senior security analyst

Eventus Security Pvt. Ltd

We are seeking a dynamic and experienced cybersecurity professional to join our Security Operations Center (SOC) team. If you're a Saudi national passionate about cybersecurity, incident response, and threat intelligence, this is your opportunity to make a national impact.Location: Saudi Arabia Position: Senior Security Analyst Preference: Saudi nationals Department: Security Operations Center (SOC)Key Responsibilities<ul><li>Monitor and analyze security technologies such as IDS/IPS, Firewalls, VPNs, and Switches.</li><li>Investigate and respond to security incidents using SIEM and XDR tools.</li><li>Develop and implement incident response procedures within defined SLAs.</li><li>Perform threat hunting, forensic log analysis, and generate quality security reports.</li><li>Work closely with internal teams and clients to resolve and document incidents.</li><li>Mentor junior analysts and contribute to team knowledge-sharing.</li><li>Create and maintain technical documentation and threat intelligence reports.</li><li>Develop SIEM content, drive automation (SOAR), and contribute to continuous improvement.</li><li>Engage in on-site incident response activities when needed.</li></ul>Qualifications &amp; Skills<ul><li>Minimum 4+ years of cybersecurity experience.</li><li>Bachelor&rsquo;s or Master&rsquo;s degree in Cybersecurity, IT Security, or a related field.</li><li>Hands-on experience with XDR, SIEM platforms (Splunk, ArcSight, QRadar, LogRhythm), and incident handling.</li><li>Strong understanding of MITRE ATT&amp;CK, Cyber Kill Chain, and network protocols (TCP/IP).</li><li>Preferred certifications: OSCP, CISSP, CCIE, GCIH, GCIA, etc.</li><li>Ability to analyze and interpret logs from various system and security sources.</li><li>Fluent in English; Arabic is a plus.</li><li>Strong communication, leadership, and mentoring abilities.</li></ul>Why Join Us?<ul><li>Be a part of a critical national SOC team protecting vital infrastructure and enterprise networks.</li><li>Work with advanced threat detection tools and contribute to real-time security defense.</li><li>Collaborate with top-tier cybersecurity professionals and grow in a high-impact environment.</li></ul>Interested candidates (Saudis preferred) can apply now or send their CV to [alisha.mulla@eventussecurity.com] with the subject line:Application &ndash; Senior Security Analyst &ndash; Saudi ArabiaJob Type: Full-timePay: From &#65020;5,000.00 per monthApplication Question(s):<ul><li>Current Salary per month in SAR</li><li>Expected Salary per month in SAR</li><li>Nationality</li><li>Notice Period</li><li>Current Location</li></ul>Experience:<ul><li>SOC: 3 years (Required)</li></ul>Location:<ul><li>Jeddah (Required)</li></ul>

Senior Security Analyst

All jobs

<div>
 
 Why choose Logicalis?
 
 
 
 As Architects of Change, Logicalis' focus is to design, support and execute clients' digital transformation by uniting their vision with their technology expertise and industry insights. The company, through its deep understanding of key IT industry drivers such as security, cloud, data management and IoT, can address customer priorities such as revenue growth and business, operational efficiency, innovation, risk and compliance, data governance and sustainability.
 
 
 We strengthen our purpose: to design, support, and execute our customers' digital transformation by converging their vision with our technological expertise and knowledge of the industry. The brand refresh underpins both the evolution of Logicalis&rsquo; positioning as well as our strategic vision for growth.
 
 
 
 Job Responsibilities:
 
 
 
 
 Detection Engineering
 
 
 
 <ul>
 <li>
 Design, develop, and deploy high-fidelity detection rules in SIEM (Splunk, Microsoft Sentinel, Devo, QRadar, EDR, etc.).
 </li>
 <li>
 Create custom use cases to detect MITRE TTPs aligned with real-world threats and red team activities.
 </li>
 <li>
 Conduct detection gap analysis, tune alerting mechanisms, and eliminate false positives at the MSS customer environment
 </li>
 <li>
 Perform regular fine-tuning and optimization of detection rules, correlation logic, and alert thresholds across SIEM, EDR, and other security platforms to enhance detection accuracy and reduce false positives.
 </li>
 <li>
 Continuously assess detection efficacy based on incident feedback and threat landscape evolution, implementing improvements accordingly.
 </li>
 <li>
 Collaborate with red/purple teams to validate detection logic and build threat-informed defenses.
 </li>
 <li>
 Regularly review, update, and enhance detection logic to ensure alignment with the latest threat intelligence, adversary TTPs, and evolving attack techniques.
 </li>
 <li>
 Maintain relevancy and effectiveness of security detections by incorporating insights from threat hunts, incident response cases, red team exercises, and industry best practices.
 
