Security Analyst

• Play a key role in protecting the university's information assets while helping to shape and strengthen our security culture.
• Responsible for maintaining and enhancing our information security framework, ensuring that policies, procedures, controls, and risk management activities remain effective and aligned with industry best practice.
• Contribute to the design and implementation of new security controls, helping to continually improve our security posture and support our ongoing compliance with ISO 27001.
• Collaborate closely with colleagues across IT, Cyber Security, and the wider university community to embed security into everyday operations and strategic initiatives.
• Take a leading role in coordinating Business Continuity Management activities, supporting the university's resilience objectives and alignment with ISO 22301.
• Conduct risk assessments, supporting audits, advising stakeholders, or helping drive security improvements.

Information Security Analyst

• Support sales assurance processes through questionnaire completion and contract reviews.
• Take a leading role in maintaining Lead Forensics’ ISO 27001 compliance.
• Drive continual improvement, leveraging AI agents, automation tools and optimising manual processes.
• Manage IT supplier due diligence.
• Lead a small team and mentor team members.
• Lead the maintenance of documentation and processes.

Senior Security Compliance Analyst

• Work closely with other members of the team to ensure the technology, security policies and procedures are in place to safeguard the business.
• Manage day to day operational cyber security tasks to maintain optimum business security.
• Develop, maintain, and support the organisations IT security systems including managing next generation firewalls, IPS, security SIEM tools, Endpoint and security devices or services, responding to security incidents and analysing security breaches.
• Develop, maintain, and support the organisations network including managing all Layer2/3 devices, LAN, WAN, Internet, B2B connections, RAS, NLB, Wi-Fi ensuring they support the business goals and infrastructure.
• Responsible for identifying external and internal threats, including investigating and documenting security incidents, making recommendations for fixes, and implementing those fixes where applicable.
• Working on cyber security projects or those that require security input, including the rollout of new security measures across the business.
• Monitor SIEM tools and data feeds for threats and take appropriate action when required.
• Install and operate firewall and data encryption software to protect sensitive business information.
• Support the technical implementation of ongoing security requirements, including access control and technical audits.
• Ongoing assessment of risk and reporting to line manager allowing him to make informed decisions regarding cyber security.
• Analyse and identify potential threats to fine tune the existing security monitoring platforms.
• Create, maintain, and review security policies and controls across the business, in line with business needs.
• Manage, update, and resolve incidents or service requests, in adherence to all applicable Service Level Agreements.
• Research current and developing cyber security products and standards.
• Deploy patches to security devices in a timely manner and ensure any detected vulnerabilities are fixed to ensure high levels of security are maintained.
• Perform daily monitoring of security estate to ensure there is no unplanned downtime, breaches of security or network vulnerabilities.
• Create, maintain, and adhere to operational policies, procedures, and standards to effectively support the operational business.
• Create and maintain system documentation including documentation sufficient for someone else to cover in your absence.
• Participate in the development, testing and maintenance of disaster recovery and business continuity plans.
• Recommend, develop, and implement system solutions through analysis of business requirements and new developments in technology.
• Effectively manage small works requests in line with defined procedures.
• Liaise with 3rd party company representatives to ensure that satisfactory support, supply, and maintenance services are provided.
• Provide specialised technical assistance in the planning and development of new projects and systems.
• Ensure that IT equipment inventory information is entered and maintained.

Network & Security Analyst

• Identify, analyse, and support the management of information security and IT risks across the business
• Work closely with stakeholders, vendors, and internal teams to assess security controls and risk exposure
• Support compliance activities aligned to Cyber Essentials+ and ISO27001 standards
• Create and maintain information security policies, standards, procedures, and wider GRC documentation
• Conduct internal security assessments and reviews, clearly documenting findings and recommendations
• Maintain key security knowledge resources including process documentation, RACIs, training materials, and contract information
• Collaborate with risk owners to identify, manage, and mitigate vulnerabilities and threats effectively

Information Security Analyst – Cyber Essentials+/ISO27001

• Develop a complete understanding of Baringa’s technology and information systems.
• Lead in the response to RFPs/audits, including supplier security due diligence and third-party audit and assurance activities.
• Identify and communicate current and emerging security threats and cyber risks.
• Support a program of awareness-raising and training to deliver compliance and to foster a cyber conscious culture across the company.
• Assist with the definition, implementation and maintenance of corporate security policies, standards and procedures.
• Provide ‘hands on’ assistance, particularly in technical control implementation and incident response.
• Coordinating the needs of in-house IT experts and remote employees, vendors and contractors.
• Work as part of a team to communicate ideas, suggestions and solutions that achieve the firm’s long-term objectives, especially the GRC Strategy.
• Align organisational security strategy and infrastructure with overall business and information technology strategy.
• Manage company compliance with information security, policies, standards, contractual obligations and guidance through business managers and champions providing advice, support and guidance on risk based good practice.
• Lead on and produce technical security MI in support of governance and vulnerability management engagements.
• Support client engagement leads on client queries and requests - during the business development process and during ongoing client engagement - regarding Baringa’s information technology security policies and processes.

