23 of 23 Contract Security Operations Jobs in London

transformation programme for a UK Government Department. We are seeking an experienced Security Operations Implementation Planning Consultant to translate high-level SecOps transition strategies into detailed, actionable implementation plans across multiple security services. This role requires a strong understanding of enterprise Security Operations, combined … ability to develop practical, sequenced delivery roadmaps that can be executed by operational teams. Key Responsibilities Develop detailed, low-level implementation plans for SecOps services, including Security Engineering, Threat & Vulnerability Management and security testing. Translate strategic objectives into clear, sequenced activities, milestones, dependencies and deliverables across a multi ...

Security Engineer (SC Cleared) £450 per day | Outside IR35 | 9-Month Contract + Potential Extensions Remote (1 day in London per month) A leading consultancy is seeking an experienced Security Engineer to join a high-profile cyber security programme supporting critical public sector environments. This role sits … intersection of Security Operations, SIEM engineering, and cloud-based data engineering, offering the opportunity to work on large-scale security monitoring platforms and cloud-native security solutions. The Role As a Security Engineer, you will play a key role in designing, optimising, and maintaining security ...

Cyber Security Analyst – 2-month contract – Remote/London – Inside of IR35 My Client is looking for a Cyber Security Analyst to support day-to-day BAU security operations, with a primary focus on Rapid7, SIEM monitoring, vulnerability management and security investigations . They have … backlog of alerts, so they are looking for someone with strong SIEM, vulnerability and investigation skills. Key Skills & Experience from the Cyber Security Analyst: Strong hands-on experience with Rapid7 and SIEM platforms . (Monitoring alerts and investigation) Proven experience in alert triage, security investigations and vulnerability management ...

Manager to join a high-profile programme supporting a secure government environment. The successful candidate will lead the coordination, management, and resolution of cyber security incidents, ensuring rapid response, stakeholder engagement, and continuous service improvement. This role requires a proactive individual with strong communication skills, experience managing complex cyber … incidents, and the ability to operate effectively within secure and highly regulated environments. Key Responsibilities Lead the end-to-end management of cyber security incidents and major security events. Coordinate technical response teams during security incidents, ensuring timely containment, eradication, and recovery activities. Act as the primary ...

Clearance Required London (1 day per month onsite) A leading consultancy is looking for a Detection Engineer to join a high-profile cyber security programme supporting critical public sector services. This role offers a unique blend of detection engineering and SOC operations , providing the opportunity to develop … optimise advanced detection capabilities while helping protect large-scale cloud environments. Working within a Security Operations Centre (SOC), you'll be responsible for building and tuning detections, investigating security incidents, and improving the effectiveness of security monitoring across AWS and Splunk environments. The Role ...

OpenAI Engineer (Cyber Security) - SC Cleared Remote | SC Cleared | Up to £445 per day (IR35) Are you passionate about applying cutting-edge AI technologies to solve real-world cyber security challenges? We are looking for an experienced OpenAI Engineer (Cyber AI) to play a key role in shaping … enabled cyber defence within a large public sector environment. This is an exciting opportunity to work at the intersection of Generative AI , Cyber Security Operations , and Innovation , developing intelligent solutions that enhance Security Operations Centre (SOC) capabilities. Working alongside Solution Architects, Business Analysts and Cyber Security ...

Cyber Security Engineer Hybrid - 4 days on-site p/w in London Initial Contract to 30 April 2027 Inside IR35 - £544.83pd Umbrella Rate Are you a cyber security engineer who enjoys owning a tool from deployment through to day-to-day operation, and then replacing it with … something better? We're recruiting a contract Senior Cyber Security Tooling Engineer for the IT Security team of a leading financial services organisation in London. The team is taking on management of a wide estate of security tooling across network, email, endpoint and web, plus platforms that ...

Cloud Security Engineer £650pd Inside IR35 Contract SC Clearance Required (Used Within Last 12 Months) Hybrid Working | Occasional London Travel Start Date: November 2026 | Contract Until March 2027 A leading consultancy is seeking an experienced AWS Cloud Security Engineer to support a major Home Office programme focused … migrating a large-scale product estate into a new AWS environment. This is a high-profile cloud transformation initiative, requiring a security-focused engineer to help design, implement, and maintain a robust security posture across the organisation's core cloud platforms. The successful candidate will work across cloud ...

