Job Description
Your experience
The cyber security analyst will have at least 3-5 years experience in cyber security and incident handling. Key areas of essential experience include:
- 3+ years of hands on cyber incident response experience with proven capability and experience of investigating, managing and remediating cyber security incidents.
- Knowledge of data breaches, ransomware, fraud and other types of serious incident.
- Knowledge of current and emerging advanced cyber threats, attack and evasion techniques, command and control infrastructures and insider threat behaviour.
- Experience in escalating and articulating security concepts to senior, technical and non-technical audiences.
- Strong organisational, communication and project management skills.
- Strong Azure / M365 cloud knowledge and experience as well as on-premise IT experience.
- Usage of investigation tools such as malware sandboxes, SIEMs, log analysis tooling, network traffic analysis, endpoint analysis (event logs, files, processes).
- Experience with vulnerability scanning and management tooling and interpretation of results.
- Experience working in a team-oriented, collaborative environment.
- Windows operating systems
- Experience with standard on-premise security products such as firewalls, proxies, endpoint solutions.
Desirable experience includes:
- Management of complex and major incidents such as data breaches and ransomware.
- Threat modelling and use case development and the MITRE ATT&CK framework to guide detection rulesets, threat hunting and investigations.
- Team / people management and mentoring
- Development of SIEM use cases and rulesets (knowledge of what is possible/practical, implementation experience not essential).
- Project management experience.
- Documentation of security processes, designs, project plans.
Desirable certifications include the following but are not required:-
- Certified Information Systems Security Professional (CISSP)
- Certified Ethical Hacker (CEH)
- SANS GCIH Certified Incident Handler or CREST Cyber Incident Manager
- CREST Intrusion Analyst
- Azure / M365 cloud certifications
- Certified Cloud Security Professional (CCSP)
- CompTIA Security+
How we will support you
From your first day with us, you will have varied opportunities to continuously grow and development your skills and knowledge. From formal training, informal coaching and mentoring through to skills-based and technical training and on the job learning.
The security team works very closely together to mentor and support each other, as well as ensure everyone has formal training to keep them up to speed with the latest technologies, trends, skillsets. We are flexible and keen to work with you to work out what training is best suited to you and the team as a whole.
Company Description
Additional Information