Cyber Security Jobs in Woking

• Bremen, Germany
• Senior
• Permanent

Owns the long-term data protection strategy and technical design of resilient disaster recovery architectures across hybrid, multi-cloud, container and on-premise environments. Acts as the top escalation point for complex recovery failures, evaluating immutable backups and air-gapped storage while automating backup and recovery processes. Bridges operations, security and business continuity within the public and private cloud team.

Veritas · Cohesity · Veeam +4

• Cambridge
• Hybrid · 3 days in office
• Senior
• Permanent

Leads the design and delivery of complex features in a cryptographic security product, working hands-on across embedded software, platform components, client tools and APIs. Sets technical direction, mentors engineers and supports system-level architecture decisions on availability, latency and data models. Hybrid role in Cambridge, three days onsite.

C · Python

• Romania
• Remote
• Senior

Security researcher role on CrowdStrike Intelligence's Advanced Research Team, developing automated solutions for large-scale data collection, operating and extending honeypots, performing vulnerability research, and reproducing emerging vulnerabilities. The position also involves publishing research on the blog or at conferences and building GenAI/LLM workflows to support analysis and security research.

CrowdStrike · Python · Android +4

• Reading
• On-site
• Entry level
• Internship

Six-month graduate internship in the Falcon Complete team, working from the Reading office on security alert triage, incident investigation and response, and basic malware analysis. Interns learn the Falcon platform and internal tooling, handle customer inquiries, and deliver a project to improve security controls.

CrowdStrike Falcon

• Lisbon, Portugal
• Hybrid · 3 days in office
• Senior
• Permanent

Builds and operates production ML systems for document extraction powering identity verification, working with VLMs/LLMs and traditional ML at scale. Owns technical design from RFC to deployment, optimising GPU inference, training and evaluation pipelines, and labelling workflows. Mentors engineers and collaborates with Applied Science, Product and Data Science in a squad-based team.

AWS · Kubernetes · TensorFlow +4

• London
• On-site
• £450 – £455 pd
• Mid-level
• Contract

Hands-on SOC and incident response role monitoring, triaging and investigating cyber security threats across macOS endpoints, Linux cloud workloads, microservices and containerised platforms. You will contain and remediate incidents, document findings and evidence, and contribute to detection rules and response playbooks while working closely with security and engineering teams.

macOS · Linux · Containers +4

• London
• Remote
• £500 pd
• Senior
• Contract

Lead end-to-end management of cyber security incidents and major security events within a secure government programme, coordinating technical response teams through containment, eradication and recovery. Act as primary point of contact for incident communications, run response bridges and war-rooms, and produce post-incident reports and root cause analysis. Works alongside SOC, analysts, infrastructure teams and third-party suppliers to improve cyber resilience.

SIEM · EDR

• Cheltenham
• Hybrid · 3 days in office
• £100,000 – £110,000 pa
• Senior
• Permanent

Builds backend Java applications and microservices for complex cross-domain security systems, working across the full SDLC from requirements through deployment and support. Uses Spring Boot, AWS, REST APIs, PostgreSQL, MongoDB, DynamoDB and RabbitMQ within containerised, automated environments (Docker, Kubernetes, Terraform, Jenkins, Linux), with TDD, BDD and pair programming.

Spring Boot · AWS · PostgreSQL +7

• Wolverhampton
• Hybrid
• Director

Lead information security across multiple UK sites for a defence and aerospace manufacturer, owning accreditation, compliance and incident response. Act as the key security point of contact within a global matrix, driving frameworks such as NCSC CAF, ITAR and export control, and supporting secure-by-design across IT, engineering and industrial teams. Requires regular UK and international travel.

NCSC CAF · IGI 1300

• Northallerton
• Remote
• £37,000 – £50,000 pa
• Mid-level

Deliver infrastructure penetration tests and vulnerability assessments across varied customer environments, combining automation and security tooling with human-led investigation. Produce clear reports and client debriefs for technical and non-technical audiences, manage multiple engagements, and collaborate with infrastructure and web application teams. Fully remote with rare client site visits.

OSCP · CRT · CSTM +3

• Wolverhampton
• Lead · manages people

Lead physical, cyber, personnel and supply-chain security across multiple UK aerospace and defence manufacturing sites, reporting to the global CISO. Build and manage a security team, act as Common Responsible Person for EASA Part-IS, and drive governance, compliance and incident response in a highly regulated environment.

CCTV · EASA Part-IS · AirCyber +7

• Nottingham
• £26,100 pa
• Junior

Support the monitoring and protection of business systems for a growing financial services organisation, identifying security threats and keeping critical financial data secure. Day to day involves monitoring security alerts, reviewing logs, investigating incidents, maintaining documentation and supporting security testing and compliance activities.

• Sutton-in-Ashfield
• £26,100 pa
• Junior

Support the monitoring and protection of business systems for a growing financial services organisation, identifying security threats and keeping critical financial data secure. Day to day involves monitoring security alerts, reviewing logs, investigating incidents, and maintaining documentation, with hands-on exposure to security monitoring tools and incident management processes.

• Cambridge
• On-site
• Mid-level
• Permanent

Consultants assess critical systems for cyber-physical vulnerabilities, using a physics-first approach to hardware and software security. Day to day involves deep technical research, reverse engineering, rapid prototyping and building proof-of-concept demonstrators, often interfacing with hardware via JTAG, UART or oscilloscopes. Work spans short projects to multi-year defence programmes in a flat, collaborative team.

JTAG · UART · Oscilloscopes

• Cambridge
• On-site
• Mid-level
• Permanent

Consultants assess critical systems for vulnerabilities, building proof-of-concept demonstrators and prototypes that blend software, hardware and cyber-physical techniques. Work spans reverse engineering, low-level programming and protocol analysis on defence and national security projects, with high autonomy in a flat, collaborative team.

Containerisation