Cyber Security Analyst

Job Description

As a Cyber Analyst, you will play a key role in protecting Natural Resources Wales' (NRW) digital services, information, systems and users from cyber threats. You will provide technical cyber security support across the organisation, investigating incidents, responding to security alerts, supporting remediation activities, and helping to maintain the confidentiality, integrity and availability of ICT services.

Working as part of the Digital, Data and Technology (DDaT) security function, you will support operational cyber security activities and work closely with the ICT Service Desk, infrastructure teams, information security colleagues and wider business areas. The role involves responding to security incidents and service requests, using Microsoft security technologies, including Microsoft Defender and related tools, and helping to ensure security controls remain effective across a multi-site and hybrid working environment.

You will contribute to NRW's cyber resilience through supporting incident response, vulnerability management, security monitoring, exception management, threat intelligence review, technical documentation and the continuous improvement of security processes. Cyber incident response forms a key part of the wider cyber security lifecycle, helping to identify, protect, detect, respond to and recover from cyber incidents.

Driving is essential to this role The post may be required to work from another government department's office in the event of a major national cyber security incident. You must hold a full and current UK driving license.

As an organisation we support flexible working. You will be contracted to the nearest NRW office to your home and a suitable hybrid working pattern will be agreed on appointment. Any regular face to face meetings or training will be planned in advance.

To make an informal enquiry about this role, please contact Tracey Gilliland at Tracey.Gilliland@cyfoethnaturiolcymru.gov.uk

Interviews will be face to face week commencing 19/10/2026 (details of location will be shared in advance)