Information Technology Security Analyst

Accord Healthcare; Uxbridge; On-site; GBP 52,000 - 78,000; Full time

Benefits offered by this job

Holiday & bonus

Pension scheme

Job summary

Accord Healthcare is seeking an IT Security Analyst to be based on site at Stockley Park. You will join the Security team to monitor, investigate and respond to security events while configuring and tuning firewalls and filtering controls.

The role emphasizes hands-on vulnerability management and security improvements across platforms. You will support phishing simulations, produce regular security reports, and help maintain playbooks.

Qualifications

• Formal training or demonstrable experience in information security, computer science or closely related IT discipline.
• Experience supporting security operations activities, including monitoring alerts, basic investigation and incident response assistance.
• Familiarity with vulnerability management processes—running scans, reviewing findings and tracking remediation.

Responsibilities

• Incident Response: Monitor, investigate and respond to Security events across the organisation.
• Firewall Management: Configure, audit and tune network and web application firewall rules.
• Web/DNS filtering: Administer and optimise the organisations web security gateway to block malicious websites and content.
• Vulnerability Management: Conduct regular vulnerability scans on networks, systems and devices; track remediation from findings to closure.
• Phishing Simulation and User Awareness Training: Design, coordinate and conduct phishing simulations as part of the security awareness programme.
• Security Reporting: Prepare and deliver regular security reports, summarising key metrics.
• Documentation & Compliance: Maintain clear incident docs, investigation findings, configuration changes, update playbooks and knowledge base.
• System Hardening: Apply security baselines on servers/endpoints and suggest improvements.
• Continuous Improvement: Stay updated on threats and proactively improve monitoring and configurations.

Skills

Incident response

Firewall management

Web filtering

Vulnerability management

Phishing awareness

Security reporting

System hardening

Scripting (PowerShell or Python)

SOC operations

Education

CompTIA Security+

Microsoft SC-200

AZ-500

CompTIA CySA+

Tools

Nessus

Qualys

Splunk

Microsoft Sentinel

PowerShell

Python

Defender for Endpoint

Azure AD/Entra ID

Job description

**This role will be based on site in Stockley Park 5 days per week**

**Candidates must have full right to work in the UK, we cannot offer sponsorship for this role, now or in the future**

The Role:

Reporting to the IT Security Lead, the Analyst will support in ensuring that Accord's systems are secure, compliant and resilient.

This role will include, but not be limited to:

• Incident Response: Monitor, investigate and respond to Security events across the organisation
• Firewall Management: Configure, audit and tune network and web application firewall rules
• Web/DNS filtering: Administer and optimise the organisations web security gateway to block malicious websites and content
• Vulnerability Management: Conduct regular vulnerability scans on networks, systems and devices. Tracking remediation activities from findings through to closure
• Phishing Simulation and User Awareness Training: Designing, coordinating and conducting phishing simulation campaigns as part the security awareness programme
• Security Reporting: Prepare and deliver regular security reports, summarising key metrics
• Documentation & Compliance: Maintain clear documentation of security incidents, investigation findings, configuration changes. Creation and updating of internal playbooks and knowledge base articles
• System Hardening: Apply and verify security baselines on servers and endpoints and proactively suggest improvements where applicable
• Continuous Improvement: Stay up to date with latest cybersecurity threats, trends, defensive techniques and vulnerabilities. Proactively suggest improvements to security monitoring, configurations and processes to enhance the organisations Security Posture

The Person:

• Formal training or demonstrable experience in information security, computer science, or a closely related IT discipline.
• CompTIA Security+ certification (or equivalent practical knowledge and experience).
• Experience supporting security operations activities, including monitoring alerts, basic investigation, and assisting in incident response.
• Working knowledge of Microsoft security technologies, such as Defender for Endpoint, Defender for Office 365, and Azure AD / Entra ID.
• Understanding of firewall and web security principles, with practical exposure to managing or tuning network and web filtering rules.
• Familiarity with vulnerability management processes — running scans, reviewing findings, and tracking remediation.
• Awareness of phishing simulation and awareness training approaches and their role in improving organisational resilience.
• Working toward recognised professional certifications such as Microsoft SC-200, AZ-500, or CompTIA CySA+.
• Experience using SIEM or EDR platforms (e.g. Microsoft Sentinel, Splunk, or equivalent) for monitoring and investigation.
• Exposure to vulnerability scanning tools such as Nessus, Qualys, or Defender Vulnerability Management.
• Basic scripting or automation capability (PowerShell or Python).
• Awareness of Cyber Essentials Plus, ISO 27001, or similar frameworks.
• Experience gained in a technical support, IT operations, or SOC environment.

The Rewards:

In return, we offer a competitive salary and rewards package (including holiday, bonus and pension scheme). Not to mention the opportunity to genuinely make a difference in a new and dynamic role within a progressive and expanding business, at an exciting time of growing international reach