Cybersecurity Analyst

Trupanion

. Monitor and triage alerts across identity, endpoint, email, network, cloud, application, vulnerability, and data-protection technologies .

Posted 11/3/2026full-timeRemote • Altrincham • United KingdomMid-LevelSenior💰 £50,000 - £60,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in cybersecurity operations, incident response, and threat intelligence analysis, with a strong focus on vulnerability management and remediation workflows. Proficient in utilizing security tools and methodologies to investigate and respond to security incidents effectively.

Highest-signal resume keywords

Cybersecurity OperationsIncident ResponseThreat Intelligence AnalysisVulnerability ManagementSecurity Automation

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

SIEMEDR/XDRVulnerability ScanningThreat HuntingDigital ForensicsIncident TelemetryPhishing SimulationsScriptingRisk AssessmentEvidence Preservation

Soft Skills

CollaborationProblem-SolvingAttention to DetailCommunicationConfidentiality Handling

Tools & Technologies

Microsoft DefenderMicrosoft SentinelMicrosoft 365AzureIdentity SecurityCloud SecurityEndpoint Environments

Industry Keywords

NIST CSFISO 27001PCI DSSNYDFS Cybersecurity RequirementsMITRE ATT&CK

Tech Stack

Tools & technologies

AzureCloudCyber Security

About the role

Key responsibilities & impact

Monitor and triage alerts across identity, endpoint, email, network, cloud, application, vulnerability, and data-protection technologies
Validate, enrich, classify, prioritize, and investigate security events and incidents
Execute approved containment actions and coordinate infrastructure-level or production changes with Technology Operations
Collect and preserve evidence and support eradication, recovery validation, heightened monitoring, and closure
Collect and evaluate threat intelligence from commercial, government, industry, open-source, MDR, vendor, and internal sources
Analyze threat actors, campaigns, tactics, techniques, procedures, indicators, exploited vulnerabilities, and targeted technologies
Create intelligence products and operationalize findings through investigations, detections, hunting queries, watchlists, blocking actions, phishing simulations, and runbook updates
Conduct hypothesis-driven threat hunts using MITRE ATT&CK
Validate vulnerability findings, assess risk and business exposure, prioritize remediation, identify exploitation, and escalate urgent vulnerabilities
Partner with Security Engineering and coordinate remediation assignments with technology and application owners
Maintain vulnerability ticket flow, track service levels, report overdue exposure, and escalate ownership or delivery issues
Develop and maintain approved automation workflows, scripts, and playbooks
Preserve evidence under approved forensic, legal-hold, integrity, and chain-of-custody procedures
Maintain complete case records and validate incident containment and corrective actions
Support breach, identity, third-party, supply-chain, and AI-related security investigations
Execute MDR monitoring, threat-intelligence analysis, threat hunting, vulnerability validation, remediation follow-up, metrics, reporting, case documentation, and authorized security-tool actions
Escalate architecture, complex integration, detection-platform design, routine vulnerability-management administration, and permanent engineering needs to Security Engineering
Provide structured handovers across operating regions
Provide technical evidence to Legal and Privacy

Requirements

What you’ll need

Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Digital Forensics, or a related field, or equivalent practical experience
Experience and expertise in cybersecurity operations, incident response, IT operations, system administration, network security, or a related area
Experience investigating alerts using SIEM, EDR/XDR, identity, email, cloud, network, or vulnerability technologies
Knowledge of common attacker techniques, phishing, malware, account compromise, privilege misuse, lateral movement, exfiltration, and vulnerability exploitation
Demonstrated experience applying threat intelligence and incident telemetry to vulnerability prioritization and exploitation assessment
Experience with security automation or scripting, digital-evidence handling, identity investigations, third-party incident analysis, and structured case management
Experience with Microsoft Defender, Microsoft Sentinel, Microsoft 365, Azure, identity security, privileged access management, cloud security, and endpoint environments
Familiarity with MITRE ATT&CK and common detection, threat-hunting, and incident-response methodologies
Understanding of vulnerability scanning and remediation workflows and the division of responsibility between vulnerability-program governance, threat-led escalation, and asset-owner remediation
Knowledge of NIST CSF, ISO 27001, PCI DSS, NYDFS cybersecurity requirements, or privacy and breach-response obligations
Ability to support defined US business-hour coverage and participate in an escalation or on-call rotation
Availability to assist with high-severity incidents outside normal working hours when required
Ability to handle confidential, legally sensitive, and security-restricted information appropriately

Benefits

Comp & perks

Monthly bonuses
Restricted Stock Units; new hire grants vest over 4 years
Private medical insurance and health cash plans
33 days annual leave including bank holidays
Five-week sabbatical after five years of employment
Open, casual, and fun office environment
Cycle to work scheme
Life Insurance, Critical Illness Cover and Group Income Protection
Lifestyle Spending Account
Employee Assistance Programmes including Mental Health Support, Medical Referrals, Legal and Financial Support and Perks