Cyber Security Analyst

Department: Tech Hub

Employment Type: Permanent

Location: London, England, United Kingdom

Contract type: Permanent

Hours: 37.5 / week

Salary: circa £74,000

Location: Canary Wharf

WFH policy: Employees are required to attend the office 2 days/week

Flexible working: Variety of flexible work patterns subject to line manager discretion e.g. Compressed 9-day fortnight.

Reports to: Technical Governance Lead

Role Summary: A detail-oriented and proactive Cyber Security Analyst part of our IT Security team. Responsible for monitoring, detecting, analysing, and responding to cybersecurity incidents and threats. Plays a key role in protecting the organisation's digital assets, systems, networks, and data against unauthorised access, breaches, and other security risks. This position requires technical expertise in security technologies, incident response, and vulnerability management.

• Monitor security alerts and investigate potential security incidents.
• Perform regular vulnerability assessments and security audits.
• Analyse logs and network traffic for suspicious activity.
• Develop and maintain incident response procedures and security policies.
• Coordinate with IT and development teams to apply security patches and configurations.
• Support security awareness training and phishing simulations.
• Participate in threat intelligence gathering and reporting.
• Document findings, actions taken, and produce security reports.
• Ensure compliance with security frameworks (e.g. ISO 27001, NIST, Cyber Essentials Plus).
• Assist in risk assessments and third-party vendor security evaluations.
• Own internal and external security Audits such as NIST, Pen testing and Cyber Essentials Plus.

• Proven experience in a cyber security role, with hands-on experience in security technologies and tools.
• Bachelor's degree in Cyber Security, Information Technology, Computer Science, or a related field, or equivalent professional qualification or experience.
• Strong understanding and experience of development tools and practices, cloud computing platforms, networking concepts, protocols, and security principles.
• Strong knowledge of cloud security principles and practices, especially in cloud environments like AWS, Azure, or Google Cloud.
• Familiarity with security technologies such as firewalls, intrusion detection/prevention systems, antivirus, and encryption.
• Knowledge of vulnerability scanning and penetration testing tools.
• Understanding of incident response principles and practices.
• Familiarity with TCP/IP, DNS, VPNs, and general networking concepts.
• Knowledge of threat landscape, malware behaviour, and attack vectors.
• Relevant certifications, such as CompTIA Security+, Certified Ethical Hacker (CEH), or Certified Information Systems Security Professional (CISSP).
• Experience with security tools such as SIEM (Security Information and Event Management) and endpoint protection solutions.

• Annual performance based bonus, up to 10%
• 25 days annual leave, plus eight bank holidays
• Up to 8% pension contribution
• Financial support and time off for study relevant to your role, plus a professional membership subscription
• Employee referral scheme (up to £1500), and colleague recognition scheme
• Family friendly policies, including enhanced maternity leave and shared parental leave
• Free, confidential employee assistance, including financial management, family care, mental health, and on-call GP service
• Three paid volunteering days a year
• Season ticket loan and cycle to work schemes
• Family savings on days out and English Heritage, gym discounts, cash back and discounts at selected retailers
• Employee resource groups