Job Description

OT / IT Security Analyst - NIS /CAF / IEC62443 (Relocation package available) £50,000 - £60,000 + 20% Bonus / overtime Interesting opportunity to join one of the UK's largest energy producing companies as they continue to grow and further develop their OT / IT Security functions. We require a Security Analyst with strong experience and knowledge of security, ideally within the energy sector. The Sec All potential applicants are encouraged to scroll through and read the complete job description before applying.

Quick response

Required Knowledge

• K0001   Knowledge of computer networking concepts and protocols, and network security methodologies.
• K0013   Knowledge of cyber defense and vulnerability assessment tools and their capabilities.
• K0058   Knowledge of network traffic analysis methods.
• K0161   Knowledge of different classes of attacks (e.g., passive, active, insider, close-in, distribution attacks).
• K0301   Knowledge of packet-level analysis using appropriate tools (e.g., Wireshark, tcpdump).
• K0324   Knowledge of Intrusion Detection System (IDS)/Intrusion Prevention System (IPS) tools and applications.
• K0332   Knowledge of network protocols such as TCP/IP, Dynamic Host Configuration, Domain Name System (DNS), and directory services.
• K0339   Knowledge of how to use network analysis tools to identify vulnerabilities.
• K0624   Knowledge of Application Security Risks (e.g. Open Web Application Security Project Top 10 list)

Required Skills

• S0036   Skill in evaluating the adequacy of security designs.
• S0057   Skill in using protocol analyzers.
• S0156   Skill in performing packet-level analysis.
• S0169   Skill in conducting trend analysis.
• S0367   Skill to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).

Required Abilities

• A0015  Ability to conduct vulnerability scans and recognize vulnerabilities in security systems.
• A0123  Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• A0159  Ability to interpret the information collected by network tools (e.g. Nslookup, Ping, and Traceroute).