Offensive security jobs in WokinghamCreate job alerts

SOC / Cyber Threat Detection Analyst - SANS/GIAC Cyber Threat Detection Analyst Location: Wokingham, Berkshire (On-site) Salary: Competitive (dependent on experience) + excellent benefits & training Security Clearance: Ideally SC Cleared or eligible for SC Role Overview As a Cyber Threat Detection Analyst, you will play a hands-on role within an advanced cyber defence function, focused on proactive threat hunting, adversary behaviour analysis, and high-fidelity threat detection across enterprise environments. This role goes beyond reactive alert handling. You will actively hunt for malicious activity using telemetry, SIEM data, and threat intelligence, develop hypotheses based on MITRE ATT&CK Tactics, Techniques, and Procedures (TTPs), and support incident management and response activities when threats are identified. We are open to experienced SOC Analysts where threat hunting, investigations, and proactive detection have formed a significant part of their role, and who are looking to further develop in a more hunting-led environment. This position is well suited to analysts who enjoy thinking like an attacker, have worked alongside or supported red team or purple team activities, and want to deepen their expertise in threat detection and detection engineering. Skills & Experience We're Seeking Experience in threat hunting, cyber threat detection, SOC, blue team, or cyber defence environments, with ideally around five years hands on experience. Strong hands-on experience using SIEM platforms, including: Microsoft Sentinel (KQL) Splunk (SPL) Elastic Security/Kibana (KQL, ESQL) Practical and operational understanding of MITRE ATT&CK, attacker techniques, and adversary tradecraft Experience working with Indicators of Compromise (IOCs) and threat intelligence feeds Solid experience across the security event life cycle, including detection, investigation, and incident management Hands-on experience with EDR/XDR technologies such as Microsoft Defender, CrowdStrike, SentinelOne, or Carbon Black Strong knowledge of networking fundamentals (TCP/IP, DNS, HTTP/S, Firewalls, VPNs, Proxy technologies) Experience analysing telemetry from Windows, Linux, identity, endpoint, and network sources Strong analytical mindset with the ability to clearly communicate findings, impact, and riskKey Responsibilities Conduct proactive threat hunting activities across log, endpoint, and network telemetry to identify suspicious, stealthy, or previously unknown threats Develop and execute hunt hypotheses aligned to MITRE ATT&CK TTPs, adversary behaviours, and emerging threat intelligence Write, refine, and optimise SIEM queries using KQL, SPL, Elastic/ESQL, and Kibana Query Language Perform IOC analysis, enrichment, and validation, integrating internal and external threat intelligence sources Lead investigations from initial detection through scoping, root cause analysis, and impact assessment Support incident management and incident response activities, including containment, remediation, escalation, and lessons learned Collaborate closely with SOC teams, incident responders, red teams, and purple teams to validate detections and improve defensive coverage Contribute to detection logic improvements, use-case development, and continuous enhancement of hunting methodologies Produce clear investigation write-ups, timelines, and recommendations for technical and non-technical stakeholdersSecurity Certifications (Highly Beneficial) SANS/GIAC certifications, including but not limited to: GCIH - Incident Handler GCIA - Intrusion Analyst GCED - Enterprise Defender GCTI - Cyber Threat Intelligence GMON - Continuous Monitoring GDAT - Defending Advanced Threats GCAT - Advanced Threat Intelligence OSCP or equivalent offensive security qualifications Crest certifications, such as: Crest Practitioner Intrusion Analyst (CPIA) Crest Registered Intrusion Analyst (CRIA) Crest Certified Threat Intelligence Analyst (CCTIA) Crest Certified Blue Team Professional (CCBTP) Microsoft SC-200 or related detection and response certifications Other recognised cyber security or threat intelligence credentials

