Information Security Analyst

INFORMATION SECURITY ANALYST - Leeds or Birmingham

Role Overview

We have a fantastic opportunity for a Junior Information Security Analyst to join our Technology Services department.

The primary role of the Information Security Analyst will be to support our organisation and its supporting security functions by applying an understanding of cyber threats, hazards, risks, controls, measures and mitigations to protect organisations systems and people.

You will be focused on the technical side, working on areas such as security design & architecture, security testing, investigations & response.

This is a hybrid role and will involve a mixture of office and home based work.

Candidate Overview

We are looking for someone with a passion for all aspects of security, both technical and non technical, and a willingness to commit to the further study required to keep pace with the application of the latest threat concepts and techniques in this ever evolving landscape. You will be a strong communicator and able to escalate and delegate effectively, and you will have a flexible approach to incorporate changing priorities.

The ideal candidate will also be able to provide evidence to support their ability in as many of the below competencies as possible:

Core competencies

• An understanding of, and the ability to discover, threats, hazards, risks and intelligence e.g. vulnerability discovery, analysis of open source intelligence, knowledge of common attack methods (OWASP Top10 etc.)
• An ability to detect, identify and defend against common attack methods
• The ability to undertake or support security risk assessments for a system or a set of processes without direct supervision and propose basic remediation advice in the context of the business
• The ability to identify and follow organisational policies and standards for information and cyber security.
• Operate according to service level agreements or defined performance targets including incorporating future trends
• Understanding of the importance of cyber security to business and society
• Basic theory – concepts such as security, identity, confidentiality, integrity, availability, threat, vulnerability, risk and hazard. Also how these relate to each other and lead to risk and harm
• Ability to build a security case – deriving security objectives with reasoned justification in a representative business scenario
• Cyber security concepts applied to ICT infrastructure – You should have the ability to describe the fundamental building blocks and typical architectures and identify some common vulnerabilities in networks and systems.
• Understanding of relevant laws, ethical standards and business best practice

Technical Security Competencies

• Understand the fundamentals of cryptography and how it can be used to meet defined security objectives. Must also appreciate the legal issues.
• Understand the basics of networks: data, protocols and how they relate to each other; the main routing protocols; the main factors affecting network performance including typical failure modes in protocols and approaches to error control.
• In-depth knowledge of Windows operating systems, ideally also Linux-based systems.
• The ability to describe what good practice in design is; describe common security architectures; be aware of reputable security architectures that incorporates hardware and software components, and sources of architecture patterns and guidance. Understand how to build a security case including context, threats, justifying the selected mitigations and security controls with reasoning and recognising the dynamic and adaptable nature of threats.
• Understand how cyber security technology components are typically deployed in networks and systems to provide security functionality including: hardware and software.

We will also be looking for the following qualifications/experience:

Required:

• Educated to A-level standard with at least 2 STEM subjects (C or above) or relevant Level 3+ Apprenticeship, plus English and Maths at GCSE grades 4 - 9 / C - A*.
• 1-2 years experience in a SOC, Incident Response, Vulnerability Management, Penetration Testing or Digital Forensics function

Desirable:

• Cyber Security-related degree
• Other relevant industry-specific qualifications e.g. Security+, CSA+, GSEC, GCIH, CISMP etc.
• Coding or scripting experience (python, C++, PowerShell)

What can we offer you?

• Agile working i.e. the opportunity to work from home, subject to diary commitments;
• 25 days annual leave entitlement and the opportunity to purchase or roll over 5 days;
• Contributory pension of up to 5%;
• Private healthcare policy for the successful candidate and immediate family;
• Death in service cover (4 x base salary);
• Eligibility to apply for an interest free season ticket loan, an interest free gym membership loan and/or an interest free rental deposit loan;
• Cycle to work scheme.

At Pinsent Masons we value diversity and inclusion. We are committed to creating a better workplace where all our talent can succeed and feel like they belong. We want to attract, retain and develop people at all levels and encourage applications from all suitably qualified candidates whatever your ethnicity, religion, age, physical or mental disability/ long term condition, sexual orientation, gender identity or expression or any other characteristics protected by local law in the jurisdictions in which we operate.

For any queries or for a copy of the full job description, please contact our in-house recruiter, Sim Dhonsi. Please note we only accept CVs that are logged on the Recruitment portal.

#LI-BOSD

#INDB