Cyber Security Vulnerability Analyst

Alexander Mann Solutions – Public Sector Resourcing

Cyber Security Vulnerability Analyst – Inside IR35

Contract Term: 7 months with potential for extension

Contracting Authority: Cabinet Office

Location: Hybrid – London, Manchester or Bristol 3 days per week

The Cyber Defence team delivers cyber threat intelligence, threat detection, incident response and vulnerability management capabilities for the Cabinet Office and is responsible for defending both internal IT infrastructure and citizen-facing services.

The Cyber Security Vulnerability Analyst role forms part of the Cabinet Office Cyber Security team, it reports to the Red Team Manager. The primary focus of the role will be delivering the Cabinet Office core security operations of vulnerability management.

Key outcomes from the role are the delivery of seamless vulnerability management service into Cabinet Office infrastructure and business units, verifying the effectiveness of estate-wide security measures. The focus, outcomes and responsibilities are aligned to the Government Security Profession Framework.

As a Cyber Security Vulnerability Analyst your main responsibilities will be to:

• Manage the operation and roll out of one or more vulnerability identification and assessment capabilities across the Cabinet Office’s on-premise and cloud-based IT estate and digital services.
• Coordinate the triage and remediation of identified vulnerabilities using a risk-based approach, working closely with service teams and developers to ensure that appropriate mitigation measures are implemented.
• Work closely with other teams across Cyber Security and the wider Cabinet Office to proactively reduce cyber security vulnerabilities.
• Produce regular reporting which delivers insights on vulnerability management activities and the impact on cyber security risk.
• Establish a detailed understanding of Cabinet Office data security and architectures enabling the delivery of consistent security advice.
• Define requirements for improving and expanding our security tooling.
• Develop and update internal plans, processes, and knowledge base articles.

Essential:

• An active SC Clearance is an essential requirement for this position, as a minimum you must be eligible and willing to undergo SC Clearance checks.
• Strong vulnerability management experience.
• Experience developing, implementing and operating vulnerability management capabilities using Tenable One.
• Experience using a variety of sources of information to identify, analyse and report on relevant threats and vulnerabilities.
• Experience deploying, configuring and using vulnerability assessment (such as Tenable and the NCSC’s Active Cyber Defence Toolkit) and Attack Surface Management tools.
• Excellent stakeholder management skills.
• Excellent verbal and written communication skills, and the ability to communicate technical security issues to both technical and non-technical stakeholders.
• Experience with cloud environments such as AWS, Azure or GCP (preferably AWS).

Desirable:

• Experience with bug bounty programmes and platforms.
• Experience with digital brand protection.
• Experience investigating and responding to cyber incidents.
• Ability to work as part of a team in a multidisciplinary environment.
• Public Sector experience.

If this role sounds like something that you would be interested in, please click the link to apply or get in touch with Daniel Mcbride

Disability confident

As a member of the disability confident scheme, The Cabinet Office guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group.

If you qualify for the above, please notify us on .

We will be in touch to discuss your suitability and arrange your Guaranteed Interview.

Should you require reasonable adjustments at any point during the recruitment process or if there is a more accessible way for us to communicate, please do let me know.

In applying for this role, you acknowledge the following, this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different.

Please be aware that this role can only be worked within the UK and not Overseas.