Cyber Security Analyst

Mostly Remote Based role (2 Days a month onsite) - Various UK Wide Locations

The Role:

You will be responsible for the continual testing and validation of security controls and SOC detection capabilities, providing assurance that defensive measures remain effective against evolving threats.

• Support the Red Team with the following activities; Red Team Exercises, Critical Control Testing, Cyber Hygiene Assessments and Penetration Testing
• Develop comprehensive and accurate reports for internal audiences, ensuring the grading of vulnerabilities within the context of the client, and passing onto resolver groups for resolution. Ensures resolution is being conducted in line with documented process
• Identify security weaknesses and misconfigurations to ensure they are raised with the appropriate resolver groups
• Contributes to the development of Red Team services through people, process, and technology where appropriate
• Maintains a broad understanding of the external threat environment and attacker tactics, techniques, and procedure
• Proven experience in both infrastructure and web application security testing utilising proven testing methodologies
• Demonstrable experience with open-source security testing tools such as Kali and Parrot operating systems
• An understanding of software engineering principles
• Confident in delivering comprehensive and accurate security testing reports for internal audiences and delivering briefings on the outcome if required
• Broad and detailed experience of technologies including but not limited to firewalls, IDS/IPS, Active Directory, endpoint protection, Windows Server, Linux, TCP/IP, Networks, Cloud, CDN's and Vulnerability Management