At a Glance
- Tasks: Lead incident response and enhance security automation in a dynamic environment.
- Company: Join a leading retail company with a strong focus on information security.
- Benefits: Enjoy discounts, bonuses, health services, and career development opportunities.
- Other info: Collaborative culture with excellent growth potential and access to diverse resources.
- Why this job: Make a real impact by evolving our security capabilities and mentoring junior analysts.
- Qualifications: Experience in InfoSec, strong analytical skills, and proficiency in scripting.
The predicted salary is between 60000 - 80000 £ per year.
Working within the Information Security team, you will be a technical linchpin for Incident Response across the global estate. While you will respond to and investigate high-priority events, your primary focus will be the evolution of our defensive capabilities. You will bridge the gap between pure analysis and engineering.
You will drive growth and improvement in incident response automation, identifying opportunities to replace manual processes with high-fidelity SOAR playbooks and automated workflows. You will lead our detection creation efforts, identifying monitoring gaps and developing custom rules within our SIEM and EDR platforms to ensure we stay ahead of sophisticated adversaries.
As a Senior Security Analyst, you will act as a technical escalation point for the team, mentoring junior analysts in complex investigations and forensic collection. You will collaborate with Vulnerability Management and Engineering to ensure that lessons learned are not just documented, but are actively coded into our security controls through improved detection logic and automated response.
What You’ll Take On
- Detection Engineering: Proactively develop, test, and deploy custom detection rules and logic (SIEM, EDR, IDS) to identify emerging threats and TTPs specific to the retail and warehouse environment.
- SOAR Orchestration: Design and implement automated playbooks to streamline repetitive response tasks, reducing Mean Time to Respond (MTTR) and analyst fatigue.
- Advanced Incident Response: Lead the investigation of high-complexity security incidents, ensuring prompt containment, eradication, and recovery.
- Control Tuning: Systematically identify and eliminate false positives through rigorous rule tuning and correlation logic improvements.
- Forensic & Root Cause Analysis: Conduct deep-dive forensic investigations and use the findings to develop new preventative controls and detection signatures.
- Strategic Reporting: Maintain and evolve security metrics that demonstrate the effectiveness of our automation and the maturity of our detection coverage.
- Collaboration: Liaise with Security Engineering and 3rd-party partners to integrate diverse data sources into our monitoring pipeline.
- Operational Excellence: Maintain an awareness of the global threat landscape, translating threat intelligence into actionable detection content.
- Mentorship: Support the Team Leader in upskilling the analyst cohort, specifically in areas of scripting, regex, and logic-based investigation.
What You’ll Bring
- Essential Experience: Proven Information Security experience in a SOC or IR environment, with a demonstrable shift toward security development or engineering.
- Technical Proficiency: Strong analytical skills within Windows and Linux environments, with the ability to parse complex logs and identify anomalous behaviour.
- Tooling: Experience configuring and maintaining SIEM, SOAR, and EDR platforms (e.g., creating custom dashboards, alerts, and automated workflows).
- Communication: Ability to remain calm under pressure and translate technical automation concepts into clear updates for management.
- Mindset: A "dev-first" approach to security—constantly seeking to automate manual tasks and improve detection fidelity.
- Desirable Qualifications: Relevant industry-recognised security certifications (e.g., SANS GIAC, GCIA, GCIH, or CySA+).
- Scripting & Logic: Proficiency in at least one scripting language (e.g., Python, PowerShell, or Bash) and experience with Regex for log parsing and rule creation.
- Automation: Experience building API integrations between security tools to facilitate automated data enrichment.
- Cloud: Experience with detection and response within Cloud-based infrastructure (AWS or Azure).
- Frameworks: Familiarity with the MITRE ATT&CK framework and its practical application in rule development.
