Top Cyber Security Jobs in London

As an Enterprise Architect, you will lead tech advisory growth, collaborate on solutions, manage client relationships, and mentor junior consultants within the organization, driving technology transformation for clients.

Develop and deliver native iOS features for the Nutmeg app using Agile practices. Own tasks end-to-end, write tests, participate in releases and code reviews, troubleshoot defects, contribute to technical initiatives, and collaborate across product, operations, and engineering to improve the codebase and tooling.

Lead development of cloud-native Python applications for global commodities trading desks. Design, build, test, and operate resilient, secure production systems; drive automation and CI/CD; evaluate vendor solutions; and mentor engineering communities of practice.

Designs, develops, tests, and maintains scalable, secure front-end applications using React and TypeScript. Uses AI-assisted development tools responsibly, produces architecture artifacts, improves code quality, debugs complex issues, and creates visualizations from large datasets to drive system improvements.

Lead engineering on design, development, and operational stability of market-facing systems. Deliver secure, high-quality Java code, promote enterprise AI-assisted engineering practices, drive automation and resiliency, evaluate vendor solutions, and mentor teams while ensuring secure, compliant adoption of AI and cloud-native architectures.

Design, develop, and maintain secure, high-quality production code and system architectures. Troubleshoot complex issues, analyze large datasets for improvements, ensure application resiliency and CI/CD practices, and contribute to engineering communities and inclusive team culture.

The Partner Program Manager will design and manage a tiered partner program, focusing on value-added systems for partner rewards, enablement, and performance analytics.

Support certification and assurance activities including preparing for certification audits, assessing and testing security and technology controls against standards, documenting test procedures and evidence, identifying control deficiencies and supporting remediation, and collaborating with control owners, 1st/2nd line teams and auditors to maintain certifications and improve control effectiveness.

Lead and operationalize Third-Party Security Risk Management across EMEA, manage supplier risk assessments and treatment, support ISMS/ISO27001 activities, run information security risk assessments, maintain Statements of Applicability, advise senior stakeholders, support audits, incidents, regulatory compliance, and security awareness initiatives.

Manage and execute security control testing across Vocalink, identifying control gaps, supporting remediation, mentoring junior testers, liaising with 2nd Line Security and Internal Audit, and improving control testing methodologies and reporting.

The Technical Consultant designs, plans, and implements technical projects, collaborates with other teams, and ensures project governance and best practices are followed.

Lead all aspects of Information Security for the UK&I business, implementing policies and managing compliance while driving a cybersecurity culture.

Responsible for triaging alerts and responding to security incidents, improving detection and response functions, and collaborating with various teams on security initiatives.

The Application Security Engineer embeds security throughout the software development lifecycle by advising on secure coding, threat modeling, OWASP Top 10 mitigation, code reviews, penetration testing, and SAST, DAST, and IAST tooling. The role partners with engineering teams, improves DevSecOps practices, researches AI and LLM threats, supports incident investigations, delivers security training, and mentors developers.

Lead the threat intelligence function within a Security Operations Centre, setting proactive monitoring and alerting strategy. Produce intelligence reports and briefings, analyze threat actors, campaigns, dark and deep web activity, and critical vulnerabilities. Collaborate with SOC, security teams, customers, vendors, industry groups, government partners, and Mastercard’s global intelligence team. Maintain intelligence tooling, support threat hunting, and develop new intelligence services while maturing the overall capability.

Build and maintain data pipelines and integrations to enable continuous control monitoring for security and compliance. Translate control requirements into measurable KPIs and dashboards, partner with control owners, and deliver data-driven insights to reduce risk and improve compliance processes.

Lead application security for the platform by embedding automated controls into the SDLC, conducting security architecture and code reviews, driving threat modeling, triaging vulnerabilities, coordinating remediations, partnering with engineering/product teams, and scaling tooling and AI-assisted workflows to raise security across cloud-native and containerized environments.

Design, build, and operate scalable security capabilities embedded into engineering workflows and CI/CD. Improve software supply chain security (SBOM), analyze vulnerabilities, enable runtime/cloud security, support incident response, drive secure development practices, and govern AI-assisted engineering tools across platform teams.

Lead programme governance and delivery for the London HQ security implementation. Partner with security, real estate, technology, and business stakeholders to define outcomes, manage dependencies, oversee design and deployment of physical security systems, establish governance, monitor performance metrics, and ensure operational readiness and risk mitigation.

Lead SecOps and vulnerability management architecture: design and scale SIEM, SBOM, VM platforms, SOAR playbooks, and detection logic; drive threat modeling, incident escalation, automation, AI-assisted validation, and regulatory/audit support across cloud and product teams.

Lead engineering and operate enterprise perimeter, proxy, and SSE/SASE services. Architect and implement ZTNA, IAP, SWG/proxy patterns, enforce identity/device/context policies, integrate with cloud and colocation interconnects, drive governance, automation, observability, and AI-assisted engineering adoption while coordinating cross-team delivery and remediation in the US.

Lead a global SOC/Attack Analysis team providing 24/7 monitoring and incident response. Manage SOC analysts, guide alert triage and case analysis, track metrics, improve detection/tuning, coordinate incident workstreams, and prepare senior management communications. Coach and develop team members and collaborate with cross-functional cyber teams and cloud stakeholders.

Lead design, build, and operate enterprise perimeter, proxy, and SSE/SASE security solutions. Architect ZTNA/IAP patterns, integrate SWG capabilities, enforce identity- and context-based policies, drive governance, roadmap, cross-team delivery, operational excellence, and adoption of AI-assisted engineering practices to improve security, stability, and automation.

Lead cloud security architecture for AWS and GCP: embed threat modeling and architecture reviews, design landing zones and automated guardrails, map controls to standards, support audit/regulatory requests, evaluate emerging tech and AI-assisted security, and influence security-first practices across product and engineering teams.

Lead design and execution of blockchain security operations: monitor on-chain/off-chain data, detect and respond to threats, collaborate cross-functionally, improve security posture, and implement detection for smart contracts and digital assets.