Cyber Security Jobs

• Cheltenham
• Hybrid
• Lead
• Permanent

Leads high-end adversary simulation engagements for clients with mature security postures, operating across the full attack lifecycle from initial access and EDR evasion through lateral movement to objective completion. Also contributes to capability development, tooling and methodologies, mentors junior Red Teamers, and represents the practice to C-level stakeholders.

EDR

• Grange, Greater London
• Hybrid
• £55,000 – £60,000 pa
• Mid-level
• Permanent

Conducts penetration tests across web applications, infrastructure, cloud environments and APIs, with exposure to Active Directory, AWS/Azure/GCP and tools like Burp Suite, Kali Linux, Nmap and Metasploit. Owns testing engagements end to end, writes clear reports and advises clients on remediation, with scope to move into red teaming, assumed breach and AI security.

Burp Suite · Kali Linux · Nmap +4

• London
• Hybrid · 4 days in office
• £500 – £550 pd
• Senior
• Contract

Hands-on contract role managing a broad estate of security tooling across network, email, endpoint and web, plus red team platforms for forensics, threat monitoring and deception. Day to day involves patching, upgrades, policy tuning, troubleshooting, and deploying and integrating new tools, including vendor replacements such as a new web proxy and email gateway. Works within an IT Security team at a financial services organisation, supporting audit and risk activity alongside engineering projects.

Python · Bash · PowerShell +5

• Working From Home, UK
• Remote
• Senior
• Permanent

Lead full-scope red team engagements spanning cyber, physical, social engineering and process attack surfaces, emulating real-world adversaries. Build phishing infrastructure and payloads, operate C2 frameworks like Cobalt Strike, and develop custom tooling and EDR evasion tradecraft. Set methodology and mentor operators while working closely with defensive teams.

Cobalt Strike · Nighthawk

• Filton
• Hybrid
• £45,000 – £55,000 pa
• Senior

Join a defence and security organisation's Cyber Operations team to test security controls, validate SOC detection capabilities and uncover vulnerabilities before exploitation. You'll support Red Team exercises, conduct infrastructure and web application testing, produce risk reports and brief stakeholders, working alongside Threat Intelligence and Incident Response specialists.

Kali Linux · Parrot OS · Active Directory +7

• Malvern, England, United Kingdom
• On-site

Join a team delivering offensive security solutions in real-time operational mission environments, planning and executing advanced red team engagements that simulate real-world attacks. The role involves exploiting vulnerabilities across infrastructure, applications and cloud platforms, bypassing defences such as firewalls, EDRs and IDS/IPS, and developing realistic adversary TTPs. Work is fully on-site at the Malvern facility, focused on defence and national security.

AWS · Azure · GCP +7

• Royal Leamington Spa
• Hybrid · 3 days in office
• £550 – £650 pd
• Senior
• Contract

Hands-on contract role owning the end-to-end detection engineering lifecycle, translating threat intelligence, hunting findings and adversary techniques into effective detection rules. Builds behavioural analytics and detection content across endpoint, identity, cloud, network and email telemetry using KQL, SPL, Sigma, Python and PowerShell, with tuning, purple teaming and Detection-as-Code work alongside SOC, IR and Red Team specialists.

Microsoft Sentinel · Splunk · Elastic +6

• Birmingham
• Hybrid · 3 days in office
• £80,000 – £87,000 pa
• Lead
• Permanent

Acts as the University's authority for security architecture and protective controls, running a continuous control validation programme using breach and attack simulation, purple teaming and posture monitoring. Owns control standards and baselines, governs exceptions and drives remediation, and serves as design authority embedding secure-by-design and threat modelling into major technology change across zero trust, multi-cloud and AI.

Azure · AWS · GCP +5

• Birmingham
• Hybrid · 3 days in office
• £80,000 – £87,000 pa
• Lead
• Permanent

Acts as the University's authority for security architecture and protective controls, running a continuous control validation programme using breach and attack simulation, purple teaming and posture monitoring. Owns control standards and baselines, governs exceptions and drives remediation, and acts as design authority embedding secure-by-design and threat modelling into major technology change across cloud, identity and AI.

Azure · AWS · GCP +5

• London
• On-site
• Senior · manages people
• Permanent

Lead and work hands-on with a small team to identify, design and deliver business automation that replaces manual processes across Sales, Finance, Marketing, Customer Success and HR. Build automations using AI, workflow platforms (Zapier, Make, n8n, Workato), APIs and data integration, balancing rapid prototyping with robust, maintainable solutions while mentoring the team.

Zapier · Make · n8n +2

• Bracknell
• £60,000 – £70,000 pa

Security Application ArchitectSalary: £60-70K per annum + enhanced benefitsLocation: Bracknell, with regular travel to London and the South WestSecurity Clearance: Must be willing and eligible to undergo high-level security clearanceAn exciting opportunity has arisen for a Security Application Architect to…

• Chippenham
• Hybrid
• Mid-level
• Permanent

Day-to-day administration of the Spacecraft Control Centre's Linux and Cisco-based command and control systems, including configuration, equipment swap-outs, and restoration of capability. Acts as lead engineer for deployment planning, testing, and patching of system upgrades across a multi-site SCOF network, liaising with customers on fault investigation. Requires in-date RHCSA and offers hybrid, flexible working.

Cisco · CCNP · CCNA +2

• Stevenage
• Hybrid
• Mid-level
• Permanent

Design, provision and maintain Linux systems and engineering hardware underpinning a development environment, with a focus on Red Hat Enterprise Linux. Provide technical leadership to project teams, automate infrastructure with Ansible and scripting, and work with security teams on compliance. Based in Stevenage with hybrid working.

Red Hat Enterprise Linux · Ansible · Python +3

• Newbury
• Senior

Monitors and manages network equipment and infrastructure for customer services across EMEA and North America, with a strong focus on firewall and network security administration. Day-to-day work covers Cisco ASA, Firepower and Palo Alto firewalls, VMware vSphere and NetApp storage, plus automation and out-of-hours support on a rota.

Cisco ASA · Cisco Firepower Threat Defense · Palo Alto PA-Series +7

• Boston, United States
• Hybrid · 2 days in office
• US$140,000 – US$220,000 pa
• Senior

Owns the product strategy for CrowdStrike Falcon Privileged Access, driving just-in-time access, secrets management, session brokering and zero standing privileges across endpoint, infrastructure and cloud. Works with designers and other product teams to embed privileged context into the Falcon platform, and uses AI agents and rapid prototyping as core parts of the workflow.

CrowdStrike Falcon · CyberArk · BeyondTrust +7