Cyber Security Jobs

Appvia · London · £75,000 – £90,000 pa

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for public and private sector clients. You will own technical delivery in your area, create reusable modules and deployment patterns, and mentor less experienced engineers within multi-disciplinary consulting teams.

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

CrowdStrike · Reading

Six-month graduate internship in the Falcon Complete team, working from the Reading office on security alert triage, incident investigation and response, and basic malware analysis. Interns learn the Falcon platform and internal tooling, handle customer inquiries, and deliver a project to improve security controls.

CBSbutler Holdings Limited trading as CBSbutler · Preston · £450 – £500 pd

Governance and coordination role tracking security incidents across a complex multi-supplier SIAM environment, from identification through to closure. You coordinate updates between suppliers and security stakeholders, monitor SLAs and escalation trends, and produce incident reports, dashboards and audit-ready records. Distinct from a hands-on SOC position, with no threat hunting or technical remediation involved.

VIQU IT · Portsoken · £350 – £400 pd

Day-to-day BAU security operations role focused on Rapid7, SIEM monitoring, alert triage and vulnerability management, including clearing an existing alert backlog. Also covers Mimecast email security, Microsoft Purview eDiscovery/DSAR/DLP, CrowdStrike and Netskope administration, plus security investigations and documentation.

Michael Page · Liverpool · £60,000 – £65,000 pa

Act as the escalation point for an external MSSP, investigating and responding to security incidents and performing detailed event analysis to identify threats. Drive hands-on remediation, detection engineering, and security reviews across cloud and enterprise collaboration environments, using frameworks like MITRE ATT&CK. A one-year fixed-term contract with strong extension potential, hybrid across Liverpool, Glasgow, or London.

Randstad Technologies Recruitment · London · £500 – £600 pd

Supports cyber governance, risk management and control execution across core business functions in a high-assurance, regulated environment. Day-to-day work covers cyber risk assessments, security issue management and close collaboration with cross-functional stakeholders. Contract role with hybrid working, three days a week in office.

FDM · Bristol

Governs and continuously improves an enterprise IT Change Management practice for a financial services client, covering change assurance, risk assessment, CAB support and emergency change oversight. Works closely with Incident, Problem, Configuration and Risk teams, tracking metrics such as change success rates and failed changes. Hybrid role based in Bristol or Edinburgh on an initial 6-12 month contract.

DB Cargo (UK) Limited · Doncaster · £70,000 – £75,000 pa

Acts as the cyber security subject matter expert within an IT Governance & Security function, leading governance, risk, compliance and resilience across business-critical applications, cloud services and operational railway systems. Owns the ISMS and NIS/GDPR compliance while managing security operations, threat monitoring, incident response and vulnerability management. Develops Microsoft Sentinel and Defender XDR capabilities and provides governance across Azure, AWS, Microsoft 365, Entra ID and Intune, including support for ERTMS/ETCS transformation.

Experis · London · £500 pd

Lead end-to-end management of cyber security incidents and major security events within a secure government programme, coordinating technical response teams through containment, eradication and recovery. Act as primary point of contact for incident communications, run response bridges and war-rooms, and produce post-incident reports and root cause analysis. Works alongside SOC, analysts, infrastructure teams and third-party suppliers to improve cyber resilience.

GCS · London · £600 – £700 pd

Lead a risk-based technical assurance programme across a global enterprise, independently assessing security control effectiveness in infrastructure, cloud, identity, applications and incident response. Manage and mentor a small team of Technical Assurance Analysts while producing board-level reporting and driving continuous controls monitoring and automated assurance.

Hays Technology · Sheffield · £450 – £500 pd

Owns end-to-end solution design across cybersecurity initiatives, producing architecture documents, high-level designs, patterns, decision records and risk assessments. Provides technical leadership and presents designs to Design Authorities and senior stakeholders, with deep IAM and HashiCorp Vault expertise. Requires three days per week onsite in Sheffield.

Michael Page · Liverpool · £60,000 – £65,000 pa

Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.

Matchtech · London · £580 pd

Hands-on penetration testing and vulnerability assessments across infrastructure, networks and applications, producing technical reports and remediation recommendations. Works with technical and project teams on risk assessments and security assurance, aligning testing with industry standards. Short-term contract, fully remote, inside IR35.

JAM Recruitment · London · £700 – £750 pd

Day-to-day, you will manage and configure production databases, provide first to third-line support across full-stack applications, and administer Linux and Windows virtual machines with a focus on vulnerability management and hardening. The role also involves automation with Ansible, Docker containerisation, ETL processes and shared services such as identity brokers and observability platforms, within a national-security context requiring DV clearance.

Carbon 60 · Stevenage · £70 – £75 ph

Day-to-day BAU support, administration and configuration management across Windows infrastructure and workplace environments, including patching, change implementation and asset documentation. Acts as Tier 2/Tier 3 escalation for complex Windows issues, handling incident response, root cause analysis, monitoring, backups and security compliance. Requires active DV clearance and 100% onsite work in a highly secure, restricted environment.

TRIA · Sheffield · £500 – £600 pd

Lead the response to high-severity IT incidents across network, infrastructure, cloud and security environments, coordinating technical teams, suppliers and stakeholders to restore services within agreed targets. The role involves chairing incident and crisis calls, post-incident reviews, root cause analysis, ITIL processes, disaster recovery and business continuity planning, plus executive reporting and on-call duties.