2nd Line Cyber Security Analyst

My client is looking for a 2^nd Line Cyber Security Analyst to join on them on a contract until March 2023. The role of the 2nd Line Analyst will be an escalation point for all SOC operational activity. The successful candidate will be responsible for the day to day monitoring of multiple security devices, including SIEM, IDS/IPS etc, ensuring that all customer SLAs are met.

Role: 2^nd Line Cyber Security Analyst
Pay: £70.80 per hour via Umbrella (Inside IR35)
Location: Corsham, Wiltshire
Contract: Until the end of March 2023
Hours: 37 hours per week Monday – Friday (Days – Flexibility to cover shifts for holidays and sickness)
Security Clearance: Current DV Clearance (British Nationals Only due to the confidential work carried out)

Job Profile

• You will be required to work as part of the SOC (Security Operations Centre) team ensuring all SOC operational tasks are completed on time and work tickets updated/closed with satisfactory technical details included.
• The 2nd Line Analyst will be comfortable at a technical level, often being required to attend technical workshops and customer briefings/service reviews.
• All Analysts are expected to be able to present and write professional reports to key stakeholders and exercise good time management.

• Maintain currency in security concepts, tools and best practices
• When required perform initial triage/identification of ‘Events of Interest’ using a range of monitoring and detection tools.
• Complete analysis/correlation of ‘Events of Interest’ to identify incidents
• Ensuring that all events, events of interest, exceptions & incidents are responded to in accordance with established SOC work instructions, including remedial action/recommendations.
• Responsible for maintaining SOC work instructions – reviews & amendment.
• Maintain currency in security concepts, tools and best practices
• Produce reports (as per templates) & vulnerability/trending analysis as requested by UK SOC Manager or key stakeholders.
• Present & review reports to internal & external key stakeholders
• Complete tooling configuration changes including but not limited to filters/tuning/dashboards as authorised.
• Carry out minor tool maintenance as directed by SOC lead engineer.
• Support the lead engineer for rules/policy/filters/use cases on SOC tooling.
• Research causes and effects of incidents and exceptions. Provide solutions to procedural failures and improvements to working practices.
• Mentoring – Improve inter team development through mentoring, knowledge sharing, briefing and production of guides and incident scenarios. Show flexibility in developing knowledge of supporting areas and performing their responsibilities during times of operational needs.

Skills/Experience Required
Essential

• TCP/IP Fundamentals
• ITIL Fundamentals (or equivalent)
• CompTIA Security (or equivalent)
• CompTIA Network (or equivalent)
• Wireshark Packet Analysis
• SIEM Administrator/Analyst
• SANS SEC401: Security Essentials (or equivalent)
• SANS SEC503: Intrusion Detection in-depth (or equivalent)
• SANS SEC504: Hacker Tools, Techniques, Exploits and Incident Handling (or equivalent)

Desirable

• CCENT
• Ethical Hacker (CEH)
• Cisco Certified Network Associate CCNA
• FIAHMG – Fundamentals of Information Assurance in HMG (leading to CCP)
• CREST (Registered Intrusion Analyst) (CRIA)
• SANS SEC501: Advanced Security Essentials

Education & Training
Essential – Strong experience in a similar role

If you are interested in applying for this position and you meet the requirements, please send your updated CV to: Sarah Budd at Line Up Aviation
Line Up Aviation has carved its own place in the recruitment of Aviation and Aerospace personnel all over the world for more than 30 years. We work with some of the industry’s best-known companies who demand the highest standard of applicants.
Due to the number of applications, we receive, it’s not always possible to contact unsuccessful applicants. Unless you hear from us within 14 days of your application, please assume that you have been unsuccessful on this occasion.
“Follow @LineUpAviation on Twitter for all of our latest vacancies, news and pictures from our busy UK Head Office. Interact with us using the #LineUpAviation tag at anytime! Thank you for your follow!”