Report an Incident Become a Partner Careers Contact
Book a Demo
Careers

Run the SOC,
and build what it runs on.

We run three security operations centres around the clock and build the platform that runs on them. Both of those are done by the same company, in the same building, which is rarer than it sounds.

Wizard Cyber · where you would landSince 2019
SOCSeveral centres, each staffed in its own rightmanned 24/7
ALSOUK, USA, Pakistanpresence
SHIFTAI developers on shift, every hourevery SOC
MSFTSolutions Partner for Security4 specialisms
BUILDPlatform written in-housemulti-agent
OPENRoles advertised right now0
Who we are

A security company
that builds its own tooling.

Wizard Cyber is a multinational cyber security provider and a Microsoft Solutions Partner for Security. We have run Microsoft Sentinel in production for customers since 2019.

Most of this industry splits into two kinds of employer: the operation that buys its tools, and the vendor that builds tools it never has to run. We do both, and the people doing them sit together. The procedures our platform executes were written by our own analysts, and when an investigation needs tooling that does not exist for a customer estate, someone here writes it.

That is why AI developers are on shift in every SOC at every hour, alongside the senior analysts, the incident responders and the L3 analysts. It is an unusual way to staff a security operations centre and it is the thing most worth knowing about working here.

The analysts wrote the method. The engineers made it run. Neither team hands work over a wall.

Why us

What you would
actually get out of it.

Said plainly, without the stock photography.

Real Microsoft depth

A Solutions Partner for Security with all four security specialisms, and Sentinel estates in production since 2019. Relevant Microsoft experience is valued when you arrive, and you will gain more of it than you would almost anywhere else.

Progression, because we are growing

A fast-growing organisation has roles that did not exist last year. That is the honest reason progression is available here, rather than a promise that everyone moves up on a schedule.

Training that is part of the job

The field changes faster than any curriculum. Keeping current is treated as work rather than as something you do in your own time.

A fair place to work

A working environment that is fair and inclusive to everyone, regardless of who you are, with competitive salaries and benefits.

Current vacancies

No open roles
right now.

We would rather say that than leave a stale list up. We are always glad to hear from people who are good at this, so send a CV anyway and we will keep it on file for when something opens.

Send a speculative application

Join our team

Three internships,
and what they actually involve.

Based at our Amman office. Each one is hands-on work alongside the team that does it, not a shadowing exercise.

Administration

Organisational and office management skills through general office duties and the software that runs them: Word, Excel, PowerPoint and research.

Marketing

Research, writing and design, with exposure to marketing strategy through market research, blog and social content, campaign administration and basic web design.

Development

Software development and data analysis alongside experienced developers: front-end and back-end web work, databases, interactive data visualisation, task automation, code review and testing.

Before you apply

The prerequisites,
and the terms.

All of it up front, because finding out at the interview wastes your time more than ours.

Education
A degree, completed or in your final year, in Information Technology, Cyber Security, Business Administration or English.
Location
Commutable access to our office at 7th Circle, Amman. These are in-person internships.
The interview
Includes a practical computer literacy test. It is a test of what you can do rather than what you can describe.
Pay
Internships are unpaid. We contribute towards travel and subsistence. We would rather you knew that on this page than at the end of a process.

Training AcademySeparately from these, the Wizard Cyber Training Academy teaches cyber security to people starting in the field. If a security internship is what you are after rather than one of the three above, ask about the Academy when you write to us.

Where we work

Multiple SOCs,
and offices around them.

Each security operations centre is staffed around the clock in its own right. It is deliberately not a follow-the-sun model, so no shift exists purely to hand work to the next region.

United Kingdom

United States

Jordan

Philippines

Qatar

Kuwait

Microsoft Digital Innovation Centre

Pakistan

Questions

Working here, answered.

Are you hiring at the moment?

Not right now. There are no open roles, and this page says so rather than leaving a stale list up. Speculative applications are still welcome and are kept on file, so send a CV with a note about what you are good at.

How do I apply?

Email your CV with the role or internship in the subject line. There is no form and no portal to fight with. If you are applying speculatively, tell us what kind of work you want rather than only what you have done.

Are the internships paid?

No. The internships are unpaid, with a contribution towards travel and subsistence. That is on this page rather than at the end of the process because it is the first thing you need in order to decide whether to apply.

Where are the internships based?

At our office at 7th Circle, Amman, and they are in person, so you need commutable access to it. The interview includes a practical computer literacy test.

Do I need Microsoft experience?

It helps and it is valued — we are a Microsoft Solutions Partner for Security and have run Sentinel in production since 2019 — but it is not a gate on every role. What matters more is whether you can work through a problem to an answer you can evidence.

Where would I be working?

We hire across all seven of our locations — the United Kingdom, the United States, Jordan, the Philippines, Qatar, Kuwait and Pakistan — and the roles open at any time are listed above. Every SOC is staffed around the clock in its own right rather than handing over to the next region.

How to apply

Send a CV
and tell us what you want to do.

Email it across with the role or the internship in the subject line. If nothing is open that fits, say what you are good at and we will keep it on file.

We read everything that arrives. If a role opens that matches, someone will come back to you.