Associate Security Analyst - Central Government

Spinwell Global Limited
London, UK
12 days ago
Apply on www.adzuna.co.uk
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Experienced
Experience required
2 years minimum
Compensation
Β£63,827.0
Working hours
Regular working hours

Tech stack

Cyber Security Computer Networks Kusto Query Language Security Information and Event Management Cloud Platform System Microsoft Sentinel Splunk

Job description

  • triage and investigate cyber security alerts and reports from users
  • use a variety of techniques to analyse systems, files, network traffic and cloud environments and understand the nature and extent of possible cyber incidents
  • support the technical response to cyber incidents by identifying and implementing (or supporting the implementation of) containment, eradication and recovery actions
  • support the coordination of cyber incidents
  • contribute to post-incident reviews to identify lessons and actions
  • identify opportunities for, and support the delivery of, continual improvements to the incident investigation and response capability
  • work closely alongside other Cyber Defence functions, supporting the continual improvement of wider capabilities
  • contribute to internal plans, playbooks and knowledge base articles
  • act as an escalation point for, and provide coaching and mentoring to, apprentice security analysts
  • be responsible for line management of apprentice security analysts
  • Cyber incidents can and do arise on a 24/7 basis. The team operates an out-of-hours on call rota.

Requirements

  • at least 2-3 years experience in a position of Cyber Security Analyst
  • working experience of Splunk
  • working experience of M365 (Microsoft Defender / Sentinel / KQL)
  • experience investigating and responding to cyber incidents
  • experience using security tools (e.g., EDR, SIEM) to support the investigation and response to cyber incidents
  • Experience with SIEM tools (experience of Splunk preferred but experience of Microsoft Sentinel or an equivalent SIEM tool is acceptable)
  • an understanding of the tools, techniques and procedures commonly used by threat actors
  • good analytical and problem-solving skills
  • good verbal and written communication skills

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.adzuna.co.uk
Prepare application

Good distractions

Loading talks and stories from around this role…