About the role
Astley Digital is looking for a curious, methodical and client-focused Cyber Security Analyst to join our growing team. You will help protect the systems, data and operations our clients rely on by monitoring security events, investigating suspicious activity and turning technical findings into clear, practical action.
This is a remote UK role with plenty of variety. One day you may be triaging an endpoint alert or reviewing a vulnerability report; the next, you could be helping a client strengthen a control, improve an incident response process or understand a developing threat.
What you’ll do
- Monitor and investigate alerts across endpoint, network, cloud and identity platforms.
- Triage potential incidents, establish scope and severity, and coordinate appropriate response actions.
- Review vulnerability and security assessment findings, prioritising remediation according to business risk.
- Support the configuration and continuous improvement of security tools, policies and monitoring rules.
- Produce concise incident notes, investigation reports and client-facing recommendations.
- Track emerging threats and translate relevant intelligence into practical defensive measures.
- Work with infrastructure and support colleagues to resolve security issues without losing sight of service quality.
- Contribute to security awareness, tabletop exercises and the ongoing development of our managed security services.
What we’re looking for
- Hands-on experience in a cyber security, SOC, infrastructure security or closely related technical role.
- A sound understanding of common attack techniques, vulnerabilities and security controls.
- Experience investigating alerts from tools such as EDR, SIEM, email security, firewalls or cloud platforms.
- Working knowledge of Windows, Microsoft 365, networking and identity concepts.
- A structured approach to investigation, documentation and prioritisation.
- Clear written and verbal communication, including the ability to explain risk to non-specialists.
- Good judgement, integrity and respect for the confidentiality of client information.
- The ability to organise your work effectively in a remote environment.
Useful, but not essential
- Relevant qualifications such as Security+, CySA+, SC-200, BTL1 or an equivalent certification.
- Experience with Microsoft Defender, Azure, Cloudflare, Bitdefender, vulnerability management or security automation.
- Familiarity with incident response frameworks, Cyber Essentials, ISO 27001 or the NIST Cybersecurity Framework.
- Basic scripting or automation skills in PowerShell, Python or a similar language.
What you can expect from us
- A remote-first working environment built on trust, communication and shared accountability.
- Meaningful work across a varied client base and technology stack.
- Time and encouragement to deepen your technical knowledge and professional skills.
- A supportive, practical team where good ideas can quickly become better ways of working.
- Competitive salary based on experience and the opportunity to grow with the business.
Our approach to recruitment
We welcome applicants from different backgrounds and value capability, curiosity and good judgement. If you meet most—but not every—requirement, we still encourage you to apply and tell us what you could bring to Astley Digital.