Cyber Security Specialist - L2

Who we are:

For over 25 years, Global Relay has set the standard in enterprise information archiving with industry-leading cloud archiving, surveillance, eDiscovery, and analytics solutions. We securely capture and preserve the communications data of the world’s most highly regulated firms, giving them greater visibility and control over their information and ensuring compliance with stringent regulations.

Though we offer competitive compensation and benefits and all the other perks one would expect from an established company, we are not your typical technology company. Global Relay is a career-building company. A place for big ideas. New challenges. Groundbreaking innovation. It’s a place where you can genuinely make an impact - and be recognized for it.

We believe great businesses thrive on diversity, inclusion, and the contributions of all employees. To that end, we recruit candidates from different backgrounds and foster a work environment that encourages employees to collaborate and learn from each other, completely free of barriers.

Global Relay is unable to offer visa sponsorship for this position. Candidates must have the right to work in the UK at the time of application.

Your role:

The Cyber Security Specialist 2 provides second level response to security threats and vulnerabilities. This position analyzes event logs, system logs, and other data sources to determine the root cause of security events and provide recommendations to resolve the events. This position also designs, plans, implements, and maintains assigned components of Global Relay’s security infrastructure within an AI enabled environment.

Your responsibilities:

• Adhere at all times to separation of duties between your role as a member of the security team that monitors the activities of privileged users, and privileged network and Operations/DevOps team members that use their privileges to resolve incidents and fulfill requests in the production environment.
• Working knowledge of how AI or machine learning features are used in security platforms such as SIEM, EDR/XDR and SOAR, with hands-on ability to configure, support or test these capabilities as part of day-to-day security technology operations.
• Ability to help assess, test and tune approved AI-enabled use cases such as alert enrichment, triage, detection, investigation and response automation. Can check output quality, identify false positive or unexpected behavior, document results and escalate issues appropriately.
• Practical understanding of common risks from organizational use of generative AI tools, copilots, agents and MCP or other tool integrations, including prompt injection, sensitive-data exposure, excessive permissions and unsafe or unauthorized actions.
• Provide second level support by actioning escalated security incidents and service requests in a timely manner.
• Review, assess, and prioritize security related events based on severity and criticality.
• Perform audit and analysis functions on internal and external data sources.
• Evaluate, install, and maintain security related software and tools to ensure best of class monitoring and protection of systems and applications; examples include vulnerability detection, assessment and mitigation tools, penetration testing tools, log management and monitoring tools, in-house developed security applications, intrusion detection and prevention systems, mobile computing device controls, VPNs and DR systems.
• Develop and maintain process documentation.
• Assist with Global Relay security audits.
• Assist with the enforcement of security policies.
• Participate in security awareness initiatives.
• Administer firewall rule changes, patches, and updates aligned with the change management process.

About you:

• 2-5 years hands-on experience working with core information security systems such as firewalls, intrusion detection and prevention implementations, antivirus and anti-malware solutions, SIEM solutions, two-factor and biometric authentication solutions, and server and network device hardening.
• 2-5 years of hands-on experience working with core infrastructure and networking components such as Windows and Linux servers, L2-L3 network switches and routers.
• 1+ years exp of how AI or machine learning features are used in security platforms.
• Proven experience performing analysis of security events to determine root cause and provide resolution.
• Certification in security technologies such as SIEM tools, firewalls, networking, etc.
• Excellent understanding of a wide variety of communication protocols.
• Experience using an internal and external ticketing system for ITIL-based incident, problem and change management.
• Previous experience in troubleshooting day-to-day operational processes such as report generation, data verification, data correlation, etc.
• Excellent verbal, written and documentation skills.
• Methodical and creative approach to problem-solving.
• Superior time management and prioritizing ability.

What you can expect:

At Global Relay, there’s no ceiling to what you can achieve. It’s the land of opportunity for the energetic, the intelligent, the driven. You’ll receive the mentoring, coaching, and support you need to reach your career goals. You’ll be part of a culture that breeds creativity and rewards perseverance and hard work. And you’ll be working alongside smart, talented individuals from diverse backgrounds, with complementary knowledge and skills.

Global Relay is an equal-opportunity employer committed to diversity, equity, and inclusion.

We seek to ensure reasonable adjustments, accommodations, and personal time are tailored to meet the unique needs of every individual.

To learn more about our business, culture, and community involvement, visit www.globalrelay.com.