Senior Cyber Security Analyst

JR United Kingdom; Yockleton; Hybrid; GBP 45,000; Full time

Job summary

A leading intelligence agency in the UK is seeking a Senior Cyber Security Analyst to protect against cyber threats. The role involves investigating incidents, analyzing logs, and leading process improvements. Candidates should have a background in cybersecurity and strong problem-solving skills. Flexible working arrangements are available, and the position offers a competitive salary with various benefits.

Benefits

25-30 days annual leave

Employee recognition schemes

Interest-free season ticket loan

Pension scheme

Cycle to work scheme

Onsite facilities

Paid parental leave

Qualifications

• At least 6 months of experience as a Cyber Security or SOC Analyst.
• Experience with host intrusion detection analysis preferred.

Responsibilities

• Investigating malware outbreaks and phishing attacks.
• Leading efforts to improve operating processes and mentoring junior analysts.

Skills

Communication

Problem Solving

Tools

Splunk

Job description

Job Description

Senior Cyber Security Analyst

Cheltenham

£44,044 (includes £2,658 non-concessionary payment)

Flexible working: We recognise the importance of a healthy work-life balance and offer full-time, part-time, and compressed hours. While hybrid working can be more restricted, due to the nature of the work, around 40% home working may be available depending on business needs.

About Us

GCHQ is an intelligence, cyber and security agency with a mission to keep the UK safe. We use cutting-edge technology, ingenuity and partnerships to identify, analyse and disrupt threats. Working with our intelligence partners MI5 and MI6, we protect the UK from terrorism, cyber-attacks and espionage. At GCHQ you’ll do varied and fascinating work in a supportive and inclusive environment that emphasizes teamwork.

The Role

As a Senior Cyber Security Analyst, you’ll be key to protecting our organisation against a range of cyber threats. Your responsibilities include investigating malware outbreaks, insider activity, denial-of-service attacks, and phishing; detecting, responding to, and mitigating risks.

Daily tasks may involve analyzing logs, network traffic, and endpoint activity using tools like Splunk, monitoring security alarms, creating detection content, using threat intelligence, and responding to breaches. Each day begins with a team meeting to review investigations and plan next steps.

You will lead efforts to improve operating processes, mentor junior analysts, and provide expert guidance. Opportunities include diving into Digital Forensics and supporting security incidents, as well as staying up-to-date with the latest cybersecurity tools and techniques.

About You

You should have a background in cyber security analysis and a passion for IT. Experience with host intrusion detection analysis is preferred but training will be provided. You should have a solid understanding of Windows and Linux operating systems.

You need at least 6 months of experience as a Cyber Security or SOC Analyst. As a leader, you should be comfortable working independently and collaborating with IT teams and network administrators. Strong communication and problem-solving skills are essential.

Training and Development

We support your growth through internal and external training, opportunities to work across cybersecurity specialisms, and support for industry-recognized qualifications like SANS and CISSP. Travel opportunities are infrequent and optional.

Rewards and Benefits

Starting salary of £44,044 plus benefits including 25-30 days annual leave, employee recognition schemes, interest-free season ticket loan, pension scheme, cycle to work scheme, onsite facilities, and paid parental leave.

Equal Opportunities

We value diversity and inclusion, encouraging applications from under-represented groups. Find out more on our website: Diversity and Inclusion.

Disability Confidence

GCHQ is a Leader in the DWP’s Disability Confident scheme, committed to fair recruitment and support for disabled applicants. Minimum criteria for interview include 6 months’ experience as a Cyber Security/SOC Analyst, experience in malware analysis, intrusion detection, incident response, or line management/delegation.

What to Expect

Our recruitment process includes application review, virtual interviews, and conditional job offers. The process can take 6-9 months, and applicants should continue current employment until final offers are received.

Before You Apply

Applicants must be UK citizens or dual nationals, and able to obtain Developed Vetting security clearance. Consider practicalities such as residence, travel, and email security before applying. The role is based in Cheltenham; no relocation costs are provided. Applications from overseas should be made in the UK.

Right to Withdraw

We may close the application process early once sufficient applications are received. Submit your application promptly to avoid missing out.