Cyber Security Specialist - L3

For over 25 years, Global Relay has set the standard in enterprise information archiving with industry-leading cloud archiving, surveillance, eDiscovery, and analytics solutions. We securely capture and preserve the communications data of the world's most highly regulated firms, giving them greater visibility and control over their information and ensuring compliance with stringent regulations.

Though we offer competitive compensation and benefits and all the other perks one would expect from an established company, we are not your typical technology company. Global Relay is a career-building company. A place for big ideas. New challenges. Groundbreaking innovation. It's a place where you can genuinely make an impact - and be recognized for it.

We believe great businesses thrive on diversity, inclusion, and the contributions of all employees. To that end, we recruit candidates from different backgrounds and foster a work environment that encourages employees to collaborate and learn from each other, completely free of barriers.

Global Relay is unable to offer visa sponsorship for this position. Candidates must have the right to work in the UK at the time of application.

The Cyber Security Specialist 3 ensures the deployment, operations and continuous improvement of security tools, technologies and processes that protect Global Relay as well as ensures advanced response to security threats and vulnerabilities. This is a highly technical role with an individual who must have direct experience in the following Information Security areas, access control, endpoint security, vulnerability management and cryptography.

This individual acts as an escalation resource for technical issues associated with the analysis of event logs, system logs, and other data sources and for the determination of root cause and resolution of security events. The role includes incident response, driving threat intelligence capabilities and ensuring alignment with business and regulatory expectations. As well as evaluation of security systems and processes and working closely with but not limited to management, operations/Dev Ops, and development teams on security related matters.

• Adhere at all times to separation of duties between your role as a member of the security team that monitors the activities of privileged users, and privileged network and Operations/Dev Ops team members that use their privileges to resolve incidents and fulfil requests in the production environment.
• Design and implement Global Relay's cybersecurity solutions and ensure it aligns with business goals, Global Relay standards and industry best practices.
• Implement, manage, and monitor security technologies, including but not limited to Web Application Firewall (WAF), Threat Intelligence Platform, Security Information and Event Management (SIEM) solutions, Hardware Security Modules (HSM), Endpoint Detection and Response (EDR) platforms, Vulnerability Management Platforms.
• Act as the escalation point for security incidents and service requests in a timely manner.
• Review, assess, and prioritise escalated security related events based on severity and criticality.
• Ensure compliance with relevant security standards, regulations (e.g., NIST, ISO 27001, SOC 2, GDPR), and internal policies. Develop and enforce security policies, standards, and procedures across the organization.
• Stay up-to-date with the latest cybersecurity threats, trends, and technologies. Interpret threat intelligence and other data to develop new security use cases and defensive strategies.
• Ensure timely detection, analysis, containment and remediation of security threats and incidents.
• Monitor security tools and systems to identify and respond to potential threats in real time.
• Use scripting and programming languages (e.g., Python, Power Shell) to automate security tasks, improve efficiency, and develop custom security tools.
• Act as a subject matter expert, providing guidance and mentorship to junior and mid-level cybersecurity team members and other IT staff.
• Effectively communicate complex security concepts and risks to both technical and non-technical audiences, including senior management.
• Act as a security resource in the design and deployment of Global Relay initiatives, both internal and for Global Relay's products.
• Design, approve, and implement device rule changes, patches, and updates aligned with the change management process.
• Research and deploy security solutions, including…