> Markdown version of [/jobs/ext/2051124-cyber-security-analyst](https://www.wearedevelopers.com/jobs/ext/2051124-cyber-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Security Analyst - **Company:** Nuffield Health - **Location:** Epsom, UK - **Salary:** £48,594.0 - **Contract:** Temporary contract - **Skills:** Cyber Security, Event Logging, Network Security, Security Information and Event Management, Software Vulnerability Management, Mitre Att&ck, Microsoft Sentinel, Malware Detection, Vulnerability Analysis - **Published:** August 14, 2026 - **Apply:** https://www.adzuna.co.uk/jobs/details/5841939991 ## About the Role We are seeking an experienced and proactive Cyber Security Analyst to join our growing Cyber Security Operations practice. The ideal candidate will strong hands-on experience working in an existing cyber security operations role, with a proven track record of leading security investigations, driving incident response activities, and improving detection capabilities., * Significant experience working within an in-house cyber security or SOC environment, including leading and coordinating security investigations. Proven experience in incident response leadership, including triage, containment, eradication, recovery, and post-incident review * Proficiency with security tooling, analytics tuning and reporting (e.g. Microsoft Sentinel SIEM, endpoint XDR, cloud & network) and confidence in writing SIEM queries. * Experience in endpoint and network-based security detection, prevention and investigations * An interest in threat intelligence and knowledge of threat hunting techniques * Experience supporting incident response engagements: containing threats, root cause analysis and restoring operations * Demonstrable experience of working with information and cyber security standards and frameworks (such as ISO 27001, CAF and MITRE ATT&CK) * Experience of writing policies, procedures and user guidance for practical use. * Worked closely within Technology Service and Product Engineering teams to build and maintain a strong security posture; mitigating security risks and fostering a proactive culture. ## Description * Develop your career in cyber security, working across a broad technology estate that covers a variety of both clinical and non-clinical applications that deliver various services connected to fitness, wellbeing, and healthcare. * Coordinating and leading incident response activities, working with internal teams and third-party partners to ensure effective containment and recovery.Perform analysis of endpoint, server and network logs including vulnerabilities and known attacks, cross referencing to the MIRTE framework and known TTPs (tools, techniques and patterns). * Take part in vulnerability scans, identifying and remediating security vulnerabilities through internal analysis and close collaboration with external security testing partners. * Contribute to working on incidents, when they occur, using judgement to analyse and mitigate any risk, returning the organisation to a working state as quickly as possible. * Assist with the ongoing improvement and development of cyber-security protection, including but not limited to event logs, anti-malware, network security and vulnerability management. * Support the undertaking of cyber risk assessments and assurance reviews on key cyber security controls. * Assist in the management of cyber security risks and mitigation plans and champion risk mitigation work across the Technology department. * Liaise with external organisations to analyse IT security trends and news and proactively respond to cyber security threats, escalating issues and risks. * Support user awareness of good cyber security practice across all of Nuffield Health through communication campaigns and through tailored awareness training. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Is your backend a hodgepodge of queues, event stores and cron jobs? Durable Execution to the Rescue.](https://www.wearedevelopers.com/videos/744-is-your-backend-a-hodgepodge-of-queues-event-stores-and-cron-jobs-durable-execution-to-the-rescue) - [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) - [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large) - [Kafka Streams Microservices](https://www.wearedevelopers.com/videos/168-kafka-streams-microservices) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)