Cyber Security Analyst

GCHQ; Cheltenham; On-site; GBP 36,000 - 45,000; Full time

Job summary

A leading organization in Cheltenham is seeking a Cyber Security Analyst to protect against cyber threats. The role involves analyzing alerts, collaborating with teams, and enhancing security measures. Candidates should have scripting experience and a cyber security certification. Benefits include a competitive salary and generous leave.

Benefits

25 Days Annual Leave

30 Days Annual Leave after 5 years

Interest-free season ticket loan

Excellent pension scheme

Cycle to work scheme

Facilities like gym and restaurant

Paid parental and adoption leave

Qualifications

• Experience with scripting and understanding of Windows and Linux.
• Cyber security certification or 6 months experience in a cyber security role.

Responsibilities

• Detecting, responding to, and mitigating cyber threats.
• Analyzing alerts and logs, and developing detection content.
• Working closely with technical teams to enhance security.

Skills

Scripting

Communication

Problem-Solving

Education

Cyber Security Certification

Tools

Splunk

AWS

Microsoft Azure

Python

Job description

Cheltenham

Job Summary

As a Cyber Security Analyst, you’ll work with a close-knit team to protect our organisation against a range of cyber threats. From malware outbreaks and insider activity to denial-of-service attacks and phishing, your role will be key in detecting, responding to, and mitigating risks.

Job Description

You’ll work closely with other technical teams, gaining deeper understanding of operational activities across various thematic areas. This will help you develop your skills and expertise in defensive strategies for operational infrastructure.

Typically, your day will start with a review of recent events, followed by a team meeting to coordinate ongoing investigations and set priorities. From there, you might analyse high-priority alerts, dig into logs, network traffic, or endpoint data using tools like Splunk, or develop new detection content to enhance our defences. You’ll also draw on threat intelligence to proactively strengthen our security posture. When incidents occur, you’ll take swift, decisive action to contain and resolve them.

You’ll also have the opportunity to dive into Digital Forensics to support security incidents. Whilst the role is akin to a cybersecurity role in the private sector, the scenarios you’ll face due to the unique nature of the work done by us will be anything but ordinary.

You’ll work closely with other technical teams, gaining deeper understanding of operational activities across various thematic areas. This will help you develop your skills and expertise in defensive strategies for operational infrastructure.

Typically, your day will start with a review of recent events, followed by a team meeting to coordinate ongoing investigations and set priorities. From there, you might analyse high-priority alerts, dig into logs, network traffic, or endpoint data using tools like Splunk, or develop new detection content to enhance our defences. You’ll also draw on threat intelligence to proactively strengthen our security posture. When incidents occur, you’ll take swift, decisive action to contain and resolve them.

You’ll also have the opportunity to dive into Digital Forensics to support security incidents. Whilst the role is akin to a cybersecurity role in the private sector, the scenarios you’ll face due to the unique nature of the work done by us will be anything but ordinary.

Person specification

Along with a passion for IT and eagerness to grow in the cyber security space, you’ll bring experience with scripting, along with an understanding of both Windows and Linux operating systems, and familiarity with Python. Along with this you’ll be interested in developing your skills with Amazon Web Services (AWS) and Microsoft Azure.

You’ll need to hold a cyber security certification or education at a foundation level (for example, CompTIA A+, CompTIA Network,+, CompTIA Security+, OffSec, SOC200, GSEC, GCIA or GCIH certification). Alternatively, you will have 6 months experience in a cyber security role.

Beyond your technical skills, you’ll be an effective team worker, communicator and problem-solver. You know that collaborating is crucial to tackling complex threats and building effective solutions.

Alongside your salary of £36,408, GCHQ contributes £10,547 towards you being a member of the Civil Service Defined Benefit Pension scheme. Find out what benefits a Civil Service Pension provides.

• You’ll receive a starting salary of £36,408 plus other benefits including:
• 25 Days Annual Leave automatically rising to 30 days after 5 years' service, and an additional 10.5 days public and privilege holidays
• Opportunities to be recognised through our employee performance scheme
• Interest-free season ticket loan
• Excellent pension scheme
• Cycle to work scheme
• Facilities such as a gym, restaurant, and on-site coffee bars
• Paid parental and adoption leave
  

Selection process details

Our recruitment process is fair, transparent, and based on merit. Here is a brief overview of each stage, in order:

• Application sift, looking at your motivation for the role and the organisation and your essential skills
• Virtual competency and technical based interview
• If successful, you will receive a conditional offer of employment
  
  

Please note, you must successfully pass each stage of the process to progress to the next. Your application may take around 6 - 9 months to process including vetting, so we advise you continue any current employment until you have received your final job offer.

Feedback will only be provided if you attend an interview or assessment.

Security

Successful candidates must undergo a criminal record check.

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is developed vetting (opens in a new window).See our vetting charter (opens in a new window).

People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Successful candidates must undergo a criminal record check.

Successful candidates must meet the security requirements before they can be appointed. The level of security needed is developed vetting (opens in a new window).See our vetting charter (opens in a new window).

People working with government assets must complete baseline personnel security standard (opens in new window) checks.

Medical

Successful candidates will be expected to have a medical.

Nationality requirements

Open to UK nationals only.

Working for the Civil Service

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

The Civil Service Code (opens in a new window) sets out the standards of behaviour expected of civil servants.

We recruit by merit on the basis of fair and open competition, as outlined in the Civil Service Commission's recruitment principles (opens in a new window).

The Civil Service embraces diversity and promotes equal opportunities. As such, we run a Disability Confident Scheme (DCS) for candidates with disabilities who meet the minimum selection criteria.

Diversity and Inclusion

The Civil Service is committed to attract, retain and invest in talent wherever it is found. To learn more please see the Civil Service People Plan (opens in a new window) and the Civil Service Diversity and Inclusion Strategy (opens in a new window).

Once this job has closed, the job advert will no longer be available. You may want to save a copy for your records.

Contact point for applicants

Job Contact

• Name : [e-mail]
• Email : [e-mail]
  
  

Recruitment team

• Email : [e-mail]