Senior IT Technician - Cyber Security

The University of Sheffield; Catcliffe; On-site; GBP 32,000 - 37,000; Full time

Job summary

The University of Sheffield AMRC is hiring a Senior IT Technician - Cyber Security to join the IT Support team. The role focuses on handling security tickets, implementing controls, and ensuring compliance across devices on the UK sites, with travel to AMRC locations as needed.

You will work with the Cyber Security Manager, SOC, and IA teams, applying vulnerability management and incident response to protect our research environment and drive proactive security improvements.

Qualifications

• Honours degree (or equivalent) in a related subject.
• Experience delivering IT support in a security-led organisation.

Responsibilities

• Respond to security-focused IT tickets and incidents.
• Identify and patch vulnerabilities in endpoints (mobile, laptops, desktops).
• Support patching across on‑premise and cloud environments.
• Develop and follow SOPs and security documentation.

Skills

Vulnerability management

Incident response

Security governance

Stakeholder engagement

Problem solving

Education

Honours degree in related subject

Tools

Tenable

Microsoft Intune

Quest KACE

SIEM

Job description

Benefits

The University of Sheffield is a remarkable place to work. Our people are at the heart of everything we do. Their diverse backgrounds, abilities and beliefs make Sheffield a world class university.

We offer a fantastic range of benefits including a highly competitive annual leave entitlement (with the ability to purchase more), a generous pension scheme, flexible working opportunities, a commitment to your development and wellbeing, a wide range of retail discounts, and much more. Find out more about our benefits and join us to become part of something special.

Overview

As our new Senior IT Technician - Cyber Security, you will be an important member of the AMRC IT Support team, with a focus on responding to a wide range of IT security support tickets. You will play a key role in ensuring the AMRC IT estate is up to date, compliant and resilient against an evolving threat landscape.

Working alongside the AMRC Cyber Security Manager, University of Sheffield Security Operations Centre (SOC) and Information Security Assurance (IA) teams, your focus will be on technical measures including device configuration, patching and implementing security controls and technologies to secure our end points.

You will resolve both standard IT tickets and more complex ones. You will identify tickets relating to security vulnerabilities, threats, and non compliant devices and assist in the response to security incidents and investigations.

You will work with the Cyber Security and Systems Managers to identify trends and seek to implement proactive long term centralised solutions or automations to mitigate risk and reduce recurring helpdesk tickets. For example using scripts, group policy, and centralised software deployments.

At the AMRC your work directly protects ground breaking research and innovation at the intersection of industry and academia. This role is based in Catcliffe, Rotherham but you will spend time on University campus with Information Security colleagues and may occasionally travel to AMRC sites in Wales and North West England, making a full UK driving license beneficial.

Eligibility for elevated security clearance is essential, and the University will support the successful candidate through appropriate clearance processes.

Personal Skills

Main duties and responsibilities

• Communication: Be a highly responsive and visible member of the AMRC and University IT Support and Information Security communities.
• Customer Skills: Deliver timely progress updates tailored to varying technical backgrounds of staff, students, visitors and external stakeholders.
• Knowledge Sharing: Advise and guide end users on information security.
• Collaboration: Collaborate with AMRC IT, University Information Security, and other stakeholders across the organisation.
• Projects: Provide technical input for projects needing tailored security or enhanced standards.

Technical Incident Response

• Support: As an important member of the AMRC IT Support team you will carry out some regular support activities, but will focus on picking up security tickets and responses.
• Vulnerability Management: Identify and patch vulnerabilities across mobile devices, laptops, desktops, and potentially some OT devices.
• Critical Infrastructure: Assist the AMRC Systems Managers to patch or remediate security issues with critical infrastructure, including on premise and cloud environments.
• Adaptive Defence: Support our Cyber Security Manager in proactively refining technical security measures and countermeasures in direct response to the evolving threat landscape.

Information Advocacy

• University Alignment: Work with our Cyber Security Manager and University SOC to align technology and processes and share best practices.
• Information Champion: Serve as an Information Champion, providing guidance across the AMRC on appropriate University risk assessment processes, ISMS activities and promoting a security culture in all business-as-usual and project activities.

Information Security Culture

• Culture Building: Support initiatives raising security awareness for staff, students, and visitors.
• Training: Work with our training team to drive compliance and oversee technical sanctions for non compliance.
• Knowledge Transfer: Mentor and train the wider IT Support team in technical security practices.

Documentation, Process, Audit and Standards

• Internal Process: Guide stakeholders through internal security assurance procedures.
• Standards & Accreditation: Conduct hands on technical activities related to maintaining certification to appropriate industry standards and internal codes of practice / connection.
• Audit: Record incidents, assessments, and reports alongside the Cyber Security Manager.
• Documentation: Create clear technical documentation and SOPs to apply security theory practically.

Other Duties

• Carry out other duties, commensurate with the grade and remit of the post.

Person Specification

Our diverse community of staff and students recognises the unique abilities, backgrounds, and beliefs of all. We foster a culture where everyone feels they belong and are respected. Even if your past experience doesn't match perfectly with this role's criteria, your contribution is valuable, and we encourage you to apply.

Criteria

Essential Or Desirable

Stage(s) assessed at

Education: An honours degree (or equivalent qualification or experience) in a related subject area.

Essential

Application

Environment: Experience of working in a team providing an effective and efficient IT Support service to a busy customer focused, but information security led organisation.

Essential

Application & Interview

Operating Systems: Supporting knowledge of Microsoft Windows and common mobile operating systems for client deployment, imaging, fault finding and resolution.

Essential

Application & Interview

Vulnerability Management: Experience using scanners (e.g., Tenable) to identify weaknesses and possess the technical ability to patch and remediate any issues found.

Essential

Application & Interview

Technical Documentation: Ability to write clear, concise security focussed standard operating procedures (SOPs) for IT support colleagues.

Essential

Application & Interview

Patching: A good understanding of software patching and information security principles relating to endpoint management via Microsoft Intune or Quest KACE

Essential

Application & Interview

Priorities: Have the agility to monitor multiple workstreams simultaneously, ensuring security duties remain aligned with AMRC priorities.

Essential

Application & Interview

Problem Solving: Ability to analyse problems and develop solutions with an appreciation of longer term implications on security compliance.

Essential

Application & Interview

Stakeholder Engagement: With excellent interpersonal and customer skills, you can translate complex support and information security challenges into actionable instructions for IT staff, and clear updates for non technical stakeholders.

Essential

Application & Interview

Incident Response: Experience in log analysis (SIEM) and ability to work under pressure to help investigate and contain security breaches.

Desirable

Application & Interview

Cyber Essentials Plus (CE+): Familiarity with the technical controls of CE+ (Firewalls, Secure Configuration, User Access Control, Malware Protection, and Patch Management).

Further Information

Grade: 6

Salary: £32