Lead Security Analyst

Job Description

Lead Security AnalystSalary -£43,889 - £46,483Contract type -PermanentWorking pattern- HybridLocation - Taunton, UKJob summaryHere at the UK Hydrographic Office, we have an exciting opportunity for a talentedLead Security Analystto join our Security Operations Centre (SOC) team. The team are responsible for identifying, investigating and resolving cyber securityincidents, and is part of the wider Information Security Team.The role will be contractually based in Taunton, but we have embraced hybrid working, recognising it is about what you bring to the role and deliver, not where you work from. You can expect to have to come into the office 1 to 2 days per week.Join us and help support safe, secure and thriving oceans.The UK Hydrographic Office (UKHO) is a world-leading centre for hydrography, specialising in marine geospatial data that helps those at sea to navigate safely and to unlock a deeperunderstanding of the worlds oceans.Please note: This role requires Developed Vetting (DV) Clearance.Job descriptionYou will use your experience and in-depth knowledge of cyber-attack methods and techniques to lead the Security Operations Centre security monitoring activities across a truly hybrid technical estate consisting of bothon-premise and multi-cloud deployments.Continuous improvement is a key part of this role, and you will be expected to identify and implement lessons learned from security incidents as part of a continuous improvement cycle. This is a leadership position and youll be responsible for managing andmentoring junior Security Operations Centre staff.You will lead incident responses and enhance incident response protocols and processes for communication within the organisation. Produce detailed incident reports and technical briefs for management and external stakeholders as required. You will design andconduct regular exercises to test incident response procedures.Person specificationAs ourLead Security Analyst,you will:

• Lead the Cyber Security Operations Centre (CSOC) to monitor and defend the multiple UKHO networks against all cyber threats, providing expert advice to junior SOC staff.
• Lead the vulnerability management program to ensure that critical/High vulnerabilities are detected and remediated.
• Develop CSOC processes, procedures and playbooks to improve the CSOC operational effectiveness and efficiency.
• Analyse lessons learned and produced thorough documentation on complex incidents focussing on the improvements that can be made to processes, playbooks, and tooling.
• Define and implement the CSOC roadmap and monitoring strategy.
• Ensure proper monitoring and response plans are in place to enable the timely and effective response to, and management of, incidents, alarms, notifications, calls and other activities related to the CSOC and new cyber threats.
• Work with Engineering teams in relation to new developments and solution testing.
• Line manage a small team of SOC Analysts.

SCReservedThis is a Ministry of Defence reserved post and is open to UK nationals only, successful applicants will require a security clearance (SC) and therefore need to have resided in the UK for a minimum of 12 consecutive months within the last 5 years. Due to thenature of this role, a higher level of clearance is required (Developed Vetting).Technical skillsWell assess you against these technical skills during the selection process:

• Excellent knowledge of cybersecurity technologies, trends and strategy - including cyber threat landscape, adversary methodologies and cyber defence strategies
• Previous experience working in a lead role in one of the following security areas: CSOC Analyst, Malware Researcher, Threat Analyst
• Expert understanding and demonstrable experience of security log analysis, security analytics, EDR, SIEM and other monitoring platforms
• Advanced understanding and demonstrable experience of network architecture, IT infrastructure, applications, and systems. Including an understanding of cloud services such as Azure and AWS
• Solid knowledge of various information security frameworks, for example the MITRE Attack Framework
• Lead role experience of cyber incident response and management and proven experience in integrating cyber threat intelligence into the CSOC process.

BenefitsWe offer a range of benefits to support your lifestyle, including generous leave allowances, flexible working hours, enrolment in the Civil Service Pension scheme, and regular training and development opportunities.We operate from a brand-new state of the art, award-winning building with an onsite gym, cafeteria, and state of the art meeting rooms; a Chaplaincy service; and an Employee Assistance Programme. We have several internal networks available for you to join,including Mental Health Group, STEM Ambassadors, Womans Network, Pride Network and Disabilities group. Travelling to UKHO onsite parking, electric car charging ports, and cycle-to-work scheme are available.Full-time employees receive 26.5 days annual leave per year, increasing to 31.5 days annual leave after five years service (pro-rata for part-time employees).We offer many flexible working options. These include: ...