Cyber Security Analyst

Crewe Source: WhatJobs

See advert for pay

Overview

As a Cyber Security Analyst at Radius, you safeguard systems and data, driving threat detection and incident response in a fast-paced environment. You will align security controls with business needs, contribute to ISMS (ISO 27001 and Cyber Essentials Plus), and shape SOC processes with the cyber team. You collaborate across IT and business units to embed secure design and compliance. This role offers impact through enhancing security posture and supporting scalable, secure operations.

Pay / Benefits

Pension
Life assurance
Employee fuel card scheme
Electric Vehicle scheme
Employee assistance programme
Wellness and healthcare assistance via by Unum

Responsibilities

Collaborate with IT Operations and business teams to implement security controls across internal and customer-facing platforms.
Identify cyber security risks and control gaps; propose risk-reducing improvements.
Design and develop secure cloud-based infrastructure and services; embed security by design.
Work with software teams to integrate secure SDLC practices and cyber requirements.
Create and maintain security policies, standards, and technical documentation.
Monitor security events, perform threat detection, investigate incidents, and limit business impact.
Lead vulnerability management activities: identify, assess risk, track remediation, report.
Conduct threat intelligence research and recommend security improvements.
Coordinate with third-party security vendors and MSPs to support operations and enhancements.
Lead security projects to enhance capability, resilience, and compliance.

Key requirements

Strong technical knowledge of cyber security and practical application across tech environments.
Solid understanding of application security and secure SDLC collaboration.
Experience with vulnerability management, penetration testing, and security assessments with remediation focus.
Experience with EDR, NDR and SIEM technologies for monitoring, alerting, and response.
Knowledge of cyber incident response lifecycle (triage, containment, recovery).
Familiarity with Cyber Essentials, Cyber Essentials Plus and ISO 27001.
Solid understanding of Windows/Linux, networking, servers, virtualization, databases, web servers, TCP/IP, DNS, firewalls and controls.
Knowledge of cloud security (preferably AWS) with IAM, logging, monitoring and configuration.
Understanding of DLP, data security, software supply-chain risk.
Understanding of network security, WAFs, IAM and secure architecture principles.
Understanding of Red Teaming, adversarial testing and vulnerability disclosure programs.
Knowledge of cyber threat intelligence, phishing, social engineering, insider risk management.
Familiarity with MITRE ATT&CK and NIST CSF.
Strong analytical and problem-solving skills; ability to document and communicate findings.
Ability to engage with technical and non-technical stakeholders; ITIL/service management awareness.
Commitment to staying current with evolving threats and technologies.