Cyber Security Jobs

• USA, DC
• Remote
• £140,000 – £215,000 pa
• Senior · manages people
• Permanent

Lead a team of engineers building the foundational platform behind CrowdStrike's massive-scale distributed systems, including self-service infrastructure-as-code primitives and multi-cloud services. The role blends people management with hands-on architecture work, driving cloud cost optimization, deployment standards, and SRE practices across AWS and GCP.

Chef · Puppet · Salt +7

• London
• Hybrid
• Senior

Builds and maintains a high-performance, fault-tolerant production backbone network across multiple cloud providers, spanning IP and optical/DWDM technologies connecting data centers and edge sites. Owns improvement initiatives end to end, drives capacity planning and network automation with Python, Ansible and CI/CD pipelines, and participates in a 24x7 on-call rotation.

AWS · GCP · OCI +7

• Cardiff
• Remote
• £62,000 – £72,000 pa
• Mid-level

Hands-on security engineering role focused on building and improving controls across a Microsoft-centric estate, including Defender, Sentinel, Azure and Entra ID. Involves vulnerability management, data protection with Purview, incident response support and embedding security into projects, with influence over strategy rather than pure SOC operations.

Microsoft Defender · Microsoft Sentinel · Azure +2

• Birmingham
• Hybrid
• £35,000 – £50,000 pa
• Senior

A newly created role at the heart of service delivery for a growing managed services team, focused on improving automation, security, monitoring, patch management and endpoint management across a diverse customer base. The engineer leads development of service standards and tooling, builds PowerShell and API automation, manages RMM platforms, and acts as senior escalation point for infrastructure, endpoint, security, networking and backup issues, working closely with projects, support and service delivery teams.

Microsoft 365 · Windows Server · Entra ID +6

• Cambridge
• On-site
• Mid-level
• Permanent

Consultants assess critical systems for cyber-physical vulnerabilities, combining deep hardware research, testing and reverse engineering with rapid prototyping of proof-of-concept demonstrators. Work spans niche defence and national security projects, interfacing with hardware via protocols like JTAG and UART and using test equipment such as oscilloscopes. The role is fully on-site in Cambridge labs within a flat, collaborative ~40-person consultancy.

JTAG · UART · Oscilloscopes

• Hessle
• Hybrid
• £35,000 – £45,000 pa
• Mid-level
• Permanent

Hands-on security operations role covering alert triage, incident response and root-cause analysis, plus tuning SIEM, EDR/XDR and monitoring tooling to cut false positives. You will drive automation and security improvement projects while liaising with a managed SOC and internal infrastructure, cloud and application teams.

Microsoft Sentinel · Microsoft Defender XDR · CrowdStrike +7

• Prudhoe
• Hybrid
• £35,000 – £45,000 pa
• Permanent

Hands-on security operations role covering alert triage, incident response and root-cause analysis, alongside tuning SIEM, EDR/XDR and monitoring tooling to improve detection and cut false positives. You will also drive security automation, deliver improvement projects and act as liaison with a managed SOC and internal infrastructure, cloud and application teams.

Microsoft Sentinel · Microsoft Defender XDR · CrowdStrike +6

• London
• Hybrid
• £57,000 – £67,000 pa
• Mid-level
• Permanent

Hands-on role implementing and maintaining technical security controls across endpoints, networks, servers, cloud and clinical systems. Involves vulnerability scanning and remediation, security monitoring and incident response, plus IAM, MFA and logging work in a Microsoft-centric estate, collaborating with a wider group cybersecurity function in a regulated environment.

Microsoft Defender · Microsoft 365 · Microsoft Entra +6

• Staffordshire
• Hybrid · 2 days in office
• £50,000 – £55,000 pa
• Senior
• Permanent

Hands-on role taking technical ownership of Microsoft cloud environments, initially strengthening internal systems before moving into customer consultancy, solution design and pre-sales. Day to day covers Microsoft 365, Azure, Entra ID, Intune and SharePoint, plus security and governance work such as vulnerability scanning, remediation and Cyber Essentials compliance. Automation via Power Automate and acting as escalation point for complex cloud issues are also central.

Microsoft 365 · Azure · Entra ID +6

• Farnborough
• Hybrid · 2 days in office
• £70,000 – £80,000 pa
• Senior
• Permanent

Hands-on detection engineering role designing, testing and deploying detection content across Microsoft Sentinel and Splunk, writing KQL and SPL logic, tuning alerts to cut false positives and onboarding log sources from cloud, identity and network telemetry. Works closely with SOC, Threat Intelligence and Security Architecture teams in a live SOC environment.

Microsoft Sentinel · Splunk · Logic Apps +2

• United Kingdom
• Hybrid
• Mid-level

Joins the Information Security Service Delivery team to assess, design, configure and integrate security technology controls, acting as a technical escalation point for security concepts. Works hands-on with Zscaler, Okta, Crowdstrike, cloud and endpoint security, threat modelling and security architecture frameworks, ensuring designs meet policies and regulatory requirements.

Zscaler · Okta · CrowdStrike +5

• London
• Remote
• £100,000 – £115,000 pa
• Lead · manages people

Lead a team of three platform engineers while spending roughly half your time hands-on, owning the reliability, security and scalability of an Azure-based cloud platform. You'll set the platform roadmap, champion Terraform and Kubernetes/Azure Container Apps, and improve CI/CD with Azure DevOps and GitHub Actions. Fully remote in the UK with one day per month in London.

Azure · Terraform · Kubernetes +3

• Virtual Location - Uk
• Senior
• Permanent

Leads complex security testing engagements end-to-end across interconnected AWS microservice architectures, performing penetration testing and AI-augmented source code review. Investigates high-consequence risk hypotheses to documented conclusions, builds reusable mechanisms like fuzzers and detection rules, and mentors engineers while setting the team's peer-review bar.

AWS · Agentic AI

• Fleet
• Hybrid
• Mid-level

Owns day-to-day security alerting, investigations and incident response across a cloud-native microservice platform and internal IT estate, directing a Platform Ops team on remediation. Manages SIEM, endpoint and Microsoft 365 security tooling, vulnerability management, IAM and penetration testing engagements, while maintaining ISO 27001 documentation and UK GDPR compliance.

AWS · Kubernetes · EKS +5

• London
• On-site
• Junior
• Permanent

Day-to-day management of a bank's IT infrastructure, covering server room operations, VMware virtualisation, network and storage administration, backup, disaster recovery and IT security compliance, plus Tier 2 support. Works alongside the IT Infrastructure Manager, liaising with the parent bank and data centre, and requires fluent Mandarin and English.

VMware · vSphere · ESXi +7