322 jobs
NCC Group
Join a growing National Security Business Unit conducting vulnerability research across short-term tactical challenges and long-term research engagements. Work alongside a team of experts with dedicated lab facilities, regular research events, and a focus on training and development. Based in Cheltenham with a possible hybrid working approach.
Erin Associates
Lead the design, implementation and governance of OT network and security across multiple manufacturing sites, working alongside the Global Head of IT Operations. Act as subject matter expert for SCADA, PLCs, ICS networks and industrial protocols, securing and modernising environments while ensuring availability and resilience of business systems.
SCADA · PLC · ICS Networks +4
4Square Recruitment Ltd
Hands-on information security role combining ISO 27001 compliance, data protection and technical support. You will troubleshoot hardware, software and network issues, triage and escalate security incidents, maintain audit trails and support the implementation of security controls. Works closely with customer service, field teams and data protection colleagues, requiring security clearance and vetting.
CompTIA Security+ · CISSP · ISO 27001 Lead Implementer +1
VIQU IT
Engineer and optimise security tooling across cloud and on-premises environments, improving threat detection, monitoring and visibility. Turn findings from threat hunting, red team exercises and threat intelligence into practical detection rules and controls, working with Cyber Defence, Infrastructure and Architecture teams.
Microsoft Sentinel · Microsoft Defender · Azure +3
GCS
Hands-on engineering role building and securing production-grade Kubernetes clusters on bare-metal and on-premises infrastructure, spanning Linux, networking, storage and compute layers. Involves implementing security hardening, logging and observability pipelines (Fluent Bit, OpenTelemetry, Grafana), SIEM integration and EDR/vulnerability tooling, plus an on-call rota for critical infrastructure.
Kubernetes · Fluent Bit · OpenTelemetry +6
Invitise
Day-to-day security engineering for a UK asset manager, validating and actioning escalations from a managed service provider, approving security changes and incidents, and owning Microsoft security tooling in-house. Roughly 70% BAU and 30% project work, covering Entra, Defender, Sentinel, Purview, Zscaler, Palo Alto firewalls, vulnerability management and email security, within a small globally distributed team.
Microsoft Entra · Microsoft Defender · Microsoft Sentinel +7
QinetiQ
Join a team delivering offensive security solutions in real-time operational mission environments, planning and executing advanced red team engagements that simulate real-world attacks. The role involves exploiting vulnerabilities across infrastructure, applications and cloud platforms, bypassing defences such as firewalls, EDRs and IDS/IPS, and developing realistic adversary TTPs. Work is fully on-site at the Malvern facility, focused on defence and national security.
AWS · Azure · GCP +7
4Square Recruitment Ltd
Client-facing consultancy role combining hands-on privacy operations with advisory work across multiple sectors. Day to day involves delivering DPIAs, LIAs, RoPAs, data mapping, breach response and ICO engagement, plus building governance frameworks and training stakeholders. Distinct for its focus on AI and privacy tech within a specialist team.
IAPP · CIPP/E · CIPM
Vocative Consulting
First line of defence for day-to-day security hygiene at a SaaS vendor: patching the Windows estate, monitoring CrowdStrike, and assessing the impact of new vulnerabilities. Works closely with the infrastructure team, with a structured route into Azure and wider cloud security engineering.
CrowdStrike · Microsoft Defender · Azure +2
Michael Page
Act as the escalation point for an external MSSP, investigating and responding to security incidents and performing detailed event analysis to identify threats. Drive hands-on remediation, detection engineering, and security reviews across cloud and enterprise collaboration environments, using frameworks like MITRE ATT&CK. A one-year fixed-term contract with strong extension potential, hybrid across Liverpool, Glasgow, or London.
MITRE ATT&CK
Ricoh
You will develop and maintain IT security policies, standards and controls, and build compliance dashboards and reporting in Power BI. The role owns the IT Security Risk Register, facilitates risk assessments and supports ISO 27001, Cyber Essentials and internal audit activity across a European IT environment.
Power BI
Avanti
Join a small, highly skilled team building advanced cyber security products, including hardware-enforced data diodes for secure cross-network data transfer. Day to day you'll work in modern C++ and STL, Python automation, Linux application and embedded development, real-time networking and secure data transfer, with a strong emphasis on clean code, TDD and pair programming.
Linux · RTOS
Ricoh
Supports security governance, technology risk and controls across a European IT environment, working with infrastructure, cloud, identity and operational teams. Owns the IT Security Risk Register, facilitates risk assessments, assesses control effectiveness and translates ISO 27001 and NIST CSF frameworks into practical operational controls, including audit and compliance support.
ISO 27001 · NIST CSF · Cyber Essentials
Airbus · 10000+ people · Public
Owns the long-term data protection strategy and technical design of resilient disaster recovery architectures across hybrid, multi-cloud, container and on-premise environments. Acts as the highest escalation point for complex recovery failures, evaluating immutable and air-gapped storage and driving automation of backup and recovery processes.
Veritas · Cohesity · Veeam +4
Airbus · 10000+ people · Public
Owns the long-term data protection strategy and technology roadmap across hybrid, multi-cloud, container and on-premise environments. Leads technical design of resilient disaster recovery architectures, evaluates immutable and air-gapped backup technologies, and automates backup and recovery processes. Acts as the top escalation point for complex data recovery failures, bridging operations, security and business continuity.
Veritas · Cohesity · Veeam +4
