Skip to main content

- The Vacancy
- The Company
- Our Values
- Apply Now

Value our people

Make a difference

We foster creativity

Cyber Security Specialist

Starting Salary £38,445.00 - £40,000.00

Location Dundee

This is a Permanent, Full Time vacancy that will close in 16 days at 23:59 GMT.

The Vacancy

Help protect the people, systems and data that support world leading research.

We’re looking for a Cyber Security Specialist who is passionate about cyber security, enjoys solving problems and wants to make a real difference. You’ll join our Infrastructure team, bringing your experience and proactive mindset to help strengthen cyber security and resilience across the organisation.

What You’ll Be Doing

- Monitoring and responding to cyber security threats, alerts and incidents, including supporting investigations and incident response.
- Managing vulnerabilities and working with colleagues to drive remediation and security improvements.
- Strengthening endpoint, identity and security controls across our environment.
- Helping secure Microsoft 365, Azure, Windows Server and Active Directory services.
- Contributing to cyber risk management, security policies, audits, assurance and Cyber Essentials Plus.
- Building cyber resilience and promoting security awareness and good practice across the organisation.
- Working with colleagues on security and technology projects that improve how we protect our systems, data and users.

What We’re Looking For You don’t need to have experience in every technology or area listed in the . What’s important is that you bring practical cyber security experience, a good technical understanding and a proactive mindset. You’ll be confident investigating and resolving problems, understanding risks and contributing to security improvements. Ideally, You’ll Bring:

- Experience in a cyber security, infrastructure security or other security-focused technology role.
- Practical experience across areas such as security monitoring, vulnerability management, endpoint security, identity security or incident response.
- Knowledge of Microsoft enterprise technologies and associated security principles.
- An understanding of infrastructure security and how security controls apply across enterprise technology environments.
- Strong analytical and problem-solving skills, with an ability to identify risks and find practical solutions.
- The ability to communicate technical and security issues clearly to technical and non-technical colleagues.
- Curiosity, drive and a security-focused mindset, with a desire to keep learning, challenge where appropriate and improve how things are done.
- A collaborative and adaptable approach to working with colleagues across the organisation.

Why Join Us? You’ll join a supportive team where you can use your existing experience across a broad range of cyber security activities and make a meaningful contribution to the security and resilience of the organisation. We’re committed to developing our people, giving you opportunities to broaden your knowledge, take on new challenges and build on your experience, while helping protect the people, systems and data that underpin world-leading research.

If you’re passionate about cyber security, enjoy solving problems and have the drive and mindset to continually improve security, we’d love to hear from you.

Main Purpose of Job The postholder will play a key role in maintaining, monitoring and improving the organisation’s cyber security posture, helping to protect systems, data and digital services against evolving threats.

Working as part of the Infrastructure team, the postholder will contribute across cyber security operations, vulnerability management, cyber risk management, incident response, security assurance and infrastructure security.

The role combines hands-on technical security activities with governance and assurance responsibilities. The postholder will help apply secure-by-design principles across infrastructure, networks, cloud services and end-user computing.

The postholder will work with the IT management team, IT colleagues and users across the organisation to strengthen cyber security controls, support secure and resilient technology services, and promote security awareness and good practice.

Main Duties Of Post Holder:

Cyber Security Operations

- Monitor and respond to cyber security threats, alerts and incidents across infrastructure, cloud services and end-user devices.
- Support security investigations, root cause analysis and remediation activities.
- Operate and help improve vulnerability management processes, working with IT colleagues and system owners to coordinate remediation.
- Support the administration, configuration and optimisation of security technologies, including endpoint detection and response, identity protection, network detection and host firewall technologies.
- Contribute to cyber incident response exercises and cyber resilience testing.
- Contribute to maintaining Cyber Essentials Plus and other security assurance requirements.

Security Governance, Risk & Compliance
- Support the development, implementation and ongoing improvement of information security policies, standards and procedures.
- Contribute to cyber risk assessments and maintenance of the cyber risk register.
- Support the monitoring of compliance with information security controls and organisational policies.
- Support internal and external security audits and assessments.
- Contribute to supplier security assurance activities.
- Support business continuity, disaster recovery and cyber resilience planning.

