Business Analyst - Cyber Security
Recruiter
SidTech
Listed on
11th January 2021
Location
Uxbridge
Type
Contract
Start Date
2021-01-11 00:00:00
This job has now expired please search on the home page to find live IT Jobs.
Job Title:Business Analyst - SecurityInside IR35Location:UK - UxBridge (UB11 1AW) Department/Practice:Cyber Security Job Purpose and primary objectives: Cyber Requirements gathering, Analysis, Security Incident Management process engineer, stakeholder management Key responsibilities (please specify if the position is an individual one or part of a team): Individual position. ? Prioritising the roadmap design to inform the product backlog including refining the requirements and producing supporting artefacts ? Gather functional, non-functional and technical requirements and translate into delivery stories ? Clearly design, define and formulate end to end Security Incident Management process across the enterprise involving multiple stakeholders & wider IT Teams ? Review, challenge and contribute to technical designs to ensure that security is designed into new solutions ? Maintain a working knowledge of technical security requirements and best practice ? Review, maintain, improve and gain assurance over security solutions deployed ? Review, assess and ensure appropriate remediation actions are in place for any vulnerabilities identified- this will include contributing to and improving the vulnerability management approach
Key Skills/Knowledge: Strong understanding of various Security concepts such as Vulnerability Management, Policies, standards, Risks, Security Operations, Security Incident Management, ITIL, Agile Experience required: ? Strong experience and understanding relating to information security concepts and practices ? Exposure to aspects of networking, operating systems, software packages and security tooling ? Experience or desire to review technical designs and solutions to identify security risks and opportunities for improvement ? Experience with agile methodology, writing user stories, attending scrum calls, provides governance in pipeline/prioritization calls through backlog and progress, addressing feasibility limitations, gaps, and deterrents to progress ? Experience eliciting business requirements from users and SMEs (technical and non-technical resources) in order to write business requirements documents and how-to procedure guides ? Knowledgeable in how to create documentation on security products ? Excellent oral and written communication skills ? Strategic problem solver who quickly identifies strengths, weaknesses and opportunities for efficiencies to deliver immediate and long-term improvements ? Brings a passion for problem-solving, agile method, and providing stakeholder visibility into iterative results ? Bachelor's degree preferred (but not essential) in area(s) of study such as information technology, computer science, information systems, or related field, or high school diploma with relevant work experience ? Working knowledge of the following technologies would be advantageous: leading Security Information and Event Management (SIEM) technologies, IDS/IPS, network- and host- based firewalls, data leakage protection (DLP), web proxy filtering, email filtering ? Understanding of possible attack activities (e.g., network probing/ scanning, Denial-of-service attack (DDOS), malicious code activity, etc.), would be advantageous. ? General knowledge of Network Security appliances (IDS, Firewall, VPN management, configuration and tuning, Intrusion Prevention) , would be advantageous ? General knowledge of Network and Application Protocols (IP, TCP, UDP, FTP, HTTP, DNS, routing, etc.), would be advantageous. Duration of the Assignment:12 Months
