Cyber Security Analyst

Overview

In this role you’ll protect systems, networks and data for a UK rail freight and logistics organisation. You will work alongside IT, security and service teams on security operations, threat investigations and compliance. The position blends cyber and network security with some systems administration to maintain effective controls. You’ll operate in a hybrid environment focused on practical security improvements and risk remediation, contributing to higher security maturity. This is a hands-on opportunity to shape security across on-prem, cloud and SaaS environments.

Pay / Benefits

• salary up to 65,000
• hybrid working
• 25 days’ holiday plus bank holidays
• company pension
• life assurance
• paid on-call allowance’,’employee discounts and Cycle to Work scheme? hmm

Responsibilities

• Monitor security systems, investigate alerts and coordinate incident resolution
• Configure and support security technologies across on-premises, cloud and SaaS environments
• Support firewalls, VPNs, endpoint protection, email security, IAM, vulnerability management and monitoring platforms
• Coordinate vulnerability assessments and track remediation through to completion
• Review systems and cloud services for secure configurations aligned with standards
• Support penetration tests, audits and accreditation activities
• Provide security guidance to technical teams and stakeholders
• Identify improvements to security services through upgrades, automation and process changes
• Maintain alignment with the NIST Cybersecurity Framework and NIS Regulations

Key requirements

• Hands-on experience supporting complex IT, network or cyber security environments
• Strong understanding of security controls across infrastructure, networks, endpoints, cloud and applications
• Practical knowledge of TCP/IP, firewalls, VPNs, DNS, DHCP, certificates and SSL/TLS
• Experience with vulnerability scanning and remediation tracking
• Understanding of common attack techniques, security monitoring and incident response
• Knowledge of the OWASP Top 10 and cyber security principles
• Familiarity with NIST Cybersecurity Framework and NIS Regulations
• Experience working towards Cyber Essentials
• Ability to maintain security policies, procedures and audit evidence
• Methodical approach to investigating issues, prioritising risks and clear communication
• Comfort working with technical teams and stakeholders; able to manage competing priorities and take ownership; willingness for occasional out-of-hours work

• Clear communication
• Prioritisation and ownership
• Collaborative and cross-functional teamwork
• TCP/IP
• Firewalls
• VPNs

…