Cyber Security Jobs

• Winchester
• On-site
• £41,000 – £50,000 pa
• Mid-level

Monitor, triage and investigate security alerts across SIEM and wider security tooling, identifying indicators of compromise and conducting initial incident investigations. Support the full incident response lifecycle including containment, remediation and post-incident learning, while tuning detection rules to reduce false positives. Work with security and infrastructure teams on threat intelligence, trend reporting and continual service improvement.

Microsoft Sentinel · Microsoft Defender · QRadar +2

• Manchester
• Remote
• Mid-level
• Permanent

Monitor, detect and respond to cyber incidents for customers from a 24/7 Global Security Operations Centre, working with the Microsoft Security Stack, Splunk, EDR, IDS and IPS tools integrated into a Unified Cyber Platform. The L2 role sits within an MXDR team of over 100 accredited experts handling hundreds of millions of log events daily.

Microsoft Security Stack · Splunk · EDR +3

• Newcastle upon Tyne
• Remote
• £35,000 – £45,000 pa
• Mid-level
• Shift work

Investigating and responding to security incidents at 2nd Line level, monitoring customer environments and SIEM alerts, and threat hunting across a Microsoft security stack including Sentinel, Defender and Entra. Uses KQL and PowerShell for investigations and automation, acts as an escalation point for junior analysts, and supports vulnerability assessment and remediation. Initially on a 4-on, 4-off night shift pattern before moving to an 8-hour shift model.

Microsoft Sentinel · Microsoft Defender · Microsoft Entra

• London
• Mid-level

Hands-on incident response role covering detection, triage, investigation, containment and recovery of cyber incidents in a complex enterprise environment. Day to day involves monitoring SIEM and EDR/XDR alerts, analysing logs, packet captures and forensic images, threat hunting, and mapping activity to MITRE ATT&CK. Also maintains playbooks, evidence records and post-incident reports, and briefs senior stakeholders.

Microsoft Sentinel · Defender XDR · Defender for Identity +7

• Remote
• Remote
• Mid-level

Monitor, detect, investigate and respond to cyber security threats using the Splunk Enterprise Security toolset. The role supports security operations by analysing alerts, investigating incidents and helping strengthen cyber defence capabilities.

Splunk Enterprise Security · Splunk

• London
• On-site
• £30,000 – £45,000 pa
• Mid-level

Hands-on SOC role monitoring and triaging SIEM, EDR and cloud alerts, investigating incidents and supporting containment and response. Also provides second-line support across Azure, AWS, identity, network and endpoint environments, with occasional on-call and shift handovers. Requires SC clearance eligibility and is majority onsite in Manchester or London.

Microsoft Sentinel · ELK Stack · Azure +7

• Farnborough
• £48,000 – £58,000 pa
• Senior

Senior SOC Analysts – Multiple OpportunitiesFarnborough | Fully On-Site | 24/7 Shift PatternSalary + Shift Allowance | DV Clearance Eligibility RequiredEnjoy the investigation side of SOC work? There’s plenty to get into here.I’m recruiting for several Senior SOC Analysts to…

• Romford
• £28,000 – £40,000 pa
• Junior

Trainee Junior SOC Analyst– £30,000–£65,000 – Job ProgrammeJob GuaranteeComplete the programme and get a job, or get your course fees back.This is a self-funded programme that leads to employment, fees apply.Looking to start a career in Cyber Security?We are offering…

• Milton Keynes
• £28,000 – £40,000 pa
• Junior

Trainee Junior SOC Analyst– £30,000–£65,000 – Job ProgrammeJob GuaranteeComplete the programme and get a job, or get your course fees back.This is a self-funded programme that leads to employment, fees apply.Looking to start a career in Cyber Security?We are offering…

• Folkestone
• Remote
• £45,000 – £50,000 pa
• Lead · manages people

Hands-on leadership role coordinating a SOC team of around 15, prioritising alerts, acting as escalation point and supporting threat detection, investigation and incident response. Involves client service reviews, reporting, coaching analysts and improving playbooks, using Microsoft Sentinel and Defender XDR, with scope to develop people-management skills.

Microsoft Sentinel · Microsoft Defender XDR · Microsoft 365 +3

• London
• Hybrid · 3 days in office
• £100,000 – £120,000 pa
• Lead · manages people
• Permanent

Hands-on leadership of an MDR security operations function, owning SLA and KPI delivery across a varied mid-market client base while line-managing SOC Analysts and Senior Analysts. Sets investigation quality standards, handles major incidents and escalations, and matures detection, runbooks and automation, including AI-assisted SOC tooling. Combines client-facing service governance with people development and pre-sales support.

Microsoft Sentinel · Microsoft Defender

• Preston
• On-site
• £450 – £500 pd
• Mid-level
• Contract

Governance and coordination role tracking security incidents across a complex multi-supplier SIAM environment, from identification through to closure. You coordinate updates between suppliers and security stakeholders, monitor SLAs and escalation trends, and produce incident reports, dashboards and audit-ready records. Distinct from a hands-on SOC position, with no threat hunting or technical remediation involved.

• Liverpool
• Hybrid
• £60,000 – £65,000 pa
• Senior
• Contract

Act as the escalation point for an external MSSP, investigating and responding to security incidents and performing detailed event analysis to identify threats. Drive hands-on remediation, detection engineering, and security reviews across cloud and enterprise collaboration environments, using frameworks like MITRE ATT&CK. A one-year fixed-term contract with strong extension potential, hybrid across Liverpool, Glasgow, or London.

MITRE ATT&CK

• Stevenage
• On-site
• £45,000 – £50,000 pa
• Mid-level
• Shift work

Designs, configures and maintains network security solutions including next-generation firewalls, secure proxies and IDS/IPS, while supporting 24/7 incident response alongside SOC analysts. Involves analysing network traffic and packet captures, remediating vulnerabilities and standardising security tooling in a highly secure engineering environment.

Cisco · Check Point · Palo Alto +5

• London
• Remote
• Lead · manages people

Lead strategic advisor for enterprise customers modernising their Security Operations Centres through XSIAM deployment, covering log ingestion, detection engineering and automation. The role combines executive-level consulting with hands-on SIEM/SOAR/EDR technical work, mentoring professional services teams and feeding field insights back to Product and R&D. Requires security clearance eligibility and up to 30% travel.

XSIAM · Splunk · IBM QRadar