209 jobs for “Analyst”
CrowdStrike United Kingdom
Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats. Builds dashboards, reports and data pipelines using SQL, Python and Logscale, partnering with product and engineering teams to turn raw security data into actionable insights and KPIs.
Amtis Professional Deeside £45,000 – £55,000 pa
Hands-on role strengthening an organisation's ability to respond to, recover from and learn from cyber incidents. Combines practical system recovery and resilience testing with Business Continuity, Incident Response and Cyber Recovery planning, working with technical and non-technical stakeholders across IT and the wider business.
eFinancialCareers London
Supports integrated business and technology audits across a global portfolio, assessing whether technology risks are managed and controls operate as intended. Uses data analytics and AI for audit testing, control evidence analysis and issue validation, engaging stakeholders on control design and emerging cyber and regulatory risks.
CrowdStrike Jacksonville, United States £72,000 – £130,000 pa
Technical analyst role in a virtual security operations centre, monitoring and investigating security alerts in real time. Involves incident handling across Windows, Mac and Linux, malware analysis, remote remediation, and serving as escalation point and mentor for junior analysts while producing customer-facing findings.
Circle Recruitment London £30,000 – £45,000 pa
Hands-on security operations role monitoring and triaging alerts from SIEM, EDR and cloud platforms, investigating incidents and supporting containment and response. Also provides second-line support across Azure, AWS, identity, network and end-user infrastructure, with log analysis, vulnerability remediation and runbook upkeep. Majority onsite in Manchester or London, with occasional on-call and shift handovers.
TRIA Cardiff £45,000 – £50,000 pa
Hands-on engineering role in a Microsoft security partner's Security Operations team, building and tuning Sentinel detection rules with KQL and configuring Defender XDR and Microsoft 365 controls. Involves automation playbooks via Azure Logic Apps, vulnerability scanning and phishing simulations, DevOps/CI-CD work, and escalation-focused incident response rather than routine alert monitoring.
Maru Search & Consultancy Bournemouth £80,000 – £85,000 pa
Hands-on senior security role owning the ISMS and ISO 27001 compliance across a UK health and life insurer, extending it across the wider UK group. Responsibilities span information security risk management, embedding security into the SDLC and DPIAs, supplier security assurance, policy ownership, awareness training and chairing security committees. Includes leading a growing team starting with one analyst and scaling to three plus a consultant.
eFinancialCareers London
Engineer, operate and optimise Microsoft Sentinel across one or more Log Analytics workspaces, owning platform health, ingestion pipelines, normalisation and enrichment. Build and maintain log onboarding from cloud, on-prem, SaaS and security tools, and integrate the SIEM with EDR, SOAR, threat intel and ITSM platforms. Also supports M&A onboarding of acquired environments into the enterprise SIEM.
Eclectic Recruitment Stevenage £45,000 – £50,000 pa
Designs, configures and maintains network security solutions including next-generation firewalls, secure proxies and IDS/IPS, while supporting 24/7 incident response alongside SOC analysts. Involves analysing network traffic and packet captures, remediating vulnerabilities and standardising security tooling in a highly secure engineering environment.
Peregrine Blackpool
Forward-deployed engineer embedded in a Cyber Capability Unit, building and deploying AI-powered security and fraud prevention solutions. Day to day covers AWS infrastructure, Terraform IaC, GitLab CI pipelines, testing, observability and incident response in regulated environments. Requires active SC clearance.
Erin Associates Manchester £45,000 – £50,000 pa
Hands-on role strengthening an organisation's security posture and delivering initiatives across its Cyber Security Roadmap. Day to day involves managing Microsoft Defender, Intune, Entra ID and Microsoft 365 security controls, supporting vulnerability remediation, alert triage and incident response, and maintaining Cyber Essentials and CIS Controls compliance.
DB Cargo (UK) Limited Doncaster £70,000 – £75,000 pa
Acts as the cyber security subject matter expert within an IT Governance & Security function, leading governance, risk, compliance and resilience across business-critical applications, cloud services and operational railway systems. Owns the ISMS and NIS/GDPR compliance while managing security operations, threat monitoring, incident response and vulnerability management. Develops Microsoft Sentinel and Defender XDR capabilities and provides governance across Azure, AWS, Microsoft 365, Entra ID and Intune, including support for ERTMS/ETCS transformation.
Akkodis Hessle £35,000 – £45,000 pa
Hands-on security operations role covering alert triage, incident response and root-cause analysis, plus tuning SIEM, EDR/XDR and monitoring tooling to cut false positives. You will drive automation and security improvement projects while liaising with a managed SOC and internal infrastructure, cloud and application teams.
ITSS Recruitment London £60,000 – £70,000 pa
Hands-on security engineering role protecting critical systems and sensitive data across a broad estate covering cloud security, vulnerability management, incident response and security monitoring. Day to day involves operating the vulnerability management programme, administering Microsoft Defender, Purview, Entra ID, Sentinel and Azure security services, and advising infrastructure, application and business stakeholders on risk-based controls.
Sophos United Kingdom
Performs advanced investigative, forensic and containment work during active cyber incidents for Managed Detection and Response customers, correlating alerts and telemetry to establish scope and root cause. Mentors junior IR and SOC analysts, maintains engagement documentation and playbooks, and supports Incident Advisors with validated technical findings. Includes weekend and holiday rotation cover.
