Cyber Defence Analyst

BillFixers (acquired by Experian); Nottingham; Remote; GBP 30,000 - 50,000; Full time

Job summary

A leading data and technology company is seeking a Cyber Defence Analyst to join their Cyber Fusion Center. The role involves analyzing and responding to security threats, contributing to global security operations. As part of the first line of defence, the Analyst will manage incidents and enhance organizational security strategies in a flexible working environment.

Benefits

Flexible work environment

Great compensation package and discretionary bonus plan

Core benefits include pension and healthcare

25 days annual leave

Qualifications

• Experience in a Security Operations Center or Cyber Security Incident Response Teams.
• Knowledge of cybersecurity frameworks like MITRE ATT&CK.
• Understanding of common intrusion methods and cyber-attack tactics.

Responsibilities

• Oversee response activities for security events and alerts.
• Analyze events using security tooling to assess risk levels.
• Support incident resolution and improve security posture.

Skills

Incident Response

Cybersecurity

Threat Analysis

Education

Bachelor's Degree in Computer Science, Information Security, or related field

GCIH, CEH, or similar certifications

Tools

SIEM

EDR

Cloud Security Tools

Job description

2 days ago Be among the first 25 applicants

Get AI-powered advice on this job and more exclusive features.

As a Cyber Defence Analyst, you will join the Cyber Fusion Center, performing in-depth analysis, assessment, and response to security threats by following documented policies to meet Service Level Goals. The team provides global 24x7 security operations and monitoring for cybersecurity events affecting Experian.

You will be a part of the first line of defence in Experian's broader incident response and incident management departments, responsible for receiving and prioritizing cybersecurity alerts, including being the dedicated contact for potential security incidents reported by users (e.g., Experian employees). Depending on the results of assessment, this team is then responsible for investigating, containing, eradicating, and recovering from events falling in its scope or escalating higher-risk events to dedicated incident response and management teams in the CFC.

This role is critical in ensuring the handling of potential threats and plays a part in improving security operations.

This is a home based role reporting to the Director of Security Operations for SecOps & Threat Detection.

Please note that in this role, you will have an 8x5 Monday-Friday schedule, with flexibility to respond to after-hours pages for potentially major security incidents to support incident response efforts and may include assignment to an on-call rotation for evenings, weekends, holidays.

Summary Of Primary Responsibilities

As the Cyber Defence Analyst, you will:

• Contribute to daily security operations by overseeing response activities for security events and alerts associated with cyber threats, intrusions, and compromises alongside a team of global security analysts following documented SLOs and processes.
• Analyze events using security tooling and logging (e.g., SIEM, EDR) and assess potential risk / severity level of cyber threats; escalate higher-risk events to dedicated incident response and management teams in the CFC according to established processes.
• Collaborate with external teams for incident resolution and escalations, driving incident handling
• Notify team Lead(s) of concerns related to operations, such as anomalous changes in metrics, notable open incidents, quality concerns, or observed risks; support with resolution if appropriate
• Manage and complete assigned caseload throughout the incident response lifecycle, including analysis, containment, eradication, recovery, and lessons learned.
• Maintain all case documentation, including notes, analysis findings, containment steps, and cause for each assigned security incident. Ensure incident updates or contact with end-users are performed promptly and documented.
• Help improve relevant strategies, Standard Operating Procedures (SOPs), and training materials
• Support management's overall strategy for CFC by participating in execution of improvement programs together with management's plans
• Assist the team Leads and management on use case development by suggesting enhancement or tuning of use cases to improve the security posture of Experian
  
  

About Experian

Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, create marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to accomplish their financial goals and help them save time and money.

We operate across a range of markets, from financial services to healthcare, automotive, agribusiness, insurance, and many more industry segments.

We invest in people and new advanced technologies to unlock the power of data. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 22,500 people across 32 countries. Our corporate headquarters are in Dublin, Ireland. Learn more at experianplc.com.

