Cyber Security Analyst Full Time

Allen Lane Ltd.

Allen Lane is delighted to be supporting a Central Government organisation based in London in the recruitment of a Cyber Security Analyst.

As the Cyber Security Analyst you will be responsible for focusing on cyber security operations, cyber-attack monitoring, incident response, cyber defence, threat intelligence, and the support of cyber security assurance programmes (eg GovAssure).

We are looking for candidates with knowledge and experience on the use of Security Information and Event Management (SIEM), Network/Endpoint Detection and Response (NDR/EDR), and threat hunting (eg MITRE, TTPs). In addition to strong technical skills, you will need to be self-directed and motivated, an effective communicator, and enjoy working across teams for delivery.

Key responsibilities/accountabilities:

• Conduct cyber security operations, comprising Security Information and Event Management (SIEM), Network/Endpoint Detection and Response, threat intelligence, and threat hunting (eg MITRE, TTPs)
• Conduct cyber security incident investigation, analysis, containment, and recovery. To include continuous improvement of SOP and development of metrics.
• Provide a threat intelligence capability for current and emerging threats, risks, vulnerabilities, and technology developments, for continuous improvement of detection, response, and threat hunting capabilities (eg Indicators of Compromise, TTPs)
• Conduct vulnerability assessments and cyber-attack simulations, and develop hardened device configuration standards, working with stakeholders for implementation
• Support cyber assurance programmes (eg GovAssure)

Technical knowledge and experience:

• Demonstrable experience with Intrusion Detection (IDS) and Network and Endpoint Detection/Response (NDR/EDR), Security Information and Event Management (SIEM), and other common cyber-security technologies
• Demonstrable knowledge of cyber-attack analysis, able to correlate multiple event sources to provide a complete analysis of an intrusion, and to effective threat hunt (eg MITRE, kill chain)
• Demonstrable experience with best practice Incident Response principles (eg NCSC/NIST)
• Demonstrable knowledge of Threat Intelligence reporting and modelling

Desirable:

• familiarity with NCSC Cyber Assessment Framework (CAF)

Benefits:

• Annual Leave – 27.5 days plus bank holidays
• Civil Service Pension – 27.9% employer contribution
• Performance bonus
• Financial support to employees undertaking professional qualifications, skills training and development that are relevant to the role.
• The organisation will also pay individual subscriptions to professional bodies