Junior Cyber Security Analyst

United Welsh; Caerphilly; Hybrid; GBP 28,000 - 35,000; Full time

Benefits offered by this job

Disability Confident employer

Job summary

United Welsh is seeking a Junior Cyber Security Analyst to support day-to-day cyber security activities. The role develops skills in Microsoft Defender XDR, Entra and Azure, while working with the Technology Team under guidance to handle service desk tasks and security governance.

You will learn from experienced colleagues, taking ownership of analyst-level tasks, and gaining practical knowledge across security monitoring, identity & access management, and cloud security.

Qualifications

• A degree or apprenticeship in cyber security, computing, IT or related subject.
• SC-900: Microsoft Security, Compliance and Identity Fundamentals.
• Other entry-level cyber security or IT certification is helpful.

Responsibilities

• Cyber Security Monitoring and Escalation tasks and record-keeping.
• Vulnerability and Security Administration activities and remediation follow-up.
• Security Technology and Access administration, including Microsoft 365/Azure controls.
• Service Desk and User Support, handling security-related queries and tickets.
• Governance, Awareness and Documentation, supporting audits and standards.

Skills

Microsoft Defender technologies

Microsoft Entra

Microsoft Azure

Security monitoring

Service desk experience

Education

Degree or related subject in cyber security/IT

SC-900: Microsoft Security, Compliance and Identity Fundamentals

Tools

Ticketing systems

Monitoring tools

Job description

Please note, this vacancy closes at 12pm, midday, on23rdNovember.

We reserve the right to close this vacancy early if we receive a high volume of suitable applications.

Job Profile

Job Title: Junior Cyber Security Analyst

Hours: Full-time, 35 hours

Contract: Permanent

Interviews: 3rd& 4thDecember

Reporting to

Cyber Security & Cloud Architecture Engineer

Broad purpose of the post

This is a great development role for someone at the beginning of their career in cyber security, including a graduate or someone progressing from an IT support or service desk background. You will provide practical support with day-to-day cyber security activity, routine administration, monitoring and record keeping in order to help protect United Welsh's systems, services, colleagues and data.

Working under the guidance of the Cyber Security & Cloud Architecture Engineer and closely with colleagues across the Technology Team, you will take ownership of defined analyst-level tasks, support elements of the service desk workload and escalates concerns promptly when they need higher-level technical judgement or investigation. You will learn from experienced cyber and service desk colleagues while building practical knowledge of Microsoft security technologies, identity and access management, cloud security and cyber governance.

Key Accountabilities

Cyber Security Monitoring and Escalation

- Monitor routine alerts from Microsoft Defender XDR and other security tools, complete initial checks and record relevant information.

- Identify and promptly elevate suspicious activity, phishing, security weaknesses and potential cyber incidents to the Cyber Security & Cloud Architecture Engineer in line with agreed procedures.

- Support investigations by gathering information, maintaining records and completing agreed follow-up actions.

- Work with external security partners when directed and support incident documentation and lessons learned activity.

Vulnerability and Security Administration

- Review vulnerability reports and security recommendations, maintain trackers and follow up agreed remediation actions.

- Maintain clear and accurate records, escalating overdue, recurring or higher-risk issues.

Security Technology and Access

- Assist with the routine administration, monitoring and review of Microsoft and other security technologies, including Defender XDR, Entra and related cloud security services.

- Support the testing and implementation of security controls across Microsoft 365 and Azure under appropriate guidance.

- Support routine access management activity, including maintaining records and completing agreed access governance checks.

- Escalate configuration, access or security concerns that require higher-level review or decision-making.

Service Desk and User Support

- Complete appropriate first-line support tasks allocated through the service desk and suited to the Junior Cyber Security Analyst role, particularly where they relate to security, access or user accounts.

- Respond to straightforward colleague queries, provide clear guidance and keep tickets and users updated.

- Identify when an issue is outside the role's competence or authority and escalates it promptly to the appropriate service desk colleague or the Cyber Security & Cloud Architecture Engineer.

- Share learning and information with service desk colleagues to support consistent and secure ways of working.

Governance, Awareness and Documentation

- Help gather and organize evidence for Cyber Essentials Plus, ISO 27001, audits, assessments and internal compliance activity.

- Support the maintenance of cyber security procedures, risk records, technical documentation, standards and playbooks.

- Assist with supplier assurance administration where required.

- Maintain accurate records of incidents, vulnerabilities, checks and other security activity, and contribute information for reports and metrics.

Personal Requirements

- A basic understanding of cyber security concepts and common threats, including phishing, malware and ransomware.

- A good understanding of Microsoft 365 and cloud technologies.

- An awareness of identity, access and account security principles.

- The ability to follow technical processes and procedures accurately.

- Good written and verbal communication skills.

- Good problem-solving skills and strong attention to detail.

- Evidence of learning in cyber security, IT or a related subject through education, self-directed study, certification, work experience or personal projects.

- The confidence and self-awareness to raise concerns and do issues rather than working beyond your knowledge or authority.

- Experience in an IT support, service desk, technical support or customer support environment.

- Knowledge of Microsoft Defender technologies, Microsoft Entra or Microsoft Azure.

- Awareness of vulnerability management, security monitoring or incident response.

- Awareness of networking concepts and technologies.

- Experience using ticketing, monitoring or security systems.

Qualifications

No specific professional certification is essential. The following would be helpful but can also be developed in role:

- A degree, apprenticeship, college qualification or other learning in cyber security, computing, IT or a related subject.

- SC-900: Microsoft Security, Compliance and Identity Fundamentals.

- Other relevant entry-level cyber security or IT certification.

Working Arrangements

This role uses a hybrid working approach. Because it is a practical learning role, regular office presence is important, particularly at the start, so that the postholder can work alongside cyber and service desk colleagues, observe issues as they arise and build knowledge through day-to-day contact. The postholder will therefore be expected to work from the Caerphilly office for at least three days each week during the initial learning period. Future arrangements will be considered in line with service needs and the postholder's development. A driving licence is not required.

Proud member of the Disability Confident employer scheme

Junior Cyber Security Analyst

Company: United Welsh Salary: 31500 Hours: Full-time Location: Caerphilly, CF83 2AX Job type: Permanent Posting date: 9 Nov 2026 Closing date: 9 Dec 2026