Cyber Security Jobs

CrowdStrike · Romania

Security researcher role on CrowdStrike Intelligence's Advanced Research Team, developing automated solutions for large-scale data collection, operating and extending honeypots, performing vulnerability research, and reproducing emerging vulnerabilities. The position also involves publishing research on the blog or at conferences and building GenAI/LLM workflows to support analysis and security research.

CrowdStrike · United States · US$120,000 – US$185,000 pa

Builds and operates core systems for the Falcon Complete team, developing features that help security analysts triage and remediate threats at scale. Work spans Golang, microservices, Kafka, Kubernetes and cloud observability, with on-call rotation and heavy asynchronous remote collaboration.

Darktrace · London

Customer-facing role combining technical depth and commercial awareness to drive adoption of AI cybersecurity products across DACH enterprise accounts. Partners with security and IT stakeholders on technical success plans, use-case activation, health monitoring and renewal readiness, working alongside Account Executives, Solutions Engineering and Renewals. Requires fluency in German and English.

Sophos · United Kingdom

Leads incident response engagements for customers hit by cyberattacks, directing a team of consultants, running kick-off and daily update calls, and delegating forensic tasks. Handles multiple ransomware and BEC investigations concurrently, performing root cause analysis and producing executive-summary reports mapped to MITRE ATT&CK.

Manufacturing Recruitment Ltd · Polegate · £70,000 – £80,000 pa

Designs and implements cloud-native security solutions on Microsoft Azure, applying Security as Code and automation tooling. Works with Security Architects to define cloud security strategy, establish guardrails for developers, and ensure compliance with GDPR, ISO 27001 and NIST. Involves AKS, DevSecOps, Defender, SIEM and scripting with BICEP, ARM, PowerShell and Python in an agile, hybrid team.

Experis · United Kingdom

Supports the delivery of security architecture and cyber security services across Defence and Government projects, including security assessments, risk analysis, threat identification and security documentation. Works alongside experienced Security Architects and technical specialists on areas such as Identity & Access Management, Security Testing, Privacy and Cloud Security, and requires SC Clearance.

Matchtech · London · £580 pd

Hands-on penetration testing and vulnerability assessments across infrastructure, networks and applications, producing technical reports and remediation recommendations. Works with technical and project teams on risk assessments and security assurance, aligning testing with industry standards. Short-term contract, fully remote, inside IR35.

Amazon · London

Builds and operates large-scale distributed systems that process security-relevant data with high availability and low latency, owning services end to end including architecture, deployment, monitoring and on-call. Works with very large datasets and cross-functional security, compliance and service teams, contributing to technical direction and mentoring engineers.

University of East Anglia · Norwich · £21,805 pa

A PhD project developing quantum-resilient security for connected and autonomous vehicular systems, investigating post-quantum cryptographic techniques for resource-constrained, real-time communication in 6G-enabled networks. The work combines system modelling, simulation and algorithmic implementation, focusing on trade-offs between security strength, computational overhead and latency, plus adaptive key management and optimisation for constrained platforms.

Amazon · London

Builds AI/ML-driven security automation systems that detect, analyse and respond to threats at Amazon scale, integrating automated detection into the company's security infrastructure. Works alongside security engineers and scientists on proactive, offensive and defensive tooling, researching and prototyping new approaches. Distinct for its focus on autonomous security across one of the world's largest tech ecosystems.

TrueWatch · Dublin, Ireland · £77,691 – £86,324 pa

Maintains reliability, availability and performance of cloud infrastructure, monitoring production environments and managing observability tooling for metrics, logs and alerts. Handles incident response, root cause analysis and post-incident reviews, while automating deployments with IaC and CI/CD and optimising AWS, Azure or GCP resources. Works with engineering and platform teams on scalability, security compliance and capacity planning.

JAM Recruitment · London · £700 – £750 pd

Day-to-day, you will manage and configure production databases, provide first to third-line support across full-stack applications, and administer Linux and Windows virtual machines with a focus on vulnerability management and hardening. The role also involves automation with Ansible, Docker containerisation, ETL processes and shared services such as identity brokers and observability platforms, within a national-security context requiring DV clearance.

Carbon 60 · Stevenage · £70 – £75 ph

Day-to-day BAU support, administration and configuration management across Windows infrastructure and workplace environments, including patching, change implementation and asset documentation. Acts as Tier 2/Tier 3 escalation for complex Windows issues, handling incident response, root cause analysis, monitoring, backups and security compliance. Requires active DV clearance and 100% onsite work in a highly secure, restricted environment.

TRIA · Sheffield · £500 – £600 pd

Lead the response to high-severity IT incidents across network, infrastructure, cloud and security environments, coordinating technical teams, suppliers and stakeholders to restore services within agreed targets. The role involves chairing incident and crisis calls, post-incident reviews, root cause analysis, ITIL processes, disaster recovery and business continuity planning, plus executive reporting and on-call duties.

DCV Technologies · Royal Leamington Spa · £550 – £650 pd

Hands-on contract role owning the end-to-end detection engineering lifecycle, translating threat intelligence, hunting findings and adversary techniques into effective detection rules. Builds behavioural analytics and detection content across endpoint, identity, cloud, network and email telemetry using KQL, SPL, Sigma, Python and PowerShell, with tuning, purple teaming and Detection-as-Code work alongside SOC, IR and Red Team specialists.