Closing Date: 04/09/2026 Cyber Security Analyst Bowburn - Salaried Central Services Explore

Esh Group; United Kingdom; Remote; GBP 25,000 - 38,000; Full time

Job summary

Esh Group in Bowburn is recruiting a Cyber Security Analyst to act as the internal coordinator for cyber security improvement, ensuring risks and recommendations are tracked to completion. This role is positioned as a graduate or early-career development opportunity for someone with genuine passion for cyber security.

You will work across IT and business, support governance and incident response, and help build repeatable security processes to measure progress and resilience.

Qualifications

• Cyber security experience or related degree or equivalent learning.
• Graduate or early-career candidate seeking practical security experience.
• Desirable: awareness of Microsoft security tooling, ISO 27001, Cyber Essentials or business continuity principles.

Responsibilities

• Coordinate cyber security improvement activities across IT and business, tracking actions and evidence.
• Track vulnerabilities, hardening recommendations, cyber insurance actions and security improvement tasks through to completion.
• Support monitoring, reporting and continual improvement across key security platforms.
• Assist with phishing simulation, Email Protection, Patching and security tooling visibility.
• Assist with incident response preparation, tabletop exercises and lessons learned activity.
• Help maintain cyber risk records, remediation logs and evidence packs for IT leadership.
• Support governance, including Cyber Essentials, ISO 27001 readiness and GDPR-aligned controls.
• Work with internal teams and service providers to progress remediation and improve SOC/MDR reporting.

Skills

Cyber Security

Information Security

Vulnerability management

Education

Degree or equivalent qualification

Tools

Microsoft security tooling

SIEM

Job description

Cyber security is now a continuous business function. This role will help turn the organisation’s cyber security investment into measurable risk reduction, stronger resilience and clearer governance.

About the role:

We are recruiting a Cyber Security Analyst to act as the internal coordinator for cyber security improvement activity, ensuring identified risks, vulnerabilities and recommendations are tracked, owned and driven through to completion. The role is positioned as a graduate or early-career development opportunity for someone with genuine passion for cyber security and the drive to build long-term internal capability.

Location:

Bowburn

What we will expect from you:

• Coordinate cyber security improvement activities across the IT function and wider business, helping ensure actions are progressed and evidenced
• Track vulnerabilities, hardening recommendations, cyber insurance actions and security improvement tasks through to completion
• Support ongoing administration, monitoring, reporting and continual improvement across key security platforms
• including Phishing simulation, Email Protection, Patching, Microsoft security tooling and Insider threat tooling
• Assist with Microsoft Secure Score improvements, operating system patching visibility, third-party patching, phishing simulation outcomes and awareness training activity
• Help maintain cyber risk records, action plans, remediation logs, evidence packs and management reporting for IT leadership and relevant stakeholders
• Support cyber incident response preparation, tabletop exercises, simulations and lessons learned activity
• Assist with business continuity planning, disaster recovery validation, recovery testing and resilience improvement work
• Support governance and compliance activity, including Cyber Essentials, ISO 27001 readiness, GDPR-aligned security controls, audit preparation and supplier/partner evidence requests
• Help develop repeatable security processes so cyber improvement activity becomes measurable, consistent and less reactive
• Work with internal teams, external partners and service providers to progress remediation, improve reporting and support future maturity across SOC/MDR, SIEM, 24/7 monitoring and advanced detection options
• The Group is committed to achieving a high standard of Health and Safety in all its activities and the post holder will be expected to contribute to maintaining standards to ensure compliance with all appropriate legislation
• To participate in any identified training or development opportunities
• To recognise the importance of fairness and equality in the workplace, to treat everyone with dignity and respect

It is not possible for this document to define all tasks that may be required of the person. The outlined duties may therefore vary from time to time without materially changing either the character or level of responsibility.

What to Expect from us:

• Care: We prioritise your wellbeing and development, offering a supportive environment where you’re encouraged to grow, learn, and bring your best self to work
• Trust: You’ll have the autonomy to take ownership of your work, with managers who believe in your abilities and are there to support you when needed
• Integrity: We do the right thing, even when it’s not the easiest option. You can rely on open, honest communication and fair decision making
• Respect: We value diverse perspectives and create a workplace where everyone is listened to, valued, and treated with dignity
• Working Together: Collaboration is at the heart of how we operate. You’ll join a team that celebrates shared success and supports one another to achieve great results

Together, these values create a workplace where people feel welcome, trusted, appreciated, and proud to be part of the team.

Qualifications:

• Cyber Security, Information Security or a related qualification, degree or equivalent practical learning
• Suitable for a capable graduate or early-career candidate looking to develop practical security experience in a supportive internal IT environment
• Desirable: awareness of Microsoft security tooling, endpoint security, vulnerability management, cyber incident response, ISO 27001, Cyber Essentials or business continuity principles
• Desirable: entry-level cyber certifications or willingness to work towards relevant qualifications, such as Microsoft Security fundamentals, CompTIA Security+ or equivalent

Attributes & Skills:

• Genuine passion for cyber security and a strong desire to develop technical knowledge and practical experience
• Highly self-motivated, organised and able to manage tasks through to completion
• Shows initiative, ownership and curiosity, with the confidence to follow up actions and challenge where appropriate
• Clear communicator who can work collaboratively with colleagues, suppliers and partners at different technical levels
• Analytical mindset with good attention to detail and the ability to turn findings into clear actions and evidence
• Able to balance independent working with teamwork, asking for support when needed and sharing progress clearly
• Comfortable working across multiple workstreams, including security tooling, risk remediation, resilience planning and reporting