Cyber Security Jobs

• Birkenhead
• £50,000 – £55,000 pa
• Senior
• Permanent

Hands-on senior role owning a marine energy company's IT infrastructure, covering network architecture, security, Linux and AWS administration, DNS, email systems, monitoring, backup and automation. The administrator maintains and improves office, production, lab and remote-access networks, plus disaster recovery and access control, with full training provided.

AWS · Ubuntu · Linux +7

• Bridgend
• On-site
• £47,046 – £55,696 pa
• Senior · manages people
• Permanent

Develops and maintains IaaS and PaaS cloud infrastructure within South Wales Police's managed cloud tenants, covering design, deployment, performance tuning, security protocols and disaster recovery. May supervise junior ICT specialists and collaborate with cross-functional teams, working mainly with Microsoft Azure, AWS, Windows Server, Active Directory and Azure Monitor.

Microsoft Azure · AWS · Azure Monitor +5

• London
• Hybrid · 1 day in office
• £90,000 – £120,000 pa
• Lead · manages people
• Permanent

Lead platform engineering engagements for a cloud consultancy's enterprise clients, from early solution design through delivery. Set technical direction, mentor platform engineers and consultants, and define reusable standards and patterns across AWS, Kubernetes, Terraform and CI/CD. Combines hands-on engineering, architecture and pre-sales consultancy.

AWS · Azure · GCP +7

• London
• Hybrid
• £75,000 – £85,000 pa
• Senior
• Permanent

Hands-on cyber recovery and remediation role supporting clients through major incidents such as ransomware, destructive malware and Active Directory or cloud compromise. You lead recovery workstreams, rebuild compromised environments, remove attacker persistence and design secure recovery approaches, working alongside incident response, forensics, technology teams and client leadership. Distinct from traditional incident response, it focuses on the recovery phase and long-term resilience.

Azure · AWS · Microsoft 365 +3

• London

Identifies, analyses and supports remediation of vulnerabilities across Cloudflare's infrastructure and cloud environments, triaging findings from Qualys, Nessus and Rapid7 against defined SLAs. Works with engineering, infrastructure and compliance teams on DoD IL4 and FedRAMP preparation, using AI-driven tooling to improve scanning, triage and automated remediation.

Qualys · Nessus · Rapid7 InsightVM +2

• Southampton
• Hybrid · 3 days in office
• £65,000 pa
• Mid-level

Operational security role monitoring alerts, investigating incidents and maintaining controls across on-prem, cloud and SaaS environments. You'll handle firewalls, VPNs, endpoint protection, vulnerability management and secure configuration, supporting audits, pen tests and NIST/NIS compliance alongside infrastructure and service delivery teams.

Microsoft Azure · Microsoft 365 · Entra ID +7

• London
• Mid-level

Own the full software development lifecycle for distributed systems supporting threat disruption and legal response, building data pipelines that collect and expose threat intelligence for analysts and customers. Work primarily in Golang and TypeScript with Rust, Kafka, Redis, Kubernetes, Terraform and Postgres, collaborating with Threat Intelligence, Trust & Safety, Legal and Product teams, plus on-call rotations and mentoring.

Golang · TypeScript · Rust +7

• United Kingdom
• Remote
• Senior · manages people

Monitors and performs in-depth analysis of security alerts across Windows, Mac and Linux, handling incidents end to end including malware analysis and remote remediation. Acts as technical escalation point and mentor for junior analysts while improving detection and triage processes in a virtual security operations centre.

CrowdStrike · Windows · Mac +10

• Reading
• On-site
• Entry level
• Internship

Six-month graduate internship in the Falcon Complete team, working from the Reading office on security alert triage, incident investigation and response, and basic malware analysis. Interns learn the Falcon platform and internal tooling, handle customer inquiries, and deliver a project to improve security controls.

CrowdStrike Falcon

• Bristol
• Hybrid · 3 days in office
• £50,000 – £60,000 pa
• Senior

Hands-on senior role taking operational ownership of a corporate IT estate, managing cloud services, Microsoft 365, Entra ID, networking, endpoint security and automation. Involves leading complex incident resolution, patching, backups and business continuity while mentoring colleagues and working with suppliers alongside the IT Technical Lead.

Microsoft 365 · Entra ID · Intune +7

• London
• Remote
• Lead

Lead and deliver reactive incident response engagements for clients, managing scoping, forensic investigations and containment of security incidents. Perform host-based analysis across Windows, Linux and macOS, examine firewall, web and database logs, and use tools such as EnCase, FTK, X-Ways, SIFT and Splunk to determine breach scope. Also mentors junior team members and provides remediation guidance to customers.

EnCase · FTK · X-Ways +5

• Manchester
• Hybrid · 3 days in office
• £54,000 – £55,000 pa
• Senior

Day-to-day operation of a SIEM platform, including monitoring, administration and optimisation, plus developing detection rules and investigating alerts through to resolution. Works with Infrastructure, Networking, DevOps and external partners on incident response, EDR management and control testing, with Google SecOps (Chronicle) experience advantageous.

Google SecOps · Chronicle · SIEM +4

• Redhill
• On-site
• £50,000 – £52,500 pa
• Mid-level
• Permanent

Hands-on security engineering role owning security operations, defining standards and responding to incidents across internal and customer networks. Involves monitoring threat intelligence, vulnerability assessments, and building SIEM and IDS/IPS solutions, with Cisco networking and compliance work (ISO27001, GDPR). Requires SC clearance eligibility and at least five years in secure network environments.

Cisco · Juniper · Linux +7

• Newbury
• Remote
• £450 – £500 pd
• Senior
• Contract

Security architecture and independent assurance role on a large-scale telecoms programme, focused on Privileged Access Management and securing administrative access to critical Network Management Systems. You will review network and security designs, assure HLDs, LLDs, PoCs and test strategies, and advise on segmentation, least privilege and secure management access. Requires strong IP networking (MPLS, VPNs, VRFs) plus AAA, TACACS+, MFA and RBAC expertise.

PAM · TACACS+ · MPLS +2

• London
• Hybrid · 2–3 days in office
• £55,000 – £65,000 pa
• Senior

Owns the entire IT estate for a cybersecurity SaaS company, covering identity and access management, macOS device management, SaaS administration and end-to-end joiners, movers and leavers. An engineering-led role focused on automation, AI enablement and security controls that support SOC 2, ISO 27001 and Cyber Essentials Plus audits, working alongside the Director of Information Security and a Senior SecOps Engineer.

macOS · MDM · SSO +6