Senior Security Analyst

Surrey County Council
Reigate, RH2 0AA, United Kingdom
Last month
Applications closed

Related Jobs

View all jobs

Principal Professional Services Engineer

Palo Alto Networks London, United Kingdom
Hybrid Clearance Required

SOC Technical Lead

Experis United Kingdom
£60,000 – £70,000 pa On-site

Senior SOC Analyst

Fuel Recruitment Farnborough, Hampshire, GU14 7JT, United Kingdom
£65,000 pa On-site Clearance Required

Senior SOC Analyst Level 2

Fynity Holtsmere End, Hertfordshire, United Kingdom
£50,000 – £58,000 pa On-site Clearance Required

Senior Internal SOC Analyst

Darktrace Cambridge, CB2 3BJ, United Kingdom

Senior Internal SOC Analyst

Darktrace London, UB8 1LQ, United Kingdom
Seniority
Senior
Posted
30 Mar 2026 (Last month)

This role has a starting salary of £53,713 per annum, for working 36 hours per week.

We are excited to be recruiting a Senior Security Analyst to join our fantastic team based at Woodhatch Place in Reigate. We offer a hybrid working model with a minimum of two office days per week.

Our Offer to You

26 days' holiday, rising to 28 days after 2 years' service and 31 days after 5 years' service (prorated for part time staff)

Option to buy up to 10 days of additional annual leave

A generous local government salary related pension

Up to 5 days of carer's leave and 2 paid volunteering days per year

Paternity, adoption and dependents leave

An Employee Assistance Programme (EAP) to support health and wellbeing

Learning and development hub where you can access a wealth of resources

Wellbeing and lifestyle discounts including gym, travel, and shopping

A chance to make a real difference to the lives of our residents. About The Role

As a Senior Security Analyst, you will play a central role in strengthening Surrey County Council's cyber resilience. Your day-to-day work will include proactive security monitoring across our hybrid cloud and on premises environment, triaging and investigating alerts, and supporting coordinated incident response activities. You will operate our vulnerability management processes, translate threat intelligence into actionable defences, and contribute to the improvement of detection content and security controls. You will also work closely with IT colleagues and suppliers to address risks, gather evidence for audits, and prepare clear reporting on security posture and emerging trends.

This role does not include direct line management responsibilities, but you will regularly provide specialist guidance, coaching, and support to colleagues across IT&D and partner teams.

Over the next 12 to 18 months, you will contribute to several high impact initiatives including:

Establishing a more mature, risk based vulnerability management lifecycle and reducing exposure windows across critical systems

Enhancing incident response readiness through improved playbooks, scenario testing, and lessons learned processes

Uplifting monitoring coverage and the effectiveness of SIEM/EDR/NDR tooling, including tuning and detection improvements

Strengthening supplier assurance processes, especially for cloud and SaaS services

Supporting the development of updated cyber security policies, standards and operating proceduresThis is a pivotal role for a motivated cyber professional who wants to make a measurable difference. You will directly influence Surrey County Council's operational security posture and help reduce risk across services that support residents, communities, and frontline operations. Your insights and expertise will shape decision making, improve control maturity, and contribute to a safer, more resilient public service environment.

Your Application

In order to be considered for shortlisting, your application will clearly evidence the following skills and align withour behaviour:

Strong experience in cyber security operations, including alert triage, investigation, and incident response

Demonstrable capability in vulnerability management and translating technical risk into meaningful actions

Ability to analyse complex information and present clear, concise reports and recommendations

Proven ability to work collaboratively with technical and non technical stakeholders

Commitment to continuous professional development and staying current with emerging threats

High-level proficiency with security tooling (SIEM, EDR, cloud security tools) and modern IT environments

Alignment with our values of accountability, teamwork, and inclusive service deliveryTo apply, we request that you submit a CV and you will be asked the following 4 questions:

Give an example of how you have helped build a positive security culture across teams.

