Cyber Security Jobs in Reading

• Reading
• On-site
• Entry level
• Internship

Six-month graduate internship in the Falcon Complete team, working from the Reading office on security alert triage, incident investigation and response, and basic malware analysis. Interns learn the Falcon platform and internal tooling, handle customer inquiries, and deliver a project to improve security controls.

CrowdStrike Falcon

• Reading
• Hybrid
• £60 – £70 ph
• Lead
• Contract

Lead the design and implementation of secure OT/ICS cybersecurity architectures, conduct risk assessments and assurance activities, and apply frameworks such as IEC 62443, NCSC CAF, NIS Regulations and ONR SAPs. Provide technical leadership across critical national infrastructure, nuclear and defence programmes, engaging senior stakeholders and regulatory bodies, with some bid and client relationship work.

IEC 62443 · NCSC Cyber Assessment Framework · NIS Regulations +1

• Reading
• Hybrid · 2 days in office
• £40,000 – £42,500 pa
• Junior
• Permanent

First line of defence for day-to-day security hygiene at a SaaS vendor: patching the Windows estate, monitoring CrowdStrike, and assessing the impact of new vulnerabilities. Works closely with the infrastructure team, with a structured route into Azure and wider cloud security engineering.

CrowdStrike · Microsoft Defender · Azure +2

• Reading
• On-site
• £30,000 – £35,000 pa
• Mid-level

Provide first and second line support remotely and onsite for a managed service provider, owning tickets in Autotask and troubleshooting Windows, Microsoft 365, printers and connectivity. Alongside helpdesk duties you assist with client installations, school projects and wireless networking work, developing skills in Intune, Ekahau surveys and 3CX telephony.

Autotask · IT Glue · Intune +7

• Reading
• Hybrid · 2 days in office
• £500 – £600 pd
• Contract

Owns the end-to-end major incident lifecycle in a complex, multi-supplier enterprise IT environment, coordinating technical teams, suppliers and business stakeholders to restore services quickly. Drives root-cause investigations, post-incident reviews and continual service improvement, using ITIL 4 and ServiceNow. Requires active SC clearance and sole British, Italian or Japanese citizenship.

ServiceNow

• Reading
• Hybrid
• Entry level
• Internship

Internship on CrowdStrike's Technical Analysis Cell, researching nation-state and criminal intrusions through reverse engineering of malware and tooling. The intern builds automation for malware analysis, creates host- and network-based detection signatures, and produces threat intelligence reporting for varied audiences.

CrowdStrike · Disassemblers · Decompilers +1

• Reading
• Hybrid
• £50,000 pa

Supports the Control Testing & Assurance Manager in delivering cybersecurity control testing across multiple security domains, assessing control design and operational effectiveness, gathering evidence and producing reports. Works with control and service owners to localise test scripts and improve testing frameworks, with hybrid working at Clearwater Court, Reading.

COBIT · COSO · ISO 27001

• Farnborough
• Hybrid · 2 days in office
• £70,000 – £80,000 pa
• Senior
• Permanent

Hands-on detection engineering role designing, testing and deploying detection content across Microsoft Sentinel and Splunk, writing KQL and SPL logic, tuning alerts to cut false positives and onboarding log sources from cloud, identity and network telemetry. Works closely with SOC, Threat Intelligence and Security Architecture teams in a live SOC environment.

Microsoft Sentinel · Splunk · Logic Apps +2

• Reading
• Hybrid
• £72,000 pa

Supports the design, implementation and maintenance of threat and vulnerability management controls across a large water utility's IT estate. Conducts network, application and code penetration testing, exploits vulnerabilities via proof-of-concept testing, and helps build an internal pen testing function. Works hybrid in Reading, liaising with Digital teams on remediation, patching and threat hunting.

Tenable · Burp Suite · Kali Linux +2

• London
• Hybrid
• £80,000 – £120,000 pa
• Senior

Hands-on engineering role embedded in the Incydr product team, working directly with customers on technical health checks, custom integrations and troubleshooting. You get full access to the codebase and deployment tooling to diagnose and ship fixes, using AI coding tools to build purpose-built scripts and integrations. Expect some travel to customer sites, with most engagement remote under a hybrid model.

Incydr · Mihra AI · SCIM

• United Kingdom
• Remote
• Lead
• Permanent

Owns end-to-end product design for AI-powered and agentic experiences within an enterprise cyber resilience platform, from discovery and prototyping through validation and delivery. Champions Object-Oriented UX, governs the design system, and partners closely with product, engineering and research to turn complex cybersecurity data into intuitive workflows.

Immersive One

• London
• Hybrid · 1 day in office
• £800 – £900 pd
• Senior
• Contract

Translate high-level SecOps transition strategies into detailed, low-level implementation plans across security engineering, threat and vulnerability management and security testing. Define operational readiness criteria, phase-gate checklists and multi-year delivery roadmaps, coordinating dependencies with architecture, GRC and technical SMEs. Requires active SC clearance and UK Government or regulated-environment experience.

SIEM · IAM · PAM +1

• United Kingdom
• Remote
• Senior
• Permanent

Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.

Snowflake · dbt · Power BI +4

• Bristol
• £40,704 – £59,390 pa
• Senior
• Permanent

Conducts novel academic and high-TRL research into agentic AI security assurance for autonomous network management, characterising threat landscapes, running adversarial testing, and building runtime decision validation and dynamic trust scoring. Develops automated mitigation such as rollback and agent isolation, with experimental evaluation on a partner's agentic AI platform and the JOINER national open-networks testbed.

O-RAN · 3GPP · ETSI +2

• Tidworth
• Hybrid · 3 days in office
• Mid-level

Lead organisation-wide IT security for a large PFI support services contract, owning the security strategy, roadmap and compliance activities. Manage incidents, breaches, disaster recovery and business continuity, and extend controls across the supply chain. The role sits in the central business services function, working with cyber and quality teams on audit readiness and business change.