Senior Cyber Security Analyst
Job Description:
The Opportunity
At Leonardo, we have a fantastic new opportunity for a Senior Cyber Security Analyst. Leonardo is a global high-tech company and one of the key players in Aerospace, Defence and Security. Headquartered in Italy, Leonardo has over 45,000 employees, of which 7,000 are based in the UK.
We are looking for a Senior Cyber Security Event Analyst to join the ARCHANGEL Protective Monitoring (ProMon) Team. ARCHANGEL delivers specialist technical cyber security services to a range of clients across a variety of industries including government, defence, homeland security, CNI and aerospace. The ARCHANGEL ProMon Team sits within the Bristol Security Operations Centre (SOC) and is responsible for providing thorough initial investigation into anomalous network activity that may lead to potential security incidents.
You will be joining our highly skilled team at our Bristol site. This is a great opportunity to bring your talents and form an integral part of Leonardo's future. We can help you develop your skills and offer great opportunities to develop and grow, so why not join us!
WHAT YOU’LL GET
* Flexible working: We offer our employees the time and flexibility they need to enjoy a balanced life through flexible hours and part time options.
* Custom working: The role may be a mixture of home-based and onsite.
* Flexible benefits: Our company-funded approach to flexible benefits allows employees to make choices appropriate for them.
* Training: Free access to professional learning platforms that provide more than 4,000 online courses. We also offer our team GOLD standard professional certification training such as SANS.
* Employee Assistance Programme: Providing free and confidential mental health support.
* Annual leave: We offer 25 days holiday, plus 8 bank holidays and twelve flexi days.
What you will do
* Analyse network, application, and system events to identify any potentially abnormal system behaviours and raise them as incidents for investigation.
* Perform and lead proactive analysis and threat hunting across client networks from knowledge of current threats and trends.
* Ensure all operational incidents, on-going tickets and relevant information is handled correctly in line with the Incident Handling processes.
* Produce operational reporting to support both customer and internal information exchanges and briefing and awareness requirements.
* Maintain a broad and current understanding of evolving threats and vulnerabilities to ensure the maintenance of the security of our client networks.
* Continually assess and maintain the SOC use cases and playbooks for the Archangel SOC to maintain excellence within the service.
* Act as a protective monitoring and SIEM SME during normal operations and as part of project teams looking to develop new solutions and capabilities.
* Provide continuous SME support, updates, and recommended courses of action for on-going incidents raised within the SOC.
* Ensure sufficient staffing levels are available to meet the minimum staffing requirements of the shifts to maintain 24/7/365 operations.
* Support analyst training, user awareness, mandated security education as required or specified.
* Sustain and manage the coaching and mentoring of Protective Monitoring Analysts.
What we are looking for
You must be eligible for Security Clearance.
Essential
* Experience in cyber security including protective monitoring and incident response.
* SIEM (LogRhythm, Splunk, etc) and IDS (Snort) experience.
* Network and Host security experience.
* Threat intelligence and Threat Hunting.
* Excellent communications skills.
* Mentoring and coaching.
* Ability to gain SC Clearance.
Desirable
* SANS SEC 503 Intrusion Detection in Depth or equivalent.
* SANS SEC 504 Incident Handling, Hacker Tools, and Techniques or equivalent.
* SANS SEC 508 Advanced Incident Response, Threat Hunting, and Digital Forensics or equivalent.
* SANS SEC 511 Continuous Monitoring and Security Operations or equivalent.
We are relentless about inclusion. We understand an inclusive environment is one that welcomes everyone as they are.
Primary Location: GB - Bristol - Coldharbour Lane
Contract Type: Permanent
Hybrid Working: Hybrid
#J-18808-Ljbffr