Top Cyber Security Jobs in London

Design and implement cloud-native security controls and guardrails across Azure/AWS/GCP and managed Kubernetes clusters. Improve product security in the SDLC by building secure infrastructure-as-code, admission controls, secrets management, and observability. Perform architecture reviews, security assessments, and support incident detection and response while advising platform and engineering teams on secure AuthN/AuthZ, service mesh, and cluster hardening.

Lead regional physical security for a portfolio of corporate offices, vehicle depots, and labs. Deliver regional security strategy, manage vendor guard forces and budgets, coordinate incident response, partner with HR/Legal/Investigations, and act as law enforcement POC for EMEA investigations.

Manage and integrate physical security technology across EMEA sites, ensuring system health, vendor performance, compliance audits, incident response support, and regional execution of security technology initiatives.

Provide cloud security assessments and advisory for Azure, M365 and GCP; optimize Defender and security monitoring; improve Conditional Access and IAM; maintain SIEM and vulnerability tooling; support cyber incident response; ensure compliance and perform audits; implement IaC best practices (Terraform) and advise on threat detection and remediation.

Build, operate and own data security capabilities across Microsoft 365, SaaS, and cloud platforms. Implement data classification, labeling, DLP, and DSPM; integrate with Defender, Sentinel and Entra ID; support incident investigations, remediation, automation, reporting, and stakeholder engagement to reduce data exposure and enable secure collaboration and AI adoption.

Design and implement platform security features, act as security SME for Core Services, perform threat modeling and secure code reviews, support incident response and vulnerability remediation, and provide secure coding standards and developer training.

Senior individual contributor responsible for designing security observability, automating control monitoring and evidence collection, embedding security controls across cloud platforms, conducting security reviews, improving event monitoring and exposure management, and building security metrics and policy guardrails.

Own detection, triage, and response for cloud, endpoint, and SaaS; extend DLP and identity controls; manage MDM/device compliance; run vulnerability scanning and remediation; translate SOC 2/ISO 27001/PCI/DORA requirements into technical controls and automated checks; operate Bug Bounty triage; build scripts and lightweight tools to automate security operations and audit evidence.

Lead and mature an enterprise Product Security/AppSec program, embed security into the SDLC, operate and optimise AppSec tooling (SAST/DAST/SCA/IaC/container scanning), enable engineering via coaching and Security Champions, integrate AI for detection and prioritisation, perform threat modelling, and report enterprise product security posture and risk to leadership.

Design, implement and govern enterprise network security controls across on‑prem, cloud and container environments. Lead Zero Trust and micro‑segmentation initiatives, manage firewalls/proxies (Palo Alto, Fortinet, Zscaler), support LAN/WAN/Data Centre services, provide 3rd‑line escalation, shape roadmap, produce designs and standards, and support audits and cross‑team integration in a regulated, high‑availability environment.

Lead governance of Change & Release Management across the IAM portfolio, coordinating planning, approvals, deployments, CAB presentations, vendor coordination, compliance/audit evidence, and KPIs to ensure low-risk, auditable production releases.

Build and maintain automated test frameworks and regression suites for IAM platforms (PAM, Vault, PKI, Active Directory). Integrate tests into CI/CD, perform API testing, validate IAM workflows, create smoke/health checks, analyze failures, support release readiness, and maintain audit/compliance evidence.

Lead and mature enterprise threat intelligence and vulnerability management programs. Monitor global threats, manage TIP/SIEM/SOAR integrations, run risk-based vulnerability assessments, drive remediation with infrastructure teams, automate workflows, and produce executive-level reports on risk and remediation status.

Lead application security efforts by embedding security into the SDLC: automate SAST/DAST/SCA in CI/CD, run pentests and vulnerability management, perform threat modeling and code reviews, administer GHAS, secure cloud-native workloads (AWS), and drive security training and compliance (NIST CSF) across engineering teams.

Own and operate the firms information security and compliance program for BlueCortex and corporate operations: governance, ISO27001/SOC2 certification, GDPR/UK GDPR data protection, M365 security hardening, vendor risk, incident response, client security assessments, and security awareness.

Architect and manage GCP infrastructure using Terraform; integrate Vertex AI and BigQuery for ML/data workloads; implement Policies-as-Code (Rego/OPA) and Wiz for continuous security monitoring; create automation and tooling; enforce GCP security, IAM, encryption and compliance; collaborate with data scientists, engineers, and security teams.

Lead EMEA security for a multinational consumer goods client: conduct risk and threat assessments, develop and implement security strategies and Site Security Plans, oversee audits and investigations, manage executive protection, coordinate physical security programs, mentor security staff, liaise with law enforcement/intelligence, and brief senior stakeholders.

Perform business analysis and security-focused system analysis: elicit and standardize requirements, write user stories and traceability matrices, map requirements to APIs/JSON, coordinate UAT/BUAT, design and evaluate security protocols, conduct security assessments, collaborate with dev/QA/stakeholders, and produce status and security documentation.

Develop and maintain security detection and response capabilities using SIEM, EDR, DLP and email analysis. Build detection use cases, write automation scripts, investigate incidents, support first responders, and collaborate across teams to improve organisational security posture.

Provide operational security support across Richemont UK: conduct site inspections and risk assessments, enforce security directives, manage event and photoshoot security, liaise with vendors and police, deliver training, support the Security Service Centre, and develop security procedures and KPIs for retail, corporate and logistics sites.

Lead cloud security engineering across AWS/Azure/GCP: manage CSPM/CNAPP platforms, implement policy-as-code and IaC controls, resolve complex cloud security issues, mentor juniors, define requirements, and champion ITIL change/incident/problem processes.

Design, implement, and manage GCP infrastructure as code (Terraform); integrate Vertex AI and BigQuery Storage; configure Wiz for continuous security monitoring; implement automation, IAM, encryption, and Policies-as-Code; perform security assessments and audits; collaborate with data scientists, engineers, and security teams.

Manage and operate enterprise physical security systems (access control, CCTV, PSIM, key management) for data centers. Ensure compliance, perform audits and investigations, troubleshoot systems, coordinate vendors, support projects, maintain documentation, and run preventative maintenance and reporting across sites on 12-hour rotating shifts.

Design, implement, and manage GCP infrastructure using Terraform. Architect GCP services (compute, storage, networking), integrate Vertex AI and BigQuery pipelines, and implement Wiz Security Control and Policy-as-Code. Automate tooling and scripts, perform security assessments, and collaborate with data scientists, engineers, and security teams to ensure scalable, compliant, and secure cloud environments.

Lead delivery of multiple cyber security consulting engagements, managing teams to perform maturity, gap and risk assessments. Advise on security strategy, governance, compliance (ISO 27001, NIST, CIS, Cyber Essentials, GDPR, DORA), cloud and infrastructure reviews, vulnerability management, and incident preparedness. Support business development, mentor junior staff, assure report quality, and help clients achieve certifications and remediation roadmaps.