SOC / Cyber Threat Detection Analyst - SANS/GIAC Cyber Threat Detection Analyst Location: Wokingham, Berkshire (On-site) Salary: Competitive (dependent on experience) + excellent benefits & training Security Clearance: Ideally SC Cleared or eligible for SC Role Overview As a Cyber Threat Detection Analyst, you will play a hands-on role within an advanced cyber defence function, focused on proactive threat hunting, adversary behaviour analysis, and high-fidelity threat detection across enterprise environments. This role goes beyond reactive alert handling. You will actively hunt for malicious activity using telemetry, SIEM data, and threat intelligence, develop hypotheses based on MITRE ATT&CK Tactics, Techniques, and Procedures (TTPs), and support incident management and response activities when threats are identified. We are open to experienced SOC Analysts where threat hunting, investigations, and proactive detection have formed a significant part of their role, and who are looking to further develop in a more hunting-led environment. This position is well suited to analysts who enjoy thinking like an attacker, have worked alongside or supported red team or purple team activities, and want to deepen their expertise in threat detection and detection engineering. Skills & Experience We're Seeking Experience in threat hunting, cyber threat detection, SOC, blue team, or cyber defence environments, with ideally around five years hands on experience. Strong hands-on experience using SIEM platforms, including: Microsoft Sentinel (KQL) Splunk (SPL) Elastic Security/Kibana (KQL, ESQL) Practical and operational understanding of MITRE ATT&CK, attacker techniques, and adversary tradecraft Experience working with Indicators of Compromise (IOCs) and threat intelligence feeds Solid experience across the security event life cycle, including detection, investigation, and incident management Hands-on experience with EDR/XDR technologies such as Microsoft Defender, CrowdStrike, SentinelOne, or Carbon Black Strong knowledge of networking fundamentals (TCP/IP, DNS, HTTP/S, Firewalls, VPNs, Proxy technologies) Experience analysing telemetry from Windows, Linux, identity, endpoint, and network sources Strong analytical mindset with the ability to clearly communicate findings, impact, and riskKey Responsibilities Conduct proactive threat hunting activities across log, endpoint, and network telemetry to identify suspicious, stealthy, or previously unknown threats Develop and execute hunt hypotheses aligned to MITRE ATT&CK TTPs, adversary behaviours, and emerging threat intelligence Write, refine, and optimise SIEM queries using KQL, SPL, Elastic/ESQL, and Kibana Query Language Perform IOC analysis, enrichment, and validation, integrating internal and external threat intelligence sources Lead investigations from initial detection through scoping, root cause analysis, and impact assessment Support incident management and incident response activities, including containment, remediation, escalation, and lessons learned Collaborate closely with SOC teams, incident responders, red teams, and purple teams to validate detections and improve defensive coverage Contribute to detection logic improvements, use-case development, and continuous enhancement of hunting methodologies Produce clear investigation write-ups, timelines, and recommendations for technical and non-technical stakeholdersSecurity Certifications (Highly Beneficial) SANS/GIAC certifications, including but not limited to: GCIH - Incident Handler GCIA - Intrusion Analyst GCED - Enterprise Defender GCTI - Cyber Threat Intelligence GMON - Continuous Monitoring GDAT - Defending Advanced Threats GCAT - Advanced Threat Intelligence OSCP or equivalent offensive security qualifications Crest certifications, such as: Crest Practitioner Intrusion Analyst (CPIA) Crest Registered Intrusion Analyst (CRIA) Crest Certified Threat Intelligence Analyst (CCTIA) Crest Certified Blue Team Professional (CCBTP) Microsoft SC-200 or related detection and response certifications Other recognised cyber security or threat intelligence credentials

The ideal candidate is experienced in Python, C, and Rust, with a background in offensive security. A cybersecurity firm is seeking a Senior Software Developer to tackle complex security challenges. Strong mentoring skills and a high-level security clearance are required for this role.

A global leader in security services in the UK is seeking an Offensive Security Tester to conduct penetration tests and enhance client security. The ideal candidate will have strong offensive security skills and experience in vulnerability analysis.

As a Offensive Security Consultant, with a focus on Infrastructure testing, you will perform formal and comprehensive penetration testing assessments, producing full written reports to appropriate standards and within agreed deadlines. Relevant security qualifications (such as OSCP, CREST CRT, OSEP,

A leading security technology firm in London is seeking a Senior Security Software Research Engineer to find vulnerabilities in internet-deployed software and guide security research outcomes.

A leading cybersecurity firm in the United Kingdom is seeking an experienced professional to lead offensive security operations against AI and ML systems. You will collaborate with teams to monitor and respond to anomalous AI behavior, shaping innovative detection strategies for future challenges in

The role involves assessing cybersecurity measures, conducting risk evaluations, and collaborating with various teams to ensure robust information security practices. A leading financial institution in Greater London is looking for a cybersecurity expert to join their team.

A leading AI cybersecurity firm in the UK is seeking a skilled Penetration Tester to enhance security across the digital landscape.

NTT DATA, a global leader in security services, is seeking a Offensive Security Tester to join its UK Security Practice. Offensive Security Tester / REMOTE. Background in information security or IT security operations.

You’ll work at the intersection of offensive security, AI safety, and product development, collaborating with cross‑functional teams to harden our systems against evolving threats. CI/CD pipelines and GitHub security best practices. The ability to write robust tools, automate offensive workflows

Perform various types of security testing, including network penetration, web application, mobile security assessments, and social engineering. In this position, your duties will include overseeing client engagements, conducting security assessments, and presenting comprehensive reports on your disc

A global leader in security services is seeking an Offensive Security Tester to conduct penetration testing and enhance client security postures. The ideal candidate will have 3-5 years of experience in security roles, strong communication skills, and preferred certifications like OSCP or CEH. This

NTT DATA, a global leader in security services, is seeking a CREST-certified Offensive Security Tester to join its UK Security Practice. Background in information security or IT security operations. The ideal candidate will have a strong background in offensive security, a deep understanding of atta

Interest in learning and staying current with offensive security technologies. Develop your offensive security skillset across varied, real-world environments. Conduct penetration testing and offensive security engagements across networks, applications and platforms.

