Job Description
The salary for this role is £34,568 (inclusive of a Specialist Allowance). Onsite working is expected for 5 days a week, however, we actively support requests for flexible working.
This role can be based at any of the following sites; Culham, Oxfordshire
This role requires employees to complete an online Baseline Personnel Security Standard (BPSS) / be eligible for SC Clearance (must have resided in the UK for the last 5 years), including The Disclosure & Barring Service (DBS) checks for criminal convictions and possibly a search of open source data.
The Role
Are you looking for an exciting opportunity to make a difference? Join our team and contribute to the future of fusion energy. As IT Security Analyst, you will play a pivotal role is within the Information and Cyber Security Group, under the Enterprise Infrastructure Solutions Unit within the Computing Division which is responsible for the centrally managed IT services and infrastructure of the UKAEA sites. This includes data networks, desktop computing, file systems, UNIX, Linux and Windows server systems, Information and Cyber Security and JET data acquisition and storage tools. It also provides service desk support and operational management of UKAEA computer rooms.
In order to ensure that the UKAEA's IT infrastructure is resilient to cyber security threats, the IT information security analyst is responsible for managing, overseeing, and implementing information and cyber security systems across the whole IT infrastructure. Under the guidance of team members with more expertise, the role entails supporting and enhancing UKAEA's information and cyber security processes and detection systems as well as performing vulnerability testing on the organization's IT infrastructure. To enhance information and cyber security (InfoSEC), the Information and Cyber Security Group collaborates with teams throughout the entire company as part of the Computing Division. Additionally, the group encourages awareness of and advancements in InfoSEC by providing guidance, training, and other resources to the entire UKAEA.
Additional Responsibilities:
* Analyse and assess potential security threats and risks to our organization's information systems and data,
* Conduct security assessments and penetration testing to identify vulnerabilities and recommend appropriate controls
* Provides authoritative advice and guidance on security strategies to manage identified risks and ensure adoption, and adherence to standards. This includes advice on the application and operation of all types of security controls, including legislative or regulatory requirements such as data protection / GDPR and software copyright law.
* Monitor security events and alerts and take appropriate action to respond to and mitigate potential threats.
* Helps develop policies, standards, processes, and guidelines for ensuring the physical and electronic security of automated systems. Develops implementation approach, taking account of current best practice, legislation, and regulation,
* Collaborate with other departments to ensure that information security requirements are integrated into all business processes and systems,
* Contributes to the design and development of IT security solutions across the organisation
* Design and Conduct trainings to IT system administrators, management, and all staff,
* Provide regular reports on the organization's security posture to senior management and other stakeholders if required
Qualifications
Essential Requirements:
* At least a HNC in a STEM subject (preferably Computing or a related field) or equivalent Information and Cyber Security Experience.
* Demonstratable experience in Cyber security or a related field,
* Strong knowledge of Information and cyber security principles, techniques, and best practices
* Excellent analytical and problem-solving skills with a keen attention to detail
* Good interpersonal and communication skills, plus the ability to work as part of a team.
Desired Requirements:
* Familiarity with current cyber security prevention practices
* An understanding of how hackers work and ability to stay abreast of cyber threat techniques,
* Demonstrable knowledge of security tools and technologies such as SIEM, firewalls, intrusion detection and prevention systems, and vulnerability scanners
Additional Information
A full list of our benefits can be found here
UKAEA's mission is clean energy for all, and we welcome talented people from all backgrounds who want to help us achieve our mission. We are under-represented from some groups and so want to encourage applications in particular from women in STEM, people from Black British Caribbean and African backgrounds and from Pakistani and Bangladeshi British backgrounds. Our Executive team, supported by our 'Head of Equality, Diversity and Inclusion' (EDI) and Wellbeing and our EDI Networks actively promote Inclusion and takes steps to increase diversity within our organization. We reinforce best practices in recruitment and selection and evaluate approaches to remove barriers to success.
UK Atomic Energy Authority is committed to being accessible. Please email talent@ukaea.uk if you have any questions or require help or adjustments to compete on a fair basis, for example, changes to the way we interview or share information.
Please note that vacancies are generally advertised for 4 weeks but may close earlier if we receive a large number of applications.