 
 </li>
 </ul>
 
 Threat Hunting and Threat Intel:
 
 
 
 <ul>
 <li>
 Proactively hunt for advanced threats across on-prem and cloud environments using telemetry from SIEM, EDR, NDR, and threat intelligence.
 </li>
 <li>
 Develop hypotheses based on TTPs, threat intelligence feeds, and incident trends.
 </li>
 <li>
 Use frameworks like MITRE ATT&amp;CK and Diamond Model to structure hunting campaigns.
 </li>
 <li>
 Document hunt procedures and outcomes to support knowledge sharing and continuous improvement.
 </li>
 <li>
 Map threat actor TTPs to frameworks such as MITRE ATT&amp;CK to support proactive defense strategies and inform detection engineering efforts.
 </li>
 <li>
 Provide actionable threat intelligence to SOC, detection engineering, and IR teams to inform custom detection rule development, prioritization of hunts, and incident scoping
 </li>
 <li>
 Contribute to the threat intelligence lifecycle, including direction, collection, processing, analysis, dissemination, and feedback.
 </li>
 <li>
 Ingest, analyze, and operationalize threat intelligence from internal sources, commercial feeds, and open-source intelligence (OSINT) to enrich detection logic, threat hunting hypotheses, and incident investigations
 </li>
 <li>
 Collaborate with internal and commercial threat intelligence teams to contextualize IOCs and TTPs for targeted and industry-specific threats.
 </li>
 <li>
 Maintain up-to-date threat intelligence repositories and contribute to the continuous improvement of threat intel processes and playbooks
 
 
 </li>
 </ul>
 
 Incident Response:
 
 
 
 <ul>
 <li>
 Lead incident response lifecycle (detection, triage, containment, eradication, recovery).
 </li>
 <li>
 Handle security incidents tickets escalated by Level II team, and draft security incident report covering the root cause, forensic evidence, and recommended mitigation plans
 </li>
 <li>
 Conduct/support forensic analysis of endpoints, logs, and network traffic to determine root cause and impact.
 </li>
 <li>
 Coordinate with internal stakeholders and external partners during critical incidents.
 </li>
 <li>
 Develop and maintain playbooks, runbooks, and incident reports.
 </li>
 <li>
 Digital Forensics and Incident Response (DFIR) experience is a strong added advantage, enabling deeper investigations and root cause analysis.
 
 
 </li>
 </ul>
 
 Collaboration &amp; Mentorship :
 
 
 
 <ul>
 <li>
 Mentor and support L1/L2 SOC analysts in investigations, tool usage, and processes.
 </li>
 <li>
 Participate in tabletop exercises and red/purple team assessments.
 </li>
 <li>
 Lead and conduct regular customer meetings to review SOC activities, including security posture, key metrics, and ongoing initiatives.
 </li>
 <li>
 Prepare and deliver detailed briefings on priority incidents, RCA, ensuring timely communication of root cause, impact analysis, mitigation steps, and next actions.
 </li>
 <li>
 Act as a primary point of contact for Incident escalations and maintain consistent, professional engagement with client stakeholders.
 </li>
 <li>
 Coordinate with cross-functional teams including Engineering, Development, Red Team, and Risk/Compliance.
 </li>
 <li>
 Identify gaps in existing SOC process and work with team members or other departments to create, modify standard operating procedures, to automate any mundane daily operational activities, ensuring Ops are run efficiently.
 
 
 </li>
 </ul>
 
 Requirements:
 
 
 
