Graduate Cybersecurity Analyst

We’re DF Capital – a specialist bank providing award-winning commercial finance, retail finance, and savings products to consumers and small businesses. Based in Manchester, we serve thousands of customers across the UK and into Europe, supporting their ambitions with tailored financial solutions. We help our customers realise their ambitions by doing things differently – combining the agility and innovation of a specialist lender with the security and service standards of a regulated bank. Whether it’s flexible lending structures or straightforward savings options, we focus on what matters most to our customers. In 2025, we launched DF Capital Retail Finance – a subsidiary of DF Capital Bank Limited – to offer specialist hire purchase solutions to retail customers. Our goal is simple: to do the absolute best for our customers, our communities, and each other.

The Role:

The Junior Cyber Security Analyst will help protect DF Capital’s users, devices, cloud services, SaaS platforms and data. The role combines hands-on systems support with cyber security monitoring, secure configuration, vulnerability management, incident response support and emerging AI security controls. It is designed as a development role: strong foundational IT knowledge is expected, but the successful candidate may be fresh from university or early in their career, if they demonstrate the right security mindset, analytical ability and willingness to learn.

• Monitor and triage alerts from security tooling, endpoint controls, identity platforms, cloud services and SaaS applications, escalating where required.
• Assist with incident investigation by gathering evidence, checking user/device activity, reviewing logs, documenting actions and supporting containment steps.
• Maintain accurate service desk and security incident records, ensuring decisions, evidence and follow-up actions are captured clearly.
• Support strong identity hygiene, including MFA, conditional access, privileged access, joiner/mover/leaver controls and least-privilege access reviews.
• Assist with endpoint security activities covering device health, encryption, patching, anti-malware/EDR status and secure configuration exceptions.
• Help identify unusual access patterns, risky sign-ins and account misuse, working with the wider IT team and suppliers to remediate issues.
• Support secure operation of cloud and SaaS environments by helping review configuration, access, logging, alerting and supplier security evidence.
• Assist wider IT team with vulnerability remediation, secure configuration baselines and operational resilience activities.
• Maintain documentation for cloud and SaaS security controls, including asset ownership, logging coverage, support contacts and escalation paths.
• Support safe adoption of AI-enabled tools by helping assess data protection, prompt/data leakage, access control, model governance and supplier assurance considerations.
• Assist with monitoring and control activities relating to sensitive data, data classification, data retention and inappropriate sharing of company information.
• Contribute to AI security guidance, awareness material and practical checks that help colleagues use approved AI tools safely and responsibly.
• Track vulnerabilities, misconfigurations and control gaps through to remediation, ensuring owners, priorities, evidence and exceptions are documented.
• Support audit, Cyber Essentials Plus, ITGC, penetration testing and supplier assurance evidence gathering where required.
• Create and maintain clear, usable procedures, runbooks, knowledge articles and technical notes for both IT colleagues and non-technical stakeholders.
• Support cyber awareness initiatives, new starter cyber induction and practical guidance for employees on phishing, passwords, AI usage and secure working.
• Communicate technical information in a clear, calm and approachable way, avoiding unnecessary jargon.
• Develop a strong understanding of DF Capital’s business, risk appetite and regulatory environment so technical recommendations are proportionate and business aware.