# EOI - Cyber Monitoring Engineer and Analyst **Company**: Department for Culture, Media and Sport **Location**: Manchester, Greater Manchester **Work arrangement**: hybrid **Job type**: full-time **Salary**: GBP 43,065 - 56,789 per year **Category**: Security **Industry**: Government & Public Sector **Apply**: https://www.jobsgopublic.com/job/eoi-cyber-monitoring-engineer-and-analyst-113234?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_bdecfcbb-06d ## Description We are transforming DCMS to meet the needs of a modern, delivery-focused department working on some of government’s highest-priority agendas to drive growth, enrich lives and level-up society. This is a short-term role for a maximum of 1 year, which is available on both level transfer and temporary promotion. We are seeking a Cyber Monitoring Engineer and Analyst. You will be at the forefront of safeguarding our digital assets and data. With a good understanding of the complexities of cyber security, you will be a key part of our cyber team, working with the team to monitor the ever-evolving threat landscape. The role is critical in monitoring, detecting, analysing, and responding to security incidents and threats with precision. Your awareness in security technologies and incident response procedures will be pivotal in protecting our critical systems and data. Leveraging Azure cybersecurity tools, especially Azure Sentinel, you will ensure vigilant incident and event monitoring. Working will collaborate closely with a team to maintain and enhance our security posture. The main aspects of the role will be: - Participate in security testing and monitoring. - Manage security logs, identifying log sources, collect and store logs. - Correlate and triage security incidents - Cyber Incident response planning and preparation - Cyber Incident detection, investigation and analysis - Cyber Incident containment, eradication and recovery - Cyber Incident post incident activity and reporting - Development and implementation of Automation techniques The ideal candidate would have the following skills: **Essential requirements:** - Experience with Cyber Incident detection, investigation and analysis using Microsoft Sentinel or similar SIEM - Experience with and understanding of security logs including identifying log sources, collect and store logs. - An analytical mindset and apply risk-based decisions using the output from security tools - Involvement in correlating and triage of security incidents - Understanding of Cyber Incident response planning and preparation - Understanding of Cyber Incident containment, eradication and recovery - Understanding of Cyber Incident post incident activity and reporting **Desirable skills:** - An understanding of cyber security tools including SIEM/SOAR, CASBs, EDRs and cloud-native tools. - Ability to develop and tune detection content, and assist in threat hunts, to identify potentially malicious activity. - Experience of Investigating security alerts to understand the nature and extent of possible cyber incidents and assist in the containment and eradication. - Identifying cyber threats and vulnerabilities and working with teams across ICS to mitigate them. - An understanding of programming skills (SQL, KQL). - Azure Fundamentals Certification - CompTIA Security+ Certification Alongside your salary of £43,065, Department for Culture, Media and Sport contributes £12,475 towards you being a member of the Civil Service Defined Benefit Pension scheme. DCMS values its staff and offers a wide range of benefits to everyone who works here. We’re committed to developing talent, and supporting colleagues to have great careers in our department. To support with that, some of the benefits we offer include: - Flexible working arrangements and hybrid working - DCMS staff work on a flexible basis with time spent in offices, and time spent working from home - 26.5 days annual leave on entry, increasing to 31.5 days after 5 years’ service - A Civil Service pension with an employer contribution of 28.97% - Access to the Edenred employee benefits system which offers discounts to popular retailers and access to various useful resources such as financial and savings advice - 3 days of paid volunteering leave - Up to 9 months maternity leave on full pay + generous paternity and adoption leave - Staff reward and recognition bonuses that operate throughout the year - Occupational sick pay - Access to the Employee Assistance Programme which offers staff 24/7 confidential support and resources such as counselling, debt guidance and management advice - Active and engaged staff networks to join including the LGBT+, Ethnic Diversity, Mental Health and Wellbeing and Gender Equality Networks - Exceptional learning and development opportunities that you can explore alongside your day-to-day work - Season ticket loan, cycle to work scheme and much more! ## Skills ### Required - Cyber Incident detection - Microsoft Sentinel - security logs - analytical mindset - risk-based decisions - correlating and triage of security incidents - Cyber Incident response planning ### Nice to have - SIEM/SOAR - CASBs - EDRs - cloud-native tools - SQL - KQL - Azure Fundamentals Certification - CompTIA Security+ Certification --- Source: [Apply at jobsgopublic.com](https://www.jobsgopublic.com/job/eoi-cyber-monitoring-engineer-and-analyst-113234?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)