Cyber Security Jobs

RiverSafe · London

Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.

Appvia · London · £75,000 – £90,000 pa

Design, build and operate secure AWS platforms using Terraform, Kubernetes/EKS and CI/CD for public and private sector clients. You will own technical delivery in your area, create reusable modules and deployment patterns, and mentor less experienced engineers within multi-disciplinary consulting teams.

CrowdStrike · United Kingdom

Monitor and analyse security alerts on the CrowdStrike platform, handling incidents across Windows, Mac and Linux, performing malware analysis and remote remediation. The role sits in a virtual security operations centre, producing written findings for customer management and improving detection and triage processes.

Experis · Eastleigh · £50,000 pa

Technical Consultant - Threat Detection, Response & IntelligenceLocation: Hursley - On-siteSecurity clearance: UK national with a minimum of 5 years' UK residency requiredCertification: Microsoft Certified: Security Operations Analyst AssociateWe are seeking a technically strong and proactive Technical Consultant - Threat...

Experis · Winchester · £41,000 – £50,000 pa

Monitor, triage and investigate security alerts across SIEM and wider security tooling, identifying indicators of compromise and conducting initial incident investigations. Support the full incident response lifecycle including containment, remediation and post-incident learning, while tuning detection rules to reduce false positives. Work with security and infrastructure teams on threat intelligence, trend reporting and continual service improvement.

CrowdStrike · Ireland

Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats, and builds dashboards and reporting workflows in SQL, Python and Logscale. Works cross-functionally with product and data engineering teams to turn raw security data into actionable insights and KPIs for the Office of Adversary Strategy.

Netcraft · Bath · £30,000 pa

Join a technical operations team responding to live cybercrime incidents, classifying malicious websites, apps, emails and phone numbers, and communicating findings to customers and affected parties. Full training is provided, and the role requires working weekends on a Wednesday-to-Sunday or Saturday-to-Wednesday pattern, with hybrid flexibility from the Bath office.

Reed Technology · Newcastle upon Tyne · £35,000 – £45,000 pa

Investigating and responding to security incidents at 2nd Line level, monitoring customer environments and SIEM alerts, and threat hunting across a Microsoft security stack including Sentinel, Defender and Entra. Uses KQL and PowerShell for investigations and automation, acts as an escalation point for junior analysts, and supports vulnerability assessment and remediation. Initially on a 4-on, 4-off night shift pattern before moving to an 8-hour shift model.

Tank Recruitment · London

Hands-on incident response role covering detection, triage, investigation, containment and recovery of cyber incidents in a complex enterprise environment. Day to day involves monitoring SIEM and EDR/XDR alerts, analysing logs, packet captures and forensic images, threat hunting, and mapping activity to MITRE ATT&CK. Also maintains playbooks, evidence records and post-incident reports, and briefs senior stakeholders.

Proactive Appointments · Nottingham · £28,000 – £31,000 pa

First-line support role handling ticket and incident management, user and device administration, equipment setup, and onboarding/offboarding while maintaining accurate records. Requires administering Microsoft 365, Exchange Online, Intune, Entra ID and Windows 11, plus networking and cloud knowledge, working with third-party support providers. Requires a full UK driving licence and own car.

Sumer · London

Deliver 2nd line support for laptops, desktops, applications and peripherals across a London hub, managing tickets and resolving issues at first contact. Administer Active Directory and Microsoft 365, handle onboarding and access provisioning, run patching and monitoring checks, and support security tooling such as SentinelOne, Qualys and Mimecast alongside a central IT function.

Appcastenterprise · Winchester

Monitor, triage and investigate security alerts across SIEM and Microsoft security tooling, conducting initial incident investigations and supporting the full response lifecycle including containment and remediation. The role also involves tuning detection rules, applying threat intelligence and reporting on trends, working on-site at Hursley with security and infrastructure teams.

Entrust · London

Entry-level analyst role supporting demand generation and go-to-market strategy, tracking campaign performance against pipeline and conversion targets, monitoring funnel metrics from MQL to Closed Won, and analysing win/loss and retention data. Works cross-functionally with Marketing, Sales, SDRs and Customer Success, using Excel/Google Sheets and CRM or BI tools to turn data into actionable pipeline insights.

Entrust · Paris, France

You will analyse EU digital identity and financial regulation, including eIDAS 2.0, ETSI standards and AML rules, assessing their impact on products and customers across EMEA. The role sits inside the Product organisation, so your assessments, comparison tables and recommendations feed directly into roadmaps, alongside certification work and external engagement with regulators.

Global Technology Solutions Ltd · Reading · £50,000 – £60,000 pa

Senior technical authority in Security Operations, leading serious incidents, forensic investigations and root cause analysis while improving detection and response. Engineers Sentinel, Defender XDR, CrowdStrike Falcon, Entra ID, Intune and Darktrace, develops automation and conducts proactive threat hunting, and mentors colleagues.

Fynity · Farnborough · £48,000 – £58,000 pa

Senior SOC Analysts – Multiple OpportunitiesFarnborough | Fully On-Site | 24/7 Shift PatternSalary + Shift Allowance | DV Clearance Eligibility RequiredEnjoy the investigation side of SOC work? There’s plenty to get into here.I’m recruiting for several Senior SOC Analysts to...

Hays Technology · Leeds · £45,000 – £50,000 pa

Support the development and operation of security controls, analyse threat intelligence, manage vulnerabilities and help with incident response across a global technology estate. Work with Azure and Microsoft security tooling such as Sentinel, Defender and Intune, alongside SIEM, EDR and firewalls, in a hybrid Leeds team.