Senior security analyst - Hybrid

Salary: £45,000 per annum negotiable depending on experience + fantastic benefits!

Jisc grade: TCY3 (internal use only)

Hours: 35 hours per week

Contract: Permanent

Reports into: Lead cyber security incident investigator

Location: Hybrid - A blend of working from home and your nominated hub office, with hubs in London, Bristol, Manchester, and Oxford. Specific patterns are flexible and agreed with your manager. Occasional travel to hubs may be required.

About Jisc:

Jisc is the UK digital, data, and technology agency focused on tertiary education, research, and innovation. We are a not-for-profit organization committed to improving lives through education and research by providing hardware, software, and networking solutions. Our talented team brings diverse skills and experience to empower our members and customers with the technology they need to succeed. Join us to make a meaningful impact on the education and research sectors.

Cyber Security at Jisc:

As the UK’s National Research and Education Network (NREN), Jisc provides the Janet Network, a high-speed digital infrastructure used by 20 million people. Security is integral to our operations, with the new Jisc SOC enhancing our cyber security protections through 24/7 threat detection, incident response, and threat mitigation. Our visibility into the Janet Network enables faster detection and containment of cyber threats, minimizing disruption to learning and research activities.

About the role:

This position is within the Security Operations team, responsible for safeguarding the Janet Network and internal security, sharing intelligence, and advising members on network security. We have two opportunities within our SOC, reporting to different Lead specialists (CSIRT & SIEM).

Daily activities include managing Jisc’s Security Operations Centre services, incident handling, threat detection and analysis, using security tools to gather intelligence, mitigate attacks, and support incident response capabilities. You will also support Security Analysts, assist in incident management, and contribute to the development of security systems and mitigations to enhance our defenses.

Responsibilities include:

• Supporting the team’s response to security incidents to minimize damage and downtime.
• Managing and coordinating major cyber incidents alongside Security Leads.
• Monitoring IT infrastructure, networks, and systems for suspicious activity using SIEM, EDR, and DDoS mitigation tools.
• Developing incident response drills and improving response metrics.
• Enhancing threat analytics and incident management systems.
• Monitoring and mitigating threats to members via SIEM systems like Splunk ES.

Key Skills and Experience:

• Understanding of IT environments including Microsoft Stack (Azure, Active Directory), virtualization, backup, and cloud platforms. Knowledge of Active Directory hardening.
• Operational incident response experience.
• Experience as a point of escalation.
• Knowledge of SIEM solutions such as Splunk Enterprise Security and experience with Splunk.
• Familiarity with security tools like SIEMs, EDRs, SOAR, IDS, WAF, DLP, and DDoS mitigation systems.
• Strong understanding of TCP/IP and related protocols.
• Effective communication skills to simplify complex technical issues for diverse audiences.
• Customer service orientation and pragmatic incident handling approach.

We encourage applications from candidates who do not meet every requirement but believe they are a good fit for the role.

Why work for us?

At Jisc, everyone plays a key role, fostering a culture of lifelong learning and professional development. We value work-life balance, flexible working arrangements, and a supportive environment where your contributions make a real difference in education and research sectors.

Benefits include:

• Flexible working patterns
• 31 days annual leave plus bank holidays, with options to buy additional days
• Performance awards
• Wellbeing benefits including healthcare, mental health support, and employee assistance
• Budget for external learning and professional development
• Home office setup allowance
• Financial wellbeing support and schemes
• Charity payroll giving
• Electric car lease and technology schemes
• Retail discounts and memberships
• Family-friendly policies and leave options
• Volunteer leave
• Cycle to work and eye care schemes
• Recognition awards and travel loans
• Access to courses via LinkedIn Learning

Equity, diversity, and inclusion:

We are committed to creating an inclusive environment that values diverse perspectives and experiences. We actively promote equity and inclusion, encouraging everyone to bring their authentic selves to work and supporting a culture of belonging.

Application process:

We review applications promptly and aim to respond within four weeks. Please inform us of any reasonable adjustments needed to support your application. Current Jisc employees should apply via their Employee profile. We do not work with recruitment agencies for this role.