1,959 Ethical Hacking jobs in the United Kingdom
Information Security Analyst - Penetration Testing
BS1 3NX Bristol, South West
£50000 Annually
WhatJobs
Posted 11 days ago
Job Viewed
Job Description
Our client, a leading technology solutions provider in Bristol, is looking for a skilled Information Security Analyst with a specialization in penetration testing. This role offers the flexibility of remote work, allowing you to contribute your expertise from anywhere in the UK.
As an Information Security Analyst, you will be responsible for identifying vulnerabilities and assessing the security posture of our client's network infrastructure, applications, and systems. Your primary duties will include conducting comprehensive penetration tests, vulnerability assessments, and security audits using a variety of tools and methodologies. You will analyze security weaknesses, provide detailed reports on findings, and recommend remediation strategies to mitigate risks. Collaborating with development and IT operations teams to implement security controls and ensure the secure deployment of applications and systems will be a key aspect of your role. You will also be involved in developing and maintaining security policies, procedures, and standards. Staying up-to-date with the latest security threats, vulnerabilities, and best practices is crucial. The ideal candidate will have a strong understanding of network protocols, operating systems, web application security, and common attack vectors. Experience with penetration testing tools such as Metasploit, Burp Suite, Nmap, and Kali Linux is essential. Relevant certifications such as CEH, OSCP, or CISSP are highly desirable. Excellent analytical, problem-solving, and communication skills are required to effectively articulate complex security issues to both technical and non-technical audiences. A Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience, is expected. This is an excellent opportunity for a passionate security professional to make a significant impact on protecting critical assets.
As an Information Security Analyst, you will be responsible for identifying vulnerabilities and assessing the security posture of our client's network infrastructure, applications, and systems. Your primary duties will include conducting comprehensive penetration tests, vulnerability assessments, and security audits using a variety of tools and methodologies. You will analyze security weaknesses, provide detailed reports on findings, and recommend remediation strategies to mitigate risks. Collaborating with development and IT operations teams to implement security controls and ensure the secure deployment of applications and systems will be a key aspect of your role. You will also be involved in developing and maintaining security policies, procedures, and standards. Staying up-to-date with the latest security threats, vulnerabilities, and best practices is crucial. The ideal candidate will have a strong understanding of network protocols, operating systems, web application security, and common attack vectors. Experience with penetration testing tools such as Metasploit, Burp Suite, Nmap, and Kali Linux is essential. Relevant certifications such as CEH, OSCP, or CISSP are highly desirable. Excellent analytical, problem-solving, and communication skills are required to effectively articulate complex security issues to both technical and non-technical audiences. A Bachelor's degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience, is expected. This is an excellent opportunity for a passionate security professional to make a significant impact on protecting critical assets.
This advertiser has chosen not to accept applicants from your region.
0
Information Security Analyst
Sanderson
Posted today
Job Viewed
Job Description
Information Security Analyst – NIST Implementation
Rate - £500 Inside IR35 (Total to umbrella)
Duration – 6 months
Location – twice a week on site into London
Role Description:
As a Senior Information Security Analyst, you will be instrumental in executing the company's Information Security strategies and initiatives, focusing on supporting the Governance, Risk, and Compliance (GRC) function and implementing the NIST Cyber Security Framework (CSF) throughout the organization. You will lead day-to-day GRC activities, including designing security controls, enforcing requirements from the Group Information Security Framework, and proactively managing non-compliance issues and mitigating Information Security risks.
About You :
- You will be developing and implementing an information security controls catalogue, policies, and procedures aligned with the NIST Cyber Security Framework (CSF).
- Conducting assessments to identify material gaps, analyzing potential risks, and monitoring progress on maturity uplifting across security functions.
- Supporting compliance activities with the Group Information Security Framework, Cyber Essentials, and PCI DSS attestation.
- Collaborating with the wider organization to integrate control testing and risk management activities into the existing governance framework.
- Assisting cross-functional teams and business units in integrating security measures into business operations.
- Facilitating regular reviews and updates of control and risk management processes to remain effective and responsive to emerging threats and changes in the organizational landscape.
- Documenting and visualizing reports for governance forums, providing insights and recommendations to inform decision-making and risk management strategy across the business.
Essential Skills:
- Minimum of 4 years of experience in information security with a solid understanding of Information Security control and governance frameworks.
- Practical experience of implementing NIST CSF in the financial services sector is highly desirable.
- Proven track record of security transformation and delivery of security projects, particularly within a federated organisation.
