Cyber Security Jobs

• United Kingdom
• Remote
• Mid-level

Lead incident response engagements, hunting adversaries across large data sets and conducting intrusion investigations under outside counsel. Perform host, network and cloud forensics across Windows, Mac and Linux, plus basic malware analysis, and deliver findings to executives, regulators and legal teams.

CrowdStrike · Zeek · Suricata +6

• United Kingdom
• Remote
• Lead

Serve as technical lead on front-page incident response engagements for Fortune 100 organisations, conducting intrusion investigations under outside counsel and performing host and network forensics across Windows, Mac and Linux. The role also involves hunting threat actors in large datasets, cloud IR in AWS, Azure or GCP, and communicating findings to executives, regulators and legal teams.

CrowdStrike · AWS · Azure +6

• Chessington
• Hybrid
• Director · manages people
• Permanent

Lead the IT function across a multi-site FMCG business, assessing the existing technology estate and transitioning away from services provided by the former parent group. Own infrastructure, cloud, enterprise applications (notably D365 Business Central), cybersecurity governance and supplier relationships, while building a roadmap and developing the IT team.

Microsoft Dynamics 365 Business Central · Azure · Microsoft 365 +3

• Birmingham
• Hybrid · 3 days in office
• £80,000 – £87,000 pa
• Lead
• Permanent

Acts as the University's authority for security architecture and protective controls, running a continuous control validation programme using breach and attack simulation, purple teaming and posture monitoring. Owns control standards and baselines, governs exceptions and drives remediation, and serves as design authority embedding secure-by-design and threat modelling into major technology change across zero trust, multi-cloud and AI.

Azure · AWS · GCP +5

• Bristol
• Hybrid · 3 days in office
• £50,000 – £60,000 pa
• Senior

Hands-on senior role taking operational ownership of a corporate IT estate, managing cloud services, Microsoft 365, Entra ID, networking, endpoint security and automation. Involves leading complex incident resolution, patching, backups and business continuity while mentoring colleagues and working with suppliers alongside the IT Technical Lead.

Microsoft 365 · Entra ID · Intune +7

• Cardiff
• Hybrid
• £40,000 – £45,000 pa
• Mid-level

Client-facing technical role in a Microsoft-focused security partner's Cyber Security Delivery Team, acting as a trusted point of contact for customers. Day to day involves tuning Defender and Entra controls, building KQL detections in Microsoft Sentinel, running phishing simulations and vulnerability scans, and supporting incident response and reporting.

Microsoft Defender XDR · Microsoft Entra · Defender for Cloud Apps +7

• United Kingdom
• Remote
• £65,000 – £75,000 pa
• Mid-level
• Permanent

A security engineering role focused on detection and automation within a CSOC, building SOAR playbooks and SIEM content to improve threat detection and response. The position involves tuning and enriching alerts across security tools, developing automations with Azure Functions and Logic Apps, and using KQL, Python and PowerShell. It is primarily remote with occasional visits to a Midlands head office.

Azure · AWS · Microsoft 365 +1

• London
• Hybrid
• £70,000 – £75,000 pa
• Senior
• Permanent

This role involves leading information security governance, risk management, and compliance activities within a multinational organisation. The Information Security Manager will drive security risk assessments, audit programmes, and regulatory certification efforts including ISO 27001, PCI DSS, and NIS2. With a focus on cloud security governance, the role requires strong engagement with senior stakeholders and expertise in securing AWS and Azure environments.

• Newcastle upon Tyne
• Senior

Lead and deliver infrastructure, web application and cloud penetration testing engagements, plus Cyber Essentials Plus assessments and technical security reviews. As one of the practice's early senior hires, you will shape methodologies, assure report quality, mentor junior consultants and support pre-sales for a growing national cyber security consultancy.

Nessus · Qualys · OpenVAS +5

• Devon
• £600 pd
• Mid-level
• Contract

Hands-on operational support for identity and access management in a busy Higher Education IT team, covering Active Directory and Microsoft Entra ID. Day-to-day work includes user lifecycle management, group memberships and permissions, troubleshooting identity incidents, and cloud authentication administration, freeing senior specialists for project delivery.

Active Directory · Microsoft Entra ID · Azure AD +2

• Cambridge
• Hybrid · 2 days in office
• Senior

Conducts independent and collaborative research into large language models, statistical methods and classical machine learning, prototyping ideas and implementing models into the wider software stack. Produces latency- and memory-optimised solutions for deployment on edge devices, working closely with software engineers and security analysts.

PyTorch · TensorFlow · scikit-learn +7

• Nottingham
• Hybrid
• £72,277 – £86,060 pa
• Senior
• Permanent

Owns cyber security compliance across PCI-DSS, the Smart Energy Code, Retail Energy Code and ITGC, managing external audits end-to-end. Leads protective monitoring with SOC/CERT and managed service providers, vulnerability management and penetration testing, and incident response up to Board level. Also mentors junior colleagues and supports DevSecOps teams with threat assessments and IaC reviews.

Splunk · Microsoft Sentinel · Qualys +7

• London
• On-site
• £30,000 – £45,000 pa
• Mid-level

Hands-on SOC role monitoring and triaging SIEM, EDR and cloud alerts, investigating incidents and supporting containment and response. Also provides second-line support across Azure, AWS, identity, network and endpoint environments, with occasional on-call and shift handovers. Requires SC clearance eligibility and is majority onsite in Manchester or London.

Microsoft Sentinel · ELK Stack · Azure +7

• Hatfield
• £50,000 – £60,000 pa
• Mid-level

Hands-on IT Manager role owning the IT function across multiple UK sites for a growing engineering business. Day to day you maintain the Microsoft environment, support ERP systems and SQL Server databases, automate manual processes, manage external suppliers and the IT budget, and ensure security, backup and disaster recovery. Considerable autonomy to shape IT strategy and develop in-house solutions.

Microsoft SQL Server · Microsoft 365 · Azure +2

• Bampton
• On-site
• £70,000 – £83,000 pa
• Senior
• Permanent

Lead the strategy, architecture and continuous improvement of a global data-security and Data Loss Prevention programme, defining it from the ground up. The role covers design, build, implementation and training, tuning DLP controls across endpoint, email, web, cloud and SaaS channels in a Microsoft 365, Entra ID and Azure environment. Based on-site five days a week in Oxfordshire.

Microsoft 365 · Entra ID · Windows Server +6