security analyst

SF Recruitment

IT Security Analyst with experience monitoring and analysing security threats is sought by a high growth scale up based South Birmingham. Working at the forefront of national security innovation this IT Security Analyst will work closely with within the in-house cyber security team to monitor and triage security alerts alongside assist in vulnerability protection ensuring a high level of cyber protection for this scaling business. This role would suit a IT security Analyst with a couple of years commercial experience who is looking for excellent training, a clear progression pathway and scope to utilise the latest technology to deliver solutions of national significance. This IT Security Analyst based near Birmingham should have most of the following key skills: - At least two years commercial info sec or cyber experience - Root cause analysis skills - A real passion for cyber - Experience creating and maintaining incident logs - strong communication skills with the ability to articulate complex technical concepts to senior non-technical stakeholders - Experience working in a scale up or SME environment would be advantageous - A positive, engaging personality with no ego but the resolve to challenge and question existing process the norm when required This IT Security Analyst based near Birmingham will receive - Generous starting salary - Flexible working - Extensive personal development scheme - 25 days holiday - 10% private pension scheme - Bonus - Private healthcare - Truly autonomous, collaborative culture with extensive growth potential - Regular remuneration reviews So if you are an IT Security Analyst who wants to join a market leading business with innovation at its core please apply now to be considered Birmingham Cyber, information security, cyber essentials, defence, incident logs

IT Security Analyst

Road and Transport, RTA Dubai

Job Title Information Security Analyst - Roads and Transport Authority Dubai Job Description Information Security Analyst - Roads and Transport Authority Dubai Job Location: Dubai, United Arab Emirates Industry: Government Administration Function: Cyber security Gender: Any Candidate Nationality: All Nationalities (Priority for UAE Nationals) Job Type: Full-time Position Overview The Roads and Transport Authority (RTA) in Dubai is hiring an experienced Information Security Analyst to strengthen its cybersecurity framework. This role focuses on implementing security measures, ensuring compliance with international standards, and protecting critical information assets within the organization. What You ll Do * Identify, recommend, and implement corrective actions in response to security violations * Conduct vulnerability research and recommend remediation plans * Analyze and test security controls for compliance with ISO27001, ISR, and other regulations * Perform security assessments to identify vulnerabilities in systems and applications * Monitor, analyze, and escalate security events from incident response queues * Create and maintain IT security standard operating procedures and configuration reports * Conduct technical analysis of malware, intrusion attempts, and system logs * Provide guidance on authentication and access systems aligned with security architecture requirements * Develop and maintain security policies, standards, and procedures to protect information assets * Support IT security awareness programs and assist with staff training initiatives * Perform continuous risk assessments and ensure ongoing compliance with standards * Collaborate with teams to ensure effective incident response and implement best practices Ideal Profile * Bachelor s degree in Computer Science, IT, or Business Administration from a recognized university * Minimum of 3 years of relevant experience in IT security or related fields * Preferred certifications: CISSP, CISM, CISA, GIAC * Working knowledge of ISO27001, ISR, ethical hacking, and penetration testing * Strong project management and analytical skills * Excellent communication and interpersonal abilities * Ability to adapt to multicultural environments and manage multiple priorities effectively

Information Security Analyst

Alvaria

<div><div><div>General Scope &amp; Summary</div></div> 
<ul><li>
Design, develop, review of security systems, procedures, and policies to mitigate security risk to Aspect IT assets.</li><li>
Identify and document security problems, and develop effective strategies to solve them.</li><li>
Work directly with Aspect&rsquo;s IT organization providing security architecture and design guidance for new applications and systems, support to security incident management, technical expertise in support of malware and vulnerability management, and security reviews of applications and services to support Aspect.</li><li>
Support the day to day operations, managing, running and supporting Security Incident and Event Management solution.</li><li>
Develop security incident response plan and disaster recovery and executes tests.</li><li>
Perform security investigation and computer forensic analysis.</li><li>
Develop secure architecture and designs and provide training on security solutions.</li></ul>
PRIMARY ROLE &amp; RESPONSIBILITIES<ul><li>
Assist with installation, configuration and operation SIEM adding new event sources, new alert creation, custom reporting, correlation rules creating and editing, and other advanced enVision features</li><li>
Plan and coordinate exercises to test application and systems recovery and the firm&rsquo;s ability to respond to a systems interruption.</li><li>
Assist in identifying potential information and network security vulnerabilities.</li><li>
Develop and implement solutions to mitigate risks and enhance system security.</li><li>
Analyze and resolve data, application, computer and network security problems and issues.</li><li>
Conduct security investigation and computer forensic analysis.</li><li>
Develop and maintain security reporting dashboards</li></ul><div><div> 
Qualifications</div></div> 
SPECIALIZED KNOWLEDGE &amp; SKILLS<ul><li>
Specialist with advanced skills SIEM life cycle activities; Log generation, collection, aggregation, storage, analysis, alerting and reporting.</li><li>
Specialist multiple security technologies: SIEM, Antivirus, Intrusion Detection Systems, End-point security, Web Proxy/Content Filtering, DLP.</li><li>
CISSP certification preferred not required</li><li>
Ability to communicate complex technical information to non-technical business users</li><li>
Strong customer service and teamwork skills. Professional demeanor to maintain and enhance relationships.</li><li>
Ability to apply advanced principles, theories, and concepts and contribute to the development of innovative principles and ideas. Acts independently to determine methods and procedures on new assignments and may provide guidance to lower level personnel.</li><li>
Capability to work on extremely complex problems where analysis of situations or data requires an evaluation of intangible variables. Ability to provide solutions that are highly creative and to exercise independent judgment in developing methods, techniques and evaluation criteria for obtaining results.</li></ul> 
JOB REQUIREMENTS<ul><li>
2+ years of relevant experience.</li><li>
Bachelor's degree in relevant field.</li><li>
Ability to pass a background check.</li><li>
Physical requirements include sitting for long periods of time.</li></ul></div>

