Cyber Security Jobs

Darktrace · Cambridge

Backend engineering role focused primarily on TypeScript, prototyping and building new features for AI-driven cybersecurity products. You'll work with a cross-functional team of engineers, designers and strategists, using Docker and cloud environments, with opportunities to specialise across languages like Python, Rust and C++. Hybrid, requiring at least two days a week in the Cambridge office.

Darktrace · Cambridge

Owns prototyping and development of new ideas to improve Darktrace's cybersecurity services, balancing creativity with time constraints. Collaborates with a cross-functional team of engineers, designers and technical strategists on rapid prototyping and structured platform development, advancing methods for defending against unknown cyber-attacks. Requires production-quality Python coding, with Docker and containerisation experience and an interest in malware forensics.

CrowdStrike · Romania

Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats. Builds dashboards, reports and data pipelines using SQL, Python, Logscale and graph databases, partnering with product and data engineering teams to turn raw security data into actionable insights and KPIs.

CrowdStrike · Spain

Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats, and builds dashboards and reporting workflows using SQL, Python and Logscale. Works cross-functionally with product and data engineering teams to turn raw security data into actionable insights and KPIs for the Office of Adversary Strategy.

Palo Alto Networks · London

Lead and deliver reactive incident response engagements for clients, managing scoping, forensic investigations and containment of security incidents. Perform host-based analysis across Windows, Linux and macOS, examine firewall, web and database logs, and use tools such as EnCase, FTK, X-Ways, SIFT and Splunk to determine breach scope. Also mentors junior team members and provides remediation guidance to customers.

Palo Alto Networks · United Kingdom

Provide dedicated technical support for Prisma Cloud, handling user-reported issues within SLAs via ticketing, phone and remote sessions. Triage and troubleshoot complex application and OS-level problems across Kubernetes, Docker, Linux and public cloud platforms, performing root cause analysis and coordinating fixes with engineering and product teams. Requires UK security clearance eligibility and strong scripting and networking knowledge.

Identify Solutions · Swansea · £45,000 – £55,000 pa

Hands-on role taking technical ownership of cyber security across a predominantly Microsoft environment, working with an infrastructure team and external SOC partners. Day to day involves assessing the estate for security gaps, hardening systems, operating Defender/XDR, EDR and Sentinel, managing Entra ID access controls, and responding to incidents and vulnerabilities.

Yolk Recruitment · Cardiff · £62,000 – £72,000 pa

Hands-on security engineering role focused on building and improving controls across a Microsoft-centric estate, including Defender, Sentinel, Azure and Entra ID. Involves vulnerability management, data protection with Purview, incident response support and embedding security into projects, with influence over strategy rather than pure SOC operations.

Immersive · United Kingdom

Designs, writes and peer-reviews hands-on GRC labs, challenges and gamified learning content on the Immersive One platform, researching standards such as NIST, ISO 27001 and MITRE ATLAS/D3FEND to build realistic simulations of incidents in regulated sectors. Acts as GRC subject matter expert for engineering and product teams, embedding security and privacy by design into the SDLC.

Morson Edge · Warrington · £85 ph

Assess technical security controls and cyber risk across complex OT and Cloud environments, working with technical teams, architects and risk owners. The role centres on NCSC CAF, Cyber Essentials Plus, ISO 27001/27005 and NIST frameworks, covering third-party assurance and internal/external audits. It is a 12-month contract requiring one day a week travel to the North West.

Yolk Recruitment · Cardiff · £62,000 – £72,000 pa

Hands-on security engineering role within an established Cyber Resilience function, strengthening security operations across a complex technology estate. Day to day covers Microsoft Defender and Sentinel, Azure and Entra ID security, vulnerability management, Purview data protection and threat detection, plus security input into projects and architecture. Also acts as a security SME to technical and non-technical stakeholders.

Ashdown Group · Northampton · £65,000 – £80,000 pa

Standalone security role maintaining and enhancing controls across identity, endpoint, cloud and application in enterprise environments. Hands-on work spans IAM, MFA, privileged access, zero-trust, Windows endpoint management, EDR, cloud security monitoring, vulnerability assessment and incident investigation, with frameworks such as ISO 27001 or NIST CSF. Hybrid, around three days a week in an office on the outskirts of Northampton.

ARCHER RESOURCING LTD · Aberdeen · £55,000 – £80,000 pa

Lead cyber security, information assurance and governance across a Group covering corporate IT, OT, cloud and commercial software products. Own the security roadmap with the CIO, maintain policies and the cyber risk register, run incident response with an external SOC, and drive ISO 27001, Cyber Essentials Plus, SOC 2, NIST CSF and IEC 62443 compliance. Also embeds security into the SDLC and reviews customer-facing product architecture.

Seetec · Hockley · £70,000 – £75,000 pa

Lead the organisation's cyber security strategy, governance, assurance and operational security, owning the roadmap, vulnerability management and compliance. Provide hands-on technical leadership across Microsoft Sentinel, Defender, Huntress, Tenable, identity and cloud security, and incident response, while line-managing a Cyber Security Engineer and advising senior stakeholders.

Harvey Nash · Newport

Design and review security architectures across cloud, on-premises and hybrid environments, assessing technical risks and advising teams on networking, identity management, authentication and cryptography. The role champions Secure by Design and supports governance, compliance and assurance, working closely with senior security leaders to embed best practice.