Cyber Security Jobs

• London
• Lead

Owns product strategy, roadmap and commercial model for a new publicly trusted certificate authority, spanning ACME issuance, certificate lifecycle automation, revocation and Certificate Transparency. Works across engineering, compliance, legal and go-to-market on high-consequence infrastructure, with an ACME-first, automation-first and post-quantum-ready design.

AWS Certificate Manager · AWS Private CA · Google Trust Services +7

• London
• Hybrid
• Senior · manages people
• Permanent

Client-facing consulting role helping complex organisations assess cyber risk and turn priorities into transformation roadmaps. You'll lead multidisciplinary teams across strategy, governance, risk and operating model engagements, working with frameworks such as NIST CSF, ISO 27001, NCSC CAF, CRI and NIS2 alongside CISO and CIO-level stakeholders.

NIST CSF · ISO 27001 · NCSC CAF +2

• London
• Hybrid
• Senior
• Permanent

Join Bridewell, a leading UK cyber security services company, as a Senior Security Architect. You will protect and transform critical business functions for essential service operators, delivering end-to-end security capabilities to help clients overcome their security challenges and operate safely and securely.

• London
• Hybrid
• Lead · manages people
• Permanent

Lead and deliver OT cyber security consulting for critical national infrastructure clients, combining hands-on client-facing work with team leadership. You will build senior internal and external relationships, ensure high-quality delivery, identify new opportunities and shape service-based solutions to drive revenue growth across your service areas.

• London
• €66,000 – €91,000 pa
• Senior

Builds and operates microservices behind Cloudflare's Application Security products such as Rate Limiting and Web Application Firewall, working mainly in Rust and Go with Docker, Kubernetes, PostgreSQL, Kafka and Clickhouse. Senior engineers lead complex projects from design through production, mentor peers, and improve reliability of distributed systems at global scale, with on-call flexibility required.

Rust · Go · C++ +7

• Manchester
• Hybrid · 3 days in office
• £54,000 – £55,000 pa
• Senior

Day-to-day operation of a SIEM platform, including monitoring, administration and optimisation, plus developing detection rules and investigating alerts through to resolution. Works with Infrastructure, Networking, DevOps and external partners on incident response, EDR management and control testing, with Google SecOps (Chronicle) experience advantageous.

Google SecOps · Chronicle · SIEM +4

• London
• Hybrid · 3 days in office
• £100,000 – £110,000 pa
• Mid-level · manages people

Leads a security operations function within a professional services firm, providing technical leadership across incident response, detection engineering and vulnerability management. Works with infrastructure, risk and third-party SOC providers, managing outsourced security suppliers and embedding security into technology projects. Hybrid role, three days a week in the City of London office.

Microsoft Azure · Entra ID · SIEM +1

• London
• Hybrid · 2–3 days in office
• £90,000 – £100,000 pa
• Senior

Owns and matures security operations across cloud, endpoint and SaaS environments, covering detection engineering, incident response, vulnerability management and AWS/GCP security posture. Over time shifts toward security engineering and architecture, designing scalable telemetry and detection platforms and embedding secure-by-design principles with engineering teams.

AWS · GCP · SIEM +7

• Manchester
• Hybrid · 1 day in office
• £750 – £900 pd
• Director · manages people
• Contract

Lead and mature a global manufacturer's cyber security function, owning strategy, security operations, incident response, vulnerability management and cyber risk programmes. The role involves influencing board-level stakeholders and managing third-party security providers across Microsoft Azure, Microsoft 365 and Microsoft Security environments, with one day per week on-site in Manchester.

Azure · Microsoft 365 · Microsoft Security

• Farnborough
• Hybrid · 2 days in office
• £75,000 – £85,000 pa
• Senior

Senior technical authority owning security architecture across SOC platforms, integrations and services, including HLDs, LLDs, controls and testing requirements. Shapes detection strategies, rules and use cases, provides architectural governance, and supports SOC maturity, assurance and accreditation (CREST) while exploring automation and AI. Works with engineers, analysts and stakeholders in Defence and National Security environments.

CREST

• Stevenage
• On-site
• £90 – £100 ph
• Mid-level
• Contract

Hands-on security engineering role within a defence organisation's growing Cyber Security Operations function. Day to day involves managing and optimising SIEM and threat detection platforms, building automation and security playbooks, onboarding logs and data, and investigating events to improve detection coverage. Works closely with analysts and engineers on platform upgrades and lifecycle activities in a highly secure environment.

Microsoft Sentinel · Splunk · QRadar +2

• Solihull
• Hybrid · 3 days in office
• £80,000 – £100,000 pa
• Lead · manages people

Leads physical security, secure data centre operations, personnel security and facilities management across a security-sensitive estate, heading a small team of security and estates professionals. Involves security design, access control, risk assessments, incident investigations, contractor and building project oversight, plus occasional out-of-hours incident response. Requires DV clearance or eligibility and at least three days per week on site.

• London
• Permanent

Join a Security Operations Centre to build detections for suspicious and malicious behaviour, respond to security incidents, and engineer automation and AI-driven solutions that improve team efficiency. You'll collaborate with data scientists, software engineers and security experts to protect AWS infrastructure and UK customers at massive scale.

AWS

• Redhill
• On-site
• £50,000 – £52,500 pa
• Mid-level
• Permanent

Hands-on security engineering role owning security operations, defining standards and responding to incidents across internal and customer networks. Involves monitoring threat intelligence, vulnerability assessments, and building SIEM and IDS/IPS solutions, with Cisco networking and compliance work (ISO27001, GDPR). Requires SC clearance eligibility and at least five years in secure network environments.

Cisco · Juniper · Linux +7

• Bracknell
• On-site
• £599 – £600 pd
• Mid-level · manages people
• Contract · Shift work

Overseeing Security Operators on a 24/7 shift team, performing initial threat investigations with SIEM tools, monitoring for faults and anomalies, and managing incidents by identifying, prioritising and escalating threats. Requires technical leadership and enterprise IT knowledge in networking and servers, with active DV clearance.

SIEM