Security Analyst

Compunnel Inc.

<div>
 
 
 Daily Duties / Responsibilities:
 
 
 
 &bull; The Senior ISSO will report to the ISSO Team Lead in OCS and operate as an experienced cybersecurity consultant to Client leadership, business units, business partners and vendors.
 
 
 
 
 
 Security Program Experience:
 
 
 &bull; Leadership experience with CMS MARS-E, ARC-AMPE, or other FISMA Risk Management Framework (RMF) compliant programs is strongly desired and will be given the highest weight.
 
 
 &bull; Experience should include well documented success in the development and maintenance of System Security Plans (SSPs), Privacy Impact Assessments (PIAs), Interconnection Security Agreements (ISAs), Computer Matching Agreements (CMAs), and related interviews and audit/assessment activities to complete and verify these and other RMF/Assessment and Authorization (A&amp;A) tasks and artifacts.
 
 
 &bull; Experience with development and integration of RMF/A&amp;A tasks and artifacts in RMF type roles such as; ISSO, Information Security Architect, Security Control Assessor, etc., into the System Development Life Cycle (SDLC) is ideal.
 
 
 &bull; Experience in security as related to Cloud services and vendor management is considered desirable for this position.
 
 
 
 
 
 Technical Knowledge:
 
 
 &bull; Archer (eGRC)
 
 
 &bull; Enterprise NoSQL Database
 
 
 &bull; IBM System 390/zSeries
 
 
 &bull; Linux and Windows servers
 
 
 &bull; Network Firewalls, Intrusion Prevention Systems (IPS), Switching and Routing Infrastructure
 
 
 &bull; Security Information and Event Management (SIEM) solutions
 
 
 &bull; Identity and Access Management (IAM) solutions
 
 
 
 
 
 General Duties and Responsibilities:
 
 
 &bull; Perform detailed architectural reviews and risk analysis of security related requests in order to make sound decision making recommendations, such as: Network Design and Information Flow, System and Data Access Models, Review Firewall Rule Requests (Ports, Protocols, and Services), Baseline Configuration Management Deviation Requests, Vulnerability Management
 
 
 &bull; Champion the design, development, implementation, and/or ongoing maturation of Client security and compliance efforts.
 
 
 &bull; Audit and assess internal agency systems as well as business partner/service provider information system security controls.
 
 
 &bull; Utilize Microsoft Office software suite, System Center Service Manager (Ticketing system), Archer eGRC system, Bizagi, Atlassian and other products to document and report on information gathered during Audit and Assessment activities or other OCS efforts.
 
 
 &bull; Perform security and compliance reviews of Contracts, Business Associate Agreements, Data Usage/Sharing Agreements, and other types of documents and artifacts.
 
 
 &bull; Serve as primary point of contact for third-party audits and/or assessments of agency and business partner systems
 
 
 &bull; Collaborate with agency leadership, business partners, and other parties/ stakeholders to provide recommendations for security and compliance risk mitigation efforts.
 
 
 
 
 
 Required Knowledge/Skills:
 
 
 &bull; Must have a strong working knowledge of FISMA, NIST, CMS MARS-E and HIPAA Security and Privacy.
 
