Cyber Security Analyst

at  Benefact Group

Working hours: 35 hours per week, Monday to Friday
Duration: Permanent
Location: Gloucester
Job Ref: 202824

KNOWLEDGE, SKILLS AND EXPERIENCE

• Proven experience providing cyber security analyst services.
• Degree-level qualification in Computer Science, Information Technology or a related field, or equivalent experience.
• An understanding of the incident response process.
• An understanding of enterprise ICT and security principles.
• An understanding of cloud security concepts and technologies.
• Excellent communication and collaboration skills.

ABOUT US

Benefact Group is a unique international financial services Group made up of over 30 businesses. We are owned by a charity and are currently the UK’s 3rd largest corporate donor, having given away £200 million since 2016. We have ambitious plans to become the UK’s number one corporate donor, with strategic objectives in place to double the Group’s size.
We believe it’s essential to attract, empower, grow and reward talented people, offering fantastic opportunities for career and personal development. Our giving ethos, 135-year history and the diversity of what we do, has enabled us to build a culture of kindness, great ambition, and of passionate people driven to do better and be better.
At Benefact Group, we are committed to creating an inclusive culture and building an environment where each and every one of us feels valued and respected. We are a community made up of people with a range of different backgrounds, abilities, perspectives, beliefs and interests and we value the strength this brings to us as a Group. We welcome applications from everyone.
If you need any additional support during the recruitment process, then please let us know.

ABOUT THE ROLE

Benefact Group are looking for a Cyber Security Analyst to join our Gloucester office.
You will play a critical role in safeguarding the organisation’s digital assets by being a pivotal line of defence from cyber related threats to the Group.
In this role you will be investigating cyber security attacks that have been triaged by a security partner, providing further business context to the output, and taking necessary steps to identify and remediate any threats. You will be using Threat Intelligence to guide both proactive investigations staff awareness training, and security detection tuning.
You will be working with a modern technology stack with a focus towards cloud technologies.
This is a great opportunity for development both on a technical and client service level.

KEY RESPONSIBILITIES

• Our MDR provider manages the triaging of alerts from our security tooling. For those deemed a threat you will be, conducting additional investigations, provide business context, and take necessary remediation steps. You will also operate as part of the incident response function in any cases deemed and incident.
• Conduct initial investigations for phishing investigations.
• Assist senior members of the team with the tuning of detections for security tools such as EDR, WAF, IDS/IPS, and others.
• Utilise Threat Intelligence from private and public sources to ensure that actions being taken are in line with the real-world threat to the group.
• Assist senior members of the team with the development staff awareness training to mature the security culture across the group.
• Conduct initial responses for tickets that get allocated to the security team.