Cyber Security Jobs

• Birmingham
• Hybrid · 3 days in office
• £80,000 – £87,000 pa
• Lead
• Permanent

Acts as the University's authority for security architecture and protective controls, running a continuous control validation programme using breach and attack simulation, purple teaming and posture monitoring. Owns control standards and baselines, governs exceptions and drives remediation, and serves as design authority embedding secure-by-design and threat modelling into major technology change across zero trust, multi-cloud and AI.

Azure · AWS · GCP +5

• Birmingham
• Hybrid · 3 days in office
• £80,000 – £87,000 pa
• Lead
• Permanent

Acts as the University's authority for security architecture and protective controls, running a continuous control validation programme using breach and attack simulation, purple teaming and posture monitoring. Owns control standards and baselines, governs exceptions and drives remediation, and acts as design authority embedding secure-by-design and threat modelling into major technology change across cloud, identity and AI.

Azure · AWS · GCP +5

• Ireland
• Hybrid · 3 days in office
• £600 – £700 pd
• Senior
• Contract

Lead the design of an enterprise third-site disaster recovery capability, assessing existing backup and resilience, defining RTO/RPO requirements and producing HLDs and LLDs. The role covers backup, replication, immutable storage and cyber recovery across VMware, Windows, Linux and Kubernetes/OpenShift, with technical workshops and architectural governance.

VMware · Active Directory · SQL Server +5

• Reading
• Hybrid · 2 days in office
• £500 – £600 pd
• Contract

Owns the end-to-end major incident lifecycle in a complex, multi-supplier enterprise IT environment, coordinating technical teams, suppliers and business stakeholders to restore services quickly. Drives root-cause investigations, post-incident reviews and continual service improvement, using ITIL 4 and ServiceNow. Requires active SC clearance and sole British, Italian or Japanese citizenship.

ServiceNow

• London
• Mid-level

Own the full software development lifecycle for distributed systems supporting threat disruption and legal response, building data pipelines that collect and expose threat intelligence for analysts and customers. Work primarily in Golang and TypeScript with Rust, Kafka, Redis, Kubernetes, Terraform and Postgres, collaborating with Threat Intelligence, Trust & Safety, Legal and Product teams, plus on-call rotations and mentoring.

Golang · TypeScript · Rust +7

• London
• Hybrid
• Mid-level

Builds new features and systems for Cloudflare's edge web server, focusing on the rules engine and its control plane. Works in Rust and Go on large-scale distributed systems, performance engineering, and reliability across a platform handling over 100 million HTTP requests per second.

Rust · Go · Cloudflare

• London
• On-site
• Lead · manages people
• Permanent

Lead product cybersecurity assurance across the HMND 01 humanoid robot platforms, defining security requirements, threat modelling and risk artefacts for safety-critical electromechanical systems. Own TARA, security management plans and remediation actions, drive compliance with IEC 62443, the EU Machinery Regulation and the Cyber Resilience Act, and build a PSIRT process while guiding a cross-functional security team.

CAN bus · Ethernet · KinetIQ +4

• London
• Hybrid
• Mid-level
• Permanent

Delivers cyber security consulting projects for UK clients, focusing on NCSC Cyber Assessment Framework assessments, ISMS development and ISO 27001 certification. Works within a consulting team alongside Senior and Principal Consultants, writing detailed reports and supporting business development through blogs, marketing material and tenders.

• London
• Hybrid
• Senior
• Permanent

Deliver complex cyber security projects for critical national infrastructure clients, acting as a client-facing consultant who articulates and sells Bridewell's propositions to senior stakeholders. Requires broad security expertise and relationship management at a senior level.

• Birmingham
• Hybrid
• £35,000 – £50,000 pa
• Senior

A newly created role at the heart of service delivery for a growing managed services team, focused on improving automation, security, monitoring, patch management and endpoint management across a diverse customer base. The engineer leads development of service standards and tooling, builds PowerShell and API automation, manages RMM platforms, and acts as senior escalation point for infrastructure, endpoint, security, networking and backup issues, working closely with projects, support and service delivery teams.

Microsoft 365 · Windows Server · Entra ID +6

• Knutsford
• Senior · manages people

Hands-on engineering role safeguarding encryption keys and cryptographic services across 300+ enterprise platforms, working extensively with Thales and Entrust HSMs. Involves key management, certificate management, production support, and on-call rotation, with occasional off-site data centre work.

Thales · Entrust · SharePoint +5

• Cambridge
• On-site
• Mid-level
• Permanent

Consultants assess critical systems for vulnerabilities, building proof-of-concept demonstrators that combine software, hardware and user interaction. The role spans reverse engineering, low-level programming and rapid prototyping for UK defence and national security clients, working on-site alongside around 40 scientists and engineers.

• London
• Mid-level
• Permanent

Detect and mitigate invalid traffic and ad fraud across Amazon's advertising network by reverse-engineering malware, inspecting network traffic and hunting threats, including on the dark web. The role blends security engineering, botnet mitigation and intelligence sharing with teams across Amazon, requiring creativity and judgement in a highly ambiguous fraud landscape.

• Birmingham
• Remote
• £90,000 – £95,000 pa
• Lead · manages people

Hands-on lead role split roughly 60/40 between Azure security engineering and SOC leadership, owning Sentinel, KQL detection engineering and incident response while mentoring three analysts. Involves DevSecOps tooling, IaC hardening of AKS and supply chain security across a large multi-tenant SaaS platform.

Microsoft Azure · Microsoft Sentinel · Microsoft Defender for Cloud +7

• London
• Mid-level
• Permanent

Respond to security incidents across AWS cloud services, triaging issues and driving internal teams to timely remediation while balancing technical and business risk. Build internal automation tools and utilities, mentor junior staff, and share on-call responsibilities. Works within AWS Cloud Response, coordinating multi-team responses and publishing guidance for customer-impacting issues.

AWS