- Strong knowledge of Information Security and compliance frameworks, including NIST CSF, ISO 27001, Cyber Essentials, PCI DSS, and DORA, and the ability to design controls that align with these standards.
- Ability to analyse data and generate reports using tools like Excel and Power BI, and experience with data visualisation and interpretation.
- Skills in creating and maintaining comprehensive documentation, including control matrices, design process flows, and standard operating procedures.
- Strong communication and interpersonal skills, with the ability to convey complex security concepts to non-technical stakeholders.
- Bachelor’s degree in Information Security, Computer Science, or a related field. A Master’s degree is a plus.
- Relevant certifications such as CISSP, CCSP, CRISC, CISM, or ISO 27001 Lead Implementer are highly desirable.
This advertiser has chosen not to accept applicants from your region.
1
Information Security Analyst
London, London
Sanderson
Posted today
Job Viewed
Job Description
Information Security Analyst – NIST Implementation
Rate - £500 Inside IR35 (Total to umbrella)
Duration – 6 months
Location – twice a week on site into London
Role Description:
As a Senior Information Security Analyst, you will be instrumental in executing the company's Information Security strategies and initiatives, focusing on supporting the Governance, Risk, and Compliance (GRC) function and implementing the NIST Cyber Security Framework (CSF) throughout the organization. You will lead day-to-day GRC activities, including designing security controls, enforcing requirements from the Group Information Security Framework, and proactively managing non-compliance issues and mitigating Information Security risks.
About You :
- You will be developing and implementing an information security controls catalogue, policies, and procedures aligned with the NIST Cyber Security Framework (CSF).
- Conducting assessments to identify material gaps, analyzing potential risks, and monitoring progress on maturity uplifting across security functions.
- Supporting compliance activities with the Group Information Security Framework, Cyber Essentials, and PCI DSS attestation.
- Collaborating with the wider organization to integrate control testing and risk management activities into the existing governance framework.
- Assisting cross-functional teams and business units in integrating security measures into business operations.
- Facilitating regular reviews and updates of control and risk management processes to remain effective and responsive to emerging threats and changes in the organizational landscape.
- Documenting and visualizing reports for governance forums, providing insights and recommendations to inform decision-making and risk management strategy across the business.
Essential Skills:
- Minimum of 4 years of experience in information security with a solid understanding of Information Security control and governance frameworks.
- Practical experience of implementing NIST CSF in the financial services sector is highly desirable.
- Proven track record of security transformation and delivery of security projects, particularly within a federated organisation.
- Strong knowledge of Information Security and compliance frameworks, including NIST CSF, ISO 27001, Cyber Essentials, PCI DSS, and DORA, and the ability to design controls that align with these standards.
- Ability to analyse data and generate reports using tools like Excel and Power BI, and experience with data visualisation and interpretation.
- Skills in creating and maintaining comprehensive documentation, including control matrices, design process flows, and standard operating procedures.
- Strong communication and interpersonal skills, with the ability to convey complex security concepts to non-technical stakeholders.
- Bachelor’s degree in Information Security, Computer Science, or a related field. A Master’s degree is a plus.
- Relevant certifications such as CISSP, CCSP, CRISC, CISM, or ISO 27001 Lead Implementer are highly desirable.
This advertiser has chosen not to accept applicants from your region.
2
Information Security Analyst
Prism Digital
Posted today
Job Viewed
Job Description
Information Security Analyst | ISO27001, Rapid7, Protecht | Global Trading Platform
- £60–70k base + 10% bonus
- Hybrid in Coventry with monthly travel to London
- Security certification support & career development built-in
Help shape a high-stakes security program as a hands-on GRC Analyst supporting a global financial institution’s banking expansion. You’ll be central to their mission of scaling a modern InfoSec environment, balancing regulatory rigor, ethical standards and BAU resilience.
You’ll focus on third-party security assessments, metrics reporting, and supporting certification frameworks including ISO27001 and SOC2. Expect close collaboration across risk, technology and compliance stakeholders. All while operating at pace, with visibility and trust from the top down.
What you’ll bring:
- 3+ years in an InfoSec or IT security role within a regulated or financial firm
- Security certifications: SSCP, Security+, or equivalent
- Strong GRC foundation: Able to interpret risk frameworks and speak the language of ISO, SOC2, NIST, etc.
