{"id":3497766,"url":"https://alion.io/job/gibson-dunn-information-security-analyst-2","title":"Information Security Analyst","company":{"id":185365,"name":"Gibson Dunn","domain":"gibsondunn.com","url":"https://alion.io/company/gibson-dunn","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"A","score":95,"open_postings":26,"ghost_share":0,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":69,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Security","role_family":"Security","seniority":"senior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":91000,"max_usd":167000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":36},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DNS","optional":false},{"name":"Machine Learning","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-29T23:17:24Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-10-30T10:54:12Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"Gibson Dunn is a leading global law firm, advising clients on significant transactions and disputes. Our exceptional teams craft and deploy creative legal strategies that are meticulously tailored to every matter, however complex or high stakes. The firm’s work is distinguished by a unique combination of precision and vision.\nBased in London, the Information Security Analyst is responsible for responding to events and alerts generated by information security technologies, user reported events and any activity, which is suggestive of a potential information security event/incident.\nThe Information Security Analyst is a hands-on technologist who has a high degree of expertise in the use of technologies used in the investigation of information security events and has a high level of expertise in performing security event analysis and incident response. The Information Security Analyst is a subject matter expert (SME) for all security event detection and response technologies. The scope of this position is firm wide and requires an understanding of all IT systems the firm uses and how they provide value to the business.\nThe Information Security Analyst works closely with other members of the Information Security Team in ensuring that the information security posture of the firm is maintained and takes a proactive approach in continually assessing the security of firm systems throughout their lifecycle, providing recommendations for enhancing security and adapting to new threats and vulnerabilities.\nThis role reports to the Director of Security Operations.\nResponsibilities include:\nServe as a primary escalation point for security events\nServe as an SME for event/incident detection and response\nAnalyze and respond to security events found internally or via the firm’s Managed Security Service Providers\nReview security context alerts and logs using the firm’s security information event management platform (SIEM) or other tools\nBuild dashboards and custom SIEM queries as need to facilitate detection, response and other use-cases.\nServe as an initial point of contact for help desk tickets assigned to the Information Security Team\nPromptly respond to requests for assistance from end-users and others regarding incidents or security concerns at the firm\nEscalate security events/incidents according to defined workflow and in accordance with any relevant SLAs\nThoroughly document the results of security event/incident investigations\nAdhere to relevant policies, procedures, standards and security good/accepted practices\nResolve problems independently and understand escalation procedure\nRespond in a timely manner to all requests for access or other security exceptions requiring approval or involvement from the information security team\nMaintain current security certifications and attend industry seminars and relevant continuing education events\nMonitor and investigate security events involving artificial intelligence, machine learning, generative AI, and large language model technologies.\nIdentify and investigate potential misuse of AI technologies, including unauthorized AI services, sensitive data exposure, prompt injection, malicious content generation, and AI-assisted social engineering.\nDevelop and maintain detection queries, correlation rules, dashboards, and response procedures for AI-related threats and anomalous activity.\nQualifications:\nAbility to relate to non-technical users in user-friendly language\nAbility to understand or learn the technical implications of security threats\nAbility to manage multiple concurrent objectives or activities, and effectively make judgments in prioritizing and time allocation in a high-pressure environment\nAbility to gauge one’s strengths and limitations\nAbility to deal with changes and adapt to a changing environment\nMust demonstrate the ability to maintain strict confidentiality of the firm's internal and personnel affairs\nAbility to work well with others, harness different skills and experience, and build a strong sense of team spirit\nHighly self-motivated and directed\nAbility to work in a multi-office environment and willingness to travel to other offices as required\nAbility to work effectively in a culturally and educationally diverse environment\nPossess excellent troubleshooting, problem solving, and verbal/written communication skills\nAbility to manage critical situations, and maintain solid relationships with colleagues and firm staff and attorneys\nAbility to anticipate problems, communicate them, and resolve if appropriate\nAbility to work independently and as part of a team\nMust have strong written/verbal communication skills\nMust be detail oriented with strong customer service skills\nRequires strong interpersonal and organization skills\nTake ownership of issues and responsibility for customer satisfaction and overall success of services provided\nInterface with a variety of customers in a polite, positive, and professional manner\nFamiliarity with AI security concepts such as prompt injection, data leakage, model manipulation, insecure integrations, excessive agency, and adversarial use of AI.\nAbility to communicate AI-related security risks and technical findings clearly to both technical and non-technical audiences.\nExperience:\nUniversity degree in a technology related discipline or 3 years of relevant experience\n5-7 years of experience in a dedicated information security analysis role\n3-5 years of experience in information technology in an area such as; networking, desktop engineering, programming, systems administration, help desk\nStrong critical thinking and problem-solving skills\nPractical experience with TCP/IP networking\nSignificant experience with the Windows operating system and event logs\nSignificant experience with and expertise in security event detection, analysis and incident response tools\nSignificant experience with and expertise in conducting security event analysis and incident response.\nSignificant experience and expertise in using security information event management platforms (SIEM) for searching and correlating events including; building complex searches and correlation rules\nStrong knowledge of networking concepts including; DNS, switching, routing and firewalls\nExperience investigating security events involving cloud applications, APIs, automation platforms, or AI-enabled technologies.\nExperience developing or tuning detections for emerging threats, including AI-assisted phishing, impersonation, malware, credential attacks, and social engineering.\nExperience using AI-assisted capabilities within security technologies such as SIEM, endpoint detection and response, email security, threat intelligence, vulnerability management, or security orchestration platforms.\nPractical experience applying human oversight and validation to AI-generated security findings, recommendations, or automated actions.\nGibson Dunn will consider for employment qualified Applicants with Criminal Histories in a manner consistent with the requirements of local law.\n______\nFor technical difficulties with our online application, please contact us at . Our recruiting support team will respond as soon as possible.\n______\nGibson Dunn is committed to ensuring equal employment opportunities for all qualified applicants, including individuals with disabilities. We strive to ensure an inclusive and accessible hiring experience. The Firm will provide reasonable accommodations to qualified individuals with disabilities to enable participation in the application and recruitment process, unless doing so would impose an undue hardship, in accordance with applicable laws and regulations.\nIf you require a reasonable accommodation to complete an application, participate in an interview, or otherwise take part in the recruitment process, please contact us at . Please note, this is a dedicated email inbox established exclusively to assist applicants with accommodation request related to the recruitment process. Inquiries about the status of an application or other non-accommodation matter will not receive a response.","description_format":"text","description_chars":8149,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Legal Services"],"lifecycle":[{"event":"open","at":"2026-10-30T02:14:05Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":69,"reasons":["conf:3","win:early","comp:brand"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/gibson-dunn-information-security-analyst-2","json_url":"https://alion.io/job/gibson-dunn-information-security-analyst-2.json","meta":{"generated_at":"2026-10-30T13:14:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":113,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":185365},"rest":"https://alion.io/mcp/rest/get_company?id=185365"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgibson-dunn-information-security-analyst-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgibson-dunn-information-security-analyst-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgibson-dunn-information-security-analyst-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gibson-dunn-information-security-analyst-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgibson-dunn-information-security-analyst-2"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3497766}},{"tool":"search_jobs","arguments":{"company":"gibsondunn.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3497766},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}