Cyber Security Jobs

eFinancialCareers · Stirling

Technical specialist role in Security Operations investigating complex incidents across cloud, endpoint, identity, email and network environments. Combines intelligence-led threat hunting, detection engineering and AI-assisted analysis, acting as escalation point and translating findings into lasting defensive improvements alongside internal teams and external providers.

eFinancialCareers · Belfast

Operational role running penetration tests, vulnerability assessments and Red Team adversarial evaluations across a global bank's application portfolio. The work is twofold: testing GenAI, agentic and LLM-backed systems for prompt injection, retrieval poisoning and tool misuse, and using AI tooling to speed up security testing. Involves building triage pipelines and containment architectures for AI agents at enterprise scale.

CrowdStrike · Ireland

Investigates emerging malware and cyber threats across the full adversary kill chain, validating and improving Falcon's detection coverage. Works with Threat Research, Engineering, Data Science and Red Team to turn findings into product improvements, using automation, AI and machine learning to scale analysis.

CrowdStrike · United Kingdom

Investigates emerging malware and cyber threats across the full adversary kill chain, validating and improving Falcon's detection coverage. Works with Threat Research, Engineering, Data Science and Red Team to turn findings into product improvements, supporting external security testing programmes and building automation to speed analysis.

ITSS Recruitment · London · £60,000 – £70,000 pa

Hands-on security engineering role protecting critical systems and sensitive data across a broad estate covering cloud security, vulnerability management, incident response and security monitoring. Day to day involves operating the vulnerability management programme, administering Microsoft Defender, Purview, Entra ID, Sentinel and Azure security services, and advising infrastructure, application and business stakeholders on risk-based controls.

Elevate Recruitment Limited · London · £38,000 – £50,000 pa

Data Engineering Lead required by our client an international educational establishment to provide the technical engine for the Value Management Office automating the visibility of portfolio performance and benefit realization across the organization. It is responsible for building and maintaining...

QinetiQ · Farnborough · £36,000 – £40,000 pa

Supports the design, development and application of configuration security tools and infrastructure monitoring. Day to day involves SIEM health checks, triaging alarms, correlating alerts, investigating potential incidents, producing weekly and monthly security reports, and managing analyst rota scheduling for continuous PROMON coverage.

Palo Alto Networks · London

Lead strategic advisor for enterprise customers modernising their Security Operations Centres through XSIAM deployment, covering log ingestion, detection engineering and automation. The role combines executive-level consulting with hands-on SIEM/SOAR/EDR technical work, mentoring professional services teams and feeding field insights back to Product and R&D. Requires security clearance eligibility and up to 30% travel.

Sophos · United Kingdom

Performs advanced investigative, forensic and containment work during active cyber incidents for Managed Detection and Response customers, correlating alerts and telemetry to establish scope and root cause. Mentors junior IR and SOC analysts, maintains engagement documentation and playbooks, and supports Incident Advisors with validated technical findings. Includes weekend and holiday rotation cover.

Experis · London · £500 pd

Lead end-to-end management of cyber security incidents and major security events within a secure government programme, coordinating technical response teams through containment, eradication and recovery. Act as primary point of contact for incident communications, run response bridges and war-rooms, and produce post-incident reports and root cause analysis. Works alongside SOC, analysts, infrastructure teams and third-party suppliers to improve cyber resilience.

Cloudflare · London

Own the full software development lifecycle for distributed systems supporting threat disruption and legal response, building data pipelines that collect and expose threat intelligence for analysts and customers. Work primarily in Golang and TypeScript with Rust, Kafka, Redis, Kubernetes, Terraform and Postgres, collaborating with Threat Intelligence, Trust & Safety, Legal and Product teams, plus on-call rotations and mentoring.

Darktrace · Cambridge

Lead the strategy, roadmap and execution of Darktrace's interactive demo estate, shaping how products are showcased to prospects, customers and internal teams. Manage a small team of technical content specialists while partnering with Product, Marketing, Enablement and Sales Engineering to evolve demos from on-rails walkthroughs into live sandbox environments.

Palo Alto Networks · United Kingdom

Deliver white-glove onboarding and ongoing technical guidance for Managed XSIAM customers, analysing security data to improve detection coverage, alert quality and tenant hygiene. Lead customer touchpoints and security reviews while partnering with Unit 42 SOC engineering, Product and MDR teams to build automation workflows and scalable service frameworks.

GCS · London · £600 – £700 pd

Lead a risk-based technical assurance programme across a global enterprise, independently assessing security control effectiveness in infrastructure, cloud, identity, applications and incident response. Manage and mentor a small team of Technical Assurance Analysts while producing board-level reporting and driving continuous controls monitoring and automated assurance.

Hays Technology · Sheffield · £450 – £500 pd

Owns end-to-end solution design across cybersecurity initiatives, producing architecture documents, high-level designs, patterns, decision records and risk assessments. Provides technical leadership and presents designs to Design Authorities and senior stakeholders, with deep IAM and HashiCorp Vault expertise. Requires three days per week onsite in Sheffield.