 
 &bull; 5+ years of experience in IT working with and/or auditing IBM System 390/zSeries, Windows, Linux, Databases (Relational and Non-Relational), Networking Infrastructure, and Web-based Applications.
 
 
 &bull; Prior experience working within a FISMA compliant program.
 
 
 &bull; Prior experience in working with any eGRC systems.
 
 
 &bull; Prior Health Information Technology experience.
 
 
 &bull; ISC(2), ISACA, SANS GIAC and/or other Information Security Certification is required.
 
 
 &bull; Ability to work independently and as a member of a team.
 
 
 &bull; Ability to collaborate and coordinate with multiple teams and vendors.
 
 
 &bull; Ability to multitask and prioritize tasks effectively in order to meet deadlines.
 
 
 &bull; Experience and training with eGRC solutions.
 
 
 &bull; Ability to engage diverse audiences of varying technical and non-technical skill-levels to ensure effective alignment of technical requirements to business objectives.
 
 
 &bull; Ability to collaborate and coordinate efforts amongst multiple teams and vendors in fulfillment of Client OCS initiatives.
 
 
 &bull; Ability to multitask and prioritize tasks effectively in order to meet deadlines in a results-oriented environment.
 
 
 &bull; Must have intermediate to advanced skills in Microsoft Office products (Word, Excel, PowerPoint, Visio) to include working with templates and style guidelines for branding consistency.
 
 
 &bull; Keen attention to detail while maintaining the ability to see the big picture.
 
 
 &bull; Ability to absorb, retain and communicate complex processes.
 
 
 &bull; Ability to accept changes and constructive criticism and remain flexible in dealing with leadership and teams of varying technical and business knowledge.
 
 
 
 
 
 
 Preferred Requirements/Skills:
 
 
 
 &bull; BS degree in computer science or similar discipline or 10+ years of experience in the field or a in a related area.
 
 
 &bull; Prior ITIL experience in the area of Information Security Management.
 
 
 
</div>

Google

<div><h3 class="jobSectionHeader">Minimum qualifications:</h3><ul>
<li>Bachelor's degree or equivalent practical experience</li>
<li>1 year of experience in analyzing cyber threats.</li>
<li>Experience in security analysis, intrusion detection, SQL, malware detection, log analysis.</li></ul> 
<h3 class="jobSectionHeader">
Preferred qualifications:</h3><ul>
<li>Bachelor&rsquo;s degree in Computer Science, Information Technology, or a related field.</li>
<li><div><div>2 years of experience in security operations or assurance.</div></div></li>
<li>Experience in conducting security assessments or reviews to assess underlying risk.</li>
<li>Excellent written communication skills.</li>
</ul><div><h2 class="jobSectionHeader">About the job</h2>
Our team investigates aggregated signals and protects the sensitive data Google holds by ensuring it is accessed appropriately. We work closely with the Detection and Response teams, Threat Analysis Group (TAG) and other partner teams to determine the validity and severity of issues.<div>
The Detection Team develops and maintains the signals, tools, and infrastructure that we use, constantly evolving them to match sophisticated attackers.</div><div></div><div> 
As part of this team, you will be conducting security analysis, threat hunting, as well as malware and indicator analysis. We are responsible for handling all malicious activity on Google's networks. We perform deep analysis of threats on our enterprise, production, and cloud environments.</div>
The Core team builds the technical foundation behind Google&rsquo;s flagship products. We are owners and advocates for the underlying design elements, developer platforms, product components, and infrastructure at Google. These are the essential building blocks for excellent, safe, and coherent experiences for our users and drive the pace of innovation for every developer. We look across Google&rsquo;s products to build central solutions, break down technical barriers and strengthen existing systems. As the Core team, we have a mandate and a unique opportunity to impact important technical decisions across the company.</div><div><h2 class="jobSectionHeader">
Responsibilities</h2><ul>
<li>Analyze, investigate and respond to security alerts</li>
<li>Research new hunt techniques to identify/discover security threats</li>
<li>Automate workflows and develop appropriate tooling to reduce toil</li>
<li>Ensure compliance with legal mandates and internal Security and Privacy policies</li>
<li>Lead response efforts to low severity incidents.</li>
</ul></div>Google is proud to be an equal opportunity workplace and is an affirmative action employer. We are committed to equal employment opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. See also Google's EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know by completing our Accommodations for Applicants form.</div>

Naufar

<div>
 
 
 JOB PURPOSE:
 
 
 
 The Cyber Security Analyst creates a comprehensive program for establishing a Healthcare carrier-class Security Operation Center. S/he develop and maintain threat monitoring and security incident response procedures within Naufar. The analyst designs frameworks, procedures, and toolkits to enhance capabilities in professional forensic collection and digital evidence analysis. S/he also develop dashboards for reporting the organization's threat landscape, Awareness and security posture to senior management. This role is expert role with roles and responsibilities.
 
