Job description
My client, a market leading organisation within financial services, is searching for a Senior Cybersecurity Analyst who is able to undertake a range of tasks supporting the Cybersecurity Manager in the meeting of key business objectives. This is a hybrid role (2/3 model).
The role will be responsible for investigation and remediation of all Cyber Security related incidents, ensuring vulnerabilities are managed, and an agreed appetite is maintained within the security risk framework. This hire will support the delivery of internal and external cyber security service operations and assist in the monitoring and evaluation of security service improvements.
Your responsibilities
- Proactively search for active intrusions: recognising potential, successful, and unsuccessful intrusion attempts and compromises.
- Conducting holistic, investigative analysis and rating the risk associated with observed activity.
- Review investigation escalations from Cyber Analysts to ensure accurate analysis and provide advice/mentorship.
- Responsible for gathering key stakeholders on a regular basis to define improvements and provide updates on the status of security tooling.
- Act as SME for ensuring strong and effective security controls are in place to detect and mitigate risks across all on-prem and Cloud environments.
- Responsible for supporting the delivery of Information Security policy, standards and guidelines documentation across the organisation and client base.
- Assist with the identification of Cyber Security Risks in conjunction with both Cyber Risk and the business, assisting to qualify and support the risk owner in the development of appropriate controls by way of mitigation.
Skills & experience
- Experience of working in Information security or cybersecurity in a relevant role, e.g SOC Analyst, Security Engineer, System administrator, Consultant, Architect, Analyst.
- Previous experience with application security, DevSecOps or working alongside developers bringing culture, automation, lean, measurement, everything-as-code and sharing into Information Security at the same time as embedding security into DevOps tooling and processes.
- Experience working with typical security toolsets and tuning rules where appropriate i.e., IDS.
- Proven experience conducting Cyber Security investigations in On-Prem or Cloud environments.
- General understanding of IT Security principles, standards and regulations (e.g. ISO 27001, NIST, GDPR (DPA)).
- CISSP
- Azure/AWS/GCP qualification
- Security+ /CySA+
Salary & benefits
£40-52K plus benefits
If the above sounds appealing and you are keen to kick on in your career please send in your CV for immediate review.