search Browse Jobs
Cyber Security AnalystNuffield Health · 2 Locations
Nuffield Health logo

Nuffield Health

company page ↗

Cyber Security Analyst

🗓️ Posted 2026-08-13 2 Locations Hybrid ICT
💰 Salary Not shared 📊 Market 3,250 GBP–6,453 GBP/mo

About the Company

Welcome to Nuffield Health, the UK's leading not-for-profit healthcare organisation. As a not-for-profit with no shareholders, we invest all our income back into our family of award-winning 37 hospitals, 114 fitness and wellbeing clubs, healthcare clinics, over 200 workplace wellbeing services, as well as developing flagship collaborations supporting our communities - all to realise our vision to build a healthier nation. What makes us unique is our unrivalled award winning and industry leading network of health and wellbeing services. Only Nuffield Health has the wide-ranging expertise to provide connected care. We attract some of the best people in their specialist fields, who take a personalised approach so we can provide the best possible care and support now and in the future - wherever they are on their journey. All for the public benefit. So, it's no surprise that we're trusted by the NHS, Private Medical Insurers, employers and the general public to provide exceptional health and wellbeing services to the nation. We're committed to our vision of building a healthier nation. Welcome to Nuffield Health. Specialists in you. Nuffield Health is a Registered Charity. Our objective is to advance, promote and maintain health and healthcare of all descriptions and to prevent, relieve and cure sickness and ill health of any kind, all for the public benefit. Registered Charity Numbers 205533 (England and Wales) and SC041793 (Scotland). Wellness and Fitness Services Specialties: Gyms, Health Checks, Physiotherapy, Hospitals, Wellbeing

Responsibilities

  • ● Cyber Security Analyst
  • ● Barbican & Epsom Hybrid Working (One office day a week) Fixed-Term - 6 months initially with potential future extension/permanent role Full-Time
  • ● Competitive salary available, depending on experience
  • ● hours per week
  • ● At Nuffield Health, everything we give our patients, members and customers would not be possible without you. Your passion, your warmth, your drive to make a difference. Whether it's driving connecting health, helping the nation, transforming experiences, or building the career you want - we give you the support to do it all. Join our journey. It starts with you.
  • ● This role also provides the opportunity to contribute to the ongoing improvement of our cyber security detection and protection strategy.
  • ● To be successful I this role, you should demonstrate that you have:
  • ● Significant experience working within an in-house cyber security or SOC environment, including leading and coordinating security investigations. Proven experience in incident response leadership, including triage, containment, eradication, recovery, and post-incident review
  • ● Proficiency with security tooling, analytics tuning and reporting (e.g. Microsoft Sentinel SIEM, endpoint XDR, cloud & network) and confidence in writing SIEM queries.
  • ● An interest in threat intelligence and knowledge of threat hunting techniques
  • ● Demonstrable experience of working with information and cyber security standards and frameworks (such as ISO 27001, CAF and MITRE ATT&CK)
  • ● Worked closely within Technology Service and Product Engineering teams to build and maintain a strong security posture; mitigating security risks and fostering a proactive culture.
  • ● This role will provide you with the opportunity to:
  • ● Develop your career in cyber security, working across a broad technology estate that covers a variety of both clinical and non-clinical applications that deliver various services connected to fitness, wellbeing, and healthcare.
  • ● Coordinating and leading incident response activities, working with internal teams and third-party partners to ensure effective containment and recovery.Perform analysis of endpoint, server and network logs including vulnerabilities and known attacks, cross referencing to the MIRTE framework and known TTPs (tools, techniques and patterns).
  • ● Take part in vulnerability scans, identifying and remediating security vulnerabilities through internal analysis and close collaboration with external security testing partners.
  • ● Contribute to working on incidents, when they occur, using judgement to analyse and mitigate any risk, returning the organisation to a working state as quickly as possible.
  • ● Assist with the ongoing improvement and development of cyber-security protection, including but not limited to event logs, anti-malware, network security and vulnerability management.
  • ● Support the undertaking of cyber risk assessments and assurance reviews on key cyber security controls.