Cyber Security Analyst

About this role

Job Description

Cyber Security Analyst

London / Hybrid

CCL Global are currently working with a leading public sector organisation who are seeking an experienced Associate Security Analyst for a contract opportunity. The successful applicant will join the organisation’s Cyber Defence team, supporting the investigation and response to cyber security threats and incidents across a large-scale digital environment.

Contract: Inside IR35 (umbrella)

Key duties will include

• Triaging and investigating cyber security alerts and incidents.
• Analysing systems, files, network traffic and cloud environments to understand potential cyber incidents.
• Supporting the technical response to incidents, including containment, eradication and recovery.
• Using SIEM and EDR security tools to investigate and respond to threats.
• Supporting the coordination of cyber security incidents and contributing to post-incident reviews.
• Identifying opportunities to improve incident investigation and response capabilities.
• Working closely with wider Cyber Defence teams to strengthen security operations.
• Developing and maintaining incident response playbooks, plans and knowledge base articles.
• Providing guidance, coaching and support to junior and apprentice security analysts.
• Participating in an out-of-hours on-call rota as part of the wider cyber defence function.

Requirements

• Active SC clearance is mandatory.
• At least 2–3 years' experience working as a Cyber Security Analyst or in a similar security operations role.
• Proven experience investigating and responding to cyber security incidents.
• Hands-on experience with SIEM tools, ideally Splunk.
• Experience with Microsoft Sentinel, Microsoft Defender and/or KQL.
• Strong understanding of threat actor TTPs and common cyber attack techniques.
• Experience using security tools such as EDR and SIEM platforms.
• Strong analytical and problem-solving skills.
• Good verbal and written communication skills.
• Experience working with cloud environments, such as AWS, would be beneficial.
• Experience working within an Agile environment would be beneficial.

About cyber security & digital forensics roles for ex-police

Cyber security, digital forensics and incident-response roles. DMIs, cybercrime investigators and digital forensics officers bring evidential discipline and investigative judgement that DFIR and security teams struggle to hire.