Cyber Security Jobs

• Spain
• Remote
• Senior

Senior technical consultant conducting front-page incident response investigations for Fortune 100 organisations, hunting adversaries across large data sets and performing host and network forensics on Windows, Mac and Linux. Works under project leadership and outside counsel, producing written and verbal findings for executives, regulators and legal counsel.

CrowdStrike · Bro/Zeek · Suricata +6

• Ireland
• Remote
• Senior

Senior consultants lead front-page incident response investigations for Fortune 100 organisations, hunting adversaries across large data sets and conducting host and network forensics on Windows, Mac and Linux. The role involves intrusion analysis under project leadership and outside counsel, plus written and verbal reporting to executives, regulators and legal teams.

CrowdStrike · Bro/Zeek · Suricata +6

• Gloucester
• £70,000 – £75,000 pa
• Mid-level

Mid-level role in a Security Support team maintaining enterprise network security, focusing on firewalls and SASE services. Day to day involves ITIL-based incident, change and problem management, controlled production changes, root-cause analysis, and vendor escalation. Hands-on work with Palo Alto and Fortinet NGFWs, routing protocols, and troubleshooting via PCAPs and logs in a regulated environment.

Palo Alto · Fortinet · Panorama +7

• London
• £65,000 – £79,000 pa
• Senior · manages people
• Permanent

Hands-on security leadership role managing the technical cyber security environment and SOC, owning policies, ISO 27001 implementation and incident response. Works with the Head of IT on the Cyber Security Roadmap, manages a third-party SOC and one direct report, and uses tools such as Rapid 7, Sophos MTR, Solarwinds and ServiceNow. Based at Marylebone with travel across the Chiltern network and CTC clearance required.

Rapid7 · Sophos MTR · SolarWinds +4

• Birmingham
• Hybrid · 3 days in office
• £80,000 – £87,000 pa
• Lead
• Permanent

Acts as the University's authority for security architecture and protective controls, running a continuous control validation programme using breach and attack simulation, purple teaming and posture monitoring. Owns control standards and baselines, governs exceptions and drives remediation, and acts as design authority embedding secure-by-design and threat modelling into major technology change across cloud, identity and AI.

Azure · AWS · GCP +5

• Newcastle upon Tyne
• Hybrid
• £57,000 pa
• Mid-level
• Permanent

Protect business systems, infrastructure and data by monitoring, investigating and responding to cyber threats and incidents. Manage vulnerability remediation, patching and endpoint security while securing cloud, network and endpoint environments. Support governance, audits and compliance with standards such as ISO 27001 and Cyber Essentials Plus, working with internal teams and third-party suppliers.

SIEM · EDR · Microsoft Defender +3

• Leeds
• Hybrid · 3 days in office
• £45,000 – £50,000 pa
• Mid-level
• Permanent

Support the development and operation of security controls, analyse threat intelligence, manage vulnerabilities and help with incident response across a global technology estate. Work with Azure and Microsoft security tooling such as Sentinel, Defender and Intune, alongside SIEM, EDR and firewalls, in a hybrid Leeds team.

Microsoft Azure · Microsoft Sentinel · Microsoft Defender for Endpoint +7

• Southampton
• Hybrid · 3 days in office
• £65,000 pa
• Mid-level

Operational security role monitoring alerts, investigating incidents and maintaining controls across on-prem, cloud and SaaS environments. You'll handle firewalls, VPNs, endpoint protection, vulnerability management and secure configuration, supporting audits, pen tests and NIST/NIS compliance alongside infrastructure and service delivery teams.

Microsoft Azure · Microsoft 365 · Entra ID +7

• Coventry
• Hybrid · 3 days in office
• £455 pm
• Senior
• Contract · Part time

Designs, implements and maintains enterprise network security across on-prem, cloud and hybrid environments, leading Zero Trust and segmentation initiatives. Hands-on with enterprise firewalls, Azure/AWS network security, VPNs and secure remote access, while collaborating with SOC teams on detection and response. Contract role with three days per week on-site in Coventry.

Palo Alto · Check Point · Cisco Firepower +7

• Ipswich
• Hybrid
• £55,000 – £65,000 pa
• Mid-level

Lead infrastructure modernisation, technology standardisation, cybersecurity improvements and acquisition integration across a growing multi-site organisation. Partner with senior stakeholders, operational teams and third-party MSPs to build a secure, resilient and scalable IT environment, with regular UK site travel.

Microsoft Azure · Microsoft 365 · SD-WAN

• Swansea
• Hybrid · 2 days in office
• £45,000 – £55,000 pa
• Mid-level

Hands-on role taking technical ownership of cyber security across a predominantly Microsoft environment, working with an infrastructure team and external SOC partners. Day to day involves assessing the estate for security gaps, hardening systems, operating Defender/XDR, EDR and Sentinel, managing Entra ID access controls, and responding to incidents and vulnerabilities.

Microsoft Sentinel · SIEM · SOC +3

• London
• Hybrid · 4 days in office
• £500 – £550 pd
• Senior
• Contract

Hands-on contract role managing a broad estate of security tooling across network, email, endpoint and web, plus red team platforms for forensics, threat monitoring and deception. Day to day involves patching, upgrades, policy tuning, troubleshooting, and deploying and integrating new tools, including vendor replacements such as a new web proxy and email gateway. Works within an IT Security team at a financial services organisation, supporting audit and risk activity alongside engineering projects.

Python · Bash · PowerShell +5

• London
• Hybrid · 2 days in office
• £115,000 – £125,000 pa
• Director

Own the information and cyber security agenda for an international organisation, defining strategy, policies and technical baselines across networks, cloud, identity and endpoints. A senior individual-contributor role without line management, working with infrastructure, technology and external providers to drive vulnerability management, monitoring, incident response and security architecture. Requires hands-on technical depth plus the ability to influence senior stakeholders.

Microsoft Azure · Microsoft 365 · Google Enterprise +3

• Cheltenham
• On-site
• £550 – £750 pd
• Senior
• Contract

An IdAM Architect role within a Security Architecture team, shaping enterprise identity and access capabilities across cloud transformation and service management convergence programmes. Day to day involves security architecture reviews, risk and vulnerability assessments, threat modelling, and designing identity solutions using SSO, MFA, IGA, PAM and federation standards. Works closely with solution architects, engineers and risk advisors to embed security by design.

Microsoft Entra ID · Azure AD · SailPoint +3

• London
• On-site
• £500 ph
• Senior
• Contract

A contract IdAM Architect role within a Security Architecture team, shaping enterprise identity and access capabilities across cloud transformation and service management convergence programmes. Day to day involves security architecture reviews, risk and vulnerability assessments, threat modelling, and designing identity solutions covering SSO, MFA, IGA, PAM and federation standards. Works closely with solution architects, engineering, risk advisors and business stakeholders to embed security by design.

Microsoft Entra ID · Azure AD · SailPoint +3