Durham University
Cyber Security Analyst (Vulnerability Management) Grade 5
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
The University
At Durham University we are proud of our people. A globally outstanding centre of educational excellence, a collegiate community of extraordinary people, a unique and historic setting – Durham is a university like no other.
Across the University we have a huge variety of roles and career opportunities, which together make us a large and successful community, which is a key hub of activity within our region and nationally. Whether you are at the very start, middle or end of your career, there is a role for you. We believe everyone has their own unique skills to offer.
We would be thrilled if you would consider joining our thriving University. Further information about the University can be found here.
Find out more about the benefits of working at the University and what it is like to live and work in the Durham area on our Why Join Us? - Information Page.
The Role and the Department
The Computing and Information Services (CIS) has an annual operational budget in excess of £27m, including multi-million-pound programmes of change within year, and approximately 172 staff. The Senior Leadership Team report directly to the Chief Information Officer (CIO) with the following portfolios:
- Strategy and Change
- Technical Services
- Information Services
- Cyber Security
CIS work with departments across the university to provide academic, teaching and administrative services that underpin the day-to-day activities of the whole organisation. Details of the Digital Strategy and ongoing work can be found at Digital Strategy - Durham University.
CIS is a friendly, but demanding department, where much is expected and can be achieved by competent, self-motivated individuals who are demonstrable in their teamwork and ability. The department works in a hybrid capacity, depending on the job role.
The CIS security team have many functions across the organisation including:
- Help detect IT security vulnerabilities and assist system owners with appropriate remediation.
- Operate and improve security tools and protections, securing University networks, systems, users and assets from malicious activity.
- Working with colleagues and external partners to detect and respond to cyber security alerts, incidents and reports.
- Respond rapidly and effectively to cyber security alerts and incidents, managing them in a professional manner.
- Keep up to date with security trends, threats and protective measures.
- Operate and improve cyber security processes and playbooks to ensure efficient and standardised activity.
- Share security best practice, principles and standards.
- Assist with activities to maintain the day-to-day operation and on-going development of Computing and Information Services (CIS) services and solutions.
Working Hours:
- 35 Hour Week
- The University is piloting hybrid working and is flexible to remote working for this role. Flexibility to cover 8am-6pm and work out of hours may be required on occasion.
Further information about the role and the responsibilities is at the bottom of this job description.
Working at Durham
A competitive salary is only one part of the many fantastic benefits you will receive if you join the University:
- You’ll receive 27 days annual leave per year in addition to 8 public holidays and 4 customary days per year - a total of 39 days. The University closes between Christmas and New Year.
- No matter how you travel to work, we have you covered. We have parking across campus, a cycle to work scheme which helps you to buy a bike and discount with local bus and train companies.
- You can access exclusive discounts via our benefits portal including money off at supermarkets, high street retailers, IT products such as Apple, eating out and days out at various attractions.
- Our on-site nursery is rated Outstanding by Ofsted, and you can access holiday camps for children aged 5-16.
- We provide wide-ranging health and wellbeing support including discounted membership for our state-of-the-art sport and gym facilities and access to a 24-7 Employee Assistance Programme.
- We offer all staff the opportunity to take part in volunteering activities to make a difference to the local community.
- Our family friendly policies, including maternity and adoption leave, are among the most generous in the higher education sector (and likely above and beyond many employers).
- If you are keen on advancing in your role or career, we have a genuine passion for developing our colleagues from qualifications to IT skills, courses and apprenticeships.
- We offer generous pension schemes with varying contribution amounts to help you plan for your future.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Discover more about our total rewards and benefits package here.
Durham University is committed to equality, diversity and inclusion
Our collective aim is to create an open and inclusive environment where everyone can reach their full potential and we believe our staff should reflect the diversity of the global community in which we work. As a University equality, diversity, and inclusion (EDI) are a key part of the University’s Strategy and a central part of everything we do. We also live by our values and our Staff Code of Conduct. At Durham we actively work towards providing an environment where our staff and students can study, work and live in a community which is supportive and inclusive.
