Senior security analyst - Sector security

About the Team

Join the team protecting the UK's world-leading education and research sector from an ever-evolving cyber threat landscape.

Jisc’s Security Operations Centre (SOC) plays a critical role in safeguarding the Janet Network, the UK's National Research and Education Network, which connects more than 20 million users across universities, colleges and research organisations. Combining cutting-edge security technologies, threat intelligence and specialist expertise, we provide 24/7 protection, rapid incident response and advanced threat detection to help our members stay secure and resilient.

Our Security Centre brings together Cyber Security Incident Response (CSIRT), Digital Forensics and Incident Response (DFIR), SIEM Analysts and Network Defensive Services specialists. Working at the forefront of cyber defence, we identify and respond to threats, support organisations through cyber incidents, conduct threat hunting activities and continuously evolve our capabilities to stay ahead of emerging risks.

This is an opportunity to work alongside highly skilled security professionals and make a real impact on the organisations that drive education, innovation and research across the UK.

About the Role

We're looking for an experienced Cyber Security professional to join our CSIRT team as a senior escalation point and key contributor to the operation and development of Jisc’s Security Operations Centre.

In this role, you'll play a pivotal part in protecting both Jisc and our members from cyber threats. You'll lead and coordinate responses to security incidents, support complex investigations, enhance detection capabilities and help shape the future of our incident response processes and technologies.

Working within a threat intelligence-led environment, you'll tackle a wide variety of cyber security challenges, from malware outbreaks and phishing attacks to DDoS campaigns and sophisticated network intrusions. You'll also deputise for the CSIRT Lead when required, helping to ensure effective operational delivery and incident management.

What You'll Be Doing

• Acting as an escalation point for CSIRT Security Analysts and supporting the management of complex security incidents.
• Leading and coordinating responses to major cyber incidents, ensuring swift containment, investigation and recovery.
• Monitoring customer and internal environments for suspicious activity using SIEM, EDR, DDoS and network security technologies.
• Conducting threat hunting activities to identify previously undetected threats.
• Supporting the continuous improvement of incident response processes, playbooks, metrics and technologies.
• Investigating security events and analysing threat intelligence to develop new detections and mitigations.
• Working closely with internal teams, including the wider Cyber Security division, Janet Network Operations Centre and Service Desk.
• Supporting customers during cyber incidents, providing expert guidance and recovery assistance remotely and onsite when required.
• Assisting with the development and optimisation of CSIRT platforms and security tooling.
• Maintaining awareness of emerging threats and adapting security controls to address changing risks.
• Contributing to incident response exercises, workshops and security awareness initiatives.
• Producing reports, technical documentation and operational updates for stakeholders and customers.
• Deputising for the CSIRT Lead as required.

What we are looking for

Essential Experience

• Strong understanding of modern IT environments and infrastructure, including Microsoft technologies (Azure and Active Directory), virtualisation platforms, backup technologies and cloud services.
• Experience in cyber security incident response and managing security incidents throughout the lifecycle.
• Previous experience acting as a technical escalation point or senior member of a security or operational team.
• Experience working within a Security Operations Centre (SOC), CSIRT or similar cyber security environment.

Essential Skills

• Working knowledge of network security principles and internet protocols, including TCP/IP.
• Strong understanding of security risks and threats within complex networked environments.
• Systems administration experience and strong knowledge of at least one operating system.
• Ability to remain calm, analytical and decisive during high-pressure incidents.
• Strong customer service and stakeholder management skills.
• Excellent communication skills, with the ability to translate complex technical issues into clear, actionable advice.
• Strong prioritisation, organisation and teamwork skills.
• Pragmatic and methodical approach to incident investigation and response.

Experience & Knowledge

• Active Directory recovery and server recovery experience.
• Experience with security technologies such as SIEM, EDR, SOAR, IDS, WAF, DLP and DDoS mitigation platforms.
• Knowledge of vulnerability management and vulnerability scanning tools.
• Understanding of digital forensics principles and practices.
• Awareness of UK cyber security, privacy and data protection legislation.
• Cyber security or Microsoft certifications.

Qualifications

• Degree in Computer Security or a related discipline, or
• Equivalent practical experience gained within a systems administration, network operations or IT operational environment.

Additional Information

• Extended working period: 08:00 to 18:00 (35 hours per week), working an alternating shift pattern of 08:00 to 16:00 and 10:00 to 18:00.
• On-call duties may be required.
• Enhanced background screening, including an enhanced DBS check, is required for this position.
• Due to the sensitive nature of the role, successful candidates may be required to undertake government security clearance.

This role offers the opportunity to contribute to the security and resilience of the UK's critical education and research infrastructure while working with industry-leading technologies and security experts.

Don’t meet every single requirement?

We know that sometimes people can be put off applying for a job if they think they can’t tick every box, so we encourage you to apply even if you do not meet 100% of the requirements, but you feel this role is perfect for you. You may be just the right candidate for this or other roles!

Hybrid working:

Specific patterns for working in the office are not mandated, and the frequency of time worked in the office is agreed with your manager. Meeting in person is something we value so you may need to travel on occasion to any of our hub offices.

Why work for us?

At Jisc, every role is meaningful, and every individual is valued. We foster a culture of continuous learning and personal growth, offering opportunities to develop new skills and make a real impact in education and research. With a strong focus on work-life balance, we embrace flexible working that prioritises outcomes over hours, empowering you to create a rhythm that energises both your professional and personal life.

Our Guiding Principles:

Jisc’s culture is powered by our four guiding principles: putting customers first, driving innovation, creating impact, and championing inclusive collaboration to deliver sustainable outcomes and shape a better future.

Discover the amazing benefits we provide! Here’s what you can look forward to:

• Flexible work pattern, which can adapt to suit your schedules and personal commitments
• 31 days annual leave (plus bank holidays) that includes three closure days over Christmas
• Buy up to an additional 5 days leave during the flexible benefits window
• Generous flexible pension schemes
• A range of wellbeing lifestyle benefits including company paid health care cash plan, mental health first aiders and support
• A company culture of continuous learning with access to thousands of LinkedIn Learning courses, and lots of resources and opportunities to support your development
• Financial well-being support including access to preferential loan and savings plans, mortgage advice, will writing tools and support and resources to help you make the most of your money
• A wide range of discounts and cashback from retailers and big-name high-street stores
• Family friendly policies including enhanced parental, maternity and paternity and co-parental leave as well as opportunity for career breaks
• Support your volunteering with up to 3 days volunteer leave

Equity, diversity and inclusion:

Jisc believe our people make all the difference in cultivating an inclusive culture that welcomes ideas, encourages innovation, and values belonging.

We work hard to create an equitable experience for our candidates and workforce which embraces all aspects of their identity including race and ethnicity, religion and belief, sex, gender identity, sexual orientation, trans identities, age, class, disability, neurodivergence, or veteran status.

Sponsorship:

Jisc has an active sponsor licence to recruit on a Skilled worker visa basis. Candidates wishing to apply who require sponsorship should determine the likelihood of obtaining a Certificate of Sponsorship for the role by assessing their circumstances against the relevant Home Office criteria. Jisc does not offer any financial re-imbursement towards the applicant costs, such as re-location, skilled worker visa and dependant costs or the immigration health charge.

No agencies please.

#INDLP