Senior Cybersecurity Defence Analyst

The Senior Cybersecurity Defence Analyst is responsible for using data collected from cyber defence tools to analyze events that occur within the company to detect and mitigate cyber threats. Key responsibilities include performing vulnerability and risk assessments of systems and networks, identifying deviations from acceptable configurations or applicable policies, measuring the effectiveness of defence-in-depth architecture against known vulnerabilities, and executing cybersecurity compliance and risk assessments for new systems/services during multiple project phases.

Key Responsibilities:

• Analyze the organization's cybersecurity defence policies and configurations to evaluate compliance with regulations and organizational directives.
• Correlate incident data to identify vulnerabilities.
• Conduct vulnerability scans on systems and assets, recommending corrections for the environment.
• Utilize cybersecurity products and security control technologies to mitigate identified risks effectively.
• Maintain a deployable cyber defence audit toolkit based on industry best practices to support audits.
• Escalate incidents that may cause immediate or ongoing impacts.
• Analyze and report on trends in the organization's security posture and cyber defence trends.
• Perform cybersecurity reviews and identify security gaps in the security architecture to inform risk mitigation strategies.
• Conduct authorized penetration tests on computer systems, networks, and physical premises to evaluate security and detect vulnerabilities.
• Prepare cybersecurity assessment and audit reports detailing technical and procedural findings, along with recommended remediation strategies.
• Identify indications and warnings through research, analysis, and correlation across multiple datasets.
• Assist in constructing signatures for implementation on cybersecurity network tools to respond to new or observed threats.
• Provide summary reports of network events and other cybersecurity-relevant activities in line with organizational policies and requirements.
• Recommend cost-effective security controls to mitigate risks identified through testing and review.
• Use security testing and code scanning tools to conduct code reviews.