- Comfortable with security tooling and metrics-driven reporting
- Confident communicator: Translate acronyms into action, and engage stakeholders with clarity and purpose
- Ethical mindset: understand when to escalate, when to challenge, and how to own your area
What you’ll be doing:
- ISO27001 & SOC2 governance: day-to-day support of the ISMS, remediation tracking, risk reviews
- Third-party risk assessments: conduct supplier security reviews aligned to appetite and regulatory frameworks
- Security awareness training: drive phishing simulations and curate internal content via Proofpoint
- BAU InfoSec operations: ticket triage, KPI reporting, risk dashboards, vulnerability and patch monitoring
- Compliance tooling: operate and report using platforms like Protecht, Panorays, Rapid7, and Armis
- Banking enablement: key InfoSec input into a major new market launch
Tech & tools you’ll use:
- Protecht – Enterprise risk & audit platform
- Panorays – Third-party risk management
- Rapid7, Armis – Vulnerability & asset visibility
- Proofpoint – Phishing simulations and awareness content
- Microsoft Purview – Data governance and policy enforcement
- Azure (beneficial) – Cloud IAM, logging, and security monitoring
Why this role?
- High-impact GRC project work tied to new market expansion
- Strong internal security culture: backed by a collaborative team and engaged InfoSec leadership
- A clear opportunity to stretch across awareness, compliance, and operational domains
Information Security Analyst | ISO27001, Rapid7, Protecht | Global Trading Platform
This advertiser has chosen not to accept applicants from your region.
3
Information Security Analyst
NR1 1QQ Norwich, Eastern
£40000 Annually
WhatJobs
Posted today
Job Viewed
Job Description
Our client is looking for a vigilant and proactive Information Security Analyst to join their growing team. This hybrid role requires a candidate who can balance remote work with occasional office presence for collaborative sessions and critical on-site tasks. You will be instrumental in safeguarding the company's digital assets, identifying vulnerabilities, and implementing robust security measures. Responsibilities include monitoring security systems, investigating security incidents, developing and enforcing security policies, conducting risk assessments, and staying abreast of emerging threats. The ideal candidate will have a Bachelor's degree in Computer Science, Information Technology, or a related field, along with demonstrable experience in cybersecurity. Certifications such as CompTIA Security+, CISSP, or CISM are highly desirable. You should possess a strong understanding of network security, intrusion detection, incident response, and data privacy principles. Excellent analytical and problem-solving skills are essential, as is the ability to communicate complex security concepts clearly to both technical and non-technical audiences. This role demands a meticulous approach to security, with a focus on proactive threat hunting and preventative measures. You will work closely with IT teams to ensure the integrity and confidentiality of company data. Experience with security tools such as SIEM, firewalls, and endpoint protection platforms is required. Occasional travel to the office in **Norwich, Norfolk, UK** will be necessary for team meetings, strategic planning, and hands-on security operations. We seek a dedicated professional committed to maintaining a secure digital environment and protecting sensitive information. This is an excellent opportunity to grow within a dynamic security team and contribute to the overall security posture of the organization.
This advertiser has chosen not to accept applicants from your region.
4
Information Security Analyst
RG1 2AA Reading, South East
£50000 Annually
WhatJobs
Posted today
Job Viewed
Job Description
Our client is seeking a diligent and proactive Information Security Analyst to bolster their cybersecurity defenses. This role is critical in protecting sensitive data, systems, and networks from evolving threats. You will be involved in monitoring security alerts, investigating incidents, implementing security controls, and contributing to the development and enforcement of security policies and procedures. The ideal candidate will possess a strong understanding of cybersecurity principles, risk management, and various security technologies. Experience with security information and event management (SIEM) tools, intrusion detection/prevention systems (IDPS), and vulnerability assessment is highly desirable. You will collaborate closely with IT operations, development teams, and business units to ensure that security is integrated into all aspects of the organization. Responsibilities include conducting security audits, performing risk assessments, developing incident response plans, and providing security awareness training. This is an excellent opportunity for a security professional looking to make a significant impact in a challenging and dynamic environment. We are seeking individuals who are detail-oriented, analytical, and possess excellent problem-solving skills. The role is based in Reading, Berkshire, UK , with a hybrid work arrangement that balances the need for in-person collaboration on critical security matters with the flexibility of remote work. Regular attendance at the office will be required for team meetings, strategic planning, and hands-on security operations. Join our client's dedicated security team and help safeguard their digital assets.
Key Responsibilities:
Qualifications:
Key Responsibilities:
- Monitor security alerts and events, investigate potential security incidents, and respond accordingly.
- Implement, configure, and maintain security technologies such as firewalls, IDS/IPS, SIEM, and endpoint protection.
- Conduct vulnerability assessments and penetration testing, and work with teams to remediate findings.
- Develop and update security policies, procedures, and guidelines.
- Assist in the development and execution of incident response plans.
- Perform security risk assessments and recommend appropriate controls.
