Cyber Security Specialist - L2

Global Relay; Greater London; Vor Ort; GBP 60.000 - 80.000; Vollzeit

Zusammenfassung

Global Relay in the United Kingdom is seeking a Cyber Security Specialist 2 to provide second level response to security threats. You will analyze event logs, system logs, and other data sources to determine root causes and recommend resolutions, while designing and maintaining components of Global Relay's security infrastructure in an AI-enabled environment.

The role requires hands-on experience with firewalls, IDS/IPS, SIEM, EDR/XDR, SOAR, and knowledge of AI-enabled security use cases.

Qualifikationen

• 2–5 years hands-on experience with core information security systems (firewalls, IDS/IPS, SIEM, MFA, etc.).
• 2–5 years infrastructure knowledge (Windows & Linux servers, LAN switches/routers).
• 1+ years experience applying AI/ML in security contexts.
• Certifications in security technologies (SIEM, firewalls, networking) are preferred.
• Excellent written and spoken communication; strong documentation skills.

Aufgaben

• Provide second level response to security threats and vulnerabilities, and determine root causes.
• Design, plan, implement, and maintain components of Global Relay's security infrastructure in an AI-enabled environment.
• Configure and support SIEM, EDR/XDR, SOAR, and related security platforms; monitor events and escalate as needed.
• Assess AI-enabled use cases, document results, and identify false positives or issues.
• Assist with security audits, change management, and policy enforcement.
• Maintain up-to-date process documentation and participate in security awareness initiatives.

Kenntnisse

Security systems

SIEM

Firewalls

EDR/XDR

SOAR

AI in security

Incident response

ITIL

Jobbeschreibung

Who we are:

For over 25 years, Global Relay has set the standard in enterprise information archiving with industry-leading cloud archiving, surveillance, eDiscovery, and analytics solutions. We securely capture and preserve the communications data of the world's most highly regulated firms, giving them greater visibility and control over their information and ensuring compliance with stringent regulations.

Though we offer competitive compensation and benefits and all the other perks one would expect from an established company, we are not your typical technology company. Global Relay is a career-building company. A place for big ideas. New challenges. Groundbreaking innovation. It's a place where you can genuinely make an impact - and be recognized for it.

We believe great businesses thrive on diversity, inclusion, and the contributions of all employees. To that end, we recruit candidates from different backgrounds and foster a work environment that encourages employees to collaborate and learn from each other, completely free of barriers.

Global Relay is unable to offer visa sponsorship for this position. Candidates must have the right to work in the UK at the time of application.

Your role:

The Cyber Security Specialist 2 provides second level response to security threats and vulnerabilities. This position analyzes event logs, system logs, and other data sources to determine the root cause of security events and provide recommendations to resolve the events. This position also designs, plans, implements, and maintains assigned components of Global Relay's security infrastructure within an AI enabled environment.

Your responsibilities:

• Adhere at all times to separation of duties between your role as a member of the security team that monitors the activities of privileged users, and privileged network and Operations/DevOps team members that use their privileges to resolve incidents and fulfill requests in the production environment.
• Working knowledge of how AI or machine learning features are used in security platforms such as SIEM, EDR/XDR and SOAR, with hands-on ability to configure, support or test these capabilities as part of day-to-day security technology operations.
• Ability to help assess, test and tune approved AI-enabled use cases such as alert enrichment, triage, detection, investigation and response automation. Can check output quality, identify false positive or unexpected behavior, document results and escalated issues appropriately.
• Practical understanding of common risks from organizational use of generative AI tools, copilots, agents and MCP or other tool integrations, including prompt injection, sensitive-data exposure, excessive permissions and unsafe or unauthorized actions.
• Provide second level support by actioning escalated security incidents and service requests in a timely manner.
• Review, assess, and prioritize security related events based on severity and criticality.
• Perform audit and analysis functions on internal and external data sources.
• Evaluate, install, and maintain security related software and tools to ensure best of class monitoring and protection of systems and applications; examples include vulnerability detection, assessment and mitigation tools, penetration testing tools, log management and monitoring tools, in-house developed security applications, intrusion detection and prevention systems, mobile computing device controls, VPNs and DR systems.
• Develop and maintain process documentation.
• Assist with Global Relay security audits.
• Assist with the enforcement of security policies.
• Participate in security awareness initiatives.
• Administer firewall rule changes, patches, and updates aligned with the change management process.

About you:

• 2-5 years hands-on experience working with core information security systems such as firewalls, intrusion detection and prevention implementations, antivirus and anti-malware solutions, SIEM solutions, two-factor and biometric authentication solutions, and server and network device hardening.
• 2-5 years of hands-on experience working with core infrastructure and networking components such as Windows and Linux servers, L2-L3 network switches and routers.
• 1+ years exp of how AI or machine learning features are used in security platforms.
• Proven experience performing analysis of security events to determine root cause and provide resolution.
• Certification in security technologies such as SIEM tools, firewalls, networking, etc.
• Excellent understanding of a wide variety of communication protocols.
• Experience using an internal and external ticketing system for ITIL-based incident, problem and change management.
• Previous experience in troubleshooting day-to-day operational processes such as report generation, data verification, data correlation, etc.
• Excellent verbal, written and documentation skills.
• Methodical and creative approach to problem-solving.
• Superior time management and prioritizing ability.