Top Cyber Security Jobs in London

Lead the strategy and hands-on delivery of product security across cloud platforms, applications, code, and CI/CD pipelines. Build and operate security tooling, secure software supply chains, develop policy-as-code controls, lead threat modeling, and create reusable secure-by-default patterns. Diagnose vulnerabilities, improve remediation, measure control effectiveness, and establish safeguards for AI-assisted and agentic engineering workflows. Serve as a principal technical authority while advising stakeholders and coaching engineering teams.

Provides hands-on information security support within a regulated insurance environment, including third-party risk assessments, supplier due diligence, security operations, incident response, threat intelligence, control validation, audit evidence, regulatory requests, and remediation tracking. The consultant advises business stakeholders, maintains risk documentation, and works independently within a client’s information security governance structure.

The Security Engineer designs, administers, and improves cybersecurity capabilities, primarily focused on identity protection and privileged access management. Responsibilities include PAM administration, privileged account lifecycle management, credential rotation, secrets and certificate management, access governance, threat detection, automation, incident response, security control monitoring, audit reporting, and collaboration on system hardening and security platform improvements.

Provides physical security at data centers by protecting people and property, monitoring CCTV, controlling access, patrolling premises, responding to incidents, preparing reports, and liaising with management. The role requires shift availability across weekdays, weekends, days, and nights, along with customer service, communication, initiative, and basic IT skills.

Design, implement, and improve security controls across Kubernetes, cloud-native, and datacentre infrastructure. Secure networks and firewalls, integrate DevSecOps controls into CI/CD, lead vulnerability management, build detection/response capabilities, automate security workflows, and support incident response and threat hunting for GPU-accelerated and AI/ML platforms.

One-year full-time internship supporting Global InfoSec GRC: assist with third‑party security scorecards, risk analytics, GRC application rollout and maintenance, third‑party assurance, process documentation, and security training/awareness.

Own and evolve GitLab’s authorization systems across its Ruby on Rails monolith and next-generation Rust policy engine. Design fine-grained permissions for users, tokens, roles, and AI agents; secure GraphQL and REST APIs; lead feature-flagged rollouts and migrations; improve performance and reliability; and collaborate across authentication, platform, AI, and modular-service teams in a distributed asynchronous environment.

Leads security interfaces between HS2 and its supply chain, producing and assuring security design deliverables for stations and the future railway. Reviews designs against UK standards and legislation, supports security and design panels, contributes to hazard records, and coordinates with government, police, and infrastructure stakeholders. The role provides physical security expertise covering security systems, blast mitigation, hostile vehicle mitigation, regulatory compliance, and assurance processes in a safety-critical rail environment.

The Senior Application Security Engineer will design and improve Secure SDLC, integrate security practices, and lead application security reviews across multiple platforms while ensuring fast delivery of secure products.

Own the UK&I SMB and startup segment, generating pipeline and closing new business through full sales cycles. Build territory plans, prospect outbound and via partners, engage founders and technical leaders, run evaluations with Solutions Engineering, negotiate agreements, forecast accurately in Salesforce, and identify expansion opportunities. The role requires high-volume pipeline management, quota attainment, cloud or cybersecurity sales knowledge, and disciplined qualification.

Own enterprise sales across the UK and Ireland, generating new business, managing the full sales cycle, engaging C-level and technical stakeholders, leading proofs of value, negotiating contracts, and closing multi-year partnerships. The role involves territory planning, channel and AWS ecosystem collaboration, accurate forecasting, Salesforce discipline, and selling cloud security solutions to mid-large enterprises.

Conduct outbound cold calls and email outreach, identify prospect needs, qualify marketing leads, generate new business opportunities, and meet sales targets. The role requires collaborating across sales teams, communicating with senior stakeholders, managing multiple accounts, and becoming a subject matter expert on Abnormal AI products.

