Cyber Security Analyst

Here at Acorn we are looking for a passionate Cyber security Analyst to join our cyber side of the business where you will be supporting the SOC Manager and the wider security function in a first line of defence role, safeguarding the organization's infrastructure and systems by monitoring, analysing, and responding to security incidents.

There will be collaborative working with any external with SOC with shared and specific responsibilities to ensure all events are managed and risk efficiently identified and escalated to resolver groups. Your day-to-day duties will include managing processes & security checks and reporting incidents, whilst engaging our technical teams to mitigate any issues or improve process/, performing regular tasks including security updates, vulnerability management and mitigation.

• Monitor, review, log and elevate security incidents as part of daily security operations.
• Manage and configure SIEM logging and monitoring tools to identify potential security threats, respond to alerts, and elevate incidents where required.
• Coordinate 2nd-line remediation of identified vulnerabilities, working with technology teams, the business and the IT Support Desk.
• Track the deployment and health of security products across the business, validating and following up on incorrect findings or reporting anomalies.
• Ensure endpoint security tools (AV and EDR) are functioning correctly and maintain accurate records of security activity and findings.
• Provide weekly status reports on security tasks, incident resolutions and monitoring processes created by Cyber Security Engineers.
• Investigate and resolve phishing-related tickets promptly, escalating complex incidents to security engineers when required.
• Document resolutions, update knowledge base articles and assist with secure configuration reviews of desktops and laptops.
• Troubleshoot security related issues impacting end user systems, supporting both security and operational continuity.
• Report on patching and software update activity in coordination with IT teams, supporting security checks, analysis and technical engineering tasks.
• Assist with penetration test and vulnerability scan reviews, supporting remediation tracking and follow-up actions.
• Support central security logging by analysing, mitigating, recording and reporting on identified security threats.
• Support security audits, certification programmes and internal security initiatives across the business.
• Maintain a library of standard operating procedures and processes to support the onboarding of cyber analysts.

• Min 1 year experience working in an L1 security analyst role, or equivalent experience within a technical support role that incorporates security related responsibilities or a graduate with a cyber security focused degree.
• Experience of securing Windows and MacOS operating systems.
• Familiarity with Active Directory, Group Policy, and endpoint security management tools.
• Basic knowledge of networking concepts (TCP/IP, DNS, VPN).
• Experience with anti virus, EDR, and email security solutions.
• Awareness of phishing techniques and social engineering threats.
• Ability to interpret security alerts and logs.
• Excellent communication and problem solving abilities.
• Strong attention to detail and ability to follow processes.
• Ability to work independently and collaborate with cross functional teams.
• Knowledge of at least one scripting language, such as PowerShell.
• Knowledge of KQL.
• Working knowledge of ITIL.
• Exposure to cyber security frameworks (NIST, ISO 27001) is a plus.
• Certifications such as CompTIA Security+, Microsoft Certified: Security Fundamentals, or similar.

Because our training is quite comprehensive, we can only consider applicants who have at least one year remaining on their Graduate or Post-Study Work visa. At the moment, we are not able to offer visa sponsorship.