Cyber Defence Analyst: Incident Response & Automation

Bank of England; Leeds; Hybrid; GBP 40,000 - 50,000; Full time

Benefits offered by this job

Pension

Bonus eligibility

Benefits allowance

26 days' annual leave

Private medical insurance

Income protection

Job summary

The Bank of England's Cyber Defence Centre is recruiting a Cyber Analyst (Permanent, Full Time) located in Leeds or London. You will join a security-focused team responsible for detecting and responding to cyber-threats, supporting incident response, and driving automation across detection and response processes.

You will work with MITRE ATT&CK, Splunk, and SOAR platforms, contributing to secure-by-design initiatives and professional development.

Qualifications

• Good understanding of best practice security incident response concepts and approaches.
• Practical experience in technical cyber security incident response methodologies.
• Excellent written and verbal communication skills.
• Experience working in Security Operations Centre with triaging alerts and IR practices.
• Knowledge of networks, protocols and infrastructure (packet capture, firewalls, DNS).
• Ability to convey complex information clearly.
• Willingness to learn new cyber security skills.
• Logical mindset and ability to document IR processes.
• GCIH or similar qualification in Security Incident response.
• DV clearance eligibility (UK citizenship and ties to the UK).
• Understanding of cyber threats and ATT&CK techniques.
• Experience using automation / SOAR platforms.
• Experience with incident response principles and threat intel.
• Experience using MITRE ATT&CK and Splunk.
• Software development, scripting or programming skills.

Responsibilities

• Take part in the operations rota to thoroughly investigate security alerts and escalate appropriately.
• Contribute to Cyber Security incident response activities as part of the wider team.
• Seek opportunities to improve detection and response through automation and tooling.

Skills

Security incident response

SOC triage

Security communications

Network fundamentals

IR playbooks

Automation / SOAR

MITRE ATT&CK

Splunk

Intelligence platform

Scripting / programming

DV clearance eligibility

Tools

Splunk

SOAR platforms

MITRE ATT&CK

Job description

The Bank of England's Cyber Defence Centre is recruiting a Cyber Analyst (Permanent, Full Time) located in Leeds or London. You will join a security-focused team responsible for detecting and responding to cyber-threats, supporting incident response, and driving automation across detection and response processes.

You will work with MITRE ATT&CK, Splunk, and SOAR platforms, contributing to secure-by-design initiatives and professional development.