Senior Cyber Security Analyst

JR United Kingdom; Broadway; Hybrid; GBP 44,000 - 51,000; Full time

Job summary

A leading intelligence agency seeks a Senior Cyber Security Analyst to protect against cyber threats. The role involves detecting and responding to risks, mentoring junior analysts, and opportunities for training and development. Flexible working options are available.

Benefits

25 days annual leave, rising to 30 after 5 years

Employee recognition schemes

Interest-free season ticket loan

Excellent pension scheme

Cycle to work scheme

On-site facilities like gym, restaurant

Paid parental and adoption leave

Qualifications

• Minimum 6 months experience as a Cyber Security or SOC Analyst.
• Solid understanding of Windows and Linux operating systems.

Responsibilities

• Detecting, responding to, and mitigating risks from cyber threats.
• Monitoring security alarms and creating detection content.

Skills

Communication

Problem Solving

Tools

Splunk

Job description

Job Description

Senior Cyber Security Analyst

Location: Cheltenham

Salary: £44,044 (including £2,658 non-concessionary payment)

Flexible working: We recognise the importance of a healthy work-life balance and offer full-time, part-time, and compressed hours. While hybrid working can be more restricted due to the nature of the work, around 40% home working may be available depending on business needs.

About Us

GCHQ is an intelligence, cyber, and security agency with a mission to keep the UK safe. We use cutting-edge technology, ingenuity, and partnerships to identify, analyse, and disrupt threats. Working with our intelligence partners MI5 and MI6, we protect the UK from terrorism, cyber-attacks, and espionage. At GCHQ, you’ll do varied and fascinating work in a supportive and inclusive environment that emphasizes teamwork.

The Role

As a Senior Cyber Security Analyst, you’ll be key to protecting our organisation against a range of cyber threats. Your responsibilities include detecting, responding to, and mitigating risks from malware outbreaks, insider activity, denial-of-service attacks, and phishing. Your daily tasks may involve investigating high-priority alerts, analyzing logs, network traffic, and endpoint activity using tools like Splunk. You will monitor security alarms, create detection content, use threat intelligence, respond to breaches, and review ongoing investigations in team meetings. Leadership and continuous improvement are essential, including mentoring junior analysts and guiding new initiatives. Opportunities to explore Digital Forensics and support security incidents are also available.

About You

You should have a background in cyber security analysis and a passion for IT. Experience with host intrusion detection analysis is preferred, but training will be provided. You must have a solid understanding of Windows and Linux operating systems. A minimum of 6 months experience as a Cyber Security or SOC Analyst is required. You should be comfortable working independently and collaboratively, with strong communication and problem-solving skills, especially when working with IT teams and network administrators.

Training and Development

We support your growth with internal and external training, opportunities to work across various cyber security specialisms, and support for industry-recognized qualifications such as SANS and CISSP. Travel to conferences and staying updated with cyber security innovations are also encouraged, though travel is not mandatory.

Rewards and Benefits

You will receive a starting salary of £44,044, plus benefits including:

• 25 days annual leave, rising to 30 after 5 years, plus 10.5 days public holidays
• Employee recognition schemes
• Interest-free season ticket loan
• Excellent pension scheme
• Cycle to work scheme
• On-site facilities like gym, restaurant, coffee bars (at some locations)
• Paid parental and adoption leave

Equal Opportunities

At GCHQ, diversity and inclusion are vital. We welcome applications from all backgrounds, including under-represented groups such as women, ethnic minorities, disabled people, and those from low socio-economic backgrounds. More about our culture and diversity initiatives can be found on our website: Diversity & Inclusion.

Disability Confidence

We are a Disability Confident Leader, committed to fair recruitment and development of disabled applicants. To qualify for an interview, applicants should have at least 6 months’ experience as a Cyber Security/SOC Analyst, with evidence in malware analysis, intrusion detection, incident response, or team management. Support and reasonable adjustments are available during the process.

What to Expect

The recruitment process includes:

1. Application sift
2. Virtual competency and technical interview
3. Conditional job offer

It may take 6-9 months, including vetting, so continue current employment until final offer.

Before You Apply

Applicants must be UK citizens or hold dual British nationality and undergo Developed Vetting (DV) clearance. Consider practicalities like residence within a commutable distance to Cheltenham, as relocation costs are not covered. Only applications from within the UK are accepted, and application details should be kept confidential.

Right to Withdraw

We may close the application early once sufficient applications are received, so apply promptly.