219 jobs for “Analyst”
CrowdStrike United Kingdom
Investigates emerging malware and cyber threats across the full adversary kill chain, validating and improving Falcon's detection coverage. Works with Threat Research, Engineering, Data Science and Red Team to turn findings into product improvements, supporting external security testing programmes and building automation to speed analysis.
CrowdStrike Romania
Investigates emerging malware and cyber threats across the full attack lifecycle, validating Falcon's detection coverage and distinguishing genuine threats from background noise. Works with Threat Research, Engineering, Data Science and Red Team to turn findings into product improvements, and supports external security testing programmes such as AV-Test and SE Labs.
Sophos United Kingdom
Leads incident response engagements for customers hit by cyberattacks, directing a team of consultants, running kick-off and daily update calls, and delegating forensic tasks. Handles multiple ransomware and BEC investigations concurrently, performing root cause analysis and producing executive-summary reports mapped to MITRE ATT&CK.
Amazon London
Join a global team responsible for discovering, assessing, triaging and driving remediation of vulnerabilities across Amazon's infrastructure, services and applications. The role involves analysing disclosures and exploit code, engineering scalable detection mechanisms, and building automation and tooling, with periodic on-call duties.
TrueWatch Dublin, Ireland £77,691 – £86,324 pa
Maintains reliability, availability and performance of cloud infrastructure, monitoring production environments and managing observability tooling for metrics, logs and alerts. Handles incident response, root cause analysis and post-incident reviews, while automating deployments with IaC and CI/CD and optimising AWS, Azure or GCP resources. Works with engineering and platform teams on scalability, security compliance and capacity planning.
JAM Recruitment London £700 – £750 pd
Day-to-day, you will manage and configure production databases, provide first to third-line support across full-stack applications, and administer Linux and Windows virtual machines with a focus on vulnerability management and hardening. The role also involves automation with Ansible, Docker containerisation, ETL processes and shared services such as identity brokers and observability platforms, within a national-security context requiring DV clearance.
Carbon 60 Stevenage £70 – £75 ph
Day-to-day BAU support, administration and configuration management across Windows infrastructure and workplace environments, including patching, change implementation and asset documentation. Acts as Tier 2/Tier 3 escalation for complex Windows issues, handling incident response, root cause analysis, monitoring, backups and security compliance. Requires active DV clearance and 100% onsite work in a highly secure, restricted environment.
TRIA Sheffield £500 – £600 pd
Lead the response to high-severity IT incidents across network, infrastructure, cloud and security environments, coordinating technical teams, suppliers and stakeholders to restore services within agreed targets. The role involves chairing incident and crisis calls, post-incident reviews, root cause analysis, ITIL processes, disaster recovery and business continuity planning, plus executive reporting and on-call duties.
DCV Technologies Royal Leamington Spa £550 – £650 pd
Hands-on contract role owning the end-to-end detection engineering lifecycle, translating threat intelligence, hunting findings and adversary techniques into effective detection rules. Builds behavioural analytics and detection content across endpoint, identity, cloud, network and email telemetry using KQL, SPL, Sigma, Python and PowerShell, with tuning, purple teaming and Detection-as-Code work alongside SOC, IR and Red Team specialists.
NCC Group Remote
Designs, builds and maintains security automations that detect, investigate and respond to cyber threats, working closely with Incident Response to identify improvements and create new playbooks. Delivers scalable automation within the Splunk ecosystem, covering advanced analytics, scripting, new use cases, validation of automation behaviour and documentation, plus mentoring junior engineers.
Robert Half Oxford £25,500 – £29,000 pa
Provide first-line IT support to internal staff, managing and updating tickets while troubleshooting software, hardware and connectivity problems. Set up computers, mobile devices and software, escalate complex issues to senior colleagues, and maintain records and equipment logistics. Office-based with occasional travel to other sites.
QinetiQ Bristol £65,700 – £73,000 pa
Lead cyber security vulnerability analysis, audit processes and business risk modelling for defence customers, while shaping cyber exercise scenarios and advising on security posture against NIST and ISO27001 frameworks. The role involves applying MITRE ATT&CK and Secure by Design approaches, working largely on-site at a customer site in Corsham.
TXP United Kingdom £440 – £490 pd
Monitor, investigate and respond to cyber security incidents within a Microsoft security environment, using Microsoft Sentinel and the Defender suite. The role covers alert triage, threat hunting, log and telemetry analysis, and creating and tuning Sentinel analytics rules, workbooks and detection use cases. You will also support incident response containment and recovery, produce reports, and work with infrastructure, cloud and application teams to improve SOC processes and detection engineering.
Amtis Professional Cheshire West and Chester £50,000 – £55,000 pa
Hands-on role strengthening an organisation's ability to respond to, recover from and learn from cyber incidents. Combines practical system recovery and resilience testing with maintaining Business Continuity, Incident Response and Cyber Recovery plans, plus stakeholder coordination across IT and the wider business. Involves analysing system dependencies, incident reviews and producing resilience documentation.
Maxwell Bond London £115,000 – £135,000 pa
Owns security end to end for a confidential investment-data platform and its AI agents, split roughly 60% hands-on product and cloud security and 40% assurance and client-facing work. Sets AWS IAM, encryption and detection patterns, defines agent authorisation and prompt-injection defences, and drives SOC 2, ISO 27001 and AI Act readiness with penetration testing and client due diligence.
