Top Cyber Security Jobs in London

Hands-on role to administer Microsoft identity, endpoint and cloud security (Entra ID, Intune, Defender, Azure). Responsibilities include EDR management, vulnerability triage, patching (including out-of-hours), incident support, compliance (ISO27001/SOC2), automation with PowerShell, and documentation to improve security posture and operational resilience.

Own and scale Mozilla's web bug bounty program; triage and validate reports; drive end-to-end vulnerability remediation; perform targeted code reviews (JavaScript, Python); collaborate with SIRT on incidents; build tooling and KPIs to improve triage and program insight; engage external researchers and platforms.

Administer and maintain endpoint security platforms (Tanium & SentinelOne), deploy and manage Tanium modules, monitor performance, build dashboards and reports, perform audits and compliance checks, troubleshoot endpoint visibility/patching/deployments, integrate endpoint tools with IT/security systems, and provide training and support.

Lead and mature Mozilla's ISMS and compliance programs (ISO 27001 and SOC 2 Type 2). Manage SoA, risk treatment, audits, policy lifecycle, gap remediation, internal audits, and cross-functional control ownership while advising security leadership on certification readiness and compliance strategy.

Design and manage GCP infrastructure using Terraform; architect compute, storage, and networking; integrate Vertex AI and BigQuery for ML and analytics; implement Wiz Security Control and Policies-as-Code (Rego) for continuous security and compliance; build automation and tooling; perform security assessments and collaborate with cross-functional teams.

Lead GCP cloud security by designing secure architectures, enforcing IAM and least-privilege, deploying GCP-native detection tools, embedding DevSecOps in CI/CD, managing vulnerabilities and compliance, and training engineering teams.

Design, implement, and improve security controls across Kubernetes, cloud-native, and datacentre infrastructure. Secure networks and firewalls, integrate DevSecOps controls into CI/CD, lead vulnerability management, build detection/response capabilities, automate security workflows, and support incident response and threat hunting for GPU-accelerated and AI/ML platforms.

Design, implement, and manage GCP infrastructure using Terraform; architect GCP services and BigQuery storage; integrate Vertex AI and Wiz Security Control for ML and continuous security monitoring; build automation and tooling; enforce GCP security best practices, Policies-as-Code, and perform regular security assessments and audits while collaborating with cross-functional teams.

Lead technical response to security events across Twilio's global cloud infrastructure: triage, contain, remediate, document incidents, build runbooks and automations, drive post-incident improvements, participate in on-call rotation and RCAs, and collaborate with R&D to scale threat mitigation and incident response capabilities.

Lead AWS security architecture and governance, monitor and respond to incidents, manage risks and vulnerabilities, ensure compliance (ISO27001, SOC2, PCI-DSS, GDPR), automate security workflows, mentor teams, and integrate security across development and operations.

Senior technical leader driving pre-sales architecture and partner technical strategy for Qualys-based enterprise security solutions. Lead executive workshops, complex POCs, partner enablement, solution adoption roadmaps, and mentor junior architects while influencing product and partner-delivered managed services.

Lead and deliver complex OT security engagements across ICS and embedded industrial devices. Perform hands-on testing, threat modeling, and Purdue-model network reviews, translate technical findings to business risk, mentor junior consultants, contribute OT research and methodology, and support pre-sales. Travel to industrial sites (~30%).

Design and deliver security solutions by translating customer objectives into technical strategies. Build visualizations, custom scripts and API integrations, analyze network topologies and application traffic, develop signatures and tooling, support incident response, threat hunting, and customer enablement to reduce mean-time-to-investigate and improve detection and response outcomes.

Lead embedding security into software delivery by partnering with engineering teams to improve CI/CD security, triage and remediate findings, design secure-by-default patterns, automate security validation and evidence generation, facilitate threat modeling, and provide reusable templates and guidance to reduce risk at scale.

Lead and execute multi-vector red team campaigns including adversarial emulation, post-exploitation, social engineering, and physical testing. Develop tools, exploit vulnerabilities, produce comprehensive technical reports with remediation guidance, present findings to technical and non-technical stakeholders, mentor team members, support business development, and contribute research to the security community. Requires significant travel.

Design, build, and maintain enterprise security architecture across on-prem and cloud. Develop security policies, lead threat modeling, vulnerability assessments, and incident response. Integrate security into SDLC, evaluate new technologies, ensure continuity plans, and mentor junior staff.

Embed security into software delivery by partnering with engineering teams to improve CI/CD pipeline security, triage and remediate findings, perform threat modeling, design secure-by-default patterns, build reusable templates and automation, support compliance and audit evidence, and communicate security standards and best practices.

Partner with sales and partners to design, demo, and operationalize Qualys-based security solutions. Lead architecture workshops, POCs, partner enablement, and complex integration guidance across vulnerability, patching, cloud/application security, compliance, and threat detection. Influence product roadmap and produce enablement content.

Advance Firefox security architecture and cryptography stack by designing and implementing web platform security features. Improve browser reliability, performance, and memory efficiency. Debug and resolve security-sensitive, multi-threaded issues, contribute to standards-based implementations, and collaborate across teams on security initiatives, technical design, and planning.

Lead development and reliability of the Firefox Add‑ons platform, delivering full‑stack features (React/TypeScript, Django, MySQL), improving automated moderation, observability, platform reliability, and security. Collaborate across teams, respond to incidents, and contribute openly to scale a safe, trustworthy ecosystem.

Design and enforce Rego policy-as-code for GCP, integrate security into GCP CI/CD pipelines, implement IaC with Terraform, perform GCP security assessments and incident response, and drive GCP-specific security best practices across teams.

Lead AWS-focused threat modeling, conduct risk assessments, define cloud security requirements, and integrate security controls across the SDLC. Guide architecture and DevOps teams, run workshops, manage incident response and vulnerability remediation, and recommend security tools and best practices for AWS environments.

Design, implement, and maintain Rego policy-as-code and Terraform IaC to secure GCP infrastructure. Integrate security into CI/CD pipelines, perform GCP security assessments, threat modeling, incident response, and collaborate across teams to enforce compliance and container/microservice security.

Own and mature the enterprise security program: manage identity/SSO, EDR, MDM, and SaaS security; secure cloud and developer stacks (GitHub, AWS, GCP); run vulnerability management, backup testing, and incident response; ensure endpoint lifecycle governance and maintain compliance with ISO 27001 and SOC 2.

Lead security engineering for an institutional product: threat modeling, secure architecture, appsec, AWS hardening, key management (HSMs/TEEs), supply-chain and reproducible builds, incident response, and compliance technical controls. Hands-on coding and infrastructure work alongside engineering.