Senior Cyber Security Business Analyst - AI & Security Transformation Location: London, UK Contract: 12 months (subject to confirmation) Rate:£600 - £800 per day (Inside of IR35) must use an Umbrella Working Arrangement: Hybrid Sector: Financial Services/Cybersecurity/AI Transformation The Opportunity We are looking for an experienced … Senior Cyber Security Business Analyst to join a major international financial services organisation undergoing an ambitious transformation of its cyber security capabilities. Working within the CISO function, you will play a pivotal role in shaping how emerging AI technologies are integrated into cyber security operations, particularly ...

Active SC clearance We are seeking an experienced AI Solutions Architect to lead the technical discovery and assessment of AI opportunities within a Cyber Security Operations Centre (SOC). This is an exciting opportunity to shape the application of AI within cyber security operations, evaluating emerging … cases and defining a secure target architecture and implementation roadmap. The Role Assess existing SOC architecture, including SIEM, SOAR, EDR/XDR and security data platforms. Identify opportunities to apply AI across alert triage, threat intelligence, incident investigation, detection engineering and reporting. Evaluate AI approaches, including Generative AI, LLMs ...

months initially We are seeking an SC Cleared Lead AI Solutions Architect to lead the assessment and design of AI capabilities within a Cyber Security Operations Centre (SOC) environment. The role will focus on identifying high-value AI use cases, assessing technical feasibility, defining secure target architectures … solutions, with expertise in Generative AI, Large Language Models (LLMs), Retrieval-Augmented Generation (RAG), and Agentic AI architectures . Strong understanding of Cyber Security Operations Centres (SOC) and associated technologies including SIEM, SOAR, EDR/XDR, threat intelligence, and security operations platforms . Extensive experience defining ...

Security Engineer (SOC/Data Engineering) £450 per day | Outside IR35 | 9-Month Contract | Active SC Clearance Required London (1 day per month onsite) A leading consultancy is seeking an experienced Security Engineer to join a high-profile cyber security programme supporting critical public sector environments. This … role sits at the intersection of Security Operations, SIEM engineering, and cloud-based data engineering, offering the opportunity to work on large-scale security monitoring platforms and cloud-native security solutions. The Role As a Security Engineer, you will play a key role in designing ...

Specialist (SOC) Location: London (Onsite) Duration: 12 Months Inside IR35 The Opportunity We're seeking an experienced Incident Response Specialist to provide hands-on Security Operations Centre (SOC) and Incident Response support within a fast-paced cyber security environment. This role focuses on monitoring, investigating, and responding … cyber security threats across macOS endpoints, Linux cloud environments, microservices, and containerised platforms. You'll work closely with security and engineering teams to contain threats, coordinate remediation activities, and continuously strengthen detection and response capabilities. Key Responsibilities Monitor and triage security alerts within a SOC environment. Investigate ...

days per week)/remote (Hybrid). Purpose of the role: We are seeking an experienced Cyber Engineering & Resilience to lead our Cyber Security Engineering and Resilience function. This role is accountable for the strategy, performance, and continuous improvement of security platforms, detection capabilities, automation, and resilience services … that protect critical business operations and support organisational objectives. You will drive the security and resilience roadmap, ensuring security controls, tooling, and services remain effective against an evolving threat landscape. What you'll do: Lead the Cyber Security Engineering & Resilience function, ensuring secure, reliable, and scalable ...

Outside IR35 Contract Length: 6-month contract We're looking for an experienced Content Developer with hands-on ArcSight and/or Google SecOps experience to support a cybersecurity-focused project on an initial six-month contract. This is a remote opportunity for a technical professional with experience developing … migration of content between security platforms. Key Experience Hands-on experience with ArcSight and/or Google Security Operations (Google SecOps/Chronicle). Experience developing or maintaining SIEM security content. Understanding of security detection rules, correlation logic and detection use cases. Knowledge of security ...

months + +Inside IR35 +£60 - £70 ph +On site in London We are seeking an experienced Incident Response Specialist to provide hands-on Security Operations Centre (SOC) and incident response support across endpoint, cloud and application environments. The successful candidate will investigate and respond to cyber security threats, with a particular focus on macOS endpoints, Linux cloud workloads, microservices and containerised environments. You will work closely with security and technical teams to assess incidents, support containment and remediation, and improve threat detection and response capabilities. Key Responsibilities Monitor security alerts, perform triage and investigate ...

