> Markdown version of [/jobs/ext/1444704-cyber-security-analyst](https://www.wearedevelopers.com/jobs/ext/1444704-cyber-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Security Analyst - **Company:** Medr - **Location:** Merthyr Tydfil, UK - **Experience:** Expert - **Salary:** £39,457.0 - £46,243.0 - **Contract:** Permanent contract - **Skills:** Agile Methodology, Data Analysis, Applications Architecture, Microsoft Azure, Cloud Computing, Cloud Computing Security, Encodings, CompTIA Security+, Cyber Security, Information Systems, Data Governance, Data Integrity, Digital Assets, Digital Forensics, Monitoring of Systems, Intrusion Detection and Prevention, Virtual Private Networks (VPN), Microsoft Office, Network Administration, Service Design, Security Information and Event Management, Software Engineering, Software Vulnerability Management, Firewalls (Computer Science), Azure Security Center, Information Technology, Cybercrime, Microsoft Sentinel, Data Management - **Published:** July 26, 2026 - **Apply:** https://uk.indeed.com/viewjob?jk=4a8751ef0c7e8ca5 ## About the Role * Drive: You lead by example, showing dedication and perseverance in meeting organisational objectives.. * Agile: You drive forward improvements, through collaboration, embracing new technologies and nurturing a culture of continuous learning. * Resilient : You lead with resilience in terms of uncertainty and change, inspiring your team to persevere despite obstacle * Dynamic - You encourage a culture of innovation and continuous improvement, encouraging experimentation and learning. Experience * Technical experience in securing Microsoft Azure and Office 365 environments, with hands-on knowledge of cloud security tools such as Microsoft Sentinel, Purview or Microsoft Defender for Endpoint/Cloud SIEM tools. Capable of analysing and interpreting security events and logs, and performing digital forensics tasks. Experienced in responding to threat intelligence and vulnerability management platforms. * Demonstrates comprehensive understanding of cybersecurity frameworks, regulatory compliance requirements such as UK GDPR and the Data Protection Act 2018, and expertise with security technologies including firewalls, VPNs, and intrusion detection/prevention systems. Possesses strong analytical, communication, and problem-solving abilities, as well as proficiency in preparing clear and effective technical and non-technical reports. Welsh language requirements We have evaluated that the Welsh language requirements for this post are: Desirable: Welsh desirable means that while having Welsh language skills is useful for the role, it is not an assessment criterion, so it won’t disadvantage you during recruitment if you don’t currently possess these skills., A bachelor's degree in computer science, cybersecurity, or a closely related field is typically required; postgraduate qualifications or professional certifications (e.g., CISSP, CISM, CompTIA Security+) or several years of relevant experience in information security, network administration, or IT risk management., * Agile: You drive forward improvements, through collaboration, embracing new technologies and nurturing a culture of continuous learning. * Dynamic - You encourage a culture of innovation and continuous improvement, encouraging experimentation and learning. Experience * Technical experience in securing Microsoft Azure and Office 365 environments, with hands-on knowledge of cloud security tools such as Microsoft Sentinel or Microsoft Defender for Endpoint/Cloud SIEM tools. Capable of analysing and interpreting security events and logs, and performing digital forensics tasks. Experienced in responding to threat intelligence and vulnerability management platforms. * Demonstrates comprehensive understanding of cybersecurity frameworks, regulatory compliance requirements such as GDPR and the UK Data Protection Act, and expertise with security technologies including firewalls, VPNs, and intrusion detection/prevention systems. Possesses strong analytical, communication, and problem-solving abilities, as well as proficiency in preparing clear and effective technical and non-technical reports. To be fair to everyone who applies, we won’t accept, Successful candidates must undergo a criminal record check. People working with government assets must complete baseline personnel security standard (opens in new window) checks. ## Description The Cyber Security Analyst is responsible for safeguarding Medr’s digital assets by monitoring, analysing, and responding to cyber threats across its systems and services. The role ensures effective security controls are implemented in line with security policies and latest standards, supports secure system and service design, and undertakes real-time threat analysis, risk assessments and incident investigations. The role is critical to maintaining the confidentiality, integrity, and availability of Medr’s data and infrastructure, while supporting the resilience of its digital operations in an evolving threat landscape., * Monitor, detect, and respond to