Data Security Analyst; Incident Response Lead

Data Security Analyst (Incident Response Lead)

Employer:

Government Recruitment Service

Location:

Manchester

Pay:

£43,760 to £51,690 per year, National: £43,760 - £47,413 London: £47,670 - £51,690 Offers above the Band minimum are subject to our assessment of your skills and experience as demonstrated aries over the Band minimum will be paid as a non-pensionable allowance

Contract Type:

Permanent

Hours:

Full time

Disability Confident:

Yes

Closing Date:

02/07/2026

The Cabinet Office supports the Prime Minister and ensures the effective running of government.

It is also the corporate headquarters for government, in partnership with HM Treasury, and takes the lead in certain critical policy areas.

We are the Cabinet Office’s cyber security team, and our mission is to secure the department against cyber threats.

We protect our nationwide internal IT infrastructure, and high-profile citizen-facing digital services such as  This role is within Cyber Defence, which delivers cyber threat intelligence, threat detection, incident response and vulnerability management capabilities for the Cabinet Office, and is responsible for protecting and securing internal IT infrastructure and citizen-facing services.

As a data security analyst, you’ll focus on the investigation and response to data security incidents, and will: triage and investigate data security alerts (including from our email, productivity, network, and endpoint tools); use a variety of techniques to analyse systems, network traffic and cloud environments and understand the nature and extent of possible data security incidents; support the response to data security incidents by identifying and implementing (or supporting the implementation of) containment, eradication and recovery actions;

engage and collaborate with Data Protection, Security, and wider Corporate Services functions; coordinate data security incidents; contribute to post-incident reviews to identify lessons and actions; identify opportunities for, and support the delivery of, continual improvements to the data security capability; work closely alongside other Cyber Defence functions, supporting the continual improvement of wider capabilities; contribute to internal plans, playbooks and knowledge base articles;

act as an escalation point for, and provide coaching and mentoring to, associate security analysts. Incidents can and do arise on a 24/7 basis.

The team operates an out-of-hours on call rota, which you will be expected to join.

Proud member of the Disability Confident employer scheme