Security Analyst

Cubic; Tees Valley; On-site; GBP 40,000 - 60,000; Full time

Job summary

A technology services company in Tees Valley is seeking a Security Analyst to manage security tools for customers, conduct risk assessments, and assist service teams. Candidates should have a university degree and significant experience in IT security. Strong understanding of security technologies is essential. The role requires effective communication skills and ability to work independently. This position offers opportunities for professional growth in a collaborative environment.

Qualifications

• Experienced in security operations or development roles.
• Knowledge of change and configuration management.
• Practical knowledge of information security technologies.

Responsibilities

• Manage security tools and report on information security risks.
• Conduct risk assessments and security control reviews.
• Assist in evaluating, testing, and implementing changes.

Skills

Experience in security operations or development roles

Knowledge of change and configuration management

Practical knowledge of information security technologies

Significant experience in an IT environment

Education

University degree in a numerate subject

Current driving licence

Tools

ArcSight

Splunk

Qualys

Nessus

Cisco IPS

IBM Guardium

Job description

Job title

Security Analyst

Company

Cubic

Job description

Business Unit: Cubic Transportation Systems

This role will manage security tools as a service provider to our customers. The Security Analyst will be required to manage and report operational information security risk, using IT security tools and processes. Assist customer service and IT teams to manage the outputs of security systems. Act as a trusted expert partner to advise service teams and managers regarding operational service calls, incidents and problems, and provide awareness.

Job Details:

Essential Job Duties and Responsibilities

• Recognises, investigates and reconciles violation reports and logs generated by detection systems in accordance with established procedures and security standards. Examples include but are not limited to responding to and reporting from automated alerting systems, auditing logs, IDS/IDP logs, anti-virus and firewall systems.
• Installs, manages and improves technical security control tools. Interviews minor offenders and compiles reports and recommendations for management follow-up.
• Creates and delivers user documentation and security awareness literature and training
• Assists in the assessment of the potential impact on existing access security mechanisms of specific planned technical changes, in order to help ensure that potential compromise or weakening of existing security controls is minimised. Also assists in the evaluation, testing and implementation of such changes.
• Ensures that co-ordination and change control are applied to technical specifications and to the technical infrastructure.
• Conducts risk assessments and security control reviews for all types of business applications and computer installations and recommends appropriate action to management.
• Assists internal and external customers defining their needs for new access rights and privileges.
• Provides input to other information security, contingency planning and related activities.
• Some manual handling may occasionally be required. May be required to work on other Cubic sites and data centres.
• Comply with Cubic’s values and adherence to all company policy and procedures. In particular comply with the code of conduct, quality, security and occupational health, safety and environmental policies and procedures.
• In addition to the duties and responsibilities listed, the job holder is required to perform other duties assigned by their manager from time-to-time, as may be reasonably required of them.

Minimum Job Requirements

Skills knowledge and experience

Essential

• Experienced practitioner in security operations or development roles.
• Sound knowledge of change and configuration management, reliability and safety methods and the use of metrics.
• Practical knowledge of information security and technologies
• Significant experience in an IT environment

Desirable

• Experience within organisations compliant with or seeking ISO 27001 / PCI-DSS compliance
• Experience of quality management systems e.g. ISO 9001
• Understanding of security within agile and waterfall project methods
• In depth understanding of IT security control tools, e.g. ArcSight, Splunk, Qualys, Nessus, Tripwire, OSSec, Cisco IPS, McAfee, IBM Guardium, Centrify, Barracuda WAF

Education and qualifications

Essential

• A university degree in a numerate subject (e.g. computer science, maths, engineering, science)
• Current driving licence

Desirable

• Certification as an Information Security professional (e.g. IISP/CISA/CISM/SSCP/ CISSP/ ISA)
• IT vendors’ certifications
• ITIL v3/ Prince2 foundation level/ TOGAF 9

Personal Qualities

• Must be able to work effectively and uphold professional standards and confidentiality with Cubic internal and external customers as well as staff at all levels of the organisation. The role will also be required to work with security vendors, Cubic suppliers and customers.
• Self-motivated
• Able to work on own initiative, unsupervised
• Attention to detail and adherence to procedures
• Strong customer service skills
• Strong verbal and written communications skills
• Ability to learn on the job
• Able to support an “on-call” out-of-business-hours service on a rotating basis with this responsibility spread across team members

The description provided above is not intended to be an exhaustive list of all job duties, responsibilities and requirements. Duties, responsibilities and requirements may change over time and according to business need.

Location: Stockton-on-Tees, County Durham

Job date: Fri, 26 Jan 2024 08:58:58 GMT

Note: To help us track our recruitment effort, please indicate in your email/cover letter where you saw this job posting.