Cyber Security Jobs

• London
• £80,000 – £90,000 pa
• Senior

Strengthen and maintain cyber security posture through assurance, incident response coordination, vulnerability management and governance. Work with frameworks including ISO 27001, SOC2, NIST and GDPR, overseeing MSSP and SOC activities, with technical involvement in investigations, threat analysis and major incidents.

EDR · SIEM · NDR +1

• Grange, Greater London
• Hybrid
• £55,000 – £60,000 pa
• Mid-level
• Permanent

Conducts penetration tests across web applications, infrastructure, cloud environments and APIs, with exposure to Active Directory, AWS/Azure/GCP and tools like Burp Suite, Kali Linux, Nmap and Metasploit. Owns testing engagements end to end, writes clear reports and advises clients on remediation, with scope to move into red teaming, assumed breach and AI security.

Burp Suite · Kali Linux · Nmap +4

• Hull
• £45,000 – £55,000 pa
• Mid-level · manages people

Owns the global IT service desk for an international business, managing incidents, requests and escalations across the UK, US and Australia. Establishes service levels, processes and a knowledge base, oversees user and asset lifecycles, manages third-party suppliers and leads regional support teams, reporting to the Group Head of IT.

• Basingstoke
• Hybrid · 3 days in office
• £55,000 pa
• Mid-level

Deliver and support Cyber Essentials and Cyber Essentials Plus assessments, working directly with clients to review evidence, discuss security controls and explain findings. Assess technical controls across networks, endpoints and cloud environments, then produce clear audit reports and practical recommendations, with scope to grow into wider ISO 27001 and IASME assurance work.

Cyber Essentials · Cyber Essentials Plus · ISO 27001 +2

• Manchester
• Remote
• £60,000 – £80,000 pa
• Mid-level
• Permanent

This role involves conducting comprehensive penetration tests across networks, web and mobile applications, APIs, and cloud environments using both manual and automated techniques. The tester will simulate real-world cyberattacks, identify vulnerabilities, and produce detailed technical and executive reports with actionable remediation advice. A key focus is translating complex security findings for non-technical stakeholders while adhering to strict ethical and compliance standards in a security-cleared context.

• London
• Remote
• £60,000 – £65,000 pa
• Senior

Deliver end-to-end penetration testing engagements, from scoping through to reporting and client debriefs, across web applications, APIs, infrastructure, networks, cloud and mobile environments. Work directly with clients on a consultancy basis, producing technical reports and contributing to proposals, capability development and tooling. Requires strong Burp Suite, web/API and infrastructure testing skills, with Red Teaming and cloud security experience desirable.

Burp Suite

• United Kingdom
• Remote
• £70,000 – £90,000 pa
• Senior
• Permanent

Lead OT cyber risk assessments on client sites, which makes up around 80% of the role, and carry out site surveys across ICS, SCADA, DCS and wider OT environments. Build improvement roadmaps and security programmes, applying standards such as IEC 62443, NCSC CAF, NIST SP 800-82 and HSE OG86, while supporting the sales team on follow-on opportunities and proposals.

IEC 62443 · NCSC CAF · NIST SP 800-82 +1

• Berkeley
• Remote
• £45,000 – £50,000 pa
• Mid-level

Conducts information security assessments for government, defence and commercial clients in a consultancy setting, reviewing controls, policies and procedures against ISO 27001 and the NIST Cybersecurity Framework. Supports audits, risk assessments and compliance reviews, and works directly with client stakeholders to communicate findings and improve security posture.

ISO 27001 · NIST Cybersecurity Framework

• London
• Remote
• £85,000 – £100,000 pa
• Senior · manages people

Leads complex cyber risk, technology risk and resilience engagements as a trusted advisor to CISOs, CIOs and executive stakeholders. Combines delivery leadership, client advisory and commercial responsibility, growing strategic relationships and multi-disciplinary teams while designing governance, risk and control frameworks across CAF, DORA and operational resilience programmes.

CAF · DORA · NIST CSF +1

• London
• Hybrid · 2 days in office
• £52,000 – £74,000 pa
• Senior
• Permanent

Designs and shapes security solutions across complex technology transformation programmes for public and private sector clients, translating business and security requirements into practical architectures and technical designs. Covers cloud, infrastructure, networks, applications and enterprise security, with threat modelling and Secure by Design applied throughout the lifecycle. Works directly with clients, solution architects and engineers rather than focusing on governance or BAU security.

AWS · Azure · GCP +7

• London
• Hybrid
• £100,000 – £118,000 pa
• Senior
• Permanent

Lead cybersecurity advisory engagements for a global IT consultancy, covering risk assessments, maturity reviews, strategy and transformation roadmaps. Advise CISOs and CTOs, embed security into cloud and digital transformation programmes, and support bids and business development while mentoring junior consultants.

• London
• Hybrid · 1 day in office
• £800 – £900 pd
• Senior
• Contract

Translate high-level SecOps transition strategies into detailed, low-level implementation plans across security engineering, threat and vulnerability management and security testing. Define operational readiness criteria, phase-gate checklists and multi-year delivery roadmaps, coordinating dependencies with architecture, GRC and technical SMEs. Requires active SC clearance and UK Government or regulated-environment experience.

SIEM · IAM · PAM +1

• Gloucestershire
• Hybrid
• £60,000 – £80,000 pa
• Mid-level
• Permanent

Investigate and respond to security incidents across endpoint, identity, network and cloud environments for a growing cyber security consultancy and MSSP. The role involves digital forensics, evidence collection, containment and recovery, plus developing IR playbooks and tabletop exercises, working alongside SOC, Threat Intelligence and Detection Engineering teams. It includes an on-call rota and occasional customer travel.

Velociraptor · KAPE · Timesketch +8

• London
• Hybrid · 2 days in office
• £80,000 – £99,000 pa
• Senior

Client-facing consultancy role combining hands-on privacy operations with advisory work across multiple sectors. Day to day involves delivering DPIAs, LIAs, RoPAs, data mapping, breach response and ICO engagement, plus building governance frameworks and training stakeholders. Distinct for its focus on AI and privacy tech within a specialist team.

IAPP · CIPP/E · CIPM

• Manchester
• Hybrid · 2–3 days in office
• £90,000 – £100,000 pa
• Senior

Delivering OT security assessments, audits and gap analyses for clients in energy, manufacturing, oil & gas and pharmaceuticals. The role involves evaluating OT networks, systems and controls, then shaping security strategies, policies and improvement roadmaps as a trusted client-facing advisor. Knowledge of IEC 62443 and NIST frameworks is beneficial.

SCADA