Cyber Security Analyst

• Monitor, triage and investigate Rapid7 and SIEM alerts, including managing and reducing an existing alert backlog
• Conduct security investigations, analyse events and identify potential threats or suspicious activity
• Support vulnerability management using Rapid7, including reviewing, prioritising and investigating vulnerabilities
• Monitor and investigate security events using SIEM tools, escalating incidents where appropriate
• Manage Mimecast security operations, including email reviews, releasing quarantined messages, whitelisting and sandboxing
• Support Microsoft Purview activities, including eDiscovery, DSARs and DLP
• Manage Netskope requests, including site reviews and URL unblocking
• Monitor and triage CrowdStrike alerts
• Provide administrative support for Security DDQs and wider information security requests
• Maintain appropriate investigation records and security documentation

Technologies:

• Support
• Security, We are recruiting a Cyber Security Analyst for a two-month contract to support day-to-day security operations, with a focus on Rapid7, SIEM monitoring, vulnerability management and security investigations. The role is remote or based in London, with one day per week onsite in Central London, and is inside IR35.

• Strong hands-on experience with Rapid7 and SIEM platforms, including alert monitoring and investigation
• Proven experience in alert triage, security investigations and vulnerability management
• Strong Mimecast administration experience, including email review, releasing quarantined messages, whitelisting and sandboxing
• Good working knowledge of Microsoft Purview, eDiscovery, DSAR and DLP
• Experience managing CrowdStrike alerts
• Experience with Netskope or a similar platform, including site reviews and unblocking
• Good understanding of SOC/security operations and BAU security processes