Security Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct assessments for Cyber Essentials and Cyber Essentials Plus according to IASME and NCSC standards.

• Evaluate Cyber Essentials questionnaires alongside relevant technical documentation.

• Offer straightforward, actionable advice to clients throughout the certification journey.

• Perform vulnerability scans on client environments utilizing industry-standard tools.

• Interpret vulnerability scan outcomes and deliver clear remediation suggestions.

• Examine operating systems, applications, and network devices to detect missing security updates.

• Review patch management processes and provide recommendations to enhance vulnerability management approaches.

• Support clients in remediation efforts to facilitate certification achievement.

• Create comprehensive assessment reports and technical documentation.

• Maintain precise records of assessments and certification processes.

• Stay informed about Cyber Essentials standards, emerging cyber threats, and industry best practices.

• Collaborate effectively with colleagues from the penetration testing and compliance teams.

⛳️ Requirements

• At least three years of experience in an IT or cyber security role within the past five years.

• Strong understanding of Windows, macOS, and Linux operating systems.

• Familiarity with Microsoft 365 administration and its security features.

• Knowledge of networking fundamentals, including TCP/IP, DNS, firewalls, and VPNs.

• Awareness of vulnerability management and security best practices.

• Good grasp of software patching and operating system update procedures.

• Exceptional written and verbal communication skills.

• Keen attention to detail and strong problem-solving capabilities.

• Ability to convey technical concepts to both technical and non-technical audiences.

• Experience with vulnerability scanning tools such as Nessus, Qualys, OpenVAS, or similar.

• Cyber Essentials Assessor qualification.

• Experience in delivering Cyber Essentials and/or Cyber Essentials Plus assessments.

• Relevant certifications such as Security+, CISM, CISSP, ISO 27001 Lead Auditor, or equivalent.

• Background in vulnerability remediation and security consulting.

🏝️ Benefits

• Competitive salary.

• Company pension scheme.

• 25 days of annual leave plus bank holidays.

• An additional day off for your birthday.

• Continuous training and funding for professional certifications, including Cyber Essentials Assessor, CREST, and Cyber Scheme qualifications.

• Clear career advancement opportunities within a growing cyber security consultancy.

• Exposure to a diverse range of organizations across various industries.

• Supportive team culture with chances to expand your technical skills beyond Cyber Essentials.