Job Description
Senior IT Security Operations Threat Analyst
Permanent
Location: Home / Worcester (Hybrid - 2 days a week on site)
Salary: £46,000 - £52,000 (+ excellent benefits)
Skills: Threat Hunting / Threat Analytics, SIEM, EDR, Vulnerability Management, Security Certifications - CISSP or equivalent
We are looking to recruit a Senior IT Security Operations Threat Analyst for a technology driven public sector organisation.
In this role, you will be at the forefront of identifying and mitigating emerging cyber threats, playing a critical part in safeguarding the organisation's digital infrastructure.
About the Role:
As a Senior Security Operations Threat Analyst, you will lead efforts in threat hunting, vulnerability management, and incident response. Working closely with the Security Operations Manager, you will take a hands-on approach to security monitoring, analysis, and strategy development. This role provides the opportunity to influence security frameworks, mentor team members, and directly contribute to the protection of the organisation's technology, data, and processes.
Key Responsibilities:
- Proactively hunt for and identify threats, utilising security tools and delivering strategic reports.
- Provide technical security advice and guidance for digital services projects.
- Lead the development of processes to strengthen security frameworks, ensuring they align with emerging threats.
- Manage threat modelling, vector identification, and create use cases for security monitoring.
- Oversee vulnerability management, incident response, and reporting, ensuring timely remediation and escalation.
Essential Skills and Experience:
- Proven experience in threat hunting and threat analytics using advanced security tools.
- Hands-on experience with SIEM, EDR, and vulnerability management solutions (e.g., Tenable SC, Nessus).
- In-depth knowledge of cybersecurity frameworks such as MITRE ATT&CK and industry best practices like ISO 27001.
- Relevant security certifications (e.g., CISSP, CESG Certified Professional, SC-200).
- Strong ability to explain technical security issues to non-technical stakeholders and influence key decision-makers.
Desirable Skills:
- Experience in cloud security solutions (e.g., Microsoft Defender, Azure).
- Knowledge of patch management processes, and experience in coordinating penetration testing.
- Familiarity with ITIL 4 Foundation and other security standards and practices.