Security Analyst

Job Description

Security Analyst – Remote – 45- 55kBallyvesey Holdings is the privately owned parent company of a wide range of trading subsidiaries. Established in 1970, the group’s main activities are centered around commercial vehicles in transport and logistics, vehicle rental, truck and van sales, aftersalessupport and maintenance, trailer manufacturing and spare parts sales, transport industry services, construction equipment sales and rental, and property development.The Security Analyst is an important new hands-on role, sitting within the Security and Governance function who are responsible for setting security and governance polices relating to Information and Cyber Security in all areas of the business, and worktowards the company’s continual improvement of security posture and maturity level.Accountabilities

• Continuous monitoring of the network, cloud and systems using available tools
• Provide prompt and effective triage and investigation of security events and incidents, applying sound problem-solving methods to determine scope, urgency, potential impact and respond with appropriate countermeasures
• Documentation of incidents investigations, maintaining detailed records of evidence including remediation efforts. Ensuring correct chain of custody is followed at all times.
• Contributing to the continuous development of incident handling and readiness processes
• Enhancing and creating analytic triggers to enhance alert efficacy
• Maintain rulesets within security systems to ensure an appropriate security / operational balance
• Conduct or assist with security assessments and risk analyses to identify potential security threats and vulnerabilities
• Assess information security risk through qualitative and quantitative risk analysis as required
• Develop security reports and dashboards to help proactively reduce the risk of IT security incidents
• Collate up to date Security Intelligence Information on emerging cybersecurity threats, vulnerabilities, and industry trends and produce frequent intelligence briefings
• Evaluate and recommend security solutions, technologies, and tools to enhance our cybersecurity infrastructure
• Support the business by contributing to tender questionnaires and similar
• Work closely with the Internal Audit team for compliance in security areas and certifications
• Provide assistance and advise to out of hours engineers, if called upon, and have the confident to make decisions quickly and without immediate input and advice

Specific requirements

• Extensive technical knowledge and experience working with and maintaining SIEM, SOAR, DLP and EDR tools
• Demonstrable skills in intrusion analysis, and network and security investigation using a variety of available tools
• A very good understanding of security principles, tools and technologies
• Excellent knowledge of security protocols and procedures
• Experience in virtual private network technologies
• Experience with security event monitoring and logging solutions
• Hands-on experience in cloud architecture with a focus on cloud security principles
• A passion for security but also pragmatic
• Practical knowledge of relevant certifications such as ISO27001, PCI/DSS, Cyber Essentials
• Practical understanding of IT and cyber security governance
• Ability to translate technical knowledge into educational material
• Knowledge and experience with threat intelligence
• Pro-active and self-disciplined: a highly motivated individual who can evidence their successes in developing themselves
• Familiarity with data protection concepts, regulatory requirements, and compliance issues relevant to security and data protection within a large organization
• Understanding of applying the General Data Protection Regulation (GDPR)
• Understand modern threat actors, and how they operate
• Valid drivers license and reliable transportation

• Experience supporting Incident Response engagements
• Experience in network, cloud and endpoint based investigations

• A strong understanding of networking models, Windows server/Microsoft 365, firewall rulesets, application security and internal & external network security

• Able to communicate effectively without technical jargon

Desirable

• Experience working with Darktrace Detect & Respond and McAfee/Trellis DLP
• Experience working in CSIRT functions
• Experience of Cyber Essentials and ISO 27001 certifications
• Interest in Automation

At Ballyvesey Holdings your right to privacy is important to us. By applying for this job, your information will be entered into our recruitment system. This will enable you to register for job alerts, apply for jobs and for us to help you find your nextrole. To read our full privacy policy please follow the link: https://privacy-policy/