Cyber Security Analyst

In this Cyber Security Analyst role, you protect IT systems, networks and data across a rail logistics environment. You will work with IT, infrastructure and service teams to operate security controls, investigate incidents and support compliance. The role combines cyber and network security with elements of systems administration, across on‑premises, cloud and SaaS. You join a hands-on security function focused on improving protection and incident response in a complex, multi-site operation.

• Hybrid working
• 25 days’ holiday + bank holidays
• Company pension and life assurance
• Employee discounts
• Cycle to Work scheme
• Ongoing training and career development

• Monitor security systems, investigate alerts and coordinate incident resolution
• Configure and support security technologies across on‑premises, cloud and SaaS environments
• Support firewalls, VPNs, endpoint protection, email security, IAM, vulnerability management and monitoring platforms
• Coordinate vulnerability assessments and track remediation through to completion
• Review systems and cloud services for secure configuration and alignment with standards
• Support penetration tests, audits, assurance reviews and accreditation activities
• Provide evidence and documentation for security policies, risk assessments and compliance
• Offer practical security guidance to technical teams and stakeholders
• Identify opportunities to improve security services via upgrades, automation and better processes
• Maintain alignment with NIST Cybersecurity Framework and NIS Regulations

• Hands-on experience in supporting complex IT, network or cyber security environments
• Strong understanding of security controls across infrastructure, networks, endpoints, cloud and applications
• Practical knowledge of TCP/IP, firewalls, VPNs, DNS, DHCP, certificates and SSL/TLS
• Experience with vulnerability scanning and remediation tracking
• Understanding of common attack techniques, security monitoring and incident response
• Knowledge of the OWASP Top 10 and cyber security principles
• Understanding of NIST Cybersecurity Framework and NIS Regulations
• Experience working towards Cyber Essentials
• Ability to maintain security policies, procedures, and audit evidence
• Methodical issue investigation, risk prioritisation and clear communication
• Comfort working with technical teams and stakeholders; willingness for occasional out‑of‑hours work

• Collaborative
• Analytical and methodical
• Strong communication
• TCP/IP
• Firewalls
• VPNs