- Provide security awareness training to employees.
- Stay current with emerging security threats, vulnerabilities, and technologies.
- Collaborate with IT teams to ensure security is integrated into system design and operations.
- Contribute to compliance efforts with relevant regulations and standards.
Qualifications:
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience.
- Proven experience in information security or a related IT security role.
- Strong understanding of cybersecurity principles, threats, and vulnerabilities.
- Experience with SIEM, IDS/IPS, firewalls, and endpoint security solutions.
- Knowledge of network security, system security, and application security.
- Familiarity with risk assessment methodologies and incident response frameworks.
- Excellent analytical and problem-solving skills.
- Strong communication and documentation skills.
- Relevant security certifications (e.g., CompTIA Security+, CISSP, CEH) are a plus.
- Ability to work effectively in a hybrid team environment.
This advertiser has chosen not to accept applicants from your region.
5
Information Security Analyst
S1 4RG Sheffield, Yorkshire and the Humber
£50000 Annually
WhatJobs
Posted 1 day ago
Job Viewed
Job Description
Our client, a forward-thinking organisation in **Sheffield, South Yorkshire**, is seeking a skilled Information Security Analyst to bolster their cybersecurity defenses. This hybrid role combines essential on-site collaboration and strategic planning with the flexibility of remote work for certain tasks. You will be responsible for monitoring security systems, identifying potential threats and vulnerabilities, and implementing robust security measures to protect the organization's data and assets. Key duties include conducting security audits, developing and enforcing security policies and procedures, managing incident response activities, and providing security awareness training to staff. The ideal candidate will possess a Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, coupled with relevant certifications such as CISSP, CEH, or CompTIA Security+. A minimum of 3 years of experience in information security, with hands-on experience in security tools (SIEM, IDS/IPS, firewalls), vulnerability assessment, and risk management, is required. Strong analytical and problem-solving skills, along with a thorough understanding of cybersecurity principles and best practices, are essential. You must be adept at communicating technical information clearly to both technical and non-technical audiences. This role demands a proactive and detail-oriented individual who can stay ahead of emerging threats. While the role is hybrid, requiring attendance at the Sheffield office for key meetings and collaborative sessions, there is flexibility for remote work on other days. You will be a crucial part of protecting our client's digital infrastructure and ensuring the confidentiality, integrity, and availability of their information. Our client offers a dynamic work environment with opportunities for professional growth in the cybersecurity field.
This advertiser has chosen not to accept applicants from your region.
Be The First To Know
About the latest Ethical hacking Jobs in United Kingdom !
6
Information Security Analyst
BT1 1AA Belfast, Northern Ireland
£45000 Annually
WhatJobs
Posted 1 day ago
Job Viewed
Job Description
Our client is seeking a vigilant and highly skilled Information Security Analyst to join their fully remote team. In this critical role, you will be responsible for safeguarding the company's digital assets, ensuring the confidentiality, integrity, and availability of information systems. You will play a vital part in detecting, analysing, and responding to security threats and vulnerabilities, contributing to the overall cybersecurity posture of the organisation. This is an excellent opportunity to work with cutting-edge security technologies from the comfort of your home.
Key responsibilities include monitoring security alerts and logs from various security tools (e.g., SIEM, IDS/IPS, firewalls) to identify suspicious activities. You will conduct thorough investigations into security incidents, analyse their root causes, and develop effective remediation strategies. Performing vulnerability assessments and penetration testing to identify weaknesses in the network and applications will be a significant part of your role. You will assist in developing and implementing security policies, procedures, and best practices to enhance the organisation's defence mechanisms. Staying abreast of the latest threat intelligence and security trends, and proactively adapting security measures accordingly, is crucial. You will also contribute to security awareness training for employees, fostering a security-conscious culture throughout the company.
The ideal candidate will possess a Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience. Professional certifications such as CompTIA Security+, CEH, CISSP, or GIAC are highly desirable. Proven experience in incident response, threat analysis, and vulnerability management is essential. Strong technical skills in areas such as network security, endpoint security, cryptography, and security frameworks (e.g., NIST, ISO 27001) are required. Excellent analytical, problem-solving, and communication skills are paramount, along with the ability to work independently and collaboratively in a remote team environment. You must be proactive, detail-oriented, and committed to maintaining the highest standards of information security.