 <ul>
 <li>
 Candidate should have at least 8-10 years of working experience in SOC and MSS environments,
 </li>
 <li>
 Bachelor's degree in computer engineering, Computer Science, Cyber Security, Information Security, or other equivalents.
 </li>
 <li>
 Excellent hands-on experience in implementations, incident analysis of Splunk, IBM QRadar, Azure Sentinel SIEM (Security Information and Event Management) &amp; Devo technologies.
 </li>
 <li>
 Hands on experience on any Endpoint Protection (EPP) or Endpoint Detection Response (EDR) technologies. Preferred if CrowdStrike, Microsoft Defender.
 </li>
 <li>
 Hands on experience on SOAR (Security Orchestration, Automation, and Response) technologies.
 </li>
 <li>
 Experience in malware analysis for Windows and Linux/Mac.
 </li>
 <li>
 Exposure to firewall technologies such as Cisco, Palo Alto, Checkpoint, Fortinet.
 </li>
 <li>
 Good understanding of WIN, LINUX environments and well versed with basic LINUX commands and troubleshooting, with proven Unix (Solaris, Linux, BSD (Bumi Serpong Damai)) experience.
 </li>
 <li>
 Knowledge of any shell scripting language and applying it to automate mundane operations tasks
 </li>
 <li>
 Knowledge of current cyber threats, attack vectors, vulnerabilities, and threat intelligence feeds.
 </li>
 <li>
 Ability to work effectively in a team environment, collaborate cross-functionally, and mentor junior analysts
 </li>
 <li>
 Candidate should have at least one SANS certification. Preferred if that is GCIH
 </li>
 <li>
 Good understanding of basic network concepts and advantages of exposure to cloud technologies.
 </li>
 <li>
 Lateral thinking combined with excellent troubleshooting skills, preferably with experience following ITIL (Information Technology Infrastructure Library) standards
 </li>
 <li>
 Lead team of security analysts, develop SOC standard operating procedures and develop Threat Intel feeds such as MISP.
 
 
 </li>
 </ul>
 Interested applicants please submit your application with your expected salary and notice period to be considered for the role.
 
 
 We regret that only shortlisted candidates will be notified.
 
 
 As part of any recruitment process, we collect and processes personal data relating to job applicants. We are committed to being transparent about how we collect and use that data and to meeting our data protection obligations. By applying to this post and sending us your resume, you agree to the collection, use and/or disclosure of your personal data in the manner as set out in our Data Protection Notice for Job Applicants which can be found
 
 
 Logicalis is committed to protecting your privacy.
 
 
 Click below to view the data protection notice.
 
 
 https://ap.logicalis.com/sites/default/files/2022-10/PIMS-A7.3-01%20Attachment%20I%20DP%20Notice%20for%20Job%20Applicants_updated9sept22.pdf.
</div>

Acronis

<div>
 Acronis is revolutionizing cyber protection&mdash;providing natively integrated, all-in-one solutions that monitor, control, and protect the data that businesses and lives depend on. We are looking for a Senior Security Compliance Analyst to join our mission to create a #CyberFit future and protect all data, applications and systems across any environment.
 
 
 The Senior Security Compliance Analyst is a senior role within the organization, responsible for ensuring that the company's complies with relevant data protection regulations and industry standards. This position involves conducting compliance audits, developing and implementing security policies, and working cross-functionally to manage risk and ensure best practices in information security. As Senior Security Compliance Analyst you should be able independently lead at least one compliance project.
 
 
 
 What You'll Do
 
 
 
 <ul>
 <li>
 Ensure compliance with regulations and standards such as ISO 2700x, ISO 22301, PCI DSS, GDPR, HIPAA, IT-grundschutz, TISAX, C5, etc.
 </li>
 <li>
 Conduct regular audits and assessments to identify compliance gaps and areas for improvement.
 </li>
 <li>
 Perform risk assessments and develop strategies to mitigate identified risks.
 </li>
 <li>
 Collaborate with assets owners and other departments to implement risk management strategies.
 </li>
 <li>
 Ensure that policies and procedures are up-to-date and compliant with all applicable laws and regulations;
 </li>
 <li>
 Develop and deliver security awareness training programs to educate employees on security best practices and compliance requirements.
 </li>
 <li>
 Participate in incident investigations and recommend improvements to prevent future incidents.
 </li>
 <li>
 Facilitate suppliers' risk assessment process;
 </li>
 <li>
 Respond to clients and regulatory due-diligence requests;
 </li>
 <li>
 Work closely with IT, legal, and other departments to ensure integrated security compliance efforts.
 </li>
 <li>
 Prepare and present compliance reports to senior management, identifying trends and recommending improvements.
 </li>
 <li>
 Fulfill the obligations stipulated by the job description, company policies, assigned roles and direct instructions from the manager.
 
