Cyber Security Analyst

About the role

MEDINE GROUP | Support Services is looking for a Cyber Security Analyst to strengthen its security posture. You will monitor and assess security alerts, respond to incidents, manage endpoint security software, run quarterly access reviews and help put preventative controls in place. The role sits in the growing Cyber Security department and reports to the Cyber Security Lead.

Key responsibilities

• Monitor, aggregate and analyse security logs from SIEM, firewalls, EDR and email security gateways to detect incidents early.
• Triage alerts, filter false positives and escalate validated threats with clear documentation.
• Support incident response, containment, investigation and remediation, and help draft incident timelines and logs for audits.
• Manage endpoint security software and help design preventative controls to reduce the attack surface.
• Run quarterly access reviews to validate permissions and enforce least privilege.
• Keep logging mechanisms active and compliant with retention policies, and follow up on log coverage gaps.
• Monitor threat intelligence feeds, vendor advisories and CVEs, and apply IOCs to detection rules and threat hunting.
• Assist with vulnerability scans, track vulnerabilities to remediation and help prioritise fixes with IT teams.

Required profile

• Bachelor's degree in Computer Science, Network Engineering or Cyber Security.
• At least 1 year of professional experience in a SOC or dedicated IT security role.
• Experience interpreting Event IDs, Syslog, Windows/Linux security logs and cloud audit trails.
• Familiarity with email authentication (SPF, DKIM, DMARC) and basic scripting in PowerShell, KQL or Python.

Required skills

• Practical use of a SIEM tool such as Splunk or LogRhythm.
• Knowledge of TCP/IP, DNS, HTTP/S and Microsoft 365 / Entra ID.
• Understanding of the NIST Cybersecurity Framework (CSF 2.0).