Cyber Security Analyst

Overview

In this role you will protect IT systems, networks and data for a rail freight and logistics environment. You will work with infrastructure, applications and service delivery teams to maintain security controls, investigate incidents and support compliance. The role combines cyber security, network security and systems administration in an operational, hands-on capacity. You will contribute to risk reduction and security improvements across on-premises, cloud and SaaS environments. This is a hands-on, impactful position with a clear focus on security operations and governance.

Pay / Benefits

• salary up to 65,000
• hybrid working
• 25 days’ holiday plus bank holidays
• company pension
• life assurance
• employee discounts and Cycle to Work scheme/benefits (as listed)

Responsibilities

• Monitor security systems, investigate alerts and drive incident resolution
• Configure, maintain and support security technologies across on-premises, cloud and SaaS
• Support firewalls, VPNs, endpoint protection, email security, IAM, vulnerability management and security monitoring
• Coordinate vulnerability assessments and track remediation with system owners
• Review systems and cloud services for secure configuration against standards
• Support penetration tests, audits, assurance reviews and accreditation activities
• Provide technical evidence and documentation for policies, risk assessments and compliance
• Offer practical security guidance to technical teams and stakeholders
• Identify opportunities to improve security services through upgrades, automation and processes
• Maintain alignment with the NIST Cybersecurity Framework and NIS Regulations

Key requirements

• Hands-on experience in complex IT, network or cyber security environments
• Knowledge of TCP/IP, firewalls, VPNs, DNS, DHCP, certificates and SSL/TLS
• Experience with vulnerability scanning, secure configuration assessments and remediation tracking
• Understanding of attack techniques, security monitoring and incident response
• Knowledge of OWASP Top 10 and cyber security principles
• Understanding of NIST Cybersecurity Framework and NIS Regulations
• Experience working towards Cyber Essentials
• Ability to maintain security policies, procedures and audit evidence
• Methodical issue investigation, risk prioritisation and clear communication
• Ability to collaborate with technical teams and stakeholders; willingness to support out-of-hours

• methodical
• clear communicator
• stakeholder collaboration
• TCP/IP
• firewalls
• VPNs

…