Endpoint, Identity and User Security
- Manage and maintain endpoint security controls using Microsoft Intune and related security technologies.
- Support the implementation and maintenance of security baselines, compliance policies, identity protection and access controls.
- Support operating system, application and security patching.
- Monitor endpoint security posture and support improvements to endpoint security controls.
- Contribute to cyber security awareness activities and promote secure working practices.

Infrastructure & Cloud Security
- Support the secure operation of Windows Server, Active Directory, Microsoft 365 and Microsoft Azure environments.
- Contribute to security hardening and the application of secure-by-design principles across infrastructure and cloud services.
- Contribute to the security of infrastructure, identity and access services.
- Support backup, recovery and resilience activities.
- Provide security input during infrastructure incidents, projects and service improvements.
- Work with Infrastructure team colleagues to identify and address security weaknesses within the technology environment.

Project & Service Improvement
- Contribute to cyber security and technology projects and service improvements within agreed objectives and timescales.
- Work with stakeholders to identify and implement practical security improvements.
- Contribute to technology strategy, operational improvement and organisational initiatives.

Person Specification

Essential

Education / Qualifications

- Diploma or degree in a technology or security-related discipline, or equivalent demonstrable experience.

Desirable

- Relevant professional certification in cyber security, infrastructure, cloud or a related technology discipline.

Experience

Essential

- Experience of working in a cyber security, infrastructure security or other security-focused technology role.
- Practical experience across areas such as security monitoring, vulnerability management, endpoint security, identity security or incident response.




- Experience of investigating and resolving technical or security issues.
- Experience of working collaboratively with technical colleagues and other stakeholders.

Desirable

- Experience of improving cyber security controls or contributing to improvements in an organisation’s cyber security posture.
- Experience supporting security assurance, risk management, audit or compliance activities.
- Experience contributing to cyber security or technology improvement projects.

Essential Skills - Cyber Security Operations

- Knowledge and practical experience of security monitoring, endpoint protection and/or threat detection technologies.
- Knowledge of vulnerability management and remediation.
- Understanding of security patching and endpoint hardening.
- Experience of security incident investigation and root cause analysis.
- Awareness of relevant security and compliance requirements, including Cyber Essentials and data protection.

Desirable

- SIEM technologies.
- Microsoft Defender for Endpoint.
- Microsoft Defender for Identity.
- Microsoft Defender for Cloud.
- Network and firewall security technologies.
- Cyber resilience and disaster recovery activities.
- Cyber incident response exercises.

Essential Skills - Microsoft Server and Cloud Technologies

- Good working knowledge of Microsoft enterprise technologies and associated security principles.
- Knowledge of Windows Server and Active Directory or Microsoft Entra ID.
- Understanding of Microsoft 365 security and identity controls.
- Knowledge of endpoint management and security principles.

Desirable

- Microsoft Azure.
- Microsoft Intune, including mobile application management and mobile device management.
- Conditional Access.
- Identity and Access Management.
- Group Policy.
- Experience of Windows Server and Active Directory security and hardening.
- Microsoft 365 security technologies.

Essential Skills - Infrastructure Security

- Understanding of infrastructure security principles and how security controls apply across enterprise technology environments.
- Ability to identify and investigate security issues affecting infrastructure, endpoints or cloud services.

Desirable

- Experience of security hardening across infrastructure technologies.
- Knowledge of network security principles and technologies.
- Experience with backup, recovery and resilience technologies.

Essential Skills - Automation & Scripting

- Basic experience of scripting or automation for technical or security tasks.

Desirable

- PowerShell scripting or experience developing task automation.

Essential Skills - Operations & Service Management

- Understanding of effective incident handling and working within controlled IT environments.

Desirable

- Knowledge of ITIL-aligned service delivery.
- Experience of incident, problem and change management practices.

Essential Skills – Personal Skills

- Strong organisational skills, with the ability to prioritise and manage own workload effectively.
- Strong analytical and problem-solving skills.
- A methodical and accurate approach to work.
- Ability to work collaboratively as part of a team.
- Ability to communicate technical and security issues clearly to technical and non-technical colleagues.
- Ability to produce clear technical documentation, procedures and reports.
- Self-motivated and adaptable, with the curiosity and drive to continue developing knowledge across cyber security, risk and assurance.

Desirable

- Ability to work effectively with colleagues outside the Infrastructure team and contribute to wider organisational objectives.
- Ability to balance user and service requirements with security, governance and operational considerations.
- Confidence in delivering security advice or awareness information to colleagues.

