Cyber Security Analyst

• Develop your career in cyber security, working across a broad technology estate that covers a variety of both clinical and non-clinical applications that deliver various services connected to fitness, wellbeing, and healthcare.
• Coordinating and leading incident response activities, working with internal teams and third-party partners to ensure effective containment and recovery.Perform analysis of endpoint, server and network logs including vulnerabilities and known attacks, cross referencing to the MIRTE framework and known TTPs (tools, techniques and patterns).
• Take part in vulnerability scans, identifying and remediating security vulnerabilities through internal analysis and close collaboration with external security testing partners.
• Contribute to working on incidents, when they occur, using judgement to analyse and mitigate any risk, returning the organisation to a working state as quickly as possible.
• Assist with the ongoing improvement and development of cyber-security protection, including but not limited to event logs, anti-malware, network security and vulnerability management.
• Support the undertaking of cyber risk assessments and assurance reviews on key cyber security controls.
• Assist in the management of cyber security risks and mitigation plans and champion risk mitigation work across the Technology department.
• Liaise with external organisations to analyse IT security trends and news and proactively respond to cyber security threats, escalating issues and risks.
• Support user awareness of good cyber security practice across all of Nuffield Health through communication campaigns and through tailored awareness training.

We are seeking an experienced and proactive Cyber Security Analyst to join our growing Cyber Security Operations practice. The ideal candidate will strong hands-on experience working in an existing cyber security operations role, with a proven track record of leading security investigations, driving incident response activities, and improving detection capabilities., * Significant experience working within an in-house cyber security or SOC environment, including leading and coordinating security investigations. Proven experience in incident response leadership, including triage, containment, eradication, recovery, and post-incident review

• Proficiency with security tooling, analytics tuning and reporting (e.g. Microsoft Sentinel SIEM, endpoint XDR, cloud & network) and confidence in writing SIEM queries.
• Experience in endpoint and network-based security detection, prevention and investigations
• An interest in threat intelligence and knowledge of threat hunting techniques
• Experience supporting incident response engagements: containing threats, root cause analysis and restoring operations
• Demonstrable experience of working with information and cyber security standards and frameworks (such as ISO 27001, CAF and MITRE ATT&CK)
• Experience of writing policies, procedures and user guidance for practical use.
• Worked closely within Technology Service and Product Engineering teams to build and maintain a strong security posture; mitigating security risks and fostering a proactive culture.

We want you to love coming to work, feeling healthy, happy and valued. That’s why we’ve developed a benefits package with you in mind. Here, you can choose from a range of fitness, lifestyle, health and fitness wellbeing rewards, such as free gym membership, health assessments, retail discounts and pension options.

At Nuffield Health, everything we give our patients, members and customers would not be possible without you. Your passion, your warmth, your drive to make a difference. Whether it’s driving connecting health, helping the nation, transforming experiences, or building the career you want - we give you the support to do it all. Join our journey. It starts with you.