249 jobs for “Cyber Security Analyst”
Manpower Lytham Saint Annes £50,000 pa
Conducts red team exercises, critical control testing, cyber hygiene assessments and penetration testing to validate security controls and SOC detection capabilities. Produces detailed vulnerability reports for internal resolver groups and briefs leadership on defensive effectiveness. Requires hands-on infrastructure and web app testing with tools like Kali and Parrot across cloud, network and endpoint technologies.
eFinancialCareers London
Own and lead the end-to-end Threat Intelligence Platform, driving strategic design, delivery and development to maximise value across a global cyber defense organisation. Build API integrations and connectors across commercial intelligence sources, govern intelligence standards such as source reliability, confidence scoring and TLP handling, and mentor junior analysts while producing intelligence for technical and executive audiences.
Hays Technology Sheffield £450 – £500 pd
Owns end-to-end solution design across cybersecurity initiatives, producing architecture documents, high-level designs, patterns, decision records and risk assessments. Provides technical leadership and presents designs to Design Authorities and senior stakeholders, with deep IAM and HashiCorp Vault expertise. Requires three days per week onsite in Sheffield.
NCC Group Remote
Oversee Security Operations Centre activities, lead incident response efforts, and mentor a team of analysts. The role centres on cyber threat detection and incident investigation, with strong hands-on use of the Splunk Enterprise Security platform. It is a lead-level position within a remote security operations team.
Sophos United Kingdom
Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.
Sophos United Kingdom
Owns the strategy, roadmap and execution for the Endpoint Windows Platform, translating OS and security requirements into product priorities. Partners closely with Engineering, Microsoft and cross-portfolio teams on agent architecture, performance and platform change management, and supports go-to-market enablement.
QinetiQ Bristol £65,700 – £73,000 pa
Lead cyber security vulnerability analysis, audit processes and business risk modelling for defence customers, while shaping cyber exercise scenarios and advising on security posture against NIST and ISO27001 frameworks. The role involves applying MITRE ATT&CK and Secure by Design approaches, working largely on-site at a customer site in Corsham.
QinetiQ Malvern, England, United Kingdom £65,700 – £73,000 pa
Lead cyber security consultancy for defence and government customers, developing business risk models, running ISO 27001 audits and detailed vulnerability assessments using NIST and MITRE ATT&CK frameworks. You will translate technical threats into clear risk cases and mitigation strategies for senior stakeholders, embedding Secure by Design principles across projects. Based on a multi-site UK estate with at least three days a week on site and customer travel.
Michael Page Liverpool £60,000 – £65,000 pa
Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.
RiverSafe London
Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.
Maxwell Bond London £115,000 – £135,000 pa
Owns security end to end for a confidential investment-data platform and its AI agents, split roughly 60% hands-on product and cloud security and 40% assurance and client-facing work. Sets AWS IAM, encryption and detection patterns, defines agent authorisation and prompt-injection defences, and drives SOC 2, ISO 27001 and AI Act readiness with penetration testing and client due diligence.
Hays Technology Leeds £65,000 – £70,000 pa
Lead a cyber security team day to day, covering resource planning, rotas and performance management, while overseeing incident response, vulnerability management and cloud security migration. Act as escalation point for security incidents and lead war-gaming exercises within an ITIL and ISO 27001 framework, requiring hands-on Azure security expertise.
Darktrace Cambridge
Works at the intersection of security engineering and generative AI, researching, prototyping and shaping agentic workflows within the Darktrace product ecosystem. Collaborates with product, engineering and machine learning teams to turn ideas into prototypes, while maintaining product knowledge through open-ended research projects.
Darktrace London
Security researcher role at the intersection of security engineering and generative AI, exploring, prototyping and shaping agentic workflows within the Darktrace product ecosystem. Involves identifying product use cases, designing prototypes, and coordinating with product, engineering and machine learning teams, while maintaining expertise through open-ended research.
Adecco London £473 – £800 pd
Senior role driving first-line cyber risk management and regulatory compliance across EMEA, coordinating responses to DORA and EBA requirements and translating them into actionable controls. Involves enhancing the Cyber GRC framework, managing risk registers and policy exceptions, and producing monthly metrics and KRIs for senior stakeholders. Acts as the Cyber GRC contact across the region, communicating complex regulatory matters in business language.
