Information Security Analyst Product & Technology · Remote, UK

About Us

The Company:
Dotdigital is a thriving global community of passionate, dedicated professionals, committed to the collective success of the organization and its clients. Our core principles of innovation, teamwork, and client‑focused solutions drive us to approach challenges with a growth mindset and take ownership of our work. At Dotdigital, collaboration and curiosity pave the way for meaningful connections and learning opportunities with diverse peers.

Our work environment encourages knowledge sharing, fosters exploration, and cherishes creative ideas that guide us towards our shared vision of empowering businesses through marketing automation and engagement.

Dotdigital is an all‑in‑one customer experience and data platform (CXDP) that empowers marketing teams to exceed customer expectations with highly personalized cross‑channel journeys. With Dotdigital, marketers can seamlessly unify, enrich, and segment customer data. Breaking down data siloes, Dotdigital streamlines decision‑making and paves the way for marketing creativity that delivers customer engagement h powerful AI capabilities, Dotdigital makes it easy to automate deeply personalized experiences across web, email, SMS, Whats App, chat, push, social, ads, and more.

Dotdigital is seeking an experienced and motivated Security Analyst to join our Information Security & Privacy team.

This is a hands‑on role focused on helping protect Dotdigital's people, products, platforms, and data. Working across the business, you will support the development, implementation and operation of security controls designed to prevent, detect, and respond to security threats while helping teams deliver secure and reliable services to our customers.

Reporting to the Information Security & Privacy Director, you will work closely with Engineering, Product, Privacy, and Customer‑facing teams. You will play an important role in maintaining our security posture across cloud environments, business systems, and customer‑facing applications.

• Monitor and investigate security alerts and events across security tooling, cloud environments, business systems, and applications.
• Support incident response activities including detection, analysis, containment, eradication, recovery, and lessons learned.
• Develop and improve security monitoring, alerting, playbooks, and operational procedures.
• Assist with threat hunting and proactive identification of security risks and suspicious activity.
• Maintain awareness of emerging cyber threats, vulnerabilities, and attack techniques relevant to SaaS businesses.

• Own day‑to‑day vulnerability management activities across infrastructure, cloud platforms, applications, and endpoints.
• Work with technology teams to prioritise and coordinate remediation activities.
• Track vulnerabilities through to resolution and provide reporting on remediation performance.
• Support penetration testing activities and coordinate remediation of findings.

• Support the security of cloud environments and SaaS platforms through implementation and monitoring of security controls.
• Assist with identity and access management initiatives, including privileged access management, role‑based access control and identity governance.
• Review cloud security recommendations and assist with remediation activities.
• Support security assessments of new technologies, platforms and services.

• Partner with engineering teams to support secure software development practices.
• Assist with the identification, triage and remediation of application security vulnerabilities.
• Support security testing activities including SAST, DAST, dependency scanning and secrets detection.
• Contribute to threat modelling and secure design discussions where appropriate.

• Support the continued operation and improvement of the Information Security Management System (ISMS).
• Assist with security audits, compliance activities, evidence collection and control reviews.
• Contribute to the development and maintenance of security policies, standards, procedures and guidance.
• Support…