 
 </li>
 </ul>
 
 Who We&rsquo;re Looking For
 
 
 
 <ul>
 <li>
 At least 5 years of experience, 2 years of which in any security domain area;
 </li>
 <li>
 Strong understanding of international laws, regulations and standards: ISO 2700x, ISO 22301, PCI DSS, IT-grundschutz, TISAX, C5, Privacy regulations (GDPR, LGPD, CCPA, HIPAA, and etc.);
 </li>
 <li>
 Deep knowledge and hands on experience of implementation of ISO 2700x, ISO 22301, PCI DSS;
 </li>
 <li>
 Experience developing related documentation (security policies and procedures);
 </li>
 <li>
 Experience in conducting security audits and assessments;
 </li>
 <li>
 Excellent analytical and problem-solving skills
 </li>
 <li>
 Advanced English (oral, writing and reading skills), additional language is a plus (DE, ES, FR);
 </li>
 <li>
 Privacy and Security certifications are plus (CISSP, CISM, CISA, CIPP and etc.).
 </li>
 <li>
 Ability to adapt to a dynamic environment and manage multiple priorities effectively.
 </li>
 <li>
 Communicative and fast-learning.
 </li>
 <li>
 Please submit your resume and application in English
 
 
 </li>
 </ul>
 
 Who We Are
 
 
 
 A Swiss company founded in Singapore in 2003, Acronis offers over twenty years of innovation with 15 offices worldwide and more than 1800 employees in 50+ countries. Acronis Cyber Protect is available in 26 languages in 150 countries and is used by over 20,000 service providers to protect over 750,000 businesses.
 
 
 Our corporate culture is focused on making a positive impact on the lives of each employee and the communities we serve. Mutual trust, respect and belief that we can contribute to the world everyday are the cornerstones of our team. Each member of our &ldquo;A-Team&rdquo; plays an instrumental role in driving the success of our innovative and expanding business. We seek individuals who excel in dynamic, global environments and have a never give up attitude, contributing to our collective growth and impact.
 
 
 
 OUR INTERVIEW PRACTICES
 
 
 
 To maintain a fair and genuine hiring process, we kindly ask that all candidates participate in interviews without the assistance of AI tools or external prompts. Our interview process is designed to assess your individual skills, experiences, and communication style. We value authenticity and want to ensure we&rsquo;re getting to know you&mdash;not a digital assistant. To help maintain this integrity, we ask to remove virtual backgrounds and include in-person interviews in our hiring process.
 
 
 Use of AI-generated responses or third-party support during live interviews may be grounds for disqualification from the recruitment process and a full criminal, education and identification background check is required for all new hires.
 
 
 
 Acronis is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, marital status, national origin, physical or mental disability, medical condition, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, gender identity or expression, or any other characteristic protected by applicable laws, regulations and ordinances.
 
