Senior Cyber Security Analyst (L3)

Are you ready to be at the forefront of cyber defence? Join The Crown Estate as a Senior Cyber Security Analyst and become a key player in our mission to protect critical assets from cyber threats. You’ll be instrumental in monitoring and responding to cyber alerts, managing vulnerabilities, and ensuring the security of our on-prem and cloud environments. Collaborate with top-tier security and engineering teams to safeguard The Crown Estate from cyber-attacks.

Main Accountabilities:

Security Analysis:

1. Swiftly respond to incident alerts from our 3rd Party SOC provider.
2. Leverage MS Defender for Endpoint and Sentinel platforms for in-depth incident investigation and forensic analysis.
3. Collaborate with 3rd Party SOC on all security and technical matters.
4. Fine-tune threat protection thresholds within Microsoft detection systems for optimal security.
5. Deliver expert analysis and remediation strategies during major cyber incidents.
6. Oversee the web monitoring and early warning threat portal.
7. Provide comprehensive reports on residual risks and security exposures.
8. Vigilantly monitor and manage email compromise incidents.
9. Engage with end users during alert investigations to ensure thorough resolution.
10. Conduct continuous scanning of our environment using Qualys and MS Defender to identify vulnerabilities.
11. Create insightful dashboards and reports on vulnerabilities, remediation efforts, and trends.
12. Partner with engineering teams to drive effective patch management and track progress.

Reporting:

1. Provide daily updates on the state of The Crown Estate’s cyber security.
2. Communicate residual risks and security exposures to the Cyber Security management team.

Knowledge, Experience, and Skills:

1. Extensive expertise in the Microsoft security suite.
2. Proficient with Tenable or Qualys in both cloud and local environments.
3. Skilled in producing detailed reports and dashboards for technical staff and senior management.
4. Experienced in managing SOC incident and service response dashboards.
5. Adept at gathering and analysing cyber threat intelligence.
6. Capable of supporting internal audit functions.
7. Demonstrable experience in a senior Cyber Security Analyst role (L3).
8. Azure Fundamentals, Azure Security Engineer Associate is beneficial.
9. Microsoft certifications: SC200, SC300, SC400, SC900, MAZ500 would be beneficial but not essential.
10. Vulnerability Management vendor certificates (Qualys, Tenable) would be beneficial but not essential.
11. CompTIA Security+, CySA+, Network+ would be beneficial but not essential.

Knowledge and Skills:

1. Deep understanding of MS Security products.
2. Expertise in cloud and network security.
3. Great incident and vulnerability management skills.
4. Excellent communication and networking abilities.

Why Join Us?

At The Crown Estate, you’ll be part of a dynamic team dedicated to protecting our valuable assets. We offer a collaborative and innovative environment where your expertise will be highly valued, and your contributions will make a significant impact. If you’re ready to take on a challenging and rewarding role, apply today and help us secure the future!