Skip to content

Cyber Security Analyst

Also advertised as: Cyber Defence Analyst, Cyber Security Analyst, Information Security Analyst, Junior Penetration Tester, Security Engineer, Security Operations Analyst

Monitors for attacks, investigates alerts and hardens systems against threats.

What the job involves

Security analysts watch for suspicious activity, triage and investigate alerts, run vulnerability scans and help fix weaknesses. Many enter from IT support with certifications rather than a security degree. Demand consistently outstrips supply.

Typical responsibilities

  • Monitor security alerts and triage incidents
  • Investigate suspicious activity
  • Run and interpret vulnerability scans
  • Support incident response and recovery
  • Improve security controls and awareness

Common employers

  • Managed security providers
  • Banks
  • Government
  • Retail groups
  • Consultancies

Pay, hours and working environment

Typical pay

£28,000 – £35,000 a year

With experience

£45,000 – £70,000 a year

Typical hours

37.5 hours, often shift or on-call in a SOC

Working environment

Office or remote security operations

Remote working

remote

Demand for this work

high

Pay ranges are indicative guidance drawn from advertised UK vacancies and published careers information. They are not an offer, and actual pay varies by employer, location and experience.

Skills and qualifications

Core skills

  • Threat detection
  • Networking
  • Incident response
  • Log analysis
  • Security tooling

Transferable skills you may already have

  • IT support troubleshooting
  • Methodical investigation
  • Shift working

Requirements employers ask for

  • Threat detection
  • Networking
  • Incident response
  • Log analysis
  • Security tooling
  • No formal qualification required
  • Security clearance for some employers

Useful but not essential

  • IT support troubleshooting
  • Methodical investigation
  • Shift working
  • CompTIA Security+
  • Level 4 Cyber Security Technologist apprenticeship
  • SC-200 or equivalent

Helpful qualifications

  • CompTIA Security+
  • Level 4 Cyber Security Technologist apprenticeship
  • SC-200 or equivalent

Licences and checks

  • Security clearance for some employers

Ways into this career

A degree is only one route. Where an apprenticeship, work-experience or qualification route exists, it is listed here alongside the academic option.

Apprenticeships and work-based routes

  • Cyber Security Technologist (Level 4)
  • Cyber Security Technical Professional (Level 6)

Degree and college routes

  • Related subject: Cyber security
  • Related subject: Computing
  • Related subject: Networks

Where this career can lead

  1. next

    Senior Security Analyst

  2. next

    Incident Response Lead

  3. next

    Security Architect

The good parts and the hard parts

What people enjoy

  • Severe skills shortage
  • Clear certification ladder
  • Strong pay progression

What people find hard

  • Shift work in security operations
  • High stakes during incidents

Common questions

Do you need a degree to become a cyber security analyst?
No. As well as degree routes, this career can be entered through an apprenticeship or by building experience and qualifications on the job. not_required
How much does a cyber security analyst earn in the UK?
Typical advertised pay runs from £28,000 to £35,000 a year, rising towards £70,000 with experience. Figures are indicative guidance rather than an offer.
What skills transfer into this career?
Skills that transfer well include IT support troubleshooting, Methodical investigation, Shift working.

Related careers

Where this information comes from

  • National Careers Service
  • Institute for Apprenticeships

Last reviewed 14 September 2026.

Read how our career data is built and reviewed, or tell us if something here is wrong.