Cyber Security Analyst

• Support the IT Systems Manager in protecting systems, networks and data across the organisation.
• Take responsibility for day-to-day security operations and help ensure security controls are working effectively.
• Monitor security systems, investigate alerts and coordinate incident resolution.
• Configure, maintain and support security technologies across on-premises, cloud and SaaS environments.
• Support firewalls, VPNs, endpoint protection, email security, identity and access controls, vulnerability management and security monitoring platforms.
• Coordinate vulnerability assessments and work with system owners to track remediation through to completion or formal acceptance.
• Review systems, applications and cloud services for secure configuration and alignment with approved standards.
• Support penetration tests, audits, assurance reviews and accreditation activities.
• Contribute technical evidence and documentation for security policies, risk assessments and compliance requirements.
• Provide practical security guidance to technical teams and project stakeholders.
• Identify opportunities to improve security services through upgrades, automation and better operational processes.
• Help maintain alignment with the NIST Cybersecurity Framework and applicable Network and Information Systems Regulations.

Technologies:

• Azure
• Cloud
• Support
• ITIL
• Microsoft 365
• Network
• OWASP
• Security
• TCP/IP
• Web
• Office 365
• Ruby, We are a UK rail freight and logistics business offering a Cyber Security Analyst role based in Southampton with hybrid working, including 3 days on-site. This is an operational, technically focused position that combines cyber security, network security and elements of systems administration. You will work alongside infrastructure, applications and service delivery teams to help maintain security controls, investigate incidents and support compliance across the business. The role offers a salary up to £65,000, 25 days holiday plus bank holidays, company pension and life assurance, employee discounts, a Cycle to Work scheme, ongoing training and career development, and Employee Assistance Programme and wellbeing support. Occasional travel to other sites may also be required.

• Significant hands-on experience supporting complex IT, network or cyber security environments.
• Strong understanding of how security controls operate across infrastructure, networks, endpoints, cloud services and applications.
• Practical knowledge of TCP/IP, firewalls, VPNs, DNS, DHCP, certificates and SSL/TLS.
• Experience with vulnerability scanning, secure configuration assessments and remediation tracking.
• Understanding of common attack techniques, security monitoring and incident response.
• Knowledge of the OWASP Top 10 and recognised cyber security principles.
• Understanding of the NIST Cybersecurity Framework and NIS Regulations.
• Experience working towards Cyber Essentials.
• Ability to maintain security policies, procedures, technical documentation and audit evidence.
• Methodical approach to investigating issues, prioritising risks and communicating findings clearly.
• Comfortable working with technical teams and stakeholders, managing competing priorities and taking ownership of security-related actions.
• Willingness to support occasional out-of-hours requirements.
• Desirable: experience with Microsoft Azure, Microsoft 365, Entra ID, Defender or Sentinel.
• Desirable: experience with SIEM, endpoint detection and response, secure web gateways, email security or privileged access technologies.
• Desirable: experience with security audits, NIS compliance, assurance reviews or accreditation programmes.
• Desirable: experience with ITIL or working within an IT service management framework.
• Desirable: relevant certifications such as CompTIA Security+, CISSP, SSCP, CCNA Security or Microsoft and Palo Alto Networks security certifications.
• Desirable: experience working in a regulated, safety-critical, transport, logistics or multi-site environment.