Information Technology Security Analyst

Accord Healthcare; Uxbridge; On-site; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Holiday

Bonus

Pension

Job summary

Accord Healthcare is seeking an IT Security Analyst to be based on site at Stockley Park, working five days a week. You will support in ensuring Accord's systems are secure, compliant and resilient, with duties spanning incident response, firewall management and vulnerability remediation.

The role requires formal information security training, CompTIA Security+ or equivalent, and hands-on experience with Microsoft security tools, SIEM/EDR, and vulnerability management.

Qualifications

• Formal training or demonstrable experience in information security, computer science, or a closely related IT discipline.
• CompTIA Security+ certification (or equivalent) or practical knowledge.
• Experience supporting security operations activities, including monitoring alerts and incident response.
• Working knowledge of Microsoft security technologies (Defender for Endpoint/Office 365, Azure AD).

Responsibilities

• Monitor, investigate and respond to security events across the organisation.
• Configure, audit and tune firewall rules and web filtering.
• Administer and optimise web security gateway to block malicious sites.
• Conduct regular vulnerability scans and track remediation through closure.
• Design and coordinate phishing simulation campaigns and training.
• Prepare and deliver regular security reports with key metrics.
• Maintain incident documentation, playbooks and knowledge base articles.
• Apply security baselines on servers and endpoints; suggest improvements.
• Proactively improve security monitoring and configurations.

Skills

Security operations

Incident response

Scripting (PowerShell/Python)

SIEM/EDR experience

Firewall and web security

Phishing awareness

Vulnerability management

Microsoft security tools

Education

Information security discipline (formal training)

Tools

Defender for Endpoint

Defender for Office 365

Azure AD/Entra ID

Nessus/Qualys/Defender VM

Microsoft Sentinel/Splunk

Job description

**This role will be based on site in Stockley Park 5 days per week**

The Role:

Reporting to the IT Security Lead, the Analyst will support in ensuring that Accord's systems are secure, compliant and resilient.

This role will include, but not be limited to:

• Incident Response: Monitor, investigate and respond to Security events across the organisation
• Firewall Management: Configure, audit and tune network and web application firewall rules
• Web/DNS filtering: Administer and optimise the organisations web security gateway to block malicious websites and content
• Vulnerability Management: Conduct regular vulnerability scans on networks, systems and devices. Tracking remediation activities from findings through to closure
• Phishing Simulation and User Awareness Training: Designing, coordinating and conducting phishing simulation campaigns as part the security awareness programme
• Security Reporting: Prepare and deliver regular security reports, summarising key metrics
• Documentation & Compliance: Maintain clear documentation of security incidents, investigation findings, configuration changes. Creation and updating of internal playbooks and knowledge base articles
• System Hardening: Apply and verify security baselines on servers and endpoints and proactively suggest improvements where applicable
• Continuous Improvement: Stay up to date with latest cybersecurity threats, trends, defensive techniques and vulnerabilities. Proactively suggest improvements to security monitoring, configurations and processes to enhance the organisations Security Posture

The Person:

• Formal training or demonstrable experience in information security, computer science, or a closely related IT discipline.
• CompTIA Security+ certification (or equivalent practical knowledge and experience).
• Experience supporting security operations activities, including monitoring alerts, basic investigation, and assisting in incident response.
• Working knowledge of Microsoft security technologies such as Defender for Endpoint, Defender for Office 365, and Azure AD / Entra ID.
• Understanding of firewall and web security principles, with practical exposure to managing or tuning network and web filtering rules.
• Familiarity with vulnerability management processes — running scans, reviewing findings, and tracking remediation.
• Awareness of phishing simulation and awareness training approaches and their role in improving organisational resilience.
• Working toward recognised professional certifications such as Microsoft SC-200, AZ-500, or CompTIA CySA+.
• Experience using SIEM or EDR platforms (e.g. Microsoft Sentinel, Splunk, or equivalent) for monitoring and investigation.
• Exposure to vulnerability scanning tools such as Nessus, Qualys, or Defender Vulnerability Management.
• Basic scripting or automation capability (PowerShell or Python).
• Awareness of Cyber Essentials Plus, ISO 27001, or similar frameworks.
• Experience gained in a technical support, IT operations, or SOC environment.

The Rewards:

In return, we offer a competitive salary and rewards package (including holiday, bonus and pension scheme). Not to mention the opportunity to genuinely make a difference in a new and dynamic role within a progressive and expanding business, at an exciting time of growing international reach