Cybersecurity Analyst II

Job Title: Cybersecurity Analyst II

Job Summary:
The Cybersecurity Analyst II helps to protect our organization from cyber-attacks by monitoring our systems, investigating suspected threats, and resolving incidents as they arise. This will be done by reviewing computer networks and identifying any potential vulnerabilities, installing the necessary software in order to protect from unauthorized access, and documenting detections so that future breaches can be mitigated efficiently.

Duties/Responsibilities:
•    Conduct threat hunting using the Security Information and Event Management (SIEM) tool. 
•    Independently investigate security alerts in the SIEM utilizing event logs to positively identify true and false positive incidents.
•    Conduct incident response and recovery activities independently or as part of a team.
•    Under the direct supervision of the Cyber Security lead assist with Penetration tests. 
•    Monitor other event sources such as shared security mailboxes, firewalls, anti-virus consoles, endpoint management systems for abnormal activity and compliance with Sealaska policies. 
•    Ensure that servers and endpoints are compliant with defined security baselines. 
•    Evaluate Vulnerability Management reports and prioritize findings for remediation. 
•    Assist with managing email quarantine/spam filters and assess suspected phishing attempts.  
•    Assist in maintaining the cyber security training platform. Ensuring timely reporting on employee completion of required trainings. 
•    Maintain situational awareness of current cyber security trends and emerging vulnerabilities. 
•    As directed, complete cyber security “capture the flag” trainings to maintain proficiency with emerging attacker techniques on platforms such as Hack the Box and others as directed. 
•    Other duties as assigned. 

Required Skills/Abilities: 
•    Demonstrated competence with both offensive and defensive cybersecurity roles, showcasing a comprehensive understanding of threat landscapes and protective measures.
•    Pattern recognition capability to identify anomalies and recognize expected activity from complex data sets.
•    Deep knowledge of Microsoft Windows desktop operating systems, Active Directory, and Entra ID.
•    Effective interpersonal skills and relationship-building skills.
•    Relevant Cybersecurity Certifications such as Security+ or other equivalent industry certification.

Education and Experience:
•    Three to five years of relevant experience in a cyber security role.
•    University degree in information technology, cybersecurity or equivalent training & work experience

Pay range is $60-70 GBP salary, based on experience level. 

Working Conditions:
The physical and work environment characteristics described here are representative of those that must be met by an employee to successfully perform the essential functions of this position. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While most work in this position is completed during normal working hours, after-hours work will occasionally be expected to handle urgent issues as well as system upgrades and installations. 

Physical Demands: 
•    While performing the duties of this job, the employee is required to walk, use hands to finger, handle objects, tools, or controls; reach with hands and arms; balance; stoop; bending or crouching; talk or hear. Specific vision abilities required by the job include close vision, distance vision, color vision, peripheral vision, depth perception, and the ability to adjust focus. 
•    Some lifting of files, opening cabinets. 
•    Bending or standing as necessary.
•    Prolonged periods sitting at a desk and working on a computer.
•    Must be able to lift up to 15 pounds at times.

This description is not intended to be, nor should it be construed as an all-inclusive list of responsibilities, skills or working conditions associated with the position. It is intended to accurately reflect the activities and requirements of the position, but duties may be added, deleted, or modified, as necessary. This description does not constitute a written or implied contract of employment.