Senior Security Analyst, Cubic

• Demonstrable experience in security operations or development roles
• Sound knowledge of change and configuration management, reliability and safety methods and the use of metrics
• Extensive knowledge of information security and technologies
• Significant experience in an IT environment
• In depth understanding of IT security control tools, e.g. ArcSight, Splunk, Qualys, Nessus, Tripwire, OSSec, Cisco IPS, McAfee, IBM Guardium, Centrify, Barracuda WAF
• University degree in a relevant subject (e.g. information security, encryption, computer science, maths, engineering) or equivalent educations/experience
• Certification as an Information Security professional (e.g. IISP/CISA/CISM/SSCP/ CISSP/ ISA)
• Personal Qualities
• Able to work effectively and uphold professional standards and confidentiality with internal and external stakeholders at all levels
• Self-motivated
• Able to work on own initiative, unsupervised
• Attention to detail and adherence to procedures
• Strong customer service skills
• Strong verbal and written communications skills
• Ability to understand corporate objectives to implement them as business unit policy
• Ability to travel

Desirable

• Responsible for applying IT security tools and processes to manage and report operational information security risk as a service provider to customers
• Works with internal service and technical teams to manage the outputs of security systems
• Provides guidance and expertise regarding operational service calls, incidents and problems, and general awareness of information security
• This position typically works under general supervision and direction
• Incumbents will regularly exercise discretionary decision-making authority
• Works autonomously to recognize, investigate and reconcile violation reports and logs generated by detection systems in accordance with established procedures and security standards. Examples include but are not limited to responding to and reporting from automated alerting systems, auditing logs, IDS/IDP logs, anti-virus and firewall systems
• Installs, manages and improves technical security control tools
• Undertake security investigations and compiles outcome reports. Implements recommendations where required
• Creates and delivers user documentation and security awareness literature and training
• Contributes to the assessment of the potential impact on existing access security mechanisms of specific planned technical changes, in order to help ensure that potential compromise or weakening of existing security controls is minimized. Participates in the evaluation, testing and implementation of such changes
• Ensures that coordination and change control are applied to technical specifications and to the technical infrastructure
• Leads risk assessments and security control reviews for all types of business applications and computer installations and recommends appropriate action to management
• Supports internal and external customers defining their needs for new access rights and privileges
• Contributes to other information security, contingency planning and related activities
• Some manual handling may occasionally be required. May be required to work on other Cubic sites and data centers
• Provide training and guidance to the wider team, promoting best practice and process improvement
• Comply with Cubic’s values and adherence to all company policy and procedures. In particular comply with the code of conduct, quality, security and occupational health, safety and environmental policies and procedures
• In addition to the duties and responsibilities listed, the job holder is required to perform other duties assigned by their manager from time-to-time, as may be reasonably required of them