Information Security Analyst

Overview of role

Office:
London (50% hybrid required)

Reporting to the Information Security Operations Manager, the Information Security Analyst undertakes the day‑to‑day operations of the existing security solutions, and uses these tools to identify, investigate and resolve security events detected by those systems. Additional responsibilities involve supporting the implementation of new security solutions, participation in the creation / maintenance of policies, standards, baselines, guidelines and procedures. In addition, you will organise and conduct vulnerability audits and assessments.

The Information Security Analyst will be fully aware of Walkers’ security objectives, have a thorough understanding of the threat landscape, and will work with a global team to mitigate threats and maintain best‑in‑class security.

• Assist with the management and operation of Walkers' security controls.
• Help in streamlining and automating of security controls in order to improve overall security posture of the organisation.
• Lead on security incidents, identification, and remediation.
• Support operational transition for deployment, integration and configuration of new security solutions and enhancements to existing security solutions.
• Monitor all in‑place security solutions for efficient and appropriate operations.
• Conduct security‑focused reviews and analysis of log files and reports of devices, systems and network traffic (i.e., workstations, servers, network devices). Interpret results and resolve issues identified.
• Investigate security alerts and provide incident response when required, working with global team to mitigate and resolve incidents.
• Support and contribute to red/blue team testing and cyber‑threat‑based tabletop exercises.
• Develop, maintain and implement system hardening procedures.
• Maintain up‑to‑date detailed knowledge of the IT Security industry, including the development of new attacks and threat vectors.
• Provide a point of escalation for the Service Desk, IT and Business support teams with respect to security‑related events.

• Relevant experience operating in a hands‑on IT Security capacity.
• Strong IT Security analytic skills with cyber‑threat awareness and experience.
• Good working knowledge of adversary tactics and techniques (e.g., MITRE ATT&CK).
• Proven experience working with Security Operations (SIEM) and responding to security alerts, developing and refining use cases.
• Excellent understanding of implementing, managing, interrogating and reporting of security controls.
• Strong knowledge of vulnerability management and scanning tools.
• Good networking knowledge of firewalls, routing & switching, OSI model and associated protocols (TCP/IP).
• Good operating system knowledge (Windows, Linux and Unix).
• Scripting and programming experience is beneficial.
• Knowledge and experience of M365 and Azure Defender cloud security.
• Proven knowledge of technologies such as EDR, NDR, IDS and IPS tools, WAF, web proxies, email security, deception, SIEM and SOAR solutions.
• Knowledge of implementation and maintenance of PKI and HSM infrastructure is beneficial.
• Desirable experience designing and implementing security solutions/controls for on‑premises and cloud environments.
• Knowledge of security best practices and frameworks ISO
  27001, Cyber Essentials+, CIS CSC
  20, NIST, ISF, OWASP, etc.
• Security‑focused industry certifications or a third‑level degree such as CISSP, CISM, CompTIA, CCSP, CEH, SANS (GNFA / GCIH / GMON / GCCC / GCSA), SC‑200, AZ‑500, etc.

Walkers Global is an equal‑opportunity employer. Equality and diversity are key to our global identity and an integral part of our goal to continue being an employer of choice. We are committed to a work environment that supports all individuals irrespective of gender, ethnicity, nationality, race, religion, marital status, age, disability, pregnancy, sexual orientation, gender identity or any other applicable legally protected characteristics.

We make every effort to ensure that employment opportunities are open and accessible to all purely on the basis of personal ability.