Cyber Security Analyst - DV Cleared

£65,000 - £70,000 per annum

Yeovil - Onsite

Job Description:

We are looking for a Principal Cyber Security Analyst to join a Protective Monitoring Team at our Yeovil site.


What you'll do as a Principal Cyber Security Analyst:

• Team Management: Provide direct line management, guide, and develop the SOC operations team, fostering a positive culture and ensuring continuous skill development.
• Mentorship and Development: Mentor and develop junior analysts, fostering a culture of continuous learning and innovation.
• Technical Leadership: Serve as the principal technical expert, ensuring efficient monitoring, detection, and response to security threats.
• Innovation and Continuous Improvement: Promote continuous improvement initiatives, staying at the forefront of cybersecurity practices.
• Tool and Technology Optimisation: Supervise the optimisation of critical security tools, ensuring they support proactive security postures.
• Incident Management and Response: Guide and support incident response efforts, providing expertise and guidance.
• Insider Threat Management: Manage and investigate Insider Threat cases upon request.
• Threat Hunting Leadership: Guide threat hunting teams during scheduled hunts, ensuring comprehensive threat detection.
• External Collaboration: Collaborate with external partners to enhance the SOC's defensive posture and ensure compliance with standards.
• Customer Network Oversight: Act as the technical expert for assigned customer networks, ensuring their security.
• Customer Engagement and Reporting: Provide weekly metrics reports and attend customer service reviews to offer technical insights.
• Cross-Functional Teamwork: Encourage collaboration with other departments to address security challenges with integrated solutions.

What we need from you:

We are looking for a motivated self-managed individual who is willing to help design and adapt a constantly evolving service; someone who can demonstrate exceptional analytical skills and liaise professionally with peers and customers even under pressure.

You really must have:

• Experience in cyber security including protective monitoring and incident response, e.g. GIAC GMON, GCIA, GCIH or equivalent experience.
• SIEM (LogRhythm, Splunk, etc) and IDS (Snort) experience.
• Network and Host security experience.
• Threat intelligence.
• Threat Hunting.
• Excellent communications skills.
• Mentoring and coaching.
• Current DV clearance.

It would be nice if you had:

• SANS SEC 503 Intrusion Detection in Depth or equivalent.
• SANS SEC 504 Incident Handling, Hacker Tools and Techniques or equivalent.
• SANS SEC 508 Advanced Incident Response, Threat Hunting, and Digital Forensics or equivalent.
• SANS SEC 511 Continuous Monitoring and Security Operations or equivalent.
• SANS LDR 551.