Position: Research Analyst for Cyber-Security Startup
Company: Talent First
Experience required: 5y
English level: upper

We are looking for an experienced Research Analyst for our customer - London-based early stages cyber-security startup.

The Cyber Research Analyst is responsible for driving R&D innovation in Cyber Posture Management, Security Architecture Automation, Threat modeling &Regulatory Analysis. This is a full-time position reporting to the CTO.

**Responsibilities**
- Research into the capabilities of leading security solutions in the market and their ability to prevent cyber threats.
- Perform hands-on evaluations of leading security products and solutions in the market to better understand their capabilities and functionality.
- Analyze the relationship between best-of-breed security solutions and their ability to satisfy regulatory requirements.
- Write up reports on various research activities and collaborate with the CTO branch & R&D team to drive the product’s capabilities and functionality.

**Requirements**
- 2+ years working as an IR forensic analyst (Tier-3)/CIRT member OR 2+ years working as a security engineer
- 3+ years working within the information security field
- In-depth knowledge of modern security concepts and how to apply them
- Hands-on experience with various security tools, including (but not limited to): EPP, EDR, Web proxy, VPN, Firewall/UTM, SASE, SIEM, Web Isolation, OS Security &Hardening (Win, Lin, MacOS), AD Security, IdP Security, SSO solutions (OKTA, etc.), PIM, PAM, Backup, Virtualization, SDN, WAF, SIEM, SOAR, XDR/MXDR, Vulnerability MGMT, MDM, Patch MGMT, NAC, DNS Security, Email Security (SMG), Wireless Security, CNAPP/CSPM, DLP, DBFW, Security governance platforms.
- Familiarity with security regulations and standards such as NIST 800-53, SOC2, PCI-DSS & HIPAA.
- Experience designing, implementing, and measuring relevant security and technology management critical success factors, key performance indicators, and metrics.
- Demonstrated technical knowledge of Information security, Network security, Endpoint security, Application security, and Cloud security.
- Demonstrated technical knowledge of Strong Authentication, Internet Policy Enforcement, Firewalls, Web Content Filtering, Database Activity Monitoring, PKI, IDP, DLP, IAM, and NAC solutions.
- Proven ability to diagnose and troubleshoot complex technical issues.
- Proven ability to make decisions and perform complex problem-solving activities under pressure.
- Ability to work independently for extended periods of time yet communicate efficiently within a team environment.
- Advanced technical and technical writing skills.

**Desired Certifications**
Bachelor’s degree
CISSP
CISM

We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, and other legally protected characteristics.