Security Analyst

Intigriti; City Of London; Hybrid; GBP 40,000 - 55,000; Full time

Job summary

A cybersecurity firm in the UK seeks a Security Analyst to oversee vulnerability reports and mentor team members. Responsibilities include evaluating research reports and providing remediation advice. The ideal candidate has at least 1 year of experience in security testing and strong interpersonal skills. The role offers competitive salary and hybrid working model.

Benefits

Competitive salary

26 days annual leave and Bank Holidays

Top-notch Private Healthcare

Hybrid working model

Initial home office budget

2-month work abroad policy

Great training budget

Employer pension scheme

Enhanced maternity pay

Social activities and team outings

Referral bonus

Employee Assistance Program

Great hardware and tools

Mobile subscription contribution

Qualifications

• At least 1 year of relevant experience in pen testing, security testing, or vulnerability assessments.
• Flexible working hours and willing to participate in a 24x7 support organization.
• Proven technology skills and stress resistant.
• A strong understanding of the Ethical Hacker culture and Bug Bounty community.

Responsibilities

• Challenge and support researchers and security teams.
• Research and evaluate incoming reports.
• Mentor and coach junior team members.
• Perform penetration tests and security validation.
• Provide remediation advice and communication.

Skills

Interpersonal abilities

Strong written and verbal communication

Attention to detail

Analytical skills

Problem-solving capabilities

Proficient with Mac, Windows, Linux

Knowledge of OWASP top 10

Web application security

Mobile application security

Fluent in English

Job description

Your mission

As a Security Analyst, you oversee incoming security vulnerability reports from our researchers' community, while continuously sharpening your cybersecurity skills. All of this happens through dedicated interaction with the researcher's community and with the goal of offering the best possible service to both companies and researchers.

What you'll be doing

• Challenge and support both researchers and security teams using your entire security skillset.
• Research, POC and evaluate reports that come in through our platform (make sure they're unique, concrete & actionable for our clients).
• Handling escalations of tickets and researcher mediation.
• Mentoring and coaching more junior team members.
• Proactively flag tickets that present an escalation risk.
• Track changes in the team\'s workload and prioritize accordingly.
• Assess the severity of reported issues in relation to how they can disrupt business, including the financial and managerial implications.
• Familiarity with and ability to calculate CVSS ratings.
• Review and provide feedback on reports in a constructive and supportive manner.
• Motivate and engage security researchers to continuously outperform themselves.
• Build a positive relationship with our community, and customers in close collaboration with success management.
• Provide remediation advice and help customers make the most value out of received reports.
• Proactively identify and solve issues, as well as accept and quickly respond to delegated work.
• Communicate, document, and share your findings.
• Stay updated on the latest malware and security threats.
• Perform penetration tests and security validation on computer systems, networks and applications.
• Create new testing methods to identify vulnerabilities.

What you\'ll bring

• Outstanding interpersonal abilities, and strong written and verbal communication skills.
• Fluent in English, both written and spoken. Dutch language skills is a big plus.
• At least 1 years of relevant experience within pen testing, security testing, or vulnerability assessments.
• Stress resistant & you can keep a clear focus on the resolution in an incident-context.
• A strong understanding of the (Ethical) Hacker culture and the Bug Bounty community.
• Attention to detail, analytical and problem-solving capabilities.
• Able to independently find solutions to both technical and non-technical problems with no apparent answer (aggressive googling, stack overflow, etc).
• Flexible working hours, willing to take part in a 24x7 support organization.
• Positive service-oriented personality.
• Proven technology skills.
• Proficient with Mac, Windows, Linux.
• OWASP top 10 knowledge.
• Web application security knowledge.
• Mobile application security knowledge.

Nice to haves

• Your very own bug bounty profile.
• CEH, CPT, CEPT, CPEN, OSWE, OSWA, EWPT or EWPTX certificates are a plus.

What is in it for you?

• Competitive salary
• 26 days of annual leave and Bank Holidays
• ☆ Top-notch Private Healthcare and Health Cash Plan
• Hybrid working model
• Initial home office budget
• 2-month work abroad policy
• Great training and yearly learning budget
• Employer pension scheme
• Enhanced maternity pay
• Social activities and team outings
• Referral bonus
• Employee Assistance Program
• Great hardware and access to the best tools to be successful in your role
• Mobile subscription contribution

Why join us?

Here are some great benefits of joining our team:

• Cybersecurity is a great place to be! The security industry is fast-paced and continues to grow even during times of economic uncertainty.
• We provide a clear career path and learning budget to help set you up for success.
• Join a company that\'s making a real impact. In addition to our sustainability goals, we empower ethical hackers from all backgrounds to earn a living.
• Be yourself! Our international team celebrates individuality and places a strong focus on diversity and inclusion.
• We are theproud winners of the Deloitte Rising Star award in 2020 and the Deloitte Fast 50 award in 2021.
• We\'re backed by top investors who are enabling us to grow internationally.