Cyber Security Jobs in Manchester

• London
• On-site
• £30,000 – £45,000 pa
• Mid-level

Hands-on SOC role monitoring and triaging SIEM, EDR and cloud alerts, investigating incidents and supporting containment and response. Also provides second-line support across Azure, AWS, identity, network and endpoint environments, with occasional on-call and shift handovers. Requires SC clearance eligibility and is majority onsite in Manchester or London.

Microsoft Sentinel · ELK Stack · Azure +7

• Manchester
• Hybrid · 1 day in office
• £70,000 – £75,000 pa
• Mid-level

Hands-on security engineering role focused on Microsoft security platforms, including Defender XDR, Sentinel, Purview, Defender for Cloud and Entra. You will build security monitoring, telemetry and SOAR automation, investigate incidents and embed controls into cloud and development processes alongside security, cloud and engineering teams.

Microsoft Defender XDR · Microsoft Sentinel · Microsoft Purview +5

• Manchester
• £55,000 – £75,000 pa
• Mid-level

Design, build and maintain CI/CD pipelines in Azure DevOps, automating build, test, deployment and infrastructure provisioning. Manage Azure resources with Terraform, Bicep or ARM templates, support App Services and Function Apps, and integrate testing, code quality and security tooling such as SonarCloud and Snyk. Work closely with developers and stakeholders in a collaborative, flexible team.

Azure DevOps · Azure App Services · Azure Functions +7

• Manchester
• Hybrid
• £40,000 – £46,500 pa
• Mid-level
• Permanent

Hands-on security role covering SIEM, EDR, email security and vulnerability platforms, plus IDS/IPS monitoring and incident investigation. You'll embed security into project lifecycles and SDLC, work with a managed service provider on alerts, and support Cyber Essentials and ISO 27001 governance and third-party risk assurance alongside the Cyber Security Manager.

SIEM · EDR · XDR +5

• Manchester
• Hybrid · 3 days in office
• £54,000 – £55,000 pa
• Senior

Day-to-day operation of a SIEM platform, including monitoring, administration and optimisation, plus developing detection rules and investigating alerts through to resolution. Works with Infrastructure, Networking, DevOps and external partners on incident response, EDR management and control testing, with Google SecOps (Chronicle) experience advantageous.

Google SecOps · Chronicle · SIEM +4

• Royal Leamington Spa
• Hybrid · 3 days in office
• £550 – £650 pd
• Senior
• Contract

Hands-on contract role owning the end-to-end detection engineering lifecycle, translating threat intelligence, hunting findings and adversary techniques into effective detection rules. Builds behavioural analytics and detection content across endpoint, identity, cloud, network and email telemetry using KQL, SPL, Sigma, Python and PowerShell, with tuning, purple teaming and Detection-as-Code work alongside SOC, IR and Red Team specialists.

Microsoft Sentinel · Splunk · Elastic +6

• Manchester
• £550 – £650 pd

SC Penetration Tester£600 - £700 A Day Outside IR356 MonthsRemote (Occasional Manchester travel)We are looking for a security cleared penetration tester to support a public sector customer to deliver high-assurance security testing.The role offers the opportunity to work on complex…

• Manchester
• Hybrid · 2 days in office
• £500 pd
• Mid-level
• Contract · Flexible

Deliver cloud-native Azure solutions across customer engagements, covering architecture, implementation, automation and operational enablement. Build infrastructure as code, CI/CD pipelines and container platforms, plus monitoring and cloud governance. Involves hybrid cloud work, legacy integration and customer-facing consulting within cross-functional teams.

Microsoft Azure · Azure DevOps · GitHub Actions +3

• United Kingdom
• Remote
• Lead

Build a new cyber GRC capability from the ground up within a growing Group Security function, reporting to the Head of Cyber Security, Compliance and Risk Management. You'll design the security controls framework, develop risk methodology and KRIs/KPIs, lead Cyber Essentials and ISO 27001 compliance, and manage audit and third-party assurance. Distinct for its greenfield ownership and Board-level reporting remit.

Cyber Essentials · Cyber Essentials Plus · ISO 27001 +2

• Manchester
• Hybrid · 2 days in office

Owns the end-to-end lifecycle of security products such as IAM, EDR, SIEM and cloud security, defining roadmaps, backlogs and measurable outcomes around risk reduction and control coverage. Works with engineering, GRC and vendors to deliver usable, auditable controls, balancing risk, cost and usability while acting as the main stakeholder contact.

IAM · EDR · SIEM

• London
• Hybrid · 3 days in office
• £600 – £750 pd
• Lead
• Contract

Senior advisory role providing expert leadership on cyber risk management, security assurance and governance across large-scale public sector technology programmes. Involves assessing risks, reviewing technical designs and architectures, and embedding secure-by-design principles into cloud and digital transformation work while influencing senior stakeholders.

AWS · SaaS

• London
• Hybrid · 2 days in office
• £52,000 – £74,000 pa
• Senior
• Permanent

Designs and shapes security solutions across complex technology transformation programmes for public and private sector clients, translating business and security requirements into practical architectures and technical designs. Covers cloud, infrastructure, networks, applications and enterprise security, with threat modelling and Secure by Design applied throughout the lifecycle. Works directly with clients, solution architects and engineers rather than focusing on governance or BAU security.

AWS · Azure · GCP +7

• London
• Hybrid · 2–3 days in office
• £50,000 – £75,000 pa
• Mid-level

Client-facing security role within a UK consultancy's growing Security Architecture practice, supporting government, defence and critical infrastructure programmes. Day to day involves threat modelling, risk assessment, reviewing solution and infrastructure designs, defining security requirements and controls, and running client workshops. Suits security engineers or consultants wanting to move into architecture, with occasional client site visits rather than frequent travel.

NIST · SABSA · TOGAF +5

• London
• Hybrid
• £67,000 pa
• Permanent

Designs and implements security solutions across cloud, on-premises and hybrid environments for a global technology consultancy's client projects. Day-to-day work covers SIEM log ingestion and routing, firewall and network security management, CIS benchmark assessments, and automating security processes with Python, Bash or PowerShell, Terraform and cloud platforms. Involves client-dependent on-call support and requires British passport holders without dual nationality for clearance.

Splunk · Microsoft Sentinel · Cribl +11

• Manchester
• Hybrid
• £60,000 – £70,000 pa
• Lead

Owns the Group's infrastructure estate across Microsoft 365, Azure, networks, security and end-user services, defining the technology roadmap and leading modernisation and transformation initiatives. Acts as primary technical owner of the MSP and key suppliers, driving resilience, identity and endpoint security, and multi-site networking. Hybrid role in Manchester within a growing property investment business.

Microsoft 365 · Azure · Entra ID +7