</div>

Senior Security Compliance Analyst

Senior Cyber Security Analyst (Ops - Cloud) The Senior Security Analyst (Ops) sits within the Protective Monitoring function of the Cyber Security Operations Centre (CSOC). The CSOC is made up of Protective Monitoring, Incident Management, Threat Operations, Engineering and Consultancy. The role is a Tier 3 analyst in the Cloud Protective Monitoring Sub team.Cyber Operations purpose is to support safe care and build public trust by building NHS England's cyber resilience and enabling the wider health system to be cyber resilient, supporting Transformation Directorate's purpose of delivering the best care and outcomes for the NHS.The Cyber Operations sub-directorate consists of 4 operational areas:<ul><li>Cyber Security Operations Unit (CSOU)</li><li>Cyber Delivery Unit (CDU).</li><li>Cyber Improvement Programme.</li><li>Chief Information Security Office Function (CISO)</li></ul>The post of Senior Security Analyst has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 20% per annum.Please be aware that RRP is none contractual and subject to review. Main duties of the job As a Senior Security Analyst Ops you will:<ul><li>Provide Tier 3 security analytics and incident response for service-specific security monitoring.</li><li>Depose for Security Lead (Analyst) in their absence.</li><li>Act as an escalation point for Tier 2 Analysts for incidents and investigations.</li><li>Offer mentorship and guidance to Tier 2 Analysts to support others and their own growth and development.</li><li>Keep up to date with the latest security and technology developments, including researching and evaluating emerging cyber security threats and ways to manage them.</li><li>Use advanced analytic tools including SIEMs, and Cloud Consoles to determine emerging threat patterns and vulnerabilities.</li><li>Apply experience and knowledge to assist with investigations of triggered security alerts.</li><li>Support with the development and automation of SOC processes, to mature the security monitoring service.</li><li>Assist with the refinement of Use Cases and identification of areas for improvement of overall security posture.</li></ul> About us The NHS England board have set out the top-level purpose for the new organisation to lead the NHS in England to deliver high-quality services for all, which will inform the detailed design work and we will achieve this purpose by:<ul><li>Enabling local systems and providers to improve the health of their people and patients and reduce health inequalities.</li><li>Making the NHS a great place to work, where our people can make a difference and achieve their potential.</li><li>Working collaboratively to ensure our healthcare workforce has the right knowledge, skills, values and behaviours to deliver accessible, compassionate care</li><li>Optimising the use of digital technology, research, and innovation</li></ul>Important: Please be aware there are residency requirements you need to meet: All NHS England Cyber Security personnel must hold Security Clearance level as a minimum. To meet National Security Vetting requirements, SC clearances require 5 years continuous UK residency. In certain cases, this can be reduced to three years continuous UK residency, with additional overseas checks for the previous two years. Candidates who were posted abroad for service with HM Government, Armed Forces or within a UK government role - will still be considered. Please make sure you meet these requirements before applying for this role. You dont need to have SC already, however, failure to achieve the requirements for SC after offer will result in the job offer being withdrawn. For further advice please check Please be aware that should you be successful in this position, you will be hired to the job title of Senior Security Analyst and this job title is advertised to attract the right skills needed for the role.The post of Senior Security Analyst has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 20% per annum.Please be aware that RRP is non-contractual and subject to review Job responsibilities Due to the nature of this role, previous experience working in an Analyst role within a Cyber Security Operations Centre is essential. Essential Qualifications required<ul><li>SANS SEC504 (GIAC GCIH)</li><li>SANS SEC511 (GIAC GMON)</li><li>SANS SEC541 (GIAC GCTD)</li><li>SANS FOR508 (GIAC GCFA)</li><li>SANS FOR509 (GIAC GCFR)</li><li>AZ-500: Azure Security Engineer Associate</li><li>AWS Certified Security Speciality</li></ul>Residency requirements: All NHS England Cyber Security personnel must hold Security Clearance level as a minimum. To meet National Security Vetting requirements, SC clearances require 5 years continuous UK residency. In certain cases, this can be reduced to three years continuous UK residency, with additional overseas checks for the previous two years. Candidates who were posted abroad for service with HM Government, Armed Forces or within a UK government role - will still be considered. Please make sure you meet these requirements before applying for this role. You dont need to have SC already, however, failure to achieve the requirements for SC after offer will result in the job offer being withdrawn. For further advice please check Please be aware that should you be successful in this position, you will be hired to the job title of Senior Security Analyst and this job title is advertised to attract the right skills needed for the role.The post of Senior Security Analyst has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 20% per annum.Please be aware that RRP is non-contractual and subject to reviewSecondmentsApplicants from within the NHS will be offered on a secondment basis only, agreement should be obtained from their employer prior to submitting the application.Please note that the reason for the fixed term of this contract is short term vacancyYou can find further details about the role, including key responsibilities and accountabilities, alongside the organisational structure and person specification in the attached Job Description and other supporting documents. Person Specification Knowledge <ul><li>Working knowledge of modules, processes and technologies of Information Security Operation Centre (ISOC); ability to detect, response and utilise related platform and applications to perform cyber security initiatives.</li><li>Extensive knowledge of techniques, approaches and processes of digital threats; ability to detect, monitor, analyse and prevent digital threats.</li><li>Proven knowledge of tools, techniques and processes of intrusion detection and prevention; ability to detect, resolve and prevent intrusion behaviours to protect organisational networks.</li><li>Working knowledge of concept, issues and techniques of cloud security; ability to ensure security compliance of cloud infrastructure in various circumstances.</li><li>Working knowledge of concept, issues and techniques of endpoint security; ability to ensure security compliance of endpoint infrastructure in various circumstances.</li></ul> Skills and Experience <ul><li>Previous experience working in an Analyst role within a Cyber Security Operations Centre</li><li>Evidence of continuous professional development</li></ul> Qualifications <ul><li>Masters level degree or equivalent level of experience</li></ul> Disclosure and Barring Service Check This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.£66,828 to £75,218 a yearPer Annum (this includes a RRP payment of 20%) Contract Fixed term Duration 11 months Working pattern Full-time Reference number 990-TD-CY-17782-E Job locations<img src="https://www.jobg8.com/Tracking.aspx?HuNA3DPAJ8s2luG782ZjZ8HQUF8qp6fTm" width="0" height="0" />

Senior Cyber Security Analyst (Ops - Cloud)

