200 jobs for “Cyber Security Analyst”
Darktrace London
Hands-on technical leadership role maintaining and evolving the Workday integration ecosystem across HR and Finance, reporting to the Digital Transformation Lead. You will design, build and support integrations using Workday Studio, EIB, web services and APIs, govern the Workday security model, and develop reporting and analytics. The role combines technical delivery with architecture, security, compliance and service management responsibilities.
Darktrace Cambridge
Hands-on technical leadership role maintaining and evolving the Workday integration ecosystem across HR and Finance, reporting to the Digital Transformation Lead. You will design, build and support integrations using Workday Studio, EIB, web services and APIs, govern the Workday security model, and develop reporting and analytics, while balancing project delivery with operational support.
CrowdStrike Romania
Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats. Builds dashboards, reports and data pipelines using SQL, Python, Logscale and graph databases, partnering with product and data engineering teams to turn raw security data into actionable insights and KPIs.
CrowdStrike Spain
Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats, and builds dashboards and reporting workflows using SQL, Python and Logscale. Works cross-functionally with product and data engineering teams to turn raw security data into actionable insights and KPIs for the Office of Adversary Strategy.
Palo Alto Networks London
Lead strategic advisor for enterprise customers modernising their Security Operations Centres through XSIAM deployment, covering log ingestion, detection engineering and automation. The role combines executive-level consulting with hands-on SIEM/SOAR/EDR technical work, mentoring professional services teams and feeding field insights back to Product and R&D. Requires security clearance eligibility and up to 30% travel.
Palo Alto Networks United Kingdom
Deliver white-glove onboarding and ongoing technical guidance for Managed XSIAM customers, analysing security data to improve detection coverage, alert quality and tenant hygiene. Lead customer touchpoints and security reviews while partnering with Unit 42 SOC engineering, Product and MDR teams to build automation workflows and scalable service frameworks.
Netcraft London
Join the Novel Classification team to build and operate machine learning systems that detect phishing sites and online scams at scale. You'll train, evaluate and serve classifiers on GPU-backed Kubernetes, run live experiments on precision and recall, and deploy LLM inference and computer vision models into production.
Nexithon Ltd Guildford
Owns cybersecurity and information assurance workstreams, including certification assurance for ISO 27001, CE+ and DCC, Secure by Design reviews of infrastructure, cloud and application designs, and coordination of ITHCs, penetration testing and vulnerability remediation. Also manages supplier security compliance, Security Aspect Letters, spacecraft space licensing security, project security budgets and incident response duties within a defence programme context.
Mimecast London £44,000 – £66,000 pa
Acts as the trusted technical advisor for a portfolio of mid-market accounts, working in a three-person pod with an Account Manager and Renewals Manager. Owns platform adoption, configuration health and value scoring across email security, HRM and Incydr products, and packages proof-of-value and business reviews for executive audiences. Also leads churn mitigation and identifies expansion signals ahead of renewal.
Planet Recruitment Newbury £60,000 – £65,000 pa
Senior hands-on role acting as technical authority for Professional Services and Field Engineering, leading discovery, design, implementation and migration of complex client solutions across infrastructure, cloud, networking, security and modern workplace technologies. Combines solution architecture and documentation with personal delivery on multiple projects, plus technical leadership through design reviews and escalation ownership, without formal line management.
Identify Solutions Swansea £45,000 – £55,000 pa
Hands-on role taking technical ownership of cyber security across a predominantly Microsoft environment, working with an infrastructure team and external SOC partners. Day to day involves assessing the estate for security gaps, hardening systems, operating Defender/XDR, EDR and Sentinel, managing Entra ID access controls, and responding to incidents and vulnerabilities.
Yolk Recruitment Cardiff £62,000 – £72,000 pa
Hands-on security engineering role focused on building and improving controls across a Microsoft-centric estate, including Defender, Sentinel, Azure and Entra ID. Involves vulnerability management, data protection with Purview, incident response support and embedding security into projects, with influence over strategy rather than pure SOC operations.
Immersive United Kingdom
Designs, writes and peer-reviews hands-on GRC labs, challenges and gamified learning content on the Immersive One platform, researching standards such as NIST, ISO 27001 and MITRE ATLAS/D3FEND to build realistic simulations of incidents in regulated sectors. Acts as GRC subject matter expert for engineering and product teams, embedding security and privacy by design into the SDLC.
Yolk Recruitment Cardiff £62,000 – £72,000 pa
Hands-on security engineering role within an established Cyber Resilience function, strengthening security operations across a complex technology estate. Day to day covers Microsoft Defender and Sentinel, Azure and Entra ID security, vulnerability management, Purview data protection and threat detection, plus security input into projects and architecture. Also acts as a security SME to technical and non-technical stakeholders.
Ashdown Group Northampton £65,000 – £80,000 pa
Standalone security role maintaining and enhancing controls across identity, endpoint, cloud and application in enterprise environments. Hands-on work spans IAM, MFA, privileged access, zero-trust, Windows endpoint management, EDR, cloud security monitoring, vulnerability assessment and incident investigation, with frameworks such as ISO 27001 or NIST CSF. Hybrid, around three days a week in an office on the outskirts of Northampton.
