Cybersecurity Analyst

Protect client data and our own, and help engineering teams build things that are secure before they reach production rather than after an audit finding.

The role is a mix of proactive hardening, assessment work and genuine incident response. You will have the standing to block a release when blocking it is the right call.

What you will own

• Vulnerability management across applications and cloud infrastructure
• Security review of designs and code, working alongside the engineers who wrote them
• Incident detection, triage and response, including the written record afterwards
• Compliance evidence for frameworks such as ISO 27001 and SOC 2

What we are looking for

• Three or more years in a security engineering, analyst or assessment role
• Working knowledge of the OWASP Top Ten and how to explain it without jargon
• Hands-on experience with SIEM tooling, log analysis and vulnerability scanners
• Cloud security fundamentals on AWS or Azure
• Certification such as Security Plus, CEH or OSCP is welcome but experience matters more

We want someone who reduces risk by making the secure path the easy path, not by writing longer policies.