Marshall of Cambridge Aerospace Ltd
Cambridge, Cambridgeshire
Job Overview Senior Cyber Security Analyst (12 month contract) at Marshall. Benefits Competitive salary and remuneration package, 27 days holiday, pension contributions matched up to 9%, Hybrid working opportunity, Private Healthcare. Responsibilities Managing checklists and problem management through to handover or resolution. Threat identification and classification. Incident response lead. Report writing. Stakeholder management. Continuous improvement. Junior SOC staff mentoring. Tasks Maintain and monitor effectiveness of security measures and controls. Co ordinate routine security event monitoring and investigations. Use, configure and develop SIEM and EDR tools. Monitor and configure IDS/IPS. Analyse and create reports for security incidents, root cause, lessons learnt. Create and rehearse Incident Response plans; support audits and red team engagements. Work closely with Cyber Security/IT teams and external support groups. Communicate with individuals inside and outside the business. Respond to, own and close/escalate service tickets. Take ownership of project activities from internal or external projects. Configure, review and report relevant risks using vulnerability testing tools/services. Input into risk management process and prioritise mitigation strategies. Work with outside services during incident response or routine investigations, including Red/Blue Team engagements. Aid in delivery of security awareness training. Mentor junior cyber security analysts. Occasional cover of Cyber Security Manager operational responsibilities. Qualifications Deep hands on skills with Windows and preferably Linux operating systems, networking and bespoke device types. Good awareness of computer networking protocols related to cyber security. Administration, configuration and use of SIEM systems, including alerts, reports, dashboards, IOCs and threat feeds. Administration of Firewalls, Web Proxies, Web Application Firewalls, Email Security and EDR software. Understanding common cyber security threats and mapping threats to frameworks such as MITRE ATT&CK. Detailed knowledge of software/hardware vulnerabilities and exploitation. Ability to prioritise risks in terms of likelihood, impact, consequences and mitigations. Cyber Security related qualifications. Experience Experience in a Security Operations Centre or similar role. Exposure to applications, networks, servers and/or endpoint devices. Working with large amounts of data for analysis and reporting. Documenting, developing and expanding existing operational cyber security processes and playbooks. Experience recovering from cyber security incidents. Experience in highly regulated industry with data classifications and compliance frameworks. Practical experience with vulnerability scanning and pen testing tools. Experience with gap analysis, threat modelling and mapping TTPs. Experience presenting information to stakeholders inside and outside IT or Security teams. Compiling risk assessments, technical, security or otherwise, including lessons learnt. Requirements Available to attend site at short notice for major cyber incidents requiring onsite investigation, coordination or response. Equal Opportunity Marshall Group is an Equal Opportunity Employer. All qualified candidates will receive consideration for employment without regard to age, race, colour, religion, genetic information, sex, sexual orientation, gender identity, national origin, disability status, or any other characteristic protected by law.
Job Overview Senior Cyber Security Analyst (12 month contract) at Marshall. Benefits Competitive salary and remuneration package, 27 days holiday, pension contributions matched up to 9%, Hybrid working opportunity, Private Healthcare. Responsibilities Managing checklists and problem management through to handover or resolution. Threat identification and classification. Incident response lead. Report writing. Stakeholder management. Continuous improvement. Junior SOC staff mentoring. Tasks Maintain and monitor effectiveness of security measures and controls. Co ordinate routine security event monitoring and investigations. Use, configure and develop SIEM and EDR tools. Monitor and configure IDS/IPS. Analyse and create reports for security incidents, root cause, lessons learnt. Create and rehearse Incident Response plans; support audits and red team engagements. Work closely with Cyber Security/IT teams and external support groups. Communicate with individuals inside and outside the business. Respond to, own and close/escalate service tickets. Take ownership of project activities from internal or external projects. Configure, review and report relevant risks using vulnerability testing tools/services. Input into risk management process and prioritise mitigation strategies. Work with outside services during incident response or routine investigations, including Red/Blue Team engagements. Aid in delivery of security awareness training. Mentor junior cyber security analysts. Occasional cover of Cyber Security Manager operational responsibilities. Qualifications Deep hands on skills with Windows and preferably Linux operating systems, networking and bespoke device types. Good awareness of computer networking protocols related to cyber security. Administration, configuration and use of SIEM systems, including alerts, reports, dashboards, IOCs and threat feeds. Administration of Firewalls, Web Proxies, Web Application Firewalls, Email Security and EDR software. Understanding common cyber security threats and mapping threats to frameworks such as MITRE ATT&CK. Detailed knowledge of software/hardware vulnerabilities and exploitation. Ability to prioritise risks in terms of likelihood, impact, consequences and mitigations. Cyber Security related qualifications. Experience Experience in a Security Operations Centre or similar role. Exposure to applications, networks, servers and/or endpoint devices. Working with large amounts of data for analysis and reporting. Documenting, developing and expanding existing operational cyber security processes and playbooks. Experience recovering from cyber security incidents. Experience in highly regulated industry with data classifications and compliance frameworks. Practical experience with vulnerability scanning and pen testing tools. Experience with gap analysis, threat modelling and mapping TTPs. Experience presenting information to stakeholders inside and outside IT or Security teams. Compiling risk assessments, technical, security or otherwise, including lessons learnt. Requirements Available to attend site at short notice for major cyber incidents requiring onsite investigation, coordination or response. Equal Opportunity Marshall Group is an Equal Opportunity Employer. All qualified candidates will receive consideration for employment without regard to age, race, colour, religion, genetic information, sex, sexual orientation, gender identity, national origin, disability status, or any other characteristic protected by law.