Cyber Security Analyst – Governance, Risk and Culture

• Perform vulnerability scans, analysis, and prioritise identified weaknesses, working with the Technology Team to remediate identified issues.
• Collate alerts from security tooling, perform triage, prioritise and where appropriate escalate for further action.
• Act as the first point of contact for security incidents, providing timely responses, coordination, and communication throughout all stages - including liaison with any 3rd party security providers.
• Perform hands-on investigations to analyse incidents, identify suspicious behaviour, gather evidence, and build on lessons learned to prevent their recurrence.
• Research and implement new security technologies to better protect company information and assets.
• Participate in the response to RFPs, third party audit and assurance activities.
• Lead on and produce technical security MI in support of governance and vulnerability management engagements.
• Provide ‘hands on’ assistance, particularly in technical control implementation or administration where needed.
• Work as part of a team to communicate ideas, suggestions and solutions that achieve the firm’s long-term objectives.

Cyber Security Analyst – Defensive Operations

Threat Intelligence Specialist

• Complete targeted penetration tests and red team exercises to identify exploitable vulnerabilities.
• Develop and maintain offensive tooling to simulate adversary tactics and techniques.
• Monitor and analyse threat intelligence feeds to identify emerging threats and relevant TTPs.
• Produce technical threat reports and briefings to inform security posture and decision-making.
• Conduct proactive threat hunting based on intelligence-led hypotheses and anomaly detection.
• Support risk assessments with insights from offensive operations and threat landscape analysis.

Offensive Security and Threat Intelligence Specialist

• Support a 24/7 intelligence operation
• Identify, investigate, and assess threats and trends impacting client’s platform
• Monitor security incidents and trends
• Escalate security incidents to client stakeholders
• Maintain visibility on employee movements
• Participate in training and drills
• Support internal stakeholders with ad hoc reporting
• Conduct all-source investigations

Embedded Intelligence Analyst

• Analyse and interpret complex data to support evidencebased decisionmaking across the council.
• Deliver highquality reports, dashboards and visualisations using tools such as Power BI.
• Support the development of automated data pipelines and improve the flow and quality of data across the organisation.
• Conduct statistical analysis and contribute to machinelearning projects using Python and/or R.
• Translate business questions into analytical approaches and help colleagues understand what the data is telling them.
• Work with geospatial tools (e.g. QGIS) to support mapping and locationbased insight.
• Contribute to research, surveys, evidence reviews and needs analyses.
• Ensure all work follows best practice in data governance, privacy, information security and ethical use of data.
• Collaborate closely with analysts, service leads, ICT teams and wider partners to ensure data solutions meet user needs.

Insight & Intelligence Analyst – 18 Months FTC

• Act as a Subject Matter Expert in identifying, assessing, and mitigating cyber risk across the organisation’s technology estate.
• Conduct security audits and review system architectures.
• Investigate incidents and drive remediation plans to ensure security, resilience, and compliance.
• Collaborate closely with IT teams and external partners to enhance overall security posture.

Cyber Security Analyst

• Continuously monitor network traffic, system logs and security alerts for suspicious activity and potential security breaches.
• Act as a first responder to security incidents, investigating breaches, containing threats and helping to restore systems.
• Conduct regular vulnerability assessments and penetration tests to identify weaknesses in systems and implement necessary improvements.
• Contribute to the development of incident response capabilities, policies and procedures.
• Ensure that the organisation complies with relevant data protection laws and industry regulations by implementing best practices for securing sensitive data.
• Provide detailed reports on security incidents, vulnerabilities and the effectiveness of implemented security measures to stakeholders and IT teams.
• Stay informed about the latest cyber threats, vulnerabilities and emerging security technologies to proactively defend against them.
• Audit contingency and disaster recovery plans to ensure business continuity in the event of a significant security breach.
• Work closely with IT and other departments to share information, implement security best practices and enhance the overall security posture of the organisation.
• Provide cybersecurity awareness training to colleagues to help them understand and follow security protocols.

