Cyber Security Analyst
Applicants for this role should currently hold a valid Security (SC) Clearance.
Responsibilities:
* Support mission to coordinate the response to critical and cross-cutting cyber threats, incidents and vulnerabilities, and enable cyber defenders to defend as one.
* Become part of the Watch Officer rota to provide initial triage and escalation of reports and requests from Government organisations.
* Support Incident Management when required during periods of heightened operational activity.
* Maintain an understanding of the real-world cyber threat, identifying trends and emerging threats.
* Maintain an understanding of the cyber threats likely to target the business.
* Facilitate the timely sharing of high-quality actionable Cyber Threat Intelligence, both through regular and ad-hoc reporting, and through briefings to customers and stakeholders.
* Work collaboratively with Incident Management, providing insights on adversaries to enable a more effective response, and capturing insights for wider use.
* Support the implementation and ongoing management of Threat Intelligence tooling and infrastructure, including, malware sandboxes, and threat intelligence platforms.
* Engage with the wider public sector cyber security, cyber threat intelligence and assessment communities on behalf of business.
SKILLS / EXPERIENCE
* Experience of working in cyber security, ideally within a Security Operations environment.
* Good foundational knowledge of IT and digital services.
* Ability to produce well written and structured products and notifications in clear English, with minimal support that will meet the requirements of stakeholders
* Excellent written and verbal communication skills, including the ability to clearly and simply explain technical details to non-technical audiences, and engage with senior stakeholders.
* Experience working with internal and external stakeholders.
Cyber Threat Intelligence Specific
* Excellent understanding of the tools, techniques and procedures used by adversaries in real-world cyber attacks.
* Experience monitoring a variety of sources of information to identify, analyse and report on relevant threats, carrying out all-source analysis and assessment to understand current and near-future threats.
* Experience using cyber threat intelligence tools such as, malware sandboxes, and Threat Intelligence Platforms.
