Cyber Security Analyst, Leeds

Addleshaw Goddard LLP; Leeds; On-site; GBP 50,000 - 70,000; Full time

Job summary

Addleshaw Goddard LLP is seeking a Cyber Security Analyst to support the confidentiality, integrity and availability of client data. You will work with the IT department to implement and monitor security controls, analyse threat intelligence, and coordinate remediation across global teams.

The role involves maintaining security measures, documenting processes, and responding to incidents with clear communications to stakeholders.

Qualifications

• Understanding of infrastructure: Azure, Windows Server, ESX/VMware, Exchange, IIS, SQL, Linux; networking and security basics.
• Knowledge of security tech: SIEM, EDR, threat intel, auth systems, patching, vulnerability mgmt.
• Familiarity with ISMS, risk analysis, CIA triad, incident response best practices.
• Experience applying security controls and security documentation.
• Security-focused, able to work under pressure and communicate with stakeholders.

Responsibilities

• Develop and maintain firm’s cybersecurity solutions.
• Analyse threat intelligence and implement mitigating controls.
• Maintain vulnerability and remediation databases for audit compliance.
• Collaborate across IT teams to secure infrastructure from new systems to legacy.
• Coordinate penetration testing and remediation prioritisation.
• Define, implement, and upgrade security measures and policies.
• Advise on communications during cybersecurity incidents.
• Maintain security of IT services and liaise with third parties on patching.

Skills

Azure

Windows Server

SIEM

Firewalls

Threat Intelligence

Education

Security+

SSCP

Network+

Computing/Security degree

Tools

Sentinel

Defender For Endpoint

Defender For Servers

Defender For Cloud Apps

Intune

ANY.RUN

Nessus

Cisco Firepower

Job description

PURPOSE OF THE ROLE

The primaryresponsibility of the Cyber Security Analyst is to support the confidentiality, integrity, and availability of our clients' data. As a result, the Cyber Security Analyst must have excellent analytical skills as well as a good knowledge of the company's products, services, and Service Management processes. The Cyber Security Analyst will use their knowledge and technical expertise to work with the team lead to provide excellent security alongside customer service. Ensuring the integrity of data for AG and its customers.

WHAT TO EXPECT IN THISROLE

In thisrole, you will:

• To develop and maintain the firm's variouscybersecurity solutions
• To analyse and use threat intelligence to react the day-to-day cyber threats levelled against the firm and where required, put in place mitigating controls/solutions
• Maintain and update AGs IT vulnerability and remediation database to ensure both audit compliancy and safeguarding the firms IT assets
• Work with all areas of the IT Department across the globe to ensure security of the infrastructure from the implementation of new systems through to the maintenance and monitoring of existing/legacy systems
• Work to organise Penetration Testing from organisation through to remediation, ensuring all are assigned adequate prioritisation and expertise to resolve
• Define, plan, implement, maintain, and upgrade security measures, policies, and controls
• In the event of a cybersecurity incident, advise and recommend communications to the business, its customers and suppliers
• Development and maintenance of the security of the Firm's IT services, including liaising with third parties to ensure patching, resolving vulnerabilities and hardening systems as required
• Create and update security support documentation, including processes and procedures to ensure a consistent and effective support performance
• Keep up-to-date with the latest security news, principles, techniques, threat intelligence and protocols
• Operate in an ITIL V3 focused service delivery framework
• Stakeholder Management within the whole business including IT and external stakeholders
• Work to defined Service Level Agreements (SLA'S) and Key Performance Indicators (KPI's)

AREAS OFKNOWLEDGE AND EXPERTISE

You will have:

• Awareness of infrastructure: Azure, Windows Server 2012+ ESX/VMware, Messaging (Exchange), IIS, SQL 2012+, Linux appliances, Mac OS X, architecture and OS knowledge, Back-up technologies, Citrix, and Cisco networking, including IPT
• Knowledge and usage of most of the listed application technologies: Microsoft Azure and Security Suite: Sentinel, Defender For Endpoint, Defender For Servers, Defender For Cloud Apps, Intune, Conditional Access Policies, Identity Protection, ANY.RUN, Purview, Zscaler, Mimecast, Thinkst Canary Devices, Nessus, Secret Server, Cisco Firepower
• Awareness of security technologies: SIEM, firewalls, intrusion detection/prevention systems, anti-virus software, authentication systems, log management, content filtering, EDR, AV, ATP, Threat & Vulnerability Management, Threat Intelligence, Sandboxing, MDM Solutions, Attack Surface Reduction Rules, Web Control / Category Based URL Blocking, Controlled Folder Access, API's, SIEM Connectors
• Awareness of security approaches: ISMS, risk analysis and assessments, the CIA triad, attack vectors including social engineering, cryptography, confidentiality issues and the law relating to them, such as PACE, DPA, CMA and RIPA, and cyber security incident response best practices, including triage and chain of custody
• Proactively identifies areas for improvement, shares lessons learned with colleagues and encourages others to do the same, customer focused with a passion and drive to deliver customer satisfaction and value to the business
• Dedicated and responsible with a strong commitment to the assigned task with the ability to work under pressure, to meet deadlines and to work independently and/or with some supervision
• Self-driven and ability to work independently and interact effectively with people at all levels, with good communication and interpersonal skills
• Excellent problem solving and trouble shooting skills. In particular the ability to see patterns and solutions where others may not, attention to detail, analytical abilities and the ability to recognise trends in data
• Personal behaviours and values that nurture openness, honesty, trust, mutual respect and support from all team members in line with service excellence ideals
• Security+, SSCP, Network+, a computing/security related BSc degree or other similar qualification would be advantageous

OUR FIRM

Our story ofinternational growth is built on a performance mindset, innovation and true collaboration. We believe results follow relationships, so we work closely with each other, and develop deep client connections to deliver.

Our award-winning culture balances high standards and hard work with genuine care – looking out for each other, supporting professional development, in a down to earth and inclusive environment. We do the right things in the right ways, combining commercial excellence and innovative thinking with teamwork. Together, we deliver excellence, achieve stand out solutions, and enable career-defining opportunities.

We are open to flexibility in how this role is structured for the right candidate. While it is envisaged as a full-time position, with the same time and commitment demands as any other transactional real estate lawyer role, we also welcome applications from candidates seeking either part-time arrangements, or arrangements with a greater degree of certainty around working hours, with appropriate adjustment to salary expectations. We are committed to supporting flexible working where possible and are happy to discuss how the role could be shaped to meet both business needs and the preferences of the successful candidate.