Operational Security Analyst

Trayport Limited; London; On-site; GBP 40,000 - 80,000; Full time

Job summary

An established industry player is seeking a dedicated Operational Security Analyst to join their dynamic team. In this role, you will engage in vital activities to protect the organization from cyber threats, collaborating with skilled professionals to enhance security measures. Your expertise in incident response, vulnerability management, and security tooling will be crucial in safeguarding digital assets. This position offers a unique opportunity for growth in the ever-evolving field of cyber security, where your contributions will make a significant impact on the organization's security posture. If you are passionate about technology and security, this is the perfect opportunity for you.

Qualifications

• Passion for security and technology, with a focus on continuous learning.
• Ability to communicate effectively with team members and stakeholders.
• Experience in security event management and incident response.

Responsibilities

• Investigate security events from SIEM and security tools.
• Maintain and configure endpoint and network security tools.
• Assess security vulnerabilities and improve response plans.

Skills

Cloud Security (Azure/AWS)

Windows Security

Linux Security

Active Directory/LDAP

Authentication Mechanisms (Kerberos, NTLM)

Basic programming/scripting (PowerShell, Bash)

Vulnerability management and associated tools (Rapid7)

SIEM and associated tools (Splunk)

Endpoint security controls (EDR/Anti-virus)

General Networking (OSI model, TCP/IP, DNS, ICMP, routing)

Network security controls (Firewalls, packet capture devices)

Common application protocols (SSH, RDP, SMB)

Cryptography/PKI

MFA solutions (Okta, Vasco)

Education

Bachelor's degree in a related discipline (computer science/computer security)

Discipline specific qualification (SANS, CEH, OSCP, CRT, ISO27001 LA, CISMP)

Tools

Rapid7

Splunk

Job description

The Role

Are you passionate about cyber security and eager to work in a collaborative and inclusive environment, where every member's contribution is valued? Do you enjoy working closely with diverse technical teams to protect and secure digital assets? Then working in the Operational Security team at Trayport is likely to be a great place for you!

If you're interested in all-things cyber security and have a passion for technology, then we have a great opportunity to join

a close-knit team, focused on defending the organisation from cyber-attacks, breaches and security incidents. You will work alongside an experienced team of security professionals and help secure and monitor an array of exciting technologies across the business (both on-prem and cloud), in a role which offers great opportunities for career development.

Your primary areas of operation will be:

1. Event management
2. Incident response and management
3. Endpoint security
4. Network security
5. Vulnerability management

Responsibilities

As an Operational Security Analyst, you will:

1. Investigate security events arising from our SIEM, security tooling and vendors/partners
2. Actively contribute to improving the capabilities to detect, investigate and resolve anomalies and threats in our network, as well as developing and improving response plans and playbooks.
3. Maintain and configure endpoint and network security tools, ensuring an appropriate balance of user experience and level of protection that aligns with the organisation's risk appetite.
4. Improve hardening of systems in line with current best practices. Work with key stakeholders to ensure recommendations are implemented in a timely fashion.
5. Maintain awareness of emerging threats and vulnerabilities and make recommendations to mitigate the associated risks.
6. Assess security vulnerabilities of Trayport's infrastructure and systems and ensure they are raised.
7. Discuss challenges with technical users and prioritise requests for the security team's input or support
8. Work with the broader security team, as well as stakeholders from around the business, to maintain and improve our security posture or contribute to other ongoing initiatives.

Skills and Experience

Essential:

1. Ability to understand key concepts and communicate with team members and other stakeholders.
2. Passion for security and associated technology - keeps up to date with technical developments in the industry.
3. Eye for detail, conscientious, diligent, reliable, self-motivated and a natural problem-solver
4. Knowledge of some of the following technical skills and a general awareness of the rest:
   
   1. Cloud Security (Azure/AWS)
   2. Windows Security
   3. Linux Security
   4. Active Directory/LDAP
   5. Authentication Mechanisms (Kerberos, NTLM, etc)
   6. Basic programming/scripting (e.g. PowerShell, Bash)
   7. Vulnerability management and associated tools (Rapid7)
   8. SIEM and associated tools (Splunk)
   9. Endpoint security controls (EDR/Anti-virus)
   10. General Networking (OSI model, TCP/IP, DNS, ICMP, routing)
   11. Network security controls (Firewalls, packet capture devices, TLS inspection, IDS/IPS)
   12. Common application protocols (SSH, RDP, SMB etc)
   13. Cryptography/PKI
   14. MFA solutions (Okta, Vasco etc)

Desired:

One or more of the following:

1. Prior experience working in an information security discipline or systems admin/engineering role
2. Discipline specific qualification (SANS, CEH, OSCP, CRT, ISO27001 LA, CISMP)
3. Bachelor's degree in a related discipline (computer science/computer security)
4. Knowledge of the ISO/IEC 27000 Information Security standards and previous experience working within a compliant ISMS.
5. Knowledge of IT end-to-end problem management and root cause analysis.

Trayport is committed to creating and sustaining a collegial work environment in which all individuals are treated with dignity and respect and one which reflects the diversity of the community in which we operate. We provide accommodations for applicants and employees who require it.