At a Glance
- Tasks: Own operational security, manage vulnerabilities, and run penetration tests to enhance security.
- Company: A well-established, regulated organisation with a focus on hands-on cyber security.
- Benefits: Competitive salary up to £65,000, hybrid work model, and opportunities for professional growth.
- Other info: Ideal for those who thrive in a fast-paced, tech-driven setting.
- Why this job: Shape first-line security and make a real impact in a dynamic cyber environment.
- Qualifications: Hands-on security experience, offensive mindset, and familiarity with vulnerability tools.
The predicted salary is between 65000 - 65000 £ per year.
- Cyber Security Analyst— First Line (Hands-On)
- London (hybrid) · Permanent · up to £65,000
A well-established, regulated organisation is hiring a hands-on, first-line Cyber Security Analyst to own its operational security day to day. This is a builder-operator role for someone who thinks like an attacker — not a governance or audit seat.
You’ll be the person who finds the weaknesses before anyone else does, drives them to closure, and keeps the estate hard to hit.
You’ll work autonomously, close to the technology, with the room to shape how first-line security runs.
- What you’ll actually do
- Own the vulnerability management life-cycle end to end — scan, prioritise, drive remediation to SLA, and prove it’s closed (Tenable / Qualys / Rapid7).
- Scope and run penetration testing and red/purple-team exercises , turning findings into real fixes rather than reports.
- Reduce attack surface with an adversary's eye
— think in TTPs and MITRE ATT&CK, not just tickets.
- Support threat detection and incident response
— triage, contain, learn, improve.
- Embed security into day-to-day operations and tooling; automate the dull bits.
- What we’re looking for
- Genuine first-line, hands-on security experience — you operate the tools, you don’t just review reports.
- An offensive/purple-team mindset
— pen testing, exploitation, attack-surface work, or hands‑on detection engineering.
- Strong with vulnerability tooling and comfortable across cloud and endpoint.
- Able to work independently and translate technical risk into plain language.
- Certs welcomed: OSCP, CEH, PNPT, Comp TIA Security+/Cy SA+, or equivalent hands‑on evidence (a home lab / Git Hub counts).
- This is not
Purely a GRC, audit, or compliance role. If your day is spent in risk registers and evidence packs rather than in the tooling, this one won’t stretch you.
Right to work in the UK required. London-based / commutable.
#J-18808-Ljbffr
Cyber Security Analyst employer: MLM Search
As a senior contract engagement within a leading global financial services institution, this role offers an exceptional opportunity to work in a fast-paced, high-visibility environment where your expertise in W-IRB will be valued from day one. The company fosters a collaborative work culture that encourages professional growth and provides access to senior stakeholders across Business, Risk, and Finance globally, ensuring that your contributions have a meaningful impact on credit risk policy and model application.
