120 jobs for “Cyber Security Analyst”
Darktrace Cambridge
Partners with developers and product teams to embed quality from the start, designing and maintaining automated test frameworks across API, UI, integration and regression layers. Builds scalable suites into CI/CD pipelines, drives shift-left testing, and contributes to test strategy, code reviews and architecture discussions.
CrowdStrike Romania
Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats. Builds dashboards, reports and data pipelines using SQL, Python, Logscale and graph databases, partnering with product and data engineering teams to turn raw security data into actionable insights and KPIs.
CrowdStrike Spain
Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats, and builds dashboards and reporting workflows using SQL, Python and Logscale. Works cross-functionally with product and data engineering teams to turn raw security data into actionable insights and KPIs for the Office of Adversary Strategy.
Netcraft London
Join the Novel Classification team to build and operate machine learning systems that detect phishing sites and online scams at scale. You'll train, evaluate and serve classifiers on GPU-backed Kubernetes, run live experiments on precision and recall, and deploy LLM inference and computer vision models into production.
Nexithon Ltd Guildford
Owns cybersecurity and information assurance workstreams, including certification assurance for ISO 27001, CE+ and DCC, Secure by Design reviews of infrastructure, cloud and application designs, and coordination of ITHCs, penetration testing and vulnerability remediation. Also manages supplier security compliance, Security Aspect Letters, spacecraft space licensing security, project security budgets and incident response duties within a defence programme context.
Mimecast London £44,000 – £66,000 pa
Acts as the trusted technical advisor for a portfolio of mid-market accounts, working in a three-person pod with an Account Manager and Renewals Manager. Owns platform adoption, configuration health and value scoring across email security, HRM and Incydr products, and packages proof-of-value and business reviews for executive audiences. Also leads churn mitigation and identifies expansion signals ahead of renewal.
Identify Solutions Swansea £45,000 – £55,000 pa
Hands-on role taking technical ownership of cyber security across a predominantly Microsoft environment, working with an infrastructure team and external SOC partners. Day to day involves assessing the estate for security gaps, hardening systems, operating Defender/XDR, EDR and Sentinel, managing Entra ID access controls, and responding to incidents and vulnerabilities.
Yolk Recruitment Cardiff £62,000 – £72,000 pa
Hands-on security engineering role focused on building and improving controls across a Microsoft-centric estate, including Defender, Sentinel, Azure and Entra ID. Involves vulnerability management, data protection with Purview, incident response support and embedding security into projects, with influence over strategy rather than pure SOC operations.
Immersive United Kingdom
Designs, writes and peer-reviews hands-on GRC labs, challenges and gamified learning content on the Immersive One platform, researching standards such as NIST, ISO 27001 and MITRE ATLAS/D3FEND to build realistic simulations of incidents in regulated sectors. Acts as GRC subject matter expert for engineering and product teams, embedding security and privacy by design into the SDLC.
Yolk Recruitment Cardiff £62,000 – £72,000 pa
Hands-on security engineering role within an established Cyber Resilience function, strengthening security operations across a complex technology estate. Day to day covers Microsoft Defender and Sentinel, Azure and Entra ID security, vulnerability management, Purview data protection and threat detection, plus security input into projects and architecture. Also acts as a security SME to technical and non-technical stakeholders.
Ashdown Group Northampton £65,000 – £80,000 pa
Standalone security role maintaining and enhancing controls across identity, endpoint, cloud and application in enterprise environments. Hands-on work spans IAM, MFA, privileged access, zero-trust, Windows endpoint management, EDR, cloud security monitoring, vulnerability assessment and incident investigation, with frameworks such as ISO 27001 or NIST CSF. Hybrid, around three days a week in an office on the outskirts of Northampton.
Harvey Nash Newport
Design and review security architectures across cloud, on-premises and hybrid environments, assessing technical risks and advising teams on networking, identity management, authentication and cryptography. The role champions Secure by Design and supports governance, compliance and assurance, working closely with senior security leaders to embed best practice.
Eden James Consulting Ltd London
Lead the Health and Care Account for a fast-growing technology consultancy, delivering cyber security, data and AI services. Day to day involves client relationship building, managing a healthcare delivery portfolio, supporting sales and bids, running risk and maturity assessments, and implementing security controls aligned to NIST, CAF and ISO27001. Requires SC clearance eligibility and sole British nationality.
Appcast Enterprise Farnborough
Protects a critical defence IT application and infrastructure by running vulnerability scans, managing endpoint security, responding to incidents and hardening systems. Works with frameworks such as Government Functional Standard 007 and standards like CIS, STIG and NIST, leading security implementation and assurance on a major UK government programme.
Proactive Appointments Baldock
Hands-on security role covering identity and access management, endpoint protection, cloud security, vulnerability management and incident response across a broad technology estate. Works closely with IT operations, development and platform teams plus external security providers, embedding least-privilege and zero-trust practices and producing risk reporting for audits and customer assurance.
