Citi★3.9 (21k)· London

Work with Solidity, Web3J/Web3JS/Ethers.js/Viem, Java/Spring, Node.js, and blockchains such as Ethereum, Hyperledger Besu, Canton, and Solana, using Hardhat/Foundry/Truffle for testing. Contribute to Citi's Integrated Digital Assets Platform (CIDAP) building Web3 components for tokenization, smart contracts, and on-chain settlement.

CHAMBERS & PARTNERS★3.2 (19)· London

You will work with firewalls, SIEM, IDS/IPS, EDR, vulnerability scanners, cloud security (Azure, AWS, GCP), identity management (Entra ID/Azure AD, PAM), and frameworks like ISO 27001 and NIST. Leading the development and delivery of Chambers & Partners’ information security programme, you will protect systems, data, and digital assets. As the security function grows, you may build and lead a dedicated team.

McKinsey & Company★4.2 (952)· London

You will work with AWS, Databricks, SIEM, vulnerability scanners, firewalls, IAM, IDS/IPS, and DevSecOps tooling while driving Secure Development Lifecycle and cloud security policies. You act as the security point of contact for McKinsey’s Social, Healthcare and Public Entities (SHaPE) Practice, reporting on compliance and KPIs.

AXA★3.9 (2.9k)· London

Design and implement secure architectures for enterprise security and AI/ML initiatives across AXA, using Docker, Kubernetes, cloud security, API security, micro-services, MLOps/MLSecOps platforms, threat modeling, and SSDLC. Defines technical security standards and reference architectures aligning with frameworks like NIST AI RMF and ISO/IEC 42001. Reports to the Chief Security Officer.

The Senior Cyber Security Engineer will operationalise crowdstrike falcon (EDR/next-gen SIEM), wiz CSPM (Azure/ AWS), mimecast and the microsoft security stack, triage alerts and execute vulnerability remediation. The role strengthens The Fidelis Partnership’s security engineering capability as a Bermuda-based managing general underwriter of property, specialty and reinsurance products. They will act as the second cyber escalation point within a 24/7 security operating model.

Google★4.3 (6.2k)· London

This role involves reviewing and designing secure enterprise architectures across on-premises, cloud, and hybrid environments, applying network engineering and identity management frameworks. You will evaluate secure deployments of AI/ML pipelines and cloud-native ecosystems, using tools like cloud IaC templates and threat modeling methodologies (e.g., STRIDE, PASTA). The Mandiant team provides cyber defense, threat intelligence, and incident response services as part of Google Cloud.

Okta★3.9 (70)· London

Principal Forward Deployed Engineer at Okta: work with OAuth 2.0, OIDC, SAML, SCIM, OPA, Cedar, OpenFGA, AI agent platforms, and MCP. Define canonical patterns for agent identity, delegation, audit, and kill-switches across the most strategic enterprise deployments. Own the reference architecture the FDE team builds from and shape the product roadmap.

Kubrick Group★2.8 (13)· London

You will work daily with Microsoft Sentinel, Microsoft Defender, EDR, Microsoft Purview, Intune, Azure, M365 and PowerShell. As a security analyst at a consultancy, you will lead internal Security Operations, incident response, vulnerability management, and security implementations across the Microsoft ecosystem.

Humanoid★0.0· London

Lead a cross-functional team of security engineers, working on product cybersecurity for the HMND 01 Alpha and Bipedal robots using the KinetIQ AI framework. Define security requirements, own TARA and risk assessments, and ensure compliance with IEC 62443 and the EU Cyber Resilience Act for these cyber-physical systems. The team is part of the Systems Engineering and Architecture Team.

Cloudflare★3.2 (1.8k)· London

Interns work with Rust, C, Go, Python, and Gitlab/Github. Cloudflare’s Research Team solves difficult problems in security, privacy, and systems at scale. Projects may involve AI, distributed systems, privacy, and trusted execution environments.

Doctify★4.3 (6)· London

This Cyber Security Lead role works with AWS, Google Workspace, SIEM, EDR, SSO, IAM, and frameworks including Cyber Essentials and ISO 27001. Doctify is a global platform connecting patients with doctors via verified reviews and professional endorsements. The role owns security strategy and may lead a small internal DevSecOps and IT/endpoint team.

