About the Role

Oxford operates one of the largest and most complex private networks in Europe. As a Cyber Security Analyst, you will work within a highly skilled team handling incident response, threat detection and continuous security improvement across a diverse and challenging environment.

You will focus primarily on investigating and responding to information security incidents, working closely with the Oxford Computer Emergency Response Team (OxCERT), IT Services colleagues across the University, and third-party suppliers. The role offers excellent scope to develop technical capability, with training and mentoring provided where required.

Key responsibilities

• Identify, monitor and respond to security incidents using a helpdesk system
• Investigate incidents, implement countermeasures, and support recovery activities
• Contribute to improving incident management and threat detection capabilities
• Collaborate with internal teams and external suppliers to resolve complex security issues
• Assist with vulnerability scanning, tooling improvements and automated responses
• Produce technical documentation and write security bulletins for University users
• Promote security awareness and best practice across the University
• Take part in training and professional development opportunities

About You

You will have strong analytical and problem-solving skills, with the ability to manage and interpret large volumes of security data, logs and alerts. You’ll be comfortable working with a wide range of stakeholders and explaining technical issues clearly.

Essential criteria:

• Knowledge of information security processes such as endpoint security, email security, threat detection and vulnerability scanning
• Experience or practical knowledge of Windows, macOS or Linux operating systems
• Hands-on experience troubleshooting IT or security incidents (ideally in a helpdesk or support environment)
• Strong communication and interpersonal skills
• Broad knowledge of IT systems and applications
• Educated to A-level standard or equivalent experience

Desirable:

• Scripting experience (e.g. Bash, Python or PowerShell)
• Knowledge of web application security (e.g. OWASP Top 10)
• Experience with security tools such as endpoint protection or vulnerability scanners
• Understanding of regulatory considerations in incident response and investigations
• Experience working with XDR tools