Cyber Threat and Response Specialist

DAC Beachcroft; Bristol; On-site; GBP 60,000 - 80,000; Full time

Job summary

A leading law firm in the UK is looking for a Cyber Threat and Response Specialist to enhance its cyber security measures. The role includes evolving detection capabilities, handling threat incidents, and collaborating with internal and external teams on security strategies. Ideal candidates have a passion for cyber security, a good understanding of technical controls, and extensive knowledge of regulatory requirements. This permanent position is based in Bristol.

Qualifications

• Genuine passion for Cyber Security and its technology.
• Self-motivated and able to work independently.
• Strong analytical skills and attention to detail.

Responsibilities

• Evolve and mature firm's capability for detecting cyber incidents.
• Act as an escalation point for threat hunting activity.
• Investigate and respond to alerts from Azure/Defender.

Skills

Knowledge of basic concepts of Cyber Security

Experience in a Cyber Security Analyst role

Degree in Cyber Security or related subject

Education

Degree in Cyber Security or related subject

Job description

Cyber Threat and Response Specialist

Department: Business Services - IT

Employment Type: Permanent

Location: Bristol

Description

Purpose of the role:

• To evolve and mature the firm’s capability for detecting and responding to cyber incidents.
• To act as an escalation point for threat hunting activity.
• To assist with security incidents and investigations coming from Azure/Defender, IT Infrastructure monitoring systems & 3rd party SOC.
• Provide co-ordination within internal security support staff and external third party managed SOC.
• To monitor, maintain and advance the effective use of technical cyber security controls that are actively in use by DACB
• To assist in the research, selection and deployment of new technical security controls for use by DACB.

Key Responsibilities

• Keep up to date with the latest emerging threats, vulnerabilities and attacker techniques.
• Help to identify, evaluate and monitor ongoing threats and risks that could affect business operations.
• Investigate and respond to alerts from Azure/Defender, IT Infrastructure monitoring systems & 3rd party SOC.
• Assist with 2nd ,3rd level SOC and MI cyber incident response process.
• Work closely with IT Operations to ensure critical business assets are adequately protected from cyber-related threats through the use of appropriate technical controls.
• Document and raise non-conformities with the Head of Cyber Security.
• Produce regular reporting to demonstrate the effectiveness of technical security controls and identify gaps and recommendations where needed.
• Provide a point of technical authority and governance for the effective use of technical security controls across the firm.
• Develop an understanding of DACB’s regulatory and client/contractual obligations for cyber security, and the requirements of standards such as ISO27001, GDPR and Cyber Essentials Plus.
• Manage 3rd party security (supplier) relationships and assist in the development of existing relationships and the competitive selection of new suppliers.
• Help to develop strategies and roadmaps for cyber security technology, in step with the IT Strategy and other business planning activity.

Skills, Knowledge and Expertise

• Knowledge of basic concepts of Cyber Security, Information Security and Risk Management.
• Experience working in a similar Cyber Security/IT Security Analyst role is advantageous but not essential.
• Degree in a Cyber Security or related subject is advantageous but not essential.

Personal Competencies

• To have a genuine passion for Cyber Security and its technology, and a drive to continually develop professional and personal knowledge in this fast-moving area.
• Be self-motivated and able to work to a high standard under own initiative.
• Able to pay and maintain close attention to detail.
• Have sound analytical skills; able to think laterally and challenge existing concepts.
• Have excellent commercial awareness with a good understanding of business drivers and priorities.
• Be a good and confident communicator at all levels; an ability to assert and defend a point of view can be balanced with pragmatism at times.
• Have the ability to understand technical complexities and issues, and be able to explain and translate these to a less technical audience.