Cyber Security Analyst

Business Area: ITPlace of Work:
Liverpool Contract Type:
Permanent When you join USS, the size and scale of our pension scheme means you will have numerous opportunities to learn and develop your career. Given our size you'll have real autonomy and influence as you collaborate closely with a wide-ranging team of experts.

About the role

In your role as Cyber Security Analyst, you will make a meaningful and valued contribution from the outset. This role will provide a great opportunity to play an integral role in protecting USS from cyber threats. The primary focus is to monitor systems, identify and remediate vulnerabilities, and respond effectively to security incidents. The role requires practical knowledge of SIEM, vulnerability management, threat detection and response, together with strong investigation and troubleshooting skills.

The role will analyse cyber threats, support forensic investigation where required, and contribute to security operations, incident response, monitoring and operational reporting across the cyber security function.

What you will be doing

As a trusted part of the IT team you will be responsible for:

Security Operations Monitor and review security alerts and incidents, ensuring they are investigated, recorded, prioritised and escalated appropriately.

Investigate cyber security incidents and support containment, eradication, recovery and post-incident improvement activities.

Perform advanced network, endpoint and log analysis to establish the cause, scope and potential impact of security events.

Monitor the evolving cyber threat landscape and assess threats relevant to USS.Use threat intelligence and available security data to identify emerging risks and recommend appropriate action.

Vulnerability Management.

Identify, assess and prioritise vulnerabilities across the USS technology estate using a risk-based approach.

Take ownership of vulnerability remediation, working with system owners and Technology Services teams to ensure risks are addressed within agreed timescales.

Undertake technical remediation through patching, configuration changes and platform updates where this falls within the role’s area of responsibility.

Track remediation activity, escalate material risks or delays, and produce clear reporting on vulnerability exposure and progress.

Support penetration testing, security assessments and the remediation of identified findings.

Security Platforms Support the operation, maintenance, development and governance of security platforms, including SIEM, Network Access Control, firewalls, endpoint security, email security, vulnerability management and identity security.

Support the secure operation of cloud and SaaS services, ensuring risks are identified, investigated and escalated appropriately.

Work with internal teams and specialist suppliers to maintain the effectiveness of security tools and services.

Maintain accurate technical documentation, operational procedures, playbooks and runbooks for security platforms and processes.

Ensure technical changes follow the USS change-control process.

Governance & Assurance Produce security and vulnerability reporting that provides assurance on the effectiveness of controls and the USS security posture.

Support internal and external audit activity by providing reports, technical evidence and control validation.

Contribute to the maintenance of security policies, procedures and operational standards.

Build security requirements into business-as-usual processes and technology projects.

Work with internal stakeholders to maintain appropriate security standards and support relevant certifications and assurance activities.

Customer Focused Service:

With customer services a priority for the Technology Services function, provide the…