Cyber Security Analyst

University of Wolverhampton; West Midlands; On-site; GBP 45,000 - 65,000; Full time

Job summary

University of Wolverhampton is building a Cyber Security function from the ground up. We seek a Cyber Security Analyst to monitor, detect, and respond to threats across our digital estate using SIEM, EDR/XDR and related platforms.

You will lead or support end-to-end incident response, run proactive threat hunting, and develop detection playbooks. The role requires strong communication of risk to stakeholders and collaboration with IT teams.

Qualifications

• Bachelor's degree or equivalent experience in a relevant field.
• Certifications such as ISC2, CompTIA, ISACA are desirable.
• Ability to communicate technical risk clearly to both technical and non-technical stakeholders.

Responsibilities

• Lead or support incident response end-to-end: triage, containment, eradication, recovery, and post-incident review.
• Run proactive threat hunting to catch what existing controls miss.
• Build and refine detection use cases, playbooks, and operational procedures.
• Support vulnerability management, security testing, and control validation (including phishing simulations).
• Produce clear technical reports and root-cause analysis following incidents.
• Act as a subject matter resource for cyber security across the University, including awareness and training initiatives.

Skills

SIEM/EDR

Endpoint protection

Network security

Threat detection

Incident response

Communication

Education

Bachelor's degree

Security certifications (ISC2 / CompTIA / ISACA)

Tools

Phishing simulations

Penetration testing coordination

Job description

We're growing our Cyber Security function from the ground up, and this role sits at the heart of it. As Cyber Security Analyst, you'll support and enhance our security operations capability - monitoring, detecting, and responding to threats across our digital estate using SIEM, EDR/XDR and related platforms.

What you'll do:

• Lead or support incident response end-to-end: triage, containment, eradication, recovery, and post-incident review
• Run proactive threat hunting to catch what existing controls miss
• Build and refine detection use cases, playbooks, and operational procedures
• Support vulnerability management, security testing, and control validation (including penetration testing coordination and phishing simulations)
• Produce clear technical reports and root-cause analysis following incidents and investigations
• Act as a subject matter resource for cyber security across the University, including awareness and training initiatives

What you'll bring:

• Strong understanding of security technologies and controls - endpoint protection, network security, IDS/IPS, SIEM/EDR
• Experience working in large, complex IT or network environments supporting critical infrastructure
• Knowledge of recognised security standards and risk assessment methodologies
• A relevant degree or equivalent experience; ISC2, CompTIA, or ISACA certification desirable
• The ability to communicate technical risk clearly to both peers and non-technical stakeholders

Why this role:

you won't be inheriting a fixed rulebook - you'll help write it, as part of a team building SOC and defensive security capability from scratch.