Cyber Security Analyst

Summary: The Cyber Security Analyst role involves conducting advanced triage and analysis of security events, utilizing expertise in SIEM solutions and Kusto Query Language (KQL). The position requires collaboration with Tier 3 Analysts to enhance detection capabilities and improve incident response workflows. The analyst will also monitor the threat landscape and contribute to the continuous maturity of the Security Operations Center (SOC). This is a full-time on-site position in Erskine, Scotland, requiring DV clearance eligibility.

Key Responsibilities:

• Conduct escalated triage and analysis on security events identified by Tier 1 Analysts.
• Utilize SIEM solutions and Kusto Query Language (KQL) for log analysis and event correlation.
• Investigate potential security incidents and identify patterns or anomalies.
• Monitor the threat landscape and document findings on evolving threat vectors.
• Follow established incident response playbooks and provide feedback for enhancements.
• Coordinate with Tier 3 Analysts to refine detection and response workflows.
• Collaborate on tuning SIEM and detection tools to reduce false positives.
• Identify gaps in detection content and develop new detection rules with Senior Analysts.

Key Skills:

• Advanced networking concepts, including IP addressing and network protocols.
• Advanced knowledge of Windows and Linux operating environments.
• Competence in using SIEM solutions for monitoring and log analysis.
• Proficient knowledge of Kusto Query Language (KQL).
• Familiarity with open-source intelligence (OSINT) techniques.

Salary (Rate): £550

City: Erskine

Country: Scotland

Working Arrangements: on-site

IR35 Status: inside IR35

Seniority Level: Mid-Level

Industry: IT