Cyber Security Analyst, Leeds

  • Leeds
  • Services aux entreprises
  • Professionnels des services aux entreprises
  • Permanent
  • À temps plein
  • 92370
  • Kim Smith
  • Kim.Smith@addleshawgoddard.com
  • Competitive
  • United Kingdom

PURPOSE OF THE ROLE 

The primary responsibility of the Cyber Security Analyst is to support the confidentiality, integrity, and availability of our clients' data. As a result, the Cyber Security Analyst must have excellent analytical skills as well as a good knowledge of the company's products, services, and Service Management processes. The Cyber Security Analyst will use their knowledge and technical expertise to work with the team lead to provide excellent security alongside customer service. Ensuring the integrity of data for AG and its customers. 

WHAT TO EXPECT IN THIS ROLE 

In this role, you will:

  • To develop and maintain the firm's various cybersecurity solutions
  • To analyse and use threat intelligence to react the day-to-day cyber threats levelled against the firm and where required, put in place mitigating controls/solutions
  • Maintain and update AGs IT vulnerability and remediation database to ensure both audit compliancy and safeguarding the firms IT assets
  • Work with all areas of the IT Department across the globe to ensure security of the infrastructure from the implementation of new systems through to the maintenance and monitoring of existing/legacy systems
  • Work to organise Penetration Testing from organisation through to remediation, ensuring all are assigned adequate prioritisation and expertise to resolve
  • Define, plan, implement, maintain, and upgrade security measures, policies, and controls
  • In the event of a cybersecurity incident, advise and recommend communications to the business, its customers and suppliers
  • Development and maintenance of the security of the Firm's IT services, including liaising with third parties to ensure patching, resolving vulnerabilities and hardening systems as required
  • Create and update security support documentation, including processes and procedures to ensure a consistent and effective support performance
  • Keep up-to-date with the latest security news, principles, techniques, threat intelligence and protocols
  • Operate in an ITIL V3 focused service delivery framework
  • Stakeholder Management within the whole business including IT and external stakeholders
  • Work to defined Service Level Agreements (SLA'S) and Key Performance Indicators (KPI's)

AREAS OF KNOWLEDGE AND EXPERTISE

You will have:

  • Awareness of infrastructure: Azure, Windows Server 2012+ ESX/VMware, Messaging (Exchange), IIS, SQL 2012+, Linux appliances, Mac OS X, architecture and OS knowledge, Back-up technologies, Citrix, and Cisco networking, including IPT
  • Knowledge and usage of most of the listed application technologies: Microsoft Azure and Security Suite: Sentinel, Defender For Endpoint, Defender For Servers, Defender For Cloud Apps, Intune, Conditional Access Policies, Identity Protection, ANY.RUN, Purview, Zscaler, Mimecast, Thinkst Canary Devices, Nessus, Secret Server, Cisco Firepower
  • Awareness of security technologies: SIEM, firewalls, intrusion detection/prevention systems, anti-virus software, authentication systems, log management, content filtering, EDR, AV, ATP, Threat & Vulnerability Management, Threat Intelligence, Sandboxing, MDM Solutions, Attack Surface Reduction Rules, Web Control / Category Based URL Blocking, Controlled Folder Access, API's, SIEM Connectors
  • Awareness of security approaches: ISMS, risk analysis and assessments, the CIA triad, attack vectors including social engineering, cryptography, confidentiality issues and the law relating to them, such as PACE, DPA, CMA and RIPA, and cyber security incident response best practices, including triage and chain of custody
  • Proactively identifies areas for improvement, shares lessons learned with colleagues and encourages others to do the same, customer focused with a passion and drive to deliver customer satisfaction and value to the business
  • Dedicated and responsible with a strong commitment to the assigned task with the ability to work under pressure, to meet deadlines and to work independently and/or with some supervision
  • Self-driven and ability to work independently and interact effectively with people at all levels, with good communication and interpersonal skills
  • Excellent problem solving and trouble shooting skills. In particular the ability to see patterns and solutions where others may not, attention to detail, analytical abilities and the ability to recognise trends in data
  • Personal behaviours and values that nurture openness, honesty, trust, mutual respect and support from all team members in line with service excellence ideals
  • Security+, SSCP, Network+, a computing/security related BSc degree or other similar qualification would be advantageous

OUR FIRM

Our story of international growth is built on a performance mindset, innovation and true collaboration. We believe results follow relationships, so we work closely with each other, and develop deep client connections to deliver. 

Our award-winning culture balances high standards and hard work with genuine care – looking out for each other, supporting professional development, in a down to earth and inclusive environment. We do the right things in the right ways, combining commercial excellence and innovative thinking with teamwork. Together, we deliver excellence, achieve stand out solutions, and enable career-defining opportunities.

We are open to flexibility in how this role is structured for the right candidate. While it is envisaged as a full-time position, with the same time and commitment demands as any other transactional real estate lawyer role, we also welcome applications from candidates seeking either part-time arrangements, or arrangements with a greater degree of certainty around working hours, with appropriate adjustment to salary expectations. We are committed to supporting flexible working where possible and are happy to discuss how the role could be shaped to meet both business needs and the preferences of the successful candidate.