This role requires successful candidates to obtain and maintain UK Government Security Clearance to SC or above.

The Right Applicant

We are looking for a team player to join as a security analyst in our emerging MDR service. Due to the dynamic nature of our business, we require an individual who is flexible, deployable on a broad scope of tasks, can communicate effectively to others, and can learn at pace. We need someone who is confident in their own skills and will work autonomously on tasks and personal development. Self-awareness and the ability to ask for help when appropriate are among the key attributes we are looking for.

We are a values-based organisation, and we leave our egos at the front door. We need people who are tenacious, passionate, have the highest integrity, and want to be part of building a world class security team.

Role Overview

As an analyst, your primary role within the CYSIAM team will be to conduct investigation of host and network security events for our client’s critical infrastructure. Role duties will include:

• Monitor, triage, and escalate security alerts on critical client infrastructure.
• Perform initial investigation and enrichment of security events using available tools and documentation.
• Follow established runbooks and standard operating procedures for incident handling.
• Escalate suspected incidents to L2 analysts for further investigation.
• Assist in the creation and maintenance of incident tickets and documentation.
• Support the team in maintaining accurate and up-to-date records of security events.
• Contribute to knowledge base articles and documentation where appropriate.
• Identify false positives and recurring alert patterns, and provide feedback to support tuning of detection rules.
• Work as part of a team to help safeguard corporate data and technology platforms from known threats.

Must-Have Technical Expertise

• 0–1 year of experience in a Security Operations Centre or relevant IT/security role (internships or labs acceptable).
• Basic understanding of common cyber threats and attack techniques.
• Familiarity with the MITRE ATT&CK framework (awareness level).
• Basic knowledge of networking concepts such as TCP/IP, LAN/WAN, and common protocols (HTTP, SMTP, FTP, DNS).
• Familiarity with log analysis and security monitoring tools (SIEM exposure preferred).
• Strong attention to detail and willingness to learn.
• Good written and verbal communication skills.
• Ability to follow processes and work in a shift-based environment.

Bonus Skills (Helpful but not Required)

• Exposure to SIEM platforms such as Splunk or endpoint tools like CrowdStrike Falcon.
• Basic scripting or automation knowledge (e.g., Python, PowerShell).
• Understanding of fundamental security concepts (phishing, malware, brute force attacks).
• Relevant certifications (e.g., CompTIA Security+, Network+, BTL1).

Culture & Benefits

The CYSIAM team is fiercely supportive of each other both in our personal and professional lives. We are very flexible in our working arrangements and trust people by default to deliver their output without constant supervision. In return, we ask for loyalty, a strong work ethic, and your best self. We offer a competitive salary and incentives, 25 days of holiday (which builds up to 30 days over the first 5 years of employment), a pension, group life cover, and company away days. Employee benefits will increase as the company grows.