331 jobs for “Cyber Security Analyst”
Darktrace London
Joins R&D teams to build and enhance cybersecurity products, providing technical direction across rapid prototyping and structured platform development. Involves advancing malware-defence methodology, mentoring engineers in Python, JavaScript, Rust and C++, and working with Docker, cloud environments and CI/CD pipelines. Hybrid role with two days a week in the Cambridge office.
Darktrace Cambridge
Conducts independent and collaborative research into large language models, statistical methods and classical machine learning, prototyping ideas and implementing models into the wider software stack. Produces latency- and memory-optimised solutions for deployment on edge devices, working closely with software engineers and security analysts.
airbus Bristol
Owns the long-term data protection strategy and technical design of resilient disaster recovery architectures across hybrid, multi-cloud, container and on-premise environments. Acts as the highest escalation point for complex recovery failures, evaluating immutable and air-gapped storage while automating backup and orchestration processes.
airbus Hamburg, Germany
Owns the long-term data protection strategy and technical design of resilient disaster recovery architectures across hybrid, multi-cloud, container and on-premise environments. Acts as the top escalation point for complex recovery failures, evaluating immutable and air-gapped storage while automating backup and orchestration processes.
CrowdStrike Germany
Internship on CrowdStrike's Technical Analysis Cell, researching nation-state and criminal intrusions through reverse engineering of malware and tooling. The role involves building automation for malware analysis, creating host- and network-based detection signatures, and producing finished threat intelligence reporting for customers.
Barclays Knutsford
A 10-week summer internship in Barclays' Chief Security Office, working on real projects across cyber and security. Interns collaborate with cross-functional teams on risk reduction, threat intelligence and secure engineering, helping protect the bank, its customers and colleagues while building technical skills.
Cloudflare London
Acts as primary technical responder for premium enterprise customers, autonomously investigating complex threat telemetry and handling live incident response for volumetric DDoS and application-layer attacks. Implements mitigation across OSI Layers 3, 4 and 7 using Cloudflare's security suite, performs packet and traffic flow analysis, and advises customers during active incidents. Requires 24x7 rotating shifts.
Twinstream Limited Bristol £50,000 – £60,000 pa
Hands-on senior role taking operational ownership of a corporate IT estate, managing cloud services, Microsoft 365, Entra ID, networking, endpoint security and automation. Involves leading complex incident resolution, patching, backups and business continuity while mentoring colleagues and working with suppliers alongside the IT Technical Lead.
Square One Resources Coventry £455 pm
Designs, implements and maintains enterprise network security across on-prem, cloud and hybrid environments, leading Zero Trust and segmentation initiatives. Hands-on with enterprise firewalls, Azure/AWS network security, VPNs and secure remote access, while collaborating with SOC teams on detection and response. Contract role with three days per week on-site in Coventry.
NCC Group Remote
Designs, builds and maintains security automations that detect, investigate and respond to cyber threats, working closely with Incident Response to identify improvements and create new playbooks. Delivers scalable automation within the Splunk ecosystem, covering advanced analytics, scripting, new use cases, validation of automation behaviour and documentation, plus mentoring junior engineers.
CrowdStrike London
Designs, implements and operates a global multi-vendor, multi-cloud and hybrid data center network, covering subnetting, VPC peering, direct connects and hub-spoke topologies. Builds IaC and automation tooling (Ansible, Terraform, Python, Go) in CI/CD pipelines and handles complex production troubleshooting plus on-call rotations.
Sophos United Kingdom
Hands-on engineering role managing a modern identity stack across the full lifecycle, from passwordless authentication and adaptive access controls to identity governance and non-human identities. You will configure and operate Microsoft Entra ID, Saviynt and Active Directory directly, integrate applications via SAML, OIDC, OAuth and SCIM, and join an out-of-hours support rota.
eFinancialCareers London £105,000 pa
Plan and deliver penetration-testing engagements across IT and OT estates, assessing industrial control systems, operational networks and connected infrastructure, plus cloud, mobile, network, web and API environments. Produce technical and executive reports, present remediation advice to clients, and support internal tooling, methodologies and CREST-accredited training. Work spans energy, wind, nuclear, CNI and manufacturing programmes.
Cloudflare London
Lead the Threat Application Services team within Cloudforce One, owning the Threat Events platform, external Threat Intel APIs, and backend systems that feed IOCs into WAF and Gateway for automated mitigation. Set architectural direction and operational excellence for distributed, high-latency-sensitive services, while hiring and mentoring engineers building agentic threat intelligence tools.
Entrust London
Entry-level analyst role supporting demand generation and go-to-market strategy, tracking campaign performance against pipeline and conversion targets, monitoring funnel metrics from MQL to Closed Won, and analysing win/loss and retention data. Works cross-functionally with Marketing, Sales, SDRs and Customer Success, using Excel/Google Sheets and CRM or BI tools to turn data into actionable pipeline insights.
