Cyber Security Jobs

• Stirling
• Mid-level

Technical specialist role in Security Operations investigating complex incidents across cloud, endpoint, identity, email and network environments. Combines intelligence-led threat hunting, detection engineering and AI-assisted analysis, acting as escalation point and translating findings into lasting defensive improvements alongside internal teams and external providers.

Microsoft Azure · Microsoft Entra · Microsoft Defender +5

• London
• Lead

Security lead for an AI engineering team's products and platform, owning security reviews, threat modelling and sign-off from design through production. Covers AI/LLM risks like prompt injection, CVE remediation, scanning tooling in CI/CD, pen testing and incident response, reporting directly to the CIO.

Azure · GCP · GitHub Actions +7

• London
• Hybrid
• Senior

Designs, delivers and optimises secure, resilient network services across multi-site, hybrid and cloud environments for a financial services organisation. Works with architects, security, cloud and engineering teams on connectivity, zero-trust and cloud-aware networking, with hands-on Cisco LAN/WAN/wireless and SASE/SD-WAN tooling such as Cato Networks or Zscaler.

Cisco · Cato Networks · Zscaler +5

• London
• Senior

Customer-facing Solution Architect shaping and winning strategic UK Central Government opportunities, working with account, capture and bid teams from early qualification through contract award. Leads solution development, discovery workshops and architecture reviews across Data & Analytics, Cloud, Cyber, AI/ML and Systems Integration, then supports handover into delivery.

Azure · AWS · TOGAF

• London
• Hybrid
• Senior

Designs, implements and operates a global multi-vendor, multi-cloud and hybrid data center network, covering subnetting, VPC peering, direct connects and hub-spoke topologies. Builds IaC and automation tooling (Ansible, Terraform, Python, Go) in CI/CD pipelines and handles complex production troubleshooting plus on-call rotations.

Ansible · Terraform · Python +7

• United States
• Remote
• US$120,000 – US$185,000 pa
• Mid-level

Builds and operates core systems for the Falcon Complete team, developing features that help security analysts triage and remediate threats at scale. Work spans Golang, microservices, Kafka, Kubernetes and cloud observability, with on-call rotation and heavy asynchronous remote collaboration.

AWS · Azure · GCP +7

• United States - Field
• Senior · manages people

Defines and governs a four-plane reference architecture (Identity, Authority, Execution, Assurance) for an agentic trust layer, owning specs like the Agent Passport, Permission Slip framework, Evidence Ledger and Policy Engine. Chairs architecture and boundary review boards, sets dependency contracts across product lines, and represents the company in standards bodies such as FIDO, OpenID and IETF.

Azure · AWS · Google Cloud +7

• United Kingdom - Field
• Senior · manages people

Defines and governs a four-plane reference architecture (Identity, Authority, Execution, Assurance) for an agentic trust layer, owning specs like the Agent Passport, Permission Slip framework, Evidence Ledger and Policy Engine. Chairs architecture and boundary review boards, sets dependency contracts across product lines, and represents the company in standards bodies such as FIDO, OpenID and IETF.

AWS · Azure · Google Cloud +7

• London
• Hybrid
• Senior
• Permanent

Senior overlay role acting as lead technical strategist for BT across the UK and EMEA, driving joint technical alignment and co-architecting security offerings. Involves positioning NetSec, SASE, Zero Trust and Cortex CloudSecOps into BT's managed service architecture, leading complex POCs and demos, and providing targeted post-sales advisory. Requires executive-level engagement with BT leadership and close co-selling with internal sales, with around 30% UK travel.

Palo Alto Networks · Cortex · AWS +6

• Gloucester
• Hybrid
• £90 – £110 ph
• Senior
• Contract

Lead security architecture across cloud, hybrid and on-premise environments, embedding Secure by Design principles through the full technology lifecycle. The role covers threat modelling, security assurance, risk assessment and architecture governance, with technical leadership across IAM, IaC, container platforms and secure cloud migration. Requires active eDV clearance and works on a hybrid basis.

IaaS · PaaS · SaaS +3

• United Kingdom
• Remote
• Senior
• Permanent

Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.

Snowflake · dbt · Power BI +4

• London
• Remote
• Senior

Senior technical product engineer role advising partners, customers and internal teams on cloud-native security, Cortex capabilities and SOC automation. Involves cross-functional projects, product roadmap feedback, and building playbooks and integrations across AWS, Azure and GCP.

AWS · Azure · GCP +3

• London
• Hybrid
• £57,000 – £67,000 pa
• Mid-level
• Permanent

Hands-on role implementing and maintaining technical security controls across endpoints, networks, servers, cloud and clinical systems. Involves vulnerability scanning and remediation, security monitoring and incident response, plus IAM, MFA and logging work in a Microsoft-centric estate, collaborating with a wider group cybersecurity function in a regulated environment.

Microsoft Defender · Microsoft 365 · Microsoft Entra +6

• London
• Hybrid · 2 days in office
• £44,000 – £66,000 pa
• Mid-level

Acts as the trusted technical advisor for a portfolio of mid-market accounts, working in a three-person pod with an Account Manager and Renewals Manager. Owns platform adoption, configuration health and value scoring across email security, HRM and Incydr products, and packages proof-of-value and business reviews for executive audiences. Also leads churn mitigation and identifies expansion signals ahead of renewal.

Mimecast · Microsoft 365 Defender · Okta +7

• Farnborough
• Mid-level

Monitors and investigates security alerts across a 24x7 multi-customer CSOC, analysing telemetry from SIEM, EDR and XDR platforms to determine scope, severity and business impact. Correlates logs, maps adversary behaviour to MITRE ATT&CK, runs threat hunts and tunes detections, while maintaining incident records and coordinating containment and recovery actions.

Microsoft Sentinel · Microsoft Defender XDR · Microsoft Defender Vulnerability Management +2