369 jobs for “Cyber Security Analyst”
CrowdStrike Romania
Investigates emerging malware and cyber threats across the full attack lifecycle, validating Falcon's detection coverage and distinguishing genuine threats from background noise. Works with Threat Research, Engineering, Data Science and Red Team to turn findings into product improvements, and supports external security testing programmes such as AV-Test and SE Labs.
Sophos United Kingdom
Owns the strategy, roadmap and execution for the Endpoint Windows Platform, translating OS and security requirements into product priorities. Partners closely with Engineering, Microsoft and cross-portfolio teams on agent architecture, performance and platform change management, and supports go-to-market enablement.
Sophos United Kingdom
Leads incident response engagements for customers hit by cyberattacks, directing a team of consultants, running kick-off and daily update calls, and delegating forensic tasks. Handles multiple ransomware and BEC investigations concurrently, performing root cause analysis and producing executive-summary reports mapped to MITRE ATT&CK.
QinetiQ Portsmouth £50,850 – £56,500 pa
Advises customers on cyber security vulnerability, risk, audit and compliance, applying NIST and ISO27001 frameworks to risk assessments and security assurance. Supports accreditation, governance and mitigation strategies across government, defence and critical national infrastructure, engaging stakeholders and presenting findings. Based on-site at least three days a week with customer travel required.
QinetiQ Bristol £65,700 – £73,000 pa
Lead cyber security vulnerability analysis, audit processes and business risk modelling for defence customers, while shaping cyber exercise scenarios and advising on security posture against NIST and ISO27001 frameworks. The role involves applying MITRE ATT&CK and Secure by Design approaches, working largely on-site at a customer site in Corsham.
Michael Page Liverpool £60,000 – £65,000 pa
Investigating and responding to escalated security incidents, performing detailed event analysis and threat detection while working with external security providers. Acts as a subject matter expert supporting cyber incident response, optimising SIEM, IAM and DLP platforms, running phishing simulations and security reviews across the technology estate.
CBSbutler Holdings Limited trading as CBSbutler London £475 – £525 pd
Hands-on SOC and incident response role investigating cyber security threats across macOS endpoints, Linux cloud workloads, microservices and containerised environments. Responsibilities include alert triage, severity assessment, containment and remediation, telemetry correlation, evidence documentation and improving detection playbooks. On-site shift work covering 10-hour shifts between 06:00 and 16:00.
RiverSafe London
Client-facing consulting role leading end-to-end security engagements across security architecture, cloud security, DevSecOps, application security and security operations. You'll run workshops, design controls in AWS/Azure/GCP, produce risk-based deliverables and help identify follow-on work, contributing to proposals and account growth.
TXP United Kingdom £440 – £490 pd
Monitor, investigate and respond to cyber security incidents within a Microsoft security environment, using Microsoft Sentinel and the Defender suite. The role covers alert triage, threat hunting, log and telemetry analysis, and creating and tuning Sentinel analytics rules, workbooks and detection use cases. You will also support incident response containment and recovery, produce reports, and work with infrastructure, cloud and application teams to improve SOC processes and detection engineering.
Maxwell Bond London £115,000 – £135,000 pa
Owns security end to end for a confidential investment-data platform and its AI agents, split roughly 60% hands-on product and cloud security and 40% assurance and client-facing work. Sets AWS IAM, encryption and detection patterns, defines agent authorisation and prompt-injection defences, and drives SOC 2, ISO 27001 and AI Act readiness with penetration testing and client due diligence.
Sellick Partnership Newcastle upon Tyne £57,000 pa
Protect business systems, infrastructure and data by monitoring, investigating and responding to cyber threats and incidents. Manage vulnerability remediation, patching and endpoint security while securing cloud, network and endpoint environments. Support governance, audits and compliance with standards such as ISO 27001 and Cyber Essentials Plus, working with internal teams and third-party suppliers.
Hays Technology Leeds £65,000 – £70,000 pa
Lead a cyber security team day to day, covering resource planning, rotas and performance management, while overseeing incident response, vulnerability management and cloud security migration. Act as escalation point for security incidents and lead war-gaming exercises within an ITIL and ISO 27001 framework, requiring hands-on Azure security expertise.
airbus Stevenage
Maintains and manages security products including EDR, multi-antivirus and email sandboxing, while supporting SecDevOps and secure development automation. Defines and implements a company-wide threat modeling framework and leads the end-to-end vulnerability management lifecycle, including risk prioritisation, remediation tracking and scan policy optimisation using Tenable. Also supports security incident and request management, authorising policies, firewall rules and access controls within an international defence environment.
Commercial Ltd Kings Hill £54,500 – £55,000 pa
Monitor, triage and investigate security alerts, incidents and requests, managing records through to closure and coordinating recovery. Use tools such as Tenable and Darktrace across cloud and wider IT infrastructure, supporting vulnerability management, threat intelligence and malware analysis, with on-call backup for emergency response.
Seetec Hockley £49,000 – £52,500 pa
Hands-on security role operating and improving controls across internal and customer environments, using Microsoft Sentinel, the Defender suite, Huntress and Tenable. Day to day covers security monitoring, incident response, vulnerability management, compliance and technical security projects, working with the Head of Cyber Security and wider technical teams.
