Cyber Security Jobs

• Cheltenham
• Hybrid
• Permanent

Join a growing National Security Business Unit conducting vulnerability research across short-term tactical challenges and long-term research engagements. Work alongside a team of experts with dedicated lab facilities, regular research events, and a focus on training and development. Based in Cheltenham with a possible hybrid working approach.

• Cambridge
• On-site
• Mid-level
• Permanent

Consultants assess critical systems for vulnerabilities, building proof-of-concept demonstrators that combine software, hardware and user interaction. The role spans reverse engineering, low-level programming and rapid prototyping for UK defence and national security clients, working on-site alongside around 40 scientists and engineers.

• London
• On-site
• Lead · manages people
• Permanent

Lead product cybersecurity assurance across the HMND 01 humanoid robot platforms, defining security requirements, threat modelling and risk artefacts for safety-critical electromechanical systems. Own TARA, security management plans and remediation actions, drive compliance with IEC 62443, the EU Machinery Regulation and the Cyber Resilience Act, and build a PSIRT process while guiding a cross-functional security team.

CAN bus · Ethernet · KinetIQ +4

• Cambridge
• On-site
• Mid-level
• Permanent

Consultants assess critical systems for cyber-physical vulnerabilities, combining deep hardware research, testing and reverse engineering with rapid prototyping of proof-of-concept demonstrators. Work spans niche defence and national security projects, interfacing with hardware via protocols like JTAG and UART and using test equipment such as oscilloscopes. The role is fully on-site in Cambridge labs within a flat, collaborative ~40-person consultancy.

JTAG · UART · Oscilloscopes

• Malvern, England, United Kingdom
• Hybrid · 3 days in office
• £65,700 – £73,000 pa
• Senior

Lead cyber security consultancy for defence and government customers, developing business risk models, running ISO 27001 audits and detailed vulnerability assessments using NIST and MITRE ATT&CK frameworks. You will translate technical threats into clear risk cases and mitigation strategies for senior stakeholders, embedding Secure by Design principles across projects. Based on a multi-site UK estate with at least three days a week on site and customer travel.

NIST · ISO 27001 · MITRE ATT&CK

• London
• US$104,435 pa
• Director

Leads and matures an enterprise-wide information governance and records management programme, owning policies, retention schedules, legal hold and defensible disposition across paper and electronic records. Also supports data classification, data governance, privacy by design and AI governance, advising Legal, Compliance, Technology and business stakeholders through cross-functional forums.

• Derby
• On-site
• £40,000 – £70,000 pa
• Permanent

Design, develop and test embedded software in C/C++ for secure communications products, working with RTOS, ARM microcontrollers and register-level programming. The role involves unit testing, static analysis, code reviews and technical documentation within a multidisciplinary team, with security and quality central to delivery.

STM32 · JTAG · ETM +2

• Cambridge
• Hybrid
• £60,000 – £70,000 pa
• Senior

Senior role shaping system design and test criteria for Linux-based embedded systems, leading software security work including Hardware Root of Trust, Secure Boot and TPM integration. Day to day involves embedded C development, Yocto build systems and Linux kernel work, integrating software with hardware via I2C, SPI and UART, plus root-cause debugging. The position also includes mentoring junior engineers within an Agile R&D environment.

Linux · Yocto · Jenkins +6

• Aberdeen
• Hybrid
• £38,000 – £40,000 pa
• Mid-level

Hands-on security role strengthening an Aberdeen organisation's posture across infrastructure and operations. You will maintain policies, run vulnerability management, monitoring and incident response, oversee enterprise backups, and support audits and awareness training alongside IT and MSSP partners.

CISSP · CCSP · ISSAP

• London
• Senior
• Permanent

Security Architect role shaping security across a cloud-native environment, working closely with Architecture, Engineering, Product and Operations teams. Focus areas include GCP security, Kubernetes, DevSecOps, application and API security, identity, resilience and compliance (PCI DSS, GDPR, ISO 27001, SOC 2). Strong commercial GCP and Kubernetes experience is essential.

GCP · Kubernetes · API Gateways +4

• London
• Hybrid
• Senior
• Contract

Hands-on Tanium SME role embedded within a long-term strategic client's cyber security team, starting with Tanium Discovery to map the environment before broadening into other modules. Involves assessing the current setup, advising on best practice, optimising capabilities and transferring knowledge to the internal team, working autonomously with occasional on-site presence in London.

Tanium · Tanium Discovery · Tanium Certified Administrator +3

• Newcastle upon Tyne
• Hybrid
• £57,000 pa
• Mid-level
• Permanent

Protect business systems, infrastructure and data by monitoring, investigating and responding to cyber threats and incidents. Manage vulnerability remediation, patching and endpoint security while securing cloud, network and endpoint environments. Support governance, audits and compliance with standards such as ISO 27001 and Cyber Essentials Plus, working with internal teams and third-party suppliers.

SIEM · EDR · Microsoft Defender +3

• Reading
• Remote
• Senior

Designs, develops and reviews secure architectures across cyber security, cloud and enterprise environments for defence customers, using AWS and/or Azure. Acts as a trusted technical adviser, producing architecture documentation, security assurance artefacts and risk assessments while engaging directly with customer stakeholders and attending occasional site visits.

AWS · Azure

• Cambridge
• On-site
• £80,000 – £100,000 pa
• Senior
• Permanent

Owns software security strategy, architecture and standards across a diverse product portfolio, embedding threat modelling and secure-by-design into the full lifecycle. Works with engineering and product teams on architecture reviews, vulnerability management, CI/CD security and release criteria, plus EU Cyber Resilience Act compliance. Desirable background includes embedded systems, IoT, Android and embedded Linux.

Android · Embedded Linux

• Cheltenham
• On-site
• £550 – £750 pd
• Senior
• Contract

An IdAM Architect role within a Security Architecture team, shaping enterprise identity and access capabilities across cloud transformation and service management convergence programmes. Day to day involves security architecture reviews, risk and vulnerability assessments, threat modelling, and designing identity solutions using SSO, MFA, IGA, PAM and federation standards. Works closely with solution architects, engineers and risk advisors to embed security by design.

Microsoft Entra ID · Azure AD · SailPoint +3