Description
Job Summary
As a Cybersecurity Analyst, you will protect IT infrastructure (including networks, hardware, and software) from a range of criminal activity. You will monitor networks and systems, detect security threats ('events'), analyze, and assess alarms, and report on threats, intrusion attempts and false alarms, either resolving them or escalating them, depending on the severity.
Responsibilities
- Keep up to date with the latest security and technology developments.
- Research/evaluate emerging cyber security threats and ways to manage them.
- Plan for disaster recovery and create contingency plans in the event of any security breaches.
- Monitor for attacks, intrusions and unusual, unauthorized, or illegal activity.
- Test and evaluate security products.
- Design new security systems or upgrade existing ones.
- Use advanced analytic tools to determine emerging threat patterns and vulnerabilities.
- Engage in 'ethical hacking', for example, simulating security breaches.
- Identify potential weaknesses and implement measures, such as firewalls and encryption.
- Investigate security alerts and provide incident response.
- Monitor identity and access management, including monitoring for abuse of permissions by authorized system users.
- Liaise with stakeholders in relation to cyber security issues and provide future recommendations.
- Generate reports for both technical and non-technical staff and stakeholders.
- Maintain an information security risk register and assist with internal and external audits relating to information security.
- Monitor and respond to 'phishing' emails and 'pharming' activity.
- Assist with the creation, maintenance, and delivery of cyber security awareness training for colleagues.
- Give advice and guidance to staff on issues such as spam and unwanted or malicious emails.
- Ability to travel nationwide, up to 10% annually.
- Performs other duties as assigned.
Requirements
Required Skills & Qualifications
- 4-year degree or equivalent experience/skills
- Ability to use strategic and critical thinking to approach problems and create solutions.
- A passion for cyber security and a keen interest in IT.
- Excellent IT skills, including knowledge of computer networks, operating systems, software, hardware, and security.
- An understanding of the cyber security risks associated with various technologies and ways to manage them.
- A good working knowledge of various security technologies such as network and application firewalls, host intrusion prevention and anti-virus.
- An ability to work under pressure, particularly when dealing with threats and at times of high demand.
- Analytical and problem-solving skills to identify and assess risks, threats, patterns, and trends.
- Teamworking skills to collaborate with team members and clients.
- Verbal communication skills, including presentation skills, with an ability to communicate with a range of technical and non-technical team members and other relevant individuals.
- Written communication skills, for example to write technical reports.
- Time-management and organizational skills to manage a variety of tasks and meet deadlines.
- The ability to multi-task and prioritize your workload.
- Excellent attention to detail
Preferred Skills & Qualifications
- Knowledge of cloud-based systems, particularly Amazon Web Services (AWS) and/or Microsoft Azure.
- Professional certification(s), e.g., Security+, GISF, SSCP, etc.
- Solid understanding of Internet fundamentals (DNS, TCP/IP, HTTP).
- Familiarity with and some ability to code.