Senior Security Analyst (CSIRT)

University of Cambridge; Cambridge; Hybrid; GBP 80,000 - 100,000; Full time

Job summary

A leading academic institution is seeking a CSIRT Analyst to enhance their cyber-security efforts. Responsibilities include detecting and responding to cyber-security incidents and analyzing data using key tools like Microsoft and Trellix. Candidates with experience in incident response and a passion for cyber-security technologies are encouraged to apply. This hybrid-working role offers an opportunity to contribute to the security posture of an institution serving ~60,000 students and staff.

Qualifications

• Experience in incident response is required.
• Familiarity with cyber-security tools and products is necessary.
• Enjoyment in analyzing data for attack methods is preferred.

Responsibilities

• Detect and respond to cyber-security attacks or incidents.
• Analyze data using enterprise cyber-security tools.
• Research and implement new cyber-security capabilities.

Skills

Incident response

Cyber-security tools

Data analysis

Clear communication

Curiosity and determination

Tools

Microsoft

Trellix

FortiNet

Job description

An opportunity has become available at University Information Services (UIS) for a Computer Security Incident Response Team (CSIRT) Analyst with a background in incident response and resolution, with experience working with security technologies and services.

You will join a Security Operations team of analysts and engineers, working to deliver cyber-security for the University's ~60,000 students and staff.

Your work will be in a complex organisation, with a range of challenges that constantly evolve to meet new threats and business needs.

As a CSIRT Analyst you will:

• Detect and respond to cyber-security attacks or incidents.
• Analyse data using enterprise cyber-security tools (Microsoft, Trellix, FortiNet) and developing these to meet changing needs.
• Research and implement new cyber-security capabilities, improving the university's cyber-security posture.
• Work with IT staff from across the university to identify and resolve security incidents.

Are you the right candidate?

• You will have experience in incident response.
• You will have experience in using cyber-security tools and products.
• You enjoy analysing data and discovering attack methods.
• You are keen to learn and develop cyber-security technologies.
• You can follow processes when required but have the curiosity and determination to follow unusual lines of investigation under your own initiative.
• You can communicate clearly to different audiences, both verbally and written.
• You can work calmly and effectively during incidents.

This position will divide their time equally between incident response and developing security capabilities. While there is strong emphasis on incident response, we welcome candidates with a range of security experience and interests to complement the existing team.

This is a hybrid-working role with offices at the University Information Services' building on the West Cambridge Site.

Once an offer of employment has been accepted, the successful candidate will be required to undergo a basic disclosure (criminal records check) check and a security check.

We welcome applications from individuals who wish to be considered for part-time working or other flexible working arrangements.

We particularly welcome applications from women and /or candidates from a BME background for this vacancy as they are currently under-represented at this level in our department.

Click the 'Apply' button below to register an account with our recruitment system (if you have not already) and apply online.

For any queries regarding this position please contact Ashley Culver, Security Operations Manager via email: [e-mail] .

Please quote reference VC48023 on your application and in any correspondence about this vacancy.

The University actively supports equality, diversity and inclusion and encourages applications from all sections of society.

The University has a responsibility to ensure that all employees are eligible to live and work in the UK.