 
 
 
 
 
 Description
 
 
 <ul>
 <li>
 Develops and implements a cyber-security program to enhance Naufar capabilities regarding Cyber Attack incident monitoring, incidents response and intrusive and non-intrusive forensics capabilities.
 </li>
 <li>
 Develops and matures the service capabilities of the SOC, such as Forensics, Threat Management, Penetration Assessments, and Tool Management.
 </li>
 <li>
 Develops, Contributes and maintains of the cyber security strategy.
 </li>
 <li>
 Implements, configures and maintains security control and process, to ensure threat indicators are rated by severity and responded to in a manner consistent with the threat.
 </li>
 <li>
 Identifies deficiencies and recommends corrective action to strengthen information security control and decrease the risk of data breach.
 </li>
 <li>
 Maintains and updates standard operation policies and procedures for incident response plans, e-discovery processing, remote acquisition/analysis tools, collections and forensic analysis techniques.
 </li>
 <li>
 Maintains industry standard tools and processes used for forensic analysis and eDiscovery collections and processes.
 </li>
 <li>
 Monitors security alerts for potential events/incidents as well as trending and historical analysis and ensuring all incident reports are complete and written within standard operations and ensures ticket audits and reviews are completed
 </li>
 <li>
 Utilizes leading forensic software to identify, collect, preserve and analyze electronic data from laptops, desktops, servers, email archives, infrastructure logs, network file servers, backup tapes, cell phones, PDAs and a wide variety of other media devices.
 </li>
 <li>
 Manages requests for electronic data and digital forensic investigations that relate to Litigation, Regulatory matters, Compliance, and Employee Investigations.
 </li>
 <li>
 Performs cybersecurity incident analysis and assist with incident response, including analysis of network content and metadata for investigations or malware detection and identifies the cause and extent of a breach.
 </li>
 <li>
 Serves as a subject matter expert and technical advisor in matters relating to the proper collection, preservation, packaging, and submission of digital and multimedia evidence.
 </li>
 <li>
 Participates in incident electronic evidence collection activities in major field investigations. Ensures evidence handling requirements are met.
 </li>
 <li>
 Performs post-incident report according to standard operations.
 </li>
 <li>
 Analyzes the tools and methodology used for investigation and accordingly presents improvements in control and corrective actions if any.
 </li>
 <li>
 Escalates and works with senior management on resolutions to overdue security items or any negative trends identified.
 </li>
 <li>
 Develops focused reporting and briefings for advanced cyber threats.
 </li>
 <li>
 Conducts studies and research for improving forensic analyses, scientific methods, and resolving forensic examination problems.
 </li>
 <li>
 Creates detailed, professional documentation and reports, including performance metrics and presentations for management.
 </li>
 <li>
 Leads or contributes to key projects related to corporate threat monitoring, forensics or information security initiatives.
 </li>
 <li>
 Facilitates group risk assessment activities and identifies any security-related process improvement opportunities.
 </li>
 <li>
 Monitors and performs trending on root cause analysis activities within assigned group and participates as needed to resolve clinical systems security related incidents.
 </li>
 <li>
 Assists on monitoring compliance with information security policies, standards and ENTERPRISE-WIDE strategy and facilitates threat and vulnerability evaluations on a regular basis. Measures and reports on the effectiveness of information security controls.
 </li>
 <li>
 Supports the security initiatives, corrective and preventative actions, and security measures by ensuring timely updates and escalating concerns and non-compliances.
 </li>
 <li>
 Understands and maintains the appropriate knowledge of Security Technologies, (Firewall, Anti-Virus, Email and Web Encryption, HIPS, NIPS, SIEM, WAF, DLP), security procedures, and services within Naufar IT Security as well as ensures all tools are functioning properly.
 </li>
 <li>
 Keeps up to date on changes to significant regulatory and applicable standards issued by internal or external agencies, as applicable to the Naufar&rsquo;s domain.
 </li>
 <li>
 Adheres to Naufar&rsquo;s standards as they appear in the Code of Conduct and Conflict of Interest policies
 </li>
 </ul>
 
 
 
 
 
 Academic Qualifications:
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree &ndash; IT - Mandate
 </li>
 <li>
 Master&rsquo;s degree &ndash; Cybersecurity - Desired
 </li>
 </ul>
 
 
 
 
 
 Experience Requirements:
 
