Top Cyber Security Jobs in Bristol

Lead Security Engineer responsible for directing security engineering and testing across platforms and services, defining testing methodology and tools, performing penetration testing and secure code assessment, embedding security in CI/CD pipelines, threat modelling, and mentoring junior engineers while liaising with stakeholders and customers. Role requires defence experience and an active security clearance.

Lead secure design and review of cloud platforms and services, advise Agile teams on security best practices, test software/infrastructure security, mentor and manage staff, and ensure compliance with standards and regulations across public, healthcare, defence, and commercial projects.

Lead presales, GTM and demand-generation for Cyber & AI Security. Own proposals and pipeline, coordinate architects and engineers, manage partner (Microsoft) engagement, convert delivery into case studies, and feed market signals into Product and Services.

Perform protocol-focused security research to prevent vulnerabilities on Ethereum mainnet. Tasks include AI-assisted analysis, fuzzing, manual review, reviewing hardforks and spec changes, improving security tooling and automation, coordinating disclosures, and supporting audits and audit competitions while collaborating with devops, specifications authors, and client implementers.

Lead research and advisory on application security for enterprise applications (ERP/CRM). Produce thought leadership, client-facing insights, presentations, market analysis, and support sales. Mentor analysts, drive research agenda, improve processes, and advise CIOs on security strategy, vendor evaluation, metrics, and vulnerability testing across major vendors (SAP, Salesforce, Workday, Oracle).

Lead research and thought leadership on threat and exposure management. Produce high-value insights, analyze market trends, advise clients, support sales, present at events, mentor analysts, and improve research processes. Engage clients virtually and in person, delivering actionable recommendations and peer-reviewed content while collaborating across global teams.

Produce thought-leading research and advisory on security operations, threat detection, incident response and automation. Engage clients via written research, inquiries, presentations, and events; mentor practitioners; support sales and media; and maintain expertise across SIEM, SOC ecosystems, cloud/on-prem security, and automation trends.

Lead security engineering for Hummingbird's infrastructure: harden AWS (Terraform), manage vulnerability and dependency tooling, develop threat intelligence, own incident response and disaster recovery, and shape long-term security posture while collaborating across a small senior engineering team.

Lead and improve ZODL security posture, manage incident response, coordinate external audits, advise staff on operational and personal security, prioritize mitigations, recruit security talent, and collaborate with engineering and research to secure Zcash software and protocols.

Lead design and implementation of security tooling, harden cloud and IT infrastructure, detect and respond to incidents using SIEM/EDR/SOAR, perform threat hunting, administer IAM and monitoring, contribute to policies and forensics, and partner with engineering on AI-related security risks and automation.

Own end-to-end enterprise sales in the Nordics/UK for a security platform that maps internet-exposed assets and runs automated AI penetration testing and DAST. Build territory plan and pipeline, engage technical buyers (CISOs, AppSec, Security Engineers), run demos and POCs with Sales Engineering, close complex six-figure ACV deals, and establish regional playbooks and partnerships.

Administer and maintain endpoint security platforms (Tanium & SentinelOne), deploy and manage Tanium modules, monitor performance, build dashboards and reports, perform audits and compliance checks, troubleshoot endpoint visibility/patching/deployments, integrate endpoint tools with IT/security systems, and provide training and support.

Own and scale Mozilla's web bug bounty program; triage and validate reports; drive end-to-end vulnerability remediation; perform targeted code reviews (JavaScript, Python); collaborate with SIRT on incidents; build tooling and KPIs to improve triage and program insight; engage external researchers and platforms.

Lead and mature Mozilla's ISMS and compliance programs (ISO 27001 and SOC 2 Type 2). Manage SoA, risk treatment, audits, policy lifecycle, gap remediation, internal audits, and cross-functional control ownership while advising security leadership on certification readiness and compliance strategy.

Lead technical response to security events across Twilio's global cloud infrastructure: triage, contain, remediate, document incidents, build runbooks and automations, drive post-incident improvements, participate in on-call rotation and RCAs, and collaborate with R&D to scale threat mitigation and incident response capabilities.

Senior technical leader driving pre-sales architecture and partner technical strategy for Qualys-based enterprise security solutions. Lead executive workshops, complex POCs, partner enablement, solution adoption roadmaps, and mentor junior architects while influencing product and partner-delivered managed services.

Lead and deliver complex OT security engagements across ICS and embedded industrial devices. Perform hands-on testing, threat modeling, and Purdue-model network reviews, translate technical findings to business risk, mentor junior consultants, contribute OT research and methodology, and support pre-sales. Travel to industrial sites (~30%).

Lead embedding security into software delivery by partnering with engineering teams to improve CI/CD security, triage and remediate findings, design secure-by-default patterns, automate security validation and evidence generation, facilitate threat modeling, and provide reusable templates and guidance to reduce risk at scale.

Lead and execute multi-vector red team campaigns including adversarial emulation, post-exploitation, social engineering, and physical testing. Develop tools, exploit vulnerabilities, produce comprehensive technical reports with remediation guidance, present findings to technical and non-technical stakeholders, mentor team members, support business development, and contribute research to the security community. Requires significant travel.

Embed security into software delivery by partnering with engineering teams to improve CI/CD pipeline security, triage and remediate findings, perform threat modeling, design secure-by-default patterns, build reusable templates and automation, support compliance and audit evidence, and communicate security standards and best practices.

Partner with sales and partners to design, demo, and operationalize Qualys-based security solutions. Lead architecture workshops, POCs, partner enablement, and complex integration guidance across vulnerability, patching, cloud/application security, compliance, and threat detection. Influence product roadmap and produce enablement content.

Own and mature the enterprise security program: manage identity/SSO, EDR, MDM, and SaaS security; secure cloud and developer stacks (GitHub, AWS, GCP); run vulnerability management, backup testing, and incident response; ensure endpoint lifecycle governance and maintain compliance with ISO 27001 and SOC 2.

Lead security engineering for an institutional product: threat modeling, secure architecture, appsec, AWS hardening, key management (HSMs/TEEs), supply-chain and reproducible builds, incident response, and compliance technical controls. Hands-on coding and infrastructure work alongside engineering.

Lead and manage all hotel security operations, direct security staff, implement emergency and crisis plans, liaise with law enforcement and authorities, oversee training (fire, first aid), manage risk analysis, investigations, and VIP/high-risk reporting.

Maintain visible security presence through foot patrols and CCTV monitoring, control access and key management, respond to emergencies, and support fire, life, and safety procedures while liaising with emergency services.