Cybersecurity Analyst

£32k - £44k per annum

• Responsibilities:
  By stepping into Costello Medical’s first Cybersecurity Analyst role, you will be responsible for conducting security incident detection, monitoring and response, as well as supporting with the delivery of key IT security projects for our Technical Operations team.
• Salary: £35,000 to £40,000 per annum, depending on your qualifications and previous experience.
• Benefits:
  Discretionary profit share bonuses, hybrid working options that allow you to work from home up to 50% of your time after passing probation, generous holiday allowance, flexible working hours, employer pension contributions, comprehensive travel insurance, private medical insurance, critical illness cover, income protection, full funding for external training, interest-free travel loan scheme, discounted gym memberships, and more .
• Role Type:
  Full-time, permanent.
• Start date:
  We are currently recruiting for start dates in 2024, including November and December. However, we can also consider applications from those seeking a deferred start date in early 2025. You will be asked to state your availability on your application form.
• Location:
  This role is available in our Global Headquarters in Cambridge .

As Costello Medical continues to experience rapid growth, our vibrant and innovative Technical Operations (Tech Ops) team is seeking the company’s first dedicated Cybersecurity Analyst. This brand-new and pivotal role offers a talented individual the chance to shape the future of our cybersecurity efforts and lay the foundation for an in-house Security Operations Centre (SOC).

In this role, you will serve as the primary cybersecurity expert, triaging and responding to security incidents while contributing to the development and maintenance of innovative security processes and strategies. You will work both independently and collaboratively with the wider Tech Ops team, consulting on IT projects, providing strategic advice, and validating security elements to safeguard our IT infrastructure.

You will be responsible for promoting effective cyber hygiene across the company by conducting phishing simulations and using your knowledge of the evolving threat landscape to guide cybersecurity training initiatives. Additionally, you will have ample opportunities to enhance Costello Medical’s security by proposing and delivering security projects of your own.

Key responsibilities will include:

• Incident detection and response using EDR/XDR and SIEM technologies, including Microsoft Defender and Sentinel.
• Contributing to the development and maintenance of security procedures, including vulnerability scanning, remediation, and crafting playbooks for responding to alerts.
• Conducting phishing simulations, reporting results, and carrying out remediation activities.
• Developing and delivering training on IT security and data management to a variety of audiences.
• Proactively consulting on a variety of IT projects, providing strategic advice and validating security elements to ensure effective risk management and mitigation.
• Representing the Tech Ops team by explaining IT security processes, announcing changes, soliciting feedback, and maintaining strong relationships with other teams.
• Championing risk management and effective data management practices across the global business.
• Collaborating with other teams, such as our in-house Legal team, to ensure compliance with the latest security standards and helping the company achieve certifications such as Cyber Essentials+ and ISO
  27001.

As you gain experience and confidence within the role, you will have the opportunity to lead incident response efforts, implement process improvements, and spearhead the development of new security strategies. You will become the go-to person for IT security and risk mitigation, establishing yourself as Costello Medical’s designated cybersecurity expert.

Hybrid Working Policy:We recognise that home-working can improve work life balance, reduce commuting times and costs, and provide the opportunity to juggle personal commitments. At the same time, we believe that having face-to-face time in the office holds many benefits and…