Benefits
- 25% off most NEXT, MADE*, Lipsy*, Gap* and Victoria's Secret* products (when purchased through NEXT)
- Company performance based bonus
- Sharesave scheme
- On-site Nursery available; OFSTED outstanding in all areas
- 10% off most partner brands & up to 15% off Branded Beauty
- Early VIP access to sale stock
- Access to fantastic discounts at our Staff Shops
- Restaurants with great food at amazing prices
- Access a digital GP and other free health and wellbeing services
- Free on-site parking
- Financial Wellbeing - Save, track and enhance your financial wellbeing
- Apprenticeship - Grow and develop on the job whilst gaining a qualification
- Direct to Work - Discount online and instore, collect your items the next day for free from your place of work or local store
- Support Networks - Access to Network Groups to empower and celebrate each other
- Wellhub - Discounted flexible monthly gym memberships, with apps, PT sessions and more
Conditions apply to all benefits. These benefits are discretionary and subject to change.
Senior Security Analyst - InfoSec in Leicester employer: Next
As a Senior Security Analyst at our company, you will thrive in a dynamic work culture that prioritises innovation and collaboration within the Information Security team. With a strong focus on employee growth, we offer mentorship opportunities, access to cutting-edge tools, and a commitment to automating processes that enhance your skills and career trajectory. Located in a vibrant retail environment, you'll enjoy unique benefits such as substantial discounts on popular brands, an on-site nursery, and a supportive network that fosters both personal and professional development.
StudySmarter Expert Advice🤫
We think this is how you could land Senior Security Analyst - InfoSec in Leicester
✨Tip Number 1
Network like a pro! Reach out to current employees in the InfoSec team on LinkedIn or other platforms. A friendly chat can give you insider info and might just get your application noticed.
✨Tip Number 2
Show off your skills! If you’ve got a portfolio of projects or contributions to open-source security tools, make sure to highlight them during interviews. It’s a great way to demonstrate your technical prowess.
✨Tip Number 3
Prepare for those tricky questions! Brush up on your incident response scenarios and be ready to discuss how you’d tackle complex security incidents. We want to see your thought process in action.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets into the right hands. Plus, it shows you’re genuinely interested in joining our team.
We think you need these skills to ace Senior Security Analyst - InfoSec in Leicester
Some tips for your application 🫡
Tailor Your CV:Make sure your CV is tailored to the Senior Security Analyst role. Highlight your experience in incident response and detection engineering, and don’t forget to mention any relevant certifications you have!
Show Off Your Skills:In your application, showcase your technical proficiency with SIEM, SOAR, and EDR platforms. We want to see how you've used these tools to improve security processes or automate tasks.
Be Clear and Concise:When writing your cover letter, keep it clear and concise. Explain why you're a great fit for the role and how your mindset aligns with our 'dev-first' approach to security.
Apply Through Our Website:We encourage you to apply through our website for the best chance of getting noticed. It’s the easiest way for us to track your application and get back to you quickly!
How to prepare for a job interview at Next
✨Know Your Stuff
Make sure you brush up on your technical skills, especially around SIEM, SOAR, and EDR platforms. Be ready to discuss your experience with detection engineering and incident response, as well as any specific tools you've used. This is your chance to show that you can bridge the gap between analysis and engineering.
✨Showcase Your Automation Skills
Since the role focuses heavily on automation, come prepared with examples of how you've implemented automated workflows or playbooks in previous roles. Discuss any scripting languages you're proficient in, like Python or PowerShell, and how you've used them to enhance security processes.
✨Be a Team Player
Collaboration is key in this role, so be ready to talk about how you've worked with other teams, like Vulnerability Management or Engineering. Highlight any mentoring experiences you've had, especially if you've helped junior analysts improve their skills in areas like forensic analysis or scripting.
✨Stay Calm Under Pressure
In high-stakes situations, it's crucial to remain composed. Prepare to share examples of how you've handled complex incidents in the past, ensuring prompt containment and recovery. This will demonstrate your ability to manage stress and communicate effectively with management during critical times.
