Security Operations Analyst in Birmingham

As a Security Operations Analyst you will be part of a small team that is responsible for monitoring and maintaining the security of Gateley's IT infrastructure, software, and users.

The Security Operations Analyst will:

• Be responsible for the day-to-day operation and maintenance of security tools and controls.
• Proactively monitor the firm's network and computing infrastructure, review reports and respond to threat intelligence and alerts.
• Raise and manage incidents and changes, remediate vulnerabilities, and implement improvements in IT Security.
• Prepare and present routine reporting of agreed security KPIs and of compliance with policy and security certifications.
• Work with other members of the IT Team and the wider business as 2nd line support where IT Security input is required for BAU or project activities.
• Conduct simulated phishing tests and manage delivery of online security training and awareness campaigns.
• Maintain and develop your knowledge of IT Security, industry trends, technology, and threats.
• Assist third-party providers of security services with penetration testing and security auditing and certification.
• Contribute knowledge and expertise in relation to the secure design of new services.
• Liaise with relevant suppliers where required.
• Participate in the resolution of incidents escalated to the team.
• Identify opportunities for improvement.
• Ensure that all system and operating documentation is up to date and available to the appropriate teams.

Due to the nature of the team you may from time to time be asked to undertake ad-hoc tasks outside of your core responsibilities.

We are looking for someone with a broad knowledge of IT and some IT Security experience, ready to take on responsibility for our day-to-day security operations. We will provide training and other opportunities for the right person to develop their skills.

Essential:

• A practical understanding of information security in a corporate environment.
• Security monitoring, alert triage and incident response principles.
• Networking concepts, services and protocols, including LAN, WAN, DNS, encryption and remote access.
• Identity and access management, multifactor authentication and privileged access.
• Microsoft Windows desktop and server operating systems.
• Microsoft 365, Microsoft Entra ID, Active Directory.
• Endpoint, email, network, web, and cloud security technologies.
• Vulnerability management and remediation.
• IT service management principles, including incident and change management.
• Excellent documentation and communication skills.

Desirable:

• A relevant information security qualification (Security+, CC, etc.).
• SaaS and IaaS cloud security principles, including SSE and SASE.
• Understanding of AI technology and associated security risks.
• Familiarity with standards, controls, certifications including ISO 27001, Cyber Essentials Plus.
• Understanding of statutory and regulatory requirements for the handling of sensitive data.
• Experience of working within the legal/professional services industry.
• Business continuity planning and disaster recovery.
• Microsoft Azure, Intune, Configuration Manager.
• Virtualisation, Linux, scripting or software development.
• Security testing experience.

Diversity, inclusion and well being is an important part of Gateley's culture and values. We recruit talented people from a diverse range of backgrounds and cultures, providing equal opportunities for all to join our team regardless of age, sex, race, sexual orientation, disability, or culture.

We create an exciting and rewarding place to work that aims to fulfil everyone's potential and together to achieve personal and business goals. We offer flexible working patterns to help our staff achieve a good work/life balance and we encourage candidates seeking flexibility in their next role to apply for any of our vacancies.