{"id":3055235,"url":"https://alion.io/job/the-portfolio-group-cyber-security-analyst-2","title":"Cyber Security Analyst","company":{"id":2630175,"name":"The Portfolio Group","domain":"theportfoliogroup.com","url":"https://alion.io/company/theportfoliogroup","size_band":"51-200","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":{"grade":"B","score":75,"open_postings":223,"ghost_share":0,"stale_share":1,"repost_share":0,"time_to_fill_p50_days":null,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Manchester, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":50000,"max":55000,"currency":"GBP","period":"year","gross":null,"usd_annual":73622},"salary_estimate":null,"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Cortex","optional":false},{"name":"Cortex XDR","optional":false},{"name":"Cortex XSOAR","optional":false},{"name":"GDPR","optional":false},{"name":"ITIL","optional":false},{"name":"ITSM","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"Nessus","optional":false},{"name":"Service Desk","optional":false},{"name":"SIEM","optional":false},{"name":"SOC 2","optional":false},{"name":"Splunk","optional":false},{"name":"Windows","optional":false},{"name":"Prometheus","optional":true}],"status":"live","first_seen_at":"2026-09-02T14:40:32Z","employer_posted_date":"2026-09-02","last_verified_at":"2026-10-22T07:41:48Z","board_verified":false,"closed_at":null,"days_open":56,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":56},"description":"An exciting opportunity has arisen to join our growing ICT Department as a member of the InfoSec team, working in a dynamic and fast-paced environment with new challenges every day, based in our Manchester Head Office. Having rationalised our infrastructure and established a modern, cloud-first security stack, it is an exciting time to join the business as we mature our detection, response, and automation capabilities across a global estate. You will work collaboratively with the business and the wider IT team - Infrastructure, Network, Development, DevOps, and Service Desk - to provide security and governance for existing and new services.\nThe purpose of this role is to deliver the day-to-day security operations of the InfoSec Team and to act as a first point of escalation and support for our Junior and Graduate analysts. Reporting to the Associate Director - Cyber Security, you will work closely with other team members, IT colleagues, and the wider business to ensure a consistent approach to information and cyber security across all areas of IT.\nYou will analyse security events, investigate alerts, identify issues, and recommend and implement solutions, while keeping up to date with current threats, technologies, and techniques. You will be responsible for daily security operations, ensuring risks are identified and resolved in a timely manner. In practice, this means managing tickets and requests through Halo ITSM and working daily with Palo Alto Cortex XSIAM and XSOAR, Cortex XDR, Microsoft Purview, Mimecast, Abnormal, Nessus, and Microsoft 365.\nYou will participate in security investigations and incident response, responding to events involving malware, data loss, phishing, or network intrusion, and supporting our data protection and vulnerability management activity. You will work both independently and collaboratively, sharing knowledge openly and supporting your colleagues across all regions. You will follow security best practice, apply the principles of layered security, and serve as a trusted resource to the wider business on all matters of information and cyber security.\nThis is a customer-facing role, so you will be a strong communicator, able to explain complex concepts clearly to both technical and non-technical audiences, with your input helping to shape and improve our day-to-day monitoring, detection, and response. You will be self-motivated, bringing the knowledge and experience gained in previous roles, genuinely passionate about data and cyber security, and committed to continued learning and professional development.\nKey Objectives and Responsibilities\nDaily Operations & Incident Handling\nManage day-to-day security tickets, requests, and alerts through Halo ITSM, meeting SLAs and making full use of existing automation.\nMonitor, triage, and investigate alerts within Palo Alto Cortex XSIAM, responding and escalating as required.\nRespond to security incidents involving malware, data loss, phishing, or network intrusion, following established playbooks and incident response processes.\nManage email security operations across Mimecast and Abnormal, including releases, journal pulls, and reported-phishing investigations.