Cyber Security Analyst

Cyber Security Analyst

Location: London

Pay: 70,000.

Function description:

Are you an experienced Cyber Security Analyst looking for a new opportunity? Our client, a leading organisation in the industry, is seeking a skilled professional to join their dynamic team. As a Cyber Security Analyst, you will play a key role in supporting their Cyber Intelligence, Threat Detection, Crisis Preparedness and Response, Penetration Testing, and Vulnerability Management efforts. You will be responsible for monitoring external intelligence sources, evaluating emerging threats and vulnerabilities, and developing effective strategies to manage them. Additionally, you will coordinate penetration testing, perform security assessments, and create response plans in the event of security incidents. To be successful in this role, you should have a strong technical background in security controls, operations, and frameworks, along with a deep understanding of cyber malware-space. You should also have experience with threat intelligence, anomaly detection, intrusion analysis, and SIEM solutions. CRISC or CISM qualifications would be preferred. Our client is looking for someone with excellent analytical and problem-solving skills, the ability to work autonomously, and a drive to enhance the organisation's security posture.

Role Description:

Responsibilities will include:

• Monitor external intelligence sources to research and evaluate emerging cyber security and technology developments, threats and vulnerabilities of relevance and determine how to manage them adequately and effectively.
• Plan for disaster recovery and create response and contingency plans in the event of security incidents.
• Test and evaluate security solutions and advise on how they can be leveraged to address security challenges.
• Coordinate penetration testing and 'ethical hacking efforts and ensure the delivery of actionable contextualised reports.
• Perform security assessments of applications, systems, and networks, to identify potential weaknesses and ensure adequate defence against exploits of applicable vulnerabilities.
• Monitor identity and access management, including monitoring for abuse of permissions by authorised system users.
• Generate customised reports for both technical and non-technical staff and stakeholders on new threats or vulnerabilities driven by analysis, incidents, and adversary engagement.
• Maintain an information security risk register and assist with internal and external audits relating to information security.
• Assist with the creation, maintenance and delivery of a cyber security awareness programme for colleagues and other stakeholders.
• Be an advocate of Information Security both within the Operations function and throughout the rest of the organisation. Provide advice and guidance to staff and other stakeholders on a wide range of security issues.
• Partner with the Technology team and the wider organisation to ensure that activities and projects are secure by design and implementation.

Skills, Competencies, Experience:

• Wide experience in a cyber security position
• CRISC, CISM Qualifications or equivalent preferred
• Strong technical background in security controls / operations, system, network security and security frameworks such as SOC, NIST, ISO27002, CIS.
• Expert understanding of the elements of cyber malware-space. Specifically, key threat actors and their motivations, attack types, routes of attack, services, and tools.
• Extensive experience of Threat Intelligence, Anomaly Detection and Response, Data Leakage Prevention, Intrusion Analysis and SIEM solutions.
• Experienced working with, and enabling organisations heavily invested / investing in cloud-based technologies.
• Previous relevant experience of working within an international and complex professional services, start-up or highly regulated industry would be an advantage.
• Strong analytical and problem-solving skills with ability to balance multiple priorities and meet deadlines, adjust to changing priorities.
• Identify and drive opportunities to further enhance the security posture.
• Experience of working in a Security Operations Centre or partnering with / working for a Managed Security Service Provider would be an advantage.
• A hands-on, forward thinker, with a flexible mindset and ability to work in a fast-moving environment that embraces autonomy and is accountable for results.

Pontoon is an employment consultancy. We put expertise, energy, and enthusiasm into improving everyone's chance of being part of the workplace. We respect and appreciate people of all ethnicities, generations, religious beliefs, sexual orientations, gender identities, and more. We do this by showcasing their talents, skills, and unique experience in an inclusive environment that helps them thrive. If you require reasonable adjustments at any stage, please let us know and we will be happy to support you.