Cyber Security Analyst

• →Monitor, triage, investigate and respond to cyber security events, alerts and incidents.
• →Perform phishing analysis and response activities, including investigation, remediation and stakeholder communication.
• →Support incident response activities across the full incident lifecycle, from detection through to recovery and lessons learned.
• →Conduct threat analysis, threat hunting and security monitoring activities to identify and mitigate cyber risks.
• →Develop and enhance detection capabilities through rule tuning, process improvement and operational optimisation.
• →Contribute to continuous improvement initiatives focused on automation, efficiency, documentation and service maturity.
• →Produce operational reports, investigation findings and technical recommendations for stakeholders.
• →Collaborate with internal and customer teams to maintain service levels and improve security outcomes.
• →Participate in knowledge sharing, mentoring and cross-skilling activities across the wider SOC team.
• →Support the ongoing evolution and effectiveness of the Security Operations Centre capability.

You are technically curious and delivery-focused, and you enjoy working through customer security problems. You are comfortable contributing to both hands-on technical work and stakeholder-facing activities, and you can explain security concepts clearly to technical and non-technical audiences. You take direction well, ask good questions, and are motivated to grow into greater ownership over time.

• Demonstrated experience working within a Security Operations Centre (SOC), Cyber Defence, Incident Response, or Managed Security Services environment.
• Experience investigating and responding to cyber security alerts, incidents, phishing campaigns, and threat activity.
• Strong understanding of incident response methodologies, threat detection, and cyber security operations.
• Experience using enterprise security monitoring, SIEM, SOAR, EDR, and threat intelligence platforms.
• Strong analytical, investigative, and problem-solving skills, with the ability to assess and prioritise security events.
• Experience preparing technical reports, incident summaries, and recommendations for stakeholders.
• Ability to work effectively within a team environment while managing competing operational priorities.
• Strong written and verbal communication skills, with the ability to engage with both technical and non-technical stakeholders.
• Experience contributing to continuous improvement initiatives, including process optimisation, documentation, automation, and operational uplift.
• Familiarity with cyber security frameworks and best practices, including NIST Incident Response and ITIL Service Management principles.
• Experience operating within service-based environments with defined service levels, governance requirements, and customer expectations.
• Ability to work in a fast-paced operational environment supporting critical business services and cyber security outcomes.

• CompTIA Security+
• CompTIA Cybersecurity Analyst (CySA+)
• Microsoft SC-200: Security Operations Analyst
• Splunk Core Certified Power User
• Splunk Enterprise Security Certified Administrator
• Splunk SOAR (Phantom) Certified Automation Developer or Administrator
• Microsoft SC-300 or equivalent Identity and Access Management certification
• ITIL Foundation Certification
• Relevant tertiary qualification in Cyber Security, Information Technology, Computer Science, Engineering, or a related discipline