Describe a time when you led or contributed to triage, investigation, or response during a cyber security incident. What actions did you take, and what was the outcome?

Give an example of when you identified a significant technical vulnerability or risk. How did you communicate it to stakeholders, and what actions were taken as a result?

Tell us about a situation where you analysed complex security information or data and produced a report or recommendation. How did you ensure your findings were clear, concise, and actionable?

The job advert closes at 23:59 on 12/04/2026, with interviews planned to follow shortly thereafter.

Local Government Reorganisation (LGR)

Surrey County Council is undergoing Local Government Reorganisation, moving from a two-tier system to two new unitary councils in April 2027. If you are employed by Surrey on 1st April 2027, your role will transfer with current terms and conditions to one of the new organisations, supporting local devolution and greater powers for our communities.

Join our dynamic team and shape the future of local government. Make a lasting impact with innovative solutions and improved services for our community. Help us build a brighter future for our residents!

Our Commitment

We are a disability confident employer which means if you have shared a disability on your application form and have evidenced you meet the minimum criteria, we guarantee you an interview.

Your skills and experience truly matter to us. From application to your first day, we're committed to supporting you with any adjustments you need, we value inclusion and warmly welcome you to join and help build a workplace where everyone belongs

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Where to Advertise Cyber Security Jobs in the UK (2026 Guide)

Where to advertise cyber security jobs UK in 2026: the specialist boards, communities and channels that reach offensive, defensive and GRC security talent. The candidate pool is small, heavily vetted and in high demand across government, financial services, critical national infrastructure and the private sector simultaneously. Many of the strongest candidates hold active security clearances, are not actively job-searching through general platforms, and move primarily through specialist networks and trusted referrals. General job boards reach a broad audience but lack the specificity that security professionals expect. Specialist platforms, government-affiliated channels and cleared candidate networks each serve a different part of the market. This guide, published by CybersecurityJobs.tech, covers where to advertise cyber security roles in the UK in 2026, how the main platforms compare, what employers should expect to pay, and what the data says about hiring across different role types.

Cyber Security Jobs UK 2026: What to Expect Over the Next 3 Years

Cyber Security Jobs UK 2026: roles, salaries and the threat intelligence, cloud security and zero-trust hiring trends shaping UK cyber careers. Cyber security is one of the few sectors where demand for talent has never once dipped. Every major technological shift of the past decade — cloud migration, remote working, AI adoption, the proliferation of connected devices — has expanded the attack surface that security professionals are expected to defend. And every expansion of that attack surface has generated more jobs. But the cyber security jobs market of 2026 is not simply a larger version of what it was three years ago. It is a structurally different market. The threats have evolved, the technologies used to combat them have changed, the regulatory environment has tightened considerably, and the roles being created reflect all of that. A job seeker who understands only the cyber security landscape of 2023 is already working with an outdated map. The candidates who will thrive over the next three years are those who understand where the sector is heading — which specialisms are attracting the most investment, which technologies are reshaping defensive and offensive security practice, and how the definition of a cyber security professional is broadening well beyond the traditional image of a network defender in a SOC. This article breaks down what the UK cyber security jobs market is likely to look like through to 2028 — covering the titles emerging right now, the technologies driving employer demand, the skills that will matter most, and how to position your career ahead of the curve.

Penetration Tester Jobs in the UK: What Employers Actually Want in 2026

Penetration Tester Jobs UK 2026: the skills, certifications (OSCP, CREST, CEH) and experience UK employers actually want from ethical hackers this year. The demand for skilled professionals in cyber security has never been higher, and penetration testers sit at the very heart of this rapidly evolving industry. As organisations across the UK continue to digitise their operations, protect sensitive data, and defend against increasingly sophisticated threats, the need for ethical hackers has grown dramatically. If you are considering a career in this field—or looking to advance within it—it is essential to understand what employers are really looking for in 2026. This guide breaks down the current expectations, required skills, certifications, and practical experience that can help you stand out in a competitive job market.