Cyber Security Analyst (Security Advisor/Analyst)

Overview

In this role you will support NHS England’s cyber resilience by providing second-line cloud security analytics, monitoring and incident response across cloud environments. You will act as a point of escalation for Tier 1 analysts, mentor junior staff, and stay ahead of evolving cloud threats. You will apply advanced analytics and cloud security tools to strengthen detection and response, while helping improve monitoring coverage and overall security posture. This position offers a meaningful chance to contribute to a trusted, cyber-secure health system.

Pay / Benefits

• RRP payment equal to 20% per annum
• Permanent contract
• Salary band 59,264.40 to 67,818 per year
• Flexible working
• Office-based/hybrid requirements (40% office time)

Responsibilities

• Deputise for Senior Analysts and oversee cloud security monitoring and response
• Escalate and mentor Tier 1 analysts on cloud security incidents and investigations
• Stay updated on security and cloud tech developments; research emerging threats
• Use SIEM and cloud security platforms to detect threats and anomalies in cloud environments
• Support investigation and triage of cloud security alerts and incidents
• Refine cloud detection use cases to improve monitoring coverage and security posture
• Provide technical support to NHS organisations in incident response

Key requirements

• 1+ years of experience in a Cyber Operations environment (analyst role)
• Knowledge of SIEM concepts and usage
• Experience with intrusion detection and prevention
• Knowledge of cloud security principles and threat monitoring
• Bachelor’s Degree in Cyber Security or a relevant subject
• Desirable: SANS SEC504 (GIAC GCIH) or Microsoft SC-200
• Security Clearance requirements (UK residency: 5 years, or 3 years with additional overseas checks)
• Eligibility for NHS ESR and IAT/SC clearance processes

• Mentorship and coaching
• Analytical thinking
• Collaboration and teamwork
• Security Information and Event Management (SIEM)
• Cloud security platforms and monitoring
• Threat monitoring and incident response in cloud environments

…