Cyber Security Analyst

Welcome to the future of nuclear energy, where Westinghouse Electric Company is leading the field with expertise and innovation to shape the power of tomorrow. At Westinghouse, innovation is in our DNA. We are creative. We think differently. We reimagine the possible across the nuclear industry every day.

As a Cyber Security Analyst at Springfields Fuels Ltd, you will help safeguard our IT environment against evolving cyber threats. You will be responsible for monitoring, analysing, and responding to security incidents; support compliance with regulatory frameworks; and ensure the resilience of our systems and networks. Working closely with engineering, operations, and IT teams, you will help integrate cyber security into the design and operation of nuclear fuel manufacturing processes, supporting compliance with ONR Security Assessment Principles (SyAPs) and NCSC Cyber Assessment Framework (CAF) requirements.

Responsibilities

• Security Operations & Incident Response: Monitor security events across IT systems, analyse incidents, and coordinate response and remediation.
• Vulnerability & Threat Management: Conduct vulnerability scans, assess threat intelligence, and work with system owners to mitigate identified risk.
• Regulatory & Compliance Support: Ensure adherence to ONR, NISR Regulations, and company security policies; assist in internal and external security audits.
• Risk Assessment: Perform and document cyber risk assessments in line with NCSC CAF and ISO 27005 frameworks.
• Operational Technology (OT) Security: Collaborate with OT Security Manager to enhance security within control systems and manufacturing networks (ICS/SCADA).
• Policy & Governance: Support the development, review, and communication of cyber security policies, standards, and procedures.
• Security Awareness & Culture: Promote cyber security awareness and deliver training across the business to strengthen our overall security culture.
• Continuous Improvement: Contribute to ongoing improvement of cyber controls, incident response capabilities, and threat detection mechanisms.

Qualifications

• Degree in Cyber Security, Computer Science, Information Technology, or a related discipline, or equivalent experience.
• Experience in cyber or information security within a regulated or critical infrastructure environment.
• Working knowledge of NCSC Cyber Assessment Framework (CAF), ISO/IEC 27001 Information Security Management, NISR Regulations and ONR SyAPs, and network security principles of IT systems.
• Hands‑on experience with SIEM tools (e.g. Splunk, Sentinel), endpoint protection, and vulnerability management systems.
• Understanding of incident response, digital forensics, and cyber threat intelligence processes.
• Security certifications such as CISSP, CISM, CompTIA Security+, GICSP, CEH, or ISO 27001 Lead Implementer/Auditor.
• Knowledge of NIST 2.0 CSF or NCSC guidance for Security of IT Systems.
• Experience working in or supporting nuclear, energy, or manufacturing environments.
• Familiarity with Active Directory hardening, network segmentation, firewall policies, and endpoint detection & response (EDR) technologies.
• SC or DV clearance (or eligibility to obtain).

Why Westinghouse?

• Attractive remuneration
• Great benefits and safety:
• Peer‑to‑peer recognition program
• Life insurance
• Pension plan
• Employee Assistance Program: confidential counseling and resources for employees, eligible dependents, and household members
• Learning and development opportunities

We encourage our employees to participate in community service events and other team‑building activities to strengthen their bonds and inspire each other.

You can learn more about Westinghouse by visiting http://www.westinghousenuclear.com. Westinghouse is an Equal Opportunity Employer including Veterans and Individuals with Disabilities.