Up to £42,155 per annum, 35 days annual leave (plus bank holidays), hybrid working, generous pension scheme and many more benefits

Hays Technology are working with a large public sector organisation in Stoke-on-Trent to recruit a Cyber Security Analyst on a permanent basis.

The successful candidate will monitor the effectiveness of security controls, by undertaking automated and manual vulnerability assessments, analysing and responding to SIEM alerts, assess the effectiveness of firewalls, review business applications and computer installations for security weaknesses. As part of the role the Cyber Security Analyst will identify emerging threats to the confidentiality, integrity and availability or systems and advise on potential mitigations.

Key initiatives for the security team in the next 12 months will be supporting research activities through obtaining ISO27001 certifications, implementing an organisation wide security awareness programme, and implementing a "zero trust" approach.

In order to apply, you must have the following skills and experience:

• A Degree in a cybersecurity or computing based subjects or equivalent experience.
• Experience of obtaining/maintaining cybersecurity certifications such as ISO27001, Cyber Essentials or PCI.
• Experience in gathering operational evidence on the performance of cyber security using vulnerability assessment tools, assessments of the effectiveness of firewalls, knowledge of
• penetration testing tools and toolkits, using log analysis tools, monitoring use of privileges accounts, using SIEM tools.
• Experience in investigation, analysis and review following breaches of security controls, and managing cybersecurity incidents using an ITIL methodology.
• A broad understanding of the current cybersecurity threat landscape, existing and emerging technologies.
• Awareness of security frameworks / best practices such as, MITRE ATT&CK, D3FEND, OWASP and the requirements of GDPR (General Data Protection Regulation) and PCI DSS.
• Experience in investigation, analysis and review following breaches of security controls.
• Managing cybersecurity incidents using a methodology such as ITIL.
• An understanding of the methods and techniques for the assessment and management of business risk.
• An understanding the principles of physical, virtual and cloud architectures (IaaS, SaaS, PaaS) for systems and networks.
• An understanding of networking and communications related concepts such as topological design, load balancing, firewalls, TCP/IP networking, TLS, DNS, DHCP.

If you have the relevant experience and would like to apply, please submit your CV.