• Working to understand the financial crime risks associated with products and services and mitigation of such risk
• Assisting with building financial crime, sanctions and money laundering typologies knowledge within the team and across the wider business
• Managing and resolving end-to-end inquiries in a timely manner
• Conducting transactional analysis utilising complex data sets and research using internal and external sources to help determine potential suspicious activity and investigate as appropriate
• Raising relevant reports where required to ensure compliance with relevant financial crime laws and regulation
• Managing competing tasks and priorities in a manner that effectively mitigates risk
• Applying technical and regulatory knowledge to identify potential control/ risk issues and recommend potential solutions

Intelligence Analyst

• Conduct secure, focused counter fraud research on DDW and Surface Web and provide expert analysis to fulfill Customer requests.
• Produce quality intelligence reports that provide additional context to clients.
• Leverage Flashpoint proprietary tools and systems to support assigned tasks.
• Leverage external tools to synthesize data and enhance analysis/alerting services.
• Synthesize raw data to assess information credibility and determine relevance to the client base.
• Create keywords/patterns to highlight high signal data within Flashpoint tools.
• Safely navigate virtual environments to support assigned tasks, following Flashpoint rules of engagement.
• Conduct online collection activities and engage threat actors (TAs).
• Present at community calls, document team-specific processes/procedures, and facilitate job-specific guidance for new and junior team members.

Intelligence Analyst II

• Analysing claims files and provide reports and information to Clients and File Handlers as to the outcome of the analysis
• Using desktop systems and analytical techniques to research and locate relevant information that will validate or rule out concerns and / or detect potentially fraudulent information
• Compiling reports/profiles on individuals and groups involved in suspected fraudulent activity
• Preparing witness evidence (including statements) in order to adduce the results of analysis in Court proceedings (generally civil proceedings) where necessary
• Utilising IT software applications at an advanced level in order to produce proactive intelligence reports (e.g. iBase, i2 Analysts Notebook, Excel)
• Delivering structured and detailed briefings to lawyers and clients on all key facts relating to specific investigations as required
• Preparing reports detailing Intelligence led fraud risk assessments in relation to Insurance Fraud and fraud ring investigations
• Producing reports/briefings in accordance with the Intelligence Cycle and utilising the NIM (National Intelligence Model)
• Where appropriate, mentoring Trainee analysts on an informal basis
• Achieving a daily chargeable target
• Compliance with service level agreements as required on a client specific basis and in accordance with internal benchmarks
• Time recording in accordance with Keoghs policy

• Conduct advanced investigations escalated from the MDR SOC and internally identified threats, including root cause analysis, evidence gathering, containment, and remediation across Microsoft Sentinel and Defender XDR.
• Support incident response activities through the full lifecycle - detection, analysis, containment, eradication, recovery, and lessons learned - and contribute to the development of IR playbooks and procedures.
• Contribute to MSSP oversight and quality assurance - reviewing escalation quality, providing feedback, and participating in joint detection tuning sessions.
• Develop and execute threat hunts based on threat intelligence, MITRE ATT&amp;CK gap analysis, and incident learnings, converting findings into detection rules or tuning recommendations.
• Author and deploy detection content (KQL analytics rules) in Microsoft Sentinel, supporting the team's efforts to expand MITRE ATT&amp;CK coverage and reduce detection gaps.
• Support vulnerability management activities, including assessment of identified vulnerabilities, prioritisation, and coordination with the Technology team on remediation.
• Produce operational metrics and MI reporting in support of governance and stakeholder reporting.
• Mentor junior analysts, providing technical guidance on investigations, KQL development, and threat analysis techniques.

Senior Cyber Security Analyst

• Identify OT assets on the estate using the OT NEMS tooling. Review and initiate asset data exchanges and updates between the OT NEMS tool & the OT asset database.
• Identify potential vulnerabilities in OT systems using the OT NEMS tooling, reviewing its outputs for dissemination and assess the risks of potential threats, in collaboration with OT Operations colleagues.
• Track measures to manage and mitigate vulnerabilities in OT systems, chairing forums.
• Continuously monitor OT systems for any signs of security breaches or anomalies, using the organisation’s OT NEMS tooling.
• Follow and manage incident response plans to address security breaches promptly. Review, triage & investigate OT network anomaly alerts, Conduct regular periodic reviews of alerts (false positives, low, medium and high severity).
• Support Compliance teams in providing evidence of the organisation’s current regulatory compliance positions on regulated and critical systems.
• Maintain OT NEMS tool updates and key metrics reporting for key stakeholders.

See all jobs on JobTailor

Information Security Analyst

Senior Security Compliance Analyst

Network & Security Analyst

Information Security Analyst – Cyber Essentials+/ISO27001

Cyber Security Analyst – Governance, Risk and Culture

Cyber Security Analyst – Defensive Operations

Offensive Security and Threat Intelligence Specialist

Embedded Intelligence Analyst

Insight & Intelligence Analyst – 18 Months FTC

Cyber Security Analyst

Information Security Analyst

Intelligence Analyst

Intelligence Analyst II

Intelligence Analyst

Senior Cyber Security Analyst

Cyber Security Analyst, Vulnerability Management – OT