Senior Cyber Security Analyst (Ops - Cloud) The Senior Security Analyst (Ops) sits within the Protective Monitoring function of the Cyber Security Operations Centre (CSOC). The CSOC is made up of Protective Monitoring, Incident Management, Threat Operations, Engineering and Consultancy. The role is a Tier 3 analyst in the Cloud Protective Monitoring Sub team.Cyber Operations purpose is to support safe care and build public trust by building NHS England's cyber resilience and enabling the wider health system to be cyber resilient, supporting Transformation Directorate's purpose of delivering the best care and outcomes for the NHS.The Cyber Operations sub-directorate consists of 4 operational areas:<ul><li>Cyber Security Operations Unit (CSOU)</li><li>Cyber Delivery Unit (CDU).</li><li>Cyber Improvement Programme.</li><li>Chief Information Security Office Function (CISO)</li></ul>The post of Senior Security Analyst has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 20% per annum.Please be aware that RRP is none contractual and subject to review. Main duties of the job As a Senior Security Analyst Ops you will:<ul><li>Provide Tier 3 security analytics and incident response for service-specific security monitoring.</li><li>Depose for Security Lead (Analyst) in their absence.</li><li>Act as an escalation point for Tier 2 Analysts for incidents and investigations.</li><li>Offer mentorship and guidance to Tier 2 Analysts to support others and their own growth and development.</li><li>Keep up to date with the latest security and technology developments, including researching and evaluating emerging cyber security threats and ways to manage them.</li><li>Use advanced analytic tools including SIEMs, and Cloud Consoles to determine emerging threat patterns and vulnerabilities.</li><li>Apply experience and knowledge to assist with investigations of triggered security alerts.</li><li>Support with the development and automation of SOC processes, to mature the security monitoring service.</li><li>Assist with the refinement of Use Cases and identification of areas for improvement of overall security posture.</li></ul> About us The NHS England board have set out the top-level purpose for the new organisation to lead the NHS in England to deliver high-quality services for all, which will inform the detailed design work and we will achieve this purpose by:<ul><li>Enabling local systems and providers to improve the health of their people and patients and reduce health inequalities.</li><li>Making the NHS a great place to work, where our people can make a difference and achieve their potential.</li><li>Working collaboratively to ensure our healthcare workforce has the right knowledge, skills, values and behaviours to deliver accessible, compassionate care</li><li>Optimising the use of digital technology, research, and innovation</li></ul>Important: Please be aware there are residency requirements you need to meet: All NHS England Cyber Security personnel must hold Security Clearance level as a minimum. To meet National Security Vetting requirements, SC clearances require 5 years continuous UK residency. In certain cases, this can be reduced to three years continuous UK residency, with additional overseas checks for the previous two years. Candidates who were posted abroad for service with HM Government, Armed Forces or within a UK government role - will still be considered. Please make sure you meet these requirements before applying for this role. You dont need to have SC already, however, failure to achieve the requirements for SC after offer will result in the job offer being withdrawn. For further advice please check Please be aware that should you be successful in this position, you will be hired to the job title of Senior Security Analyst and this job title is advertised to attract the right skills needed for the role.The post of Senior Security Analyst has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 20% per annum.Please be aware that RRP is non-contractual and subject to review Job responsibilities Due to the nature of this role, previous experience working in an Analyst role within a Cyber Security Operations Centre is essential. Essential Qualifications required<ul><li>SANS SEC504 (GIAC GCIH)</li><li>SANS SEC511 (GIAC GMON)</li><li>SANS SEC541 (GIAC GCTD)</li><li>SANS FOR508 (GIAC GCFA)</li><li>SANS FOR509 (GIAC GCFR)</li><li>AZ-500: Azure Security Engineer Associate</li><li>AWS Certified Security Speciality</li></ul>Residency requirements: All NHS England Cyber Security personnel must hold Security Clearance level as a minimum. To meet National Security Vetting requirements, SC clearances require 5 years continuous UK residency. In certain cases, this can be reduced to three years continuous UK residency, with additional overseas checks for the previous two years. Candidates who were posted abroad for service with HM Government, Armed Forces or within a UK government role - will still be considered. Please make sure you meet these requirements before applying for this role. You dont need to have SC already, however, failure to achieve the requirements for SC after offer will result in the job offer being withdrawn. For further advice please check Please be aware that should you be successful in this position, you will be hired to the job title of Senior Security Analyst and this job title is advertised to attract the right skills needed for the role.The post of Senior Security Analyst has been awarded a Recruitment and Retention Premia (RRP) in response to current labour market conditions. In recognition of this, the role attracts an additional monthly RRP payment equal to 20% per annum.Please be aware that RRP is non-contractual and subject to reviewSecondmentsApplicants from within the NHS will be offered on a secondment basis only, agreement should be obtained from their employer prior to submitting the application.Please note that the reason for the fixed term of this contract is short term vacancyYou can find further details about the role, including key responsibilities and accountabilities, alongside the organisational structure and person specification in the attached Job Description and other supporting documents. Person Specification Knowledge <ul><li>Working knowledge of modules, processes and technologies of Information Security Operation Centre (ISOC); ability to detect, response and utilise related platform and applications to perform cyber security initiatives.</li><li>Extensive knowledge of techniques, approaches and processes of digital threats; ability to detect, monitor, analyse and prevent digital threats.</li><li>Proven knowledge of tools, techniques and processes of intrusion detection and prevention; ability to detect, resolve and prevent intrusion behaviours to protect organisational networks.</li><li>Working knowledge of concept, issues and techniques of cloud security; ability to ensure security compliance of cloud infrastructure in various circumstances.</li><li>Working knowledge of concept, issues and techniques of endpoint security; ability to ensure security compliance of endpoint infrastructure in various circumstances.</li></ul> Skills and Experience <ul><li>Previous experience working in an Analyst role within a Cyber Security Operations Centre</li><li>Evidence of continuous professional development</li></ul> Qualifications <ul><li>Masters level degree or equivalent level of experience</li></ul> Disclosure and Barring Service Check This post is subject to the Rehabilitation of Offenders Act (Exceptions Order) 1975 and as such it will be necessary for a submission for Disclosure to be made to the Disclosure and Barring Service (formerly known as CRB) to check for any previous criminal convictions.£66,828 to £75,218 a yearPer Annum (this includes a RRP payment of 20%) Contract Fixed term Duration 11 months Working pattern Full-time Reference number 990-TD-CY-17782-E Job locations<img src="https://www.jobg8.com/Tracking.aspx?18diDXqRkcXmfi4ffXZ5hN3FEd8xhvQPo" width="0" height="0" />