cyber threats by conducting real-time security monitoring, threat hunting, forensic investigations, and timely system patching to protect systems, networks, software, and data. * Identify and mitigate security risks and vulnerabilities through software risk assessments, continuous infrastructure monitoring, audits, and validation activities to ensure data integrity, timeliness, and completeness. * Design and enforce robust security controls and policies, embedding security into systems and application design and ensuring compliance with Cyber Essentials Plus and IASME Level 2 standards. * Manage access and permissions by maintaining strong user access controls and administrative privileges to prevent unauthorised access and data breaches. * Promote a strong security culture by delivering employee training and awareness programmes, supporting and challenging users where necessary, and encouraging continuous improvement and compliance with data standards. * Collaborate and communicate effectively with Digital teams, management, external suppliers, and stakeholders, maintaining up-to-date security documentation, producing security papers, and reporting progress and key challenges to senior leadership. Key challenges you will face * Working in a fast-paced environment, with competing priorities and critical deadlines. * Ensuring that data governance and management approaches align with business needs, compliance requirements and best practice. * Integrate with a shared SOC/MDR service. * Incident response under pressure. * Preparing and participating in numerous audits where compliance is critical to the business function. * Sector collaboration by securing credibility and trust with a range of stakeholders. About your team The Digital Directorate within Medr spans three core areas: Development, Information Systems, and IT Security & Technical Services. Together, we design and manage systems, develop applications and ensure robust security, governance and compliance is in place. The Cyber Security Analyst will report directly to the Senior Technical Services Manager who also manages the IT Support Manager and Officer posts. The team will be led by the Head of IT Security and Technical Services., The Senior Technical Services Manager brings over 25 years of digital experience and has been with HEFCW, Medr’s predecessor, since 2019, having seconded from a local Governments Network Team. As lead Technical Architect, he had a key role in the design and implementation of Medr’s IT environments, security profile, corporate IT systems, client solutions, data management processes, governance controls, and IT risk management., Applications are welcome in Welsh and will not be treated less favourably than those submitted in English. All applications will be notified of their outcomes via Civil Service Jobs at sift and interview stage. Candidates who successfully navigate the sift stage will be required to complete an online exercise to enable us to determine their behavioural and personality preferences. Immediately on completion you will be given a report which highlights your strengths plus some development tips to help you prepare for interview. Candidates should note that the online exercise is not intended to eliminate anyone from consideration. Instead, it serves as a tool to aid in the decision-making process. Following this, you will be required to participate in an interview and a short task, both of which will be conducted on Thursday 17 September. In addition to the attributes assessed at sift stage, the remaining attributes will also be assessed at interview: * Drive: You lead by example, showing dedication and perseverance in meeting organisational objectives. * Resilient : You lead with resilience in terms of uncertainty and change, inspiring your team to persevere despite obstacle., * UK nationals * nationals of the Republic of Ireland * nationals of Commonwealth countries who have the right to work in the UK * nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities with settled or pre-settled status under the European Union Settlement Scheme (EUSS) * nationals of the EU, Switzerland, Norway, Iceland or Liechtenstein and family members of those nationalities who have made a valid application for settled or pre-settled status under the European Union Settlement Scheme (EUSS) * individuals with limited leave to remain or indefinite leave to remain who were eligible to apply for EUSS on or before 31 December 2020 * Turkish nationals, and certain family members of Turkish nationals, who have accrued the right to work in the Civil Service ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Data Science in Retail](https://www.wearedevelopers.com/videos/586-data-science-in-retail) - [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime) - [A Brief History of Data Storage](https://www.wearedevelopers.com/videos/974-a-brief-history-of-data-storage) - [Data Science on Software Data](https://www.wearedevelopers.com/videos/162-data-science-on-software-data) - [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)