Cyber Security Analyst

Cyber Security Analyst

Location: Leeds

Working Arrangement: Hybrid

Job Type: Full-time

Overview

Our client, an established international law firm, is seeking a Cyber Security Analyst to help protect its IT infrastructure, systems and sensitive information from evolving cyber threats.

Based in Leeds with hybrid working, this role offers exposure to a broad range of cyber security technologies, including Microsoft Azure, Sentinel, Defender, Intune and enterprise security monitoring tools.

Working closely with the Cyber Security team and wider IT functions, you will support threat detection, vulnerability management, penetration testing, security incident response and the continuous improvement of information security controls.

Key Responsibilities

• Monitor and analyse cyber threats and threat intelligence, identifying risks and implementing appropriate security controls and mitigation measures.
• Maintain vulnerability management and remediation records, ensuring security risks are documented, prioritised and addressed in accordance with audit requirements.
• Coordinate penetration testing activities, from initial planning through to reviewing findings and tracking remediation.
• Work with internal IT teams and third-party providers to maintain security across cloud platforms, networks, applications and infrastructure.
• Implement and maintain cyber security controls, including patch management, system hardening, security policies and technical safeguards.
• Support security incident detection, investigation and response, including advising on communications with internal stakeholders, clients and suppliers.
• Maintain accurate security documentation and support compliance with ITIL processes, service level agreements (SLAs) and key performance indicators (KPIs).
• Stay informed about emerging cyber threats, vulnerabilities and security technologies, contributing to ongoing improvements in security operations.

Requirements

• Broad understanding of IT infrastructure technologies, including Microsoft Azure, Windows Server, VMware/ESX, Microsoft Exchange, IIS, SQL, Linux, macOS, Citrix, backup platforms and Cisco networking.
• Working knowledge of Microsoft security technologies, including Microsoft Sentinel, Defender, Intune, Conditional Access, Identity Protection and Microsoft Purview.
• Understanding of security monitoring and protection technologies, including SIEM, firewalls, IDS/IPS, endpoint detection and response (EDR), antivirus, authentication and log management.
• Knowledge of mobile device management (MDM), vulnerability management and cyber threat intelligence.
• Understanding of information security principles, including ISMS, risk assessment, the confidentiality, integrity and availability (CIA) triad, cryptography and common attack vectors.
• Awareness of security incident response processes, including incident triage, evidence handling and chain of custody.
• Excellent analytical, problem-solving and troubleshooting skills, with strong attention to detail.
• Ability to work independently and collaboratively, manage deadlines and communicate effectively with technical and non-technical stakeholders.
• A proactive, customer-focused approach with a commitment to continuous improvement and knowledge sharing.

Desirable

• Relevant professional qualifications in cyber security, networking or computing.
• Degree-level qualifications in a related technical discipline.

Why Consider This Opportunity?

This role offers the opportunity to develop your cyber security expertise within a complex professional services IT environment.

You will work with a broad technology stack, contribute to security investigations and infrastructure protection, and gain exposure to cloud security, vulnerability management and enterprise security operations.

Our client provides a collaborative and inclusive environment that encourages professional development, technical knowledge sharing and continuous improvement.

Interested? Click Apply to view the full vacancy and continue your application.