Cyber Security Jobs

• Southampton
• Hybrid · 3 days in office
• £65,000 pa
• Mid-level

Operational security role monitoring alerts, investigating incidents and maintaining controls across on-prem, cloud and SaaS environments. You'll handle firewalls, VPNs, endpoint protection, vulnerability management and secure configuration, supporting audits, pen tests and NIST/NIS compliance alongside infrastructure and service delivery teams.

Microsoft Azure · Microsoft 365 · Entra ID +7

• Leeds
• Hybrid · 3 days in office
• £45,000 – £50,000 pa
• Mid-level
• Permanent

Support the development and operation of security controls, analyse threat intelligence, manage vulnerabilities and help with incident response across a global technology estate. Work with Azure and Microsoft security tooling such as Sentinel, Defender and Intune, alongside SIEM, EDR and firewalls, in a hybrid Leeds team.

Microsoft Azure · Microsoft Sentinel · Microsoft Defender for Endpoint +7

• Abingdon
• £37,000 – £45,000 pa
• Mid-level

Hands-on security operations role within an MSP, monitoring and investigating alerts across Microsoft 365, Sophos and other platforms for both internal and client environments. Acts as a technical escalation point for the Service Desk and Infrastructure teams, covering incident response, vulnerability and patch management, tenant hardening and remediation tracking.

Microsoft 365 · Sophos · Microsoft Defender +3

• London
• Hybrid · 1 day in office
• £350 – £400 pd
• Mid-level
• Contract

Day-to-day BAU security operations role focused on Rapid7, SIEM monitoring, alert triage and vulnerability management, including clearing an existing alert backlog. Also covers Mimecast email security, Microsoft Purview eDiscovery/DSAR/DLP, CrowdStrike and Netskope administration, plus security investigations and documentation.

Rapid7 · Mimecast · Microsoft Purview +2

• London
• Hybrid · 2–3 days in office
• £50,000 – £75,000 pa
• Mid-level

Client-facing security role within a UK consultancy's growing Security Architecture practice, supporting government, defence and critical infrastructure programmes. Day to day involves threat modelling, risk assessment, reviewing solution and infrastructure designs, defining security requirements and controls, and running client workshops. Suits security engineers or consultants wanting to move into architecture, with occasional client site visits rather than frequent travel.

NIST · SABSA · TOGAF +5

• Bracknell
• On-site
• £599 – £600 pd
• Mid-level · manages people
• Contract · Shift work

Overseeing Security Operators on a 24/7 shift team, performing initial threat investigations with SIEM tools, monitoring for faults and anomalies, and managing incidents by identifying, prioritising and escalating threats. Requires technical leadership and enterprise IT knowledge in networking and servers, with active DV clearance.

SIEM

• London
• £30,000 – £40,000 pa
• Entry level

A training and placement programme for career changers with no prior experience, combining accredited online CompTIA A+ and Network+ study with tutor support, practice labs and official exams. Participants are then placed into an IT Technician role, with further Security+ training released to prepare them for a move into cybersecurity after roughly two years.

CompTIA A+ · CompTIA Network+ · CompTIA Security+ +2

• Liverpool
• Hybrid
• £60,000 – £65,000 pa
• Senior
• Contract

Act as the escalation point for an external MSSP, investigating and responding to security incidents and performing detailed event analysis to identify threats. Drive hands-on remediation, detection engineering, and security reviews across cloud and enterprise collaboration environments, using frameworks like MITRE ATT&CK. A one-year fixed-term contract with strong extension potential, hybrid across Liverpool, Glasgow, or London.

MITRE ATT&CK

• Glasgow
• Hybrid · 2 days in office
• Senior

Hands-on technical role leading security monitoring, incident response and threat detection using SIEM, EDR, DLP and vulnerability management tools. Acts as a technical SME, mentoring junior analysts and collaborating with global IT teams to maintain ISO 27001-aligned controls and BAU security operations.

ServiceNow · Cherwell · Jira +1

• Sutton
• Remote
• £30,000 – £40,000 pa
• Entry level

A self-funded training programme leading to a Cyber Security Analyst role, combining official CompTIA A+, Network+ and Security+ certifications with hands-on labs and real-world scenarios. Candidates study online at their own pace with 1-1 tutor support, then receive CV, interview and dedicated recruitment help until placed in a UK cyber security job.

CompTIA A+ · CompTIA Network+ · CompTIA Security+ +1

• Braintree
• Hybrid · 2–3 days in office
• £37,896 – £41,541 pa
• Mid-level
• Permanent

Hands-on first point of contact for ICT security issues, monitoring systems, investigating threats and responding to incidents while maintaining documentation and response procedures. The role also covers firewall, IDS, anti-virus and log management controls, security awareness training, and wider ICT support including Microsoft 365 administration and network monitoring within ITIL frameworks.

Microsoft 365 · ITIL

• Berkeley
• Remote
• £45,000 – £50,000 pa
• Mid-level

Conducts information security assessments for government, defence and commercial clients in a consultancy setting, reviewing controls, policies and procedures against ISO 27001 and the NIST Cybersecurity Framework. Supports audits, risk assessments and compliance reviews, and works directly with client stakeholders to communicate findings and improve security posture.

ISO 27001 · NIST Cybersecurity Framework

• Sheffield
• On-site
• £40,000 pa
• Mid-level
• Permanent

Supports day-to-day IT security across a national care home provider, covering security monitoring, vulnerability management, endpoint and email security, and incident response. Coordinates audits, penetration testing and assurance activities against frameworks such as NCSC CAF, Cyber Essentials and NHS DSPT, and produces security metrics and awareness training.

Microsoft 365 · Intune · NCSC CAF +3

• London
• Remote
• £24,000 – £45,000 pa
• Entry level

A traineeship combining online CompTIA, Microsoft and Cisco training with Livelabs practical work and official exams, studied from home at your own pace. Candidates are placed into an IT Technician role for two years before progressing into a cyber security technician position with partner companies.

CompTIA A+ · Microsoft · Cisco

• Chelmsford
• Remote
• £24,000 – £45,000 pa
• Entry level

A traineeship combining self-paced online training in CompTIA, Microsoft and Cisco courses with Livelabs practical work, leading to CompTIA A+ exams. Candidates are then placed as an IT Technician for two years before progressing into a cyber security technician role, with a job guarantee on completion.

CompTIA A+ · CompTIA · Microsoft +1