Security Analyst

About the Role

As part of the Security Incident Response Team, the Security Analyst will respond to and investigate events generated by our security controls, ensuring that security incidents are promptly identified, contained and eradicated. You will work closely with IT, security partners and the wider business.

The role includes a 24x7 shift and on‑call rota to support monitoring and environment support.

• Continuously monitor technical security controls to identify and investigate potential threats.
• Respond to security incidents, ensuring prompt containment and recovery.
• Carry out forensic investigations following incidents.
• Log and manage all incidents in our ITSM tool.
• Participate in lessons learned meetings and recommend improvements.
• Liaise with IT teams, business areas and third parties to aid investigations.
• Maintain awareness of emerging threats and TTPs relevant to the Next environment.
• Identify false positives and tuning requirements for security controls.
• Collaborate with Security Engineering and Vulnerability & Threat Management teams for control testing.
• Maintain operational procedures and technical documentation.
• Manage metrics and reporting on security threats and trends.

• Proven IT experience with understanding of network protocols and server infrastructure.
• Experience with Windows Server and/or Linux.
• Strong analytical and troubleshooting skills.
• Understanding of information security, including malware, emerging threats, attacks, and vulnerability management.
• A team player who is hardworking and self‑motivated.
• Excellent attention to detail.
• Ability to remain calm under pressure and communicate clearly to all levels of management.

• Relevant industry recognised security qualification (e.g. CySA+, Security+).
• Experience with security or compliance standards such as PCI‑DSS or ISO
  27001.
• Understanding and experience working for a retail company.
• Experience with Regex, scripting.
• Experience working in a Security Operations Centre.
• Experience working in an Infrastructure or Network Operations Centre.
• Experience installing, configuring and maintaining security tools such as EDR, IDS/IPS, SIEM, SOAR.
• Digital forensics experience.

Next is a FTSE‑100 retail company employing over 35,000 people across the UK and Ireland, the UK’s second largest fashion retailer. We operate more than 500 stores and an extensive online presence.

• 25% off most Next brand products
• Company performance based bonus
• Sharesave scheme
• On‑site nursery, free parking, digital GP services
• Early VIP access to sale stock and staff shop discounts
• Financial wellbeing support and apprenticeship opportunities