Cyber Security Analyst

About the role

The Cyber Security Analyst protects the university's digital environment by designing, implementing and integrating security systems in line with security policies and procedures, and responding to threats across on-premises and cloud systems. The role ensures compliance and safeguards critical data so that secure, uninterrupted operations can support the university's mission of quality education and research.

Key responsibilities

• Design, architect and implement security systems aligned with corporate policies and local regulations, and review security architecture for hybrid environments including cloud, on-premises and third-party integrations.
• Perform cybersecurity risk assessments and/or penetration tests for new systems, applications and technology implementations.
• Act as the SOC team's point of contact for security alerts, track remediation of security gaps and audit findings, and run post-incident reviews.
• Run regular vulnerability scans on critical assets, work with developers to fix application vulnerabilities, and report progress to management.
• Manage cybersecurity risks, maintain a centralised log of incidents and vulnerabilities, analyse trends and give management actionable insights.
• Review security standards and procedures, promote secure development practices and security awareness, and encourage participation in security initiatives.

Required profile

• Bachelor's degree in Computer Science, Information Technology, Cybersecurity or a related discipline (Master's preferred).
• 4-7 years of experience embedding security in software development, conducting secure code reviews and using automated scanning tools.
• Certifications such as CISSP, CISM, CISA, CompTIA Security+, CEH; GIAC, GSEC or GCIH preferred.
• Cloud security certifications such as AWS Certified Security Specialty or Microsoft Azure Security Engineer Associate preferred.

Required skills

• Hands-on experience with cloud security (AWS, Azure, GCP), SIEM and EDR tools, vulnerability management, network and web/application security.
• Knowledge of secure coding, OWASP Top 10 and SDLC integration.
• Advanced knowledge of incident response, MITRE ATT&CK, security playbooks and post-incident reviews.