SC Cleared Tier 2 Cyber Security Analyst - 24/7 shift allowance

FPSG have some urgent permanent, SC Cleared opportunities to present on behalf of our Client, who are hiring for Cyber Security Analysts for roles inCentral Scotlandproviding a 24/7 shift pattern cover for their customers.

A generous shift allowance is paid on top of the basic salary, making up a very good reward package and path to DV Cleared status where applicable. The roles require you to be on-site in West Central Scotland on a 4 x 4 shift pattern, whereby you will work for four 12 hour shifts and then have four shifts off.

IMPORTANT: You will be required to have only British Citizenship (i.e. DUAL citizenship, or ILR status is not going to be eligible) AND already possess live, current SC or DV Clearancedue to the timescale we are looking to hire within. Please only apply if you have SC or DV Cleared status.

The Tier 2 Cyber Security Analyst role will involve you advancing the initial work conducted by Tier 1 Analysts and providing more in-depth analysis of potential threats to the organization. This role is crucial in the escalated investigation, triage, and response to cyber incidents while supporting the development and training of Tier 1 Analysts. As a Tier 2 Analyst you will work to ensure a seamless SOC operation & act as a bridge between foundational & advanced threat detection & response functions.

Responsibilities:

* Conducting escalated triage & analysis on security events identified by Tier 1 Analysts, determining threat severity & advising on initial response actions.

* Applying expertise in SIEM solutions utilizing Kusto Query Language (KQL), to perform log analysis, event correlation, & thorough documentation of security incidents.

* Identifying & escalating critical threats to Tier 3 Analysts with detailed analysis for further action, ensuring rapid response & adherence to service Tier objectives (SLOs).

* Investigating potential security incidents by conducting deeper analysis on correlated events & identifying patterns or anomalies that may indicate suspicious or malicious activity.

* Using OSINT (Open-Source Intelligence) to enrich contextual data and enhance detection capabilities, contributing to a proactive stance on emerging threats.

* Monitoring the threat landscape & documenting findings on evolving threat vectors, sharing relevant insights with internal Cyber teams to enhance overall situational awareness.

* Following established incident response playbooks, providing feedback for enhancements & suggesting updates to streamline internal Cyber processes & improving threat response times.

.* Coordinating with Tier 3 Analysts & management to refine detection & response workflows, contributing to continuous SOC maturity.

* Collaborating with Tier 3 Analysts on tuning SIEM & detection tools to reduce false positives & improve alert fidelity, submitting tuning requests & testing configurations.

* Identifying gaps in current detection content & working with Senior Analysts to develop & validate new detection rules & use cases tailored to the organization's threat profile.

* Acting as a mentor to Tier 1 Analysts, offering guidance on triage & analysis techniques & facilitating on-the-job training.

.* Assisting in training sessions and knowledge-sharing activities, contributing to a supportive learning environment within the SOC.

Knowledge and Skills required to be a Tier 2 Cyber Security Analyst:

* Understands advanced networking concepts, including IP addressing, basic network protocols, & how traffic flows within a network.

* Advanced knowledge of Windows & Linux operating environments, including standard commands, file systems, & user authentication mechanisms.

* Competence in using SIEM solutions (e.g., ArcSight, Azure Sentinel) for monitoring and log analysis; some exposure to additional analysis tools such as basic XDR platforms.

* Able to demonstrate proficient knowledge using Kusto Query Language (KQL) to search & filter logs effectively.

* Familiar with open-source intelligence (OSINT) techniques to aid in identifying potential threats & gathering information.

* Able to communicate clearly & efficiently with team members and stakeholders, both internally & externally, under senior analysts' direction.

* Can communicate simple technical issues to non-technical individuals in a clear & understandable way.

* Able to create concise, structured reports that outline findings from preliminary investigations & daily monitoring.

* Able to manage personal workload effectively to ensure timely completion of assigned tasks within the SOC.

* Willing to collaborate with team members, accepting guidance and learning from more experienced analysts.

* Shows initiative in learning new technologies and techniques.

* Able to function efficiently during high-pressure situations, following procedures to ensure consistent performance in IM.

Next Steps:

If you have live SC or DV Clearance, along with the associated skills for this role & are committed to working on a rotating shift pattern (shift allowance is paid on top of the basic salary), then please apply immediately. Interviews will be conducted promptly with suitable candidates who meet all the stipulated essential Citizenship & Clearance criteria.

Desired Skills and Experience

* Conducting escalated triage and analysis on security events identified by Tier 1 Analysts, determining threat severity and advising on initial response actions.

* Applying expertise in SIEM solutions utilizing Kusto Query Language (KQL), to perform log analysis, event correlation, and thorough documentation of security incidents.

* Identifying and escalating critical threats to Tier 3 Analysts with detailed analysis for further action, ensuring rapid response and adherence to service Tier objectives (SLOs).

* Investigating potential security incidents by conducting deeper analysis on correlated events and identifying patterns or anomalies that may indicate suspicious or malicious activity.

* Using OSINT (Open-Source Intelligence) to enrich contextual data and enhance detection capabilities, contributing to a proactive stance on emerging threats.

* Monitoring the threat landscape and documenting findings on evolving threat vectors, sharing relevant insights with internal Cyber teams to enhance overall situational awareness.

* Following established incident response playbooks, providing feedback for enhancements and suggesting updates to streamline internal Cyber processes and improving threat response times.

.* Coordinating with Tier 3 Analysts and management to refine detection and response workflows, contributing to continuous SOC maturity.

* Collaborating with Tier 3 Analysts on tuning SIEM and detection tools to reduce false positives and improve alert fidelity, submitting tuning requests and testing configurations when necessary.

* Identifying gaps in current detection content and working with Senior Analysts to develop and validate new detection rules and use cases tailored to the organization's threat profile.

* Acting as a mentor to Tier 1 Analysts, offering guidance on triage and analysis techniques and facilitating on-the-job training to elevate their technical skills and operational efficiency

.* Assisting in training sessions and knowledge-sharing activities, providing feedback on areas for growth and contributing to a supportive learning environment within the SOC.

Knowledge and Skills required to be a Tier 2 Cyber Security Analyst:

* Understands advanced networking concepts, including IP addressing, basic network protocols, and how traffic flows within a network.

* Advanced knowledge of Windows and Linux operating environments, including standard commands, file systems, and user authentication mechanisms.

* Competence in using SIEM solutions (e.g., ArcSight, Azure Sentinel) for monitoring and log analysis; some exposure to additional analysis tools such as basic XDR platforms.

* Able to demonstrate proficient knowledge using Kusto Query Language (KQL) to search and filter logs effectively.

* Familiar with open-source intelligence (OSINT) techniques to aid in identifying potential threats and gathering information.

* Able to communicate clearly and efficiently with team members and stakeholders, both internally and externally, under direction from senior analysts.

* Can communicate simple technical issues to non-technical individuals in a clear and understandable way.

* Able to create concise, structured reports that outline findings from preliminary investigations and daily monitoring.

* Able to manage personal workload effectively to ensure timely completion of assigned tasks within the SOC.

* Willing to collaborate with team members, accepting guidance and learning from more experienced analysts.

* Able to function efficiently during high-pressure situations, following procedures to ensure consistent performance in IM.

We are Disability Confident and neurodiverse aware. If you have a disability, please tell us if there are any reasonable adjustments we can make to assist you in your application or with your recruitment process