Agility

<div>
 
 
 Role Summary:
 
 
 
 We are seeking a highly experienced and results-driven&nbsp;Senior Information Security Analyst&nbsp;to serve as our entral&nbsp;Governance, Risk, and Compliance (GRC) resource. This is a pivotal role responsible for the overall design, maintenance, and enhancement of the organization's security and resilience frameworks. The core purpose of this position is to ensure continuous compliance with all relevant international and local standards, with a specific focus on leading our audit readiness and certification efforts.
 
 
 
 Your Responsibilities:
 
 
 
 &nbsp;Compliance and GRC Management
 
 <ul>
 <li>
 &nbsp;Establish, maintain, and enhance the organization's Information Security Management System (ISMS) and Business Continuity &amp; Supply Chain Management (BCSM) frameworks
 </li>
 </ul>
 <ul>
 <li>
 Ensure the organization's compliance with all relevant local, regional, and international regulations and standards, ISO 27001, ISO 22301)
 </li>
 <li>
 Act as the primary auditee and point of contact for all internal and external information security audits
 </li>
 <li>
 Proactively identify, assess, and manage information security and business continuity risks to protect the organization's information assets
 </li>
 <li>
 Drive a culture of security and resilience across the organization
 </li>
 </ul>
 
 &nbsp;Security Controls &amp; Technical Oversight
 
 <ul>
 <li>
 &nbsp;Conduct security assessments and audits of various IT platforms, including cloud infrastructure , on-premise servers (Windows, Linux), databases, and network devices.
 </li>
 </ul>
 <ul>
 <li>
 Utilize or interpret reports from vulnerability scanners and penetration testing tools to identify and prioritize security weaknesses
 </li>
 <li>
 Evaluate and enforce robust Identity and Access Management (IAM) controls, including role-based access control (RBAC) and multi-factor authentication (MFA)
 </li>
 <li>
 Review and ensure the security of cloud deployments (IaaS, PaaS, SaaS), including security groups, IAM policies, and logging
 </li>
 <li>
 Apply strong knowledge of secure configuration baselines and hardening standards (CIS Benchmarks) for operating systems, web servers, and network equipment
 
 
 
 </li>
 </ul>
 
 Requirements
 
 
 
 
 
 Your Qualifications:
 
 
 <ul>
 <li>
 Education: Candidate must possess at least a Bachelor of Science or Bachelor of Computer Application
 </li>
 </ul>
 <ul>
 <li>
 Experience: A minimum of 5 - 10 years of experience in a similar environment
 </li>
 <li>
 Domain: Experience in Government Sector or Private Sector with Enterprise data Center Security Compliance
 </li>
 <li>
 Certifications: Essential certifications include ISO 27001, ISO 22301, CISSP, and CISA
 </li>
 <li>
 Language: Must be fluent in English, with Arabic as an added advantage.
 
