129 jobs for “Analyst”
CrowdStrike United Kingdom
Monitors and performs in-depth analysis of security alerts across Windows, Mac and Linux, handling incidents end to end including malware analysis and remote remediation. Acts as technical escalation point and mentor for junior analysts while improving detection and triage processes in a virtual security operations centre.
CrowdStrike Ireland
Security researcher role on CrowdStrike Intelligence's Advanced Research Team, developing automated solutions for large-scale data collection, running Internet-wide scans, operating and extending honeypots, and performing vulnerability research. Involves reverse engineering, patch analysis, and publishing research on the company blog or at conferences, alongside ad-hoc technical support for other intelligence teams.
GCS London £600 – £700 pd
Lead a risk-based technical assurance programme across a global enterprise, independently assessing security control effectiveness in infrastructure, cloud, identity, applications and incident response. Manage and mentor a small team of Technical Assurance Analysts while producing board-level reporting and driving continuous controls monitoring and automated assurance.
Darktrace Cambridge
Lead the strategy, roadmap and execution of Darktrace's interactive demo estate, shaping how products are showcased to prospects, customers and internal teams. Manage a small team of technical content specialists while partnering with Product, Marketing, Enablement and Sales Engineering to evolve demos from on-rails walkthroughs into live sandbox environments.
Immersive United Kingdom
Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.
Sophos United Kingdom
Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.
Entrust United States - Field
Defines and governs a four-plane reference architecture (Identity, Authority, Execution, Assurance) for an agentic trust layer, owning specs like the Agent Passport, Permission Slip framework, Evidence Ledger and Policy Engine. Chairs architecture and boundary review boards, sets dependency contracts across product lines, and represents the company in standards bodies such as FIDO, OpenID and IETF.
Sophos United Kingdom
Owns the strategy, roadmap and execution for the Endpoint Windows Platform, translating OS and security requirements into product priorities. Partners closely with Engineering, Microsoft and cross-portfolio teams on agent architecture, performance and platform change management, and supports go-to-market enablement.
Harnham - Data and Analytics Recruitment Newcastle upon Tyne £73,000 – £84,000 pa
Own and operate a business-critical enterprise data platform on Microsoft Azure, acting as technical lead for architecture, scalability, governance and operational excellence. Work with Infrastructure, Security and Architecture teams on CI/CD, automation, monitoring and Infrastructure-as-Code, supporting production and incident management while enabling Data Engineers and shaping platform strategy.
Michael Page Liverpool £60,000 – £65,000 pa
Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.
Barclays London
Owns the optimisation and strategy of transaction monitoring controls across Barclays UK and International, tuning surveillance systems and ensuring governance and escalation procedures are followed. Uses SQL, Scala, Spark and Python for data exploration and visualisation, collaborating with technical and non-technical stakeholders on financial crime risk.
Experis United Kingdom
Supports the delivery of security architecture and cyber security services across Defence and Government projects, including security assessments, risk analysis, threat identification and security documentation. Works alongside experienced Security Architects and technical specialists on areas such as Identity & Access Management, Security Testing, Privacy and Cloud Security, and requires SC Clearance.
Amazon London
Builds AI/ML-driven security automation systems that detect, analyse and respond to threats at Amazon scale, integrating automated detection into the company's security infrastructure. Works alongside security engineers and scientists on proactive, offensive and defensive tooling, researching and prototyping new approaches. Distinct for its focus on autonomous security across one of the world's largest tech ecosystems.
TRIA Sheffield £500 – £600 pd
Lead the response to high-severity IT incidents across network, infrastructure, cloud and security environments, coordinating technical teams, suppliers and stakeholders to restore services within agreed targets. The role involves chairing incident and crisis calls, post-incident reviews, root cause analysis, ITIL processes, disaster recovery and business continuity planning, plus executive reporting and on-call duties.
DCV Technologies Royal Leamington Spa £550 – £650 pd
Hands-on contract role owning the end-to-end detection engineering lifecycle, translating threat intelligence, hunting findings and adversary techniques into effective detection rules. Builds behavioural analytics and detection content across endpoint, identity, cloud, network and email telemetry using KQL, SPL, Sigma, Python and PowerShell, with tuning, purple teaming and Detection-as-Code work alongside SOC, IR and Red Team specialists.
