Cyber Security Jobs

• Winchester
• On-site
• £41,000 – £50,000 pa
• Mid-level

Monitor, triage and investigate security alerts across SIEM and wider security tooling, identifying indicators of compromise and conducting initial incident investigations. Support the full incident response lifecycle including containment, remediation and post-incident learning, while tuning detection rules to reduce false positives. Work with security and infrastructure teams on threat intelligence, trend reporting and continual service improvement.

Microsoft Sentinel · Microsoft Defender · QRadar +2

• Manchester
• Remote
• Mid-level
• Permanent

Monitor, detect and respond to cyber incidents for customers from a 24/7 Global Security Operations Centre, working with the Microsoft Security Stack, Splunk, EDR, IDS and IPS tools integrated into a Unified Cyber Platform. The L2 role sits within an MXDR team of over 100 accredited experts handling hundreds of millions of log events daily.

Microsoft Security Stack · Splunk · EDR +3

• Newcastle upon Tyne
• Remote
• £35,000 – £45,000 pa
• Mid-level
• Shift work

Investigating and responding to security incidents at 2nd Line level, monitoring customer environments and SIEM alerts, and threat hunting across a Microsoft security stack including Sentinel, Defender and Entra. Uses KQL and PowerShell for investigations and automation, acts as an escalation point for junior analysts, and supports vulnerability assessment and remediation. Initially on a 4-on, 4-off night shift pattern before moving to an 8-hour shift model.

Microsoft Sentinel · Microsoft Defender · Microsoft Entra

• London
• Mid-level

Hands-on incident response role covering detection, triage, investigation, containment and recovery of cyber incidents in a complex enterprise environment. Day to day involves monitoring SIEM and EDR/XDR alerts, analysing logs, packet captures and forensic images, threat hunting, and mapping activity to MITRE ATT&CK. Also maintains playbooks, evidence records and post-incident reports, and briefs senior stakeholders.

Microsoft Sentinel · Defender XDR · Defender for Identity +7

• Remote
• Remote
• Mid-level
• Contract

Monitor, detect, investigate and respond to cyber security threats using the Splunk Enterprise Security toolset. Day-to-day work centres on analysing alerts, investigating incidents and helping strengthen the organisation's cyber defence capabilities within a security operations team.

Splunk Enterprise Security · Splunk

• London
• On-site
• £30,000 – £45,000 pa
• Mid-level

Hands-on SOC role monitoring and triaging SIEM, EDR and cloud alerts, investigating incidents and supporting containment and response. Also provides second-line support across Azure, AWS, identity, network and endpoint environments, with occasional on-call and shift handovers. Requires SC clearance eligibility and is majority onsite in Manchester or London.

Microsoft Sentinel · ELK Stack · Azure +7

• Nottingham
• £26,100 pa
• Junior

Support the monitoring and protection of business systems for a growing financial services organisation, identifying security threats and keeping critical financial data secure. Day to day involves monitoring security alerts, reviewing logs, investigating incidents, maintaining documentation and supporting security testing and compliance activities.

• Sutton-in-Ashfield
• £26,100 pa
• Junior

Support the monitoring and protection of business systems for a growing financial services organisation, identifying security threats and keeping critical financial data secure. Day to day involves monitoring security alerts, reviewing logs, investigating incidents, and maintaining documentation, with hands-on exposure to security monitoring tools and incident management processes.

• Farnborough
• On-site
• £48,000 – £58,000 pa
• Senior
• Shift work

Investigating and triaging complex security alerts across SIEM, EDR, network traffic and log data, supporting incident response and escalation. Threat hunting using MITRE ATT&CK, developing detection rules and playbooks, and producing incident reports. Fully on-site in Farnborough on a 24/7 shift pattern supporting defence and national security environments.

Microsoft Sentinel · Splunk · Elastic +2

• London
• Remote
• £28,000 – £40,000 pa
• Junior

A self-funded training programme leading to entry-level cyber security roles, combining online CompTIA A+, Network+ and Security+ certification study with live labs and hands-on scenarios. Includes CV, LinkedIn and interview support plus recruitment assistance until placement, with no prior experience required.

CompTIA A+ · CompTIA Network+ · CompTIA Security+

• London
• £28,000 – £40,000 pa
• Junior

Trainee Junior SOC Analyst– £30,000–£65,000 – Job ProgrammeJob GuaranteeComplete the programme and get a job, or get your course fees back.This is a self-funded programme that leads to employment, fees apply.Looking to start a career in Cyber Security?We are offering…

• London
• Hybrid · 3 days in office
• £100,000 – £120,000 pa
• Lead · manages people
• Permanent

Hands-on leadership of an MDR security operations function, owning SLA and KPI delivery across a varied mid-market client base while line-managing SOC Analysts and Senior Analysts. Sets investigation quality standards, handles major incidents and escalations, and matures detection, runbooks and automation, including AI-assisted SOC tooling. Combines client-facing service governance with people development and pre-sales support.

Microsoft Sentinel · Microsoft Defender

• Liverpool
• Hybrid
• £60,000 – £65,000 pa
• Senior
• Contract

Act as the escalation point for an external MSSP, investigating and responding to security incidents and performing detailed event analysis to identify threats. Drive hands-on remediation, detection engineering, and security reviews across cloud and enterprise collaboration environments, using frameworks like MITRE ATT&CK. A one-year fixed-term contract with strong extension potential, hybrid across Liverpool, Glasgow, or London.

MITRE ATT&CK

• Birmingham
• Remote
• £90,000 – £95,000 pa
• Lead · manages people

Hands-on lead role split roughly 60/40 between Azure security engineering and SOC leadership, owning Sentinel, KQL detection engineering and incident response while mentoring three analysts. Involves DevSecOps tooling, IaC hardening of AKS and supply chain security across a large multi-tenant SaaS platform.

Microsoft Azure · Microsoft Sentinel · Microsoft Defender for Cloud +7

• Stevenage
• On-site
• £45,000 – £50,000 pa
• Mid-level
• Shift work

Designs, configures and maintains network security solutions including next-generation firewalls, secure proxies and IDS/IPS, while supporting 24/7 incident response alongside SOC analysts. Involves analysing network traffic and packet captures, remediating vulnerabilities and standardising security tooling in a highly secure engineering environment.

Cisco · Check Point · Palo Alto +5