Associate Security Analyst - SC

Aspect Resources; City Of London; Hybrid; GBP 60,000 - 80,000; Part time

Job summary

A leading recruitment agency is looking for an Associate Security Analyst to investigate cyber security incidents and support the technical response. This hybrid role, based in London, requires 2-3 years of experience with SPLUNK, knowledge of cyber threats, and good analytical skills. You'll work closely with other Cyber Defence functions and contribute to improving incident response capabilities.

Qualifications

• 2-3 years of experience with SPLUNK.
• Experience investigating and responding to cyber incidents.
• Experience working in Agile environments.

Responsibilities

• Triage and investigate cyber security alerts and reports.
• Support the technical response to cyber incidents.
• Contribute to post-incident reviews.

Skills

SPLUNK

Cyber security knowledge

Analytical skills

Problem-solving skills

Communication skills

Tools

SIEM

EDR

AWS

Job description

Job Title: Associate Security Analyst – SC
Location: Hybrid/London – 3 days a week on site
Contract Duration: 3 months initially
Daily Rate: GBP650/day (Umbrella – Maximum)
IR35 Status: Inside IR35

Minimum requirement:

• SPLUNK (2–3 years' experience)
• Knowledge of Cyber security threats
• Soft skills
• Security Clearance: SC

As an associate security analyst you will:

• Triage and investigate cyber security alerts and reports from users
• Use a variety of techniques to analyse systems, files, network traffic and cloud environments and understand the nature and extent of possible cyber incidents
• Support the technical response to cyber incidents by identifying and implementing (or supporting the implementation of) containment, eradication and recovery actions
• Support the coordination of cyber incidents
• Contribute to post–incident reviews to identify lessons and actions
• Identify opportunities for, and support the delivery of, continual improvements to the incident investigation and response capability
• Work closely alongside other Cyber Defence functions, supporting the continual improvement of wider capabilities
• Contribute to internal plans, playbooks and knowledge base articles
• Act as an escalation point for, and provide coaching and mentoring to, apprentice security analysts
• Be responsible for line management of apprentice security analysts
• Cyber incidents can and do arise on a 24/7 basis. The team operates an out–of–hours on call rota, which you will be expected to join

We're interested in people who have:

• Experience investigating and responding to cyber incidents
• Experience using security tools (eg, EDR, SIEM) to support the investigation and response to cyber incidents
• Experience with SIEM tools (experience of Splunk preferred but experience of Microsoft Sentinel or an equivalent SIEM tool is acceptable)
• An understanding of the tools, techniques and procedures commonly used by threat actors
• Good analytical and problem–solving skills
• Good verbal and written communication skills
• Experience with Splunk
• Experience working in an Agile environments
• Experience with cloud environments such as AWS

Disability Confident

As a member of the disability confident scheme, CLIENT guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group.

Armed Forces Covenant

CLIENT is proud to support the Armed Forces Covenant and as such, we guarantee to interview all veterans or spouses/partners of military personnel who meet all the essential criteria for the vacancy. In cases where we have a high volume of ex–military candidates/military spouses or partners, who meet all of the essential criteria, we will interview the best candidates from within that group.

If you qualify for the above, please notify us.

We will be in touch to discuss your suitability and arrange your Guaranteed Interview.

Should you require reasonable adjustments at any point during the recruitment process or if there is a more accessible way for us to communicate, please do let me know.

To apply for this role please submit your latest CV or contact Aspect Resources