Cyber Security Analyst

Permanent, £43 - £60k salary DOE, benefits.

Hybrid 2 days a week in London.

Job Purpose:

The role helps to support the improvement of organisational resilience by reducing the likelihood and impact of serious cyber-related incidents. The role will be supporting the effective delivery of security operations across the organisation, ensuring compliance with industry regulations and reducing cyber risks through monitoring and maintaining the security of our systems, networks, applications, and data.

Working with the client's external security operations centre (SOC) provider, the role will ensure vulnerabilities are identified and remediated in accordance with timelines agreed with IT security assurance. Monitor security events and alerts using relevant tools and directly liaise with the external SOC to identify potential incidents. Conduct initial triage of security incidents, assessing their severity, impact, and urgency, and escalate potential security incidents to the Level 2 Cyber Security Analysts or Cyber Security Manager for further investigation and response.

The role will maintain accurate and detailed records of security incidents, actions taken, and outcomes to support incident reporting and analysis; and ensure all activities adhere to the standards and policies created by the IT security assurance team and that standard operating procedures (SOP) are followed meticulously.

Key Accountabilities:

Cyber Security Operations

• Monitor security events and alerts using security information and event management (SIEM) tools and other relevant security technologies to identify potential security incidents.
• Conduct initial triage of security incidents, assessing their severity, impact, and urgency.
• Escalate potential security incidents to the IT Security Operations Lead for further investigation and response.
• Assist with incident response activities, following established procedures and guidelines to ensure prompt and effective incident resolution.
• Perform preliminary analysis of security events and logs to identify indicators of compromise or malicious activity.
• Collaborate with the Cyber Security Analysts and IT Security Assurance Analysts to investigate and analyse security incidents, contributing to the overall incident response efforts.
• Maintain accurate and detailed records of security incidents, actions taken, and outcomes to support incident reporting and analysis.
• Focus on vulnerability remediation across all infrastructure, working closely with the cloud infrastructure team, managed service providers, and wider CIO functions.
• Participate in vulnerability assessment and remediation activities, ensuring that identified vulnerabilities are effectively addressed.
• Collaborate with the cloud infrastructure team, managed service providers, and wider CIO functions to implement security controls and best practices.
• Stay updated with the latest cyber security threats, vulnerabilities, and mitigation techniques through continuous learning and participation in training programs.
• Contribute to the development and enhancement of security monitoring processes and procedures to improve the overall detection and response capabilities.
• Participate in regular security awareness training sessions and contribute to the organisation's security education program to promote a culture of cyber security awareness among employees.
• Monitor & analyse network, system, and application logs and other data sources to detect potential security incidents in real-time.
• Quickly & effectively respond to cyber security incidents and breaches, including containing the incident, identifying the root cause, and restoring affected systems and data.
• Participate in an on-call rota to provide out-of-hours support for cyber security incidents, ensuring timely response and resolution.
• Identify, assess, prioritise, and remediate vulnerabilities in infrastructure, systems, and apps and develop & implement effective mitigation strategies.
• Contribute to the development and maintenance of comprehensive incident response plans and procedures, ensuring their alignment with evolving security landscape and regulatory requirements.
• Maintain compliance with relevant laws, regulations, and industry standards.
• Provide support to IT security assurance in evaluating the effectiveness of cyber security controls through the use of penetration testing and develop remediation strategies to improve the security posture.
• Engage with cross-functional teams across CIO and other directorates, offering your subject matter expertise in cyber security operations to guide and collaborate on strategic initiatives.