Capgemini★3.7 (11k)· London

Work with ServiceNow IRM and SecOps to transform risk management, security operations, and governance processes for clients. As a Managing Consultant in Capgemini Invent’s AI & Digital Acceleration team, you will deliver technology transformation programmes that build secure, compliant and resilient enterprises.

International Rescue Committee★4.2 (794)· London

Lead a newly created AI security function at a humanitarian NGO, defining the strategy, building and developing a dedicated team, and owning the budget. You will set technical security requirements for AI agents and tools, perform risk assessments, and partner with IAM, Privacy, and Legal teams to ensure secure-by-design AI adoption. The role covers the full AI lifecycle from design to production, including red teaming, a governance registry, and managing review SLAs.

Alvarez & Marsal★3.6 (152)· London

Work with Microsoft Azure, CSPM, API security, IAM, and AI security tools including Harmonic, Claude, Claude Code, and Claude Cowork to secure and govern the firm’s enterprise AI platforms and applications. This hands-on role sits within the Security Engineering team, focusing on AI security controls, threat modelling for LLMs, and integrating security into AI-driven development.

Operationalise CrowdStrike Falcon (EDR/Next-Gen SIEM), Wiz CSPM (Azure/AWS), Mimecast and the Microsoft security stack. Execute vulnerability remediation, tune SIEM/EDR, manage outsourced SOC, and support incident response for a specialty insurance group.

You will work with Keyfactor, EJBCA, Azure AD, ADCS, ADFS, NDES, PowerShell, HSM, and CLM tools. This contract role involves designing, deploying, and managing certificate lifecycles in PKI and cloud identity platforms.

Work with AWS or Azure on a UK-first PKI project for a digital security company. This DevOps role supports a growing team disrupting the sector.

Deloitte★3.9 (14k)· London

You will work with AI governance frameworks (EU AI Act, NIST AI RMF, ISO 42001) and manage agentic AI, GenAI, and data analytics risk initiatives. As a Manager in Deloitte’s AI governance team, you lead projects that design and implement trustworthy AI strategies for Financial Services clients.

Lead the Cyber Threat Intelligence function for a global investment bank, using frameworks including ISO 27001, NIST, and CIS. Oversee threat modelling, actor profiling, and vulnerability intelligence, and partner with SOC, IR, and security engineering teams to operationalise intelligence.

Janus Henderson Investors★3.8 (62)· London

You will secure AI systems (LLMs, agents, platforms) and build security automation with Python, APIs, SOAR, and workflow engines. You will integrate security logs and perform prompt engineering, RAG, and agent-based tooling for the Office of the CISO at an asset management firm.

Palo Alto Networks★3.8 (154)· London

Technologies include TCP/IP, routing (BGP, OSPF), VPNs, authentication (LDAP, TACACS+), and tools like Wireshark, with Python or Shell scripting. The team provides expert post-sales support for Palo Alto Networks’ cybersecurity products, focusing on complex troubleshooting, root cause analysis, upgrade planning, and customer advocacy.

AJ Bell★3.7 (37)· London

You will work with the Microsoft security stack, firewalls, cloud security solutions, email/web gateways, Privileged Account Management, Identity Governance and Administration, SIEM, endpoint protection, and scripting for automation across Windows, MacOS, Linux, and mobile platforms. As principal technical lead you oversee day-to-day security engineering execution, ensuring project engagements align with security strategy at AJ Bell, a UK investment platform.

Work with Azure (AKS, ACR, App Service, Functions, VNets, APIM, Front Door, Key Vault), Terraform/Bicep, GitHub Actions/Azure DevOps, Docker, and observability tools. Build and operate Azure-based CI/CD platform across multiple products for IP Development.

You will work with C, Rust, bare metal, RTOS, embedded Linux, secure boot, root of trust, and cryptographic mechanisms. Fractile builds chips and systems that radically accelerate AI inference, aiming for thousands of tokens per second. The team secures the control chain across devices, boards, chassis, and racks.

Work with AWS (IAM, ECS/EKS, Lambda, CloudWatch, VPC, Secrets Manager, Security Hub, GuardDuty), Terraform, Python, Go, TypeScript, Docker, Kubernetes, and CI/CD pipelines to build secure cloud infrastructure. Embed security into the software development lifecycle for a technology organization scaling its cloud engineering and platform capabilities. Collaborate with engineering and security teams to automate security controls and develop secure-by-design solutions.