A leading global energy company is seeking a Cyber Operations and Threats Analyst to be based at their office on the outskirts of Aberdeen. This contract role will run until at least Dec ’26 and focuses on threat detection, incident response, and cyber defence. Specific cyber security experience is essential; relevant certifications are highly desirable.
Overview:
Reporting to the Cybersecurity Lead, you will cover mainly the operational dimension of the companies Cybersecurity. The role will collaborate with the Managed Cybersecurity Service Provider [MSSP] to protect the organisation. The threat landscape is increasing with the global geopolitical instability. The UK government is increasing the regulatory pressure on companies to ensure they are resilient against cyber threats. The company has around 5600 information technology assets and around 1000 operational technology assets. Their cybersecurity needs to be managed to reduce the cyber risk as much as possible. This role is required to help protect sensitive information, maintain business continuity and meet regulatory compliance requirements.
Main duties and responsibilities:
- Protecting the organisation's network and data from cyber-attacks by identifying, analysing and mitigating security threats.
- Continuously monitoring the organisation's network and systems for potential security breaches while conducting threat analysis, risk assessments, and vulnerability assessments. By identifying security risks, providing recommendations and implementing measures to remediate vulnerabilities and strengthen cyber defences.
- In the event of a security breach, responsibilities include conducting forensic investigations to determine its cause and scope. The role also involves participating in security incident response and disaster recovery activities, ensuring timely mitigation and resolution of threats.
- Collaboration is key, you will be working with the Managed Security Services Provider (MSSP) to enhance security posture. You will be coordinating with cross-functional teams to ensure compliance with security policies and regulations. Additionally, staying updated on the latest security trends, threats, and vulnerabilities is essential to proactively protect the organisation's network and data.
- The position also entails developing and maintaining security policies, procedures, and standards while preparing and delivering reports on security threats, vulnerabilities, and remediation efforts to management and stakeholders.
- Maintaining data confidentiality on sensitive cases.
- Maintaining a deeper organisational understanding.
- Facilitating cross functional collaboration.
- Maintaining cost efficiency in the long run.
- Demonstrating compliance and control data handling.
- This core role alleviates the single point of failure in the cyber security function.
Applicants to this role require:
- You should hold a degree in Computer Science, Cybersecurity, or a related field and have a proven track record in cybersecurity operations and threat analysis.
- Relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or CompTIA Advanced Security Practitioner (CASP+) are highly desirable.
- Strong expertise in network security concepts, protocols, security standards and best practices is essential.
- Additionally, experience with security tools and technologies, including firewalls, intrusion detection/prevention systems, and security information and event management (SIEM) tools is particularly valued.