Cyber Security Jobs in Exeter

• Exeter
• £21,805 pa
• Entry level
• Contract

A PhD project investigating end-to-end guarantees for security systems by verifying translations between programs and the representations used by security protocols. The work centres on Isabelle/HOL, developing semantic models and compilation techniques, with zero-knowledge proof systems such as STARK-style protocols as a key application area. It spans formal methods, programming languages, cybersecurity and cryptography, with scope to shape the direction around the student's interests.

Isabelle/HOL · STARK

• Leicester
• £55,000 – £65,000 pa

Broad cyber security role in a financial services business, covering strategy, managing an external SOC, incident response and vulnerability management. Also involves developing AI governance and controls for Microsoft Copilot, plus security across Microsoft cloud, endpoint and identity environments, with training and guidance for non-technical colleagues.

Microsoft Defender · Microsoft Sentinel · Microsoft Copilot +2

• Liverpool
• Hybrid
• £60,000 – £65,000 pa
• Senior
• Contract

Act as the escalation point for an external MSSP, investigating and responding to security incidents and performing detailed event analysis to identify threats. Drive hands-on remediation, detection engineering, and security reviews across cloud and enterprise collaboration environments, using frameworks like MITRE ATT&CK. A one-year fixed-term contract with strong extension potential, hybrid across Liverpool, Glasgow, or London.

MITRE ATT&CK

• Leeds

Deliver continuous security testing across customer external attack surfaces, combining automated scanning with hands-on manual assessment. Validate scanner findings, chain vulnerabilities to demonstrate realistic attack paths, and produce proof-of-concepts and remediation advice. Work directly with customers while contributing to internal tooling and methodology.

Burp Suite Professional · SQLMap · Python +7

• London
• Hybrid
• Lead · manages people
• Permanent

Lead and deliver OT cyber security consulting for critical national infrastructure clients, combining hands-on client-facing work with team leadership. You will build senior internal and external relationships, ensure high-quality delivery, identify new opportunities and shape service-based solutions to drive revenue growth across your service areas.

• Manchester
• Hybrid · 3 days in office
• £54,000 – £55,000 pa
• Senior

Day-to-day operation of a SIEM platform, including monitoring, administration and optimisation, plus developing detection rules and investigating alerts through to resolution. Works with Infrastructure, Networking, DevOps and external partners on incident response, EDR management and control testing, with Google SecOps (Chronicle) experience advantageous.

Google SecOps · Chronicle · SIEM +4

• Knutsford
• Mid-level · manages people

Hands-on engineering role safeguarding encryption keys and cryptographic services across enterprise applications, working with Hardware Security Modules and Thales/Entrust tooling. Involves BAU and 24/7 on-call support, security assessments, penetration testing, and key management across Windows and Linux environments, with occasional off-site data centre work.

Thales · Entrust · SharePoint +5

• Manchester
• Hybrid · 1 day in office
• £630 pd
• Senior
• Contract

Lead cyber assurance activities across complex OT and cloud environments, assessing controls against NCSC CAF, NIST and ISO standards and running internal and external audits. Work with architects, engineering teams and risk owners to embed risk governance and challenge technical decisions on critical infrastructure. A 12-month engagement on a major cyber transformation programme.

Azure · AWS · GCP +5

• London
• £60,000 – £85,000 pa
• Lead

Lead the Blue Team and risk function for a banking client, running security monitoring, threat detection, incident response and exercises while maintaining the ISMS against ISO27001, NIST or SOC2. The role also covers vulnerability management, penetration testing oversight, third-party risk reviews, audit support and mentoring junior analysts.

Darktrace · KnowBe4 · Qualys +1

• Swansea
• Hybrid · 2 days in office
• £45,000 – £55,000 pa
• Mid-level

Hands-on role taking technical ownership of cyber security across a predominantly Microsoft environment, working with an infrastructure team and external SOC partners. Day to day involves assessing the estate for security gaps, hardening systems, operating Defender/XDR, EDR and Sentinel, managing Entra ID access controls, and responding to incidents and vulnerabilities.

Microsoft Sentinel · SIEM · SOC +3

• London
• Hybrid · 2 days in office
• £115,000 – £125,000 pa
• Director

Own the information and cyber security agenda for an international organisation, defining strategy, policies and technical baselines across networks, cloud, identity and endpoints. A senior individual-contributor role without line management, working with infrastructure, technology and external providers to drive vulnerability management, monitoring, incident response and security architecture. Requires hands-on technical depth plus the ability to influence senior stakeholders.

Microsoft Azure · Microsoft 365 · Google Enterprise +3

• Liverpool
• Hybrid
• £60,000 – £65,000 pa
• Senior
• Contract

Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.

SIEM · IAM · DLP +1

• London
• Hybrid · 2–3 days in office
• £100,000 – £110,000 pa
• Director · manages people

Leads a five-person information security and governance function within a government body's compliance team, owning the information management system and its audit cycle. Ensures compliance with ISO 27001, Cyber Essentials (Plus), NIST and GovAssure, covering control documentation, third-party risk and security awareness. Hybrid role with two to three days a week in the South London office.

ISO 27001 · Cyber Essentials · Cyber Essentials Plus +2

• Hessle
• Hybrid
• £35,000 – £45,000 pa
• Mid-level
• Permanent

Hands-on security operations role covering alert triage, incident response and root-cause analysis, plus tuning SIEM, EDR/XDR and monitoring tooling to cut false positives. You will drive automation and security improvement projects while liaising with a managed SOC and internal infrastructure, cloud and application teams.

Microsoft Sentinel · Microsoft Defender XDR · CrowdStrike +7

• Prudhoe
• Hybrid
• £35,000 – £45,000 pa
• Permanent

Hands-on security operations role covering alert triage, incident response and root-cause analysis, alongside tuning SIEM, EDR/XDR and monitoring tooling to improve detection and cut false positives. You will also drive security automation, deliver improvement projects and act as liaison with a managed SOC and internal infrastructure, cloud and application teams.

Microsoft Sentinel · Microsoft Defender XDR · CrowdStrike +6