Crown Commercial Service

Security Analyst

• Establish and lead newly formed cyber security team reporting to Head of Service and Infrastructure
• Understand, detect and respond to cyber threats and vulnerabilities affecting services
• Lead monitoring, triaging and investigation of security alerts on Azure and AWS platforms
• Review high-priority or high-complexity security event analysis and manage incident response, reporting and escalations
• Lead design, development and enablement of automated monitoring processes and advise on SIEM and network analysis tools and techniques
• Coordinate triage and remediation of identified threats using a risk-based approach with service teams and developers
• Lead wider implementation of a monitoring strategy and ensure roadmaps, requirements, policies and standards are met
• Produce regular reporting delivering insights on security monitoring activities and cyber risk
• Establish understanding of data security and architectures and define requirements to improve security tooling
• Develop and update internal plans, processes and knowledge base articles and support wider Cyber Defence activities
• Line manage, act as escalation point for, and provide coaching and mentoring to Security analysts

Lead Cyber Security Analyst