Key responsibilities include monitoring security alerts and logs from various security tools (e.g., SIEM, IDS/IPS, firewalls) to identify suspicious activities. You will conduct thorough investigations into security incidents, analyse their root causes, and develop effective remediation strategies. Performing vulnerability assessments and penetration testing to identify weaknesses in the network and applications will be a significant part of your role. You will assist in developing and implementing security policies, procedures, and best practices to enhance the organisation's defence mechanisms. Staying abreast of the latest threat intelligence and security trends, and proactively adapting security measures accordingly, is crucial. You will also contribute to security awareness training for employees, fostering a security-conscious culture throughout the company.
The ideal candidate will possess a Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent practical experience. Professional certifications such as CompTIA Security+, CEH, CISSP, or GIAC are highly desirable. Proven experience in incident response, threat analysis, and vulnerability management is essential. Strong technical skills in areas such as network security, endpoint security, cryptography, and security frameworks (e.g., NIST, ISO 27001) are required. Excellent analytical, problem-solving, and communication skills are paramount, along with the ability to work independently and collaboratively in a remote team environment. You must be proactive, detail-oriented, and committed to maintaining the highest standards of information security.
This advertiser has chosen not to accept applicants from your region.
7
Information Security Analyst
LE1 5WD Leicester, East Midlands
£45000 Annually
WhatJobs
Posted 1 day ago
Job Viewed
Job Description
Our client is looking for a dedicated Information Security Analyst to bolster their security posture. This role is based in Leicester, Leicestershire, UK , with a hybrid working model, allowing for a blend of office-based collaboration and remote flexibility. You will play a pivotal role in protecting sensitive data and systems from cyber threats. Responsibilities will include:
- Monitoring security alerts and events using SIEM tools.
- Conducting vulnerability assessments and penetration testing.
- Implementing and managing security controls and technologies.
- Developing and enforcing security policies and procedures.
- Responding to security incidents and performing forensic analysis.
- Providing security awareness training to employees.
- Collaborating with IT teams to ensure secure system configurations.
- Staying updated on the latest security threats and mitigation strategies.
- Assisting with security audits and compliance requirements.
This advertiser has chosen not to accept applicants from your region.
8
Information Security Analyst
G2 1HN Glasgow, Scotland
£50000 Annually
WhatJobs
Posted 1 day ago
Job Viewed
Job Description
Our client is seeking a vigilant and skilled Information Security Analyst to join their dedicated security team in a fully remote capacity. This role is vital for protecting the organization's digital assets and ensuring the confidentiality, integrity, and availability of information systems. You will be responsible for monitoring security alerts, investigating potential threats, and implementing security controls to mitigate risks. The ideal candidate will possess a strong understanding of cybersecurity principles, network security, and incident response procedures. Key responsibilities include conducting vulnerability assessments, analyzing security logs, managing security awareness training, and staying abreast of the latest threat landscapes. You should be proficient in using security information and event management (SIEM) tools, intrusion detection/prevention systems (IDPS), and endpoint detection and response (EDR) solutions. This is a remote-first position, allowing you to contribute to critical security operations from anywhere in the UK, supporting the business functions that are vital to the community in and around Glasgow, Scotland, UK . Collaboration with IT infrastructure teams, application development teams, and business units will be essential to embed security best practices across the organization. A Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, coupled with a minimum of 4 years of experience in information security, is required. Professional certifications such as CompTIA Security+, CISSP, or GIAC are highly desirable. We are looking for a proactive, analytical, and detail-oriented individual with a passion for cybersecurity and a commitment to safeguarding the organization's digital environment. Your expertise will be key in maintaining a robust security posture and responding effectively to emerging threats.
Responsibilities:
Qualifications:
Responsibilities:
- Monitor security systems and analyze security alerts for potential threats.
- Investigate and respond to security incidents and breaches.
- Conduct vulnerability assessments and penetration testing.
- Implement and manage security controls and technologies.
- Develop and maintain security policies, procedures, and documentation.
- Conduct security awareness training for employees.
- Analyze security logs and events to identify suspicious activities.
- Stay updated on cybersecurity trends, threats, and best practices.
- Collaborate with IT teams to ensure secure system configurations.
- Contribute to the development and refinement of the incident response plan.
Qualifications:
- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field.
- Minimum of 4 years of experience in information security or cybersecurity.
- Proficiency in security monitoring tools (SIEM, IDPS, EDR).
- Strong understanding of network security, cryptography, and risk management.
- Experience with vulnerability assessment and penetration testing methodologies.
- CompTIA Security+, CISSP, CEH, or GIAC certifications are highly desirable.
- Excellent analytical and problem-solving skills.
- Strong communication and collaboration abilities.
- Ability to work independently and manage tasks effectively in a remote environment.
- Detail-oriented with a strong sense of responsibility.
This advertiser has chosen not to accept applicants from your region.
9