Cyber Security Analyst

JR United Kingdom; Kemble; Hybrid; GBP 37,000; Full time

Job summary

A leading intelligence agency is seeking a Cyber Security Analyst to join their team in Cheltenham. The role involves defending against cyber threats, analyzing data, and developing detection content. Candidates should have a passion for IT and cybersecurity, relevant certifications, and strong teamwork skills. The agency offers a supportive environment with opportunities for training and development, alongside a competitive salary and benefits.

Benefits

25 days annual leave

Recognition schemes

Interest-free season ticket loan

Excellent pension scheme

Cycle to work scheme

On-site facilities (gym, restaurant, coffee bars)

Paid parental and adoption leave

Qualifications

• Experience with scripting and knowledge of Windows and Linux OS.
• At least 6 months of experience in cybersecurity.

Responsibilities

• Defend against cyber threats such as malware and phishing.
• Detect, respond to, and mitigate risks using tools like Splunk.

Skills

Scripting

Teamwork

Communication

Problem Solving

Education

Foundation-level cybersecurity certification

Tools

Splunk

Python

AWS

Azure

Job description

Job Description

Cyber Security Analyst

Location: Cheltenham

Salary: £36,408 (including £2,658 non-concessionary payment)

Flexible working: We recognize the importance of work-life balance and offer full-time, part-time, and compressed hours. Hybrid working may be available, with around 20% home working depending on business needs.

About Us

GCHQ is an intelligence, cyber, and security agency dedicated to keeping the UK safe. We utilize cutting-edge technology, ingenuity, and partnerships to identify, analyze, and disrupt threats. Collaborating with MI5 and MI6, we protect against terrorism, cyber-attacks, and espionage. Join us to work in a supportive and inclusive environment emphasizing teamwork.

The Role

As a Cyber Security Analyst, you will work with a close-knit team to defend against cyber threats such as malware, insider activity, DDoS attacks, and phishing. Your responsibilities include detecting, responding to, and mitigating risks, analyzing alerts, logs, network traffic, and endpoint data using tools like Splunk, and developing detection content. You will also utilize threat intelligence to enhance security and respond swiftly to incidents. Opportunities to explore Digital Forensics and develop your skills in operational security strategies are available.

About You

You should have a passion for IT and cybersecurity, experience with scripting, knowledge of Windows and Linux OS, and familiarity with Python. Interest in AWS and Azure is desirable. Candidates must hold a foundation-level cybersecurity certification (e.g., CompTIA A+, Network+, Security+), or have at least 6 months of experience in cybersecurity. Strong teamwork, communication, and problem-solving skills are essential.

Training and Development

We support your growth through in-house, on-the-job, and external training, including industry-recognized certifications from SANS and OFFSEC. You will be paired with a mentor and gain hands-on experience in threat detection, incident response, and operational strategies. Opportunities to attend conferences and stay updated on cybersecurity innovations are available, with travel being optional and infrequent.

Rewards and Benefits

Starting salary: £36,408 plus benefits such as:

• 25 days annual leave, rising to 30 after 5 years, plus public holidays
• Recognition schemes
• Interest-free season ticket loan
• Excellent pension scheme
• Cycle to work scheme
• On-site facilities (gym, restaurant, coffee bars)
• Paid parental and adoption leave

Equal Opportunities

We value diversity and inclusion, encouraging applications from underrepresented groups, including women, ethnic minorities, people with disabilities, and those from low socio-economic backgrounds. Learn more at our website: Diversity & Inclusion.

Disability Confidence

GCHQ is a Disability Confident Leader, committed to fair recruitment and support for disabled applicants. The minimum criteria for interview consideration include relevant certifications or 6 months of cybersecurity experience. Reasonable adjustments are available during the process.

What to Expect

The recruitment process includes:

1. Application review based on motivation and skills
2. Virtual competency and technical interview
3. Conditional job offer upon success

Application processing may take 6-9 months, including vetting. Continue current employment until final offer.

Before You Apply

Applicants must be UK citizens or hold dual British nationality. The role requires Developed Vetting (DV) security clearance. Please consider the implications of the strict drugs policy, and prepare a separate email for correspondence. The role is based in Cheltenham; relocation costs are not covered. Applications from outside the UK should be made only when visiting the UK.

Right to Withdraw

We may close applications early once sufficient applications are received. Submit early to avoid missing out.