Senior Security Operations Analyst

Interactive Investor Plc; Manchester; Híbrido; GBP 49.000 - 59.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Group Pension 8%

Life Assurance

Private Medical Insurance (Bupa)

25 Days Annual Leave

Staff Discounts

Personal & Well-being Fund

Retail Discounts

Voluntary Flexible Benefits

Descripción de la vacante

interactive investor in Manchester/Leeds is seeking a Senior Security Operations Analyst to join the Information Security Team. The role focuses on monitoring, detecting, analysing and responding to security incidents in a hybrid setup (3 days on site, 2 days remote).

You will oversee Chronicle SIEM operations, create and tune rules, investigate alerts, monitor events for trends and threats, and drive remediation with the SOC and DevOps teams.

Formación

• Understanding security requirements and controls.
• Experience with SIEM and log data.
• Knowledge of firewalls and IDS/IPS.
• Strong communication skills; able to explain complex ideas simply.
• Ability to work independently and within a team.
• Understanding of cloud fundamentals.

Responsabilidades

• Oversee Chronicle SIEM operations with Infrastructure/DevOps and SOC.
• Define and tune SIEM rules.
• Investigate alerts through to resolution.
• Provide dynamic monitoring and incident response capabilities.
• Monitor security events, identify trends, attacks, and threats.
• Identify problems and drive remediation.
• Assess threats from multiple sources and plan mitigations.
• Gather data, analyse and respond to incidents.
• Stay current on cyber trends and best practices.
• Assist in designing and documenting security policies and processes.
• Design test methods for security controls.
• Manage EDR daily.

Conocimientos

SIEM tooling

Incident response

Threat analysis

Network security

Windows logs

Educación

Degree in IT or Cyber

Herramientas

Splunk

Chronicle

Sentinel

Descripción del empleo

Description

Title: Senior Security Operations Analyst

Location: Hybrid – Manchester or Leeds, 3 days on site per week, 2 days remote.

Salary: From £54,000

Who we are:

interactive investor is an award-winning investment platform that puts its customers in control of their financial future.

We've been helping investors for nearly 30 years. We've seen market highs and lows and been resilient throughout. We're now the UK's number one flat-fee investment platform, with assets under administration approaching £75 billion and over 500,000 customers.

For a simple, flat monthly fee we provide a secure home for your pensions, ISAs and investments. We offer a wide choice of over 20,000 UK and international investment options, including shares, funds, trusts and ETFs.

We also bring impartial, expert content from our award-winning financial journalists, highly engaged community of investors, and daily newsletters and insights.

Purpose of the role:

The Senior Security Operations Analyst plays a pivotal role in the Information Security Team at interactive investor. This role is crucial in maintaining and protecting our key business assets from threats and risks.

Working closely with Infrastructure, Networks, DevOps and our outsourced Security Operations Centre (SOC) team, the Senior Security Operations Analyst will be responsible for monitoring, detecting, analysing, and responding to security incidents. The primary objective is to provide a dynamic monitoring and incident response capability, contributing significantly to the company's overall security posture and resilience.

KEY RESPONSIBILITIES:

• Oversee the day to day running of our SIEM solution (Chronicle), working closely with Infrastructure, Networks, DevOps and our outsourced Security Operations Centre (SOC) team.
• Define and facilitate the creation of new rules or fine-tuning existing rules within SIEM.
• Investigate SIEM alerts and other security incidents through to completion.
• Work within the Information Security Team to provide a dynamic monitoring and incident response capability.
• Monitor and analyse security events, identifying trends, attacks, and potential threats.
• Identify and raise problems, communicating and escalating these via the appropriate channels and tracking through to remediation.
• Assess security threats from multiple sources and plan mitigation and remediation.
• Gather relevant data, analyse and respond to cyber security incidents.
• Research and stay current on the latest trends, best practices, and technology developments for all things cyber.
• Assist in the design, management, and documentation of security policies, solutions, standards, and processes.
• Design effective test methods for logical security controls.
• Manage Endpoint Detection and Response (EDR) on a day to day basis.

SKILLS & EXPERIENCE REQUIRED:

• A good understanding of technical and network security requirements.
• Ability to proactively identify control weaknesses and vulnerabilities.
• Knowledge and use of SIEM tooling, i.e. Splunk, Chronicle, Sentinel etc., and event log data.
• Experience in understanding firewalls and IDS/IPS, and Windows Security Event Logs.
• Strong verbal and written communication skills with the ability to articulate complex ideas in easy to comprehend business terms.
• Comfortable taking ownership for own work, identifying the need for action whilst working effectively within a team.
• Ability to quickly understand existing infrastructure, network security principles, data flow and security architectures.
• Knowledge of the fundamentals of cloud infrastructure as well as traditional technologies.
• Degree in IT or Cyber preferred, or an industry recognised qualification.

• Group Personal Pension Plan – 8% employer contribution and 4% employee contribution
• Life Assurance and Group Income Protection
• Private Medical Insurance – Provided by Bupa
• 25 Days Annual Leave, plus bank holidays
• Staff Discounts on our investment products
• Personal & Well-being Fund – Supporting your physical and mental wellness
• Retail Discounts – Savings at a wide range of high street and online retailers
• Voluntary Flexible Benefits – Tailor your benefits to suit your lifestyle

Please Note: We will do our utmost efforts to respond to all applicants. However, due to the high volume of applications we're currently receiving, if you haven't been contacted within 30 days of application, please consider unsuccessful.

interactive investor operates in accordance with the UK Equality Act 2010. We welcome applications from individuals of all ages, disabilities, gender identities, marital status, pregnancy/maternity, race, religion or belief, sex, and sexual orientation. We are committed to treating all applicants fairly and making reasonable adjustments where needed to support disabled applicants. We actively prevent all forms of discrimination, harassment, and victimisation, whether direct, indirect, associative, or perceptive.