IT Security Analyst

Join to apply for the IT Security Analyst (3346) role at GTR (Govia Thameslink Railway).

At GTR, cybersecurity sits at the core of how we protect our people, platforms, and customers. As an IT Security Analyst, you’ll play a hands‑on role in strengthening our security posture—supporting daily security operations while helping shape resilient, compliant, and future‑ready systems. This is a role for someone who enjoys solving problems, responding to real threats, and continuously improving how security is delivered across the organisation.

• Detecting & responding to threats:
  Monitor security platforms to identify, analyze, and contain suspicious activity, determine root causes, and drive continuous improvement.
• Investigating incidents & hunting threats:
  Perform in‑depth incident analysis and proactive threat hunting to stay ahead of emerging risks.
• Managing vulnerabilities:
  Conduct vulnerability scans and web‑application assessments, track remediation, and validate fixes.
• Reducing security risk:
  Review systems and infrastructure for security gaps and define clear remediation strategies.
• Improving security operations:
  Onboard log sources into SOC/SIEM tools, validate alerts, and refine detection capabilities.
• Driving best practices & compliance:
  Support alignment with CIS Benchmarks, ISO
  27001, and NCSC Cyber Essentials.
• Collaborating across teams:
  Work closely with IT, engineering, and the wider business to embed security‑by‑design and share knowledge.
• Maintaining operational excellence:
  Manage incident tickets, support ITIL‑based problem management, and keep security documentation accurate and up to date.
• Automating where possible:
  Contribute to scripting and automation initiatives to improve efficiency and consistency.

• Hands‑on cybersecurity experience:
  Proven background in technical security roles, including incident response, monitoring, and risk management.
• Strong analytical & prioritisation skills:
  Ability to assess risk, triage incidents effectively, and resolve issues in high‑pressure situations.
• Clear communication:
  Confidence explaining technical security concepts to non‑technical stakeholders at all levels.
• Framework & standards knowledge:
  Familiarity with MITRE ATT&CK, NIST/NIS‑R, ISO standards, and security best practices.
• Technical breadth:
  Experience across Microsoft platforms, identity and access management, endpoint protection, and cloud security.
• A security‑first mindset:
  Curiosity about emerging threats, a commitment to continuous learning, and a proactive approach to improving security posture.
• Relevant certifications (desirable):
  CySA+, CISSP, Microsoft certifications, ITIL v4, or similar.

Entry level

Full‑time

Information Technology

Travel Arrangements and Truck Transportation

Referrals increase your chances of interviewing at GTR (Govia Thameslink Railway) by 2x.

London, England, United Kingdom