Experience And Skills

• Some information security experience working within a Security Operations Center or Cyber Security Incident Response Teams
• Bachelor's Degree in Computer Science, Computer Engineering, Information Systems, Information Security or professional certification related to Digital Forensics, Incident Response, or Ethical Hacking (e.g., GCIH, CEH, GCFE, GCFA, and CFCE).
• Knowledge of main concepts related to the Incident Response Life Cycle, MITRE ATT&CK Framework, Cyber Kill Chain, and other cybersecurity frameworks.
• High-level understanding of common intrusion methods and cyber-attack tactics, techniques, and procedures (TTPs), and common industry recommendations to prevent and respond to threats such as phishing, malware, network attacks, suspicious activity, data security incidents.
• Exposure to technical elements of common Operating Systems (Windows, Linux, Mac OS), Networking (Firewalls, Proxies, NetFlow), Cloud Infrastructure (AWS, Azure, GCP), and Security Technologies (Anti-Virus, Intrusion Prevention, Web Application Firewalls)
• Interest in developing knowledge across common Incident Response and Security Monitoring applications such as SIEM (e.g., Qradar, Splunk), EDR (e.g., FireEye HX, CrowdStrike Falcon, Microsoft Defender), and SOAR (Palo Alto XSOAR, Google Secops / Chronicle)
• Desire to build technical skills and hands-on knowledge in the following areas of security operations and incident response
• In-depth packet analysis skills, core forensic familiarity, incident response skills, public could security practices, and data fusion skills based on multiple security data sources
• Security analysis and architecture of Azure and AWS cloud environment using security tools including Defender for Cloud, GuardDuty, CloudTrail, or CloudWatch.
• System administration on Unix, Linux, or Windows
• Network forensics, logging, and event management
• Defensive network infrastructure (operations or engineering)
• Vulnerability assessment and penetration testing concepts
• Malware analysis concepts, techniques, and reverse engineering
• In-depth knowledge of network and host security technologies and products (such as firewalls, network IDS, scanners) and improve these skills
• Security monitoring technologies, such as SIEM, IPS/IDS, UEBA, DLP, among others
• Scripting and automation
  

Additional Information

Benefits Package Includes

• Flexible work environment, working hybrid or in the office if you prefer.
• Great compensation package and discretionary bonus plan
• Core benefits include pension, bupa healthcare, sharesave scheme and more
• 25 days annual leave with 8 bank holidays and 3 volunteering days. You can purchase additional annual leave.
  
  

Experian is proud to be an Equal Opportunity and Affirmative Action employer. Innovation is an important part of Experian's DNA and practices, and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work, irrespective of their gender, ethnicity, religion, colour, sexuality, physical ability or age. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.

Experian Careers - Creating a better tomorrow together

Find out what its like to work for Experian by clicking here

Seniority level

• Seniority level

  Entry level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Engineering and Information Technology

Referrals increase your chances of interviewing at BillFixers (acquired by Experian) by 2x

Get notified about new Software Analyst jobs in Nottingham, England, United Kingdom.

Leicester, England, United Kingdom 2 weeks ago

Nottingham, England, United Kingdom 3 days ago

Loughborough, England, United Kingdom 3 days ago

Loughborough, England, United Kingdom 5 days ago

Derby, England, United Kingdom 2 weeks ago

Nottingham, England, United Kingdom 1 day ago

Matlock Bath, England, United Kingdom 3 days ago

Research Software Engineer (Research Associate)

Nottingham, England, United Kingdom 1 day ago

Nottingham, England, United Kingdom 2 weeks ago

Functional Tester - Restart your Technical Career

Leicester, England, United Kingdom 1 day ago

Bretby, England, United Kingdom 1 week ago

Nottingham, England, United Kingdom 3 days ago

Associate Software Developer – AI Focused

Bretby, England, United Kingdom 4 days ago

Mansfield, England, United Kingdom 2 hours ago

Derbyshire, England, United Kingdom 3 days ago

Heanor, England, United Kingdom 1 week ago

Nottingham, England, United Kingdom 16 hours ago

Nottinghamshire, England, United Kingdom 2 days ago

Front End Developer – Nottingham/Hybrid Working

Mansfield, England, United Kingdom 1 week ago

Nottingham, England, United Kingdom 3 days ago

Loughborough, England, United Kingdom 3 days ago

Mansfield, England, United Kingdom 2 hours ago

Nottingham, England, United Kingdom 2 weeks ago

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.