Cyber Security Jobs

• Leeds
• Hybrid · 3 days in office
• £45,000 – £50,000 pa
• Mid-level
• Permanent

Support the development and operation of security controls, analyse threat intelligence, manage vulnerabilities and help with incident response across a global technology estate. Work with Azure and Microsoft security tooling such as Sentinel, Defender and Intune, alongside SIEM, EDR and firewalls, in a hybrid Leeds team.

Microsoft Azure · Microsoft Sentinel · Microsoft Defender for Endpoint +7

• Southampton
• Hybrid · 3 days in office
• £65,000 pa
• Mid-level

Operational security role monitoring alerts, investigating incidents and maintaining controls across on-prem, cloud and SaaS environments. You'll handle firewalls, VPNs, endpoint protection, vulnerability management and secure configuration, supporting audits, pen tests and NIST/NIS compliance alongside infrastructure and service delivery teams.

Microsoft Azure · Microsoft 365 · Entra ID +7

• Abingdon
• £37,000 – £45,000 pa
• Mid-level

Hands-on security operations role within an MSP, monitoring and investigating alerts across Microsoft 365, Sophos and other platforms for both internal and client environments. Acts as a technical escalation point for the Service Desk and Infrastructure teams, covering incident response, vulnerability and patch management, tenant hardening and remediation tracking.

Microsoft 365 · Sophos · Microsoft Defender +3

• London
• Hybrid · 3 days in office
• £45,000 – £50,000 pa
• Mid-level

Supports continuous improvement of cyber security processes, tools and operational practices, including vulnerability management, threat detection and security monitoring. Works with technical teams to optimise and integrate SIEM, EDR and identity security platforms, and develops reporting to track security performance. Exposure to Microsoft Logic Apps or Power BI is advantageous.

SIEM · EDR · Microsoft Logic Apps +1

• London
• Hybrid · 2–3 days in office
• £50,000 – £75,000 pa
• Mid-level

Client-facing security role within a UK consultancy's growing Security Architecture practice, supporting government, defence and critical infrastructure programmes. Day to day involves threat modelling, risk assessment, reviewing solution and infrastructure designs, defining security requirements and controls, and running client workshops. Suits security engineers or consultants wanting to move into architecture, with occasional client site visits rather than frequent travel.

NIST · SABSA · TOGAF +5

• Bracknell
• On-site
• £599 – £600 pd
• Mid-level · manages people
• Contract · Shift work

Overseeing Security Operators on a 24/7 shift team, performing initial threat investigations with SIEM tools, monitoring for faults and anomalies, and managing incidents by identifying, prioritising and escalating threats. Requires technical leadership and enterprise IT knowledge in networking and servers, with active DV clearance.

SIEM

• London
• £30,000 – £40,000 pa
• Entry level

A training and placement programme for career changers with no prior experience, combining accredited online CompTIA A+ and Network+ study with tutor support, practice labs and official exams. Participants are then placed into an IT Technician role, with further Security+ training released to prepare them for a move into cybersecurity after roughly two years.

CompTIA A+ · CompTIA Network+ · CompTIA Security+ +2

• Nottingham
• Hybrid
• £60,875 – £81,543 pa
• Senior
• Permanent

Independently manage operational cybersecurity activities including incident response, risk and vulnerability assessments, and security control implementation across cloud, network and endpoint environments. Maintain regulatory compliance, support audits and governance, and join an out-of-hours incident response rota.

SIEM

• Liverpool
• Hybrid
• £60,000 – £65,000 pa
• Senior
• Contract

Act as the escalation point for an external MSSP, investigating and responding to security incidents and performing detailed event analysis to identify threats. Drive hands-on remediation, detection engineering, and security reviews across cloud and enterprise collaboration environments, using frameworks like MITRE ATT&CK. A one-year fixed-term contract with strong extension potential, hybrid across Liverpool, Glasgow, or London.

MITRE ATT&CK

• Glasgow
• Hybrid · 2 days in office
• Senior

Hands-on technical role leading security monitoring, incident response and threat detection using SIEM, EDR, DLP and vulnerability management tools. Acts as a technical SME, mentoring junior analysts and collaborating with global IT teams to maintain ISO 27001-aligned controls and BAU security operations.

ServiceNow · Cherwell · Jira +1

• London
• £30,000 – £37,000 pa
• Entry level

A training and placement programme rather than a direct job: candidates complete self-paced online CompTIA A+, Network+ and Security+ certifications plus hands-on lab simulations covering network configuration, troubleshooting, vulnerability identification and security controls. ITOL Recruit then helps place participants into first roles such as IT Technician, IT Support Analyst or Helpdesk Engineer, with optional later pathways like CEH. Fees apply for the course.

CompTIA A+ · CompTIA Network+ · CompTIA Security+ +1

• Sunderland
• £26,100 pa
• Junior

Support a manufacturing organisation's security team by monitoring SIEM alerts, investigating potential threats and assisting with vulnerability management across business and production systems. The role also covers access reviews, compliance with information security standards, awareness activities and risk assessments, working closely with IT, engineering and production colleagues.

SIEM

• Ashington
• £26,100 pa
• Junior

Support a manufacturing organisation's security operations by monitoring SIEM alerts, investigating potential threats and assisting with vulnerability management across business and production systems. The role involves access reviews, compliance support, awareness activities and risk assessments, working with IT, engineering and external providers to keep production disruption to a minimum.

SIEM

• Blackburn
• Remote
• £24,000 – £45,000 pa
• Entry level
• Permanent

A paid traineeship combining self-paced online CompTIA, Microsoft and Cisco training with Livelabs practical work, leading to a guaranteed IT Technician placement and later a cyber security role. Candidates study from home with a tutor, sit official exams, and must complete two years in an IT Technician post before progressing into security.

CompTIA A+ · Microsoft · Cisco

• County Galway
• Hybrid · 2–3 days in office
• £45,000 – £55,000 pa
• Mid-level

Day-to-day work centres on analysing, triaging and prioritising vulnerabilities across enterprise infrastructure, applications and platforms, then coordinating remediation with infrastructure and engineering teams. The role involves reviewing threat intelligence and security advisories, producing dashboards and metrics on remediation progress, and improving vulnerability management tooling and processes within a large professional services security function.

Tenable · Qualys · Rapid7 +2