Top Cyber Security Jobs in London

Operate and maintain security monitoring systems, detect and investigate incidents, perform incident response and remediation, tune detections, and collaborate with engineering teams to improve security posture.

Work within a small global security team to operate and improve Fremantle's cyber security services. Liaise with an outsourced SOC for alerting and incident response, tune and manage SIEM/EDR/Darktrace/NAD and cloud security platforms, track and support vulnerability remediation, manage vendor SLAs, maintain playbooks and documentation, and support the Group Cyber Security Manager on security improvements.

One-year full-time internship supporting Global InfoSec GRC: assist with third‑party security scorecards, risk analytics, GRC application rollout and maintenance, third‑party assurance, process documentation, and security training/awareness.

Design, implement, and validate anti-scraping defenses through red-team/blue-team testing. Develop bypass strategies, automated adversarial scripts, and conduct Android reverse engineering, packet analysis/tampering, and offensive/defensive drills to protect JD's platforms.

Coordinate Security Master and reference data onboarding across client conversions. Gather requirements, support data mapping, testing, cutovers, and post-production stabilization while tracking risks and resolving data issues with cross-functional teams.

Provide hands-on security assurance and technical guidance for an SAP transformation from ECC to cloud-native S/4HANA. Review architectures, identify security risks across identity, APIs, cloud services, data flows and third-party integrations, recommend controls aligned to enterprise standards, and support DevSecOps and secure engineering practices throughout design, build, deploy and operate phases.

Lead and mature Moneybox's information security programme: set strategy, build a small high-performing security team, reduce risk across people, products, systems and third parties, run incident response, manage vulnerabilities and third-party risk, embed security into engineering and product, and report security posture to senior leadership.

Lead application security efforts by embedding security into the SDLC, performing code reviews, threat modeling, pen tests, and vulnerability management. Build automated SAST/DAST/SCA testing in CI/CD, develop secure coding standards and libraries, run security training and a champions program, and support bug bounty and blockchain/mobile app security assessments.

Lead security compliance audits and assessments, identify gaps and drive remediation, coordinate third-party audits and evidence collection, collaborate with cross-functional teams to implement security controls and standards (PCI, SOC 2, ISO 27001, NIST), provide reporting and recommendations, and evolve eBay's global security compliance program.

Monitor, triage, and investigate security alerts; perform incident response and documentation; tune SIEM and endpoint protection; manage ServiceNow security incidents; support vulnerability remediation and compliance (NIST, GDPR, SOX); collaborate with global teams and participate in occasional on-call and travel.

Design and apply security architecture for cloud and software solutions. Embed security practices into Agile delivery, assess existing systems, recommend mitigations, mentor engineers, lead small teams, and support security testing, CI/CD security and compliance with standards.

Lead design and implementation of identity, cloud, endpoint, and network security controls. Administer IAM, drive vulnerability remediation, automate security workflows (IaC, scripting), integrate telemetry into SIEM, and advise engineering and business teams on secure architecture and compliance with SOC2/ISO27001/CIS.

Lead secure design and review of cloud platforms and services, advise Agile teams on security best practices, test software/infrastructure security, mentor and manage staff, and ensure compliance with standards and regulations across public, healthcare, defence, and commercial projects.

Lead presales, GTM and demand-generation for Cyber & AI Security. Own proposals and pipeline, coordinate architects and engineers, manage partner (Microsoft) engagement, convert delivery into case studies, and feed market signals into Product and Services.

Lead and establish ARQ's security function in Brazil across application security, security operations, and GRC. Drive threat modelling, secure code review, API and AI/agentic workflow assessments, SIEM detection and response (Datadog, CrowdStrike, Cloudflare), incident response readiness, cloud security (AWS, Kubernetes), and vendor security assessments.

Own and evolve the platform security architecture (authN/authZ, secrets, encryption, multi-tenant isolation). Write production code to harden security patterns, run threat models and architecture reviews, set standards, and partner with Security and Platform teams to ship secure platform improvements.

Lead physical security and workplace safety across EMEA, manage security vendors, handle incident response and post-incident reviews, conduct site risk assessments, support event security planning, monitor geopolitical risks, ensure compliance with health and safety regulations, and build security literacy among stakeholders.

Lead and evolve enterprise security architecture for international operations. Define frameworks and standards, provide architectural governance, design secure cloud, application, infrastructure, and data solutions, conduct threat modelling and risk assessments, drive secure-by-design and DevSecOps practices, and ensure alignment with regulatory and business risk.

Plan, conduct and lead independent third-party audits for QMS and ISMS. Gather objective evidence, prepare impartial audit reports, host opening/closing meetings, build client relationships, travel regionally, and complete lead auditor training/qualifications.

Lead platform security for London Market, embedding secure-by-design across squads. Design, automate, and operate security controls in cloud and on-prem platforms, drive AppSec and vulnerability management, influence architecture, support incident response, and mentor chapter members to raise DevOps and security maturity.

Lead and grow Gartner's Security practice by developing thought leadership, delivering security transformation engagements, advising C-suite clients on IAM, SOC, cloud, DevSecOps and network security, creating assets and methodologies, driving revenue, and building and mentoring high-performing teams.

Lead rebuilding of security, privacy and resilience programmes. Own strategy, governance and incident response; drive BC/DR, cloud and third-party security, GDPR/PCI compliance, board reporting, and embed security into engineering and delivery.

Senior technical contributor owning cybersecurity domains end-to-end. Administers and improves security tooling (EDR, Zscaler, EPM), leads vulnerability and exposure management, conducts investigations and incident response, reduces attack paths (AD/Entra), advises on Microsoft 365/Azure security, automates tooling and reporting, and mentors stakeholders to deliver measurable cyber risk reductions.

Lead and implement organization-wide information security strategy, policies, risk management, incident response, compliance, vendor risk, and security monitoring. Collaborate with senior leadership and cross-functional teams, guide the security team, manage audits, select security technologies, and promote security awareness to align security objectives with business goals.

Lead platform security initiatives: define requirements, evaluate and implement security technologies (EDR, DLP, SOAR, SIEM), troubleshoot across Windows/Linux/macOS, develop architectures and documentation, manage security tool sustainment, update policies, and partner with IT and stakeholders to mitigate risk.