Cyber Security Jobs

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

Appvia · London · £75,000 – £90,000 pa

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for public and private sector clients. You will own technical delivery in your area, create reusable modules and deployment patterns, and mentor less experienced engineers within multi-disciplinary consulting teams.

VIQU IT · Portsoken · £350 – £400 pd

Day-to-day BAU security operations role focused on Rapid7, SIEM monitoring, alert triage and vulnerability management, including clearing an existing alert backlog. Also covers Mimecast email security, Microsoft Purview eDiscovery/DSAR/DLP, CrowdStrike and Netskope administration, plus security investigations and documentation.

Michael Page · Liverpool · £60,000 – £65,000 pa

Act as the escalation point for an external MSSP, investigating and responding to security incidents and performing detailed event analysis to identify threats. Drive hands-on remediation, detection engineering, and security reviews across cloud and enterprise collaboration environments, using frameworks like MITRE ATT&CK. A one-year fixed-term contract with strong extension potential, hybrid across Liverpool, Glasgow, or London.

Experis · London · £500 pd

Lead end-to-end management of cyber security incidents and major security events within a secure government programme, coordinating technical response teams through containment, eradication and recovery. Act as primary point of contact for incident communications, run response bridges and war-rooms, and produce post-incident reports and root cause analysis. Works alongside SOC, analysts, infrastructure teams and third-party suppliers to improve cyber resilience.

Randstad Technologies Recruitment · London · £500 – £600 pd

Supports cyber governance, risk management and control execution across core business functions in a high-assurance, regulated environment. Day-to-day work covers cyber risk assessments, security issue management and close collaboration with cross-functional stakeholders. Contract role with hybrid working, three days a week in office.

GCS · London · £600 – £700 pd

Lead a risk-based technical assurance programme across a global enterprise, independently assessing security control effectiveness in infrastructure, cloud, identity, applications and incident response. Manage and mentor a small team of Technical Assurance Analysts while producing board-level reporting and driving continuous controls monitoring and automated assurance.

Hays Technology · Sheffield · £450 – £500 pd

Owns end-to-end solution design across cybersecurity initiatives, producing architecture documents, high-level designs, patterns, decision records and risk assessments. Provides technical leadership and presents designs to Design Authorities and senior stakeholders, with deep IAM and HashiCorp Vault expertise. Requires three days per week onsite in Sheffield.

Michael Page · Liverpool · £60,000 – £65,000 pa

Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.

TXP · United Kingdom · £440 – £490 pd

Monitor, investigate and respond to cyber security incidents within a Microsoft security environment, using Microsoft Sentinel and the Defender suite. The role covers alert triage, threat hunting, log and telemetry analysis, and creating and tuning Sentinel analytics rules, workbooks and detection use cases. You will also support incident response containment and recovery, produce reports, and work with infrastructure, cloud and application teams to improve SOC processes and detection engineering.

DCV Technologies · Royal Leamington Spa · £550 – £650 pd

Hands-on contract role owning the end-to-end detection engineering lifecycle, translating threat intelligence, hunting findings and adversary techniques into effective detection rules. Builds behavioural analytics and detection content across endpoint, identity, cloud, network and email telemetry using KQL, SPL, Sigma, Python and PowerShell, with tuning, purple teaming and Detection-as-Code work alongside SOC, IR and Red Team specialists.

Square One Resources · Coventry · £455 pm

Designs, implements and maintains enterprise network security across on-prem, cloud and hybrid environments, leading Zero Trust and segmentation initiatives. Hands-on with enterprise firewalls, Azure/AWS network security, VPNs and secure remote access, while collaborating with SOC teams on detection and response. Contract role with three days per week on-site in Coventry.

Randstad Technologies Recruitment · Birmingham · £300 – £400 pd

Lead a six-month AI and digital platform security initiative, defining controls and guardrails for GenAI and machine learning across global operations. Architect defences spanning AWS, Azure, hybrid and on-prem environments, aligning with NIST and ISO 27001 while mentoring a senior team of security architects and advising C-suite stakeholders.

Deerfoot Recruitment Solutions · London · £500 – £550 pd

Hands-on contract role managing a broad estate of security tooling across network, email, endpoint and web, plus red team platforms for forensics, threat monitoring and deception. Day to day involves patching, upgrades, policy tuning, troubleshooting, and deploying and integrating new tools, including vendor replacements such as a new web proxy and email gateway. Works within an IT Security team at a financial services organisation, supporting audit and risk activity alongside engineering projects.

Morson Edge · Warrington · £85 ph

Assess technical security controls and cyber risk across complex OT and Cloud environments, working with technical teams, architects and risk owners. The role centres on NCSC CAF, Cyber Essentials Plus, ISO 27001/27005 and NIST frameworks, covering third-party assurance and internal/external audits. It is a 12-month contract requiring one day a week travel to the North West.

ECS Resource Group · Newbury · £450 – £500 pd

Security architecture and independent assurance role on a large-scale telecoms programme, focused on Privileged Access Management and securing administrative access to critical Network Management Systems. You will review network and security designs, assure HLDs, LLDs, PoCs and test strategies, and advise on segmentation, least privilege and secure management access. Requires strong IP networking (MPLS, VPNs, VRFs) plus AAA, TACACS+, MFA and RBAC expertise.

Creideas · Thame · £600 – £850 pd

Part-time consultant guiding a client's migration from traditional data centres to AWS, acting as an escalation point and mentor for a small team of engineers. Works closely with the CISO on security reviews and strategy, applying SIEM, EDR and vulnerability management skills. Mostly remote with occasional in-person catch-ups.