Monitor and respond to global security incidents, lead incident response lifecycles, conduct threat hunting, manage threat intelligence workflows, and maintain SIEM, EDR, SOAR, alerts, playbooks, and escalation processes. The role participates in on-call rotations, coordinates stakeholders, and drives continuous improvement across preparation, detection, containment, and post-incident activities.

Leads a multi-layered engineering organization supporting Manufacturing products. Defines engineering strategy, oversees delivery and architecture, develops engineering leaders, and drives cloud-native, DevOps, quality, security, and AI adoption. Partners with Product, Architecture, and Manufacturing leaders to align technology with business and customer outcomes. Provides strategic leadership for configurable, multi-tenant manufacturing software and may work directly with customers at manufacturing locations.

Configure and mature CrowdStrike Falcon Cloud Security and CNAPP capabilities across Kubernetes and Amazon EKS environments. Responsibilities include CSPM, CDR, CWP, CIEM, container security, runtime protection, admission control, security testing, and detection validation. The consultant will collaborate with cloud engineering teams, communicate technical decisions to stakeholders, and support a state government health agency in a primarily remote role with monthly travel.

Lead technical response to security events across Twilio's global cloud infrastructure: triage, contain, remediate, document incidents, build runbooks and automations, drive post-incident improvements, participate in on-call rotation and RCAs, and collaborate with R&D to scale threat mitigation and incident response capabilities.

Patrols university campuses on foot and by vehicle, assists with control-room operations, responds to fire and intruder alarms, and provides immediate support during incidents or crimes. The role includes welfare support, signposting to agencies, and reassuring staff and students. Candidates need strong communication and listening skills, computer literacy, composure under pressure, attention to detail, and a full driving licence.

Lead mobile security architecture, penetration testing, threat modeling, security assessments, and secure solution delivery across Android and iOS platforms. Define technical strategies, identify risks, recommend mitigations, advise clients, and drive security quality and compliance. Collaborate across full-stack mobile teams, improve security practices and tooling, and support Agile delivery. The role also involves mobile security research, reverse engineering, cryptographic controls, and DevSecOps practices.

Lead the design and operation of IAM technologies, integrating with cloud platforms, supporting audits, and developing a high-performing engineering team.

Leads sophisticated Splunk security consulting engagements involving SIEM, SOAR, observability integrations, AI-driven security operations, and automation. Advises CISO and IT leaders, designs and delivers security architectures, supports complex platform issues, establishes documentation standards, mentors technical teams, influences product improvements, and manages strategic customer relationships.

Manage the complete inside sales cycle for standardized cyber security solutions targeting mid-market clients. Responsibilities include digital prospecting, pipeline development, needs assessment, deal closure, CRM maintenance, marketing campaign collaboration, client-facing content creation, reporting, and coordination with account success teams for onboarding.

Lead mobile security architecture, penetration testing, threat modeling, security assessments, and control implementation across Android and iOS platforms. Define secure technical strategies, develop mitigation plans, advise clients, and drive security quality and compliance. The role also contributes to mobile development, DevSecOps, reverse engineering, security research, Agile practices, technical roadmaps, and continuous improvement across front-end and back-end systems.

Lead product security assessments, threat model features, triage and own vulnerability lifecycle from bug bounty, SAST, fuzzing, and pentests. Build AI/LLM-driven automation and tooling to scale triage and enrichment, mentor engineers, and influence security across distributed cloud products.

Conduct threat models and security reviews for Cloudflare products, triage and manage vulnerability lifecycle (bug bounties, SAST, fuzzing, pentests), build AI/LLM-driven automation tooling for triage and enrichment, coordinate pentests and remediation with engineering, and act as the product security point of contact.

The Application Security Engineer embeds security throughout the software development lifecycle by advising on secure coding, threat modeling, OWASP Top 10 mitigation, code reviews, penetration testing, and SAST, DAST, and IAST tooling. The role partners with engineering teams, improves DevSecOps practices, researches AI and LLM threats, supports incident investigations, delivers security training, and mentors developers.