\nMonitor threat feeds and threat intelligence, applying relevant findings to the environment.\nMaintain and tune detections, correlation rules, and Cortex XSOAR playbooks to reduce noise and improve response times.\nIdentify opportunities for automation and continual improvement across monitoring and response workflows.\nContribute to the development and upkeep of SOC processes, runbooks, and documentation.\nRun and interpret vulnerability scans using Nessus, tracking remediation through to closure with the relevant teams.\nSupport endpoint security and patch compliance across the Windows and macOS estates, working with Intune, Jamf, Alectrona, and Cortex XDR.\nData Protection & Compliance\nSupport and monitor the company’s Data Loss Prevention controls within Microsoft Purview, and data classification through Azure Information Protection labelling.\nHelp maintain the evidence and controls that support the company’s accreditations, including ISO/IEC 27001, 27017, and 27018, Cyber Essentials Plus, and SOC 2.\nLearn and apply the principles of risk and information governance within the context of cyber security.\nExperience and Technical Requirements\nTwo or more years’ experience in a cyber security, SOC, or information security analyst role.\nExperience working within an ISO/IEC 27001 (or equivalent) accredited environment.\nFamiliarity with ITIL service management processes, particularly Incident, Request, Change, and Problem management.\nUnderstanding of GDPR, data protection, and information governance.\nHands-on experience with a SIEM platform (Cortex XSIAM, Microsoft Sentinel, Splunk, or equivalent).\nExperience with, or a strong aptitude to learn, SOAR and automation tooling (Cortex XSOAR).\nExperience with Endpoint Detection and Response (Cortex XDR or an equivalent EDR/XDR platform).\nExperience with email security platforms (O365, Mimecast, Abnormal, or equivalent).\nUnderstanding of Data Loss Prevention and data classification (Microsoft Purview and Azure labelling, or equivalent).\nExperience with vulnerability scanning and management (Nessus or equivalent).\nWorking knowledge of endpoint management across Windows and macOS (Intune, Jamf).\nStrong knowledge of cloud environments, including Microsoft Azure, AWS, and Microsoft 365.\nUnderstanding of layered security, threat hunting, and incident response.\nQualifications\nA degree in a computer-related subject, or equivalent experience in cyber security.\nHolding, or actively working towards, relevant industry certifications (e.g. SANS GCIH, EC-Council CEH, ISC2 SSCP, CompTIA CySA+, Blue Team Level 1, Microsoft SC-200, or equivalent), with a genuine commitment to continued professional development. \nBenefits\n25 Days Holiday + Bank Holidays\nDay off for your birthday\nHealth Shield Cash Plan\nCycle to Work Scheme\nTrain Season Ticket Scheme\nProfit Share Scheme\nContributory company pension scheme \nAccess to the Employee Assistance Programme (EAP)\n51903MS\nINDMANS\nThe Portfolio Group are acting on behalf of our client in recruiting for this position.","description_format":"text","description_chars":6223,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-22T03:22:37Z"}],"visa":[],"liveness":{"score":6,"band":"cold","label":"Long shot","p_open":0.9,"p_active":0.221,"p_room":0.28,"age_days":56,"expected_fill_days":28,"reasons":["conf:166","agency","stale_co","urgency","velocity","win:tail","crowd:junior,brand"],"computed_at":"2026-10-29T05:49:05Z"},"pay":{"stated_usd_annual":73622,"is_top_pay":false},"html_url":"https://alion.io/job/the-portfolio-group-cyber-security-analyst-2","json_url":"https://alion.io/job/the-portfolio-group-cyber-security-analyst-2.json","meta":{"generated_at":"2026-10-29T14:27:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":21775,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2630175},"rest":"https://alion.io/mcp/rest/get_company?id=2630175"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fthe-portfolio-group-cyber-security-analyst-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fthe-portfolio-group-cyber-security-analyst-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fthe-portfolio-group-cyber-security-analyst-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/the-portfolio-group-cyber-security-analyst-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fthe-portfolio-group-cyber-security-analyst-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3055235}},{"tool":"search_jobs","arguments":{"company":"theportfoliogroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3055235},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}