Cyber Security Analyst

King's Service Centre; Quintrell Downs; On-site; GBP 42,000 - 60,000; Full time

Benefits offered by this job

Hybrid Working - 5 days in office per

10% Performance related bonus

30 Days holiday + 8 public holidays (利

Contributory pension scheme

Job summary

King's College London IT Services is seeking a Cyber Security Analyst to support and enhance the security posture of the KCL IT environment based at the King’s Service Centre in Cornwall. The role focuses on security investigations, forensics and vulnerability management, with occasional travel between Cornwall and London campuses.

You will work with Cyber Operations, Development and Governance, Risk and Compliance to improve detections, controls and incident response while covering on-call

Qualifications

• 1 year+ real world technical security experience within a professional IT environment.
• Knowledge of security related technologies such as firewalls, proxy servers, IPS/IDS, SIEM, endpoint protections.
• Proactive interest in industry developments and cybersecurity solutions.
• Excellent general IT skills and knowledge including Microsoft solutions, networking and applications.
• Awareness of recognised cyber security standards, frameworks and best practices (CES+, CIS Controls, NIST, NCSC guidance, ISO 27001/42001).
• ITIL awareness is essential; foundation or higher certification desirable.
• Experience of investigation and remediation of security incidents.
• Holds or is actively working towards recognised security certifications (SSCP, CompTIA S+).

Responsibilities

• Queue Management: manage security incident/service request queue per SLA.
• Security Incident Response & Digital Investigations: aid technical investigations and establish root causes.
• Threat Hunting & Protective Monitoring: investigate alerts and improve detection.
• Vulnerability Assessment & Management: follow vulnerability processes and report key weaknesses.
• Continuous Technical Improvement: contribute to IPS/IDS, firewalls, end-user protections.
• Operational Improvement & Security Engineering Support: support security enhancements and controls.
• On-call coverage as required.
• Undertake other duties to ensure confidentiality, integrity and availability.

Skills

Security Incident Response

Threat Hunting

Vulnerability Management

Security Monitoring

On-call duties

Education

Security certifications (SSCP, CompTIA S+)

Tools

Firewalls

Proxy servers

IPS/IDS

SIEM

Endpoint protections

Job description

Cyber Security Analyst

Application Deadline: 17 August 2026

Department: IT Services

Employment Type: Permanent - Full Time

Location: Newquay, Cornwall, UK

Description

Overview of the role This role is broadly responsible for key functions and activities supporting and improving the day-to-day security posture of the King’s College London IT environment, based out of the King’s Service Centre (KSC) in Cornwall. The role will support the Cyber Security team and wider service more generally, with a specific focus toward security investigations, forensics and vulnerability management, with other daily activities as laid out in the following descriptions. Some travel may be required for meetings and training (predominately between KSC and university campuses in London).

Accountabilities & Responsibilities

You will be responsible for:

• Queue Management – day-to-day management of the security incident/service request queue in alignment with SLA, identifying recurring issues, inefficiencies and opportunities for process improvement.
• Security Incident Response & Digital Investigations – Providing timely analyst services to aid the technical investigation of security incidents. Establishing root causes, patterns and solutions for re-securing systems and networks.
• Threat Hunting & Protective Monitoring - Assisting with investigating alerts generated by security systems and raising incidents based on indicators of compromise. Supporting the optimisation of monitoring and alerting capabilities through identification of false positives, gaps in visibility and opportunities for enhanced detection.
• Vulnerability Assessment & Management – assist with and follow KSC vulnerability management processes. Regularly reporting upon and formally identifying key vulnerabilities, advising colleagues as necessary on remediation activities. Keeping proactively up to date with current & emerging threats and exploits which may impact on the KCL environment.
• Continuous Technical Improvement – assisting with ongoing development of King’s technical protection investments including but not limited IPS/IDS, firewalls and end user protections.
• Operational Improvement & Security Engineering Support – Participating in security operational activities including monitoring, incident response and on-call duties to identify opportunities for improvements in processes, detections, automation and security controls. Working with colleagues across Cyber Operations, Development and Governance, Risk and Compliance to support security enhancements, control effectiveness and compliance objectives.
• Availability to cover security on-call as required.
• Undertake such other duties within the scope of the post as may, from time to time, be assigned by the Cyber Security Operations or Cyber Security Development manager to ensure the Confidentiality, Integrity, Availability and more general effective operational running of the KCL environment.

Key Skills & Experience Required

(E) – Essential

(D) – Desirable

SFIA Responsibility Level 1 / 2

1. E2 – Secure Operations and Service Delivery
2. E3 – Vulnerability Assessment
3. F2 – Investigation

IISP Level 1 - 2:

• 1 year+ real world technical security experience within a professional IT environment. (E)
• Knowledge of security related technologies such as firewalls, proxy servers, IPS/IDS, SIEM, endpoint protections. (E)
• Proactive interest in industry developments and cybersecurity solutions. (E)
• Excellent general IT skills and knowledge including contemporary Microsoft solutions, networking and/or applications. (E)
• Awareness of recognised cyber security standards, frameworks and best practices, including CES+, CIS Controls, NIST, NCSC guidance, ISO 27001 and ISO 42001. (D)
• ITIL awareness is essential, foundation or higher certification highly desirable. (D)
• Experience of investigation and remediation of security incidents. (D)
• Holds or is actively working towards a recognised security certification i.e. SSCP, CompTIA S+. (D)

Employee Benefits

• Hybrid Working - Minimum of 5 days per month in the office
• 10% Performance related bonus
• 30 Days holiday and maximum of 8 public holidays (pro-rata)
• Sick pay
• 4 Discretionary Christmas Closure Days
• Contributory pension scheme
• Life Assurance cover
• Service time - 3 Volunteer days per year
• Free onsite parking & Bike racks
• Annual leave purchase scheme - up to a maximum of 10 days (subject to national minimum wage requirements)
• Student Discount (access to Totum, Unidays & Student Beans)
• CycleScheme
• TechScheme
• Opportunities for formal training and professional certification
• Free access to Linkedin Learning
• Free access to Future Learn short courses
• Potential for internal promotion and advancement

Equality, diversity & inclusion

We are an inclusive and welcoming employer that encourages a wide range of applicants. We embrace diversity and want everyone to be able to bring their whole selves to work and succeed.

This is in line with King's College London (KCL).