Cyber Security Analyst

SPECTRUM IT; Southampton; Hybrid; GBP 39,000 - 65,000; Full time

Benefits offered by this job

Hybrid working

25 days holiday

Pension

Life assurance

On-call allowance

Employee discounts

Cycle to Work scheme

Training & development

Employee Assistance Programme

Occasional travel

Job summary

Spectrum IT in the UK rail freight and logistics sector is seeking a Cyber Security Analyst to support its IT Systems Manager in protecting systems, networks and data across the organisation. The role is hands-on and security-focused, spanning cyber, network and some systems administration.

You will monitor security controls, respond to incidents, and drive improvements across on-premises, cloud and SaaS environments. Hybrid working with three days on-site in Southampton.

Qualifications

• Hands-on security operations monitoring and incident response.
• Experience securing on-prem, cloud, and SaaS environments.
• Ability to coordinate with infrastructure and service delivery teams.
• Knowledge of NIST CSF and NIS Regulations.

Responsibilities

• Monitoring security systems, investigating alerts and coordinating incident resolution.
• Configuring, maintaining and supporting security technologies across on-premises, cloud and SaaS environments.
• Supporting firewalls, VPNs, endpoint protection, email security, identity and access controls, vulnerability management and security monitoring platforms.
• Coordinating vulnerability assessments and working with system owners to track remediation through to completion or formal acceptance.
• Reviewing systems, applications and cloud services for secure configuration and alignment with approved standards.
• Supporting penetration tests, audits, assurance reviews and accreditation activities.
• Contributing technical evidence and documentation for security policies, risk assessments and compliance requirements.
• Providing practical security guidance to technical teams and project stakeholders.
• Identifying opportunities to improve security services through upgrades, automation and better operational processes.

Skills

TCP/IP

Firewalls

VPNs

DNS/DHCP

SSL/TLS

Vulnerability mgmt

Security monitoring

Incident response

NIST framework

NIS Regulations

Tools

Azure

Defender

Sentinel

SIEM

EDR

Secure Web Gateway

Email Security

Privileged Access

Job description

If you enjoy getting hands-on with cyber security, investigating threats and improving the protection of complex IT environments, this could be an opportunity worth exploring.

Cyber Security Analyst

Southampton | Hybrid - 3 days on-site | Up to £65,000

We're working with a UK rail freight and logistics business looking for a Cyber Security Analyst to support its IT Systems Manager in protecting systems, networks and data across the organisation.

This is an operational, technically focused role combining cyber security, network security and elements of systems administration. You'll work alongside infrastructure, applications and service delivery teams, helping maintain security controls, investigate incidents and support compliance across the business.

The Role

You'll take responsibility for day-to-day security operations, helping ensure that security controls are working effectively and that potential risks are identified and addressed.

• Monitoring security systems, investigating alerts and coordinating incident resolution.
• Configuring, maintaining and supporting security technologies across on-premises, cloud and SaaS environments.
• Supporting firewalls, VPNs, endpoint protection, email security, identity and access controls, vulnerability management and security monitoring platforms.
• Coordinating vulnerability assessments and working with system owners to track remediation through to completion or formal acceptance.
• Reviewing systems, applications and cloud services for secure configuration and alignment with approved standards.
• Supporting penetration tests, audits, assurance reviews and accreditation activities.
• Contributing technical evidence and documentation for security policies, risk assessments and compliance requirements.
• Providing practical security guidance to technical teams and project stakeholders.
• Identifying opportunities to improve security services through upgrades, automation and better operational processes.

You'll also help maintain alignment with the NIST Cybersecurity Framework and applicable Network and Information Systems (NIS) Regulations.

What You'll Bring

You'll have significant hands-on experience supporting complex IT, network or cyber security environments, with a strong understanding of how security controls operate across infrastructure, networks, endpoints, cloud services and applications.

You'll also bring:

• Practical knowledge of TCP/IP, firewalls, VPNs, DNS, DHCP, certificates and SSL/TLS.
• Experience with vulnerability scanning, secure configuration assessments and remediation tracking.
• An understanding of common attack techniques, security monitoring and incident response.
• Knowledge of the OWASP Top 10 and recognised cyber security principles.
• An understanding of the NIST Cybersecurity Framework and NIS Regulations.
• Experience working towards Cyber Essentials.
• The ability to maintain security policies, procedures, technical documentation and audit evidence.
• A methodical approach to investigating issues, prioritising risks and communicating findings clearly.

You’ll be comfortable working with technical teams and stakeholders, managing competing priorities and taking ownership of security-related actions. A willingness to support occasional out-of-hours requirements is also needed.

Desirable Experience

Experience with any of the following would be useful:

• Microsoft Azure, Microsoft 365, Entra ID, Defender or Sentinel.
• SIEM, endpoint detection and response, secure web gateways, email security or privileged access technologies.
• Security audits, NIS compliance, assurance reviews or accreditation programmes.
• ITIL or working within an IT service management framework.
• Relevant certifications such as CompTIA Security+, CISSP, SSCP, CCNA Security or Microsoft and Palo Alto Networks security certifications.
• Working in a regulated, safety-critical, transport, logistics or multi-site environment.

What's on Offer

• Salary up to £65,000.
• Hybrid working, with 3 days a week on-site in Southampton.
• 25 days' holiday plus bank holidays.
• Company pension and life assurance.
• Paid on-call allowance.
• Employee discounts and Cycle to Work scheme.
• Ongoing training and career development.
• Employee Assistance Programme and wellbeing support.
• Occasional travel to other sites may also be required.