Cyber Security Analyst

Please include your salary expectations and notice period with your application.

The Cyber Security Analyst is responsible for monitoring, detecting, investigating and responding to cyber security threats across the enterprise and project environments. The role provides analytical expertise across security monitoring, vulnerability management, threat intelligence, incident response and compliance reporting. The successful candidate will work closely with the Security Engineer, IT and project teams to ensure risks are identified early, incidents are handled effectively, and systems remain compliant with customer, defence and regulatory requirements.

• Monitor security alerts and events across SIEM, EDR and XDR platforms, triaging and escalating in line with agreed procedures.
• Investigate security incidents to determine root cause, scope and impact, and support containment, eradication and recovery.
• Develop and maintain incident response playbooks, procedures and post-incident reports.
• Develop, tune and maintain detection rules and use cases to improve visibility and reduce false positives.
• Conduct regular vulnerability scanning, analyse results and work closely with operational and project teams to track remediation.
• Gather and analyse threat intelligence to identify threats relevant to Kraken, its customers and the defence sector.
• Carry out proactive threat hunting across enterprise and project environments.
• Monitor user access, privileged activity and identity-related risks across Microsoft 365, Entra ID and cloud environments.
• Review security logs and system configurations to identify policy deviations and security weaknesses.
• Support security assessments, audits and compliance activities against customer, contractual and regulatory requirements.
• Maintain the cyber security risk register and support risk assessments for enterprise and project systems.
• Support supplier and third-party security assessments.
• Produce clear security reports, metrics and dashboards for management and customers.
• Contribute to security awareness training and phishing simulation activities.

• Significant experience in a cyber security analyst, SOC or security operations role.
• Hands-on experience with SIEM, EDR and XDR platforms (e.g. Microsoft Sentinel and Defender).
• Experience triaging, investigating and responding to security incidents.
• Experience with vulnerability scanning and management tools (e.g. Tenable, Qualys or Rapid7).
• Working knowledge of Microsoft 365, Entra ID and cloud platforms (Azure and/or AWS).
• Sound understanding of networking fundamentals, including TCP/IP, DNS, firewalls and VPNs.
• Experience analysing Windows and Linux system, network and application logs.
• Knowledge of security frameworks such as MITRE ATT&CK, NIST CSF or ISO 27001.
• Strong analytical and problem-solving skills with close attention to detail.
• Strong technical documentation and reporting skills.
• Eligible to obtain and maintain UK Security Check (SC) clearance.

• Experience supporting MOD, defence and government requirements.
• Knowledge of Cyber Essentials Plus, CSM, DEF STAN 05-138 and CMMC.
• Working knowledge of NATO security requirements.
• Experience with KQL and scripting (e.g. PowerShell or Python) for automation and threat hunting.
• Experience with digital forensics and malware analysis.
• Relevant certifications such as CompTIA CySA+, Microsoft SC-200, GIAC (GCIH/GCIA) or BTL1.
• Experience supporting classified or sensitive systems.
• Awareness of operational technology (OT) or embedded system security.

You’ll work closely with the IT & Security team, project teams and colleagues across the wider business, helping to protect both enterprise and project environments against evolving cyber threats.

This is a hands-on role combining day-to-day security monitoring with investigation, threat hunting, vulnerability management and continuous improvement. You’ll be expected to take ownership of security issues, investigate activity thoroughly and communicate risks and findings clearly to both technical and non-technical stakeholders.

You’ll work across a broad range of security technologies and environments, balancing proactive security work with responding effectively when incidents or vulnerabilities arise.

This is an opportunity to play an important role in protecting Kraken’s people, technology and projects while developing your experience within a fast-moving defence and maritime technology environment.

You’ll have the opportunity to:

• Work across a varied cyber security environment spanning enterprise and project systems
• Gain exposure to defence, government and customer security requirements
• Build hands-on experience across SIEM, EDR/XDR, vulnerability management and threat intelligence
• Work with Microsoft Sentinel, Defender, Entra ID and cloud security technologies
• Develop your skills in incident response, threat hunting and security investigations
• Work alongside experienced IT, security and technical teams
• Contribute directly to strengthening Kraken’s cyber security capability as the business grows

• 25 days holiday per year, plus paid bank holiday
• After two years’ consecutive service, one additional day’s annual leave up to a maximum of five additional days annual leave
• Holiday buy/sell, up to five days per calendar year
• Flexi working, core hours 10:00 to 15:00, subject to departmental requirements
• Private Medical Insurance with optional family cover
• Pension scheme with a 5% employer contribution, there is no cap on the employee contribution level
• Life assurance 3x salary
• Group Income Protection
• Health Care Cash Plan
• Cycle to Work Scheme
• Electric Car Scheme
• Employee Assistance Program (EAP) providing mental health and wellbeing support
• Professional membership reimbursement

Due to the nature of our work many of our roles require a UK nationality and the ability to obtain a security clearance.  Applicants who accept a conditional offer of employment must meet the requirement of right to work in the UK and must meet eligibility requirements for access to classified information and will be subject to Government security checks.

Kraken Works Limited is proud to be an Equal Opportunity Employer.  We are committed to maintaining a workplace that is free from unlawful discrimination and offers equal opportunities to all.  Applications from individuals are encouraged regardless of age, disability, sex, gender reassignment, sexual orientation, pregnancy and maternity, race, religion or belief, and marriage and civil partnerships.