171 jobs for “Analyst”
CrowdStrike United Kingdom
Serve as technical lead on front-page incident response engagements for Fortune 100 organisations, conducting host and network forensics across Windows, Mac and Linux and hunting adversaries in large data sets. Work under outside counsel on intrusion investigations and present findings to executives, regulators and legal teams.
CrowdStrike Ireland
Security researcher role on CrowdStrike Intelligence's Advanced Research Team, developing automated solutions for large-scale data collection, running Internet-wide scans, operating and extending honeypots, and performing vulnerability research. Involves reverse engineering, patch analysis, and publishing research on the company blog or at conferences, alongside ad-hoc technical support for other intelligence teams.
Immersive United Kingdom
Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.
Hays Technology Sheffield £450 – £500 pd
Owns end-to-end solution design across cybersecurity initiatives, producing architecture documents, high-level designs, patterns, decision records and risk assessments. Provides technical leadership and presents designs to Design Authorities and senior stakeholders, with deep IAM and HashiCorp Vault expertise. Requires three days per week onsite in Sheffield.
Sophos United Kingdom
Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.
eFinancialCareers London
Own and lead the end-to-end Threat Intelligence Platform, driving strategic design, delivery and development to maximise value across a global cyber defense organisation. Build API integrations and connectors across commercial intelligence sources, govern intelligence standards such as source reliability, confidence scoring and TLP handling, and mentor junior analysts while producing intelligence for technical and executive audiences.
Entrust United States - Field
Defines and governs a four-plane reference architecture (Identity, Authority, Execution, Assurance) for an agentic trust layer, owning specs like the Agent Passport, Permission Slip framework, Evidence Ledger and Policy Engine. Chairs architecture and boundary review boards, sets dependency contracts across product lines, and represents the company in standards bodies such as FIDO, OpenID and IETF.
Sophos United Kingdom
Owns the strategy, roadmap and execution for the Endpoint Windows Platform, translating OS and security requirements into product priorities. Partners closely with Engineering, Microsoft and cross-portfolio teams on agent architecture, performance and platform change management, and supports go-to-market enablement.
Harnham - Data and Analytics Recruitment Newcastle upon Tyne £73,000 – £84,000 pa
Own and operate a business-critical enterprise data platform on Microsoft Azure, acting as technical lead for architecture, scalability, governance and operational excellence. Work with Infrastructure, Security and Architecture teams on CI/CD, automation, monitoring and Infrastructure-as-Code, supporting production and incident management while enabling Data Engineers and shaping platform strategy.
Michael Page Liverpool £60,000 – £65,000 pa
Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.
Barclays London
Owns the optimisation and strategy of transaction monitoring controls across Barclays UK and International, tuning surveillance systems and ensuring governance and escalation procedures are followed. Uses SQL, Scala, Spark and Python for data exploration and visualisation, collaborating with technical and non-technical stakeholders on financial crime risk.
Experis United Kingdom
Supports the delivery of security architecture and cyber security services across Defence and Government projects, including security assessments, risk analysis, threat identification and security documentation. Works alongside experienced Security Architects and technical specialists on areas such as Identity & Access Management, Security Testing, Privacy and Cloud Security, and requires SC Clearance.
Amazon London
Builds AI/ML-driven security automation systems that detect, analyse and respond to threats at Amazon scale, integrating automated detection into the company's security infrastructure. Works alongside security engineers and scientists on proactive, offensive and defensive tooling, researching and prototyping new approaches. Distinct for its focus on autonomous security across one of the world's largest tech ecosystems.
TRIA Sheffield £500 – £600 pd
Lead the response to high-severity IT incidents across network, infrastructure, cloud and security environments, coordinating technical teams, suppliers and stakeholders to restore services within agreed targets. The role involves chairing incident and crisis calls, post-incident reviews, root cause analysis, ITIL processes, disaster recovery and business continuity planning, plus executive reporting and on-call duties.
DCV Technologies Royal Leamington Spa £550 – £650 pd
Hands-on contract role owning the end-to-end detection engineering lifecycle, translating threat intelligence, hunting findings and adversary techniques into effective detection rules. Builds behavioural analytics and detection content across endpoint, identity, cloud, network and email telemetry using KQL, SPL, Sigma, Python and PowerShell, with tuning, purple teaming and Detection-as-Code work alongside SOC, IR and Red Team specialists.
