Cyber Security Analyst - Threat Investigator

This is fantastic opportunity for a person with Cyber Security experience that enjoys the proactive nature of Threat Hunting.

This role is based on-site in Market Deeping.

Location: Market Deeping - On-Site - Monday to Friday.

Salary: Negotiable Dependent upon experience. Good Benefits

Our client will invest heavily in your training and development, this is a real opportunity to progress your career in the field of Cyber Security.

Ideally you will have a great understanding of:

• M365 Security
• AWS Security principles and configurations
• Vulnerability management (Qualys), network security and threat analysis.

• Microsoft 365 Security
  :
  Understanding of M365/Azure security architecture, identity controls, conditional access policies, privileged roles, email security, device posture, and tenant-wide exposure analysis
• AWS Security
  :
  Working knowledge of AWS security principles and configurations
• Vulnerability Management
  :
  Proficient in Qualys or similar vulnerability scanning tools with ability to interpret, prioritise, and contextualise findings
• Network Security
  :
  Solid understanding of firewall architectures, rule assessment, network segmentation, and how attackers abuse network trust
• Threat Analysis
  :
  Ability to identify attack paths, assess misconfiguration risks, and understand how small weaknesses combine into exploitable compromise chains

• Threat Hunting Mindset
  :
  Ability to think like an attacker and reason like a defender
• Critical Analysis
  :
  Assess intent, likelihood, and impact rather than relying solely on automated scores
• Investigation Skills
  :
  Treat alerts as investigations - validate issues, assess relevance, and determine appropriate escalation
• Security Tool Evaluation
  :
  Independently assess security tools for effectiveness, identify gaps, duplication, and misalignment

• Client Advisory
  :
  Act as trusted cyber advisor to both technical and non-technical stakeholders
• Clear Communication
  :
  Explain complex security risks in plain language without fear-mongering or jargon.
• Prioritisation Guidance
  :
  Help clients understand what to fix first and why, with clear reasoning and guidance.
• Stakeholder Management
  :
  Comfortable responding to questions, explaining findings, and guiding security decisions.