Information & Cyber Security Analyst

The NHS Counter Fraud Authority (NHSCFA) is the national body responsible for all matters relating to the prevention, detection and investigation of economic crime across the NHS. Further information about our work and annual plan for delivering this is available on our website.
An exciting opportunity has arisen to join the NHSCFA Technology team as an Information & Cyber Security Analyst. We are looking for someone with a proven background in Information/Cyber security and a flexible 'can do' attitude and approach to work in the Information & Cyber Security (I&CS) Team who manage and maintain the security of NHSCFA ICT infrastructure and information systems.
You will work within the I&CS team to proactively monitor IT systems; identify, manage and resolve security incidents, vulnerabilities, security alerts and threats; potentially perform penetration testing; and contribute to maintaining security certifications, assurances and accreditations.
We reserve the right to close this vacancy before the advertised closing date should we receive a significant number of applications.
Potential applicants can contact Simon Clark at [email protected] for an informal chat if they have any questions regarding the role.
Interviews will be held on 30th July 2024., Actively manage, monitor and develop NHSCFA Cyber operations, including managing alerts, identifying and mitigating vulnerabilities and cyber threats.
Manage security incidents and requests through to remediation and resolution.
Support the Security Incident Management Process as a member of the NHSCFA Security Incident Response Team.
Carry out threat intelligence analysis and recommend or implement remediation or mitigation.
Perform security risk assessments, identifying security gaps and recommending appropriate remediation.
Create and prepare Cyber Security Operations reports, Manage, monitor, and develop NHSCFA cyber security operations and ICT security infrastructure to manage and reduce cyber risk and mitigate cyber threats.
Actively monitor NHSCFA ICT systems:
manage and operate IT security monitoring tools and systems ; review IT system alerts ; triage to eliminate false positives ; Identify threats that have entered the network.
Evaluate and address system generated and user-reported security incidents ; identify affected systems and scope of the incident ; analyse running processes and configurations on affected systems ; carry out in-depth threat intelligence analysis to identify an attack type, source, entry point, and possible remediation ; implement remediation or escalate incident.