Cyber Security Jobs

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

Appvia · London · £75,000 – £90,000 pa

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for public and private sector clients. You will own technical delivery in your area, create reusable modules and deployment patterns, and mentor less experienced engineers within multi-disciplinary consulting teams.

identifi Global Resources · Harrow

Hands-on architect role at an Elastic partner, designing SOC and SIEM architectures on Elastic/ELK for UK Defence and NATO clients. You own the architecture with the client and stay close to delivery, supporting greenfield builds and recovering existing environments alongside a team of 30+ SMEs, mostly working remotely with occasional client-site visits.

CrowdStrike · London

Owns the global product vision and multi-year strategy for CrowdStrike's Falcon Next-Gen SIEM platform, prioritising third-party data connectors and integration pipelines based on market research and customer demand. Works across engineering, data services, sales ops and partners to define ingestion SLOs, mentor product managers and expand the SIEM ecosystem.

CrowdStrike · Pune, India

Supports integrations for Falcon modules, primarily NG-SIEM and Onum, partnering with a Product Manager, engineering, and business development across a team of ~30 engineers and 300+ growing integrations. Drives scheduling, scoping, and end-to-end execution of large-scale engineering projects, coordinating cross-functional teams across Europe, the UK, and the US.

Forward Role · Leeds · £54,000 – £65,000 pa

Owns day-to-day SIEM operations, defining and tuning detection rules and investigating alerts through to resolution. Runs incident response, threat intelligence and hunting, and EDR management while collaborating with Infrastructure, Networks, DevOps and an outsourced SOC. Also helps design and document security policies, standards and control test methods.

Tank Recruitment · London

Hands-on incident response role covering detection, triage, investigation, containment and recovery of cyber incidents in a complex enterprise environment. Day to day involves monitoring SIEM and EDR/XDR alerts, analysing logs, packet captures and forensic images, threat hunting, and mapping activity to MITRE ATT&CK. Also maintains playbooks, evidence records and post-incident reports, and briefs senior stakeholders.

VIQU IT · London · £350 – £400 pd

Day-to-day BAU security operations role focused on Rapid7, SIEM monitoring, alert triage and vulnerability management, including clearing an existing alert backlog. Also covers Mimecast email security, Microsoft Purview eDiscovery/DSAR/DLP, CrowdStrike and Netskope administration, plus security investigations and documentation.

Experis · Eastleigh · £50,000 pa

Technical Consultant - Threat Detection, Response & IntelligenceLocation: Hursley - On-siteSecurity clearance: UK national with a minimum of 5 years' UK residency requiredCertification: Microsoft Certified: Security Operations Analyst AssociateWe are seeking a technically strong and proactive Technical Consultant - Threat...

Adecco · Colchester · £51,000 – £55,000 pa

Hands-on security role managing and enhancing controls across the IT infrastructure, covering incident response, threat detection, vulnerability management and compliance. You will work with Microsoft security tooling including Entra ID, Defender, Purview and Intune, support audits and frameworks such as NIST and ISO 27001, and help shape security strategy in a small collaborative IT team.

Experis · Winchester · £41,000 – £50,000 pa

Monitor, triage and investigate security alerts across SIEM and wider security tooling, identifying indicators of compromise and conducting initial incident investigations. Support the full incident response lifecycle including containment, remediation and post-incident learning, while tuning detection rules to reduce false positives. Work with security and infrastructure teams on threat intelligence, trend reporting and continual service improvement.

Adecco · Warwick · £65,000 – £75,000 pa

Designs and develops security automation workflows and playbooks, automating alert triage, investigation and response while integrating security tools to cut manual workload. Works closely with Security Operations teams using Python and PowerShell, supporting SIEM/SOAR evolution and a strategic migration to Google SecOps (Chronicle).

HAYS Specialist Recruitment · Manchester · £40,000 – £46,500 pa

Hands-on security role covering SIEM, EDR, email security and vulnerability platforms, plus IDS/IPS monitoring and incident investigation. You'll embed security into project lifecycles and SDLC, work with a managed service provider on alerts, and support Cyber Essentials and ISO 27001 governance and third-party risk assurance alongside the Cyber Security Manager.

Netcraft · London

Lead a newly formed backend team owning several key products, including an integration layer for SIEM platforms, a system engaging conversational scammers at scale, and email analysis for phishing detection. Split time between hands-on engineering (30-50%) and managing a delivery roadmap, modernising legacy platforms while commercialising new ones.

Radius Consultancy · London · £80,000 – £90,000 pa

Strengthen and maintain cyber security posture through assurance, incident response coordination, vulnerability management and governance. Work with frameworks including ISO 27001, SOC2, NIST and GDPR, overseeing MSSP and SOC activities, with technical involvement in investigations, threat analysis and major incidents.

Fynity · Farnborough · £48,000 – £58,000 pa

Senior SOC Analysts – Multiple OpportunitiesFarnborough | Fully On-Site | 24/7 Shift PatternSalary + Shift Allowance | DV Clearance Eligibility RequiredEnjoy the investigation side of SOC work? There’s plenty to get into here.I’m recruiting for several Senior SOC Analysts to...

Reed Technology · Newcastle upon Tyne · £35,000 – £45,000 pa

Investigating and responding to security incidents at 2nd Line level, monitoring customer environments and SIEM alerts, and threat hunting across a Microsoft security stack including Sentinel, Defender and Entra. Uses KQL and PowerShell for investigations and automation, acts as an escalation point for junior analysts, and supports vulnerability assessment and remediation. Initially on a 4-on, 4-off night shift pattern before moving to an 8-hour shift model.