> Markdown version of [/jobs/ext/3047159-graduate-cyber-security-analyst](https://www.wearedevelopers.com/jobs/ext/3047159-graduate-cyber-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Graduate Cyber Security Analyst

- **Company:** BUUK Infrastructure
- **Location:** Bury St Edmunds, UK
- **Experience:** Starter
- **Salary:** £33,270.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Artificial Intelligence, Microsoft Antivirus, Microsoft Azure, CompTIA Security+, Cyber Security, Information Systems, Computer Networks, Data Governance, Linux, Digital Forensics, Disaster Recovery, Python (Programming Language), Machine Learning, Windows PowerShell, Azure Active Directory, Cloud Services, Scripting, Data Classification, Information Technology, Cybercrime, Microsoft Sentinel, Data Management
- **Published:** September 24, 2026
- **Apply:** https://www.careerjet.co.uk/job/gb95dd18547ea894aafafe773fae3fabfc/eaa

## About the Role

Bachelor's degree in Cyber Security, Computer Science, Information Technology, Digital Forensics, Information Systems or another relevant technology-related discipline.
Or
An equivalent qualification with a demonstrable interest in cyber and information security.
Experience/Knowledge
Understanding of fundamental cyber security principles.
Basic knowledge of computer networking concepts and protocols.
Understanding of Microsoft Windows and/or Linux operating systems.
Awareness of common cyber threats and attack techniques.
Basic understanding of privacy, data protection, governance and risk concepts.
Evidence of interest in cyber security through study, projects, placements, volunteering, professional communities or independent learning.
No previous full-time cyber security experience is required.
Abilities/Skills
Strong analytical and problem-solving potential.
Clear written and verbal communication.
Good organisation, time management and attention to detail.
Ability to communicate with technical and non-technical colleagues.
Curiosity and enthusiasm for technology and security.
Integrity, professionalism and respect for confidential information.
Willingness to ask questions, receive feedback and learn from experienced colleagues.
Ownership of assigned work and commitment to completing agreed actions.
Ability to work collaboratively across varied technical and business subject areas.
Desirable
Placement year, internship, part-time work or project experience in a technology-related environment.
Knowledge of Microsoft 365, Azure, Microsoft Sentinel, Microsoft Defender or Microsoft Entra ID.
Familiarity with scripting or automation using PowerShell or Python.
Awareness of UK GDPR and data-protection legislation.
Exposure to cyber security tools, labs, capture-the-flag exercises or university/personal security projects.
Awareness of ISO 27001, risk-management or governance concepts.
Progress towards, or interest in, certifications such as ISC2 Certified in Cybersecurity, CompTIA Security+, SC-900, SC-200 or ISO 27001 Foundation.

## Description

The Graduate Cyber Security Analyst is an entry-level development role within ICT - Information Security, reporting to the Information Security Manager. The role is designed for a recent graduate who wants to build a career in cyber security, information governance, data protection and/or risk management.
Working under the guidance of experienced colleagues, the postholder will support operational security, projects, governance, risk, compliance and data-protection activities. The role will provide structured exposure to technical and non-technical security disciplines, enabling the graduate to build core knowledge, practical experience and professional confidence.
The Information Security team protects organisational information assets, supports legal and regulatory compliance, manages cyber risk, responds to security incidents, delivers security improvements and helps embed secure practices throughout the business.
Your key responsibilities are
Assist with vulnerability-management activities across infrastructure, cloud services, applications and end-user devices.
Support security monitoring, alert triage, investigation and threat-research activities under appropriate supervision.
Assist with information security incident investigation, evidence gathering, documentation and follow-up actions.
Support security testing, control validation and remediation activity.
Help maintain security technologies, procedures, reports, metrics and management information.
Work collaboratively with project managers, business stakeholders and the PMO to support secure delivery of technology and business change.
Assist with security reviews of new systems, applications, cloud services and technologies.
Help document security requirements, actions, risks and decisions throughout project lifecycles.
Support reviews of AI, machine learning and emerging technologies to identify security, privacy, governance and risk considerations.
Support Data Protection Impact Assessments, privacy reviews and GDPR compliance activities.
Assist with personal-data breach investigations, information classification and data-handling guidance.
Support supplier and third-party security and privacy assessments.
Contribute to data governance and information-management initiatives.
Support information security risk assessments and gain experience of risk-management methods.
Assist with risk registers, action tracking, policies, standards, procedures and guidance.
Assist with evidence gathering and administration supporting ISO 27001, internal governance, regulatory compliance, audits and assurance.
Support business continuity, disaster recovery, security awareness and governance reporting.
Complete structured objectives and rotations across security operations, cyber risk, privacy, governance, projects and awareness.
Work with an assigned manager and experienced colleagues through coaching, mentoring and regular development reviews.
Undertake formal training and study towards agreed role-relevant certifications.
Participate in security forums, practical exercises, investigations, projects and continual-improvement initiatives.
Travel between company locations may be required.
Standby or out-of-hours support is not initially expected but may be reviewed as capability develops.


## Related Videos

- [Fighting the Next Wave of Cybercrime](https://www.wearedevelopers.com/videos/100331-fighting-the-next-wave-of-cybercrime)
- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Deep Fakes: The Lies We Can’t See](https://www.wearedevelopers.com/videos/1187-deep-fakes-the-lies-we-can-t-see)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk)
- [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk)
- [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market)
- [Data Engineer Salary UK](https://www.wearedevelopers.com/magazine/253-data-engineer-salary-uk)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)