Top Cyber Security Jobs in London

Lead delivery of multiple cyber security consulting engagements, managing teams to perform maturity, gap and risk assessments. Advise on security strategy, governance, compliance (ISO 27001, NIST, CIS, Cyber Essentials, GDPR, DORA), cloud and infrastructure reviews, vulnerability management, and incident preparedness. Support business development, mentor junior staff, assure report quality, and help clients achieve certifications and remediation roadmaps.

Lead platform security across cloud and Kubernetes environments, build detection and response capabilities, improve logging and identity access controls, drive cross-functional security initiatives, create runbooks and playbooks, participate in on-call rotations, and automate secure patterns across CI/CD and infrastructure.

Design, build and maintain software and automation for control monitoring, testing, reporting and evidence collection. Integrate with security platforms (SIEM, IAM, EDR), cloud and engineering tools, develop APIs, CLI tools and data pipelines, and translate technical control activity into auditable evidence and reporting to reduce manual audit and assurance effort.

Lead technical delivery of physical security design for EMEA data centres: develop and standardize security systems (access control, VMS, PIDS, cabling, PSIM), review consultant designs, support site selection and project phases, run technical workshops, ensure compliance with standards, and provide stakeholder technical authority and innovation.

Design, implement, and manage GCP infrastructure using Terraform. Architect GCP services, integrate Vertex AI and BigQuery, implement Policies-as-Code (Rego), integrate Wiz for continuous security, automate tooling and scripts, and perform security assessments and compliance.

Design, implement, and manage GCP infrastructure using Terraform; architect compute, storage, and networking; integrate Vertex AI and BigQuery; implement Wiz Security Control and policies-as-code (Rego); automate operations with Python/Bash; enforce security, IAM, encryption, and compliance.

Patrol and secure a London data center site by managing access control, monitoring CCTV, issuing visitor passes, conducting inspections, assisting in fire drills, and reporting security incidents. Work 12-hour rotating day/night shifts (4 on/4 off) and support the Security Manager in daily operations.

Lead and deliver cyber security risk assessment and advisory engagements across EMEA, manage client relationships, line-manage juniors, act as virtual CISO, support crisis response, and contribute to business development and proposals.

Deliver hands-on penetration tests across web applications, APIs, and network infrastructure, plus Cyber Essentials Plus and wider technical security reviews. Identify and validate vulnerabilities, explain business risk, and provide remediation. Produce reports, present findings, manage engagement scope, and contribute to advisory work, business development, and continuous improvement of methodologies and tooling.

Design and manage GCP infrastructure using Terraform, integrate Vertex AI and BigQuery, implement Policies-as-Code (Rego), integrate Wiz for continuous security monitoring, automate tooling, enforce GCP security best practices, and collaborate with data and security teams.

Manage vulnerability discovery, offensive testing and remediation programs (TLTP, red teaming, bug bounty, attack surface management). Coordinate vendors, validate and triage findings, support remediation and retesting, and automate security programme objectives to reduce cyber risk.

Provide regional corporate security leadership and advice across UK/EU sites, including incident management, investigations, crisis and continuity planning, site security assurance, technical security strategy, product/anti-counterfeiting and supply-chain security, security awareness, and liaison with intelligence and law enforcement to protect executives, events, and business operations.

Lead design and delivery of security automation, own case management platform, manage DevSecOps infrastructure, and drive AI adoption for security operations. Provide technical leadership, mentor engineers, define roadmaps, implement IaC/CI/CD practices, and ensure secure, resilient platforms supporting alert ingestion, enrichment, and automated response.

Manage and evolve a security education and awareness programme: own mandatory training cycles, conference/travel briefings, new-hire onboarding, quarterly threat briefings, maintain an internal security portal, and produce ongoing communications to drive security-conscious behaviour across a research organisation.

Maintain, evaluate, and test security for systems, infrastructure, and applications. Respond to incidents, manage security systems, support security reviews and policies, assist infra and dev teams with secure SDLC, conduct incident testing, and maintain documentation.

Support the Director BISO to oversee information and cyber security for LCH Ltd: assess controls, manage remediation, monitor roadmaps, engage stakeholders and third parties, maintain cyber risk profiles and MI, assess project security designs, report to governance bodies, and embed security across the business.

Lead and mentor a global 24/7 cybersecurity team to manage and optimize security platforms (SIEM/SOAR), perform threat hunting, incident response, vulnerability management, and ICS/SCADA monitoring. Drive automation, stakeholder collaboration, post-incident reviews, and continuous improvement of detection, remediation, and documentation for enterprise IT/OT environments.

Lead and manage all physical security activities across Richemont UK, including policy alignment, retail and site security, incident and investigations management, vendor oversight, executive protection, security for new builds and events, team leadership, training, compliance audits, and budget management to mitigate risks and ensure adherence to Group directives and local regulations.

Lead customer trust, security, and compliance for AI products by shaping AI governance, translating regulation into technical controls, supporting customer audits, partnering with Legal/Product/Engineering, and improving automation and resilience for global, region-aware compliance.

Design and embed application security controls across WRITER's AI platform: threat model LLM architectures, run SAST/DAST in CI/CD, perform code reviews and pentests, secure training data pipelines and AI agents, automate vulnerability detection, and partner with engineers to build secure-by-default patterns.

Lead technical pre-sales discovery, design and demonstrations for HPE security solutions (SASE, SSE, Zero Trust, cloud security). Engage CISOs and architects, produce RFP/RFI responses, run workshops, POCs and drive solution alignment with sales, product and engineering to secure customer outcomes.

Deliver hands-on cyber and information security assessments, audits, and control reviews. Identify control weaknesses, articulate risks, and provide pragmatic recommendations aligned to frameworks (ISO27001, NIST, CIS, Cyber Essentials). Produce client-facing reports, support certification audits, collaborate with stakeholders on security control design, and contribute to business development and internal methodology improvements.

Design, implement, and operate application and cloud security controls; perform penetration tests and vulnerability assessments; lead threat modeling and security design reviews; respond to and investigate incidents; integrate security into the SDLC; reduce cloud risks (primarily AWS); collaborate with partners and report business impact to leadership.

Lead hands-on Google Cloud SecOps engagements: deploy and configure SIEM/SOAR, build parsers and YARA-L detections, design SOAR playbooks and integrations, secure GCP foundations and CI/CD, operationalise threat intelligence, run threat hunting, and mentor practice growth and pre-sales activities.

Provide hands-on security assurance and architectural review for an SAP transformation (ECC to S/4HANA). Identify and assess risks across identity, APIs, cloud services, data migrations and third-party integrations. Recommend proportionate controls, embed security into design/build/deploy/operate phases, and support secure engineering and DevSecOps/CI/CD practices throughout the programme.