Cyber Security Analyst

East West Railway Company; Milton Keynes; On-site; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Competitive salary

Pension contribution up to 12%

36 days annual leave (incl. bank)

Two volunteering days

Life assurance (4x salary)

Employee Assistance Programme

Perkbox access

Advanced learning & development

Job summary

East West Railway Company is seeking a Cyber Security Analyst to strengthen our cyber resilience and protect assets across IT, data and processes. You will operate within the Microsoft Security Stack, support SOC coordination, incident response and IT helpdesk tasks, while maintaining clear documentation and KPIs for governance and assurance.

You'll work in a collaborative environment, with a proactive posture toward security awareness and continuous improvement.

Qualifications

• Degree or higher in IT/cyber security or related.
• Proven experience in cyber security operations and incident response.
• Familiarity with security frameworks and compliance requirements.

Responsibilities

• Assist in delivering EWR's IT Cyber Strategy.
• Coordinate with Legal on DSARs and FoI requests.
• Operate within the Microsoft Security Stack to detect and respond to threats.
• Maintain documentation of configurations, standards and procedures.
• Support KPIs for reporting to the SIRO.
• Respond to security incidents and conduct root cause analysis.
• Coordinate third-party assurance activities like penetration testing.

Skills

Cyber security

Information security

IT operations

Analytical thinking

Communication skills

Problem solving

Proactive teamwork

Education

Degree in IT / cyber security / computer science

Certifications (CompTIA Security+, Microsoft SC-900/SC-200/AZ-500, CISMP)

Tools

Microsoft Defender

Purview

Entra

Sentinel

Intune

Job description

East West Rail is an infrastructure programme connecting communities between Oxford and Cambridge. The area is currently let down by a lack of transport choices, and we have a once-in-a-generation opportunity to fix that, improving prosperity for people and places along the way.

East West Railway Company (that's us) was created by the Department for Transport (DfT) to oversee the delivery of East West Rail from construction through to wheels in motion, making sure the railway comes together in the right way.

Role Summary

The Cyber team at EWR acknowledges that security must be applied not only to our technology, but also our people, processes and our data. The Cyber Security Analyst will play a key role in strengthening the organisation's cyber resilience.

The role focuses on the effective use of the Microsoft security stack to establish prevention, detection and response to cyber‑attack. It also helps operate security technologies such as DLP and Purview, and contributes to cyber assurance activities. In addition, the role contributes to the smooth running of IT operations by assisting the IT Helpdesk with incoming tickets.

Function

The Corporate Services function is accountable for providing core enabling capability to the other functional areas in EWR to maximise performance of the organisation, including IT, HR, financial management, and legal services. It is accountable for providing reporting services to enable decision making, and for assuring that quality systems and processes are in place.

Key Responsibilities

In this role, you will:

• Assist the Cyber Lead in delivering EWR's IT Cyber Strategy.
• Work with the Legal Team in the event of DSARs and FoI requests.
• Work within the Microsoft Security Stack (Defender, Purview, Entra and others) to establish and maintain a robust control set, and work with East West Rail's Security Operations Centre (SOC) to monitor events for malign activity and indicators of compromise.
• Maintain high-quality documentation of configuration, standards and procedures.
• Support the Cyber Lead in gathering KPIs for reporting to the SIRO.
• Respond to suspected or actual cyber incidents and conduct Root Cause Analysis exercises afterwards.
• Contribute to the production of cyber communications for the business.
• Conduct internal phishing simulations.
• Work alongside the Cyber Lead in conducting IT assurance activities, including arranging third‑party assurance such as penetration testing, and conducting internal assurance such as checking EWR's alignment with necessary standards and best practice.
• Take responsibility for your own and others' health and safety by adopting and working to EWR Health and Safety principles.
• Demonstrate a cost‑conscious mindset, keeping taxpayers' money at the forefront of decisions.
• Show commitment to innovation by proactively seeking creative solutions to challenges and opportunities.
• Act as a role model for EWR's vision and behaviours, working in ways aligned with EWR Ways of Working, and encourage and support others to do so too.

Skills Knowledge and Expertise

You will bring:

• A background in cyber security, information security, IT operations, or a closely related discipline, with the ability to apply security principles in a practical business environment.
• Experience working within the Microsoft Security Stack, including tools such as Microsoft Defender, Purview, Entra, Sentinel, Intune, or equivalent security technologies.
• Practical involvement in investigating and resolving cyber security alerts, incidents, vulnerabilities, or control issues.
• A good understanding of common cyber security risks, threats, and controls, including phishing, malware, identity compromise, data loss, access control, and secure configuration.
• Ability to document processes, procedures, configurations, decisions and findings clearly and accurately.
• Analytical and problem‑solving skills, with the ability to investigate issues methodically and draw evidence‑based conclusions.
• Effective communication skills, with the ability to explain cyber security issues to technical and non‑technical colleagues.
• A proactive, collaborative and service‑oriented approach, with the flexibility to support wider IT operational activity where required.
• Degree in IT, cyber security, computer science, or a related discipline, or a relevant certification such as CompTIA Security+, Microsoft SC‑900, SC‑200, AZ‑500, CISMP, or equivalent experience.
• Familiarity with cyber security frameworks, standards or guidance such as Cyber Essentials, ISO 27001, NCSC guidance, CIS Controls, NIST CSF, or UK Government security expectations.
• Involvement in assurance activities such as control reviews, risk assessments, internal audits, penetration testing coordination, supplier assurance, or remediation tracking.
• Background in developing security awareness content, phishing simulations, user guidance, or communications that help improve organisational security behaviours.
• Knowledge of secure configuration, endpoint management, identity and access management, conditional access, multi‑factor authentication, or vulnerability management.
• Competitive salary that reflects your skills and experience
• Up to 12% employer pension contribution to support your future
• 36 days annual leave (including bank holidays) plus the option to buy up to 2 extra days
• 2 volunteering days, a chance for you to give back to the community
• Enhanced family‑friendly policies to support you and your loved ones
• Life assurance (4x your annual salary) for peace of mind
• Employee Assistance Programme for confidential support when you need it
• Access to Perkbox for a wide range of discounts and wellbeing benefits
• Recognition programme, including on‑the‑spot and annual awards
• Advanced learning and development opportunities to help you grow.

Diversity and Inclusion

At East West Railway Company, we’re committed to building an inclusive railway for all. We believe that to do that, we must nurture a diverse team that represents the UK communities that we impact. Our approach is simple - to create an environment where everyone is welcome and able to be themselves. We celebrate diversity and are proud to be an equal opportunity employer, encouraging applications from all backgrounds and experiences.