Other Requirements

- Ability to travel on a regular basis between Hutton Campuses in order to ensure both sites Infrastructure is operating effectively.
- Willingness to provide reasonable support during significant cyber security incidents or service disruptions, where required.

Benefits Offered

- Employee Assistance Programme (EAP) - A confidential service available to support employees and their families with work or personal problems. Providing access to professional counsellors, psychologists, and work-life consultants available to help and support individuals in tackling all types of problems.
- Annual Leave – Generous entitlement up to 40.5 days a year, with carry over possible and guaranteed time-off for Christmas.
- Pension - Employer Contribution of 15% in a Personal Pension Plan and employee contribution flexibility.
- Self-managed hours and Flexible Working – option to manage and spread your working time in line with organisational needs to create a healthy work life balance.

Our Commitment to Equality and Diversity Any applications that miss the deadline will not be considered. Our Commitment to Equality and Diversity We will not consider the use of 3rd party recruitment agencies for the sourcing of candidates for this position. The James Hutton Institute is an equal prospect employer. We celebrate diversity and are committed to creating an inclusive environment for all employees.

The James Hutton Institute is a: Stonewall Diversity Champion; Athena SWAN Silver Status Holder; Disability Confident Committed Employer and a Living Wage Employer.

The James Hutton Institute is Happy to Talk Flexible Working.

The Company The James Hutton Institute combines strengths in crops, soils and land use and environmental research, and makes a major contribution to the understanding of key global issues, such as food, energy and environmental security, and developing and promoting effective technological and management solutions to these.

James Hutton (1726 – 1797) was a leading figure of the Scottish Enlightenment, an eighteenth century golden age of intellectual and scientific achievements centred on Edinburgh. He is internationally regarded as the founder of modern geology and one of the first scientists to describe the Earth as a living system. His thinking on natural selection influenced Charles Darwin in developing his theory of evolution.

Our Values

We respect and value our people and the people we engage with

We want to make a difference

We strive to be excellent in everything we do

We lead by example

We foster creativity and innovation

Sorry - this vacancy is no longer available.

Your email address (required)

Alternatively, please sign in with...

Published

7 hours ago

Closing in 16 days

Closing

Closing in 16 days

Social Media Icon

Social Media Icon

Social Media Icon

Social Media Icon

Social Media Icon

Copyright 2000

Modal title

Modal title

Already Applied

You have already applied for this vacancy, please go to your account to see your progress.

Privacy Policy The James Hutton Institute Privacy Statement The following explains how we The James Hutton Institute (Controllers) intend to use the information you provide in your application, along with your rights, our reasons for requesting it and who will have access to it.

As defined by the General Data Protection Regulation (GDPR)



The James Hutton Institute is the Data Controller and ultimately responsible for ensuring the data you provide is kept secure, processed correctly and that you understand your legal rights in relation to the data you provide.

The recruitment software we use via this website is supplied by IRIS Software Group Limited and they are defined as a Data Processor under the GDPR. They will only process your data in accordance with our instructions.

IRIS can be contacted at: 4th Floor Heathrow Approach, 470 London Road, Slough, England, SL3 8QY For Data Protection enquiries, please contact the Help Desk at [email protected]

What information do we collect from you?

We Collect Information That Is Specifically Provided By You As Part Of An Application Process.

We Will Collect The

Following (but Not Limited To):

- Name, address, email, telephone number
- CV (if applicable)
- Equal opportunities monitoring information (defined as special categories data) - this information is purely for statistical analysis and monitoring purposes
- Answers to application questions
- Any other information you wish to provide in support of your application

We are using Contract as our legal basis for processing, which means we can use your details and information so that we may assess your suitability for employment with us, as well as carry out our statistical analysis of recruitment. Why do we collect this information and who do we share it with?

Details You Provide In This Application:

- Will be held on our computer systems and may be downloaded by us
- Will be used to deal with your application
- Will be made available to us and our processors
- Will be used for communication with you regarding the vacancy
- Will be used to satisfy legal requirements
- Will be used for statistical analysis
- Will be held and may be used to contact you about other vacancies

We will store your application data for 12 months after the vacancy has closed. After this period, it will be fully anonymised. How can I access the information you hold about me? Your rights

We are dedicated to providing reasonable access to visitors who wish to review the personal information retained when they apply via our website site and correct any inaccuracies it may contain. If you choose to register, you may access your profile, correct and update your details, or withdraw your details at any time. To do this, you can access your personal profile by using the secure login.

