Top Cyber Security Jobs in Manchester

Design and implement Microsoft-based security architectures (Azure, Entra, Defender, Sentinel). Consult with clients to gather requirements, produce solution proposals, ensure governance/compliance, lead technical delivery, and produce detailed documentation.

Lead and own the information security program and security engineering at NEAR Foundation. Drive SOC 2 Type 2 and ISO 27001 readiness, run logging/monitoring/incident response, manage vulnerability and third-party risk, harden identity/access/endpoint stacks, automate security and compliance across SaaS, and advise on tooling and cloud security (AWS/GCP).

Lead and grow Platform & Security sales across the UKI region by managing AEs and Specialists, defining go-to-market strategy, driving regional forecast and revenue, coaching teams, building executive customer relationships, partnering cross-functionally on complex multi-product deals, and influencing product roadmap with EMEA and global leadership.

Lead security engineering across web apps, APIs, cloud (AWS/OCI), Kubernetes, and on-prem systems. Build CI/CD security, secure genomic and PHI/PII pipelines (HIPAA), run monitoring and incident response, prepare for HIPAA/SOC2/ISO27001 audits, perform pentesting/vulnerability discovery, improve logging/SIEM, and drive remediation with engineering and DevOps while raising company-wide security awareness.

Conduct deep technical research to identify novel risks and attack vectors in cloud- and AI-native architectures, produce proofs-of-risk and technical POCs, and partner with Product and Engineering to translate findings into product capabilities.

Secure Aptos core infrastructure and products via design reviews, code audits, penetration tests; build security tools and mitigations; define secure operational practices; advise engineers; and triage bug bounty reports.

Perform protocol-focused security research to prevent vulnerabilities on Ethereum mainnet. Tasks include AI-assisted analysis, fuzzing, manual review, reviewing hardforks and spec changes, improving security tooling and automation, coordinating disclosures, and supporting audits and audit competitions while collaborating with devops, specifications authors, and client implementers.

Lead research and advisory on application security for enterprise applications (ERP/CRM). Produce thought leadership, client-facing insights, presentations, market analysis, and support sales. Mentor analysts, drive research agenda, improve processes, and advise CIOs on security strategy, vendor evaluation, metrics, and vulnerability testing across major vendors (SAP, Salesforce, Workday, Oracle).

Lead research and thought leadership on threat and exposure management. Produce high-value insights, analyze market trends, advise clients, support sales, present at events, mentor analysts, and improve research processes. Engage clients virtually and in person, delivering actionable recommendations and peer-reviewed content while collaborating across global teams.

Produce thought-leading research and advisory on security operations, threat detection, incident response and automation. Engage clients via written research, inquiries, presentations, and events; mentor practitioners; support sales and media; and maintain expertise across SIEM, SOC ecosystems, cloud/on-prem security, and automation trends.

Lead security engineering for Hummingbird's infrastructure: harden AWS (Terraform), manage vulnerability and dependency tooling, develop threat intelligence, own incident response and disaster recovery, and shape long-term security posture while collaborating across a small senior engineering team.

Lead and improve ZODL security posture, manage incident response, coordinate external audits, advise staff on operational and personal security, prioritize mitigations, recruit security talent, and collaborate with engineering and research to secure Zcash software and protocols.

Lead design and implementation of security tooling, harden cloud and IT infrastructure, detect and respond to incidents using SIEM/EDR/SOAR, perform threat hunting, administer IAM and monitoring, contribute to policies and forensics, and partner with engineering on AI-related security risks and automation.

Own end-to-end enterprise sales in the Nordics/UK for a security platform that maps internet-exposed assets and runs automated AI penetration testing and DAST. Build territory plan and pipeline, engage technical buyers (CISOs, AppSec, Security Engineers), run demos and POCs with Sales Engineering, close complex six-figure ACV deals, and establish regional playbooks and partnerships.

Hands-on role to administer Microsoft identity, endpoint and cloud security (Entra ID, Intune, Defender, Azure). Responsibilities include EDR management, vulnerability triage, patching (including out-of-hours), incident support, compliance (ISO27001/SOC2), automation with PowerShell, and documentation to improve security posture and operational resilience.

Administer and maintain endpoint security platforms (Tanium & SentinelOne), deploy and manage Tanium modules, monitor performance, build dashboards and reports, perform audits and compliance checks, troubleshoot endpoint visibility/patching/deployments, integrate endpoint tools with IT/security systems, and provide training and support.

Perform information security and risk activities including implementing and enforcing security controls, incident response, threat management, vulnerability scanning, malware management, intrusion detection, risk assessments, and backup/disaster recovery planning. Work on moderate-scope projects with general guidance and apply judgment within defined parameters.

Own and scale Mozilla's web bug bounty program; triage and validate reports; drive end-to-end vulnerability remediation; perform targeted code reviews (JavaScript, Python); collaborate with SIRT on incidents; build tooling and KPIs to improve triage and program insight; engage external researchers and platforms.

Lead and mature Mozilla's ISMS and compliance programs (ISO 27001 and SOC 2 Type 2). Manage SoA, risk treatment, audits, policy lifecycle, gap remediation, internal audits, and cross-functional control ownership while advising security leadership on certification readiness and compliance strategy.

Design and manage GCP infrastructure using Terraform; architect compute, storage, and networking; integrate Vertex AI and BigQuery for ML and analytics; implement Wiz Security Control and Policies-as-Code (Rego) for continuous security and compliance; build automation and tooling; perform security assessments and collaborate with cross-functional teams.

Lead GCP cloud security by designing secure architectures, enforcing IAM and least-privilege, deploying GCP-native detection tools, embedding DevSecOps in CI/CD, managing vulnerabilities and compliance, and training engineering teams.

Design, implement, and improve security controls across Kubernetes, cloud-native, and datacentre infrastructure. Secure networks and firewalls, integrate DevSecOps controls into CI/CD, lead vulnerability management, build detection/response capabilities, automate security workflows, and support incident response and threat hunting for GPU-accelerated and AI/ML platforms.

Design, implement, and manage GCP infrastructure using Terraform; architect GCP services and BigQuery storage; integrate Vertex AI and Wiz Security Control for ML and continuous security monitoring; build automation and tooling; enforce GCP security best practices, Policies-as-Code, and perform regular security assessments and audits while collaborating with cross-functional teams.

Lead technical response to security events across Twilio's global cloud infrastructure: triage, contain, remediate, document incidents, build runbooks and automations, drive post-incident improvements, participate in on-call rotation and RCAs, and collaborate with R&D to scale threat mitigation and incident response capabilities.

Lead AWS security architecture and governance, monitor and respond to incidents, manage risks and vulnerabilities, ensure compliance (ISO27001, SOC2, PCI-DSS, GDPR), automate security workflows, mentor teams, and integrate security across development and operations.