Information Technology Security Specialist

We are seeking an experienced and proactive IT Infrastructure Security Specialist to join our Infrastructure Specialists team. The ideal candidate will be responsible for the design, implementation, and ongoing management of our security infrastructure. This role focuses on safeguarding our enterprise environment, covering everything from network perimeters to endpoints, utilising tools such as Palo Alto firewalls, Microsoft Sentinel, and Zscaler, while managing key vendor relationships and security segmentation strategies.

The Premier League is an equal opportunities employer and strives to create an inclusive culture where talent can flourish. We believe in the potential of everyone and open our doors to those who share those values. All appointments will be made based on merit; however, we particularly encourage applications from women, people from minority ethnic communities, LGBTQ+ people and disabled people.

Our hybrid-working model also allows you some variety on your place of work, offering you the chance to work from home on some days each week, where possible. You will be expected to attend the office or site visits in line with our company policy. All staff liaise closely with their line manager to manage their time appropriately and according to their work and team requirements.

The role

• Perimeter & Network Security: Manage, configure, and maintain network security appliances, specifically Palo Alto next-generation firewalls (NGFWs), including managing security policies, VPNs, and intrusion prevention systems (IPS/IDS).
• Network Architecture & Segmentation: Design, implement, and maintain robust network segmentation strategies to isolate critical systems, reduce the attack surface, and enhance overall security posture.
• Vendor Management (vCISO): Act as the primary technical liaison for our outsourced virtual Chief Information Security Officer (vCISO) service provider, ensuring effective communication, alignment of security strategies, and timely execution of recommendations.
• Endpoint Protection: Implement and manage comprehensive security solutions for all organisational desktops, servers, and laptops, leveraging Microsoft Defender for Endpoint for centralised threat detection and response.
• Cloud Security Monitoring (SIEM): Configure and monitor security information and event management (SIEM) solutions, specifically Microsoft Sentinel, to detect, investigate, and respond to potential security incidents across cloud and on-premise environments.
• Cloud & Web Security: Administer and optimise secure access service edge (SASE) and cloud security platforms, such as Zscaler, to ensure secure web usage and remote access.
• Vulnerability Management: Conduct regular vulnerability assessments and coordinate patching efforts across server and endpoint infrastructure to mitigate risks and maintain security compliance.
• Incident Response: Participate in incident response activities, assisting with the investigation, containment, and recovery from security breaches when they occur.
• Collaboration & Cross-Training: Work closely with other IT infrastructure specialists (networking, systems, etc.). Participate in cross-training initiatives to share security expertise and expand knowledge of other IT domains to build team resilience.
• Operational Support: Provide 2nd and 3rd level support for critical network incidents, requiring participation in an on-call rotation to support or 24/7 operational needs.

Requirements for the role

• Education: A Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent practical experience.
• Experience: Minimum of 4-6 years of experience in an IT security role, managing and implementing security infrastructure. Experience managing vendor relationships, particularly with outsourced security services (like a vCISO or MSSP). Experience working in dynamic operational environments, potentially involving 24/7 operations, is highly beneficial.
• Technical Proficiency: Hands-on experience with Palo Alto firewalls (PAN-OS, Panorama management) and implementing network segmentation. Strong practical experience with endpoint security solutions, including Microsoft Defender. Familiarity with SIEM tools, specifically Microsoft Sentinel. Knowledge of cloud security principles and experience with Zscaler or similar SASE platforms. Understanding of common attack vectors and security best practices for desktop, server, and laptop environments.
• Soft Skills: Exceptional analytical and problem-solving skills, with a keen eye for detail. Strong communication and collaboration skills; a genuine team player. Ability to manage multiple priorities and respond quickly and effectively to security incidents.
• Preferred Qualifications and Certifications: Relevant security certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or vendor-specific certifications (e.g., Palo Alto Networks Certified Network Security Engineer (PCNSE), Microsoft security certifications). Experience with scripting languages (e.g., PowerShell, Python) for security automation tasks.