Cyber Security Jobs

• United Kingdom - Field (Onfido)
• Senior

Customer-facing role leading enterprise onboarding and implementation of identity and security solutions, guiding customer engineering teams through design, integration, testing and go-live. Involves hands-on troubleshooting of REST APIs, mobile and web SDKs, log and API traffic analysis, and advising on performance, scalability and security. Requires independently managing multiple concurrent engagements and mentoring junior team members.

REST APIs · Android Studio · Xcode +7

• London
• Hybrid · 3 days in office
• Senior
• Permanent

Owns a core area of the document verification platform, setting strategy and roadmap for identity document checks used in onboarding and account opening. Works with Engineering, AI/ML, Data Science, Design, Growth and Compliance to improve verification accuracy, conversion, operational efficiency and fraud prevention, using experimentation and analytics to prioritise investments.

NFC · eIDs · Digital Wallets

• United Kingdom
• Remote
• Senior · manages people

Leads incident response engagements for customers hit by cyberattacks, directing a team of consultants, running kick-off and daily update calls, and delegating forensic tasks. Handles multiple ransomware and BEC investigations concurrently, performing root cause analysis and producing executive-summary reports mapped to MITRE ATT&CK.

Splunk · ELK · Sophos

• Redmond, United States
• Hybrid · 2 days in office
• US$140,000 – US$220,000 pa
• Senior

Owns the product strategy for CrowdStrike Falcon Privileged Access, driving just-in-time access, secrets management, and isolated session brokering across endpoint, cloud, and infrastructure. Works with design and engineering to build frictionless, AI-native PAM experiences that eliminate standing privileges and integrate privileged context with Falcon telemetry.

CrowdStrike Falcon · CyberArk · BeyondTrust +7

• New York, United States
• Hybrid · 2 days in office
• US$140,000 – US$220,000 pa
• Senior

Owns the product strategy for CrowdStrike's Falcon Privileged Access, driving just-in-time access, secrets management and session brokering across endpoint, cloud and infrastructure. Works with design and other product teams to embed privileged context into the Falcon platform, using AI agents for research, specs and customer synthesis.

CrowdStrike Falcon · CyberArk · BeyondTrust +7

• London
• On-site
• Senior

Design and build software to solve Workload Identity challenges, from prototyping to production, covering both client and server. Work across networking, security, cloud, Kubernetes, encryption, PKI, JWT and SPIFFE, with Golang development, while mentoring a close-knit team and engaging internal and external stakeholders on technical trade-offs.

Kubernetes · Windows API · SPIFFE +2

• Edinburgh
• £400 – £450 pd
• Senior

Designs end-to-end AI, ML and data architectures on Google Cloud Platform, covering Generative AI, RAG, agentic AI and LLMOps. Works with engineering, data science and security teams to translate business needs into secure, compliant cloud-native solutions, and leads architecture governance through review committees.

GCP · BigQuery · Cloud Run +7

• Sheffield
• Hybrid · 3 days in office
• £450 – £465 pd
• Lead
• Contract

Senior cybersecurity partner for Global Finance & Technology domains at a global financial institution, owning the domain risk register and embedding security-by-design into change delivery and solution designs. Strengthens in-service posture across IAM/PAM, vulnerability management, logging and SaaS risk, and leads control governance and audit readiness. Hybrid role in Sheffield, three days a week in the office.

SaaS

• London
• £60,000 – £65,000 pa
• Mid-level

Day-to-day management of cloud and on-premises infrastructure, covering Azure, Microsoft 365, Active Directory, Intune, SCCM and VMware, alongside security monitoring with SIEM, EDR and Microsoft Defender. The role also involves PowerShell automation, vulnerability and patch management, disaster recovery planning and supplier oversight, with scope to deputise for the IT Operations & Security Manager.

Microsoft Azure · Microsoft 365 · Active Directory +7

• Sheffield
• £55,000 – £60,000 pa
• Senior

Senior escalation point for complex technical issues, leading infrastructure and cloud project delivery for clients and internal systems. Runs discovery workshops, produces designs and statements of work, and acts as technical lead on Priority 1 incidents, while mentoring engineers and setting technical standards.

Microsoft 365 · Azure · Entra ID +7

• Reading
• £86,000 – £87,000 pa
• Lead

Develops and implements automated control testing and continuous monitoring across IT, OT and business functions, identifying automation opportunities and improving control testing processes. Builds automation workflows using Python, PowerShell, RPA or audit automation tools, reviews results, escalates control deficiencies and maintains documentation. Works with technical teams, control owners and stakeholders to support risk, compliance and cybersecurity objectives.

Python · PowerShell · RPA +6

• Leeds
• Hybrid · 3 days in office
• £45,000 – £50,000 pa
• Mid-level
• Permanent

Support the development and operation of security controls, analyse threat intelligence, manage vulnerabilities and help with incident response across a global technology estate. Work with Azure and Microsoft security tooling such as Sentinel, Defender and Intune, alongside SIEM, EDR and firewalls, in a hybrid Leeds team.

Microsoft Azure · Microsoft Sentinel · Microsoft Defender for Endpoint +7

• London
• Hybrid
• £70,000 – £75,000 pa
• Mid-level
• Permanent

Hands-on role blending DevOps, cloud and security across AWS and Azure environments, embedding controls into CI/CD and Infrastructure as Code. You'll improve IAM, monitoring and vulnerability management while supporting client migrations and the company's push towards SOC 2 compliance, working alongside Platform/DevOps and Compliance teams.

AWS · Azure · GuardDuty +7

• Polegate
• Hybrid · 1 day in office
• £70,000 – £80,000 pa
• Mid-level

Designs and implements cloud-native security solutions on Microsoft Azure, applying Security as Code and automation tooling. Works with Security Architects to define cloud security strategy, establish guardrails for developers, and ensure compliance with GDPR, ISO 27001 and NIST. Involves AKS, DevSecOps, Defender, SIEM and scripting with BICEP, ARM, PowerShell and Python in an agile, hybrid team.

Azure Kubernetes Service · Microsoft Defender · SIEM +8

• London
• Hybrid · 2–3 days in office
• £50,000 – £75,000 pa
• Mid-level

Client-facing security role within a UK consultancy's growing Security Architecture practice, supporting government, defence and critical infrastructure programmes. Day to day involves threat modelling, risk assessment, reviewing solution and infrastructure designs, defining security requirements and controls, and running client workshops. Suits security engineers or consultants wanting to move into architecture, with occasional client site visits rather than frequent travel.

NIST · SABSA · TOGAF +5