Cyber Security Analyst

Job description

We're growing our Cyber Security function from the ground up, and this role sits at the heart of it. As Cyber Security Analyst, you'll support and enhance our security operations capability - monitoring, detecting, and responding to threats across our digital estate using SIEM, EDR/XDR and related platforms.

What you'll do:

• Lead or support incident response end-to-end: triage, containment, eradication, recovery, and post-incident review
• Run proactive threat hunting to catch what existing controls miss
• Build and refine detection use cases, playbooks, and operational procedures
• Support vulnerability management, security testing, and control validation (including penetration testing coordination and phishing simulations)
• Produce clear technical reports and root-cause analysis following incidents and investigations
• Act as a subject matter resource for cyber security across the University, including awareness and training initiatives

What you'll bring:

• Strong understanding of security technologies and controls - endpoint protection, network security, IDS/IPS, SIEM/EDR
• Experience working in large, complex IT or network environments supporting critical infrastructure
• Knowledge of recognised security standards and risk assessment methodologies
• A relevant degree or equivalent experience; ISC2, CompTIA, or ISACA certification desirable
• The ability to communicate technical risk clearly to both peers and non-technical stakeholders

Why this role: you won't be inheriting a fixed rulebook - you'll help write it, as part of a team building SOC and defensive security capability from scratch.