Cyber Operations Analyst

The founder and sponsor of the Harris Federation, Lord Harris of Peckham, opened our first school in 1990. We have, over the past thirty years, implemented ideas and  that have transformed the opportunities of pupils from working class and disadvantaged backgrounds. Harris academies are widely recognised as a force for social mobility. We are immensely proud of the role that our alumni are now beginning to play in the world and of what we believe our current generation of pupils will go on to achieve.

We now have over 50 schools educating more than 40,000 young people across London and Essex, and employ over 5,000 staff across our academies and head office. With the majority of our academies located in areas of high socioeconomic disadvantage, a high-quality education is key to the futures of the pupils we serve.

As a provider of employment and education, we value the diversity of our staff and students, and all our staff are equally valued and respected. We are committed to providing a fair, equitable and mutually supportive learning and working environment for our students and staff.

Our work will impact many generations to come, and our staff come from all backgrounds and walks of life, coming together to inspire young minds. We promote an inclusive culture that embraces the valuable and enriching contribution that all of our community make. We continue to be proactive in uplifting and supporting all voices at Harris.

To discover more about our culture, ethos and what it is like to work here, visit the Why Work For Us page.

Your responsibilities will include:

• Managing security events working as part of a blended cyber security team with our 24x7 MDR partner, predominantly using the Microsoft Security Stack to leverage industry standard response lifecycles
• Maintaining a working knowledge of response frameworks, such as MITRE ATT&K
• Configuring and refining alerting and leveraging automation and orchestration
• Working closely with GRC colleagues to deploy, refine, and monitor applicable cyber security controls
• Working closely with Infrastructure colleagues in response to security events
• Providing recommendations for the hardening of infrastructure and processes
• Maintaining knowledge bases, and incident playbooks
• Contributing to the development of policies, standards and guidelines with colleagues in GRC
• Maintaining the vulnerability management programme as per the vulnerability management standard
• Arranging exercises (red, blue and purple) as part of process and control testing and hardening
• Supporting with internal tabletop exercises and presentations
• Producing detailed incident reports
• Producing regular and ad-hoc reports that utilise metrics
• Supporting with cyber improvement initiatives and projects
• Supporting, mentoring and upskilling junior colleagues.
• Staying abreast of relevant security trends, technologies, and vulnerabilities
• Responding to internal and external security audits.

We would like to hear from you if you have:

• An undergraduate degree or equivalent
• Industry certifications such as, but not limited to CISSP, GCIAC, BTL1/2, SC-200 ITILv4
• Evidenced participation in bug-bounty programmes, vulnerability write ups, CTFs
• Evidenced contribution to security forums and communities
• Evidenced experience in giving, or receiving mentorship related to security
• Experience working in a technical role focussed on security
• Experience of Cyber Bootcamps, such as CAPSLOCK
• Understanding of the importance of your role with reference to supporting  40,000 students in realising their potential
• Excellent communication skills

For a full job description and person specification, please download the Job Pack.

If you would like to discuss the opportunity further, or if you have any questions, please contact us via email to arrange a conversation.

Before applying please ensure you download the job pack from our careers website, this will help with completing your application. Please note that we only accept applications submitted online before the closing date.

When applying, you will have the option to import your CV or use a LinkedIn profile which will auto populate the online application. 

A reminder to check your junk mail for our email communications and add us to your safe senders list to ensure all future email communication is received.