Cyber Security Analyst

Together; Greater Manchester; On-site; GBP 40,000 - 55,000; Full time

Job summary

A leading cybersecurity firm in Greater Manchester is seeking a Cyber Security Analyst to monitor and investigate security issues. The successful candidate will act as a first responder to alerts, develop threat detection strategies, and contribute to incident response. Candidates should have knowledge of cloud technologies and experience in the latest security tools. The company embraces diversity and is dedicated to creating an inclusive workplace, needing excellent communication skills and analytical abilities.

Qualifications

• Knowledge of latest tech including Dark Trace Defender and Splunk.
• Understanding of adversarial tactics, techniques, and procedures.
• Experience in incident response and malware analysis.

Responsibilities

• Act as the first responder to security alerts.
• Develop and refine SIEM alerts to improve threat detection.
• Perform root cause analysis of security incidents.

Skills

Knowledge of cloud-based technologies

Threat hunting

Intrusion detection

Analytical mindset

Security tool sets

Collaborative working

Excellent communication skills

Tools

SIEM

EDR

NDR

Job description

Overview

As a Cyber Security Analyst within our highly capable Cyber Team you will be working with the latest Tech (Dark Trace Defender Expandig Splunk etc) to monitor validate and investigate potential email related security issues. This is a great role for someone who wants a career as we expand and we encourage you to apply if you have a detailed understanding of our tech and evolving threat trends and the technical ability to detect analyse and respond to threats to our organisation.

Responsibilities

• Act as first responder to security alerts.
• Perform regular threat hunting across the organisation.
• Continually develop tune and refine SIEM alerts and user endpoint and network behavioural models to improve threat detection.
• Create and maintain security dashboards reports and metrics.
• Perform root cause analysis of security incidents and participate in post-incident reviews to provide practical recommendations for improving the organisations threat detection and incident response capabilities and overall security posture.
• Perform malware analysis and digital forensics where appropriate.
• Identify assess and track infrastructure and software vulnerabilities and upscale to the appropriate teams for remediation.
• Identify opportunities for process automation and standardise threat detection and remediation procedures to facilitate SOAR implementation.
• Provide recommendations to the cyber security engineers for security control improvements.
• Develop scripts or tools to improve common activity efficiency.
• Ensure skills and knowledge are maintained through attending conferences training courses certification ingesting security research and threat reports and practising in lab environments.
• Share knowledge with and cross-train other members of the cyber security team.

Qualifications

• Knowledge of latest tech includingCloud based Tech includingDark Trace Defender Expandig Splunk etc
• Regulated industry background would be advantageous
• Thorough understanding of adversarial tactics techniques and procedures.
• The ability to contextualise categorise and prioritise security events incidents and alerts.
• Experience of threat hunting intrusion detection incident response packet capture analysis and malware analysis.
• Knowledge of infrastructure cloud virtualisation and network concepts and technologies particularly in a Microsoft-centric environment.
• Strong attention to detail with an analytical mindset in order to spot and investigate anomalous behaviour.
• Experience with security tool sets (SIEM EDR NDR etc.)
• Demonstrable passion and enthusiasm for security including the ability to keep current with the latest threats technologies and trends.
• Excellent written and verbal communication skills with the ability to communicate technical security issues to both non-security and non-technical stakeholders.
• The ability to work closely and collaboratively with Cyber Security IT and other teams as well as independently.

Additional Information

If you feel you have some of the skills mentioned above but not all please do still apply and we would be happy to have a further discussion with you in regards to your suitability for the role.

Together embraces diversity and inclusion and are proud to be an equal opportunity workplace. Not only do we welcome difference we celebrate it support it and really value our colleagues for who they are. We are committed to building a team that represents a variety of backgrounds perspectives and skills.

If you feel youd benefit from any support or reasonable adjustments during any stage of the recruitment process please dont hesitate to let us know when completing your application. This information will be picked up by our team so we can try and put steps in place to help you be at your best through this process.

Click here for more information on our Recruitment Process

Please note that all successful applicants will undergo relevant employment reference financial and criminal record checks.

Work Environment

Remote Work: No

Employment Type: Full-time

Key Skills: Council, Downstream, Laboratory, Bakery, Corporate Development

Department / Functional Area: Cybersecurity

Experience: years

Vacancy: 1