Cyber Security Jobs in Reading

• Reading
• On-site
• Entry level
• Internship

Six-month graduate internship in the Falcon Complete team, working from the Reading office on security alert triage, incident investigation and response, and basic malware analysis. Interns learn the Falcon platform and internal tooling, handle customer inquiries, and deliver a project to improve security controls.

CrowdStrike Falcon

• Reading
• Hybrid
• £60 – £70 ph
• Lead
• Contract

Lead the design and implementation of secure OT/ICS cybersecurity architectures, conduct risk assessments and assurance activities, and apply frameworks such as IEC 62443, NCSC CAF, NIS Regulations and ONR SAPs. Provide technical leadership across critical national infrastructure, nuclear and defence programmes, engaging senior stakeholders and regulatory bodies, with some bid and client relationship work.

IEC 62443 · NCSC Cyber Assessment Framework · NIS Regulations +1

• Reading
• Hybrid · 2 days in office
• £40,000 – £42,500 pa
• Junior
• Permanent

First line of defence for day-to-day security hygiene at a SaaS vendor: patching the Windows estate, monitoring CrowdStrike, and assessing the impact of new vulnerabilities. Works closely with the infrastructure team, with a structured route into Azure and wider cloud security engineering.

CrowdStrike · Microsoft Defender · Azure +2

• Reading
• On-site
• £30,000 – £35,000 pa
• Mid-level

Provide first and second line support remotely and onsite for a managed service provider, owning tickets in Autotask and troubleshooting Windows, Microsoft 365, printers and connectivity. Alongside helpdesk duties you assist with client installations, school projects and wireless networking work, developing skills in Intune, Ekahau surveys and 3CX telephony.

Autotask · IT Glue · Intune +7

• Reading
• Hybrid · 2 days in office
• £500 – £600 pd
• Contract

Owns the end-to-end major incident lifecycle in a complex, multi-supplier enterprise IT environment, coordinating technical teams, suppliers and business stakeholders to restore services quickly. Drives root-cause investigations, post-incident reviews and continual service improvement, using ITIL 4 and ServiceNow. Requires active SC clearance and sole British, Italian or Japanese citizenship.

ServiceNow

• Reading
• Hybrid
• Entry level
• Internship

Internship on CrowdStrike's Technical Analysis Cell, researching nation-state and criminal intrusions through reverse engineering of malware and tooling. The intern builds automation for malware analysis, creates host- and network-based detection signatures, and produces threat intelligence reporting for varied audiences.

CrowdStrike · Disassemblers · Decompilers +1

• Reading
• Hybrid
• £50,000 pa

Supports the Control Testing & Assurance Manager in delivering cybersecurity control testing across multiple security domains, assessing control design and operational effectiveness, gathering evidence and producing reports. Works with control and service owners to localise test scripts and improve testing frameworks, with hybrid working at Clearwater Court, Reading.

COBIT · COSO · ISO 27001

• Reading
• Hybrid
• £72,000 pa

Supports the design, implementation and maintenance of threat and vulnerability management controls across a large water utility's IT estate. Conducts network, application and code penetration testing, exploits vulnerabilities via proof-of-concept testing, and helps build an internal pen testing function. Works hybrid in Reading, liaising with Digital teams on remediation, patching and threat hunting.

Tenable · Burp Suite · Kali Linux +2

• Milton Keynes
• Hybrid · 3 days in office
• £500 – £600 pd
• Contract

Hands-on role delivering Azure cloud services within a major digital transformation programme, covering landing zone design, infrastructure automation and application migration. You will build Infrastructure as Code with Terraform or Bicep, maintain CI/CD and DevSecOps toolchains, and configure networking, identity, monitoring and backup. Work is hybrid from Milton Keynes three days a week and must meet UK government security standards.

Azure · Terraform · Bicep +7

• London
• Hybrid · 1 day in office
• £800 – £900 pd
• Senior
• Contract

Translate high-level SecOps transition strategies into detailed, low-level implementation plans across security engineering, threat and vulnerability management and security testing. Define operational readiness criteria, phase-gate checklists and multi-year delivery roadmaps, coordinating dependencies with architecture, GRC and technical SMEs. Requires active SC clearance and UK Government or regulated-environment experience.

SIEM · IAM · PAM +1

• United Kingdom
• Remote
• Senior
• Permanent

Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.

Snowflake · dbt · Power BI +4

• London
• £75,000 – £85,000 pa
• Mid-level

Hands-on ownership of technology governance, cyber security, risk, compliance and assurance frameworks across a diverse technology estate. Leads CIS Controls Self Assessment activities, coordinates ISO 27001 gap assessments and ISMS implementation, maintains security policies and risk registers, and provides assurance reporting to senior stakeholders while coordinating external auditors and suppliers.

CIS CSAT · ISO 27001 · ISMS +2

• Bristol
• £40,704 – £59,390 pa
• Senior
• Permanent

Conducts novel academic and high-TRL research into agentic AI security assurance for autonomous network management, characterising threat landscapes, running adversarial testing, and building runtime decision validation and dynamic trust scoring. Develops automated mitigation such as rollback and agent isolation, with experimental evaluation on a partner's agentic AI platform and the JOINER national open-networks testbed.

O-RAN · 3GPP · ETSI +2

• Leeds
• Hybrid
• Senior

Operational owner of an enterprise identity platform, maintaining SailPoint IdentityIQ workflows, connectors and lifecycle processes while troubleshooting provisioning and integration issues across Okta and Microsoft Entra. Acts as the bridge between technical IAM delivery and BAU operations, handling audit evidence, JML automation and access reviews, and providing delegated guidance to team members across global regions.

SailPoint IdentityIQ · Okta · Microsoft Entra +3

• Tidworth
• Hybrid · 3 days in office
• Mid-level

Lead organisation-wide IT security for a large PFI support services contract, owning the security strategy, roadmap and compliance activities. Manage incidents, breaches, disaster recovery and business continuity, and extend controls across the supply chain. The role sits in the central business services function, working with cyber and quality teams on audit readiness and business change.