Cyber Security Jobs

• Liverpool
• Hybrid
• £60,000 – £65,000 pa
• Senior
• Contract

Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.

SIEM · IAM · DLP +1

• London
• Hybrid · 1 day in office
• £800 – £900 pd
• Senior
• Contract

Translate high-level SecOps transition strategies into detailed, low-level implementation plans across security engineering, threat and vulnerability management and security testing. Define operational readiness criteria, phase-gate checklists and multi-year delivery roadmaps, coordinating dependencies with architecture, GRC and technical SMEs. Requires active SC clearance and UK Government or regulated-environment experience.

SIEM · IAM · PAM +1

• Colchester
• Remote
• £51,000 – £55,000 pa
• Mid-level
• Permanent

Hands-on security role managing and enhancing controls across the IT infrastructure, covering incident response, threat detection, vulnerability management and compliance. You will work with Microsoft security tooling including Entra ID, Defender, Purview and Intune, support audits and frameworks such as NIST and ISO 27001, and help shape security strategy in a small collaborative IT team.

Microsoft 365 · Microsoft Entra ID · Microsoft Defender +4

• Birmingham
• £500 – £560 pd
• Contract

Support the design, development, operation and optimisation of an Elastic-based SIEM platform, strengthening threat detection, security monitoring and incident response. Configure Elasticsearch pipelines to ingest security data including from Kafka, refine queries, rules, alerts and dashboards, and work with security analysts, architects and Security Operations across transitions and transformations.

Elasticsearch · Logstash · Kibana +7

• London
• On-site
• £450 – £455 pd
• Mid-level
• Contract

Hands-on SOC and incident response role monitoring, triaging and investigating cyber security threats across macOS endpoints, Linux cloud workloads, microservices and containerised platforms. You will contain and remediate incidents, document findings and evidence, and contribute to detection rules and response playbooks while working closely with security and engineering teams.

macOS · Linux · Containers +4

• London
• On-site
• £475 – £525 pd
• Contract · Shift work

Hands-on SOC and incident response role investigating cyber security threats across macOS endpoints, Linux cloud workloads, microservices and containerised environments. Responsibilities include alert triage, severity assessment, containment and remediation, telemetry correlation, evidence documentation and improving detection playbooks. On-site shift work covering 10-hour shifts between 06:00 and 16:00.

SIEM · EDR · XDR +3

• London
• Hybrid · 2 days in office
• £70,000 – £80,000 pa
• Lead
• Permanent

Lead network security operations for a global enterprise as an L3 subject matter expert, handling major incident response and technical leadership. The role centres on Cisco Nexus routing and switching, Palo Alto, FortiGate, Cisco FTD and ISE firewalls, plus BGP, OSPF, VXLAN, EVPN and IPsec VPNs, with wireless, SD-WAN and optional Python or PowerShell automation.

Cisco Nexus · Palo Alto · FortiGate +5

• Kings Hill
• Hybrid
• £54,500 – £55,000 pa
• Mid-level
• Permanent

Monitor, triage and investigate security alerts, incidents and requests, managing records through to closure and coordinating recovery. Use tools such as Tenable and Darktrace across cloud and wider IT infrastructure, supporting vulnerability management, threat intelligence and malware analysis, with on-call backup for emergency response.

Tenable · Darktrace

• Leeds
• Hybrid · 3 days in office
• £65,000 – £70,000 pa
• Lead · manages people
• Permanent

Lead a cyber security team day to day, covering resource planning, rotas and performance management, while overseeing incident response, vulnerability management and cloud security migration. Act as escalation point for security incidents and lead war-gaming exercises within an ITIL and ISO 27001 framework, requiring hands-on Azure security expertise.

Azure · Windows Server · VMware +7

• London
• Director · manages people

Lead and develop the organisation's cyber security strategy, owning the information security framework including ISO 27001 and Cyber Essentials Plus. Reporting to the CIO, you will run security operations, manage an outsourced SOC, oversee incident response and vulnerability management, and mentor the security team. Legal-sector experience is mandatory, and the role spans Microsoft/Azure cloud security and SaaS assurance.

Microsoft Azure · SOC

• Sunbury-on-Thames
• Hybrid · 3 days in office
• Mid-level

Monitors and administers anti-malware, EDR, application control and DLP tooling plus OS patch deployment across bp's global operational technology and process control networks. The role sits in the OT Security Operations service, managing secure file transfer, vulnerability and asset inventory tooling, and supporting incident response while working closely with site teams. Requires a minimum of three days per week on-site at Sunbury.

Trellix · Microsoft WSUS · Layer 2 Networking +1

• London
• Hybrid
• £100,000 – £118,000 pa
• Senior
• Permanent

Lead cybersecurity advisory engagements for a global IT consultancy, covering risk assessments, maturity reviews, strategy and transformation roadmaps. Advise CISOs and CTOs, embed security into cloud and digital transformation programmes, and support bids and business development while mentoring junior consultants.

• Bridgend
• On-site
• £47,046 – £55,696 pa
• Senior · manages people
• Permanent

Develops and maintains IaaS and PaaS cloud infrastructure within South Wales Police's managed cloud tenants, covering design, deployment, performance tuning, security protocols and disaster recovery. May supervise junior ICT specialists and collaborate with cross-functional teams, working mainly with Microsoft Azure, AWS, Windows Server, Active Directory and Azure Monitor.

Microsoft Azure · AWS · Azure Monitor +5

• St Albans
• Director · manages people

Owns the global information security strategy as acting CISO, reporting to the CIO and advising the PLC Board on cyber risk. Leads a security function spanning IT and OT, including ICS, SCADA and IoT, with responsibility for NIST-aligned frameworks, incident response, threat intelligence and SOC capability.

NIST Cybersecurity Framework · ISO 27001 · GDPR +7

• London
• Hybrid · 3 days in office
• £100,000 – £120,000 pa
• Lead · manages people
• Permanent

Hands-on leadership of an MDR security operations function, owning SLA and KPI delivery across a varied mid-market client base while line-managing SOC Analysts and Senior Analysts. Sets investigation quality standards, handles major incidents and escalations, and matures detection, runbooks and automation, including AI-assisted SOC tooling. Combines client-facing service governance with people development and pre-sales support.

Microsoft Sentinel · Microsoft Defender