Cyber Security Jobs

• Derby
• On-site
• £40,000 – £70,000 pa
• Permanent

Design, develop and test embedded software in C/C++ for secure communications products, working with RTOS, ARM microcontrollers and register-level programming. The role involves unit testing, static analysis, code reviews and technical documentation within a multidisciplinary team, with security and quality central to delivery.

STM32 · JTAG · ETM +2

• Cambridge
• Hybrid · 3 days in office
• Senior
• Permanent

Leads the design and delivery of complex features in a cryptographic security product, working hands-on across embedded software, platform components, client tools and APIs. Sets technical direction, mentors engineers and supports system-level architecture decisions on availability, latency and data models. Hybrid role in Cambridge, three days onsite.

C · Python

• Cambridge
• Hybrid
• £60,000 – £70,000 pa
• Senior

Senior role shaping system design and test criteria for Linux-based embedded systems, leading software security work including Hardware Root of Trust, Secure Boot and TPM integration. Day to day involves embedded C development, Yocto build systems and Linux kernel work, integrating software with hardware via I2C, SPI and UART, plus root-cause debugging. The position also includes mentoring junior engineers within an Agile R&D environment.

Linux · Yocto · Jenkins +6

• Derby
• On-site
• £25,000 – £60,000 pa
• Permanent

Develops and tests high-integrity software for encryption and secure communications products, working in embedded C/C++ with a strong focus on functional correctness, formally defined specifications and industry standards. Involves unit and automated testing, code reviews, static analysis and technical documentation within a small, highly skilled engineering team.

LDRA · Parasoft

• London
• On-site
• Senior

Builds and maintains iOS SDKs for document capture, working on camera capabilities, on-device image processing and machine learning. Collaborates with designers, product managers and engineers to ship scalable, accessible experiences, contributing to test automation and CI/CD pipelines in an agile team.

iOS SDK · React Native · Flutter +3

• Cambridge
• Hybrid · 2 days in office
• Mid-level

Partners with developers and product teams to embed quality from the start, designing and maintaining automated test frameworks across API, UI, integration and regression layers. Builds scalable suites into CI/CD pipelines, drives shift-left testing, and contributes to test strategy, code reviews and architecture discussions.

Cypress · Playwright · pytest +7

• London
• Hybrid · 2–3 days in office
• £90,000 – £120,000 pa
• Senior

Full-stack product engineering role in a cross-functional squad, owning mid-to-large initiatives end to end and shaping product strategy with designers and PMs. Stack centres on Go, AWS and Vue.js, with a strong emphasis on system design, testing, automation and mentoring other engineers.

Go · AWS · Vue.js +7

• Cambridge
• On-site
• £80,000 – £95,000 pa
• Senior
• Permanent

Owns software security strategy, roadmap and architecture across a product portfolio, leading threat modelling, secure design and security requirements. Defines secure architecture patterns and controls, embeds security into development and CI/CD, and oversees vulnerability management, security testing and release assurance while providing technical leadership to engineering teams.

Embedded Linux · Android · CI/CD

• London
• Senior
• Permanent

Security Architect role shaping security across a cloud-native environment, working closely with Architecture, Engineering, Product and Operations teams. Focus areas include GCP security, Kubernetes, DevSecOps, application and API security, identity, resilience and compliance (PCI DSS, GDPR, ISO 27001, SOC 2). Strong commercial GCP and Kubernetes experience is essential.

GCP · Kubernetes · API Gateways +4

• Cambridge
• On-site
• Mid-level
• Permanent

Consultants assess critical systems for cyber-physical vulnerabilities, combining deep hardware research, testing and reverse engineering with rapid prototyping of proof-of-concept demonstrators. Work spans niche defence and national security projects, interfacing with hardware via protocols like JTAG and UART and using test equipment such as oscilloscopes. The role is fully on-site in Cambridge labs within a flat, collaborative ~40-person consultancy.

JTAG · UART · Oscilloscopes

• Virtual Location - Uk
• Senior
• Permanent

Leads complex security testing engagements end-to-end across interconnected AWS microservice architectures, performing penetration testing and AI-augmented source code review. Investigates high-consequence risk hypotheses to documented conclusions, builds reusable mechanisms like fuzzers and detection rules, and mentors engineers while setting the team's peer-review bar.

AWS · Agentic AI

• Fleet
• Hybrid
• Mid-level

Owns day-to-day security alerting, investigations and incident response across a cloud-native microservice platform and internal IT estate, directing a Platform Ops team on remediation. Manages SIEM, endpoint and Microsoft 365 security tooling, vulnerability management, IAM and penetration testing engagements, while maintaining ISO 27001 documentation and UK GDPR compliance.

AWS · Kubernetes · EKS +5

• London
• Hybrid
• £80,000 – £120,000 pa
• Senior

Hands-on engineering role embedded in the Incydr product team, working directly with customers on technical health checks, custom integrations and troubleshooting. You get full access to the codebase and deployment tooling to diagnose and ship fixes, using AI coding tools to build purpose-built scripts and integrations. Expect some travel to customer sites, with most engagement remote under a hybrid model.

Incydr · Mihra AI · SCIM

• London
• On-site
• Lead · manages people
• Permanent

Lead product cybersecurity assurance across the HMND 01 humanoid robot platforms, defining security requirements, threat modelling and risk artefacts for safety-critical electromechanical systems. Own TARA, security management plans and remediation actions, drive compliance with IEC 62443, the EU Machinery Regulation and the Cyber Resilience Act, and build a PSIRT process while guiding a cross-functional security team.

CAN bus · Ethernet · KinetIQ +4

• Cambridge
• On-site
• £80,000 – £100,000 pa
• Senior
• Permanent

Owns software security strategy, architecture and standards across a diverse product portfolio, embedding threat modelling and secure-by-design into the full lifecycle. Works with engineering and product teams on architecture reviews, vulnerability management, CI/CD security and release criteria, plus EU Cyber Resilience Act compliance. Desirable background includes embedded systems, IoT, Android and embedded Linux.

Android · Embedded Linux