We’re looking for a Cyber Security Analyst to join us in our Reading office
Security continues to be a pivotal part of any business strategy and we are no different. We are looking to bring on board a Security Operations Analyst to join the Liberty Global team. The GSOC function operates on a shift system operating between 7am to 7pm Monday-Friday with an on-call function. The GSOC Supports Liberty Global by minimising risk exposure and handling security incidents.
What will you be doing?
- To provide security analysis and support throughout the organisation, ensuring security and governance requirements are met, and be proactive in the identification and remediation of security incidents.
- To ensure incidents are logged and reported to the business and 3rd parties as appropriate.
- To utilise the team’s capabilities, including attack detection, vulnerability management, process development and improvement, and mentoring the SOC Analysts.
- To develop and utilise technical expertise in establishing the extent of an attack, the business impact, and advising on how best to contain the incident along with providing advice on systems hardening and/or mitigation measures to prevent a reoccurrence.
- Work closely with other Global Security team members and business units to identify or mitigate threats and support operational teams on security issues, ensuring risks are identified and treated.
- Key team member in Disaster Recovery testing and management.
- Key team member in Audit and Compliance activities.
- Partake in and feedback on test scenarios to build knowledge and ensure completeness for procedures / work instructions.
We tend to look for people with:
Essential:
- Experience in security incident response including assessment of security events, providing advanced technical guidance and leading incidents.
- Experience of working within a Security Operations Centre (SOC).
- Experience in SIEM operation and configuration.
- Experience with Splunk reporting and analysis.
- Experience of working effectively with a variety of stakeholders from different technology and business teams.
- In depth knowledge of advanced security analysis including the cyber kill chain, malware analysis, memory and file system analysis, and attack vectors.
- In depth understanding of IT systems and technologies (e.g. Linux and Windows operating systems, TCP/IP Networking, E-Mail).
- In depth knowledge of technical security systems, security architecture, security technology, and associated penetration testing and Security Event Management methodologies.
- Appreciation of the potential impact of security events and the ability to prioritise them.
- Must have or be able to attain and maintain NPPV SC Clearance.
