Cyber Security Jobs

• United Kingdom
• Remote
• Senior
• Permanent

Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.

Snowflake · dbt · Power BI +4

• Southampton
• Hybrid · 3 days in office
• £70,000 – £75,000 pa
• Senior

You will shape and deliver AI-enabled business transformation, assessing new AI and technology systems against business, technical and security needs, then leading their implementation and lifecycle management. The role blends business analysis, process improvement and troubleshooting within a regulated environment, working with stakeholders, data specialists and third-party vendors. Hybrid working from Southampton three days a week.

Microsoft Office · Excel · Power BI

• Reading
• Hybrid
• Entry level
• Internship

Internship on CrowdStrike's Technical Analysis Cell, researching nation-state and criminal intrusions through reverse engineering of malware and tooling. The intern builds automation for malware analysis, creates host- and network-based detection signatures, and produces threat intelligence reporting for varied audiences.

CrowdStrike · Disassemblers · Decompilers +1

• London
• Hybrid
• Entry level
• Internship

Internship on CrowdStrike's Technical Analysis Cell, researching nation-state and criminal intrusions through reverse engineering, malware analysis and automation tooling. Interns build host- and network-based detection signatures and produce finished threat intelligence reporting for varied audiences.

CrowdStrike · Disassemblers · Decompilers +1

• Cambridge
• Hybrid
• £80,000 – £107,600 pa
• Mid-level

Lead threat intelligence production and process improvement within a global Cyber Defence Operations team, ensuring actionable intelligence aligned to Priority Intelligence Requirements and RFIs. Support intelligence-led threat hunting, detection and incident response, manage relationships with industry, government and security partners, and contribute to scenario planning and a knowledge graph.

SANS FOR578 · SANS FOR589

• Chippenham
• Hybrid
• Mid-level
• Permanent

Day-to-day administration of the Spacecraft Control Centre's Linux and Cisco-based command and control systems, including configuration, equipment swap-outs, and restoration of capability. Acts as lead engineer for deployment planning, testing, and patching of system upgrades across a multi-site SCOF network, liaising with customers on fault investigation. Requires in-date RHCSA and offers hybrid, flexible working.

Cisco · CCNP · CCNA +2

• Knutsford
• On-site
• Entry level
• Internship

Ten-week summer internship in Barclays' Chief Security Office, working alongside experts to reduce risk, protect customers and improve security delivery. Interns collaborate with cross-functional teams on real projects, gaining exposure to threat intelligence, controls and secure engineering while building technical skills.

• London
• Mid-level
• Permanent

Detect and mitigate invalid traffic and ad fraud across Amazon's advertising network by reverse-engineering malware, inspecting network traffic and hunting threats, including on the dark web. The role blends security engineering, botnet mitigation and intelligence sharing with teams across Amazon, requiring creativity and judgement in a highly ambiguous fraud landscape.

• Chippenham
• Hybrid
• Senior
• Permanent

Provide end-to-end cyber security support for Spacecraft Control Centre Systems and Satellite Communications infrastructures, analysing functional needs, setting criticality levels and proposing protection concepts. Coordinate security architecture across disciplines, manage risks and ensure defences stay ahead of evolving threats. Requires CISSP/CISM and hands-on knowledge of Solaris, Linux, Windows, Cisco and JSP440.

Solaris · Linux · Windows +1

• Kings Hill
• Hybrid
• £54,500 – £55,000 pa
• Mid-level
• Permanent

Monitor, triage and investigate security alerts, incidents and requests, managing records through to closure and coordinating recovery. Use tools such as Tenable and Darktrace across cloud and wider IT infrastructure, supporting vulnerability management, threat intelligence and malware analysis, with on-call backup for emergency response.

Tenable · Darktrace

• County Galway
• Hybrid · 2–3 days in office
• £45,000 – £55,000 pa
• Mid-level

Day-to-day work centres on analysing, triaging and prioritising vulnerabilities across enterprise infrastructure, applications and platforms, then coordinating remediation with infrastructure and engineering teams. The role involves reviewing threat intelligence and security advisories, producing dashboards and metrics on remediation progress, and improving vulnerability management tooling and processes within a large professional services security function.

Tenable · Qualys · Rapid7 +2

• Wolverhampton
• Hybrid
• Director

Lead information security across multiple UK sites for a defence and aerospace manufacturer, owning accreditation, compliance and incident response. Act as the key security point of contact within a global matrix, driving frameworks such as NCSC CAF, ITAR and export control, and supporting secure-by-design across IT, engineering and industrial teams. Requires regular UK and international travel.

NCSC CAF · IGI 1300

• Reading
• Hybrid
• £50,000 pa

Supports the Control Testing & Assurance Manager in delivering cybersecurity control testing across multiple security domains, assessing control design and operational effectiveness, gathering evidence and producing reports. Works with control and service owners to localise test scripts and improve testing frameworks, with hybrid working at Clearwater Court, Reading.

COBIT · COSO · ISO 27001

• Leeds
• Hybrid · 3 days in office
• £45,000 – £50,000 pa
• Mid-level
• Permanent

Support the development and operation of security controls, analyse threat intelligence, manage vulnerabilities and help with incident response across a global technology estate. Work with Azure and Microsoft security tooling such as Sentinel, Defender and Intune, alongside SIEM, EDR and firewalls, in a hybrid Leeds team.

Microsoft Azure · Microsoft Sentinel · Microsoft Defender for Endpoint +7

• Liverpool
• Hybrid
• £60,000 – £65,000 pa
• Senior
• Contract

Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.

SIEM · IAM · DLP +1