Cyber Security Jobs

• United Kingdom - Field (Onfido)
• Senior

Owns test planning, coordination and execution within a cross-functional identity verification product team, covering web, mobile, backend services and ML-powered products. Builds maintainable automated test frameworks and suites, supports acceptance and exploratory testing, and mentors colleagues while improving CI/CD pipelines and release feedback loops.

Playwright · Cypress · Selenium +12

• France - Field (Onfido)
• Senior

Owns planning, coordinating and executing test and quality activities within a cross-functional identity verification product team, covering web, mobile, backend and ML-powered journeys. Builds maintainable automated test frameworks and suites, mentors colleagues, and leads test engineering initiatives across teams. Combines automation with exploratory testing and works with TypeScript, Ruby, Python, Playwright, Cypress, Selenium and CI/CD pipelines.

Playwright · Cypress · Selenium +7

• Manchester
• Entry level
• Permanent

Monitors networks and systems for threats, triages security alerts and documents suspicious activity, working with partner teams on daily threat detection and incident response across AWS technologies at scale. Involves security automation, tracking detective controls like GuardDuty, CrowdStrike Falcon and Wiz Defend, and periodic on-call including weekends.

AWS · Amazon GuardDuty · CrowdStrike Falcon +1

• Virtual Location - Uk
• Permanent

Adversarial security testing role on AWS's Continuous Security Testing team, turning threat intelligence and scanner signals into testable hypotheses against live production services. Combines hands-on penetration testing with AI-augmented source code review, tracing chained attack paths and building lasting detections, canaries and fuzzers. Also involves testing agentic AI systems and mentoring engineers.

AWS

• Kingston upon Thames
• On-site
• £28,000 – £35,000 pa
• Mid-level
• Contract

First-line IT support role in a small, hands-on team, resolving incidents and service requests via phone, email, remote tools and face-to-face. Covers Microsoft 365, Windows, hardware, printers, Wi-Fi, VPNs, account administration, device deployment and security patching, with training provided on internal systems.

Microsoft 365 · Windows 11 · Outlook +5

• Surbiton
• On-site
• £28,000 – £35,000 pa
• Permanent

On-site service desk role providing remote and desk-side support to colleagues, covering Microsoft 365, hardware, software, printing, Wi-Fi and VPN troubleshooting. Involves logging and resolving incidents, building and deploying laptops and mobile devices, identity and access administration, patching and compliance, plus joiner/mover/leaver processes within a small team.

Microsoft 365 · Windows 11 · Outlook +5

• United Kingdom
• Remote
• Lead

Deliver white-glove onboarding and ongoing technical guidance for Managed XSIAM customers, analysing security data to improve detection coverage, alert quality and tenant hygiene. Lead customer touchpoints and security reviews while partnering with Unit 42 SOC engineering, Product and MDR teams to build automation workflows and scalable service frameworks.

XSIAM · Unit 42

• London
• Hybrid
• £80,000 – £90,000 pa
• Lead
• Permanent

Owns the CMDB and hardware/software asset lifecycle across a large international technology estate, setting standards, governance and a maturity roadmap for configuration and asset data. Works alongside other ITSM practice owners to ensure Change, Incident, Problem and Vulnerability Management rely on accurate CI data, using ServiceNow CMDB, HAM and Snow, aligned to ITIL 4 and ISO 27001.

ServiceNow · Snow · Discovery

• London
• Remote
• £30,000 – £40,000 pa
• Entry level

A career-change training programme combining online CompTIA A+, Network+ and Security+ study with practical labs, tutor and mentor support, plus recruitment and placement help. It targets people with no prior IT experience, aiming to place them first as an IT Technician before progressing into cyber security roles.

CompTIA A+ · CompTIA Network+ · CompTIA Security+ +2

• London
• Remote
• £30,000 – £40,000 pa
• Entry level

A career-change training programme combining online CompTIA A+, Network+ and Security+ study with practical labs, tutor and mentor support, and recruitment/placement assistance. On completion, participants are supported into an initial IT Technician role before progressing toward cyber security positions such as analyst or security engineer.

CompTIA A+ · CompTIA Network+ · CompTIA Security+ +2

• Southampton
• Remote
• £75,000 – £85,000 pa
• Senior
• Permanent

Principal-level technical security lead on a high-assurance UK defence programme moving from MVP towards operational capability. The role covers secure-by-design architecture, cross-domain information exchange, cyber risk and assurance, IAM, cryptography, cloud and network security, working with solution architects, DevOps and assurance teams. Distinct for its defence focus and ex-military requirement.

DevOps

• Chislehurst
• On-site
• £26,000 pa
• Entry level

Provide first and second-line IT support, troubleshooting hardware, software and connectivity issues while administering Microsoft 365, user accounts and device management. Work in a small team supporting Intune, Autopilot, cybersecurity and emerging technologies such as AI and Copilot, with involvement in IT projects and upgrades.

Microsoft 365 · Exchange Online · SharePoint +7

• Leeds

Deliver continuous security testing across customer external attack surfaces, combining automated scanning with hands-on manual assessment. Validate scanner findings, chain vulnerabilities to demonstrate realistic attack paths, and produce proof-of-concepts and remediation advice. Work directly with customers while contributing to internal tooling and methodology.

Burp Suite Professional · SQLMap · Python +7

• Winchester
• On-site
• £41,000 – £50,000 pa
• Mid-level

Monitor, triage and investigate security alerts across SIEM and wider security tooling, identifying indicators of compromise and conducting initial incident investigations. Support the full incident response lifecycle including containment, remediation and post-incident learning, while tuning detection rules to reduce false positives. Work with security and infrastructure teams on threat intelligence, trend reporting and continual service improvement.

Microsoft Sentinel · Microsoft Defender · QRadar +2

• Newcastle upon Tyne
• Senior

Lead and deliver infrastructure, web application and cloud penetration testing engagements, plus Cyber Essentials Plus assessments and technical security reviews. As one of the practice's early senior hires, you will shape methodologies, assure report quality, mentor junior consultants and support pre-sales for a growing national cyber security consultancy.

Nessus · Qualys · OpenVAS +5