110 jobs for “Analyst”
CrowdStrike Romania
Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats. Builds dashboards, reports and data pipelines using SQL, Python, Logscale and graph databases, partnering with product and data engineering teams to turn raw security data into actionable insights and KPIs.
CrowdStrike Spain
Analyzes large-scale security telemetry, threat intelligence feeds and detection data to surface trends, anomalies and emerging threats, and builds dashboards and reporting workflows using SQL, Python and Logscale. Works cross-functionally with product and data engineering teams to turn raw security data into actionable insights and KPIs for the Office of Adversary Strategy.
Entrust London
Analyses digital identity and financial regulation such as eIDAS 2.0, ETSI standards and EU AML rules, assessing their impact on products and customers across EMEA. Supports certification work including ETSI TS 119 461 and UK DVS, drafts consultation responses and position papers, and engages with regulators and industry working groups. Sits within the Product organisation, feeding regulatory insight directly into roadmaps and horizon-scanning.
Sophos United Kingdom
Performs advanced investigative, forensic and containment work during active cyber incidents for Managed Detection and Response customers, correlating alerts and telemetry to establish scope and root cause. Mentors junior IR and SOC analysts, maintains engagement documentation and playbooks, and supports Incident Advisors with validated technical findings. Includes weekend and holiday rotation cover.
Experis London £500 pd
Lead end-to-end management of cyber security incidents and major security events within a secure government programme, coordinating technical response teams through containment, eradication and recovery. Act as primary point of contact for incident communications, run response bridges and war-rooms, and produce post-incident reports and root cause analysis. Works alongside SOC, analysts, infrastructure teams and third-party suppliers to improve cyber resilience.
Palo Alto Networks United Kingdom
Deliver white-glove onboarding and ongoing technical guidance for Managed XSIAM customers, analysing security data to improve detection coverage, alert quality and tenant hygiene. Lead customer touchpoints and security reviews while partnering with Unit 42 SOC engineering, Product and MDR teams to build automation workflows and scalable service frameworks.
Immersive United Kingdom
Builds and maintains analytical data models in a cloud data warehouse, designing high-quality datasets for customer-facing reporting and developing semantic layers for BI. Works in a multi-disciplinary agile product team with data and software engineers, leading on data quality, observability and model optimisation while mentoring junior engineers.
Sophos United Kingdom
Senior individual contributor researching how threat actors adopt, weaponize and exploit AI, from LLM-powered social engineering to attacks on agentic AI systems. Involves instrumenting telemetry to detect adversarial AI use, automating research workflows with LLMs and Python, and publishing deep-dive intelligence externally. Works alongside CTU researchers, SophosLabs analysts, MDR threat hunters and data scientists.
Barclays Glasgow
Owns the optimisation and strategy of transaction monitoring controls across Barclays UK and International, tuning surveillance systems and developing detection solutions. Involves data exploration, coding in SQL, Scala, Spark or Python, and engaging technical and non-technical stakeholders on financial crime risk. Based in Glasgow within a regulated governance and control environment.
Matchtech London £580 pd
Hands-on penetration testing and vulnerability assessments across infrastructure, networks and applications, producing technical reports and remediation recommendations. Works with technical and project teams on risk assessments and security assurance, aligning testing with industry standards. Short-term contract, fully remote, inside IR35.
Amazon London
Builds AI/ML-driven security automation systems that detect, analyse and respond to threats at Amazon scale, integrating automated detection into the company's security infrastructure. Works alongside security engineers and scientists on proactive, offensive and defensive tooling, researching and prototyping new approaches. Distinct for its focus on autonomous security across one of the world's largest tech ecosystems.
TrueWatch Dublin, Ireland £77,691 – £86,324 pa
Maintains reliability, availability and performance of cloud infrastructure, monitoring production environments and managing observability tooling for metrics, logs and alerts. Handles incident response, root cause analysis and post-incident reviews, while automating deployments with IaC and CI/CD and optimising AWS, Azure or GCP resources. Works with engineering and platform teams on scalability, security compliance and capacity planning.
Carbon 60 Stevenage £70 – £75 ph
Day-to-day BAU support, administration and configuration management across Windows infrastructure and workplace environments, including patching, change implementation and asset documentation. Acts as Tier 2/Tier 3 escalation for complex Windows issues, handling incident response, root cause analysis, monitoring, backups and security compliance. Requires active DV clearance and 100% onsite work in a highly secure, restricted environment.
NCC Group Remote
Designs, builds and maintains security automations that detect, investigate and respond to cyber threats, working closely with Incident Response to identify improvements and create new playbooks. Delivers scalable automation within the Splunk ecosystem, covering advanced analytics, scripting, new use cases, validation of automation behaviour and documentation, plus mentoring junior engineers.
Robert Half Oxford £25,500 – £29,000 pa
Provide first-line IT support to internal staff, managing and updating tickets while troubleshooting software, hardware and connectivity problems. Set up computers, mobile devices and software, escalate complex issues to senior colleagues, and maintain records and equipment logistics. Office-based with occasional travel to other sites.
