Cyber Security Analyst (NIST Evidence & Compliance) Job at Robert Half (Chatsworth)

Information Security Assurance Analyst

Location

United Kingdom , Portsmouth

Salary:

Not provided

TalentHawk

Expiration Date

Until further notice

Requirements

CISM/CISSP/CCSP/TOGAF/CRISC/AWS Solution Architect or equivalent certified or willing to undergo certification on the job
Must have Security Clearance or be eligible for security cleared
Must have experience in Cloud (IaaS, Paas, SaaS)
Must have proven expertise in three of the following security areas: identity and access management, network security, end user security, threat modelling, Security Risk and Compliance, penetration testing
Must have at least 3 years’ cyber security experience
Good understanding and practical experience of Cyber Security Frameworks and standards such as NCSC CAF, NIST Framework, ISO 27001, ISO27005, IEC62443 etc.
Good understanding of Cyber Assurance Framework and experience with working with Regulators and providing compliance updates
The individual should be educated to degree level in a relevant discipline

Job Responsibility

Perform a threat modelling exercise of all projects and provide mitigating cyber security requirements to help ensure the secure delivery of compliant systems, applications and business processes
Review both high/low level architecture definition documents for compliance against security policies, standards and regulatory requirements, defining Cyber non-functional requirements
Attend Technical Design Authority (TDA meeting to provide security signoffs
Work within the Security Assurance team consisting of security assurance analyst / consultants providing thought leadership across several assurance functions, and helping smooth engagements with project delivery teams
Perform cyber security risk assessments, compliance checks, audits and reviews to ensure that appropriate security controls are in place and highlight any deficiencies and gaps for management consideration
Provide support in scoping and overseeing pen tests and re-tests
Review recommendations and collaborate with the relevant teams to support remediation efforts
Provide cyber security assurance activities by ensuring implemented solutions are a replica of agreed and approved architecture definition documents, helping to facilitate penetration testing, whilst providing security advice and guidance
Support to management, BAU and projects to comply with legal and regulatory requirements
Where required, propose solutions and coordinate delivery of mitigating actions to ensure risk levels are aligned with risk appetite

Fulltime

Senior Consultant - CRM

As a Senior Consultant in Unit 42 you will have the opportunity to work across a...

Location

Singapore , Singapore

Salary:

Not provided

Palo Alto Networks

Expiration Date

Until further notice

Requirements

3+ years of consulting experience in SOC, security engineering, SIEM administration, and incident management and demonstrated success with serving large, multinational organisations in designing and implementing an organisation’s security operations program, organisational structures, and capabilities
Possess a deep technical knowledge in Security Incident and Event Management (SIEM) platforms, Security Orchestration and Response (SOAR) technologies, Endpoint Protection and Response/Next Gen Protection and Response (EDR/XDR) tools, Next GenFirewalls, Threat Intelligence and Hunting platforms
Experience in security operations design, engineering and/or analysis and investigations, ideally in complex environments, with security event correlations across a variety of sources i.e. cloud, network, endpoint, logs
Ability to perform detailed assessments, identify areas for improvement and make recommendations to transform an organisation's cyber security operations and capabilities to better protect, detect and rapidly respond to modern threats
Demonstrated experience in improving an organisations security operations capabilities such as improvements in asset visibility, threat detection capabilities, automation techniques, case management, enablement of compliance and regulatory requirements
Experience in conducting threat hunting and/or compromise assessments to identify active or dormant indicators of compromise (IoCs) or evidence of unknown threats within an organisations digital environment
Relevant industry certifications including GIAC Defensible Security Architect (GDSA), GIAC Intrusion Analyst (GCIA), GIAC Continuous Monitoring (GMON), CISSP
Understanding of cyber risk frameworks or industry standards such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC
3+ years of experience performing cloud security advisement and risk assessments based upon industry-accepted standards
Hands-on experience with a cloud hosting provider (AWS, Azure, GCP, etc)

Job Responsibility

work across a number of proactive cyber security domains including Cloud Security, Security Operations, Cyber Risk Management and Artificial Intelligence in cyber security
deliver the best consulting outcomes for clients, as they work to address the challenges associated with today’s cyber threat landscape

Fulltime

Cyber Security Engineer

We are seeking an experienced and hands-on Cyber Security Engineer with a strong...

