At a Glance
- Tasks: Monitor and respond to security incidents, ensuring the safety of critical infrastructure.
- Company: Join Drax, a leader in renewable energy and sustainability, making a real impact on climate change.
- Benefits: Enjoy competitive salary, 25 days leave, private medical insurance, and a pension scheme.
- Why this job: Be part of a passionate team driving a zero carbon future while developing your cybersecurity skills.
- Qualifications: Background in Cyber Security or Operational Technology; entry-level certifications preferred.
- Other info: Flexible hybrid working options available across multiple locations.
The predicted salary is between 36000 - 60000 £ per year.
Flexible location - Glasgow, Ipswich, London, Northampton or Selby
Hybrid working
Permanent, full time
Closing date: Friday 2nd May 2025
Who we are
We’re not just talking about making a difference, we’re making it happen. We generate dispatchable, renewable power and create stable energy in an uncertain world. Building on our proud heritage, we have ambition to become the global leader in sustainable biomass and carbon removals. You’ll be joining our teams of practical doers, future thinkers and business champions. We’re enabling a zero carbon, lower cost energy future for all, and working hard to decarbonise the planet for generations to come.
About the role
As a CDC Analyst, you’ll enhance security and protect organisational assets and users by monitoring, detecting and responding to security incidents within the Cyber Defence Centre (CDC). You’ll play a critical role in incident response, swiftly investigating and mitigating security breaches to minimize their impact. The role will involve monitoring and detecting emerging threats and communicate findings to stakeholders. Additionally, you’ll contribute to continuous improvement by actively participating in the development of security policies and procedures. This is a key role in ensuring the reliability and safety of UK critical national infrastructure.
- Cybersecurity Monitoring: Continuously monitoring the efficacy and maintain OT security monitoring solutions deployed within the OT environment.
- Incident Response: Developing and implementing incident response plans for handling cyber incidents in OT environments, including containment, eradication, and recovery procedures.
- Vulnerability Management: Acknowledging and assessing vulnerabilities in OT systems and coordinate with relevant teams to remediate them.
- Collaboration: Collaborating with IT and Generation Engineering/Operation teams to ensure timely resolution of security incidents.
- Documentation: Maintaining detailed records of security incidents, assessments, and remediation efforts.
Additional responsibilities include:
- Analysing and interpreting situations, applying knowledge and experience to determine the appropriate solution.
- Applying professional reasoning when interacting with others to gain understanding, support or to influence others.
- Engaging with contractors and colleagues from other areas of the business.
- Proposing changes to existing processes to help drive efficiency and effectiveness.
- Ensuring own work, and/or that of the team, is compliant with the appropriate regulations, policies and procedures.
- Analysing and responding to security events.
- Incident detection and response.
Who we’re looking for
You’ll have a background in Cyber Security and/or Operational Technology, with a sound understanding of network security. Ideally, you’ll also hold an entry level certification such as SEC+, Net+, SANS or GIAC. You’ll need an understanding of security frameworks including but not limited to NIS/NIST/IEC/SoGP Cyber Kill Chain, coupled with an understanding of relevant legislation (Criminal Law, Health and Safety, Data Protection, Human Rights, Employment and Equal Opportunities regulations). This role requires strong analytical and problem-solving skills including root-cause analysis with the ability to manage multiple activities at pace. You’ll have strong communication and stakeholder management skills, both verbal and written, with the ability to lead small projects, work with complexity and think outside the box.
Rewards and benefits
As you help us to shape the future, we’ve shaped our rewards and benefits to help you thrive and support your lifestyle:
- Competitive salary
- Discretionary group performance-based bonus
- 25 days annual leave (plus Bank Holidays)
- Single cover private medical insurance
- Pension scheme
We’re committed to making a tangible impact on the climate challenge we all face. Drax is where your individual purpose can work alongside your career drive. We work as part of a team that shares a passion for doing what’s right for the future. With Drax you can shape your career and a future for generations to come. Together, we make it happen.
At Drax, we’re committed to fostering an environment where everyone feels valued and respected, regardless of their role. To make this a reality, we actively work to better represent the communities we operate in, foster inclusion, and establish fair processes. Through these actions, we build the trust needed for all colleagues at Drax to contribute their perspectives and talents, no matter their background.
How to apply
Think this role’s for you? Click the ‘Apply now’ button to begin your Drax journey. If you want to find out more about Drax, check out our LinkedIn page to see our latest news.
Cyber Defence Centre Analyst (OT Detect & Respond) employer: Drax
Contact Detail:
Drax Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Cyber Defence Centre Analyst (OT Detect & Respond)
✨Tip Number 1
Familiarise yourself with the specific security frameworks mentioned in the job description, such as NIS, NIST, and IEC. Understanding these frameworks will not only help you during the interview but also demonstrate your commitment to the role.
✨Tip Number 2
Engage with current trends in Cyber Security and Operational Technology by following relevant blogs, forums, or social media channels. This knowledge can provide you with valuable insights to discuss during interviews and show your passion for the field.
✨Tip Number 3
Network with professionals in the Cyber Security field, especially those who work in OT environments. Attend industry events or webinars to make connections that could lead to referrals or insider information about the role.
✨Tip Number 4
Prepare to discuss real-world scenarios where you've successfully managed security incidents or vulnerabilities. Having concrete examples ready will showcase your problem-solving skills and ability to handle pressure, which are crucial for this role.
We think you need these skills to ace Cyber Defence Centre Analyst (OT Detect & Respond)
Some tips for your application 🫡
Tailor Your CV: Make sure your CV highlights relevant experience in Cyber Security and Operational Technology. Emphasise any certifications like SEC+, Net+, SANS, or GIAC, and showcase your understanding of security frameworks such as NIS/NIST.
Craft a Strong Cover Letter: Write a compelling cover letter that explains why you are passionate about the role and how your skills align with the responsibilities outlined in the job description. Mention your analytical and problem-solving skills, and provide examples of past experiences.
Showcase Communication Skills: Since strong communication is key for this role, ensure your application reflects your ability to convey complex information clearly. Use concise language and structure your application well to demonstrate your written communication skills.
Highlight Team Collaboration: Discuss any previous experiences where you collaborated with teams, especially in incident response or security management. This will show your ability to work effectively with IT and engineering teams, which is crucial for this position.
How to prepare for a job interview at Drax
✨Understand the Role
Make sure you have a solid grasp of what a Cyber Defence Centre Analyst does. Familiarise yourself with incident response, vulnerability management, and the specific technologies used in operational technology environments.
✨Showcase Your Certifications
If you hold any relevant certifications like SEC+, Net+, SANS, or GIAC, be sure to mention them. These qualifications can set you apart and demonstrate your commitment to the field of cybersecurity.
✨Prepare for Technical Questions
Expect questions that test your knowledge of security frameworks such as NIS, NIST, and the Cyber Kill Chain. Brush up on these topics and be ready to discuss how they apply to real-world scenarios.
✨Demonstrate Communication Skills
As this role involves collaboration with various teams, practice articulating your thoughts clearly. Be prepared to discuss how you've effectively communicated complex information to stakeholders in the past.