Top Cyber Security Jobs in London

Lead governance of Change & Release Management across the IAM portfolio, coordinating planning, approvals, deployments, CAB presentations, vendor coordination, compliance/audit evidence, and KPIs to ensure low-risk, auditable production releases.

Lead and mature enterprise threat intelligence and vulnerability management programs. Monitor global threats, manage TIP/SIEM/SOAR integrations, run risk-based vulnerability assessments, drive remediation with infrastructure teams, automate workflows, and produce executive-level reports on risk and remediation status.

Lead application security efforts by embedding security into the SDLC: automate SAST/DAST/SCA in CI/CD, run pentests and vulnerability management, perform threat modeling and code reviews, administer GHAS, secure cloud-native workloads (AWS), and drive security training and compliance (NIST CSF) across engineering teams.

Lead cloud security engineering across AWS/Azure/GCP: manage CSPM/CNAPP platforms, implement policy-as-code and IaC controls, resolve complex cloud security issues, mentor juniors, define requirements, and champion ITIL change/incident/problem processes.

Lead delivery of multiple cyber security consulting engagements, managing teams to perform maturity, gap and risk assessments. Advise on security strategy, governance, compliance (ISO 27001, NIST, CIS, Cyber Essentials, GDPR, DORA), cloud and infrastructure reviews, vulnerability management, and incident preparedness. Support business development, mentor junior staff, assure report quality, and help clients achieve certifications and remediation roadmaps.

Lead platform security across cloud and Kubernetes environments, build detection and response capabilities, improve logging and identity access controls, drive cross-functional security initiatives, create runbooks and playbooks, participate in on-call rotations, and automate secure patterns across CI/CD and infrastructure.

Design, build and maintain software and automation for control monitoring, testing, reporting and evidence collection. Integrate with security platforms (SIEM, IAM, EDR), cloud and engineering tools, develop APIs, CLI tools and data pipelines, and translate technical control activity into auditable evidence and reporting to reduce manual audit and assurance effort.

Design, implement, and manage GCP infrastructure using Terraform. Architect GCP services, integrate Vertex AI and BigQuery pipelines, and automate ops. Integrate Wiz Security Control and implement Policies-as-Code (Rego) for continuous security monitoring, perform security assessments, and ensure compliance in cloud environments.

Manage vulnerability discovery, offensive testing and remediation programs (TLTP, red teaming, bug bounty, attack surface management). Coordinate vendors, validate and triage findings, support remediation and retesting, and automate security programme objectives to reduce cyber risk.

Provide regional corporate security leadership and advice across UK/EU sites, including incident management, investigations, crisis and continuity planning, site security assurance, technical security strategy, product/anti-counterfeiting and supply-chain security, security awareness, and liaison with intelligence and law enforcement to protect executives, events, and business operations.

Manage and evolve a security education and awareness programme: own mandatory training cycles, conference/travel briefings, new-hire onboarding, quarterly threat briefings, maintain an internal security portal, and produce ongoing communications to drive security-conscious behaviour across a research organisation.

Maintain, evaluate, and test security for systems, infrastructure, and applications. Respond to incidents, manage security systems, support security reviews and policies, assist infra and dev teams with secure SDLC, conduct incident testing, and maintain documentation.

Support the Director BISO to oversee information and cyber security for LCH Ltd: assess controls, manage remediation, monitor roadmaps, engage stakeholders and third parties, maintain cyber risk profiles and MI, assess project security designs, report to governance bodies, and embed security across the business.

Lead customer trust, security, and compliance for AI products by shaping AI governance, translating regulation into technical controls, supporting customer audits, partnering with Legal/Product/Engineering, and improving automation and resilience for global, region-aware compliance.

Lead GSOC operational response to threats, incidents and crises. Oversee incident intake, triage, escalation, tools and vendor SLAs; develop processes, run exercises, produce leadership briefings, and coordinate cross-functional global stakeholders to ensure timely, proportionate security and crisis responses while improving resilience and operational performance.

Design and maintain secure enterprise architecture patterns; act as security design authority; translate policies into controls; perform risk assessments and threat modeling; evaluate emerging technologies; collaborate with infrastructure, app, and data teams to integrate secure solutions; document architectures and develop reusable reference templates; support Group Cyber Strategy and cyber leadership priorities.

Lead and build Smarkets' security engineering and DevSecOps program for cloud-native trading systems, ensuring regulatory compliance (CFTC), secure SDLC adoption (SAST/DAST/SCA), infrastructure hardening (AWS/Azure/GCP, Kubernetes, IaC), incident response, monitoring, and security automation while engaging with executives, board, and regulators.

Provide on-site security screening at a food production/airport facility: inspect seals and catering vehicles, audit personnel, log findings, maintain compliance with regulator/airport/ICTS standards, work shifts including early mornings, and perform duties in chiller areas as required.

Provide on-site security at a large fulfilment centre: conduct body and bag searches, access control, foot patrols, support loss prevention, log incidents and vehicle movements, communicate with team and management, and follow assignment procedures.

Provide access control, patrols, incident response, customer service, report writing and daily operational paperwork. Follow company/client procedures, maintain professionalism, and promote ICTS. Work flexibly on rosters, including nights.

Provide on-site access control, patrols, incident response, customer service, and report writing. Complete daily operational paperwork, follow company/client procedures, and maintain professional standards.

Provide security at a large fulfilment centre: conduct body/bag searches, access control, patrols, support loss prevention, write reports, communicate with team and management, and follow site procedures.

Client-facing senior consultant delivering cyber security engagements across governance, risk and compliance: ISMS development, ISO27001 certification support, NIS2 and framework gap analysis, risk assessments, security management, pre-sales/tender support, quality assurance of consultants, and input to security methodologies.

Design, implement, test and document scalable Windows platform security controls. Automate security workflows and integrate security products via APIs. Manage endpoint security, vulnerability scanning and patching, investigate emerging threats, and advise IT teams on remediation and best practices.

Operate, scale, and improve network security infrastructure. Design and deploy perimeter security, manage segmentation/DMZ, evaluate security platforms, collaborate on threat detection/mitigation, and enhance observability and automation.