IT Security Analyst

Principal-IT-1; Driffield; Hybrid; GBP 40,000 - 45,000; Full time

Benefits offered by this job

Hybrid work

Pension scheme

Training and development

Job summary

Principal IT is seeking an IT Security Analyst to monitor, detect, and respond to security threats across the organisation.

You will support vulnerability management, compliance initiatives, and security improvement projects within a hybrid work model (3 days on site, 2 at home).

Qualifications

• 2–4 years’ experience in cybersecurity or infrastructure security roles.
• Experience with SIEM tools and vulnerability management platforms.
• Strong understanding of EDR, XDR, MDR, IDS/IPS technologies.
• Good knowledge of Microsoft security technologies and infrastructure environments.
• Understanding of ISO27001, NIST, GDPR, and security best practices.
• Experience investigating security incidents and producing clear documentation.

Responsibilities

• Monitor and develop SIEM and threat detection platforms.
• Investigate and respond to security incidents and alerts.
• Support vulnerability scanning, remediation, and reporting activities.
• Assist with development of security policies, procedures, and controls.
• Work with Infrastructure and Technical Services teams to improve security across the estate.
• Support compliance activities aligned to ISO27001, GDPR, and NIST frameworks.
• Conduct security awareness initiatives including phishing simulations and end-user training.
• Maintain and improve endpoint protection, IDS/IPS, EDR, XDR, and MDR solutions.
• Assist with backup, disaster recovery, and digital asset protection strategies.
• Stay up to date with emerging cyber threats and recommend improvements.

Skills

SIEM tools

Vulnerability management

EDR/XDR/MDR

Microsoft security technologies

ISO27001/NIST/GDPR

Incident investigation

Full UK driving licence

Tools

Azure environments

Job description

IT Security Analyst (25) Driffield, England

Salary: GBP40000 - GBP45000 per annum

IT Security Analyst – £40,000/£45,000 per annum – Brandesburton (Hybrid)

Principal IT are proud to be supporting a leading provider of modular buildings for various sectors, such as education, healthcare, defence, and justice. This is an excellent opportunity for someone with a passion for cybersecurity who is looking to play a key role in strengthening and developing an organisation’s overall security posture and cyber resilience strategy.

Working closely with the Infrastructure & Security Manager, you will be responsible for monitoring, detecting, investigating, and responding to security threats across the organisation’s infrastructure and systems. You will also support vulnerability management, compliance initiatives, and wider security improvement projects across the business.

This role would suit someone with 2–4 years’ experience in a cybersecurity, SOC, or infrastructure security-focused position who enjoys working across a broad technology estate and keeping up to date with emerging threats and security technologies.

Key Responsibilities

• Monitor and develop SIEM and threat detection platforms
• Investigate and respond to security incidents and alerts
• Support vulnerability scanning, remediation, and reporting activities
• Assist with development of security policies, procedures, and controls
• Work alongside Infrastructure and Technical Services teams to improve security across the estate
• Support compliance activities aligned to ISO27001, GDPR, and NIST frameworks
• Conduct security awareness initiatives including phishing simulations and end-user training
• Maintain and improve endpoint protection, IDS/IPS, EDR, XDR, and MDR solutions
• Assist with backup, disaster recovery, and digital asset protection strategies
• Stay up to date with emerging cyber threats and recommend improvements where appropriate

Key Skills & Experience

• 2–4 years’ experience within a cybersecurity or infrastructure security role
• Experience working with SIEM tools and vulnerability management platforms
• Strong understanding of EDR, XDR, MDR, IDS/IPS technologies
• Good knowledge of Microsoft security technologies and infrastructure environments
• Understanding of ISO27001, NIST, GDPR, and security best practices
• Experience investigating security incidents and producing clear documentation
• Full UK driving licence

Desirable

• CompTIA Security+
• CISSP Associate
• Microsoft certifications
• Experience with Azure environments
• Scripting or automation knowledge
• Experience working with ERP systems

This is a fantastic opportunity to join a business investing heavily in cybersecurity, where you will have the chance to influence security best practices, work with modern technologies, and continue developing your technical skillset within a collaborative environment.

The Package

If successful our client is offering a salary of between £40,000/£45,000 per annum, favorable holiday allowance, company contributed pension scheme and opportunities for professional development including training and advancement.

This a hybrid working role 3 days on site and 2 days working from home.