Cyber Security Analyst

Hampshire Source: WhatJobs

£65,000–£65,000

If you enjoy getting hands-on with cyber security, investigating threats and improving the protection of complex IT environments, this could be an opportunity worth exploring.
Cyber Security Analyst
Southampton | Hybrid - 3 days on-site | Up to 65,000
We're working with a UK rail freight and logistics business looking for a Cyber Security Analyst to support its IT Systems Manager in protecting systems, networks and data across the organisation.
This is an operational, technically focused role combining cyber security, network security and elements of systems administration. You'll work alongside infrastructure, applications and service delivery teams, helping maintain security controls, investigate incidents and support compliance across the business.
The Role
You'll take responsibility for day-to-day security operations, helping ensure that security controls are working effectively and that potential risks are identified and addressed.
Your responsibilities will include:

Monitoring security systems, investigating alerts and coordinating incident resolution.
Configuring, maintaining and supporting security technologies across on-premises, cloud and SaaS environments.
Supporting firewalls, VPNs, endpoint protection, email security, identity and access controls, vulnerability management and security monitoring platforms.
Coordinating vulnerability assessments and working with system owners to track remediation through to completion or formal acceptance.
Reviewing systems, applications and cloud services for secure configuration and alignment with approved standards.
Supporting penetration tests, audits, assurance reviews and accreditation activities.
Contributing technical evidence and documentation for security policies, risk assessments and compliance requirements.
Providing practical security guidance to technical teams and project stakeholders.
Identifying opportunities to improve security services through upgrades, automation and better operational processes.

You'll also help maintain alignment with the NIST Cybersecurity Framework and applicable Network and Information Systems (NIS) Regulations.
What You'll Bring
You'll have significant hands-on experience supporting complex IT, network or cyber security environments, with a strong understanding of how security controls operate across infrastructure, networks, endpoints, cloud services and applications.
You'll also bring:

Practical knowledge of TCP/IP, firewalls, VPNs, DNS, DHCP, certificates and SSL/TLS.
Experience with vulnerability scanning, secure configuration assessments and remediation tracking.
An understanding of common attack techniques, security monitoring and incident response.
Knowledge of the OWASP Top 10 and recognised cyber security principles.
An understanding of the NIST Cybersecurity Framework and NIS Regulations.
Experience working towards Cyber Essentials.
The ability to maintain security policies, procedures, technical documentation and audit evidence.
A methodical approach to investigating issues, prioritising risks and communicating findings clearly.

You'll be comfortable working with technical teams and stakeholders, managing competing priorities and taking ownership of security-related actions. A willingness to support occasional out-of-hours requirements is also needed.
Desirable Experience
Experience with any of the following would be useful:

Microsoft Azure, Microsoft 365, Entra ID, Defender or Sentinel.
SIEM, endpoint detection and response, secure web gateways, email security or privileged access technologies.
Security audits, NIS compliance, assurance reviews or accreditation programmes.
ITIL or working within an IT service management framework.
Relevant certifications such as CompTIA Security+, CISSP, SSCP, CCNA Security or Microsoft and Palo Alto Networks security certifications.
Working in a regulated, safety-critical, transport, logistics or multi-site environment.

What's on Offer