Senior Cyber Security Analyst

Senior Cyber Security Analyst - (Apply online only)pd (experience dependent) INSIDE IR35 - 3 month initial contract - London (3 days per week onsite)

Please note: Due to the nature of the role, we are ideally looking for candidates to hold an active SC clearance.

We are looking for a SC Cleared Senior Cyber Security Analyst with SPLUNK experience to join our central government client on an initial 3-month contract. You must have experience investigating and responding to cyber incidents, co-ordinating incident response in a large organisation.

We have both a Senior and mid-level role available.

Main responsibilities:

• As a senior security analyst with responsibility for incident response, you will:
• Lead the investigation of security alerts to understand the nature and extent of possible cyber incidents
• Lead the forensic analysis of systems, files, network traffic and cloud environment
• Lead the technical response to cyber incidents by identifying and implementing (or coordinating the implementation of) containment, eradication and recovery actions
• Support the wider coordination of cyber incidents
• Review previous incidents to identify lessons and actions
• Identify and deliver opportunities for continual improvement of the incident response capability
• Work closely alongside other Cyber Defence functions, supporting the continual improvement of wider capabilities
• Develop and update internal plans, playbooks and knowledge base articles
• Act as an escalation point for, and provide coaching and mentoring to, security analysts
• Be responsible for leadership and line management of security analysts

Cyber incidents can and do arise on a 24/7 basis. The team operates an out-of-hours on call rota, which you will be expected to join.

Essential skills and experience:

• SPLUNK
• EDR (Endpoint Detection and Response)
• Significant experience investigating and responding to cyber incidents
• Significant experience using security tools (e.g., EDR, SIEM) to support the investigation and response to cyber incidents
• Experience managing and coordinating the response to cyber incidents
• Experience coaching and mentoring junior staff
• An in-depth understanding of the tools, techniques and procedures used by threat actors

Damia Group Limited acts as an employment agency for permanent recruitment and employment business for the supply of temporary workers. By applying for this job you accept our Data Protection Policy which can be found on our website.

Please note that no terminology in this advert is intended to discriminate on the grounds of a person's gender, marital status, race, religion, colour, age, disability or sexual orientation. Every candidate will be assessed only in accordance with their merits, qualifications and ability to perform the duties of the job.

Damia Group is acting as an Employment Business in relation to this vacancy and in accordance to Conduct Regulations 2003.