Cyber Security Analyst L4

Job Description

London/Norwich

Immediate joiners only

Purpose of Role

The Security Operations Analyst is a member of the Security Operations team,

reporting to the Security Operations Lead. The purpose of this role is to

maintain strong oversight of the 24x7 Security Operations Centre, manage a

number of operational security services related to this, review the security

impact of infrastructure changes within the environment monitor & manage

associated toolsets.

Mandatory Skills: Forcepoint DLP

Key Accountabilities/Responsibilities

Cyber Security Operations

• Responsible for overseeing the day-to-day operational delivery

of services provided to DLG by its third party 24x7 Security Operations Centre.

These services include Denial Of Service Protection (DDoS), Web Application

Firewall, Intrusion Prevention & Detection, File Integrity Monitoring,

Vulnerability Scanning, Privileged Access Management, SIEM.

• Responsible for operating and maintaining data leakage

prevention toolsets, responding to alerts for data loss events including

investigation and management of any data loss incidents that breach corporate

data handling requirements and/or industry standards (such as PCI DSS).

• Participate in the rotational 24/7 security incident response

capability. Must be capable of acting as the single point of contact for all

security related response actions and decisions. This includes management of

each incident from a security perspective, interaction with IM/MIM teams (where

required) and recording of all key security decisions.

• Responsible for maintaining security oversight of the technical

infrastructure delivered by third party suppliers and raising concerns/issues

that pose a security risk to the organisation accordingly. Must also manage any

operational risk remediation to conclusion

• Responsible for operational support of the security certificate

provisioning platform, including all operational functions. This includes

alerting key stakeholders, scheduled and ad-hoc reporting, renewal and

revocation of certificates and updates to procedural documentation

• Responsible for managing the governance of the firewall rule

bases and associated change management process.

• Responsible for providing security input and for maintaining

relationships with the Service Management function in relation to change

management, problem management and incident management.

• Responsible for overseeing the management of web proxy policy

configuration provided by third party providers.

• Responsible for monitoring the operational security

communication channels responding appropriately to queries/requests from the

business.

• Responsible for monitoring and responding to emerging threat

patterns, vulnerabilities and anomalies and provide escalations of any unknown

threats to relevant areas within the company.

• Responsible for reporting metrics on the status of technical

information security controls across the DLG estate, highlighting risk areas

and working to develop and manage remediation plans as required.