Job ID: VAS/JULY2026/01
Number of positions: 01
Duties and Responsibilities:
- Monitor security alerts and events using SIEM platforms to identify suspicious activities and potential breaches.
- Analyze logs, traffic patterns, and system behavior to detect cyber threats, vulnerabilities, and malicious activity.
- Investigate security incidents, perform root-cause analysis, and document findings with supporting evidence.
- Assist in digital forensics activities, including data collection, examination, and reporting.
- Manage and maintain vulnerability assessment processes, including risk prioritization and remediation tracking.
- Support cloud security administration and ensure secure configuration of cloud-based resources.
- Participate in incident response operations, containment, recovery, and post-incident reviews.
- Develop and maintain security procedures, technical documentation, and operational guidelines.
- Support automation initiatives through scripting, security tooling integration, and validation testing.
- Generate periodic security reports, dashboards, and metrics for management review.
- Evaluate operational risks and change requests to determine security impact and recommend mitigation actions.
- Assist with business continuity and disaster recovery planning to ensure resilience during critical incidents.
- Escalate critical security concerns promptly to management and collaborate with internal teams for resolution.
Required Skills & Experience
- Strong understanding of modern cyber threats, attack vectors, and exploitation techniques.
- Experience working with security monitoring, SIEM tools, and incident management workflows.
- Knowledge of CyberArk, privileged access management, or similar enterprise security solutions.
- Familiarity with cloud platforms such as Azure, AWS, or Google Cloud and related security controls.
- Understanding of infrastructure security across servers, networks, endpoints, and applications.
- Experience with vulnerability scanning, remediation tracking, and risk assessment methodologies.
- Knowledge of scripting or automation using tools such as PowerShell, Python, or Bash is advantageous.
- Familiarity with Agile, Scrum, or modern IT delivery frameworks is preferred.
- Strong analytical, problem-solving, and communication skills.
- Prior experience in a cyber security, SOC, or security operations role is preferred.
Pay: £40,000.00-£52,000.00 per year
Work Location: Hybrid remote in Ashford TW15 2RP