IT Security Analyst

UK Atomic Energy Authority; United Kingdom; On-site; GBP 34,000 - 40,000; Full time

Job summary

A leading energy organization in the UK is seeking an IT Security Analyst to ensure the security of its IT infrastructure. The role requires managing and enhancing cyber security processes, conducting vulnerability assessments, and collaborating across departments. Ideal candidates will have a strong background in cyber security principles, excellent analytical skills, and at least an HNC in a STEM subject. Competitive salary and benefits including flexible working options are offered.

Benefits

Defined benefit pension scheme

Corporate bonus scheme

Flexible working options

Employee Assistance Programme

Generous annual leave

Qualifications

• Demonstratable experience in Cyber security or a related field.
• Strong knowledge of Information and cyber security principles.
• Excellent analytical skills and keen attention to detail.

Responsibilities

• Analyse and assess security threats to information systems.
• Conduct security assessments and penetration testing.
• Monitor security events and alerts.

Skills

Cyber security principles

Analytical and problem-solving skills

Interpersonal skills

Education

HNC in a STEM subject or equivalent experience

Tools

SIEM

Firewalls

Intrusion detection systems

Vulnerability scanners

Job description

Company Description

By 2050, the planet could be using twice as much electricity compared to today. Are you interested in contributing and helping to shape the future of the world's energy? If so, read on.

Fusion, the process that powers the Sun and Stars, is one of the most promising options for generating the cleaner, carbon‑free energy that our world badly needs.

UKAEA leads the way in realizing fusion energy, partnering with industry and research for groundbreaking advancements. Our goal is to bring fusion electricity to the grid, supported by tomorrow's power stations. In pursuit of our mission, UKAEA embraces core values: Innovative, Committed, Trusted, and Collaborative.

As an employee of UKAEA you will benefit from:

• Outstanding defined benefit pension scheme, details of which can be found at the end of this advert.
• Corporate bonus scheme up to 7 % and a Relocation allowance (if eligible).
• Flexible working options including family‑friendly policies and the right to request flexible working from the start of your employment.
• Employee Assistance Programme and trained Mental Health First Aiders.
• Generous annual leave allowance starting with 25 days, plus 3 days Christmas closure and 2.5 privilege days, in addition to UK bank holidays.
• Wide range of career development opportunities.
• A vibrant culture committed to equality and being fully inclusive.

What to expect in our recruitment process:

For a step‑by‑step overview of how we hire from application to offer please see our Recruitment Process page: careers.ukaea.uk/join-us/recruitment-process

Job Description

The salary for this role is £34,568 (inclusive of a Specialist Allowance). Onsite working is expected for 5 days a week, however, we actively support requests for flexible working.

This role can be based at any of the following sites; Culham, Oxfordshire

This role requires employees to complete an online Baseline Personnel Security Standard (BPSS) / be eligible for SC Clearance (must have resided in the UK for the last 5 years), including the Disclosure & Barring Service (DBS) checks for criminal convictions and possibly a search of open source data.

The Role

Are you looking for an exciting opportunity to make a difference? Join our team and contribute to the future of fusion energy. As IT Security Analyst, you will play a pivotal role within the Information and Cyber Security Group, under the Enterprise Infrastructure Solutions Unit within the Computing Division which is responsible for the centrally managed IT services and infrastructure of the UKAEA sites. This includes data networks, desktop computing, file systems, UNIX, Linux and Windows server systems, Information and Cyber Security and JET data acquisition and storage tools. It also provides service desk support and operational management of UKAEA computer rooms.

In order to ensure that the UKAEA's IT infrastructure is resilient to cyber security threats, the IT information security analyst is responsible for managing, overseeing, and implementing information and cyber security systems across the whole IT infrastructure. Under the guidance of team members with more expertise, the role entails supporting and enhancing UKAEA's information and cyber security processes and detection systems as well as performing vulnerability testing on the organization's IT infrastructure. To enhance information and cyber security (InfoSEC), the Information and Cyber Security Group collaborates with teams throughout the entire company as part of the Computing Division. Additionally, the group encourages awareness of and advancements in InfoSEC by providing guidance, training, and other resources to the entire UKAEA.

Additional Responsibilities

• Analyse and assess potential security threats and risks to our organization's information systems and data.
• Conduct security assessments and penetration testing to identify vulnerabilities and recommend appropriate controls.
• Provides authoritative advice and guidance on security strategies to manage identified risks and ensure adoption, and adherence to standards. This includes advice on the application and operation of all types of security controls, including legislative or regulatory requirements such as data protection / GDPR and software copyright law.
• Monitor security events and alerts and take appropriate action to respond to and mitigate potential threats.
• Help develop policies, standards, processes, and guidelines for ensuring the physical and electronic security of automated systems. Develop an implementation approach, taking account of current best practice, legislation, and regulation.
• Collaborate with other departments to ensure that information security requirements are integrated into all business processes and systems.
• Contribute to the design and development of IT security solutions across the organisation.
• Design and conduct trainings for IT system administrators, management, and all staff.
• Provide regular reports on the organization's security posture to senior management and other stakeholders if required.

Qualifications

Essential Requirements

• At least a HNC in a STEM subject (preferably Computing or a related field) or equivalent Information and Cyber Security Experience.
• Demonstratable experience in Cyber security or a related field.
• Strong knowledge of Information and cyber security principles, techniques, and best practices.
• Excellent analytical and problem‑solving skills with a keen attention to detail.
• Good interpersonal and communication skills, plus the ability to work as part of a team.

Desired Requirements

• Familiarity with current cyber security prevention practices.
• An understanding of how hackers work and the ability to stay abreast of cyber threat techniques.
• Demonstrable knowledge of security tools and technologies such as SIEM, firewalls, intrusion detection and prevention systems, and vulnerability scanners.

Additional Information

A full list of our benefits can be found here https://careers.ukaea.uk/life-at-ukaea/employee-benefits/

UKAEA's mission is clean energy for all, and we welcome talented people from all backgrounds who want to help us achieve our mission. We are under‑represented from some groups and so encourage applications in particular from women in STEM, people from Black British Caribbean and African backgrounds, and from Pakistani and Bangladeshi British backgrounds. Our Executive team, supported by our 'Head of Equality, Diversity and Inclusion' (EDI) and Wellbeing and our EDI Networks actively promote inclusion and take steps to increase diversity within our organization. We reinforce best practices in recruitment and selection and evaluate approaches to remove barriers to success.

UK Atomic Energy Authority is committed to being accessible. Please email [e-mail] if you have any questions or require help or adjustments to compete on a fair basis, for example, changes to the way we interview or share information.

Please note that vacancies are generally advertised for 4 weeks but may close earlier if we receive a large number of applications.