Cybersecurity Analyst

Janestreet; Greater London; On-site; GBP 60,000 - 90,000; Full time

Job summary

Jane Street in London is seeking a Cybersecurity Detection and Response Analyst to help protect employees, data and infrastructure from internet threats. You’ll join a team that builds and operates detection tools, threat hunting routines, and security automation to guard the firm.

Responsibilities include researching threats, tuning detections, performing unstructured investigations, and coordinating remediation while teaching best practices across the organization.

Qualifications

• Degree in computer science, engineering, information systems, or related field.
• Strong interest in cybersecurity news and trends.
• Proficient programmer with learning aptitude.
• Experience with version control and code management.
• Familiarity with threat modeling and security tradeoffs.
• Ability to explain security decisions clearly and under pressure.
• Curiosity and collaborative problem-solving mindset.
• Fluent English.

Responsibilities

• Develop, tune, and own detection and response capabilities.
• Create and maintain security tooling and automation for the SOC.
• Conduct unstructured investigations to locate and repair security issues.
• Respond to incidents and coordinate remediation.
• Advise and train colleagues on cybersecurity best practices.

Skills

Strong programming

Version control

Threat modelling

Learning aptitude

Editor proficiency

English fluency

Education

Bachelor's degree in computer science, engineering, information systems or related field

Tools

Git

Job description

About the position

We're looking to add a passionate Cybersecurity Detection and Response Analyst to our London office to help protect Jane Street’s employees, data and infrastructure from the wilds of the internet.

This is not (just) an eyes-on-glass, click ops role—our cybersecurity analysts are also responsible for developing the tools and systems we use to guard the firm. Think about this role as some combination of incident responder, detection engineer, security engineer, SOC automation engineer, threat hunter, threat modeler, and security awareness engineer. Our SOC team is involved in engineering (e.g., we built our own SOAR, email content scanning system, the entire alerting stack and much more) and we handle the incident response and remediation when a threat is found.

Our analysts research and prioritise what threats need to be monitored, hunt for them in our data, write code to detect them and constantly tune the detection to prioritise quality over quantity. We maintain full control over the alerts we respond to, and own all stages of the detection and response lifecycle.

Our Cybersecurity team is a skilled group of programmers and security experts who are dedicated to keeping the firm safe. We consider ourselves to be tapped into developments in the broader cybersecurity space, and can tell the difference between the latest cool hack by security researchers and what actually matters in our day-to-day. In this role, you’ll carefully consider the context of our decisions as we think about the tradeoffs we’re making in our approach to resolving cybersecurity issues. We’ll expect you to apply a methodical approach to performing unstructured investigations to locate and repair the source of a security issue.

You will also act as an ambassador of best practices to the rest of the firm. Team members understand and practice good personal cybersecurity hygiene, and are able to talk to others about it. A key component of doing well in this position is bringing everyone else along with you on the cybersecurity journey, and you should be excited to learn from your colleagues and pass that learning on to new analysts.

About you

• Have (or will have) a degree in computer science, engineering, information systems or a related field
• An avid follower of cybersecurity news
• A strong programmer that can demonstrate high potential and an aptitude for learning
• Comfortable and interested in managing your code and configs in version control, and with using your editor (we don't care which though)
• Familiar with threat modelling; able to understand how cybersecurity fits into the firm’s broader goals and clearly communicate security tradeoffs to our colleagues
• Able to explain the cybersecurity decisions you’ve made in your own life, and how you’ve approached thinking about those decisions
• Able to adapt to changing scenarios and make challenging decisions under pressure
• Humble about what you know and don’t know; not afraid to ask questions and admit mistakes
• An intellectually curious problem solver with a positive, collaborative attitude
• Fluent in English