 
 <ul>
 <li>
 8+ years of experience working as a security analyst or SME within a Security Operations Center with exposure to cyber security collection, analysis and threats management, investigation and digital forensics.
 </li>
 <li>
 Demonstrated experience in threat detection and analysis, incident response, and reporting.
 </li>
 <li>
 Demonstrated experience with incident response, deep dive forensics, insider threat, cyber and data exfiltration incidents.
 </li>
 <li>
 Demonstrated experience conducting assessments, digital forensic investigations, vulnerability management and incident response.
 </li>
 <li>
 Demonstrated experience with current cyber threats and the associated tactics, techniques, and procedures used to infiltrate computer networks.
 </li>
 <li>
 Demonstrated experience with SEIM products in the detection, response, mitigation, and/or reporting of cyber threats
 </li>
 <li>
 Demonstrated experience in the use of forensic tools (e.g. FTK, Encase, Forensic Toolkit, X-Ways, Linux based tools, etc.)
 </li>
 <li>
 Experienced with (or equivalent) the following regulations and frameworks: PCI, HIPAA, and ISO/IEC 2700x
 </li>
 </ul>
</div>

Cyber Security Analyst

Stock Yards Bank & Trust

<div>As an I.T. Security Analyst, your day will be filled with opportunities to manage the Bank&rsquo;s vulnerability and Patch Management Initiatives. 


Responsibilities

Daily responsibilities include, but are not limited to, the following:
<ul>
<li>Monitor, test and install all vendor patches for servers and endpoints</li>
<li>Investigate identified vulnerabilities and develop appropriate remediation strategies</li>
<li>Work with Information Security team to manage and ensure all vulnerability &amp; compliance reporting is accurate and up to date</li>
<li>Management of Endpoint Security Platforms</li>
<li>Other duties as assigned</li>
</ul>
Job Requirements

The successful candidate will have the following qualifications:
<ul>
<li>CCNA, MCSA, or Network+ required</li>
<li>Associates or Bachelors in computer science or related field preferred. Relevant work experience may be substituted</li>
<li>3-5 years supporting a corporate IT infrastructure in the role of Systems and/or Security Administrator</li>
<li>Ability to be on-time and work flexible schedules</li>
<li>Ability to diagnose and correct issues with the IT infrastructure</li>
<li>Ability to effectively handle multiple projects/assignments concurrently</li>
<li>Have a results-oriented mentality while working with a sense of urgency</li>
<li>Effective time management skills</li>
<li>Ability to work independently with little direction as well as part of a team</li>
<li>Self-motivated, dependable and trustworthy</li>
<li> Effective written and oral skills</li>
<li>Ability to communicate and collaborate across all levels of the organization</li>
<li>Ability to analyze complex issues and evaluate cause &amp; effect scenarios while under pressure</li>
<li>Desire for continuous learning
</li><li>Professional appearance and demeanor</li>
</ul>
Specialized
<ul>
<li>Cisco Enterprise Security Appliance</li>
<li>DHCP and DNS</li>
<li>Forcepoint DLP</li>
<li>Sentinel One EDR</li>
<li>Microsoft Active Directory &amp; GPO</li>
<li>Microsoft Windows 11</li>
<li>Microsoft Windows Server</li>
<li>Tenable Vulnerability Scanning</li>
<li>Manage Engine Endpoint Central</li>
</ul>
Benefits
<ul>
<li>401(k) with a company match of up to 6%</li>
<li>ESOP employer match</li>
<li>Medical insurance</li>
<li>Dental insurance</li>
<li>Vision insurance</li>
<li>Cancer / Disease insurance</li>
<li>Accident insurance</li>
<li>Flexible Spending Accounts</li>
<li>Health Savings Accounts</li>
<li>Bank paid Life / AD&amp; D insurance</li>
<li>Voluntary Life / AD&amp;D insurance</li>
<li>Bank paid Short-Term and Long-Term Disability insurance</li>
<li>Employee Stock Purchase Plan</li>
<li>Employee Assistance Program</li>
</ul>
Physical Requirements

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

This position requires the ability to lift equipment such as servers, routers, switches, as well as the possibility of computers and printers. This position involves sitting as well as walking and standing. All work occurs indoors and within the office and data center with occasional travel outside the office to remote locations. The noise level in the work environment is usually moderate.
Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities 
This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.</div>

IT SECURITY ANALYST

Search 10000+ Security analyst jobs near you this November. New roles added regularly across leading industries. Apply today.

10000 security analyst jobs NEAR_ME

IT Security Analyst

Information Security Analyst

Security Analyst

Security Analyst

Security Analyst

Cyber Security Analyst

IT SECURITY ANALYST