MLM SEARCH
Cyber Security Analyst
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Cyber Security Analyst— First Line (Hands-On)
London (hybrid) · Permanent · up to £65,000
A well-established, regulated organisation is hiring a hands-on, first-line Cyber Security Analyst to own its operational security day to day. This is a builder-operator role for someone who thinks like an attacker — not a governance or audit seat.
You'll be the person who finds the weaknesses before anyone else does, drives them to closure, and keeps the estate hard to hit. You'll work autonomously, close to the technology, with the room to shape how first-line security runs.
What you'll actually do
- Own the vulnerability management life-cycle end to end — scan, prioritise, drive remediation to SLA, and prove it's closed (Tenable / Qualys / Rapid7).
- Scope and run penetration testing and red/purple-team exercises, turning findings into real fixes rather than reports.
- Reduce attack surface with an adversary's eye — think in TTPs and MITRE ATT&CK, not just tickets.
- Support threat detection and incident response — triage, contain, learn, improve.
- Embed security into day-to-day operations and tooling; automate the dull bits.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What we're looking for
- Genuine first-line, hands-on security experience — you operate the tools, you don't just review reports.
- An offensive/purple-team mindset — pen testing, exploitation, attack-surface work, or hands-on detection engineering.
- Strong with vulnerability tooling and comfortable across cloud and endpoint.
- Able to work independently and translate technical risk into plain language.
- Certs welcomed: OSCP, CEH, PNPT, CompTIA Security+/CySA+, or equivalent hands-on evidence (a home lab / GitHub counts).
Get help with your application
Your very own career expert that helps elevate your application to the next level.
This is not a purely GRC, audit, or compliance role. If your day is spent in risk registers and evidence packs rather than in the tooling, this one won't stretch you.
Right to work in the UK required. London-based / commutable.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location