Cyber Security Jobs

• Cambridge
• Hybrid · 2 days in office

Explore and prototype machine learning solutions across domains, using language models, neural networks, statistical methods and classical ML, then implement models into the wider software stack. Work independently and with software engineers and security analysts, optimising models for latency and memory on edge devices. Hybrid role with two compulsory days a week in the Cambridge office.

PyTorch · TensorFlow · scikit-learn +2

• Cambridge
• Hybrid · 2 days in office
• Senior

Conducts independent and collaborative research into large language models, statistical methods and classical machine learning, prototyping ideas and implementing models into the wider software stack. Produces latency- and memory-optimised solutions for deployment on edge devices, working closely with software engineers and security analysts.

PyTorch · TensorFlow · scikit-learn +7

• United Kingdom
• Remote
• Senior

Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.

SIEM · SOAR · LLMs +1

• Ireland
• Remote
• Mid-level

Investigates emerging malware and cyber threats across the full adversary kill chain, validating and improving Falcon's detection coverage. Works with Threat Research, Engineering, Data Science and Red Team to turn findings into product improvements, using automation, AI and machine learning to scale analysis.

CrowdStrike Falcon · Splunk · Elasticsearch +4

• United Kingdom
• Remote
• Mid-level

Investigates emerging malware and cyber threats across the full adversary kill chain, validating and improving Falcon's detection coverage. Works with Threat Research, Engineering, Data Science and Red Team to turn findings into product improvements, supporting external security testing programmes and building automation to speed analysis.

CrowdStrike Falcon · Splunk · Elasticsearch +4

• Cambridge
• On-site
• Mid-level
• Permanent

Consultants assess critical systems for vulnerabilities, building proof-of-concept demonstrators that combine software, hardware and user interaction. The role spans reverse engineering, low-level programming and rapid prototyping for UK defence and national security clients, working on-site alongside around 40 scientists and engineers.

• United Kingdom
• Remote
• Senior

Owns the strategy, roadmap and execution for the Endpoint Windows Platform, translating OS and security requirements into product priorities. Partners closely with Engineering, Microsoft and cross-portfolio teams on agent architecture, performance and platform change management, and supports go-to-market enablement.

Microsoft · Windows · Sophos Endpoint +6

• Cambridge
• On-site
• Mid-level
• Permanent

Consultants assess critical systems for cyber-physical vulnerabilities, combining deep hardware research, testing and reverse engineering with rapid prototyping of proof-of-concept demonstrators. Work spans niche defence and national security projects, interfacing with hardware via protocols like JTAG and UART and using test equipment such as oscilloscopes. The role is fully on-site in Cambridge labs within a flat, collaborative ~40-person consultancy.

JTAG · UART · Oscilloscopes

• London
• US$215,000 – US$225,000 pa
• Lead

Lead research, design and evaluation of detection models identifying automated, fraudulent and malicious activity across Internet-scale traffic. Own the detection measurement framework for noisy or delayed ground truth, mentor others, and drive cross-functional detection strategy with ML, data and product teams.

Python · SQL

• London
• Senior · manages people

Owns the optimisation and strategy of transaction monitoring controls across Barclays UK and International, tuning surveillance systems and ensuring governance and escalation procedures are followed. Uses SQL, Scala, Spark and Python for data exploration and visualisation, collaborating with technical and non-technical stakeholders on financial crime risk.

SQL · Scala · Spark +1

• Paris, France
• On-site
• Senior

Owns planning, coordination and execution of test and quality activities within a cross-functional Identity Verification product team, covering web, mobile, backend and ML-powered products. Builds maintainable automated test frameworks and suites, mentors colleagues, and leads test engineering initiatives across teams, combining automation with exploratory testing.

Playwright · Cypress · Selenium +12

• London
• On-site
• Senior

Owns test planning, coordination and execution within a cross-functional identity verification product team, covering web, mobile, backend and ML-powered journeys. Builds maintainable automated test frameworks, combines automation with exploratory testing, and mentors colleagues while improving CI/CD pipelines and release feedback loops.

Playwright · Cypress · Selenium +12

• Edinburgh
• £400 – £450 pd
• Senior

Designs end-to-end AI, ML and data architectures on Google Cloud Platform, covering Generative AI, RAG, agentic AI and LLMOps. Works with engineering, data science and security teams to translate business needs into secure, compliant cloud-native solutions, and leads architecture governance through review committees.

GCP · BigQuery · Cloud Run +7

• Royston
• £58,000 – £60,000 pa
• Mid-level

Owns AI security initiatives within a Cyber Security and Compliance team, evaluating and integrating AI security tooling and mitigating AI-specific threats such as prompt injection, data leakage and model poisoning. Also builds AI-driven solutions for threat detection, vulnerability management and incident response, and runs threat modelling and adversarial testing of AI systems.

Python · OWASP Top 10 for LLM Applications · MITRE ATLAS +1

• Birmingham
• Hybrid · 3 days in office
• £300 – £400 pd
• Senior
• Contract

Lead a six-month AI and digital platform security initiative, defining controls and guardrails for GenAI and machine learning across global operations. Architect defences spanning AWS, Azure, hybrid and on-prem environments, aligning with NIST and ISO 27001 while mentoring a senior team of security architects and advising C-suite stakeholders.

AWS · Azure · GenAI