Cyber Security Analyst

Salary: £50,000 - 90,000 per year

Requirements:

• Background in cyber security, information security, IT operations, or a closely related discipline, with the ability to apply security principles in a practical business environment.
• Experience working with the Microsoft Security Stack, including tools such as Microsoft Defender, Purview, Entra, Sentinel, Intune, or equivalent security technologies.
• Practical involvement in investigating and resolving cyber security alerts, incidents, vulnerabilities, or control issues.
• Good understanding of common cyber security risks, threats, and controls, including phishing, malware, identity compromise, data loss, access control, and secure configuration.
• Ability to document processes, procedures, configurations, decisions, and findings clearly and accurately.
• Analytical and problem-solving skills, with the ability to investigate issues methodically and draw evidence-based conclusions.
• Effective communication skills, including the ability to explain cyber security issues to technical and non-technical colleagues.
• Proactive, collaborative, service-oriented approach, with flexibility to support wider IT operational activity when required.
• Degree in IT, cyber security, computer science, or a related discipline; a relevant certification such as CompTIA Security+, Microsoft SC-900, SC-200, AZ-500, or CISMP; or equivalent experience.
• Familiarity with cyber security frameworks, standards, or guidance such as Cyber Essentials, ISO 27001, NCSC guidance, CIS Controls, NIST CSF, or UK Government security expectations.
• Involvement in assurance activities such as control reviews, risk assessments, internal audits, penetration testing coordination, supplier assurance, or remediation tracking.
• Background in developing security awareness content, phishing simulations, user guidance, or communications that improve organisational security behaviours.
• Knowledge of secure configuration, endpoint management, identity and access management, conditional access, multi-factor authentication, or vulnerability management.

Responsibilities:

• Assist our Cyber Lead in delivering EWRs IT Cyber Strategy.
• Work with our Legal Team on DSAR and FoI requests.
• Use the Microsoft Security Stack, including Defender, Purview, and Entra, to establish and maintain a robust set of controls.
• Work with our Security Operations Centre to monitor events for malicious activity and indicators of compromise.
• Maintain high-quality documentation of configurations, standards, and procedures.
• Support our Cyber Lead in gathering KPIs for reporting to the SIRO.
• Respond to suspected or actual cyber incidents and conduct root cause analysis afterwards.
• Contribute to producing cyber communications for our business.
• Conduct internal phishing simulations.
• Work with our Cyber Lead on IT assurance activities, including arranging third-party assurance such as penetration testing and conducting internal checks against applicable standards and best practice.
• Support our IT Helpdesk with incoming tickets as needed.
• Take responsibility for your own and others health and safety by following our Health and Safety principles.
• Make cost-conscious decisions, keeping taxpayers money in mind.
• Proactively seek creative solutions to challenges and opportunities.
• Act as a role model for our vision and behaviours, work in line with our Ways of Working, and encourage and support colleagues to do the same.

Technologies:

• Support
• Security

More:

East West Rail is an infrastructure programme connecting communities between Oxford and Cambridge, where improved transport choices can support prosperity for people and places. We were created by the Department for Transport to oversee delivery of East West Rail, from construction through to the railway entering service. Our Corporate Services function provides enabling capabilities including IT, HR, financial management, and legal services, as well as reporting and quality assurance. Our Cyber Security Analyst will help strengthen our cyber resilience by supporting prevention, detection, and response using Microsoft security technologies, operating security tools such as DLP and Purview, and contributing to cyber assurance. This is a permanent, hybrid role in Corporate Services. We offer a competitive salary, up to 12% employer pension contribution, 36 days of annual leave including bank holidays with the option to buy up to two additional days, two volunteering days, enhanced family-friendly policies, life assurance, an Employee Assistance Programme, Perkbox discounts and wellbeing benefits, a recognition programme, and learning and development opportunities. We are committed to an inclusive railway and workplace, welcome people from all backgrounds and experiences, and strive to create an environment where everyone can be themselves.

last updated 39 week of 2026