Cyber Security Jobs

• Cheltenham
• Hybrid
• Mid-level
• Permanent

Research new and innovative solutions to challenging client problems and assess existing client solutions to prove or disprove their security fundamentals. Contribute to team growth through knowledge sharing and mentoring, within a newly formed National Security Business Unit working on varied client projects.

• London

Investigates emerging cyber threats and attacker TTPs across production and lab environments, analysing security data to improve detection and response. Works closely with development teams, using scripting and data analysis to test new approaches to spotting malicious or anomalous activity, with a focus on AI and agentic AI security challenges.

Python · Bash · PowerShell +1

• Cambridge

Investigates emerging cyber threats and attacker TTPs across production and lab environments, analysing security data to improve detection and response. Works closely with development teams to turn research findings into product improvements, using scripting and data analysis to test new detection approaches.

MITRE ATT&CK · PowerShell

• Ireland
• Remote
• Senior

Security researcher role on CrowdStrike Intelligence's Advanced Research Team, developing automated solutions for large-scale data collection, running Internet-wide scans, operating and extending honeypots, and performing vulnerability research. Involves reverse engineering, patch analysis, and publishing research on the company blog or at conferences, alongside ad-hoc technical support for other intelligence teams.

CrowdStrike · Android · iOS +3

• Romania
• Remote
• Senior

Security researcher role on CrowdStrike Intelligence's Advanced Research Team, developing automated solutions for large-scale data collection, operating and extending honeypots, performing vulnerability research, and reproducing emerging vulnerabilities. The position also involves publishing research on the blog or at conferences and building GenAI/LLM workflows to support analysis and security research.

CrowdStrike · Python · Android +4

• Bristol
• £40,704 – £59,390 pa
• Senior
• Permanent

Conducts novel academic and high-TRL research into agentic AI security assurance for autonomous network management, characterising threat landscapes, running adversarial testing, and building runtime decision validation and dynamic trust scoring. Develops automated mitigation such as rollback and agent isolation, with experimental evaluation on a partner's agentic AI platform and the JOINER national open-networks testbed.

O-RAN · 3GPP · ETSI +2

• London
• Hybrid
• £89,000 pa
• Senior

Architect secure, resilient network connectivity spanning AWS cloud platforms and on-premise infrastructure, supporting clinicians and researchers accessing sensitive genomic data. The role balances long-term network strategy with practical delivery, defining target architectures, standards and reusable patterns across cloud, hybrid, remote-access and partner connectivity. Involves designing AWS networking, hybrid multi-site connectivity, zero-trust security, and providing architectural governance through delivery.

AWS · Cisco · NVIDIA +7

• London
• Senior · manages people

Lead the Threat Application Services team within Cloudforce One, owning the Threat Events platform, external Threat Intel APIs, and backend systems that feed IOCs into WAF and Gateway for automated mitigation. Set architectural direction and operational excellence for distributed, high-latency-sensitive services, while hiring and mentoring engineers building agentic threat intelligence tools.

Cloudflare Workers · SQLite · D1 +4

• United Kingdom
• Remote
• Senior

Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.

SIEM · SOAR · LLMs +1

• Bangor
• £21,805 pa
• Entry level
• Contract

Fully funded three-year PhD studentship researching physical-layer network security within Bangor University's DSP Centre, supported by EPSRC and regional innovation projects. The role involves theoretical and experimental work on optical, wireless and 5G/6G communications, joint communications and sensing, and signal processing, alongside publishing, presenting and assisting with undergraduate supervision.

• London
• Mid-level
• Permanent

Detect and mitigate invalid traffic and ad fraud across Amazon's advertising network by reverse-engineering malware, inspecting network traffic and hunting threats, including on the dark web. The role blends security engineering, botnet mitigation and intelligence sharing with teams across Amazon, requiring creativity and judgement in a highly ambiguous fraud landscape.

• London
• Mid-level
• Permanent

Respond to security incidents across AWS cloud services, triaging issues and driving internal teams to timely remediation while balancing technical and business risk. Build internal automation tools and utilities, mentor junior staff, and share on-call responsibilities. Works within AWS Cloud Response, coordinating multi-team responses and publishing guidance for customer-impacting issues.

AWS

• United Kingdom
• Remote
• Mid-level

Customer-facing technical role guiding higher-education and research clients through security transformation, running discovery, demos, workshops and technical validation across on-prem, cloud and SOC solutions. Works with Professional Services, Customer Success and channel partners to drive adoption, and requires a strong pre-sales background plus experience with Systems Integrators.

Palo Alto Networks

• London
• Mid-level

Acts as primary technical responder for premium enterprise customers, autonomously investigating complex threat telemetry and handling live incident response for volumetric DDoS and application-layer attacks. Implements mitigation across OSI Layers 3, 4 and 7 using Cloudflare's security suite, performs packet and traffic flow analysis, and advises customers during active incidents. Requires 24x7 rotating shifts.

Cloudflare · Magic Transit · Magic Firewall +7

• Birmingham
• Hybrid · 3 days in office
• £80,000 – £87,000 pa
• Lead
• Permanent

Acts as the University's authority for security architecture and protective controls, running a continuous control validation programme using breach and attack simulation, purple teaming and posture monitoring. Owns control standards and baselines, governs exceptions and drives remediation, and serves as design authority embedding secure-by-design and threat modelling into major technology change across zero trust, multi-cloud and AI.

Azure · AWS · GCP +5