Cyber Security Analyst

MCLAREN AUTOMOTIVE LIMITED; Woking; On-site; GBP 40,000 - 60,000; Full time

Job summary

A prominent automotive company in Woking seeks a Cyber Security Analyst to monitor and respond to security incidents, manage security tools, and ensure a robust cybersecurity posture. The ideal candidate has experience in incident triage, knowledge of Microsoft technologies, and relevant security certifications. This position offers a structured career development framework, competitive benefits including private medical insurance and a robust pension scheme.

Benefits

25 days' holiday plus bank holidays

Enhanced company pension scheme

Private medical insurance

Discretionary annual bonus

Wellbeing initiatives

Qualifications

• Experience with anti-malware, application whitelisting, and cloud security tools.
• Proven decision-making experience within the role's remit.
• Understanding of security from the people, process, and technology perspectives.

Responsibilities

• Monitor security capabilities for anomalous events.
• Investigate potential security incidents.
• Report on security metrics and effectiveness of security controls.

Skills

Experience in triaging and coordinating responses to incidents

Experience in configuring, managing and reporting on security products

Understanding of core Microsoft technologies

Knowledge of Cyber Security threat landscape

Understanding of ITIL and typical IT operations

Relevant certifications such as Comptia Security+

Experience in identifying security control gaps

Experience in managing third parties providing security services

Education

Certifications in security fundamentals

Job description

What to Expect

The Cyber Security Analyst is a key role within the McLaren Cyber Security team. The primary objective is to utilise McLaren's existing technical security capabilities, such as anti-malware/endpoint, cloud, and identity security solutions, to mitigate cybersecurity risks to McLaren's systems and information. The analyst is responsible for responding to cyber incidents from identification to eradication and identifying potential security control gaps. They assist in selecting and acquiring new capabilities to address gaps identified from security incidents. The role involves providing timely post incident recommendations to both the Cyber Security team and the IT Leadership team. Additionally, the analyst ensures McLaren is prepared to respond to security incidents by documenting incident response playbooks.

What You'll Do

• Monitoring McLaren's deployed security capabilities for anomalous or concerning events and patterns of activity.
• Triaging, escalating and investigating potential security incidents; including incidents detected internally or reported by outsourced network security monitoring services.
• Form root cause analysis conclusion papers as part of post incident reporting.
• Development, testing and implementation of appropriate Cyber Security incident response plans (CSIRP).
• Reporting on relevant security metrics to help appropriately identify McLaren's risk exposure.
• Deliver, run and report on security awareness initiatives across the company to raise level of security competency in user base.
• Reporting on the effectiveness of McLaren's existing technical security controls, and make recommendations for their improvement to the Cyber Security team.
• Assist in the development, review and improvement of McLaren's

What You'll Bring

Essential:

• Experience in triaging and coordinating responses to a diverse range of incidents to minimise negative impacts and quickly restore services.
• Experience in configuring, managing and reporting upon the effectiveness of security products; e.g. host-based anti-malware, application whitelisting, cloud security tools and platforms, removable device control, disk encryption.
• Experience in protecting against and managing risks related to the use, storage and transmission of data and information systems.
• Proven experience making decisions within the defined remit of the role and understanding when to escalat.
• Understanding of the operation and management of core Microsoft technologies, such as: DNS, DHCP, Active Directory, Group Policy, Entra ID and Azure Security Centre.
• Understand security from the people, process and technology perspectives.
• Understand the relevance of threat intelligence in Cyber Security and industry frameworks used for application.
• Understanding of ITIL and typical IT operations across first, second and third line.
• Relevant certifications in fundamentals of security, such as Comptia Security+, AZ500 / MS500.

Desirable:

• Experience in identifying security control gaps and solutions to close such gaps.
• Experience in managing third parties which supply security products or services.
• Knowledge of the Cyber Security threat landscape; including emergent issues and trends.
• Knowledge of multiple security products and their relative merits and limitations.
• Knowledge of security event management standards, protocols and techniques.

What We'll Do for You

• Structured career development framework
• 25 days' holiday, plus bank holiday. Annual buy & sell up to five days
• Enhanced company pension scheme
• Discretionary annual bonus award
• Private medical insurance and health cash plan
• Life assurance benefit
• Ability to apply for a sabbatical of up to one year after only two years' service
• Benefits you can adapt to your lifestyle, such as discounted shopping
• Generous parental leave policies
• A range of wellbeing initiatives, such as employee assistance programme and free financial & mortgage advice

Who Are We?

No restraints. No limitations. We don't simply push boundaries. We completely rethink them. McLaren Automotive exists to create breath‑taking performance road cars.
It takes a community to do what we do. A diverse group of people with many areas of expertise, united by their passion to deliver visionary products and set new benchmarks.
McLaren Automotive commits to equal opportunity for all. Diversity, Equality and Inclusion is at the heart of our impact, it drives our innovation and enables us to truly create something special. Join us on our journey.