IT Security Analyst

Castle Employment; Beverley; On-site; GBP 40,000 - 65,000; Full time

Job summary

Castle Employment is seeking an IT Security Analyst for an established organisation in the East Yorkshire area. This full-time, on-site role focuses on protecting systems, data and operations while collaborating with infrastructure and technical teams to strengthen cyber resilience.

You will monitor SIEM, investigate incidents, conduct vulnerability scans and help implement secure configurations, policies and training.

Qualifications

• Proven experience in a cyber security or infrastructure security role.
• Strong understanding of security principles and threat detection.
• Experience with SIEM platforms and vulnerability management.
• Knowledge of ISO 27001 or NIST.
• GDPR data protection knowledge.

Responsibilities

• Monitor, develop and optimise SIEM and threat detection systems.
• Investigate security incidents, coordinating response, containment and escalation.
• Conduct vulnerability scanning and support remediation across the IT estate.
• Work closely with infrastructure and technical teams to implement secure configurations.
• Support and maintain security policies, procedures and controls.
• Ensure alignment with recognised frameworks including ISO 27001 and NIST.
• Deliver user awareness initiatives such as phishing simulations and training.
• Stay up to date with emerging threats and recommend improvements to strengthen security posture.
• Support disaster recovery, backup and data protection strategies aligned to business needs.

Skills

Cyber security

Threat detection

SIEM

EDR

XDR

MDR

Data protection

GDPR knowledge

Analytical thinking

Driving licence

Tools

Vulnerability tools

Job description

IT Security Analyst

Location: East Yorkshire area

Salary: Competitive, depending on experience

Working pattern: Full-time, on-site with collaborative team environment

Protect systems. Strengthen resilience. Shape cyber security strategy.

An established organisation is investing in its cyber capability and is looking for an IT Security Analyst to play a key role in protecting its systems, data and operations.

This is an opportunity to join a collaborative IT environment where security is a business priority, not an afterthought. You will work closely with infrastructure and technical teams to strengthen cyber resilience, respond to threats and continuously improve security practices across the organisation.

If you enjoy hands-on security work, problem solving and influencing best practice, this role offers real scope to make an impact.

What you will be doing

• Monitor, develop and optimise SIEM and threat detection systems
• Investigate security incidents, coordinating response, containment and escalation
• Conduct vulnerability scanning and support remediation across the IT estate
• Work closely with infrastructure and technical teams to implement secure configurations
• Support and maintain security policies, procedures and controls
• Ensure alignment with recognised frameworks including ISO 27001 and NIST
• Deliver user awareness initiatives such as phishing simulations and training
• Stay up to date with emerging threats and recommend improvements to strengthen security posture
• Support disaster recovery, backup and data protection strategies aligned to business needs

What we are looking for

• Proven experience in a cyber security or infrastructure security role
• Strong understanding of security principles, threat detection and risk-based thinking
• Experience with SIEM platforms, vulnerability management tools and detection response technologies such as EDR, XDR or MDR
• Knowledge of cyber security frameworks such as ISO 27001 or NIST
• Understanding of data protection legislation including GDPR
• Ability to investigate incidents, analyse findings and communicate clearly with stakeholders
• Strong analytical and problem-solving skills
• Ability to manage priorities and work effectively in a fast-paced environment
• Full UK driving licence

Desirable experience

• Exposure to cloud platforms such as Azure
• Security certifications such as CompTIA Security+, CISSP or Microsoft accreditations
• Experience with ERP systems
• Scripting or automation knowledge