Cyber Security Jobs

• Sheffield
• Hybrid · 2–3 days in office
• £500 – £600 pd
• Senior
• Contract

Lead the response to high-severity IT incidents across network, infrastructure, cloud and security environments, coordinating technical teams, suppliers and stakeholders to restore services within agreed targets. The role involves chairing incident and crisis calls, post-incident reviews, root cause analysis, ITIL processes, disaster recovery and business continuity planning, plus executive reporting and on-call duties.

Cisco · VMware · ServiceNow +3

• Reading
• Hybrid · 2 days in office
• £500 – £600 pd
• Contract

Owns the end-to-end major incident lifecycle in a complex, multi-supplier enterprise IT environment, coordinating technical teams, suppliers and business stakeholders to restore services quickly. Drives root-cause investigations, post-incident reviews and continual service improvement, using ITIL 4 and ServiceNow. Requires active SC clearance and sole British, Italian or Japanese citizenship.

ServiceNow

• London
• Remote
• £500 pd
• Senior
• Contract

Lead end-to-end management of cyber security incidents and major security events within a secure government programme, coordinating technical response teams through containment, eradication and recovery. Act as primary point of contact for incident communications, run response bridges and war-rooms, and produce post-incident reports and root cause analysis. Works alongside SOC, analysts, infrastructure teams and third-party suppliers to improve cyber resilience.

SIEM · EDR

• Abingdon
• £37,000 – £45,000 pa
• Mid-level

Hands-on security operations role within an MSP, monitoring and investigating alerts across Microsoft 365, Sophos and other platforms for both internal and client environments. Acts as a technical escalation point for the Service Desk and Infrastructure teams, covering incident response, vulnerability and patch management, tenant hardening and remediation tracking.

Microsoft 365 · Sophos · Microsoft Defender +3

• Corsham
• Hybrid
• £550 – £600 pd
• Lead
• Contract

Lead enterprise vulnerability management and cyber risk reduction in a secure MOD/Defence environment, owning frameworks, policies and remediation governance. Coordinate identification, prioritisation and remediation across enterprise systems, optimise tools such as Tanium and Elastic, apply CVSS, and produce board-level reporting. Also supports major cyber security incident management and threat intelligence correlation.

Tanium · Elastic

• Paris, France
• Mid-level

Customer-facing technical role partnering with security and IT stakeholders to drive platform adoption, reduce risk and demonstrate measurable value. You build technical success plans, spot adoption gaps and retention risks early, and feed technical health insights into renewals, QBRs and expansion discussions alongside Account Executives and Solutions Engineering.

• London
• Mid-level

Customer-facing technical role partnering with security and IT stakeholders to drive platform adoption, reduce risk and improve customer health. Works with Account Executives, Solutions Engineering and Renewals on technical success plans, adoption analytics, QBRs and renewal readiness. Requires fluency in French and English.

• London
• Hybrid · 3 days in office
• £100,000 – £120,000 pa
• Lead · manages people
• Permanent

Hands-on leadership of an MDR security operations function, owning SLA and KPI delivery across a varied mid-market client base while line-managing SOC Analysts and Senior Analysts. Sets investigation quality standards, handles major incidents and escalations, and matures detection, runbooks and automation, including AI-assisted SOC tooling. Combines client-facing service governance with people development and pre-sales support.

Microsoft Sentinel · Microsoft Defender

• London
• Lead

Owns product strategy, roadmap and commercial model for a new publicly trusted certificate authority, spanning ACME issuance, certificate lifecycle automation, revocation and Certificate Transparency. Works across engineering, compliance, legal and go-to-market on high-consequence infrastructure, with an ACME-first, automation-first and post-quantum-ready design.

AWS Certificate Manager · AWS Private CA · Google Trust Services +7

• Newcastle upon Tyne
• Hybrid
• £48,337 – £57,666 pa
• Lead
• Permanent

Senior technical lead role owning an estate of around 80 applications and 60 services across Windows, Linux/UNIX, Azure and SaaS, from building management systems to teaching and learning services. Combines hands-on support, database management, major incident oversight, root cause analysis and business analysis, while deputising for the Application Support Manager and mentoring the team.

Windows · Linux · UNIX +5

• Nottingham
• Hybrid
• £72,277 – £86,060 pa
• Senior
• Permanent

Owns cyber security compliance across PCI-DSS, the Smart Energy Code, Retail Energy Code and ITGC, managing external audits end-to-end. Leads protective monitoring with SOC/CERT and managed service providers, vulnerability management and penetration testing, and incident response up to Board level. Also mentors junior colleagues and supports DevSecOps teams with threat assessments and IaC reviews.

Splunk · Microsoft Sentinel · Qualys +7

• Wolverhampton
• Lead · manages people

Lead physical, cyber, personnel and supply-chain security across multiple UK aerospace and defence manufacturing sites, reporting to the global CISO. Build and manage a security team, act as Common Responsible Person for EASA Part-IS, and drive governance, compliance and incident response in a highly regulated environment.

CCTV · EASA Part-IS · AirCyber +7

• Italy
• Remote
• €55,500 – €85,250 pa
• Senior

Serves as the technical bridge between CrowdStrike and its European integration partner ecosystem, driving design, delivery and go-to-market of Falcon Platform integrations. Acts as a sales engineer for partner activity, running demos, proof-of-value and RFI/RFP responses while building demo environments and reference architectures. Involves public speaking, partner enablement and applying agentic AI to integration workflows.

CrowdStrike Falcon · Go · Python +7

• Spain
• Remote
• €55,500 – €85,250 pa
• Senior

Serves as the technical bridge between CrowdStrike and its Integration Partner ecosystem across Europe, driving design, delivery and go-to-market of Falcon Platform integrations. Acts as a sales engineer for partner activity, running demos, proof-of-value and RFI/RFP responses while building demo environments and reference architectures. Involves public speaking, partner enablement and exploring agentic AI to improve integration workflows.

CrowdStrike Falcon · XDR · REST APIs +7

• London
• Remote
• Senior

Senior technical product engineer role advising partners, customers and internal teams on cloud-native security, Cortex capabilities and SOC automation. Involves cross-functional projects, product roadmap feedback, and building playbooks and integrations across AWS, Azure and GCP.

AWS · Azure · GCP +3