Cyber Security Jobs

Appvia · London · £75,000 – £90,000 pa

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for public and private sector clients. You will own technical delivery in your area, create reusable modules and deployment patterns, and mentor less experienced engineers within multi-disciplinary consulting teams.

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

eFinancialCareers · London

Day-to-day, you monitor emerging threats and attack campaigns, analyse how attacks are carried out, and recommend controls to protect a global banking group. You write threat briefings for EMEA audiences, triage alerts from global teams, run phishing simulations, and help merge two cyber teams. Business-level Japanese is essential for regular engagement with colleagues in Japan.

Reed Technology · Manchester · £60,000 – £65,000 pa

Producing threat assessments, intelligence reports and executive briefings, translating complex cyber threats into clear information for senior and non-technical stakeholders. Monitoring intelligence sources, assessing threat actors, TTPs and IOCs, and supporting incident response with security teams. Also leads and develops a small team while shaping the Cyber Threat Intelligence function.

Cloudflare · London

Own the full software development lifecycle for distributed systems supporting threat disruption and legal response, building data pipelines that collect and expose threat intelligence for analysts and customers. Work primarily in Golang and TypeScript with Rust, Kafka, Redis, Kubernetes, Terraform and Postgres, collaborating with Threat Intelligence, Trust & Safety, Legal and Product teams, plus on-call rotations and mentoring.

Experis · Eastleigh · £50,000 pa

Technical Consultant - Threat Detection, Response & IntelligenceLocation: Hursley - On-siteSecurity clearance: UK national with a minimum of 5 years' UK residency requiredCertification: Microsoft Certified: Security Operations Analyst AssociateWe are seeking a technically strong and proactive Technical Consultant - Threat...

Experis · Winchester · £41,000 – £50,000 pa

Monitor, triage and investigate security alerts across SIEM and wider security tooling, identifying indicators of compromise and conducting initial incident investigations. Support the full incident response lifecycle including containment, remediation and post-incident learning, while tuning detection rules to reduce false positives. Work with security and infrastructure teams on threat intelligence, trend reporting and continual service improvement.

Appcastenterprise · Winchester

Monitor, triage and investigate security alerts across SIEM and Microsoft security tooling, conducting initial incident investigations and supporting the full response lifecycle including containment and remediation. The role also involves tuning detection rules, applying threat intelligence and reporting on trends, working on-site at Hursley with security and infrastructure teams.

Hays Technology · Leeds · £45,000 – £50,000 pa

Support the development and operation of security controls, analyse threat intelligence, manage vulnerabilities and help with incident response across a global technology estate. Work with Azure and Microsoft security tooling such as Sentinel, Defender and Intune, alongside SIEM, EDR and firewalls, in a hybrid Leeds team.

Forward Role · Leeds · £54,000 – £65,000 pa

Owns day-to-day SIEM operations, defining and tuning detection rules and investigating alerts through to resolution. Runs incident response, threat intelligence and hunting, and EDR management while collaborating with Infrastructure, Networks, DevOps and an outsourced SOC. Also helps design and document security policies, standards and control test methods.

VIQU IT · Glasgow

Hands-on technical role leading security monitoring, incident response and threat detection using SIEM, EDR, DLP and vulnerability management tools. Acts as a technical SME, mentoring junior analysts and collaborating with global IT teams to maintain ISO 27001-aligned controls and BAU security operations.

eFinancialCareers · London

Embedded consultant supporting a Lloyd's/London Market insurer's security function, handling supplier due diligence, risk assessments, triage, threat intelligence and incident documentation. Works across ISO 27001, NIST CSF, NYDFS, FCA and PRA obligations, maintaining risk registers and audit evidence while advising business stakeholders independently.

CrowdStrike · Ireland

Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats, and builds dashboards and reporting workflows in SQL, Python and Logscale. Works cross-functionally with product and data engineering teams to turn raw security data into actionable insights and KPIs for the Office of Adversary Strategy.

CrowdStrike · Romania

Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats. Builds dashboards, reports and data pipelines using SQL, Python, Logscale and graph databases, partnering with product and data engineering teams to turn raw security data into actionable insights and KPIs.

Sophos · United Kingdom

Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.

Constant Recruitment Ltd · Folkestone · £45,000 – £50,000 pa

Hands-on leadership role coordinating a SOC team of around 15, prioritising alerts, acting as escalation point and supporting threat detection, investigation and incident response. Involves client service reviews, reporting, coaching analysts and improving playbooks, using Microsoft Sentinel and Defender XDR, with scope to develop people-management skills.

Sophos · United Kingdom

Performs advanced investigative, forensic and containment work during active cyber incidents for Managed Detection and Response customers, correlating alerts and telemetry to establish scope and root cause. Mentors junior IR and SOC analysts, maintains engagement documentation and playbooks, and supports Incident Advisors with validated technical findings. Includes weekend and holiday rotation cover.