IT Cyber Security Analyst (based Bury or Southam)

PURPOSE OF THE JOB:

Reporting to the Lead Cyber Security, the Cyber Security Analyst will help deliver secure operation of the in-house computer systems, servers, Azure footprint, network connections and other network devices. This includes checking server, defender, sentinel and firewall logs, scrutinizing network traffic, establishing and maintaining network perimeter security and virus protection, firmware and patching, and troubleshooting. This person will also analyse and resolve security breaches and vulnerability issues in a timely and accurate fashion and conduct security audits and reporting where required.

 

KEY ACCOUNTABILITIES:

Essential Duties and Responsibilities:

·         Deploy, manage and maintain all security systems and their corresponding or associated software, including firewalls, intrusion detection systems, cryptography systems, and anti-virus software.

·         Develop, implement, maintain, and oversee enforcement of policies, procedures and associated plans for system security administration and user system access based on industry-standard best practices.

·         Involved with updating disaster recovery plans for operating systems, databases, networks, servers, and business systems.

·         Manage connection security for local area networks and e-mail communications.

·         Manage and ensure the security of databases and data transferred both internally and externally.

·         Design, perform, and/or oversee penetration testing of all systems to identify vulnerabilities.

·         Design, implement, and report on security audits.

·         Monitor server logs, firewall logs, intrusion detection logs, and network traffic for unusual or suspicious activity. Interpret activity and make recommendations for resolution.

·         Recommend, schedule (where appropriate), and apply fixes, security patches, disaster recovery procedures, and any other measures required in the event of a security breach.

·         Assess need for any security reconfigurations (minor or significant) and execute them if required.

·         Keep current with emerging security alerts and issues.

·         Conduct research on emerging products, services, protocols, and standards in support of security enhancement and development efforts.

·         Interact and negotiate with vendors, outsourcers, and contractors to obtain protection services and products.

·         Download and test new security software and/or technologies.

·         Recommend, schedule, and perform security improvements, upgrades, and/or purchases.

 

Skills & Qualifications

·         College diploma or university degree in the field of computer science or 2+ years equivalent work experience.

·         SC200 (Microsoft Security Operations Analyst) or studying towards.

·         Hands-on knowledge of firewalls, intrusion detection systems, anti-virus software, data encryption, and other industry-standard techniques and practices.

·         In-depth technical knowledge Azure, O365, and Windows operating systems.

·         Strong knowledge of TCP/IP and network administration/protocols.

·         Intuition and keen instincts to pre-empt attacks.

·         Technical hands-on experience with FortiGate Firewalls.

·         Technical hands-on experience with Microsoft Defender XDR, Sentinel and K-Query

·         Knowledge of applicable practices and laws relating to data privacy and protection.

·         High level of analytical and problem-solving abilities.

·         Ability to conduct research into security issues and products as required.

·         Strong interpersonal and oral communication skills.

·         Highly self motivated and directed.

·         Strong organizational skills.

·         Excellent attention to detail.

·         Ability to effectively prioritize and execute tasks in a high-pressure environment.

·         Experience working in a team-oriented, collaborative environment.

Operational

·         Maintain working relationships within the team and with our suppliers to ensure that all deployed services, are supported and maintained effectively and efficiently.

·         Ability to read, analyse, apply and improve technical procedures and documentation.

·         Ability to read and interpret documents such as procedure manuals, business periodicals, professional journals, operating and maintenance instructions, and safety rules.

·         Support corporate compliance standards to de risk any potential issues and minimise impact or potential degradation to business operations.

·         Keep abreast of current vulnerabilities and security best practice and identify where such could be patched or changed to improve security.

 

PROFILE DESCRIPTION OF INCUMBENT

ESSENTIAL

1. Native English speaker with other additional languages an advantage
2. International security exposure with a high degree of communication skills
3. In depth knowledge of Microsoft security products
4. Strong analytical and problem-solving skills
5. Microsoft Defender. 

DESIRABLE

1. University degree in computing
2. Supplier/Partner operational management experience in outsourced/3rd Party support
3. Azure
4. SC200 Certification
5. FortiGate Firewall
6. Microsoft Sentinel