Cyber Security Analyst

Deerfoot Recruitment Solutions Limited; Bath; Hybrid; GBP 60,000 - 65,000; Full time

Benefits offered by this job

Hybrid work in Bath (2 days/week)

Discretionary bonus

Private medical

Pension scheme

Income protection

Life assurance

Season ticket loan

Job summary

Deerfoot Recruitment Solutions Limited seeks a hands-on Cyber Security Analyst for a fast-growing financial services group. The role blends policy input with practical security management across Microsoft 365, Entra ID, Purview and on‑premises environments.

You will respond to live incidents, drive security monitoring, and work with the Head of Information Security to shape policy and controls. Hybrid work with 2 days per week in Bath; £60,000-£65,000 base plus discretionary bonus and benefits.

Qualifications

• 3+ years’ hands-on cyber security experience.
• Experience with Microsoft 365, Entra ID and Purview.
• Strong knowledge of ISO 27001 and GDPR obligations.

Responsibilities

• Shape and deliver the organisation’s security policy and strategy.
• Implement and monitor security controls across systems and data.
• Detect, respond to and remediate cyber incidents, manage vulnerabilities and patching.
• Conduct security assessments, reviews and support regulatory/audit activity.
• Advise projects on secure-by-design principles and improve monitoring capabilities.

Skills

Microsoft 365

Entra ID

Purview

endpoint security

SIEM

vulnerability management

incident response

security monitoring

ISO 27001

GDPR

regulatory knowledge

Education

CISSP

CISM

CCSP

GIAC

Tools

KQL

JSON

Purview DLP

EDR

Job description

Cyber Security Analyst

£60,000 - £65,000 + Benefits + Bonus

Hybrid - 2 Days per Week in Bath

Are you a hands-on cyber security professional looking for your next challenge with a fast-growing, forward-thinking financial services group? This is your chance to join a business that’s investing heavily in its security function, giving you real ownership over how it protects its systems, its people, and its clients’ data.

You’ll work closely with the Head of Information Security, playing a central role in shaping security policy, responding to live incidents, and driving forward the tools and processes that keep the organisation resilient. If you want a role with genuine variety, autonomy, and the backing of a business that takes security seriously, this is well worth a conversation.

What you’ll be doing:

• Working alongside the Head of Information Security to shape and deliver the organisation’s security policy and strategy


• Implementing and monitoring security controls across systems, networks, applications and customer data, including cloud and on-premises environments (Microsoft 365, Entra ID, servers, endpoints and network infrastructure)


• Detecting, responding to and remediating cyber incidents, and overseeing vulnerability management and patching in partnership with IT and the wider business


• Running security assessments and testing - configuration reviews, penetration test remediation and risk assessments - and supporting regulatory and audit activity (FCA, GDPR, ISO 27001)


• Advising projects and technology teams on secure-by-design principles, and continuously improving security monitoring, automation and detection capabilities

What you’ll bring:

• 3+ years’ experience in a cyber security role, with hands-on knowledge of Microsoft 365, Entra ID, Purview, endpoint security, SIEM and vulnerability management


• Proven experience in incident response and security monitoring


• Solid understanding of ISO 27001, GDPR and financial services regulatory requirements


• An advanced security certification such as CISSP, CISM, CCSP, GIAC or equivalent


• Experience conducting security assessments, technical reviews and supporting audit activities


• It would also be great (but not essential) if you had exposure to cloud security, security automation or architecture, FCA/PRA/DORA and cyber resilience requirements, mentoring or leading technical projects, SIEM/EDR/IAM tooling, Microsoft Purview DLP, or KQL/JSON for queries and automation

What’s on offer:

• £65,000 base salary with discretionary annual bonus


• Hybrid working - just 2 days a week in the Bath office


• 34 days’ holiday (including bank holidays), with the option to buy or sell up to 5 additional days


• Private medical, income protection and life assurance cover


• A generous pension scheme, interest-free season ticket loan, and a paid day off each year for a life event

If you’ve held any of these roles or used these technologies/skills, this role could be a great fit: Cyber Security Analyst, Information Security Analyst, IT Security Analyst, SOC Analyst, Security Operations Analyst, Cyber Security Engineer, Security Analyst, Vulnerability Management Analyst, Incident Response Analyst, or Security Compliance Analyst, and/or experience with Microsoft 365, Entra ID, Microsoft Purview, SIEM, EDR, ISO 27001, GDPR, CISSP, CISM, CCSP, GIAC, KQL, or JSON.