Cyber Security Jobs

• Bucharest, Romania
• Remote
• Senior
• Permanent

Owns major components of the Windows kernel-mode Falcon sensor, architecting and building anti-virus and EDR features that span file system, memory, process and networking subsystems. Leads projects end to end, from design through unit and component testing, while mentoring and collaborating with a distributed, cross-platform team.

Windows · Mac · Linux +1

• Reading
• Remote
• Senior
• Permanent

Owns major components of the Falcon endpoint sensor, a Windows kernel-mode driver that observes system activity, detects malicious behaviour and provides on-box prevention plus telemetry to the cloud. Work spans architecture, design and delivery across file system, memory, process and networking subsystems, with shared components across Windows, Mac and Linux. Involves leading projects, mentoring and collaborating with distributed teams.

Windows · Mac · Linux +2

• London
• On-site
• Senior

Provide advanced technical support for Cortex XSIAM customers, triaging tickets, calls and escalations within SLAs and performing application- and OS-level troubleshooting. Work with developers to reproduce issues and implement permanent fixes, and with technical account managers to mitigate risk in customer environments. Requires SIEM, EDR and endpoint security expertise plus UK security clearance.

Cortex XSIAM · Kubernetes · GCP +10

• United Kingdom
• Remote
• Senior

Provide advanced technical support for Cortex XSIAM customers, triaging issues via ticketing, phone and remote sessions, and performing application- and OS-level troubleshooting. Work with developers to reproduce faults and implement permanent fixes, and with technical account managers to mitigate risks in customer environments.

Cortex XSIAM · Kubernetes · GCP +10

• Newbury
• Senior

Monitors and manages network equipment and infrastructure for customer services across EMEA and North America, with a strong focus on firewall and network security administration. Day-to-day work covers Cisco ASA, Firepower and Palo Alto firewalls, VMware vSphere and NetApp storage, plus automation and out-of-hours support on a rota.

Cisco ASA · Cisco Firepower Threat Defense · Palo Alto PA-Series +7

• United Kingdom
• Remote
• Senior

Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.

SIEM · SOAR · LLMs +1

• Germany
• Remote
• Senior

Senior consultants join the technical team on front-page incident response engagements for Fortune 100 organisations, conducting intrusion investigations under project leadership and outside counsel. The role spans host and network forensics across Windows, Mac and Linux, threat hunting across large data sets, and producing written and verbal findings for customers, regulators and legal counsel.

CrowdStrike · Bro/Zeek · Suricata +6

• United Kingdom
• Remote
• Senior

Technical authority in the pre-sales process, scoping and designing CrowdStrike Falcon platform deployments across endpoint, threat intelligence, identity and cloud security. Builds SOWs, effort estimates and architecture roadmaps, and partners with Services Sales Executives and delivery teams to align services with customer outcomes.

CrowdStrike Falcon · AWS · Azure +7