Cyber Security Analyst - Ref 2860

Join a people-centred technology team that thrives on innovation, collaboration and delivering meaningful outcomes. We are seeking an experienced Cyber Security Engineer to join a busy Information Systems team, supporting both business-as-usual operations and a range of strategic security initiatives. Working closely with infrastructure, networks, operations, applications and wider business teams, you will play a key role in strengthening and enhancing the organisation's cyber security posture.

This role offers a broad mix of operational security responsibilities and project-based work, making it an excellent opportunity for a security professional who enjoys both hands-on technical support and security improvement initiatives.

Contract Type
:
Permanent preferred (contract considered)

The successful candidate will be a proactive and technically capable security professional who can balance operational responsibilities with security improvement projects. You will be comfortable working across multiple technology domains and collaborating with both technical and non-technical stakeholders to improve the organisation's overall security posture.

Provide proactive day-to-day cyber security support across the business, including:

• Email gateway administration, configuration and security alert management
• Phishing email investigation and analysis
• Delivery of security awareness campaigns and user testing exercises
• Management and remediation of incidents escalated from the SOC
• Vulnerability management and remediation activities
• Configuration and administration of endpoint security solutions
• Supporting ad hoc Information Systems activities requiring security expertise
• Analysing cyber threats and leveraging appropriate security tools to identify, investigate, and mitigate risks

Support the delivery of key cyber security initiatives, including:

• Email security enhancements
• Web security consolidation and optimisation
• Identity and Access Management (IAM) improvements
• Understanding endpoint security platform
• Continuous Security Control Validation
• Attack Surface Management implementation
  
  Data Loss Prevention (DLP) deployment and configuration

• Proven experience working within a Cyber Security, Information Security or Security Engineering role
• Strong understanding of security operations and security best practice principles
• Experience producing technical documentation, including High-Level Designs (HLDs) and Low-Level Designs (LLDs)
• Experience investigating and managing security incidents
• Hands-on experience with vulnerability management processes
• Strong stakeholder engagement and communication skills

Demonstrable experience across several of the following areas:

• Web security technologies
• Email security technologies and controls
• Endpoint protection and endpoint security management tools
• Microsoft Azure security technologies and best practices
• Active Directory and Microsoft Entra  (Azure Active Directory) security
• Privileged Access Management (PAM) and privileged remote access solutions
• Data Loss Prevention (DLP) technologies and controls
• Exposure validation
• Identity and Access Management (IAM)
• Security monitoring and incident response and reporting

• Degree-level qualification in an IT-related discipline or equivalent industry experience
• CompTIA Security+
• CISSP
• Other recognised cyber security certifications

Technology is constantly evolving, and so are we.

Since our beginnings as a managed IT services provider, prosource.it has grown alongside the organisations we support, adapting to changing technologies and business needs. Today, we deliver a broad range of technology and business services that help clients plan, implement and embrace change successfully.

While technology is at the heart of what we do, we know that delivering lasting value takes more than technical expertise alone.

By combining innovative thinking with practical experience and strong client partnerships, we help organisations realise the full potential of their technology investments. From adopting emerging technologies and…