We welcome and encourage applications from members of groups who are under-represented in our work force including people with disabilities, women and black, Asian and minority ethnic communities. If you have taken time out of your career, and you feel it relevant, let us know about it in your application. If you are a candidate with a disability, we are committed to ensuring fair treatment throughout the recruitment process. We will make adjustments to support the interview process wherever it is reasonable to do so and, where successful, reasonable adjustments will be made to support people within their role.
What you need to demonstrate when you apply/Person Specification
When you apply it is important that you let us know what skills/experience you have from a similar role and/or what skills/experience you have which would make you right for this role. Further information about the role and responsibilities is at the end of this job description. Where a criteria has an asterisk* next to it, it may be given additional weighting when your application is considered.
Your application should cover the following criteria:
Essential Criteria
Qualifications/Experience
- Five GCSEs at least Grade C or level four (or equivalent) including English Language and Mathematics or a Post-16 qualification or equivalent experience.
- Have been awarded a higher education qualification or have equivalent working experience.
- Experience of working within a team to ensure the delivery of high-quality services.
- Experience of contributing to the delivery of IT provision.
- Experience of providing advice and guidance to a range of customers and colleagues and knowing when to refer to a supervisor.
- Experience of managing time to meet deadlines.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
Skills/Abilities/Knowledge
- Broad IT Knowledge and specialist expertise in security, particularly vulnerability management, patching, risk assessment and device health monitoring.
- Demonstrable knowledge of the wider security threat landscape and issues.
- Ability to solve problems and resolve issues, plan solutions and make pragmatic decisions.
- Ability to follow instructions, written or oral, accurately.
- Excellent spoken and written communication skills and the ability to develop effective working relationships, both internally and externally.
- Strong digital competence across a range of digital devices, applications or systems.
- Committed to continuing professional development.
Desirable Criteria
- Knowledge of Windows & Linux server operating systems and TCP/IP networks.
- Experience performing risk assessments and recommending mitigating controls, preferably in the vulnerability management space.
- Awareness of aspects of GDPR and the Data Protection Act 2018.
- Good teamwork and relationship building skills.
How to apply
To progress to the assessment stage, candidates must evidence each of the essential criteria required for the role in the person specification above. Where there are desirable criteria we would also urge you to provide any relevant evidence. Please don’t forget to check if there is any weighted criteria (see above).
While some criteria will be considered at the shortlisting stage, other criteria may be considered later in the assessment process, such as questions at interview.
Submitting your application
We prefer to receive applications online. We will update you about your application at various points during the process, via automated emails from our e-recruitment system. Please check your spam/junk folder periodically to ensure you receive all emails
What you are required to submit:
- A CV
- A supporting statement which clearly outlines how you meet all of the Essential criteria within the Person Specification (above); when submitting evidence of each essential criteria, please ensure you use the essential criteria wording as the section heading;
- A cover letter
Contact details
If you would like to have a chat or ask any questions about the role, we would be happy to speak to you. Mark.townley@durham.ac.uk, neil.lough@durham.ac.uk or gary.foster@durham.ac.uk
Service Delivery
- Contribute to equality, diversity and inclusion and the University’s values.
- Apply technical knowledge and skills to monitor and analyse emerging vulnerabilities, threats and exploits, understand and prioritise addressing the risks posed to the organisation.
- Monitor current patched state of our estate and make recommendations to the service owners.
- Work with service owners, teams and departments to understand, report on and help them work towards best practice for patching and vulnerability management.
- Apply recognised professional procedures and techniques, to ensure the security, safety, integrity and viability of IT facilities and components and apply agreed CIS standards and tools as required to achieve quality deliverables.
- Document all work in accordance with agreed team and CIS standards and assist in the documentation of approved changes in accordance with CIS’s change management policy.
- Respond to queries and requests for information and advice, including identifying appropriate actions to take
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location