 </li>
 </ul>
 
 
 Your Competencies:
 
 
 
 Technical:
 
 <ul>
 <li>
 Security Frameworks &amp; Standards: Profound knowledge of ISO 27001, NIST, and CIS
 </li>
 <li>
 Security Controls: A solid understanding of network security (Firewalls, IDS/IPS), Endpoint Security (EDR), IAM principles, and Cryptography
 </li>
 <li>
 Tools: Practical experience with Vulnerability and Risk Assessment Tools and familiarity with SIEM platforms
 </li>
 <li>
 Software Proficiency: Experience with GRC Platforms and documentation tools (Microsoft Office Suite, SharePoint, Jira, Confluence)
 </li>
 </ul>
 
 &nbsp;Behavioral:
 
 <ul>
 <li>
 Teamwork and Collaboration
 </li>
 <li>
 Quality and Results focused
 </li>
 <li>
 Learning Agility
 </li>
 <li>
 Business Acumen
 </li>
 <li>
 Decision Making
 </li>
 <li>
 Digital Savvy
 </li>
 <li>
 Agility and Adaptability
 </li>
 <li>
 Negotiation and influence
 </li>
 <li>
 Planning and Organizing
 </li>
 </ul>
</div>

Senior Information Security Analyst - Compliance & GRC

Hamilton Barnes Associates Limited

Ready to take the lead in safeguarding complex digital ecosystems? Join a specialised cybersecurity consultancy dedicated to protecting organisations through advanced threat detection, incident response, and security architecture expertise. The organisation is recognised for its proactive approach to risk management and its commitment to delivering resilient, compliant, and secure technology environments. The team is hiring a Senior Cyber Security Analyst to lead investigations, analyse threats, and enhance defensive capabilities across diverse client infrastructures. The role will focus on identifying vulnerabilities, responding to incidents, and implementing best practices to strengthen overall security posture. Defend the future by staying one step ahead of cyber threats. Apply now! Key Responsibilities <ul> <li>Oversee and deliver high-quality client engagements</li> <li>Risk and maturity assessments</li> <li>Cyber due diligence for funds and investors</li> <li>Tabletop exercises and incident response preparedness</li> <li>Conduct risk reviews and provide advisory around OT and IT environmentsSupport and, in time, lead business development activities</li> <li>Client briefings, proposals, and presentations within CISO and investor communities</li> <li>Collaborate with senior team members to enhance brand awareness and build client relationships.</li> <li>Maintain strong communication with clients to ensure credibility and trust</li> <li>Contribute to team culture by being an enthusiastic, supportive, and proactive member</li> </ul> Requirements <ul> <li>2+ years' experience in a consulting environment or</li> <li>3+ years' experience in an information security, cyber, or risk role within industry or government.</li> <li>Governance, Risk, and Compliance (GRC)</li> <li>OT Security / Industrial Control Systems</li> <li>Cyber protection of complex IT estates</li> <li>Incident response, crisis management, and tabletop exercising</li> <li>Strong understanding of Access Control principles and implementation.</li> <li>Excellent project coordination skills with the ability to take ownership of small projects and ambition to lead larger ones.</li> <li>Strong communication and stakeholder management skills.</li> <li>Works effectively under pressure and thrives in fast-paced environments.</li> </ul> Requirements <ul> <li>Experience with Operational Technology (OT) systems and environments.</li> <li>Experience in cloud security across AWS or Azure platforms.</li> <li>Familiarity with data privacy frameworks and principles.</li> <li>Experience working with private equity or infrastructure investment funds.</li> <li>Relevant cloud or security certifications (e.g., AWS Certified Security, Azure Security Engineer Associate, CISSP, CISM).</li> </ul> Salary <ul> <li>£45,000-£55,000</li> </ul><img src="https://www.jobg8.com/Tracking.aspx?n70Gs5vBCd9LfIM1z9SBgWO4mftNf2g9f" width="0" height="0" />

Senior Cyber Security Analyst - Consultancy

Search 10000+ Senior security analyst jobs near you this October. New roles added regularly across leading industries. Apply today.

10000 senior security analyst jobs NEAR_ME

Senior Security Analyst

Senior Security Analyst

Senior Security Compliance Analyst

Senior Cyber Security Analyst (Ops - Cloud)

Senior Cyber Security Analyst (Ops - Cloud)

Senior Information Security Analyst - Compliance & GRC

Senior Cyber Security Analyst - Consultancy