140 jobs for “Cyber Security Analyst”
CrowdStrike Romania
Investigates emerging malware and cyber threats across the full attack lifecycle, validating Falcon's detection coverage and distinguishing genuine threats from background noise. Works with Threat Research, Engineering, Data Science and Red Team to turn findings into product improvements, and supports external security testing programmes such as AV-Test and SE Labs.
Darktrace London
Customer-facing role combining technical depth and commercial awareness to drive adoption of AI cybersecurity products across DACH enterprise accounts. Partners with security and IT stakeholders on technical success plans, use-case activation, health monitoring and renewal readiness, working alongside Account Executives, Solutions Engineering and Renewals. Requires fluency in German and English.
TTP Cambridge
Consultants assess critical systems for cyber-physical vulnerabilities, combining deep hardware research, testing and reverse engineering with rapid prototyping of proof-of-concept demonstrators. Work spans niche defence and national security projects, interfacing with hardware via protocols like JTAG and UART and using test equipment such as oscilloscopes. The role is fully on-site in Cambridge labs within a flat, collaborative ~40-person consultancy.
CPS Group Cardiff £40,000 – £45,000 pa
Client-facing technical role in a Microsoft-focused security partner's Cyber Security Delivery Team, acting as a trusted point of contact for customers. Day to day involves tuning Defender and Entra controls, building KQL detections in Microsoft Sentinel, running phishing simulations and vulnerability scans, and supporting incident response and reporting.
Fawkes & Reece London London £50,000 – £55,000 pa
Owns information security policies, risk management, data protection and business continuity within a global Group IT function, working alongside senior security managers. Hands-on role embedding security into business processes, maintaining ISO 27001 documentation, running audits and DPIAs, and supporting incident response and awareness training.
Experis London £450 – £455 pd
Hands-on SOC and incident response role monitoring, triaging and investigating cyber security threats across macOS endpoints, Linux cloud workloads, microservices and containerised platforms. You will contain and remediate incidents, document findings and evidence, and contribute to detection rules and response playbooks while working closely with security and engineering teams.
TTP Cambridge
Consultants assess critical systems for vulnerabilities, building proof-of-concept demonstrators that combine software, hardware and user interaction. The role spans reverse engineering, low-level programming and rapid prototyping for UK defence and national security clients, working on-site alongside around 40 scientists and engineers.
Darktrace Cambridge
Backend engineering role focused primarily on TypeScript, prototyping and building new features for AI-driven cybersecurity products. You'll work with a cross-functional team of engineers, designers and strategists, using Docker and cloud environments, with opportunities to specialise across languages like Python, Rust and C++. Hybrid, requiring at least two days a week in the Cambridge office.
Akkodis West Midlands (Region) £65,000 – £75,000 pa
The role focuses on detection engineering and security automation within a CSOC, building SOAR playbooks and SIEM content to improve threat detection and response. Day to day involves analysing workflows, creating automations and enrichments across security tools, and managing an engineering backlog. It is primarily remote with occasional travel to the Midlands head office.
Avanti Malton £40,000 – £50,000 pa
Hands-on 3rd line infrastructure role in a large multi-site manufacturing business, with roughly 70% of time on projects such as data centre modernisation, SD-WAN and Cisco Meraki networking, server and virtualisation upgrades, and new site deployments. You'll also troubleshoot complex issues and maintain reliability across Windows Server, Azure, Microsoft 365, VMware, Hyper-V and backup tooling. Predominantly on-site in Malton with an infrequent on-call rota.
Reed Newport £62,000 – £71,000 pa
Owns end-to-end delivery and performance of critical IT services delivered through a strategic partner and supplier network in a SIAM environment. Acts as service integrator, managing supplier SLAs, KPIs and contracts, leading service reviews, driving continual improvement and ensuring compliance with NIS and CAF standards. Combines technical oversight of Azure, SaaS, SAP and ServiceNow with stakeholder-facing reporting via Power BI.
Sizewell C Leiston £66,000 pa
Responsible for the delivery, performance and continual improvement of enterprise IT services supporting the Sizewell C programme, spanning infrastructure, Azure cloud, Microsoft 365, networks, applications and cyber security operations. Combines technical leadership with ITIL service management, supplier governance and operational assurance in a highly regulated nuclear environment, acting as escalation point for senior stakeholders.
Ricoh London
Builds and operates secure, scalable platforms and services that take enterprise AI solutions from evaluation into production. Works across DevOps, cloud engineering and MLOps, configuring environments, CI/CD pipelines, automation, monitoring and identity controls alongside AI specialists, data scientists and security teams.
Sizewell C London £66,866 pa
Owns end-to-end delivery, performance and continual improvement of enterprise IT services for a major nuclear energy programme, spanning Microsoft 365, Azure, infrastructure, networks, applications and cyber security operations. Combines technical leadership with ITIL service management, supplier governance and regulatory compliance, acting as escalation point for senior stakeholders and managing multiple managed service providers.
Cloudflare London
Acts as primary technical responder for premium enterprise customers, autonomously investigating complex threat telemetry and handling live incident response for volumetric DDoS and application-layer attacks. Implements mitigation across OSI Layers 3, 4 and 7 using Cloudflare's security suite, performs packet and traffic flow analysis, and advises customers during active incidents. Requires 24x7 rotating shifts.
