Job Description

About the Directorate
As IT&D, we help to create the University of the future by co-designing new ways of working, enhancing productivity, reducing complexity, supporting innovation, and providing the insights to drive continual improvement. Embracing a digital future in an evolving modern university, you will be working in partnership with our academic and Professional Services colleagues to deliver digital services that help the University achieve its strategic objectives in teaching and research, nationally & globally.
About the Department
The Information Security department is responsible for developing, operating, and continuously improving information security across the University, ensuring the availability, confidentiality, and integrity of its information.
We define information security policies and procedures, advise on secure IT arrangements, provide training and practical advice that the University can use to meet business requirements while maintaining security. We are responsible for information security risk management and compliance, and the monitoring of IT systems to prevent, detect, and respond to attacks.
About the Team
The Cyber Security Operations team plays a vital role in safeguarding the University's digital environment. We protect a diverse community of students and staff and systems by monitoring, detecting, and responding to cyber threats across a complex and evolving technology landscape.
Part of the wider Information Security function, the team includes multi-skilled Security Analysts and Engineers who work together with professionals across the wider IT& Digital department to provide a coordinated and effective cyber defence capability. We operate a range of essential tools and services including a SOC function, vulnerability and threat management, incident response and security testing capabilities.
We align our work with recognised frameworks such as the NCSC Cyber Assessment Framework (CAF), NIST CSF, and CIS Controls, ensuring we keep pace with industry best practice while tailoring our approach to the unique challenges of the higher education sector.
As part of the team, you'll contribute to a supportive and collaborative environment where ideas are valued, development is encouraged, and your work has a clear and lasting impact. Looking ahead, the Cyber Security Operations team will play a central role in delivering a major security and risk transformation programme, an exciting opportunity to shape the future of cyber resilience at Manchester Met.
About the Role

• We're looking for a skilled Cyber Security Analyst to help protect our diverse digital estate and support the delivery of a resilient, agile, and forward-looking cyber security capability.
• As part of our Cyber Security Operations team, you'll play a key role in monitoring, detecting, and responding to threats across the University's systems.
• You'll work with a "Microsoft-first" security toolset, including Sentinel and Defender, to ensure swift and effective incident response and threat analysis.
• This is a hands-on operational role where your expertise will directly contribute to the safety and integrity of our digital environment.
• You'll collaborate with colleagues across IT and Information Security, helping to shape detection rules, improve response playbooks, and drive continual improvement in our cyber defence posture.

Key Responsibilities

• Continuous Threat Monitoring, actively monitor security events and alerts across the University's IT estate using enterprise-grade security platforms to quickly identify and assess potential cyber threats.
• Incident Triage & Response, perform timely triage of security alerts to determine impact and urgency. Investigate incidents using available tools and data, lead initial response actions and ensure appropriate escalation to senior leadership or external partners.
• Threat Analysis & Intelligence Integration: Analyse malicious activities to determine root cause and attack vectors, leveraging threat intelligence to contextualise alerts, anticipate emerging threats, and support proactive defence strategies.
• Security Platform Expertise: Serve as a subject matter expert in the use of security operations tools, including log analysis, endpoint protection, identity monitoring, and cloud application security.
• Vulnerability Identification & Management: Analyse vulnerabilities across the IT estate using internal scanning and external reporting. Prioritise based on severity, exploitability, and business impact ensuring stakeholders are informed and engaged in remediation efforts.
• Reporting & Communication: Produce clear and informative incident reports, trend analyses, and operational metrics. Communicate findings and recommendations to IT teams and stakeholders to drive improvements in security controls, awareness, and overall posture.

Key Skills & Experiences

• Hands-on experience in cyber security operations or SOC analyst roles.
• Strong working knowledge of Microsoft's security ecosystem.
• Ability to analyse complex technical data and communicate findings clearly.
• Experience managing security incidents and using KQL for investigations.
• Understanding of IT infrastructure, networking protocols, and threat detection.
• A collaborative mindset and commitment to continuous improvement.

Desirable Qualifications

• Degree in an IT related subject, or equivalent experience.
• Industry certifications such as SC-200, CompTIA CYSA+, GIAC (GCIA, GCIH), or similar.

To learn more about this exciting opportunity and the benefits we offer, please read the and Candidate Pack provided below.
Application & Assessment Process

• To apply, please submit a CV and covering letter detailing your suitability, on the application portal.
• As part of the assessment process, shortlisted applicants will be invited to deliver a presentation and attend a panel-interview.
• Due to the volume of applications, we receive, we sometimes close our vacancies early. It is therefore advisable to apply as early as possible if you would like to be considered for a role.
• For informal enquiries, about this vacancy, please contact

If you would like to join our people and share our ambition, we would love to hear from you!
Manchester Metropolitan University fosters an inclusive culture of belonging that promotes equity and celebrates diversity. We value a diverse workforce for the innovation and diversity of thought it brings and welcome applications from local and international communities, including those from Black, Asian, and Minority Ethnic backgrounds, disabled people, and LGBTQ+ individuals.
We support a range of flexible working arrangements, including hybrid and tailored schedules, which can be discussed with your line manager. If you require reasonable adjustments during the recruitment process or in your role, please let us know so we can provide appropriate support.
Our commitment to inclusivity includes mentoring programmes, accessibility resources, and professional development opportunities to empower and support underrepresented groups.
Manchester Met is a Disability Confident Leader and, under this scheme, aims to offer an interview to disabled people who apply for the role and meet the essential criteria as listed in the attached for that vacancy.
This vacancy is expected to attract a high volume of applications. Therefore, under the Disability Confident Scheme, only disabled people who apply under the scheme and best meet the essential criteria will be offered an interview.
Recruitment Agencies: The University has engaged an approved list of recruitment agencies to support the recruitment of its vacancies from time to time. The University does not accept speculative applications from recruitment agencies outside of this list.
Documents

Skills Required