Cyber Security Analyst, Infrastructure & Networks (Tier 2)

NHS England; Exeter; Hybrid; GBP 52,000 - 76,000; Full time

Benefits offered by this job

RRP (Recruitment and Retention Premium

20% annual premium

Job summary

NHS England is seeking a Cyber Security Analyst in the Infrastructure and Networks teams within the Protective Monitoring area of the national CSOC. This Tier 2 role supports triage, incident handling and mentoring of junior analysts, using SIEMs and XDR platforms to detect threats and improve security posture.

The role emphasizes second-line security analytics, incident response, and collaboration with NHS organisations to strengthen cyber resilience across the health system.

Qualifications

• Experience as a Tier 2 Infrastructure and Networks analyst in a Security Operations Centre.
• Proven ability to mentor and guide Tier 1 analysts.
• Strong incident handling, triage and investigations skills.
• Familiarity with security analytics and threat detection.
• Experience refining Use Cases and improving security posture.

Responsibilities

• Act as a Tier 2 Infrastructure and Networks analyst for the Security Operations team.
• Deputise for Senior Analysts in their absence.
• Escalate for Tier 1 incidents and investigations.
• Mentor Tier 1 analysts to support growth and development.
• Keep up to date with security threats and technology developments.
• Use SIEMs/XDR to identify threat patterns and vulnerabilities.
• Assist investigations of triggered security alerts and refine Use Cases.
• Provide technical support to NHS organisations during incidents.

Skills

Tier 2 SOC analyst

SOC experience

Mentorship & guidance

Incident handling & triage

Use case refinement

Security analytics

Tools

SIEM

XDR platforms

Job description

NHS England is seeking a Cyber Security Analyst in the Infrastructure and Networks teams within the Protective Monitoring area of the national CSOC. This Tier 2 role supports triage, incident handling and mentoring of junior analysts, using SIEMs and XDR platforms to detect threats and improve security posture.

The role emphasizes second-line security analytics, incident response, and collaboration with NHS organisations to strengthen cyber resilience across the health system.