Security Operations Analyst - 15 months FTC

Nigel Wright Group; North East; Remote; GBP 45,000 - 65,000; Full time

Job summary

Nigel Wright Group is seeking an experienced 2nd line Cyber Security Analyst to join a proactive security team. The role is home-based with occasional UK travel and a willingness to travel for team meet-ups; office optional.

You will secure networks, applications and data, monitor security logs and respond to incidents using Sentinel and Defender technologies. The ideal candidate has strong knowledge of security controls across on-prem and cloud environments, excellent communication skills, and

Qualifications

• Experience securing complex on-prem and cloud environments.
• Proven incident response and remediation skills.
• Familiarity with Sentinel, Defender products and automation tooling.

Responsibilities

• Monitor, triage and investigate alerts and incidents within Sentinel.
• Coordinate with 3rd party SOC for incident scope and actions.
• Assist incident response and remediation efforts.
• Support ITSM ticket management and BAU checks.
• Analyze security logs and trends.
• Triage vulnerabilities and coordinate mitigations with IT teams.
• Support threat hunting activities.
• Review security control effectiveness.
• Participate in on-call rota.

Skills

Security monitoring

Incident response

Cloud security

IT security controls

Python scripting

Stakeholder communication

On-call support

Tools

Microsoft Defender

Azure Sentinel

Defender for Endpoint

ITSM tools

Job description

The Opportunity:
Nigel Wright is seeking an experienced 2nd line Cyber Security Analyst who can demonstrate a passion for IT Security and a willingness to learn and develop within a complex and exciting environment. You will join an established and growing team that takes a proactive, innovative approach to security and resilience, backed by strong sponsorship to stay ahead of evolving threats. You'll work with cutting-edge security technologies, joining a business that will invest in your growth, encouraging continuous development so you remain at the forefront of cybersecurity and play a key role in shaping the future of their resilience.

The role is home based with the odd ad-hoc travel around the UK throughout the year for team meet-ups. An office is available for those that do wish to go in more frequently. This role is a 15 month FTC.

The Role
You will be responsible for securing and protecting network systems, applications and data. This includes ensuring the appropriate IT Security controls and processes are in place across the company's IT infrastructure as well as monitoring security logs and responding to incidents, triaging requests and escalating incidents in a timely and effective manner. Specifically you will:

• Support the rest of the security operations team to monitor, triage and investigate alerts and incidents within Sentinel
• Conduct initial incident triage, liaising with a 3rd party SOC provider, determining scope, urgency and appropriate actions to mitigate threats.
• Participate in the incident response process, assisting with investigation and remediation.
• Support managing support request via the ITSM tool.
• Undertake BAU activities such as daily checks.
• Assist with analysing and trending of security log data.
• Support triaging of vulnerabilities, response and mitigation with teams across IT.
• Support remediation actions meetings across technical teams including evaluating and translating vulnerability scan and pentest results.
• Support with Threat Hunting activities.
• Analyse and support with analytical rules for incidents.
• Support with QBRs and vendor management meetings.
• Support with reviewing and evaluating security control effectiveness.
• Support with change management request within IT Security and reviewing other technical teams change requests.
• Support and create process and procedural documentation.
• Participate in an on-call rota

The Person
As an experienced 2nd Line Cyber Security Analyst, you will have a solid technical understanding of the security controls needed to protect complex architectural solutions hosted both on-premise and in the Cloud. You will have a strong grasp of security concepts and infrastructure technologies, as well as an appreciation of how new security solutions can impact delivery.

Experience with general security technologies and capabilities including Microsoft E5 technologies such as Azure Sentinel and the various Defender products would be a distinct advantage, as would exposure to automation and familiarity with Python to help streamline processes and support security innovation.

Most importantly, you will be comfortable collaborating with a variety of stakeholders and be keen to build effective relationships within the team and cross-functionally to help mitigate risks, develop solutions and help to identify innovative methods to improve IT security. You will have excellent communication skills to allow you to deliver technical concepts to non-technical audiences, possess the ability to be both proactive and manage multiple priorities at one given time.