IT Security Analyst – Cyber Security – Threat & Vulnerability Management – Qualys – Email Security Full Time

Nexere Consulting Limited

IT Security Analyst – Cyber Security – Threat & Vulnerability Management – Qualys – Email Security

My client who are leaders in their field are looking for an IT Security Analyst who will be assisting with IT Security operations, development and improvement processes, security implementation, infrastructure security support, monitoring, maintaining and coordinating information, risk evaluation assessments, Cyber security incident response management, Vulnerability management, data security awareness activities related to governance, requirement and compliance, Project planning and Management.

Accountabilities:

• Use available security tools and resources to identify, correlate, contain suspicious events, provide context around events, determine root cause, mitigate and provide regular updates and recommend improvements to existing systems and procedures.
• Perform deep-dive incident analysis of various data sources by analysing and investigating security related logs against short and medium-term threats and indicator of compromise (IoCs)
• Perform identification and collection of cyber threats using proactive and reactive threat hunting methods.
• Execute vulnerability and web application assessments; provide analysis and recommendations to mitigate potential threats.
• Perform risk analysis reviews on systems and identify security gaps, the risks they present and defining remediation options
• Draw up reports of developing risks that highlight potential threats in the future, and relay information back to stakeholders.
• Make sure best practices are adhered to when handling security threats and breaches also when conducting investigation techniques. ie CIS benchmark, ISO27001, NCSC etc.
• Formulate security assurance plans and reviews against compliance framework set out by the organisations core governance framework.
• Conduct Security Operation to review and onboard systems log source to SOC/SIEM
• Review and validate cyber incident alerts generated by (SIEM)
• Assist with problem management within ITIL best practices.
• Security Incident ticket management (Service Now) business as usual tasks
• Strong working knowledge and experience of Microsoft Exchange email administration
• Strong working Knowledge and experience of web Proxy
• Strong working Knowledge and experience of Next generation End Point protection (Anti-virus)
• Strong working knowledge and experience of email security protection systems

Key Skills/Experience:

• Proficient computer skills including Microsoft Office, O365, Exchange, Azure.
• Enterprise Endpoint protection, Email Security protection, with various other AV, Encryption Cloud vulnerability management applications.
• Good Knowledge of MITRE framework
• Experienced in understanding, investigating and contextualising modern cyber security threats.
• Experienced in assessment process of PCI/DSS.
• Good knowledge of Cyber security incident response (CSIRT) management process.
• Knowledge of Security Analysis toolkits, defensive technologies and other security systems eg SIEM, Vulnerability scanners, WAF, IDS/IPS, Firewall, IAM, patch management, Wireshark, Antivirus.
• Good knowledge of GDPR and data protection.
• Good knowledge of Governance, Risk and compliance.

The role is based in London and operating in a hybrid working model (2 days per week)

IT Security Analyst – Cyber Security – Threat & Vulnerability Management – Qualys – Email Security