> Markdown version of [/jobs/ext/3877953-associate-security-analyst-central-government](https://www.wearedevelopers.com/jobs/ext/3877953-associate-security-analyst-central-government). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Associate Security Analyst - Central Government

- **Company:** Spinwell Global Limited
- **Location:** London, UK
- **Experience:** Experienced
- **Salary:** £63,827.0
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Computer Networks, Kusto Query Language, Security Information and Event Management, Cloud Platform System, Microsoft Sentinel, Splunk
- **Published:** October 23, 2026
- **Apply:** https://www.adzuna.co.uk/jobs/details/5939048282

## About the Role

* at least 2-3 years experience in a position of Cyber Security Analyst
 * working experience of Splunk
 * working experience of M365 (Microsoft Defender / Sentinel / KQL)
 * experience investigating and responding to cyber incidents
 * experience using security tools (e.g., EDR, SIEM) to support the investigation and response to cyber incidents
 * Experience with SIEM tools (experience of Splunk preferred but experience of Microsoft Sentinel or an equivalent SIEM tool is acceptable)
 * an understanding of the tools, techniques and procedures commonly used by threat actors
 * good analytical and problem-solving skills
 * good verbal and written communication skills

## Description

* triage and investigate cyber security alerts and reports from users
 * use a variety of techniques to analyse systems, files, network traffic and cloud environments and understand the nature and extent of possible cyber incidents
 * support the technical response to cyber incidents by identifying and implementing (or supporting the implementation of) containment, eradication and recovery actions
 * support the coordination of cyber incidents
 * contribute to post-incident reviews to identify lessons and actions
 * identify opportunities for, and support the delivery of, continual improvements to the incident investigation and response capability
 * work closely alongside other Cyber Defence functions, supporting the continual improvement of wider capabilities
 * contribute to internal plans, playbooks and knowledge base articles
 * act as an escalation point for, and provide coaching and mentoring to, apprentice security analysts
 * be responsible for line management of apprentice security analysts
 * Cyber incidents can and do arise on a 24/7 basis. The team operates an out-of-hours on call rota.