Information Security Analyst

Job Description

Job purpose Reporting to the Information Security Operations Manager you will be a key part of the Security Operations Team.The Information Security Analyst provides review and analysis of security events and incidents reported to the SOC, responding in line with severity timescales and escalating any issues to the appropriate areas.The role directly supports the third-party monitoring provider in ensuring the correct monitoring is being performed against appropriate service level agreements as well as ensuring rulesets being monitored are relevant and effective for the organisation.The individual has responsibility for providing support to the Security Operations Manager in the planning and implementation of security measures and controls for security operations.The individual would be expected to build a network within and outside of Digital Technology Services.Key Responsibilities

• Responding to escalated security incidents in line with timescales and highlighting events requiring further investigation
• Coordinating, with supporting third party security service vendors to ensure appropriate monitoring and triage on alerts, events, or incidents
• Analysing security reports to identify trends and working with teams to develop strategies to drive secure behaviours throughout the business
• Understanding of vulnerability scanning and other security operations tasks
• Maintaining and delivery of email Phishing campaigns, reporting and remediation management
• Input and Involvement in Key Projects and Services
• Security maintenance of IPSNetwork Detection Tools
• Tracking the remediation of vulnerabilities reporting by scanning tools through to remediation or risk acceptance
• Supporting and participating in weekly security operations calls
• Reporting progress and escalating issues in a timely manner to the Security Operations Manager
• Maintaining reporting and dashboards for management reporting and producing input to team updates
• Performing security reviews across information systems and key infrastructure as required
• Supporting review of third-party services and ensuring contractual requirements are met
• Maintaining an awareness of security policies and regulatory requirements pertaining to information security

Key Skills and Experience

• Preferred experience working in a Security Operations Centre
• Preferred experience with SIEM, SOAR technologies
• Preferred experience working in operational teams such as helpdesk, incident management
• Preferred experience and knowledge of operating systems, hardware, software platforms and protocols
• Preferred experience in analysis cyber attacks using methodologies such as MITRE ATT&CK and other relevant frameworks
• Preferred experience in Microsoft Azure and M365 Security administration
• Preferred experience of Public DNS management, DMARC, DKIM and SPF functions
• Degree or relevant experience working in information technology, computer science, information systems or related field
• IPSNetwork Detection Tools
• Good understanding of AzureM365 Cloud Services and security tools
• Internet Access (CASB)(Proxy) Services
• Data Loss Protection monitoring and analysis