At Amber Labs, we are a cutting-edge UK and European technology consultancy that prioritises empowering autonomy, promoting experimentation, and facilitating rapid learning to provide exceptional value to our clients. Our company culture is centred around collaboration, where all colleagues, regardless of their role, work together to minimise risk and shorten delivery times. Our team consists of highly-skilled cross-functional consultants, analysts, and support staff.

ROLE: Cyber Security Analyst
LOCATION: Northallerton, Yorkshire (On-Site)
CLEARANCE: Must be DV Cleared

As a Cyber Defence Analyst at Amber Labs, you will be an integral part of our expanding security team tasked with designing, implementing, and maintaining operational cybersecurity measures. Your responsibilities will include proactive risk assessment, protective monitoring of priority C4IS/networks, and swift response to internal and external cyber threats and attacks. This role demands a diverse skill set, including mentoring junior analysts, actively monitoring networks, and swiftly remediating unauthorized activities.

Your Role:

Develop and integrate security event monitoring and incident management services.
Respond promptly to security incidents as part of an incident response team.
Implement metrics and dashboards to provide visibility of the Enterprise infrastructure.
Utilize the SOAR platform for playbook automation and case management to streamline team processes.
Produce documentation to ensure repeatability and standardization of security operating procedures.
Develop innovative investigative methods using SOC software toolsets to enhance threat detection capabilities.
Maintain system security baseline according to the latest threat intelligence and evolving trends.
Participate in root cause analysis of incidents in collaboration with engineers across the enterprise.
Provide Subject Matter Expertise (SME) on information security standards and best practices.
Offer strategic and tactical security guidance, including technical control evaluation.
Contribute to the CRM process.
Collaborate with SOC engineers to maintain up-to-date security alert dashboards for improved incident response.
Document, validate, and create operational processes and procedures to enhance SOC development.
Assist in identifying, prioritizing, and coordinating the protection of critical cyber defense infrastructure and key resources.
Build, install, configure, and test dedicated cyber defense hardware.
Support Junior Analysts in managing SOC systems.
Demonstrate previous experience with Enterprise ICS/network architectures and technologies.
Possess experience and knowledge of SIEM solutions, including use case identification, creation, deployment, and tuning.
Serve as a mentor/coach to junior analysts.

Your Profile:

Previous experience utilizing the MITRE ATT&CK and Cyber Kill Chain frameworks.
Proficiency in maintaining Microsoft directory services.
Familiarity with virtualization software.
Knowledge of key security frameworks such as ISO, NIST 800-53, 800-171, 800-172, C2M2.
Excellent communication skills.
Experience in writing Defence/Government documentation.

Desirable Qualifications:

Broad Spectrum Cyber Course (SANS SEC401 or SEC501 or equivalent).
SIEM Design, Architecture, and Analyst Course (SANS SEC455 or SEC555 or equivalent).
Advanced Analyst Course (SANS SEC503 or equivalent).

Benefits:

Join a rapidly expanding startup where personal growth is a part of our DNA.
Benefit from a flexible work environment focused on deliverable outcomes.
Receive private medical insurance through Aviva.
Enjoy the benefits of a company pension plan through Nest.
25 days of annual leave plus UK bank holidays.
Access Perkbox, a global employee rewards platform offering discounts, perks, and wellness resources.
Participate in a generous employee referral program.
A highly collaborative and collegial environment with opportunities for career advancement.
Be encouraged to take bold steps and embrace a mindset of experimentation.
Choose your preferred device, PC or Mac.

Diversity & Inclusion:

Here at Amber Labs, we are dedicated to fostering an inclusive and equitable workplace for all. Our commitment to diversity, equality, and inclusion includes:

Valuing the unique experiences, perspectives, and backgrounds of all employees and creating an environment where everyone feels welcomed, respected, and valued.
Prohibiting all forms of harassment, bullying, discrimination, and victimisation and promoting a culture of dignity and respect for all.
Educating all new hires on our Diversity and Inclusion policies and ensuring they are aware of their rights and responsibilities to create a safe and inclusive workplace.
By taking these steps, we are dedicated to building a workplace that reflects and celebrates the diversity of our employees and communities.

What Happens Next?

Our Talent Acquisition team will be in touch to advise you on the next steps. We have a two-stage interview process for most of our consultants. In certain cases, we may include a third and final stage, which is a conversation with the company Partners. This will only be considered if deemed necessary.