Cloud Security Analyst - Cyber Ops & Incident Response

NHS England; Exeter; On-site; GBP 50,000 - 70,000; Full time

Job summary

NHS England is seeking a Cyber Security Analyst (Cloud) to join the Security Operations Centre, delivering second-line cloud security analytics, monitoring and incident response across cloud environments.

The role involves deputising for Senior Analysts, mentoring Tier 1 staff, and keeping pace with evolving cloud threat landscapes using SIEM and cloud security platforms. Office-based with hybrid expectations within the CSOC.

Qualifications

• 2nd line cloud security analytics, monitoring and incident response across cloud-hosted environments and platforms.
• Mentor Tier 1 Junior Analysts to build capability in cloud threat monitoring, investigation and response.
• Keep up to date with latest security and cloud tech developments, including researching emerging cloud threats.

Responsibilities

• Deputise for Senior Analysts in their absence, supporting oversight of cloud security monitoring and response activity.
• Act as an escalation point for Tier 1 Junior Analysts for cloud security incidents, alerts and investigations.
• Provide technical guidance to Tier 1 Analysts to develop cloud threat monitoring, investigation and response skills.
• Use advanced analytic tools to identify threat patterns, suspicious activity and vulnerabilities across cloud environments.
• Assist with refining cloud detection use cases and improving monitoring coverage and security posture.
• Provide technical support to NHS organisations in investigating and responding to cloud security incidents.

Skills

Cloud security

Incident response

Mentoring

Threat monitoring

Tools

SIEM

Cloud security platforms

Job description

NHS England is seeking a Cyber Security Analyst (Cloud) to join the Security Operations Centre, delivering second-line cloud security analytics, monitoring and incident response across cloud environments.

The role involves deputising for Senior Analysts, mentoring Tier 1 staff, and keeping pace with evolving cloud threat landscapes using SIEM and cloud security platforms. Office-based with hybrid expectations within the CSOC.