Cyber Security Analyst

<p class="text-muted mb-3">If you enjoy getting hands-on with cyber security, investigating threats and improving the protection of complex IT environments, this could be an opportunity worth exploring.</p>

<p class="text-muted mb-3">Cyber Security Analyst</p>

<p class="text-muted mb-3">Southampton | Hybrid - 3 days on-site | Up to £65,000</p>

<p class="text-muted mb-3">We're working with a UK rail freight and logistics business looking for a Cyber Security Analyst to support its IT Systems Manager in protecting systems, networks and data across the organisation.</p>

<p class="text-muted mb-3">This is an operational, technically focused role combining cyber security, network security and elements of systems administration. You'll work alongside infrastructure, applications and service delivery teams, helping maintain security controls, investigate incidents and support compliance across the business.</p>

<p class="text-muted mb-3">The Role</p>

<p class="text-muted mb-3">You'll take responsibility for day-to-day security operations, helping ensure that security controls are working effectively and that potential risks are identified and addressed.</p>

<p class="text-muted mb-3">Your responsibilities will include:</p>

<p class="text-muted mb-3">Monitoring security systems, investigating alerts and coordinating incident resolution.</p>

<p class="text-muted mb-3">Configuring, maintaining and supporting security technologies across on-premises, cloud and SaaS environments.</p>

<p class="text-muted mb-3">Supporting firewalls, VPNs, endpoint protection, email security, identity and access controls, vulnerability management and security monitoring platforms.</p>

<p class="text-muted mb-3">Coordinating vulnerability assessments and working with system owners to track remediation through to completion or formal acceptance.</p>

<p class="text-muted mb-3">Reviewing systems, applications and cloud services for secure configuration and alignment with approved standards.</p>

<p class="text-muted mb-3">Supporting penetration tests, audits, assurance reviews and accreditation activities.</p>

<p class="text-muted mb-3">Contributing technical evidence and documentation for security policies, risk assessments and compliance</p>

<h5 class="fw-bold text-success mt-4 mb-3">requirements.</h5>

<p class="text-muted mb-3">Providing practical security guidance to technical teams and project stakeholders.</p>

<p class="text-muted mb-3">Identifying opportunities to improve security services through upgrades, automation and better operational processes.</p>

<p class="text-muted mb-3">You'll also help maintain alignment with the NIST Cybersecurity Framework and applicable Network and Information Systems (NIS) Regulations.</p>

<p class="text-muted mb-3">What You'll Bring</p>

<p class="text-muted mb-3">You'll have significant hands-on experience supporting complex IT, network or cyber security environments, with a strong understanding of how security controls operate across infrastructure, networks, endpoints, cloud services and applications.</p>

<p class="text-muted mb-3">You'll also bring:</p>

<p class="text-muted mb-3">Practical knowledge of TCP/IP, firewalls, VPNs, DNS, DHCP, certificates and SSL/TLS.</p>

<p class="text-muted mb-3">Experience with vulnerability scanning, secure configuration assessments and remediation tracking.</p>

<p class="text-muted mb-3">An understanding of common attack techniques, security monitoring and incident response.</p>

<p class="text-muted mb-3">Knowledge of the OWASP Top 10 and recognised cyber security principles.</p>

<p class="text-muted mb-3">An understanding of the NIST Cybersecurity Framework and NIS Regulations.</p>

<p class="text-muted mb-3">Experience working towards Cyber Essentials.</p>

<p class="text-muted mb-3">The ability to maintain security policies, procedures, technical documentation and audit evidence.</p>

<p class="text-muted mb-3">A methodical approach to investigating issues, prioritising risks and communicating findings clearly.</p>

<h5 class="fw-bold text-success mt-4 mb-3">You'll be comfortable working with technical teams and stakeholders, managing competing priorities and taking ownership of security-related actions. A willingness to support occasional out-of-hours requirements is also needed.</h5>

<p class="text-muted mb-3">Desirable Experience</p>

<p class="text-muted mb-3">Experience with any of the following would be useful:</p>

<p class="text-muted mb-3">Microsoft Azure, Microsoft 365, Entra ID, Defender or Sentinel.</p>

<p class="text-muted mb-3">SIEM, endpoint detection and response, secure web gateways, email security or privileged access technologies.</p>

<p class="text-muted mb-3">Security audits, NIS compliance, assurance reviews or accreditation programmes.</p>

<p class="text-muted mb-3">ITIL or working within an IT service management framework.</p>

<p class="text-muted mb-3">Relevant certifications such as CompTIA Security+, CISSP, SSCP, CCNA Security or Microsoft and Palo Alto Networks security certifications.</p>

<p class="text-muted mb-3">Working in a regulated, safety-critical, transport, logistics or multi-site environment.</p>

<p class="text-muted mb-3">What's on Offer</p>

<p class="text-muted mb-3">Salary up to £65,000.</p>

<p class="text-muted mb-3">Hybrid working, with 3 days a week on-site in Southampton.</p>

<p class="text-muted mb-3">25 days' holiday plus bank holidays.</p>

<p class="text-muted mb-3">Company pension and life assurance.</p>

<p class="text-muted mb-3">Employee discounts and Cycle to Work scheme.</p>

<p class="text-muted mb-3">Ongoing training and career development.</p>

<p class="text-muted mb-3">Employee Assistance Programme and wellbeing support.</p>

<p class="text-muted mb-3">Occasional travel to other sites may also be required.</p>

<p class="text-muted mb-3">Apply now or contact Ruby Calver at Spectrum IT Recruitment to find out more.</p>

<p class="text-muted mb-3">Spectrum IT Recruitment (South) Limited is acting as an Employment Agency in relation to this vacancy</p>