Location

United Kingdom , London

Salary:

Not provided

CoinShares

Expiration Date

Until further notice

Requirements

5+ years’ experience in a cyber security engineering, cloud security, or infrastructure security role
Strong hands-on experience securing AWS environments in production
Bachelor’s degree in Cyber Security, Computer Science, Information Technology, or equivalent practical experience
Relevant certifications are desirable (e.g. AWS Security Specialty, CISSP, CCSP, GSEC)
Experience in the financial services sector or other regulated environments would be advantageous
Demonstrated understanding of cloud security concepts, particularly within AWS
Hands-on experience configuring and operating AWS GuardDuty
Strong knowledge of AWS IAM, networking (VPCs, security groups, NACLs), logging, and monitoring
Experience with cloud security posture management and vulnerability management tools (e.g. Wiz, Qualys, Rapid7)
Familiarity with infrastructure-as-code and automation (e.g. Terraform, CloudFormation)

Job Responsibility

Design, implement, and maintain security controls across AWS environments
Configure, manage, and optimise AWS GuardDuty, including alert tuning, findings triage workflows, and integrations with SIEM and incident response processes
Lead cloud security monitoring, detection engineering, and preventative control design
Work closely with the Cyber Security Analyst on incident response, providing technical expertise during investigations
Implement and manage cloud-native security services (e.g. AWS Security Hub, IAM, CloudTrail, VPC security controls)
Partner with DevOps and engineering teams to embed security into CI/CD pipelines and infrastructure-as-code
Conduct cloud security architecture reviews and threat modelling for new systems and services
Support vulnerability management and remediation efforts across cloud and hybrid environments
Contribute to compliance initiatives (e.g. ISO 27001, SOC 2) through control design, evidence generation, and audit support
Develop and maintain security standards, patterns, and technical documentation

Senior Consultant - CRM (Proactive Services) Unit 42

As a Senior Consultant in Unit 42 you will have the opportunity to work across a...

Location

South Korea , Seoul

Salary:

Not provided

Palo Alto Networks

Expiration Date

Until further notice

Requirements

3+ years of consulting experience in SOC, security engineering, SIEM administration, and incident management and demonstrated success with serving large, multinational organisations in designing and implementing an organisation's security operations program, organisational structures, and capabilities
Possess a deep technical knowledge in Security Incident and Event Management (SIEM) platforms, Security Orchestration and Response (SOAR) technologies, Endpoint Protection and Response/Next Gen Protection and Response (EDR/XDR) tools, Next GenFirewalls, Threat Intelligence and Hunting platforms
Defensive Security Skills (desired)
Experience in security operations design, engineering and/or analysis and investigations, ideally in complex environments, with security event correlations across a variety of sources i.e. cloud, network, endpoint, logs
Ability to perform detailed assessments, identify areas for improvement and make recommendations to transform an organisation's cyber security operations and capabilities to better protect, detect and rapidly respond to modern threats
Demonstrated experience in improving an organisations security operations capabilities such as improvements in asset visibility, threat detection capabilities, automation techniques, case management, enablement of compliance and regulatory requirements
Experience in conducting threat hunting and/or compromise assessments to identify active or dormant indicators of compromise (IoCs) or evidence of unknown threats within an organisations digital environment
Relevant industry certifications including GIAC Defensible Security Architect (GDSA), GIAC Intrusion Analyst (GCIA), GIAC Continuous Monitoring (GMON), CISSP
Understanding of cyber risk frameworks or industry standards such as 800-53, ISO 27001/2, PCI, CIS 18, CMMC
3+ years of experience performing cloud security advisement and risk assessments based upon industry-accepted standards

Job Responsibility

SOC Advisory
Principal Cloud Security
Principal Cyber Risk Management