Cyber Security Analyst

Salary

£37,892, including a £2,758 concessionary payment. After 6 to 13 months, you may be eligible for a non‑pensionable skills payment of £7,247 or £15,757, subject to assessment and reviewed every three years.

We support flexible working arrangements, such as part‑time and compressed hours, as well as flexible start and finish times. Because of the role’s responsibilities, most work is carried out on site. Opportunities for home‑working may be available but will depend on operational requirements and cannot be guaranteed.

At GCHQ, we unlock the complex world of data and communications to keep the UK and its citizens safe, both in the real world and online. Working closely with our British Intelligence partners, MI5 and MI6, we protect the UK from threats including serious organised crime, terrorism, and cyber‑attacks. A role in GCHQ offers varied and fascinating work in a supportive and encouraging environment that puts the emphasis on teamwork.

As a Cyber Security Analyst within GCHQ’s Cyber Security Incident Response Team (CSIRT), you focus on protecting critical systems from a wide range of cyber threats, including malware, insider threats, denial‑of‑service attacks, and phishing activity. Your work plays a key role in safeguarding GCHQ’s networks and data in a high‑stakes, security‑focused environment.

Each day starts with a review of alerts and overnight activity, prioritising incidents based on severity and potential impact. Key findings are shared in the daily CSIRT meeting, where the team aligns on ongoing investigations and sets priorities. Attention then turns to analysing high‑priority alerts, working through logs, network traffic, and endpoint data using tools such as Splunk.

Working closely with colleagues across IT and security teams, you’ll gather information and mitigate emerging threats. Alongside your core investigative work, responsibilities include monitoring security alarms, creating new detection content, and using threat intelligence to strengthen defences. The role also involves building automations to improve Security Operations Centre (SOC) efficiency, responding to security breaches, and providing specialist support in digital forensics, including assistance with HR casework.

Most work sits within team delivery objectives, with scope to take on individual projects, if you want to explore a particular area further.

You're a problem‑solver with a natural curiosity about how systems work, how they can be protected, and a genuine enthusiasm for developing your skills. You can demonstrate experience in at least one core cyber security discipline, such as malware analysis, intrusion detection, security monitoring, or incident response, ideally gained within a Security Operations Centre (SOC) environment.

A solid understanding of Windows and Linux internals is expected. Broader IT experience is advantageous, including exposure to cloud technologies like AWS or Azure, alongside a motivation to continue developing your technical expertise.

When you join GCHQ, you’ll receive an organisational induction along with support from a buddy to help you settle in. Development in this role is a mix of on‑the‑job learning and formal training. Skills are developed through experience, working alongside colleagues on real incidents and supported by a range of internal and external training opportunities.

As a Cyber Security Analyst, there is access to a mix of internal and external training opportunities, including the chance to work towards security certifications such as Certified Information Systems Security Professional (CISSP) and the Offensive Security Certified Professional (OSCP).

There are no overseas travel requirements for this role; however, there may be occasional opportunities to attend conferences both within the UK and internationally.

You’ll receive a starting salary of £37,892 plus other benefits including:

• 25 days’ annual leave, rising to 30 days after 5 years’ service, and an additional 10.5 days of public and privilege holidays
• opportunities to be recognised through our employee performance…