Cyber Security Jobs in Leeds

• Manchester
• Hybrid · 3 days in office
• £54,000 – £55,000 pa
• Senior

Day-to-day operation of a SIEM platform, including monitoring, administration and optimisation, plus developing detection rules and investigating alerts through to resolution. Works with Infrastructure, Networking, DevOps and external partners on incident response, EDR management and control testing, with Google SecOps (Chronicle) experience advantageous.

Google SecOps · Chronicle · SIEM +4

• United Kingdom
• Hybrid
• Mid-level

Joins the Information Security Service Delivery team to assess, design, configure and integrate security technology controls, acting as a technical escalation point for security concepts. Works hands-on with Zscaler, Okta, Crowdstrike, cloud and endpoint security, threat modelling and security architecture frameworks, ensuring designs meet policies and regulatory requirements.

Zscaler · Okta · CrowdStrike +5

• Leeds
• Hybrid · 3 days in office
• £45,000 – £50,000 pa
• Mid-level
• Permanent

Support the development and operation of security controls, analyse threat intelligence, manage vulnerabilities and help with incident response across a global technology estate. Work with Azure and Microsoft security tooling such as Sentinel, Defender and Intune, alongside SIEM, EDR and firewalls, in a hybrid Leeds team.

Microsoft Azure · Microsoft Sentinel · Microsoft Defender for Endpoint +7

• Leeds
• Hybrid · 3 days in office
• £65,000 – £70,000 pa
• Lead · manages people
• Permanent

Lead a cyber security team day to day, covering resource planning, rotas and performance management, while overseeing incident response, vulnerability management and cloud security migration. Act as escalation point for security incidents and lead war-gaming exercises within an ITIL and ISO 27001 framework, requiring hands-on Azure security expertise.

Azure · Windows Server · VMware +7

• Leeds
• Hybrid
• Senior

Operational owner of an enterprise identity platform, maintaining SailPoint IdentityIQ workflows, connectors and lifecycle processes while troubleshooting provisioning and integration issues across Okta and Microsoft Entra. Acts as the bridge between technical IAM delivery and BAU operations, handling audit evidence, JML automation and access reviews, and providing delegated guidance to team members across global regions.

SailPoint IdentityIQ · Okta · Microsoft Entra +3

• London
• Hybrid · 1 day in office
• £90,000 – £120,000 pa
• Lead · manages people
• Permanent

Lead platform engineering engagements for a cloud consultancy's enterprise clients, from early solution design through delivery. Set technical direction, mentor platform engineers and consultants, and define reusable standards and patterns across AWS, Kubernetes, Terraform and CI/CD. Combines hands-on engineering, architecture and pre-sales consultancy.

AWS · Azure · GCP +7

• Bracknell
• £60,000 – £70,000 pa
• Senior

Hands-on technical role maintaining and improving a secure Gateway solution, with a focus on networking, Red Hat Enterprise Linux, and Shell/Bash scripting. You'll work with Solution Architects and Engineering Leads, support SOC and 3rd Line teams, and take on increasing project ownership with a path to Project Lead.

Red Hat Enterprise Linux · VMware · vSphere +5

• United Kingdom - Field
• Director · manages people

Leads the R&D organisation building the Entrust Agentic Trust platform, translating a four-plane reference architecture into development strategy, operating model and roadmap. Accountable for engineering execution, quality, security and delivery predictability across cloud-native services, APIs, SDKs, policy and authorization components, and tamper-evident evidence systems. Partners with Product, Architecture, Security and Cloud Operations, and builds a multi-discipline software organisation.

FIPS 140-3 · Common Criteria · SOC 2 +4

• Wolverhampton
• Lead · manages people

Lead physical, cyber, personnel and supply-chain security across multiple UK aerospace and defence manufacturing sites, reporting to the global CISO. Build and manage a security team, act as Common Responsible Person for EASA Part-IS, and drive governance, compliance and incident response in a highly regulated environment.

CCTV · EASA Part-IS · AirCyber +7

• United Kingdom
• Remote
• Junior

Embedded technical advisor partnering with strategic customers to drive adoption, optimization and operational support of the CrowdStrike Falcon platform. Involves deployment, configuration, troubleshooting, scripting with Falcon APIs, and mentoring customer security teams across endpoint, identity and cloud modules.

CrowdStrike Falcon · Windows · Mac +7

• Milton Keynes
• Remote
• £12,000 – £150,000 pa
• Director · manages people

Lead a globally distributed engineering organisation spanning cyber security, backend development, sensor infrastructure and AI-driven vulnerability research. Set technical strategy and standards while providing hands-on direction across architecture, system design and code review, and drive adoption of AI, LLMs and autonomous workflows to accelerate vulnerability discovery and exploit analysis.

LLM

• Virtual Location - Uk
• Permanent

Adversarial security testing role on AWS's Continuous Security Testing team, turning threat intelligence and scanner signals into testable hypotheses against live production services. Combines hands-on penetration testing with AI-augmented source code review, tracing chained attack paths and building lasting detections, canaries and fuzzers. Also involves testing agentic AI systems and mentoring engineers.

AWS

• London
• Remote
• Senior

Deliver expert-level technical support to top-tier cybersecurity customers, owning complex cases from initiation to resolution through multi-vendor troubleshooting, fault isolation and root cause analysis. Act as a designated customer advocate running weekly reviews, QBRs and upgrade planning, while working with Engineering and QA on bug reports and test plans.

Palo Alto Networks · Prisma Access · Cisco Firepower +7