At a Glance
- Tasks: Join our Cyber team as a Level 3 Information Security Analyst, tackling diverse cyber security challenges.
- Company: Telefónica Tech is a global leader in innovative tech services for B2B, serving millions daily.
- Benefits: Enjoy a dynamic work environment with opportunities for growth and learning in cutting-edge technology.
- Why this job: Make a real impact on client security while working with top professionals in a supportive culture.
- Qualifications: Extensive experience in cyber security assessments and risk management is essential; certifications are a plus.
- Other info: Must have the right to work in the UK or Ireland; transport access is required.
The predicted salary is between 43200 - 72000 £ per year.
Telefónica Tech is a leading provider of innovative tech services for the B2B market with a worldwide presence and strategic hubs in Spain, Brazil, UK and Germany. The company helps leading brands and organisations across the UK and Ireland unlock the power of integrated technology for all businesses.
This is a full-time role for a Level 3 Information Security Analyst to join a mature managed services Cyber team who manage the security posture of critical infrastructure and services under an ISO27001 and Cyber Essentials + certified managed service environment.
You will be responsible for conducting diverse cyber security tasks to ensure that our clients are secure and compliant with various EU/UK security regulations. This is a technical, hands-on role, and the successful candidate will be responsible for (but not limited to) the following:
- Conducting Cyber Threat Modelling (CTM) exercises
- NIS/NIS2 assessments and Remediation
- Security Gap assessments and Remediation
- Cyber Risk Management
- Third Party Risk Management
- Threat and Vulnerability Management
- Incident Response and Management
Qualifications Skills & Experience:
- Extensive experience in planning and executing CTM exercises for on-prem as well as cloud-hosted applications or environments.
- Experience with CTM frameworks like STRIDE, PASTA, MITRE ATT&CK etc.
- Experience in conducting assessments against common security standards like ISO27001, NIST CSF, NIST 800-53, CIS benchmarks etc.
- Experience in assessing, documenting and managing cyber risk, including third-party risk.
- Experience in driving remediation efforts and implementing technical controls to address security gaps from various audits and penetration tests.
- In-depth understanding of security requirements around EU as well as UK NIS/NIS2 directives, and other relevant security regulations.
- In-depth understanding of general security principles.
- In-depth understanding of how security technologies like firewalls, EDR, SIEM, TVM operate in a coherent manner.
- Excellent communication, reporting and presentation skills.
- Ability to plan, prioritise, be proactive and manage own workload.
- Understand up-to-date security threats and common exploits.
- Have an open attitude to sharing knowledge and information.
- Excellent analytical and problem-solving skills.
- Desire to learn new technologies.
- A motivated attitude to learn and challenge comfort zone.
- To keep up to date with the latest security and technology developments.
Desirable: Cyber Security certification (e.g. CISSP, CISM, CRISC etc.) or equivalent.
Additional Information:
- Must have the right to live and work in the UK or Ireland.
- Must meet Security Clearance requirements if this is a requirement of the role.
- All employees working on secure or sensitive contracts may be required to undergo additional vetting such as SC or NPPV clearance depending on business requirements.
- Any offer would be conditional upon the successful candidate passing BPSS which includes a criminal record check.
- Due to our location, access to own transport is essential.
We don’t believe hiring is a tick box exercise, so if you feel that you don’t match the job description 100%, but would still be a great fit for the role, please get in touch.
Information Security Analyst – Level 3 employer: Telefonica Tech
Contact Detail:
Telefonica Tech Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Information Security Analyst – Level 3
✨Tip Number 1
Familiarise yourself with the specific cyber security frameworks mentioned in the job description, such as STRIDE and MITRE ATT&CK. Being able to discuss these frameworks in detail during your interview will demonstrate your expertise and understanding of the role.
✨Tip Number 2
Stay updated on the latest EU and UK security regulations, particularly NIS/NIS2 directives. Showing that you are knowledgeable about current compliance requirements can set you apart from other candidates.
✨Tip Number 3
Prepare to discuss your hands-on experience with incident response and vulnerability management. Be ready to share specific examples of how you've successfully managed security incidents or remediated vulnerabilities in past roles.
✨Tip Number 4
Network with professionals in the cyber security field, especially those who work at Telefónica Tech or similar companies. Engaging with industry peers can provide valuable insights and potentially lead to referrals for the position.
We think you need these skills to ace Information Security Analyst – Level 3
Some tips for your application 🫡
Understand the Role: Before applying, make sure you fully understand the responsibilities and qualifications required for the Information Security Analyst position. Familiarise yourself with Cyber Threat Modelling, security assessments, and relevant regulations.
Tailor Your CV: Customise your CV to highlight your experience in cyber security, particularly in areas like CTM exercises, risk management, and compliance with ISO27001 and NIS/NIS2 directives. Use specific examples that demonstrate your skills and achievements.
Craft a Compelling Cover Letter: Write a cover letter that showcases your passion for cyber security and your understanding of the company's mission. Mention how your background aligns with their needs and express your enthusiasm for contributing to their team.
Proofread Your Application: Before submitting, carefully proofread your application materials. Check for spelling and grammatical errors, and ensure that all information is clear and concise. A polished application reflects your attention to detail.
How to prepare for a job interview at Telefonica Tech
✨Know Your Cyber Security Frameworks
Familiarise yourself with CTM frameworks like STRIDE, PASTA, and MITRE ATT&CK. Be prepared to discuss how you've applied these frameworks in past roles, as this will demonstrate your technical expertise and understanding of the field.
✨Showcase Your Compliance Knowledge
Understand the key security standards such as ISO27001, NIST CSF, and CIS benchmarks. Be ready to explain how you have conducted assessments against these standards and what remediation efforts you have implemented.
✨Demonstrate Problem-Solving Skills
Prepare examples of how you've tackled security gaps or vulnerabilities in previous positions. Highlight your analytical skills and your approach to incident response and management, as these are crucial for the role.
✨Communicate Effectively
Strong communication skills are essential for this role. Practice explaining complex security concepts in simple terms, as you may need to present findings to non-technical stakeholders. This will show that you can bridge the gap between technical and business needs.