Cyber Security Jobs

• Romania
• Remote
• Senior

Join the Advanced Research Team to perform vulnerability research across a wide range of targets, including analyzing vendor patches, developing proof-of-concept exploits, and confirming exploitation of 0-day and n-day vulnerabilities. The role also involves building automated solutions for collecting and processing data at scale, reverse engineering, and publishing research on the CrowdStrike blog or at conferences.

CrowdStrike · Windows · Linux +5

• United Kingdom
• Remote
• Senior

Joins the Advanced Research Team to perform vulnerability research and exploit development, analysing vendor patches to find vulnerabilities and building proof-of-concept exploits. Also develops automated tooling for large-scale data collection and analysis, and investigates evidence of 0-day and n-day exploitation. Publishes research on the blog or at conferences and supports other intelligence teams with ad-hoc technical work.

CrowdStrike · Windows · Linux +5

• London
• Remote
• Senior

Deliver expert-level technical support to top-tier cybersecurity customers, owning complex cases from initiation to resolution through multi-vendor troubleshooting, fault isolation and root cause analysis. Act as a designated customer advocate running weekly reviews, QBRs and upgrade planning, while working with Engineering and QA on bug reports and test plans.

Palo Alto Networks · Prisma Access · Cisco Firepower +7

• London
• Mid-level
• Permanent

Hands-on security engineering role securing production AI systems deployed inside enterprise customer environments. You conduct design and code reviews, threat modeling and penetration testing for agentic workflows and RAG pipelines, and build security automation such as scanning tools, CI/CD gates and guardrail testing scripts. Work alongside FDE delivery pods, with up to 25% travel.

AWS · Amazon Bedrock · RAG +1

• London
• Remote
• Lead

Lead and deliver reactive incident response engagements for clients, managing scoping, forensic investigations and containment of security incidents. Perform host-based analysis across Windows, Linux and macOS, examine firewall, web and database logs, and use tools such as EnCase, FTK, X-Ways, SIFT and Splunk to determine breach scope. Also mentors junior team members and provides remediation guidance to customers.

EnCase · FTK · X-Ways +5

• London
• £124,000 – £186,000 pa
• Senior

Owns architectural direction for Mimecast's Email & Collaboration Security product line, spanning email threat detection, DMARC, data platforms and response capabilities. Works across product, engineering and the Architecture Leadership Team to define integration contracts, ADRs and NFR targets, with cost-per-outcome reasoning and daily AI tooling use.

AWS · Kafka · MCP +4

• London
• Mid-level

Builds and operates secure, scalable platforms and services that take enterprise AI solutions from evaluation into production. Works across DevOps, cloud engineering and MLOps, configuring environments, CI/CD pipelines, automation, monitoring and identity controls alongside AI specialists, data scientists and security teams.

AWS · Azure · GCP +7

• United Kingdom
• Remote
• Senior · manages people

Leads incident response engagements for customers hit by cyberattacks, directing a team of consultants, running kick-off and daily update calls, and delegating forensic tasks. Handles multiple ransomware and BEC investigations concurrently, performing root cause analysis and producing executive-summary reports mapped to MITRE ATT&CK.

Splunk · ELK · Sophos

• United Kingdom - Field
• Senior

Senior individual contributor providing cross-team technical leadership for quality engineering across a multi-tenant SaaS platform. Defines automation architecture and risk-based quality strategies, builds reusable test frameworks, and embeds unit, integration, contract, API and end-to-end testing into CI/CD pipelines. Leads performance, scalability and resilience validation, including fault injection and chaos testing, while mentoring engineers and influencing release decisions.

Kubernetes · OAuth 2.0 · mTLS +4

• London
• Hybrid · 2–3 days in office
• £90,000 – £120,000 pa
• Senior

Full-stack product engineering role in a cross-functional squad, owning mid-to-large initiatives end to end and shaping product strategy with designers and PMs. Stack centres on Go, AWS and Vue.js, with a strong emphasis on system design, testing, automation and mentoring other engineers.

Go · AWS · Vue.js +7

• London
• Hybrid
• Senior · manages people
• Permanent

Client-facing consulting role helping complex organisations assess cyber risk and turn priorities into transformation roadmaps. You'll lead multidisciplinary teams across strategy, governance, risk and operating model engagements, working with frameworks such as NIST CSF, ISO 27001, NCSC CAF, CRI and NIS2 alongside CISO and CIO-level stakeholders.

NIST CSF · ISO 27001 · NCSC CAF +2

• United Kingdom
• Remote
• Mid-level

Performs advanced investigative, forensic and containment work during active cyber incidents for Managed Detection and Response customers, correlating alerts and telemetry to establish scope and root cause. Mentors junior IR and SOC analysts, maintains engagement documentation and playbooks, and supports Incident Advisors with validated technical findings. Includes weekend and holiday rotation cover.

OSQuery · SQL · KQL +2

• London

The Application Security Consultant will act as a technical authority and trusted advisor to engineering and product teams, leading application security reviews, conducting various security assessments, and integrating security into the development lifecycle. The role involves working across internal IT and customer-facing products, promoting secure coding practices, and delivering security training.

• London
• Mid-level

Builds and maintains a Chromium-based browser engine, remote rendering and streaming tech, and distributed services that run browser sessions across a global network. Day-to-day work spans C++ browser code, Go/Rust/TypeScript services, debugging across browser processes and Linux hosts, and improving latency and reliability, with production on-call.

Chromium · Cloudflare Workers · Nomad +3

• Ashford
• Hybrid
• £50,000 – £55,000 pa
• Senior
• Permanent

Owns data protection and information governance across a healthcare organisation, handling SARs, DPIAs, privacy notices, information sharing agreements, breach management and IG audits. Works with senior leadership and an external DPO, partnering with IT and security teams on cyber security, ISO 27001 and DSPT compliance while delivering training and legislative guidance.

ISO 27001