Cyber Security Analyst

Purpose of the Role 

The Cyber Security Analyst is a technically focused, operational security role that combines elements of cyber security, network security and systems administration. The role supports the IT Systems Manager in ensuring that Freightliner IT services protect the confidentiality, integrity and availability of systems and data, while meeting recognised good-practice principles and applicable regulatory requirements. 

The post holder is responsible for overseeing the monitoring, investigating, supporting and improving operational cyber security controls across the Freightliner estate. The role works closely with infrastructure, applications, service delivery, project and business teams, as well as approved third parties and wider group IT functions. 

Main Duties and Responsibilities 

Security operations and incident response 

• Perform day-to-day monitoring and proactive management of cyber security systems, alerts and associated components. 

• Triage, investigate and coordinate the resolution of security incidents, escalating material risks in line with the incident and major incident processes. 

• Act as a central point of contact for operational cyber security activity and provide clear updates to technical teams, stakeholders and management. 

• Maintain appropriate incident records, evidence, lessons learned and follow-up actions. 

Security platforms and technical controls 

• Configure, maintain and support security controls across the Freightliner estate, including firewalls, secure web gateways/content filtering, endpoint protection, VPN and remote access, email security, identity and access controls, vulnerability management and security monitoring platforms. 

• Support secure configuration, operational health, tuning and lifecycle management of security technologies across on-premises, cloud and SaaS environments. 

• Plan, test and implement upgrades and service improvements to existing cyber security services and associated infrastructure. 

• Use scripting and automation where appropriate to improve consistency, response times, reporting and operational efficiency. 

Vulnerability, assurance and compliance 

• Operate a continuous vulnerability assessment process, coordinate remediation with system owners and track risks through to closure or formal acceptance. 

• Audit systems, cloud services and applications for secure configuration and alignment with approved standards and baselines. 

• Coordinate and support annual security assessments, penetration tests, audits and assurance activities, ensuring that findings have clear owners and remediation plans. 

• Contribute technical evidence and subject-matter support for security policies, risk assessments, compliance obligations and internal governance reporting. 

• Support compliance, assurance and accreditation activities by collecting evidence, maintaining control documentation and coordinating remediation actions. 

• Maintain accurate and auditable records of security controls, risks, exceptions, assessments and security-related decisions. 

• Coordinate the alignment of security controls and processes with the NIST Cybersecurity Framework and applicable requirements under the Network and Information Systems (NIS) Regulations. 

Projects, guidance and documentation 

• Provide practical security guidance to projects, technical teams and business application owners throughout the service lifecycle. 

• Review proposed technical changes and designs, identify cyber security risks and recommend proportionate controls. 

• Create and maintain technical procedures, operational runbooks, support documentation and security training or awareness materials. 

• Build effective working relationships across IT and the wider business and liaise with suppliers or partners when required. 

Key Job Requirements 

Essential experience and knowledge 

• Significant hands-on experience supporting complex IT, network or cyber security environments; typically gained over five years in relevant technical roles. 

• Strong understanding of cyber security principles across infrastructure, networks, endpoints, cloud services, identity and applications. 

• Practical knowledge of TCP/IP, firewalls, VPN technologies, DNS, DHCP, certificates and SSL/TLS. 

• Experience with vulnerability scanning, secure configuration assessment, remediation tracking and risk-based prioritisation. 

• Understanding of common attack techniques, security monitoring, incident response and recognised application security risks such as the OWASP Top 10. 

• Good understanding of the NIS/NIST Cybersecurity Framework (NIST CSF) and its practical application to identifying, protecting, detecting, responding to and recovering from cyber security risks. 

• Understanding of the Network and Information Systems (NIS) Regulations and the technical, operational and organisational measures required to support compliance. 

• Experience working towards Cyber Essentials 

• Ability to produce and maintain security policies, standards, procedures, control documentation and evidence for audits, assurance reviews and accreditation activities. 

• Ability to interpret technical security information, investigate issues methodically and translate findings into clear, proportionate actions. 

• Champions security and drives awareness throughout the company  

• Willingness and ability to participate in ad hoc out-of-hours support where required. 

Desirable experience and qualifications 

• Experience administering security capabilities within Microsoft Azure, Microsoft 365, Microsoft Entra ID, Microsoft Defender and/or Microsoft Sentinel. 

• Experience of SIEM, endpoint detection and response, secure web gateway, email security, network security and privileged access technologies. 

• Relevant current certifications such as Microsoft Security, Compliance and Identity, Azure, CompTIA Security+, CISSP, SSCP, CCNA Security or Palo Alto Networks certifications. 

• ITIL Foundation certification or practical experience working within an IT service management framework. 

• Experience in a regulated, safety-critical, transport, logistics or multi-site operational environment. 

• Experience supporting NIS compliance, security audits, assurance reviews, accreditation activities or certification programmes. 

Behavioural Competencies 

• Communicates clearly and professionally, including the ability to explain complex technical issues to non-technical colleagues. 

• Works calmly and effectively in a fast-paced environment, including during incidents and periods of operational pressure. 

• Prioritises work effectively, manages competing demands and delivers agreed actions to deadlines. 

• Uses initiative, sound judgement and a structured, methodical approach to problem solving. 

• Demonstrates strong attention to detail while maintaining awareness of wider business and operational priorities. 

• Works collaboratively as a natural team player and encourages effective interaction across technical and business teams. 

• Demonstrates integrity, discretion and personal accountability when handling sensitive information and security matters. 

• Maintains a commitment to continuous learning and keeps technical knowledge current as threats and technologies evolve. 

• Takes ownership, drives improvements and changes within the security field throughout the business