Title: Security Technical Analyst/Security Consulting Practitioner Location: London, Birmingham, or Sheffield (Hybrid: 3 days per week in-office) Contract Duration: 6 months About the Role We are seeking an experienced Security Consulting Practitioner to guide clients on their business protection journey by shaping security … support, perfect for a subject matter expert who excels at cross-functional collaboration and complex problem-solving. Key Responsibilities Strategy & Consulting: Develop and refine security strategies that align seamlessly with business objectives and emerging cyber threats. Solution Design & Implementation: Lead the design of innovative security solutions and provide ...

days Location - London We are looking to engage an experienced Microsoft Defender XDR specialist to design and deliver practical operational training for an internal security team. This is not necessarily a dedicated trainer position. We are open to speaking with experienced security practitioners who have significant hands … confidence and capability within the team, enabling them to manage day to day alerts, investigate incidents effectively and make informed decisions when handling potential security events. Desired outcome: The overarching goal is to provide the team with a solid understanding of the Defender portals and day to day operations. ...

Birmingham (Hybrid) | 6 Months | Inside IR35 Our client, a leading technology organisation is looking for a Senior SIEM Engineer to support a large-scale security monitoring platform. Responsibilities: Develop and optimise SIEM solutions Build and manage log ingestion pipelines Enhance threat detection, alerts and dashboards Support platform automation … performance tuning Work closely with Security Operations teams Key Skills: SIEM Engineering/Security Monitoring Elasticsearch, Logstash, Kibana (ELK) Kafka Kubernetes Scripting & Automation Ansible, Helm, ArgoCD or GitLab CI/CD Strong troubleshooting and analytical skills Ideal for candidates from SIEM Engineer, Security Engineer, Detection Engineer ...

regulated environment. You will be responsible for designing, developing and maintaining Python-based applications and shared libraries, with a strong focus on logging, observability, security, and AWS cloud services. Working closely with developers, Site Reliability Engineers (SREs), and Security Operations Centre (SOC) teams, you will help define … implement logging standards, improve monitoring capabilities, and ensure security events are captured and delivered effectively across enterprise platforms. Key Responsibilities Design, develop and maintain applications using Python and Django . Build and support shared Python libraries, ensuring appropriate versioning, testing and documentation. Implement structured logging and observability best practices ...

quality standards: code reviews, branching and release strategy, pipeline quality gates. Lead brownfield remediation of existing subscriptions and workloads onto platform standards. Reliability and operations Define platform SLOs and track service health through observability built on Azure Monitor/Log Analytics, integrated with Sentinel (Security Operations) and the NOC. Drive operational readiness and acceptance, with runbooks and documentation in place before handover to Cloud Run (BAU operations). Lead resolution of platform incidents, feed root causes into problem management, and reduce toil through automation as part of continual service improvement. Consumer experience and adoption ...

SUMMARY Deliver Red Team and Adversary Simulation Activities Deliver threat-led security assessments, adversary emulation and red team activities within complex defence and government environments. You will work as part of the Leonardos delivery teams to ensure the effectiveness of people, processes and technology against realistic cyber threats, producing … Tooling Support the design, provisioning and maintenance of infrastructure used during red team and adversary simulation activities. This includes the deployment and management of security tooling, cloud-based environments and supporting platforms required to conduct operations safely and effectively. Documentation and Knowledge Sharing Produce high-quality technical documentation ...

experience operating as a ServiceNow Architect or Lead Developer with proven hands-on ServiceNow experience Experience delivering multiple ServiceNow modules including ITSM, ITOM, HRSD, SecOps, GRC/IRM and SPM . Strong expertise across: ServiceNow scripting (Client & Server-side) Flow Designer IntegrationHub Service Portal/Employee Center Automated Test Framework … management skills. Comfortable operating within complex, regulated organisations. Desirable ServiceNow Certified Technical Architect (CTA) or working towards CTA Multiple CIS certifications (ITSM, ITOM, HRSD, SecOps, GRC) Knowledge of DevOps and CI/CD practices #ServiceNow #ServiceNowArchitect #ServiceNowCTA #ServiceNowJobs #ITOM #ITSM #HRSD #SecOps #GRC #OutsideIR35 #LondonContract #ContractJobs Reasonable Adjustments: Respect ...