Cybersecurity Analyst
Spot the gaps in client sites, inboxes and apps before an attacker does, and turn each one into a fix a busy owner can act on.
Security · Part time · Remote (UK hours)
Hours
4 to 12 hours a week
Start
When a client support plan with security reviews is signed. We are building our contractor bench ahead of client work, so we will not promise volume. Contract to start, with the option to go permanent if it goes well.
Rate
Competitive, tell us your day rate
What you will do
- Run a monthly security pass over client sites, apps and domains on Hashton support plans, so problems are fixed before they cost money or trust.
- Check the basics that hurt small firms most: patching, dependencies, headers, TLS, exposed admin panels and leaked secrets.
- Harden email and DNS with SPF, DKIM and DMARC, so a client's own domain cannot easily be used to send fake invoices.
- Write a short monthly report: severity, the risk in plain English, the fix and who owns it.
- Escalate anything urgent the same day, then retest to confirm the fix landed.
Must-haves
- You have assessed real production sites and small-business systems, not only labs and CTFs.
- Strong on web application security, email authentication and DNS.
- You explain a finding without fear-selling, and rank it by real business risk.
- At ease with SME reality: small teams, mixed stacks, no SOC and a budget to respect.
- Dependable hours that overlap with the UK working day, and a quick reply when something cannot wait.
Nice-to-haves
- Cyber Essentials or Cyber Essentials Plus experience.
- Next.js, Vercel and Cloudflare setups, or WordPress sites someone else left behind.
- A report template you already like, and the habit of retesting.
Apply
A short form. We need your CV and day rate.