Cyber Security Analyst
- Posted 14 days ago
About this job
Technologies
Job description
Cyber Security Analyst
The UK's National Physical Laboratory (NPL) sits at the intersection between scientific discovery and real world application. One of the top three National Measurement Institutes (NMIs) in the world, we now have a regional presence and strategic relationships with Surrey and Strathclyde Universities. Our expertise and original research have benefited UK citizens and the UK economy for over a century.
The role
This role is to manage cyber defences for the organisation, developing network security strategies and controls e.g. firewall, AV, patch management, IPS. Key responsibilities will be to plan strategies to increase our security profile, e.g. achieving quality accreditations, reviewing threat management solutions, developing awareness programmes, maintaining patching compliance, working with external pen testers, provide ‘thought leadership’ etc.
We are looking for someone with an experienced Cyber Security Analyst with a proven track record, however the role might be suitable for an applicant with demonstrable Information Security knowledge such as a senior network infrastructure person (i.e. IT Security Engineer - Firewalls, IPS, IDS,).
Ideally, you will have a security accreditation (CISSP/CCSP or equivalent) or are currently working towards gaining accreditation.
Work experience and accountabilities include:
- Demonstrable experience in Information Security analysis, compliance and administration
- Defining business aligned security policies and procedures
- Achieving compliance with internal and external bodies (e.g. audits and penetration testing)
- Overseeing patch management schedules – Client/Server, FW, Network etc
- Working with IT team to ensure all NPL endpoints are security compliant.
- Recommending and implementing services / new technologies.
- Identity management for on premise and cloud services
- Development of security profiles for mobile workers
- Manage relationships with 3rd party providers
- Forensic investigations relating to malware, intrusion, DoS, breaches and other incidents.
- Work with Corporate Assurance to attain accreditation e.g. Cyber Essentials and ISO standards
- Understanding of information security risk management tools & techniques.
- Experience of managing awareness programmes
Technical Skillset:
‘Experience of the several from the list below essential’
- In depth experience of server OS’s including Windows/Linux/Unix
- Network management - TCP/IP, DNS, HTTP/S etc
- Firewall management
- Application of security controls at all levels of the application stack, network, OS & database
- Vulnerability Management
- IDS/IPS
- Endpoint Protection (including anti-malware, Application Control and Device Control)
- Web/Email Security
- Mobile Device Management
- Identity & Access Management
- Use of Scripting languages, eg: Powershell, Bash, Perl
- SSL Certificate management
- Forward & Reverse Proxies
- SIEM
- Key Management Systems
- Knowledge of intrusion technologies
At NPL we recognise that our success comes from attracting energetic and imaginative people, a reflection of our own values. The self-cultivated atmosphere of support and collaboration is one we are justifiably proud of and at every level, in every area of our business we seek to nurture and respect our people to support each other to grow, succeed and enjoy work. Join us and you’ll soon see how thought leadership and imagination inspire all of us to greater things. It's about challenging complexity and bringing clarity and building relationships that make a difference. We are bold and visionary; we believe that anything is possible at NPL.