Security Analyst

Salary: Circa £42,000 per annum (negotiable based on experience) + comprehensive benefits package

Jisc grade: TCY3 (internal use only)

Hours: 35 hours per week

Job Type: Permanent

Reports into: Internal Security Operations Lead

Working style: Hybrid - A blend of working from home and your nominated hub office. We have hubs located in London, Bristol, Manchester and Oxford.

For 30 years Jisc has pioneered digital solutions for UK education and research, transforming how knowledge is created, shared and used.

We are uniquely positioned to protect, promote and lead the sector in digital and data transformation, making a difference to students, communities and society. Together, we are

working to build a better digital future for education and research.

Raise your potential at Jisc through our culture of lifelong learning. At Jisc, we're all about growth, so embrace new challenges, sharpen your skills and shape a career that excites you.

The Jisc Security Operations team protects both the Janet Network and Jisc’s internal systems, combining market leading security solutions with bespoke inhouse tools. We provide threat intelligence, guidance, and support to help our members keep their networks secure.

Jisc’s internal security team safeguards our systems and data while supporting colleagues across the organisation. Our approach blends technical controls with education, training, and awareness, working closely with protective services, external partners, and third-party providers to strengthen Jisc’s overall security posture.

Day to day responsibilities include incident handling, threat detection, and security analysis within Jisc’s internal security team, using a mix of Jisc developed and commercial tools to gather intelligence, mitigate attacks, and deliver effective incident response. The role also requires participation in an agreed extended working period (currently 08:00–18:00) within a 35 hour week.

This role will provide an escalation point for Associate Security Analysts and will support the Senior Security Analysts with Incident Management and ongoing development of security systems, helping to generate new mitigations and enhancing the internal security of Jisc to defend against future attacks more effectively.

• Participate in, and support operation incident handling services when events have been detected or reported.
• As directed by the Team Lead or Senior Security Analyst support the team's response to security incidents, ensuring that they are handled promptly and effectively to minimise damage and downtime.
• Monitor and respond to security operations and infrastructure events
• To support in the continuous improvement of current and new internal service technologies to improve threat analytics and incident management
• This role will assist the Team Lead or Senior Security Analyst with the development, implementation, monitoring, and optimisation of the new security platforms.
• Support internal incident response activities with the coordination of CSIRT.
• As part of a security posture improvement program, working with teams across Jisc to scan, identify, remediate and/or mitigate identified security issues including servers, infrastructure and web applications, across on-prem, private cloud (SOC) and public cloud infrastructure.

• Sound understanding of IT environments and common infrastructure including:
  Microsoft Stack (Azure, Active Directory), Virtualisation Platforms, Backup Systems & Cloud Platforms.
• Knowledge & familiarity with a range of security tools and systems such as: SIEMs, EDR’s, Mail Filtering, Conditional Access/MFA, IPS/IDS, WAF, Firewalls, Networking, VPN’s and DDoS mitigation systems.
• Operational knowledge and experience of incident response.
• Experience supporting alert creation, tuning, filtering and customer baselining for SOC & SIEM services.
• Demonstrated experience with innovation, improving work instructions, process or CSIRT & SOC capability with automation and development ideas.

We know that sometimes people can be put off applying for a job if they think they can’t tick every box, so we encourage you to apply even if you do not…