Defend what matters. Build your career doing it.
We don't have any open roles right now, but we always want to hear from talented people who want to protect organisations from real threats. Join our talent pool and we'll be in touch when the right role opens.
Current vacancies
No vacancies at the moment
When we open a role it will appear here. Join the talent pool now so we already have your details and can contact you when something that fits your skills comes up.
Where you could work
Pick an area to see what the team does day to day, and the skills and certifications that help.
Offensive Security
Our testers think like attackers so clients can fix weaknesses before someone else finds them. The work spans CREST penetration testing across networks, web applications, APIs, cloud and OT, through to red and purple team engagements.
The work
- Infrastructure, web application and API penetration tests
- Cloud and OT/SCADA security testing
- Red team and purple team exercises
- Clear, prioritised reporting for technical and board audiences
Skills and certifications that help
- CREST CPSA, CRT and CCT
- OSCP and OSWE
- CHECK Team Member or Team Leader
- Burp Suite Certified Practitioner
Detection & Response
Our analysts watch client environments around the clock and act when something looks wrong. When an incident happens, the response team contains it, investigates it and helps the business recover.
The work
- 24x7x365 monitoring, triage and threat hunting
- Endpoint and SIEM detection engineering
- Incident response, forensics and ransomware recovery
- Post-incident reviews and lessons learned
Skills and certifications that help
- GIAC GCIH, GCIA or GCFA
- Blue Team Level 1 or 2
- Microsoft SC-200
- CREST Practitioner Intrusion Analyst
Threat Intelligence
Our intelligence team tracks the actors, tools and campaigns targeting our clients, and turns that into guidance security teams can act on. It is the work behind pages like Threat Watch.
The work
- Tracking threat actors, campaigns and exploited vulnerabilities
- Dark web and brand monitoring
- Intelligence-led scoping for testing
- Briefings for SOC teams and leadership
Skills and certifications that help
- GIAC GCTI
- CREST CRTIA
- Strong research and writing skills
- Familiarity with MITRE ATT&CK, STIX and TAXII
Governance, Risk & Compliance
Our consultants help organisations build security that stands up to auditors, regulators and attackers alike, across ISO standards, GDPR, NIS2, DORA, Cyber Essentials and the NIST CSF.
The work
- ISO 27001 implementation and internal audits
- Risk and maturity assessments
- Policy, process and third-party risk
- Virtual CISO support for leadership teams
Skills and certifications that help
- ISO 27001 Lead Implementer or Lead Auditor
- CISSP, CISM or CRISC
- IAPP CIPP/E
- Cyber Essentials assessor
Cloud & DevSecOps
Our cloud specialists help teams build and run securely on AWS, Azure and Google Cloud, and bring security into the development pipeline without slowing engineers down.
The work
- Cloud posture reviews and hardening
- Zero trust and identity architecture
- Pipeline, code and dependency security
- Advising engineering teams on secure design
Skills and certifications that help
- AWS Certified Security Specialty
- Microsoft AZ-500
- CCSP
- Certified Kubernetes Security Specialist
Commercial & Client Success
Not every role at Cybergen is hands on keyboard. Our commercial, client success and marketing people help organisations understand what they need and make sure they get it.
The work
- Account management and client success
- Pre-sales and solution scoping
- Partner and vendor relationships
- Marketing, content and events
Skills and certifications that help
- Curiosity about cyber security
- Clear, honest communication
- Experience in B2B technology or services
- No security certifications needed
What working at Cybergen looks like
Intelligence-led
Decisions start with what attackers are really doing, not what a checklist says.
Vendor-neutral
We recommend what is right for the client, even when that means less work for us.
Plain English
Findings only matter if people understand them. We write for the reader, not to impress.
Always learning
Threats change weekly. Sharing what we learn is part of the job, not an extra.
From application to offer
A simple, respectful process with no unnecessary hoops.
Start with your CV- 1
Send your details
Join the talent pool with your CV and a short note about what you are looking for.
- 2
We review
Our team reads your application against the work we have coming up.
- 3
Introductory call
When a role fits, we arrange an informal chat about you, the role and how we work.
- 4
Technical conversation
A practical discussion with the team you would join. No trick questions.
- 5
Offer
If it is a match on both sides, we make an offer and plan your first weeks together.
Join the Cybergen talent pool
Send us your CV and tell us what you are looking for. We'll get in touch when a role that fits opens up.
- Takes about two minutes
- Share your CV and LinkedIn profile
- Your details are only used for recruitment
You're in the talent pool
Thanks for your interest in Cybergen. We'll be in touch when a role that fits your skills opens up.
Frequently asked questions
There are no open roles. Should I still apply?
Yes. Joining the talent pool means we already know about you when a role opens, so you can hear about it early.
What happens after I join the talent pool?
Our team reviews your details and gets in touch when a role that matches your skills and interests comes up. If nothing suitable is open yet, we keep your application on file.
Can I apply for more than one area?
Choose the area closest to what you want to do and mention any others in your message. Plenty of our work crosses teams.
Do I need security certifications to apply?
Not for every role. The certifications listed for each team are ones that help, not a checklist. For commercial and client success roles, no security certifications are needed.
How is my data used?
Your details are stored securely in our CRM and used only to contact you about opportunities at Cybergen, in line with our Privacy Policy. To have them removed at any time, email [email protected].