Cyber Security Analyst

When you join USS, the size and scale of our pension scheme means you will have numerous opportunities to learn and develop your career. Given our size you'll have real autonomy and influence as you collaborate closely with a wide-ranging team of experts.

About the role

In your role as Cyber Security Analyst you will make a meaningful and valued contribution from the outset. This role will provide a great opportunity to play an integral role in protecting USS from cyber threats. The primary focus is to monitor systems, identify and remediate vulnerabilities, and respond effectively to security incidents. The role requires practical knowledge of SIEM, vulnerability management, threat detection and response, together with strong investigation and troubleshooting skills.

The role will analyse cyber threats, support forensic investigation where required, and contribute to security operations, incident response, monitoring and operational reporting across the cyber security function

What you will be doing

As a trusted part of the IT team you will be responsible for:

Security Operations

• Monitor and review security alerts and incidents, ensuring they are investigated, recorded, prioritised and escalated appropriately.
• Investigate cyber security incidents and support containment, eradication, recovery and post-incident improvement activities.
• Perform advanced network, endpoint and log analysis to establish the cause, scope and potential impact of security events.
• Monitor the evolving cyber threat landscape and assess threats relevant to USS.
• Use threat intelligence and available security data to identify emerging risks and recommend appropriate action.

Vulnerability Management

• Identify, assess and prioritise vulnerabilities across the USS technology estate using a risk-based approach.
• Take ownership of vulnerability remediation, working with system owners and Technology Services teams to ensure risks are addressed within agreed timescales.
• Undertake technical remediation through patching, configuration changes and platform updates where this falls within the role’s area of responsibility.
• Track remediation activity, escalate material risks or delays, and produce clear reporting on vulnerability exposure and progress.
• Support penetration testing, security assessments and the remediation of identified findings.

Security Platforms

• Support the operation, maintenance, development and governance of security platforms, including SIEM, Network Access Control, firewalls, endpoint security, email security, vulnerability management and identity security.
• Support the secure operation of cloud and SaaS services, ensuring risks are identified, investigated and escalated appropriately.
• Work with internal teams and specialist suppliers to maintain the effectiveness of security tools and services.
• Maintain accurate technical documentation, operational procedures, playbooks and runbooks for security platforms and processes.
• Ensure technical changes follow the USS change-control process.

Governance & Assurance

• Produce security and vulnerability reporting that provides assurance on the effectiveness of controls and the USS security posture.
• Support internal and external audit activity by providing reports, technical evidence and control validation.
• Contribute to the maintenance of security policies, procedures and operational standards.
• Build security requirements into business-as-usual processes and technology projects.
• Work with internal stakeholders to maintain appropriate security standards and support relevant certifications and assurance activities.

Customer Focused Service

• With customer services a priority for the Technology Services function, provide the team with the business knowledge to understand how our organisation works enabling the correct prioritisation of work.
• Engage with key stakeholders on a regular basis, encouraging an open and collaborative communication stream across both Liverpool and London departments.

Project Management

• Have technical input into Infrastructure technology and operational projects.

Maintenance & Recovery

• Assist Monitoring & Compliance Analyst with escalations relating to daily tasks under the umbrella of patching and maintenance, ensuring the USS infrastructure is secure and stable for all users.

Governance

• Assist senior management with policy and procedure governance ensuring it is up to date.
• Assist Monitoring & Compliance Analyst to produce reports packs as identified requirements from across the business.

About you

We know that sometimes people can be put off applying for a job if they don't tick every box, if you're excited about working for us and have most of the skills or experience we're looking for, then please apply, regardless of whether you meet all the requirements outlined in this profile.

To be successful in the role you will have

• Strong experience with security vulnerability management.
• Good experience and knowledge of using Security Information and Event Management tools.
• Good experience and knowledge of implementing and supporting Network Access Control.
• Good experience and knowledge of advanced detection and response systems.
• Good understanding of exploits, malware, and digital forensics
• Basic understanding of Network, Data Centre and WebApp security.
• Operational and working understanding of Windows Server and Endpoint administration.
• Fundamental understanding of networking and network concepts such as routing, firewalls, DNS and PKI/Encryption, Active Directory and Identity Services.
• Good understanding of the cyber threat landscape
• Experience conducting analysis/investigation and containment of potential data breaches or cyber security incidents
• Experience in creating procedures and run books.
• Ability to work independently.
• Writing and delivering reports as identified.
• Excellent communication and collaboration skills

Why join us?

How we will reward you

• Great starting salary
• Generous annual leave package
• Access to a high quality pension scheme provided through Universities Superannuation Scheme
• Supportive people policies (including enhanced occupational sickness pay and family friendly pay)
• Financial contributions towards your personal development to help you maintain your physical and mental wellbeing
• Access to a range of health and wellbeing services i.e., private healthcare, discounted gym membership
• Learning and development opportunities to develop your skills, knowledge and talent
• Employee Volunteer Day’s to support the communities where you work and live
• Cycle to Work Scheme

Our culture

Our people are what makes us different. We work together to create a diverse and inclusive culture that embraces individuality, where people are welcomed and feel comfortable in the knowledge that they can be themselves. We are active members of:

• Social Mobility Pledge
• Menopause Workplace Pledge
• Actively support Women in Tech
• Annual Intern programme supporting individuals to gain work experience.

About us

Universities Superannuation Scheme (USS) was established in 1974 as the principal pension scheme for universities and higher education institutions in the UK. We work with around 330 employers to help build a secure financial future for more than 500,000 members and their families. We are one of the largest pension schemes in the UK, with total assets of around £90.8bn (at 31 March 2022). To find out more, please visit https://www.uss.co.uk

USSL is proud to be an equal opportunity employer. We strive to ensure our recruitment process is as flexible and inclusive as possible so we can attract diverse candidates and recruit the best talent. We want all candidates to perform at their best during the recruitment process, so if you need any reasonable adjustments or if there is anything we can do to help support you through your recruitment journey please let us know by contacting resourcing@uss.co.uk.