Microsoft-centric managed XDR, SOC and security consulting services
CyberOne is a London-based security services firm built around the Microsoft stack: Defender XDR, Sentinel, Entra, Purview and Copilot for Security, with KQL, Terraform and Azure Arc pointing to engineering-driven SOC delivery. Splunk, Rapid7, LogRhythm and McAfee in the stack suggest it also migrates clients off legacy SIEM and endpoint tools. Hiring is accelerating, senior-weighted and security-led, split between the UK and the Philippines, consistent with expanding 24x7 SOC coverage.
CyberOne provides managed detection and response, security consulting and professional services centred on Microsoft security technologies. Its offering spans maturity assessment through the AssureMAP framework and ongoing managed services covering identity, endpoint, XDR and data security. The company runs round-the-clock security operations and holds NCSC and CREST accreditations. Founded in 2005 and headquartered in London, it employs 51–200 people and is privately held. Delivery work includes Azure migrations, Microsoft 365 transformations and compliance policy implementation for client organisations.
CyberOne works mainly with Microsoft Defender XDR, Microsoft Sentinel, Entra, Purview, Intune and Copilot for Security, alongside KQL, Azure, Terraform, Azure Kubernetes Service, Zscaler, Splunk and Rapid7.
Yes. Hiring is accelerating and led by security roles, with engineering, operations, consulting and support behind it. The mix leans toward senior candidates, with openings in the United Kingdom and the Philippines.
Current work includes Microsoft Defender and Sentinel implementations, SOC automation and onboarding, Azure migrations, Microsoft 365 transformation programmes and Microsoft Purview DLP and compliance policy rollouts.
Other companies in the same industry, closest in size
CyberOne's technology stack, projects, and hiring signals are inferred from public hiring and company data — career pages, public listings, and company web presence — then clustered and de-duplicated. Figures are estimates that refresh over time. Read our full methodology →
This is not an official vendor or customer list. It is a technology-adoption signal inferred from public data, intended for B2B research.