Cyber Security Jobs

• United Kingdom
• Remote
• Entry level

Monitors and performs in-depth analysis of security alerts on the CrowdStrike platform, handling incidents across Windows, Mac and Linux, including malware analysis and remote remediation. Works in a virtual security operations centre, responding to threats in real time and producing written and verbal findings for customer management.

CrowdStrike · Windows · Mac OS +6

• Eastleigh
• £50,000 pa

Technical Consultant - Threat Detection, Response & IntelligenceLocation: Hursley - On-siteSecurity clearance: UK national with a minimum of 5 years' UK residency requiredCertification: Microsoft Certified: Security Operations Analyst AssociateWe are seeking a technically strong and proactive Technical Consultant - Threat…

• Winchester
• On-site
• £41,000 – £50,000 pa
• Mid-level

Monitor, triage and investigate security alerts across SIEM and wider security tooling, identifying indicators of compromise and conducting initial incident investigations. Support the full incident response lifecycle including containment, remediation and post-incident learning, while tuning detection rules to reduce false positives. Work with security and infrastructure teams on threat intelligence, trend reporting and continual service improvement.

Microsoft Sentinel · Microsoft Defender · QRadar +2

• Ireland
• Remote
• Mid-level

Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats, and builds dashboards and reporting workflows in SQL, Python and Logscale. Works cross-functionally with product and data engineering teams to turn raw security data into actionable insights and KPIs for the Office of Adversary Strategy.

LogScale · Tableau · Power BI +2

• Manchester
• Remote
• Mid-level
• Permanent

Monitor, detect and respond to cyber incidents for customers from a 24/7 Global Security Operations Centre, working with the Microsoft Security Stack, Splunk, EDR, IDS and IPS tools integrated into a Unified Cyber Platform. The L2 role sits within an MXDR team of over 100 accredited experts handling hundreds of millions of log events daily.

Microsoft Security Stack · Splunk · EDR +3

• Bath
• Hybrid · 2 days in office
• £30,000 pa
• Entry level

Join a technical operations team conducting cybercrime incident response, classifying malicious websites, apps, emails and phone numbers, and communicating findings to customers and affected parties. The role involves shift work covering weekends, with hybrid flexibility from a Bath office, and full training is provided for candidates without prior cybersecurity experience.

Udemy · Coursera

• Newcastle upon Tyne
• Remote
• £35,000 – £45,000 pa
• Mid-level
• Shift work

Investigating and responding to security incidents at 2nd Line level, monitoring customer environments and SIEM alerts, and threat hunting across a Microsoft security stack including Sentinel, Defender and Entra. Uses KQL and PowerShell for investigations and automation, acts as an escalation point for junior analysts, and supports vulnerability assessment and remediation. Initially on a 4-on, 4-off night shift pattern before moving to an 8-hour shift model.

Microsoft Sentinel · Microsoft Defender · Microsoft Entra

• London
• Mid-level

Hands-on incident response role covering detection, triage, investigation, containment and recovery of cyber incidents in a complex enterprise environment. Day to day involves monitoring SIEM and EDR/XDR alerts, analysing logs, packet captures and forensic images, threat hunting, and mapping activity to MITRE ATT&CK. Also maintains playbooks, evidence records and post-incident reports, and briefs senior stakeholders.

Microsoft Sentinel · Defender XDR · Defender for Identity +7

• London
• On-site
• £30,000 – £45,000 pa
• Mid-level

Hands-on SOC role monitoring and triaging SIEM, EDR and cloud alerts, investigating incidents and supporting containment and response. Also provides second-line support across Azure, AWS, identity, network and endpoint environments, with occasional on-call and shift handovers. Requires SC clearance eligibility and is majority onsite in Manchester or London.

Microsoft Sentinel · ELK Stack · Azure +7

• London
• On-site
• Mid-level

Deliver 2nd line support for laptops, desktops, applications and peripherals across a London hub, managing tickets and resolving issues at first contact. Administer Active Directory and Microsoft 365, handle onboarding and access provisioning, run patching and monitoring checks, and support security tooling such as SentinelOne, Qualys and Mimecast alongside a central IT function.

Microsoft 365 · Active Directory · Windows 11 +5

• Remote
• Remote
• Mid-level

Monitor, detect, investigate and respond to cyber security threats using the Splunk Enterprise Security toolset. The role supports security operations by analysing alerts, investigating incidents and helping strengthen cyber defence capabilities.

Splunk Enterprise Security · Splunk

• London
• On-site
• Entry level

Entry-level analyst role supporting demand generation and go-to-market strategy, tracking campaign performance against pipeline and conversion targets, monitoring funnel metrics from MQL to Closed Won, and analysing win/loss and retention data. Works cross-functionally with Marketing, Sales, SDRs and Customer Success, using Excel/Google Sheets and CRM or BI tools to turn data into actionable pipeline insights.

Salesforce · Tableau · Power BI +1

• Newport
• Hybrid
• Mid-level
• Permanent

Hands-on role managing the full lifecycle of security incidents within an international CSIRT, investigating SOC alerts and performing host forensic analysis and reverse-engineering. You will industrialise SIEM and EDR tooling, build detection use cases and automated response workflows, and support SOC Level 1 and 2 processes, including on-call crisis response.

SIEM · EDR

• Leeds
• Hybrid · 3 days in office
• £45,000 – £50,000 pa
• Mid-level
• Permanent

Support the development and operation of security controls, analyse threat intelligence, manage vulnerabilities and help with incident response across a global technology estate. Work with Azure and Microsoft security tooling such as Sentinel, Defender and Intune, alongside SIEM, EDR and firewalls, in a hybrid Leeds team.

Microsoft Azure · Microsoft Sentinel · Microsoft Defender for Endpoint +7

• Southampton
• Hybrid · 3 days in office
• £65,000 pa
• Mid-level

Operational security role monitoring alerts, investigating incidents and maintaining controls across on-prem, cloud and SaaS environments. You'll handle firewalls, VPNs, endpoint protection, vulnerability management and secure configuration, supporting audits, pen tests and NIST/NIS compliance alongside infrastructure and service delivery teams.

Microsoft Azure · Microsoft 365 · Entra ID +7