Cyber Security Jobs

• London
• Mid-level
• Permanent

Hands-on security engineering role securing production AI systems deployed inside enterprise customer environments. You conduct design and code reviews, threat modeling and penetration testing for agentic workflows and RAG pipelines, and build security automation such as scanning tools, CI/CD gates and guardrail testing scripts. Work alongside FDE delivery pods, with up to 25% travel.

AWS · Amazon Bedrock · RAG +1

• London
• Hybrid · 1 day in office
• £800 – £900 pd
• Senior
• Contract

Translate high-level SecOps transition strategies into detailed, low-level implementation plans across security engineering, threat and vulnerability management and security testing. Define operational readiness criteria, phase-gate checklists and multi-year delivery roadmaps, coordinating dependencies with architecture, GRC and technical SMEs. Requires active SC clearance and UK Government or regulated-environment experience.

SIEM · IAM · PAM +1

• Birmingham
• Hybrid · 3 days in office
• £300 – £400 pd
• Senior
• Contract

Lead a six-month AI and digital platform security initiative, defining controls and guardrails for GenAI and machine learning across global operations. Architect defences spanning AWS, Azure, hybrid and on-prem environments, aligning with NIST and ISO 27001 while mentoring a senior team of security architects and advising C-suite stakeholders.

AWS · Azure · GenAI

• Birkenhead
• £50,000 – £55,000 pa
• Senior
• Permanent

Hands-on senior role owning a marine energy company's IT infrastructure, covering network architecture, security, Linux and AWS administration, DNS, email systems, monitoring, backup and automation. The administrator maintains and improves office, production, lab and remote-access networks, plus disaster recovery and access control, with full training provided.

AWS · Ubuntu · Linux +7

• Birmingham
• On-site
• Senior
• Permanent

Security Architect role focused on embedding secure-by-design, Zero Trust and IAM across complex, high-assurance systems spanning cloud, networks, applications and data platforms. Involves technical assurance, cryptography, monitoring and pre-sales support, working with solution architects, engineers and customer security stakeholders. Requires current or recently lapsed SC clearance.

Firewalls · VPN · PAM +7

• London
• Mid-level

Hands-on incident response role covering detection, triage, investigation, containment and recovery of cyber incidents in a complex enterprise environment. Day to day involves monitoring SIEM and EDR/XDR alerts, analysing logs, packet captures and forensic images, threat hunting, and mapping activity to MITRE ATT&CK. Also maintains playbooks, evidence records and post-incident reports, and briefs senior stakeholders.

Microsoft Sentinel · Defender XDR · Defender for Identity +7

• Liverpool
• Hybrid
• £60,000 – £65,000 pa
• Senior
• Contract

Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.

SIEM · IAM · DLP +1

• Manchester
• Hybrid · 2 days in office

Owns the end-to-end lifecycle of security products such as IAM, EDR, SIEM and cloud security, defining roadmaps, backlogs and measurable outcomes around risk reduction and control coverage. Works with engineering, GRC and vendors to deliver usable, auditable controls, balancing risk, cost and usability while acting as the main stakeholder contact.

IAM · EDR · SIEM

• London
• On-site
• £115,000 – £135,000 pa
• Lead

Owns security end to end for a confidential investment-data platform and its AI agents, split roughly 60% hands-on product and cloud security and 40% assurance and client-facing work. Sets AWS IAM, encryption and detection patterns, defines agent authorisation and prompt-injection defences, and drives SOC 2, ISO 27001 and AI Act readiness with penetration testing and client due diligence.

AWS · ISO 27001 · SOC 2 +2

• West Byfleet
• Senior

Hands-on architecture role shaping AWS cloud strategies, standards and governance for secure, business-critical environments. You will design resilient, highly available solutions, lead infrastructure automation and migration projects, and provide technical leadership to engineering teams while engaging directly with customers. Distinct for its focus on Defence, National Security and Public Sector work requiring existing DV clearance.

AWS · EC2 · S3 +7

• Birmingham
• On-site
• Senior
• Permanent

Security Architect role focused on embedding secure-by-design, Zero Trust and IAM across complex, high-assurance systems spanning cloud, networks, applications and data platforms. Involves technical assurance, cryptography, monitoring and pre-sales support, working with solution architects, engineers and customer security stakeholders. Requires current or recently lapsed SC clearance.

Firewalls · VPNs · ISO 27001 +7

• London
• Remote
• Senior

Technical pre-sales role covering the UK&I region, driving the technology evaluation stage of the sales cycle for the Idira Identity Security Platform. You will run solution demonstrations, architecture reviews and customer proof-of-concepts, designing Zero-Trust access approaches for human and non-human identities across cloud and datacenter environments, and mentoring other solutions engineers.

Azure · AWS · Google Cloud +6

• Leeds
• Hybrid
• Senior

Operational owner of an enterprise identity platform, maintaining SailPoint IdentityIQ workflows, connectors and lifecycle processes while troubleshooting provisioning and integration issues across Okta and Microsoft Entra. Acts as the bridge between technical IAM delivery and BAU operations, handling audit evidence, JML automation and access reviews, and providing delegated guidance to team members across global regions.

SailPoint IdentityIQ · Okta · Microsoft Entra +3

• Manchester
• Hybrid
• £40,000 – £46,500 pa
• Mid-level
• Permanent

Hands-on security role covering SIEM, EDR, email security and vulnerability platforms, plus IDS/IPS monitoring and incident investigation. You'll embed security into project lifecycles and SDLC, work with a managed service provider on alerts, and support Cyber Essentials and ISO 27001 governance and third-party risk assurance alongside the Cyber Security Manager.

SIEM · EDR · XDR +5

• London
• Hybrid
• Lead
• Contract

Lead enterprise cloud architecture across GCP and/or AWS, designing secure landing zones, IAM hierarchies and microservices, plus deterministic AI safety controls and perimeter defence. The role also covers systems integration, API layers and architectural governance, including Technical Design Authority approvals and NCSC-aligned assurance within UK central government.

GCP · AWS · VPC Service Controls +4