A leading cybersecurity firm in the United Kingdom seeks a Senior Offensive Security Engineer to assess application, network, and system security through simulated cyberattacks. Responsibilities include managing vulnerabilities, collaborating with internal teams, and establishing communication with

A leading cybersecurity firm in the United Kingdom is looking for an experienced offensive security professional to discover and exploit vulnerabilities. Don't miss this unique chance to redefine offensive security. You will work collaboratively, using your deep understanding of security to protect

A leading UK cyber security consultancy is looking for a Cyber Security Consultant to join their Offensive Security team. You will be responsible for delivering high-quality security assessments, producing detailed reports, and mentoring junior team members.

Relevant security qualifications (such as OSCP, CREST CRT, OSEP, CCT or relevant Social Engineering exams/training). A passion for security and networks.

The ideal candidate will have over 7 years of offensive security experience and deep understanding of AI/ML security risks. A leading AI technology firm in Greater London is seeking a Security Researcher to enhance the security of its innovative AI products. Responsibilities include vulnerability hu

Collaborate with internal security and engineering teams to support the standardisation of API security practices across the organisation. Senior Offensive Security Analyst. The role will exclusively focus on identifying weaknesses in authentication and authorisation implementations across multiple

The ideal candidate will possess deep technical expertise in offensive security and strong leadership abilities. This role involves designing sophisticated engagements, mentoring junior operators, and ensuring robust security across banking environments.

You’ll lead and scale a high-performing security testing function within a growing consultancy, balancing hands‑on delivery with ownership of practice direction, quality, and performance. You’ll define how security testing is delivered, shape the service portfolio, and ensure consistent, high�

Are you an experienced Senior Offensive Security Engineer that wants to work with cutting-edge cybersecurity technologies and contribute to enhancing our overall security posture? At Ivanti, we work passionately and authentically, striving to win together and make a real impact for our customers and

This fully remote role is ideal for a player-coach who enjoys tackling offensive security problems. Xact Placements Limited is seeking an Engineering Lead (Cyber) for a high-growth cybersecurity scale-up. You will lead the Cyber Engineering team, guiding the future direction and architecting the sec

Driving with Uber offers a flexible earning opportunity.It’s a great alternative to full-time driver jobs, part-time driver jobs or other part-time gigs, temp jobs or seasonal employment.Or maybe you’re already using other rideshare apps and want to supplement your income by becoming a driver us

Start Delivering with Uber Eats.Delivering with Uber Eats offers a flexible way of making money.It is a great alternative to traditional part-time delivery jobs or other part-time gigs, temp jobs or seasonal work.See how delivering with the Uber app can help you make money flexibly.You decide how mu

Driving with Uber offers a flexible earning opportunity.It’s a great alternative to full-time driver jobs, part-time driver jobs or other part-time gigs, temp jobs or seasonal employment.Or maybe you’re already using other rideshare apps and want to supplement your income by becoming a driver us

Driving with Uber offers a flexible earning opportunity.It’s a great alternative to full-time driver jobs, part-time driver jobs or other part-time gigs, temp jobs or seasonal employment.Or maybe you’re already using other rideshare apps and want to supplement your income by becoming a driver us

Start Delivering with Uber Eats.Delivering with Uber Eats offers a flexible way of making money.It is a great alternative to traditional part-time delivery jobs or other part-time gigs, temp jobs or seasonal work.See how delivering with the Uber app can help you make money flexibly.You decide how mu

Start Delivering with Uber Eats.Delivering with Uber Eats offers a flexible way of making money.It is a great alternative to traditional part-time delivery jobs or other part-time gigs, temp jobs or seasonal work.See how delivering with the Uber app can help you make money flexibly.You decide how mu

Start Delivering with Uber Eats.Delivering with Uber Eats offers a flexible way of making money.It is a great alternative to traditional part-time delivery jobs or other part-time gigs, temp jobs or seasonal work.See how delivering with the Uber app can help you make money flexibly.You decide how mu

Driving with Uber offers a flexible earning opportunity.It’s a great alternative to full-time driver jobs, part-time driver jobs or other part-time gigs, temp jobs or seasonal employment.Or maybe you’re already using other rideshare apps and want to supplement your income by becoming a driver us

Driving with Uber offers a flexible earning opportunity.It’s a great alternative to full-time driver jobs, part-time driver jobs or other part-time gigs, temp jobs or seasonal employment.Or maybe you’re already using other rideshare apps and want to supplement your income by becoming a driver us