> Markdown version of [/jobs/ext/2049719-cyber-security-analyst](https://www.wearedevelopers.com/jobs/ext/2049719-cyber-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Security Analyst - **Company:** Portfolio Group Ltd - **Location:** Manchester, UK - **Experience:** Experienced - **Salary:** £45,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Amazon Web Services, Apple Mac Systems, ARM Architecture, Microsoft Azure, Cloud Computing, Cyber Security, Information Leak Prevention, Data Loss, Data Security, DevOps, Microsoft Office, Network Intrusion Detection Systems, Phishing, Security Information and Event Management, Cloud Platform System, Data Classification, Office365, Malware, Microsoft InTune, Cybercrime, Nessus, Microsoft Sentinel, Cortex XSOAR Platform, Casper Suite, Splunk, Blue Team (Cyber Security), Vulnerability Analysis - **Published:** August 14, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5840200051 ## About the Role * We have at least 2 years experience in a cyber security, SOC, or information security analyst role. * We have experience working within an ISO/IEC 27001 or equivalent accredited environment. * We are familiar with ITIL service management processes, particularly Incident, Request, Change, and Problem management. * We understand GDPR, data protection, and information governance. * We have hands-on experience with a SIEM platform such as Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent. * We have experience with, or a strong aptitude to learn, SOAR and automation tooling such as Cortex XSOAR. * We have experience with Endpoint Detection and Response tools such as Cortex XDR or an equivalent EDR/XDR platform. * We have experience with email security platforms such as O365, Mimecast, Abnormal, or equivalent. * We understand Data Loss Prevention and data classification, such as Microsoft Purview and Azure labelling, or equivalent. * We have experience with vulnerability scanning and management such as Nessus or equivalent. * We have working knowledge of endpoint management across Windows and macOS, including Intune and Jamf. * We have strong knowledge of cloud environments, including Microsoft Azure, AWS, and Microsoft 365. * We understand layered security, threat hunting, and incident response. * We hold a degree in a computer-related subject, or we have equivalent experience in cyber security. * We hold, or are actively working towards, relevant industry certifications such as SANS GCIH, EC-Council CEH, ISC2 SSCP, CompTIA CySA+, Blue Team Level 1, or Microsoft SC-200, and we are committed to continued professional development. ## Description * We deliver the day-to-day security operations of the InfoSec team and act as a first point of escalation and support for Junior and Graduate analysts. * We manage day-to-day security tickets, requests, and alerts through Halo ITSM, meeting SLAs and making full use of existing automation. * We monitor, triage, and investigate alerts within Palo Alto Cortex XSIAM, responding and escalating as required. * We respond to security incidents involving malware, data loss, phishing, or network intrusion, following established playbooks and incident response processes. * We manage email security operations across Mimecast and Abnormal, including releases, journal pulls, and reported-phishing investigations. * We monitor threat feeds and threat intelligence, applying relevant findings to the environment. * We maintain and tune detections, correlation rules, and Cortex XSOAR playbooks to reduce noise and improve response times. * We identify opportunities for automation and continual improvement across monitoring and response workflows. * We contribute to the development and upkeep of SOC processes, runbooks, and documentation. * We run and interpret vulnerability scans using Nessus, tracking remediation through to closure with the relevant teams. * We support endpoint security and patch compliance across the Windows and macOS estates, working with Intune, Jamf, Alectrona, and Cortex XDR. * We support and monitor the companys Data Loss Prevention controls within Microsoft Purview, and data classification through Azure Information Protection labelling. * We help maintain the evidence and controls that support the companys accreditations, including ISO/IEC 27001, 27017, and 27018, Cyber Essentials Plus, and SOC 2. * We learn and apply the principles of risk and information governance within the context of cyber security. * We work collaboratively with the wider IT team and business stakeholders to provide security and governance for existing and new services. * We communicate complex security concepts clearly to technical and non-technical audiences. * We support our colleagues across all regions and serve as a trusted resource on information and cyber security matters. Technologies: * AWS * Azure * Cloud * ICT * Support * ITIL * ITSM * macOS * Microsoft 365 * Network * Security * Splunk * Windows * Office 365 * DevOps ## Related Videos - [Our journey with Spring Boot in a microservice architecture](https://www.wearedevelopers.com/videos/511-our-journey-with-spring-boot-in-a-microservice-architecture) - [From DevOps to Scaled DevOps: How We’re Rebuilding Continuous Delivery as a Platform](https://www.wearedevelopers.com/videos/100018-from-devops-to-scaled-devops-how-we-re-rebuilding-continuous-delivery-as-a-platform) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [DevOps Maturity Check – a way to balance autonomy and alignment](https://www.wearedevelopers.com/videos/58-devops-maturity-check-a-way-to-balance-autonomy-and-alignment) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [#90DaysOfDevOps - The DevOps Learning Journey](https://www.wearedevelopers.com/videos/548-90daysofdevops-the-devops-learning-journey) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)