Senior Security Operations Analyst

interactive investor; Manchester; Hybrid; GBP 49,000 - 59,000; Full time

Benefits offered by this job

Group Pension Plan – 8% employer

Life Assurance

Private Medical Insurance – Bupa

25 Days Annual Leave + bank holidays

Staff Discounts on investments

Personal & Well-being Fund

Retail Discounts

Voluntary Flexible Benefits

Job summary

interactive investor is seeking a Senior Security Operations Analyst to join the Information Security Team. You will monitor, detect, analyse and respond to security incidents, oversee the SIEM (Chronicle) operations and work with SOC partners.

The role requires strong knowledge of SIEM tooling and incident response, plus experience with threat intelligence and cloud-related security concepts. The position is hybrid, based in Manchester or Leeds with 3 days on-site and 2 days remote, offering

Qualifications

• Experience with SIEM tools (Splunk/Chronicle/Sentinel).
• Experience in detecting, investigating and responding to security incidents.
• Experience in threat intelligence and threat hunting activities.
• Knowledge of Windows event logs and network security fundamentals.

Responsibilities

• Oversee daily SIEM operations and collaborate with SOC.
• Define and tune SIEM rules for Chronicle/Splunk.
• Investigate and respond to security incidents end-to-end.
• Monitor threat intelligence and coordinate threat hunting activities.
• Design, implement and document security policies and controls.
• Manage Endpoint Detection and Response (EDR).
• Assess threats from multiple sources and plan mitigations.

Skills

SIEM monitoring

Incident response

Threat hunting

Threat intelligence

EDR management

Firewall/IDS knowledge

Windows Security Logs

Strong communication

Education

Degree in IT / Cyber

Tools

Splunk

Chronicle

Microsoft Sentinel

Job description

Title: Senior Security Operations Analyst

Location: Hybrid - Manchester or Leeds 3 days per week, 2 days remote

Salary: From £54,000

Who we are:

interactive investor is an award-winning investment platform that puts its customers in control of their financial future. We’ve been helping investors for nearly 30 years. We’ve seen market highs and lows and been resilient throughout. We’re now the UK’s number one flat-fee investment platform, with assets under administration approaching £75 billion and over 500,000 customers.

For a simple, flat monthly fee we provide a secure home for your pensions, ISAs and investments. We offer a wide choice of over 20,000 UK and international investment options, including shares, funds, trusts and ETFs.

We also bring impartial, expert content from our award-winning financial journalists, highly engaged community of investors, and daily newsletters and insights.

Purpose of the Role

We are recruiting for a Senior Security Operations Analyst to join the Information Security Team to support our continued growth. You will help maintain and protect our key business assets from threats and risks by monitoring, detecting, analysing, and responding to security incidents.

Key Responsibilities

Oversee the day to day running of our SIEM solution (Chronicle) working closely with Infrastructure, Networks, DevOps and our outsourced Security Operations Centre (SOC) team.

Define and facilitate the creation of new rules or fine-tuning existing rules within SIEM.

Investigate SIEM alerts and other security incidents through to completion.

Work within the Information Security Team to provide a dynamic monitoring and incident response capability.

Monitor and analyse security events identifying trends, attacks, and potential threats.

Identify and raise problems. Communicate & elevate these via the appropriate channels and track through to remediation.

Monitoring and gathering Threat intelligence and coordinating subsequent Threat Hunting.

Assess security threats from multiple sources and plan mitigation/remediation.

Gather relevant data, analyse and respond to cyber security incidents.

Research and stay current on the latest trends, best practices, and technology developments for all things cyber.

Assist in the design, management, and documentation of security policies, solutions, standards, and processes.

Designing effective test methods for logical security controls.

Day to day management of Endpoint Detection and Response (EDR).

A good understanding of technical and network security requirements.

Ability to proactively identify control weakness and vulnerabilities.

Knowledge and use of SIEM tooling i.e., Splunk, Chronicle, Sentinel etc and event log data.

Experience in understanding Firewalls and IDS/IPS and Windows Security Event Logs.

Strong verbal and written communication skills with the ability to articulate complex ideas in easy to comprehend business terms.

Comfortable taking ownership for own work, identifying the need for action whilst working effectively within a team.

Ability to quickly understand existing infrastructure, network security principles, data flow and security architectures.

Knowledge of the fundamentals of cloud infrastructure as well as traditional technologies.

Degree in IT / Cyber preferred or industry recognised qualification.

Group Personal Pension Plan – 8% employer contribution and 4% employee contribution

Life Assurance and Group Income Protection

Private Medical Insurance – Provided by Bupa

25 Days Annual Leave, plus bank holidays

Staff Discounts on our investment products

Personal & Well-being Fund – Supporting your physical and mental wellness

Retail Discounts – Savings at a wide range of high street and online retailers

Voluntary Flexible Benefits – Tailor your benefits to suit your lifestyle