implementation to study trade-offs between security strength, computational overhead and communication latency, with adaptive key management and optimisation for low-latency, scalable deployment.

6G

• Remote
• Remote
• Senior
• Permanent

Designs, builds and maintains security automations that detect, investigate and respond to cyber threats, working closely with Incident Response to identify improvements and create new playbooks. Delivers scalable automation within the Splunk ecosystem, covering advanced analytics, scripting, new use cases, validation of automation behaviour and documentation, plus mentoring junior engineers.

Splunk · SOAR

• Newcastle upon Tyne
• Remote
• £35,000 – £45,000 pa
• Mid-level
• Shift work

Investigating and responding to security incidents at 2nd Line level, monitoring customer environments and SIEM alerts, and threat hunting across a Microsoft security stack including Sentinel, Defender and Entra. Uses KQL and PowerShell for investigations and automation, acts as an escalation point for junior analysts, and supports vulnerability assessment and remediation. Initially on a 4-on, 4-off night shift pattern before moving to an 8-hour shift model.

Microsoft Sentinel · Microsoft Defender · Microsoft Entra

• Manchester
• Remote
• Mid-level
• Permanent

Monitor, detect and respond to cyber incidents for customers from a 24/7 Global Security Operations Centre, working with the Microsoft Security Stack, Splunk, EDR, IDS and IPS tools integrated into a Unified Cyber Platform. The L2 role sits within an MXDR team of over 100 accredited experts handling hundreds of millions of log events daily.

Microsoft Security Stack · Splunk · EDR +3

• Staffordshire
• Hybrid · 2 days in office
• £50,000 – £55,000 pa
• Senior
• Permanent

Hands-on role taking technical ownership of Microsoft cloud environments, initially strengthening internal systems before moving into customer consultancy, solution design and pre-sales. Day to day covers Microsoft 365, Azure, Entra ID, Intune and SharePoint, plus security and governance work such as vulnerability scanning, remediation and Cyber Essentials compliance. Automation via Power Automate and acting as escalation point for complex cloud issues are also central.

Microsoft 365 · Azure · Entra ID +6

• London
• Hybrid · 2–3 days in office
• £55,000 – £65,000 pa
• Senior

Owns the entire IT estate for a cybersecurity SaaS company, covering identity and access management, macOS device management, SaaS administration and end-to-end joiners, movers and leavers. An engineering-led role focused on automation, AI enablement and security controls that support SOC 2, ISO 27001 and Cyber Essentials Plus audits, working alongside the Director of Information Security and a Senior SecOps Engineer.

macOS · MDM · SSO +6

• Manchester
• Hybrid
• £50,000 – £55,000 pa
• Senior

Hands-on infrastructure engineering role maintaining, securing and improving a UK and international company's IT estate, reporting to the Head of IT. Covers Windows Server, Active Directory, Hyper-V, Microsoft 365/Azure hybrid environments, networking, Sophos firewalls, cybersecurity and PowerShell automation, plus delivering server migrations and upgrades rather than service desk work.

Windows Server · Active Directory · Group Policy +11

• London
• Mid-level

Own the full software development lifecycle for distributed systems supporting threat disruption and legal response, building data pipelines that collect and expose threat intelligence for analysts and customers. Work primarily in Golang and TypeScript with Rust, Kafka, Redis, Kubernetes, Terraform and Postgres, collaborating with Threat Intelligence, Trust & Safety, Legal and Product teams, plus on-call rotations and mentoring.

Golang · TypeScript · Rust +7

• London
• Mid-level

Acts as primary technical responder for premium enterprise customers, autonomously investigating complex threat telemetry and handling live incident response for volumetric DDoS and application-layer attacks. Implements mitigation across OSI Layers 3, 4 and 7 using Cloudflare's security suite, performs packet and traffic flow analysis, and advises customers during active incidents. Requires 24x7 rotating shifts.

Cloudflare · Magic Transit · Magic Firewall +7

• Grange, Greater London
• Hybrid
• £55,000 – £60,000 pa
• Mid-level
• Permanent

Conducts penetration tests across web applications, infrastructure, cloud environments and APIs, with exposure to Active Directory, AWS/Azure/GCP and tools like Burp Suite, Kali Linux, Nmap and Metasploit. Owns testing engagements end to end, writes clear reports and advises clients on remediation, with scope to move into red teaming, assumed breach and AI security.

Burp Suite · Kali Linux · Nmap +4

• Glasgow
• Hybrid
• £60,000 pa
• Mid-level

Customer-facing pre-sales role in a growing cybersecurity team, working with sales teams to understand security challenges, design solutions and support proposals, tenders and RFP/RFQ responses. Involves workshops, presentations and roadmapping with Account Managers, drawing on areas such as security assessments, SOC, SIEM, XDR, cloud security, IAM and Microsoft Security or Exabeam technologies.

Microsoft Security · Exabeam

• London
• Remote
• Senior

Technical pre-sales role covering the UK&I region, driving the technology evaluation stage of the sales cycle for the Idira Identity Security Platform. You will run solution demonstrations, architecture reviews and customer proof-of-concepts, designing Zero-Trust access approaches for human and non-human identities across cloud and datacenter environments, and mentoring other solutions engineers.

Azure · AWS · Google Cloud +6

• Exeter
• £21,805 pa
• Entry level
• Contract

A PhD project investigating end-to-end guarantees for security systems by verifying translations between programs and the representations used by security protocols. The work centres on Isabelle/HOL, developing semantic models and compilation techniques, with zero-knowledge proof systems such as STARK-style protocols as a key application area. It spans formal methods, programming languages, cybersecurity and cryptography, with scope to shape the direction around the student's interests.

Isabelle/HOL · STARK

• London
• Remote
• Senior

Senior technical product engineer role advising partners, customers and internal teams on cloud-native security, Cortex capabilities and SOC automation. Involves cross-functional projects, product roadmap feedback, and building playbooks and integrations across AWS, Azure and GCP.

AWS · Azure · GCP +3