Security Operations Analyst in Birmingham

Gateley; West Midlands; On-site; GBP 45,000 - 65,000; Full time

Benefits offered by this job

Annual bonus

Learn platform access

Flex benefits & My Flex rewards

Health care & pension

Cycle to work

Job summary

Gateley is seeking a Security Operations Analyst to monitor and maintain security across its IT infrastructure, software and users. You will manage incidents, changes, and vulnerabilities while delivering KPI reports and security training.

You will work closely with the IT team, support 2nd line security input for BAU and projects, and participate in phishing simulations and awareness campaigns. A proactive security mindset is essential.

Qualifications

• A practical understanding of information security in a corporate environment.
• Security monitoring, alert triage and incident response principles.
• Networking concepts, services and protocols, including LAN, WAN, DNS, encryption and remote access.
• Identity and access management, multifactor authentication and privileged access.
• Microsoft Windows desktop and server operating systems.
• Microsoft 365, Microsoft Entra ID, Active Directory.
• Endpoint, email, network, web, and cloud security technologies.
• Vulnerability management and remediation.
• IT service management principles, including incident and change management.
• Excellent documentation and communication skills.

Responsibilities

• Day-to-day operation and maintenance of security tools and controls.
• Proactively monitor the firm's network and computing infrastructure, review reports and respond to threat intelligence and alerts.
• Raise and manage incidents and changes, remediate vulnerabilities, and implement improvements in IT Security.
• Prepare and present routine reporting of agreed security KPIs and compliance with policy and security certifications.
• Work with IT Team and wider business as 2nd line security input for BAU or projects.
• Conduct simulated phishing tests and manage online security training and awareness campaigns.
• Maintain knowledge of IT Security trends, technology and threats.
• Assist third-party security providers with testing/auditing and certification.
• Contribute to secure design of new services and liaise with suppliers.
• Participate in incident resolution escalated to the team and identify improvement opportunities.
• Ensure all system and operating documentation is up to date and accessible.
• Occasionally perform ad-hoc tasks outside core responsibilities.

Skills

Security in corporate environments

Security monitoring & incident triage

Networking concepts (LAN/WAN/DNS)

IAM & MFA & privileged access

Windows desktop & server

Microsoft 365 & Entra ID & AD

Endpoint, email, network, web & cloud

Vulnerability management

ITIL/ITSM incident & change mgmt

Documentation & communication

Cloud security concepts (SaaS/IaaS)

Security testing

Education

Security-related qualification (Security+, CC, etc.)

Tools

Windows OS

Microsoft 365

Entra ID

Active Directory

Azure

Intune

Configuration Manager

Job description

About The Opportunity

The roleAs a Security Operations Analyst you will be part of a small team that is responsible for monitoring and maintaining the security of Gateley's IT infrastructure, software, and users. The Security Operations Analyst will:Be responsible for the day-to-day operation and maintenance of security tools and controls.Proactively monitor the firm's network and computing infrastructure, review reports and respond to threat intelligence and alerts.Raise and manage incidents and changes, remediate vulnerabilities, and implement improvements in IT Security.Prepare and present routine reporting of agreed security KPIs and of compliance with policy and security certifications.Work with other members of the IT Team and the wider business as 2nd line support where IT Security input is required for BAU or project activities.Conduct simulated phishing tests and manage delivery of online security training and awareness campaigns.Maintain and develop your knowledge of IT Security, industry trends, technology, and threats.Assist third-party providers of security services with penetration testing and security auditing and certification.Contribute knowledge and expertise in relation to the secure design of new services.Liaise with relevant suppliers where required.Participate in the resolution of incidents escalated to the team.Identify opportunities for improvement.Ensure that all system and operating documentation is up to date and available to the appropriate teams.Due to the nature of the team you may from time to time be asked to undertake ad-hoc tasks outside of your core responsibilities.The teamGateley Plc has a dynamic and collaborative IT department.

