Cyber Security Analyst

Cyber Security Analyst

Venn Group are working with a Public Sector organisation in Lincolnshire who require a Cyber Security Analyst.

Purpose:

• Support monitoring of access to IT facilities or infrastructure investigating unauthorised access, compliance with data protection and performance of other administrative duties relating to security management

Details:

Rate: Negotiable day rate (Inside IR35)

Duration: 3-6 months extensions likely

Hybrid working, Tuesdays and Thursday in Lincoln

Responsibilities

• Provide advice and handle most enquiries relating to technical information security, contingency planning and other related activities with only infrequent reference to more senior staff for assistance
• Undertake regular monitoring of system usage and security (with particular reference to internet usage, intranets and e/commerce) and produce comprehensive reports using approved software
• Respond to potential security incidents or where appropriate raise, monitor, manage and close security incidents and report them in a summary form to the appropriate line of escalation
• Recommend effective countermeasures to reduce the risk of further similar incidents
• Use available software or specialist monitoring tools to maintain awareness and control of the hardware and software
• Respond to enquiries by users, specialists or others and deal effectively with a broad range of issues of moderate complexity
• Contribute to investigations of operational problems
• Administrate critical systems including antivirus management, mail and communication systems, Internet monitoring, infrastructure management tools, storage provisioning, directory services and anti-spam. Cloud, hybrid or on-premises
• Manage the operation and configuration of the IT infrastructure to develop, deliver and support properly engineered IT services and products (including upgrades) to meet or exceed the needs of priorities of the organisation in line with agreed service levels and business performing to their optimum capability and meet customer needs

Candidate knowledge

• Experience of driving vendors or managed service providers to carry out the fixes where required and ensuring they are adhering to best practices.
• Knowledge of security issues relating to hardware and software, with experience of the Microsoft technology stack
• Knowledge and skills in the use of network and database security tools i.e., Nessus, Azure/Cloud and End user computing security
• Understanding of ISO27001, CIS Controls, NIST, Cyber essentials and other information security best practice standards
• Knowledge of storage area network (SAN) security
• Knowledge of devops/secops practices and culture and associated methods