> Markdown version of [/jobs/ext/2789619-cyber-security-analyst](https://www.wearedevelopers.com/jobs/ext/2789619-cyber-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Cyber Security Analyst - **Company:** East West Railway Company - **Location:** Milton Keynes, UK - **Contract:** Permanent contract - **Skills:** Software System Penetration Testing, CompTIA Security+, Cyber Security, Data Loss, Multi-Factor Authentication, Identity and Access Management, Information Technology Operations, Microsoft Security Essentials, Phishing, Software Vulnerability Management, Malware, Microsoft InTune, Information Technology, CIS Benchmarks - **Published:** September 8, 2026 - **Apply:** https://www.collegerecruiter.com/job/2842881412-cyber-security-analyst ## About the Role * A background in cyber security, information security, IT operations, or a closely related discipline, with the ability to apply security principles in a practical business environment. * Experience working within the Microsoft Security Stack, including tools such as Microsoft Defender, Purview, Entra, Sentinel, Intune, or equivalent security technologies. * Practical involvement in investigating and resolving cyber security alerts, incidents, vulnerabilities, or control issues. * A good understanding of common cyber security risks, threats, and controls, including phishing, malware, identity compromise, data loss, access control, and secure configuration. * Ability to document processes, procedures, configurations, decisions and findings clearly and accurately. * Analytical and problem-solving skills, with the ability to investigate issues methodically and draw evidence-based conclusions. * Effective communication skills, with the ability to explain cyber security issues to technical and non-technical colleagues. * A proactive, collaborative and service-oriented approach, with the flexibility to support wider IT operational activity where required. * Degree in IT, cyber security, computer science, or a related discipline, or a relevant certification such as CompTIA Security+, Microsoft SC-900, SC-200, AZ-500, CISMP, or equivalent experience. * Familiarity with cyber security frameworks, standards or guidance such as Cyber Essentials, ISO 27001, NCSC guidance, CIS Controls, NIST CSF, or UK Government security expectations. * Involvement in assurance activities such as control reviews, risk assessments, internal audits, penetration testing coordination, supplier assurance, or remediation tracking. * Background in developing security awareness content, phishing simulations, user guidance, or communications that help improve organisational security behaviours. * Knowledge of secure configuration, endpoint management, identity and access management, conditional access, multi-factor authentication, or vulnerability management. ## Description The role focuses on the effective use of the Microsoft security stack to establish prevention, detection and response to cyber-attack. It also helps operate security technologies such as DLP and Purview, and contributes to cyber assurance activities. In addition, the role contributes to the smooth running of IT operations by assisting the IT Helpdesk with incoming tickets., The Corporate Services function is accountable for providing core enabling capability to the other functional areas in EWR to maximise performance of the organisation, including IT, HR, financial management, and legal services. It is accountable for providing reporting services to enable decision making, and for assuring that quality systems and processes are in place., In this role, you will: * Assist the Cyber Lead in delivering EWR's IT Cyber Strategy. * Work with the Legal Team in the event of DSARs and FoI requests. * Work within the Microsoft Security Stack (Defender, Purview, Entra and others) to establish and maintain a robust control set, and work with East West Rail's Security Operations Centre (SOC) to monitor events for malign activity and indicators of compromise. * Maintain high-quality documentation of configuration, standards and procedures. * Support the Cyber Lead in gathering KPIs for reporting to the SIRO. * Respond to suspected or actual cyber incidents and conduct Root Cause Analysis exercises afterwards. * Contribute to the production of cyber communications for the business. * Conduct internal phishing simulations. * Work alongside the Cyber Lead in conducting IT assurance activities, including arranging third-party assurance such as penetration testing, and conducting internal assurance such as checking EWR's alignment with necessary standards and best practice. * Take responsibility for your own and others' health and safety by adopting and working to EWR Health and Safety principles. * Demonstrate a cost-conscious mindset, keeping taxpayers' money at the forefront of decisions. * Show commitment to innovation by proactively seeking creative solutions to challenges and opportunities. * Act as a role model for EWR's vision and behaviours, working in ways aligned with EWR Ways of Working, and encourage and support others to do so too. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Enhancing Workload Security in Kubernetes](https://www.wearedevelopers.com/videos/356-enhancing-workload-security-in-kubernetes) - [Passkeys: Truly Phishing-Resistant? Implementation and Pitfalls](https://www.wearedevelopers.com/videos/100156-passkeys-truly-phishing-resistant-implementation-and-pitfalls) - [How to Avoid LLM Pitfalls - Mete Atamel and Guillaume Laforge](https://www.wearedevelopers.com/videos/1328-how-to-avoid-llm-pitfalls-mete-atamel-and-guillaume-laforge) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Full Spectrum File Uploads](https://www.wearedevelopers.com/videos/870-full-spectrum-file-uploads) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)