Cyber Security Analyst

Salary: £? - ? per year

Requirements:

• Proven ability to plan and execute complex, multi-phase operations.
• Scenario-driven adversary simulation experience.
• Threat intelligence analysis and assessment experience.
• Experience exploiting a wide range of technologies, including infrastructure, web application and cloud platforms such as Microsoft Entra, Active Directory, M365, macOS, Kubernetes, CI/CD, AWS, and Azure.
• Experience with post-exploitation, persistence, and lateral movement, including tactical analysis of attack paths leading to high-value targets.
• Experience conducting engagement activities in line with operational security best practice and within a range of threat actor capabilities and tradecraft.
• Deep understanding of security technologies found in end-user and server operating systems and supporting infrastructure, including architectural and operational patterns of at-scale deployment and administration of complex legacy and modern enterprise environments.
• Experience using, developing, and deploying tools in support of red teaming activities, including attack infrastructure, C2 frameworks, and infrastructure-as-code technologies.
• Strong communication skills with the ability to clearly explain complex technical issues related to vulnerabilities and risk to diverse audiences, including senior stakeholders, in support of vulnerability management, threat mitigation, and risk-based decision-making.
• Desirable: experience in threat and/or vulnerability research, including publication and presentation to the wider cyber security community.
• Desirable: background in a related discipline such as protective monitoring, incident response, security engineering, or security architecture.
• Desirable: certifications in the field of red team such as CCSAS and CRTL.

Responsibilities:

• Design and execute threat intelligence-based full-spectrum cyber-attack simulations, including long-term campaign planning, persistence, and post-exploitation operations.
• Discover high-impact weaknesses across our most important technology estates and business areas, and validate whether our cyber security apparatus is working effectively.
• Communicate technical findings in clear risk- and impact-focused terms to senior stakeholders, enabling effective understanding and support for strategic decision-making.
• Develop and implement tools and methodologies to augment and automate our offensive and analytical capability.
• Mentor junior members to improve their skills and capabilities, and share knowledge with security and non-security teams to help build a culture of cyber security across the department.

Technologies:

• AWS
• Active Directory
• Azure
• CI/CD
• Cloud
• Support
• Kubernetes
• macOS
• Security
• Web

More:

We are a national institution offering a prestige cyber security opportunity in a remote role with occasional site visits to London. This position is inside IR35 / umbrella and focuses on simulated cyber-attack activity to test our defences, highlight weaknesses, and support strategic security decision-making. We are urgently hiring and invite applications from candidates who fit the profile described.

last updated 34 week of 2026