In all cases we will treat requests to access information or change information in accordance with applicable legal requirements.

You have the following rights in relation to the way in which we deal with your personal data:

- the right of erasure or to be forgotten
- the right to rectification if information is inaccurate or out of date
- the right of data portability (to obtain and reuse your personal data)
- the right to object to networx and the controller and processors handling of your personal data
- the right to withdraw your consent with regards to the handling of your personal data
- you have the right to ask for a copy of the information we hold about you (Subject Access Request - S.A.R)
- You have the right to lodge a complaint with a supervisory authority - the ICO

Within your candidate account, you can also use the Download Data feature to generate an XML file of the current data we hold on you that you have provided and/or have access to within the account. Where you exercise your right to object or withdraw your consent we may process your personal data without your knowledge or consent where we are permitted or required by law or regulatory requirements to do so. In such a case, we will not process more personal data than is required under the circumstances.

If you are not satisfied by our actions, you can seek recourse through our internal complaints procedure. If you remain dissatisfied, you have the right to refer the matter to the Information Commissioner (www.ico.org.uk) or seek recourse through the courts.

The James Hutton Institute can exercise the right to update this policy as and when required.

Social Login To continue creating your account, please read the privacy policy and tick the box below

I have read the privacy policy To complete creating your profile with , please read and agree with the privacy policy.

The email used for your profile is not a valid company domain name. In order to continue to create your profile with you will need to select a profile which uses a company authorised email address.

Cookie Preference Centre

Learn more about what each cookie category does and choose your settings

Cookie policy

Strictly Necessary

These cookies are needed to run our website and to keep it secure.

More Information

Always Active

Performance / Analytics

These cookies tell us how customers use our site and provide information to help us improve the website and your browsing experience.

More Information

Inactive

Functional Cookies

These cookies allow us to provide enhanced functionality and personalise content for you. For example they're used to recognise you when you return to our website. If you do not allow these cookies then some or all of these services may not function properly.

More Information

Inactive

Strictly Necessary

Name

__RequestVerificationToken

Duration

Session

Description

Anti-forgery Token

Name

ASP.NET_SessionId

Duration

Session

Description

General purpose platform session cookie, used by sites written with Miscrosoft .NET based technologies. Usually used to maintain an anonymised user session by the server.

Name

NTX_Cookie_Preferences_Live

Duration

6 Months

Description

Your cookie preferences

Performance / Analytics

Name

_ga

Duration

2 Years

Description

This cookie name is associated with Google Universal Analytics - which is a significant update to Google's more commonly used analytics service. This cookie is used to distinguish unique users by assigning a randomly generated number as a client identifier. It is included in each page request in a site and used to calculate visitor, session and campaign data for the sites analytics reports. By default it is set to expire after 2 years, although this is customisable by website owners.

Name

_gat

Duration A few seconds

Description

This is a pattern type cookie set by Google Analytics, where the pattern element on the name contains the unique identity number of the account or website it relates to. It appears to be a variation of the _gat cookie which is used to limit the amount of data recorded by Google on high traffic volume websites.

Name

_gid

Duration

1 Day

Description

This cookie name is asssociated with Google Universal Analytics. This appears to be a new cookie and as of Spring 2017 no information is available from Google. It appears to store and update a unique value for each page visited.

Name

NetworxTracking_AdvertClick

Duration

90 Days

Description

Used for tracking if the candidate has already clicked the advert - used for analytics

Name

NetworxTracking_AdvertLoad

Duration

90 Days

Description

Used for tracking if the candidate has already loaded the advert - used for analytics

Functional Cookies

Name

ApplicationIntroductionID

Duration

90 Days

Description

Check to see if the candidate has already read the introduction for the Application

Name

FavouriteVacancies

Duration

30 Days

Description

Store any jobs the candidate has flagged as a favourite

Name

JobAlertVacancies

Duration

30 Days

Description

Stores the candidates Job Alert Criteria

Name

JobSearchCriteria

Duration

30 Days

Description

Store the last search performed by the candidate

Share Vacancy

Click on any of the buttons below to share this page!

Share On Whatsapp

Share On Linkedin

Share On Facebook

Share on X

Copy Link

📌 Cyber Security Specialist (Queensland)
🏢 Hutton Scientific Services
📍 Queensland