Associate Security Analyst

About this role

On behalf of the Cabinet Office, we are looking for a Associate Security Analyst X2 (Inside IR35) for a 6 Month contract based Hybrid in the London office 3 days per week.

The Cabinet Office supports the Prime Minister and ensures the effective running of government. The Cabinet Office is also the corporate headquarters for the government, in partnership with HM Treasury, and takes the lead in certain critical policy areas. More information about the Cabinet Office can be found on its website at: [1] www.gov.uk/government/organisations/cabinet-office

SC Clearance is an essential requirement for this role, as a minimum you must be willing & eligible to undergo checks. Please note, due to the exceptional requirements of this position (short-term nature of this role and speed at which we require a postholder in situ) preference may be given to candidates who meet all of the essential criteria and hold active security clearance.

As a Associate Security Analyst, your main responsibilities will be:

• Triage and investigate cyber security alerts and reports from users
• Use a variety of techniques to analyse systems, files, network traffic and cloud environments and understand the nature and extent of possible cyber incidents
• Support the technical response to cyber incidents by identifying and implementing (or supporting the implementation of) containment, eradication and recovery actions
• Support the coordination of cyber incidents
• Contribute to post-incident reviews to identify lessons and actions
• Identify opportunities for, and support the delivery of, continual improvements to the incident investigation and response capability
• Work closely alongside other Cyber Defence functions, supporting the continual improvement of wider capabilities
• Contribute to internal plans, playbooks and knowledge base articles
• Act as an escalation point for, and provide coaching and mentoring to, apprentice security analysts

Essential

• Experience working with SPLUNK
• Experience within M365 is essential
• Entra Azure experience
• Active Security Clearance (SC) is required for this position

Please be aware that this role can only be worked within the UK and not Overseas.

Disability Confident

As a member of the Disability Confident Scheme, The Cabinet Office guarantees to interview all candidates who have a disability and who meet all the essential criteria for the vacancy. In cases where we have a high volume of candidates who have a disability who meet all the essential criteria, we will interview the best candidates from within that group. This scheme encourages candidates with a disability and/or neurodivergence to apply. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.

Armed Forces Covenant

The Cabinet Office guarantees to interview veterans or spouses / partners of military personnel who meet all the essential criteria for the vacancy. In cases where we have a high volume of ex-military candidates / military spouses or partners, who meet all of the essential criteria, we will interview the best candidates from within that group. In exceptional circumstances, we may also need to apply the desirable criteria in our shortlisting process which may include holding active security clearance.

In applying for this role, you acknowledge the following "this role falls in scope of the Off Payroll Working in the Public Sector legislation. Any rates of payment quoted will reflect the gross rate per day for the assignment and will be subject to appropriate taxes and statutory costs. As such the payment to the intermediary and your income resulting from this contract will be different".

Visible links

1. https://www.gov.uk/government/organisations/cabinet-office

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.