331 jobs for “Cyber Security Analyst”
Darktrace London
Contributes to projects spanning rapid prototyping and open-ended research into generative AI security, investigating attacker tradecraft such as prompt injection, poisoning and extraction attacks. Acts as a domain expert, feeding insights back to product, development and machine learning teams, with coverage in network, endpoint, cloud or Kubernetes.
Darktrace Cambridge
Lead strategic and hands-on UX research across multiple cybersecurity products, defining a cross-product research roadmap and running qualitative and quantitative studies such as interviews, contextual enquiry and usability testing. Translate findings into personas, journey maps and workflow models that shape platform unification and information architecture, while building scalable research practices with Product, Design and Engineering.
CrowdStrike United Kingdom
Monitor and analyse security alerts on the CrowdStrike platform, handling incidents across Windows, Mac and Linux, performing malware analysis and remote remediation. The role sits in a virtual security operations centre, producing written findings for customer management and improving detection and triage processes.
CrowdStrike Jacksonville, United States £72,000 – £130,000 pa
Technical analyst role in a virtual security operations centre, monitoring and investigating security alerts in real time. Involves incident handling across Windows, Mac and Linux, malware analysis, remote remediation, and serving as escalation point and mentor for junior analysts while producing customer-facing findings.
Palo Alto Networks United Kingdom
Provide dedicated technical support for Prisma Cloud, handling user-reported issues within SLAs via ticketing, phone and remote sessions. Triage and troubleshoot complex application and OS-level problems across Kubernetes, Docker, Linux and public cloud platforms, performing root cause analysis and coordinating fixes with engineering and product teams. Requires UK security clearance eligibility and strong scripting and networking knowledge.
Immersive United Kingdom
Designs, writes and peer-reviews hands-on GRC labs, challenges and gamified learning content on the Immersive One platform, researching standards such as NIST, ISO 27001 and MITRE ATLAS/D3FEND to build realistic simulations of incidents in regulated sectors. Acts as GRC subject matter expert for engineering and product teams, embedding security and privacy by design into the SDLC.
Morson Edge Warrington £85 ph
Assess technical security controls and cyber risk across complex OT and Cloud environments, working with technical teams, architects and risk owners. The role centres on NCSC CAF, Cyber Essentials Plus, ISO 27001/27005 and NIST frameworks, covering third-party assurance and internal/external audits. It is a 12-month contract requiring one day a week travel to the North West.
Yolk Recruitment Cardiff £62,000 – £72,000 pa
Hands-on security engineering role within an established Cyber Resilience function, strengthening security operations across a complex technology estate. Day to day covers Microsoft Defender and Sentinel, Azure and Entra ID security, vulnerability management, Purview data protection and threat detection, plus security input into projects and architecture. Also acts as a security SME to technical and non-technical stakeholders.
Ashdown Group Northampton £65,000 – £80,000 pa
Standalone security role maintaining and enhancing controls across identity, endpoint, cloud and application in enterprise environments. Hands-on work spans IAM, MFA, privileged access, zero-trust, Windows endpoint management, EDR, cloud security monitoring, vulnerability assessment and incident investigation, with frameworks such as ISO 27001 or NIST CSF. Hybrid, around three days a week in an office on the outskirts of Northampton.
ARCHER RESOURCING LTD Aberdeen £55,000 – £80,000 pa
Lead cyber security, information assurance and governance across a Group covering corporate IT, OT, cloud and commercial software products. Own the security roadmap with the CIO, maintain policies and the cyber risk register, run incident response with an external SOC, and drive ISO 27001, Cyber Essentials Plus, SOC 2, NIST CSF and IEC 62443 compliance. Also embeds security into the SDLC and reviews customer-facing product architecture.
Harvey Nash Newport
Design and review security architectures across cloud, on-premises and hybrid environments, assessing technical risks and advising teams on networking, identity management, authentication and cryptography. The role champions Secure by Design and supports governance, compliance and assurance, working closely with senior security leaders to embed best practice.
Eden James Consulting Ltd London
Lead the Health and Care Account for a fast-growing technology consultancy, delivering cyber security, data and AI services. Day to day involves client relationship building, managing a healthcare delivery portfolio, supporting sales and bids, running risk and maturity assessments, and implementing security controls aligned to NIST, CAF and ISO27001. Requires SC clearance eligibility and sole British nationality.
Appcast Enterprise Farnborough
Protects a critical defence IT application and infrastructure by running vulnerability scans, managing endpoint security, responding to incidents and hardening systems. Works with frameworks such as Government Functional Standard 007 and standards like CIS, STIG and NIST, leading security implementation and assurance on a major UK government programme.
Proactive Appointments Baldock
Hands-on security role covering identity and access management, endpoint protection, cloud security, vulnerability management and incident response across a broad technology estate. Works closely with IT operations, development and platform teams plus external security providers, embedding least-privilege and zero-trust practices and producing risk reporting for audits and customer assurance.
Proactive Appointments Northampton
Hands-on security engineering role covering identity and access management, endpoint protection, cloud security, vulnerability management and incident response across a broad technology estate. Works closely with IT operations, development and platform teams plus external security providers, embedding least-privilege and zero-trust practices and producing risk reporting.
