Cyber Security Analyst – First Line (Hands‑On)

About the role

We are looking for a hands‑on, first‑line Cyber Security Analyst to own day‑to‑day operational security. You will work autonomously in a hybrid London setting, focusing on finding and fixing weaknesses before they can be exploited.

Key responsibilities

• Own the full vulnerability management lifecycle – scanning, prioritising, driving remediation to SLA and confirming closure using Tenable, Qualys or Rapid7.
• Scope and run penetration testing and red/purple‑team exercises, turning findings into concrete fixes.
• Reduce the attack surface by applying adversary tactics, techniques and procedures (TTPs) and the MITRE ATT&CK framework.
• Support threat detection and incident response activities – triage alerts, contain incidents, learn and improve processes.
• Embed security into daily operations and tooling, automating repetitive tasks where possible.

Required profile

• Hands‑on first‑line security experience – you operate the tools, not just review reports.
• Offensive or purple‑team mindset with experience in pen testing, exploitation or detection engineering.
• Strong familiarity with vulnerability tools and comfortable working across cloud and endpoint environments.
• Ability to work independently and translate technical risk into clear language.
• Relevant certifications such as OSCP, CEH, PNPT, CompTIA Security+, CySA+ are welcomed, as is demonstrable home‑lab or GitHub work.
• Right to work in the UK and be based or commutable to London.

Required skills

• Tenable
• Qualys
• Rapid7
• Penetration testing
• Red‑team / purple‑team exercises
• MITRE ATT&CK framework
• Threat detection
• Incident response

What we offer

• Hybrid working in London
• Competitive salary up to £65,000
• Opportunity to shape first‑line security processes