Essential

• A practical understanding of information security in a corporate environment
• Security monitoring, alert triage and incident response principles
• Networking concepts, services and protocols, including LAN, WAN, DNS, encryption and remote access
• Identity and access management, multifactor authentication and privileged access
• Microsoft Windows desktop and server operating systems
• Microsoft 365, Microsoft Entra ID, Active Directory
• Endpoint, email, network, web, and cloud security technologies
• Vulnerability management and remediation
• IT service management principles, including incident and change management
• Excellent documentation and communication skills

Desirable

• A relevant information security qualification (Security+, CC, etc.)
• SaaS and IaaS cloud security principles, including SSE and SASE
• Understanding of AI technology and associated security risks
• Familiarity with standards, controls, certifications including ISO 27001, Cyber Essentials Plus
• Understanding of statutory and regulatory requirements for the handling of sensitive data
• Experience of working within the legal/professional services industry
• Business continuity planning and disaster recovery
• Microsoft Azure, Intune, Configuration Manager
• Virtualisation, Linux, scripting or software development
• Security testing experience

About Us

The benefits

• With support, coaching and feedback from some of the most engaging colleagues around our great development and progression opportunities will reward your commitment and loyalty.
• We offer a competitive remuneration package where you'll be rewarded for your individual performance with an opportunity to receive an annual bonus.
• In addition, we have a wide range of learning and development opportunities via our Learn platform to develop new skills and progress your career.
• Our My Flex comprehensive rewards package includes options covering annual leave (and the benefit of purchasing extra days), cycle to work, critical illness benefit, employee assistance programme, group personal pension, health care, season ticket loan and many more benefits (grade dependent).
• Finally, with Perks At Work/Home you can select a host of retail benefits that suit your needs alongside a Community Online Academy, free courses for all from fitness to coding to languages to hip hop dance.

We are Gateley

We are forward thinking and straight talking, our approach is to find solutions to the problems that our clients face.

Gateley is a legal and professional services group, we are a group of formidable experts in all areas of law and business.

Passionate problem solvers, we get our kicks from finding the right answers and getting our legal and business clients where they need to be.

We support more than 5,700 active clients, ranging from FTSE 100 companies to private individuals, in the UK and beyond.

Being part of Gateley is not just about the expertise that you bring; it's about attitude too.The 'Gateley Story' is the story of our people and our culture.

It is what has got us to where we are today as a successful business and it's the driving force behind the Gateley Team Spirit and the values that have shaped it.

We have a set of shared internal values that capture what the Gateley Team Spirit is and this includes five elements that bind us all together as one Gateley: Ambitious for Success, Forward Thinking, Room to Breathe, Trusted to Do and Working Together.

Every year across the group, we recognise members of our team that have gone and above and beyond and have lived these shared values.

They are recognised at our annual Gateley Team Spirit awards.

Diversity, inclusion and well beingDiversity, inclusion and well being is an important part of Gateley's culture and values.

We recruit talented people from a diverse range of backgrounds and cultures, providing equal opportunities for all to join our team regardless of age, sex, race, sexual orientation, disability, or culture.

We create an exciting and rewarding place to work that aims to fulfil everyone's potential and together to achieve personal and business goals.

We offer flexible working patterns to help our staff achieve a good work/ life balance and we encourage candidates seeking flexibility in their next role to apply for any of our vacancies.

We are proud to have been recognised by The Law Society as gold standard for our Diversity and Inclusion Charter and to be Stonewall Diversity Champions.

Additional Information

If you are successful in receiving an offer of a role with our company a variety of pre-employment screening checks will be completed.

Our screening checks can include but are not limited to your eligibility to work, professional and academic qualifications, any criminal records, your financial stability and references from previous employers.

The screening that takes place will be relevant to your role and will vary from role to role.

All LocationsBirminghamAll Locations is a required fieldAll DepartmentsITAll Departments is a required fieldAdvertising SalaryNot SpecifiedVacancy TypePermanent