Cyber Security Analyst
London (with potential for travel)
Type of Contract
Who can Apply
Candidates with a 2.1 degree in Science, Technology, Engineering or Maths (STEM). As we security clear all our staff, you need to have been a permanent UK resident for at least the last 5 years and be legally entitled to work in the UK.
Operating across all stages of the Software Development Lifecycle SDLC, you will have a remit to innovate and build the future for our clients.
You will be working within an industry-leading team of cyber security consultants and engineers providing solutions for major clients, both blue chip and in the government sector.
Our working environment will be open and interactive facilitating collaboration with colleagues, clients and ecosystem partners.
Your primary responsibilities will include:
- Analysing diverse sources of technical data to identify suspicious activity or suspected cyber attacks
- Monitoring operational security management systems – ensuring timely detection, investigation and remediation of potential cyber threats
- Using advanced security analytics tools to determine emerging threat patterns and vulnerabilities
- Providing security incident triage and investigation, and management of cyber response processes
- Completing Client projects and tasks associated with security monitoring, detection, incident response and security intelligence
- Collaborating in Red Team / Blue Team exercises and incident rehearsals
- Continually seeking to build a greater understanding of a cyber problem until all the facts have been established
- Creating cyber kill chains and managing investigation timelines
- Perform administrative duties such as creating new types of data enrichment feeds, detection logic and threat intelligence reports.
- Ability to read and understand raw system data including security event logs, system logs, application logs, and device logs
- A good knowledge of TCP/IP networks, including the technologies and protocols commonly used in local area and wide area networks
- Ability to recognise a sophisticated attack, and how to identify patterns within event data, threat intelligence and malware analysis
- A good working knowledge of a variety of security technologies, including network and application firewalls, host-intrusion prevention and anti-virus
- A basic knowledge and of common infrastructure and security architectures
- Experience with vulnerability management tools and methodologies
- Practical knowledge of the Cyber Security threat landscape and current affairs.
- BSc in Computer Sciences, Mathematics or Engineering (min 2:1)
- Hold or working towards a security certification; SANS (e.g. GSEC, GCIA, GCIH, GPEN) or equivalent.
- Relevant TCP/IP network experience, or certifications such as CompTIA Network+ or CCNA.
- Familiarity with ISO27001 and other security standards.