Senior Cyber Security Analyst

Working on behalf of a Local Authority, Aatom Recruitment has a new opportunity for a Senior Cyber Security Analyst on a 3 month initial contract with the possibility for further extension.

Main accountabilities

• To investigate security incidents, assessing their impact, and applying the appropriate response. Presenting the findings at briefings.
• To performance manage security controls on the digital estate to identify deficiencies, recording them, and taking the necessary actions to bring these risks under control.
• To manage vulnerability scans to the digital estate as required by compliance regulations and as needed by the business.
• To review Cyber Security implications of technical designs and implementations.
• To support and develop the teams Cyber Security engineers.
• To advise IDS team members on the use of best practices in Cyber Security, ISO27001, and NCSC guidance.
• To be aware of the emergence of new cyber security threats and vulnerabilities.
• To research, review, investigate new technologies to maintain and enhance the technical security of the client’s network in line with business requirements, best practice and regulatory requirements.
• To use analytic tools to determine emerging threat patterns and vulnerabilities.
• To update policies, procedures and processes that support the cyber security framework.
• To use the entire Microsoft suite of technologies to protect client’s data (Defender, Sentinel, Azure)
• To manage the relationship with the external SOC, ensuring playbooks are established regarding incidents and alerts.

Requirements

• Educated to degree level with a related security or technology qualification (CISM, CISSP, etc.) or demonstrable equivalent knowledge and skills and extensive experience in security analysis within a public sector organisation.
• Knowledge of security frameworks such as ISO 27001 or NIST and the application of these within an organisation
• Good knowledge of legislative and regulatory compliances an organisation must meet such as Public Services Network (PSN), Payment Card Industry (PCI – DSS), General Data Protection Regulation (GDPR), DPA 2018, etc.
• Ability to coordinate and manage major cyber security events to ensure risks are proactively managed and stakeholders kept aware of the situation.
• Capable of supporting junior members in a security team.
• Experienced in completing submissions for Cyber Security compliances such as PSN, PCI, or Cyber Essentials.

If you are interested, please apply or contact Pocholo for more information.