Cyber Security Analyst

Job Description

At Boeing, we innovate and collaborate to make the world a better place. From the seabed to outer space, you can contribute to work that matters with a company where diversity, equity and inclusion are shared values. We're committed to fostering an environment for every teammate that's welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.

At Boeing, we innovate and collaborate to make the world a better place. From the seabed to outer space, you can contribute to work that matters with a company where diversity, equity and inclusion are shared values. We're committed to fostering an environment for every teammate that's welcoming, respectful and inclusive, with great opportunity for professional growth. Find your future with us.

Boeing Defence UK is looking for a Cyber Security Analyst based on site in Waddington, Lincolnshire.

Responsibilities:

You will work within the established monitoring and response frameworks to enable the timely and effective response and management of incidents, alarms, notifications, calls and all other activities related to the SOC, including new and emerging cyber threats.

• Respond to security events, requests and incidents logged in management systems.
• Monitor the security posture of the IT estate and identify anomalous activity and behaviours by the use of monitoring tools.
• Perform in-depth analysis of log files, systems, and network traffic.
• Hunt for suspicious activity based on anomalous activity.
• Innovate in the areas of SIEM and SOC and develop best practice.
• Continuously identifying improvements in both tooling and processes to ensure services operated are aligned to industry best practice and Boeing enterprise best practices.
• Triage/respond to 2nd/3rd line escalation of incidents.
• Mentor and oversee development of junior analysts.
• Work to well-defined SLAs & KPIs.

Required Skills and Experience:

3+ years' experience in the following areas:

• Experience of working in a Security Operations Centre (SOC).
• Experience of working with SIEMs and evaluating SIEM alerts.
• Experienced in using log aggregation and correlation tools (Splunk preferred).
• Experienced in interpreting system, application and network device logs.
• Experienced in packet capture and analysis.
• Working knowledge of network security controls: IDS/IPS, NIDS.
• Working knowledge of security controls: HIDS, EDR.
• Experienced in the development of protective monitoring use cases.
• Experienced in alert rule creation and development (SNORT, YARA, SIEM).
• Experienced in environment threat modelling.
• Experience in vulnerability management (Nessus).

Desirable Skills and Experience

• Experience researching current threats and vulnerabilities to Information Technology systems.
• Experience of practical threat hunting experience in a high value. information/high threat processing environment dealing with persistent threats.
• Information Security qualification, Degree-level education in Information Security or related area.
• CISSP Certification.
• CREST - Intrusion Analyst, Cyber Threat Intelligence.
• SANS GNFA, GCIA, GCIH.
• Comptia Security+, CySA+
• Splunk Enterprise Data Administration.
• Splunk Enterprise System Administration, or demonstrable equivalent experience.

Please note: this role will require you to work an early/late shift pattern, with occasional surge hours.

This position will require the successful candidate to obtain Security Clearance with no caveats.

This role is for a locally hired position in the UK.

CANDIDATES MUST HAVE CURRENT LEGAL AUTHORIZATION TO WORK IMMEDIATELY IN THE UNITED KINGDOM. BOEING WILL NOT ATTEMPT TO OBTAIN IMMIGRATION AND LABOR SPONSORSHIP FOR ANY APPLICANTS.

Benefits and pay are determined at the local level and are not part of Boeing U.S. based payroll.

Equal Opportunity Employer:

We are an equal opportunity employer. We do not accept unlawful discrimination in our recruitment or employment practices on any grounds including but not limited to; race, color, ethnicity, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military and veteran status, or other characteristics covered by applicable law.

We have teams in more than 65 countries, and each person plays a role in helping us become one of the world's most innovative, diverse and inclusive companies. We are a Disability Confident Committed employer and welcome applications from candidates with disabilities. Applicants are encouraged to share with our recruitment team any accommodations required during the recruitment process. Accommodations may include but are not limited to: conducting interviews in accessible locations that accommodate mobility needs, encouraging candidates to bring and use any existing assistive technology such as screen readers and offering flexible interview formats such as virtual or phone interviews.