Cyber Security Analyst
Cyber Security Analyst
Permanent | Hybrid (2 days per week in office) | Surrey
Bestman Solutions is supporting a leading organisation within the UK’s critical energy infrastructure sector, responsible for delivering essential services to millions of customers nationwide.
They are seeking a technically capable Cyber Security Analyst to strengthen their infrastructure and network security capability within a complex, operationally critical environment.
This is not a SOC or shift-based monitoring role. The position is focused on security engineering, infrastructure hardening, and improving secure-by-design practices across network and cloud environments.
The role would suit someone who started their career in network or infrastructure engineering and has since moved into cyber security, particularly someone looking to deepen their technical influence within a highly resilient and operationally significant business.
Key Responsibilities
- Design, review, and enhance network security architecture, including:
- Firewall policy management
- Network segmentation
- Secure connectivity design
- Conduct technical security assessments across on-premise and cloud environments
- Lead vulnerability management activities, including remediation prioritisation and oversight
- Harden infrastructure platforms, servers, and endpoints in line with security best practice
- Review and optimise security configurations across network and cloud technologies
- Support the secure deployment of new infrastructure and systems
- Contribute to security standards, baselines, and technical documentation
- Work closely with IT and engineering teams to improve operational resilience and reduce security risk
Required Experience
- Strong background in network and infrastructure security
- Deep understanding of:
- TCP/IP
- DNS
- VPN technologies
- Routing and switching
- Firewall technologies
- Hands-on experience with vulnerability management tooling and remediation processes
- Experience securing Azure, AWS, or GCP environments
- Familiarity with endpoint security and infrastructure hardening practices
- Working knowledge of recognised security frameworks such as:
- ISO 27001
- NIST
- CIS Controls
Interviews will commence shortly.