Cyber Security Analyst

On behalf of a public sector organisation, I’m looking for a Cyber Security Analyst to join a multi-skilled digital and technology function.Working closely with colleagues across IT operations and the wider organisation, you will help monitor the security environment, investigate cyber incidents and strengthen the organisation’s wider cyber security capabilities.

This is a broad operational security role covering SOC monitoring, incident response, cyber assurance, penetration testing and security improvement. You will also support wider IT service delivery and technology projects when required.

What this role involves:

• Monitoring the Security Operations Centre and ensuring appropriate coverage across networks, hardware and software

• Investigating and supporting the resolution of cyber security incidents

• Triaging security issues according to their priority, risk and potential impact

• Proactively identifying opportunities to reduce the likelihood and impact of security incidents

• Supporting cyber assurance activities, including Cyber Essentials Plus and wider government security requirements

• Assisting with annual cyber assurance assessments and certification renewals

• Supporting penetration testing and phishing simulation exercises across projects and business-as-usual activities

• Reviewing security architectures and assessing the potential impact of vulnerabilities across existing and future systems

• Supporting the implementation of proactive security technologies and controls

• Researching emerging security technologies and considering how they could be used within the organisation

• Communicating security concepts clearly to technical and non-technical stakeholders

• Supporting wider IT service delivery activities and technology project rollouts where required

• Occasionally travelling between organisational locations to support users, technical environments and project delivery

• Knowledge of Security Operations Centre processes and day-to-day cyber monitoring

• Working knowledge of typical SOC toolsets - SIEM, EDR, Vulnerability Management and Email Security gateway tools

• Good technical knowledge of fundamental cyber security concepts

• Strong troubleshooting and analytical skills

• The ability to interpret complex technical information and identify relevant patterns or trends

• Experience working with ITIL processes, including incident, problem, change and request management

• A proactive approach to taking ownership of technical issues and progressing them through to resolution

• Hybrid and flexible working arrangements

• Defined benefit pension scheme

• Good annual leave entitlement

• Professional development and training opportunities

• Exposure to SOC operations, incident response, cyber assurance and security testing

• Scope to develop within a broader cyber security and digital technology function