Senior Security Analyst

Company Description

Telefónica Tech is a leading provider of innovative tech services for the B2B market with a worldwide presence and strategic hubs in Spain, Brazil, UK and Germany. The company helps leading brands and organisations across the UK and Ireland unlock the power of integrated technology for all businesses, bringing together in one place a unique combination of, the best people, with the best tech and the best platforms in a simplified manner, to make a real difference to every business, every day.

We have an end-to-end portfolio of market leading services and develops integrated technology solutions to accelerate tech adoption through its two core divisions of Tech Cyber security & Cloud and Tech Intelligence of Things. The company has a diverse, highly trained and globally located talent pool of over 2000 employees and serves more than 5.5m customers every day with a service reach in 175 countries. Its dynamic partner ecosystem includes over 300 cutting edge businesses, as well as strategic agreements with all market leaders. 

Job Description

This is a full time role for an Information Security Analyst to join a mature managed services Cyber team who manage the security posture of critical infrastructure and services under an ISO27001 and Cyber Essentials + certified managed service environment. 

You will work on developing, implementing, and maintaining security products and processes across the managed service customer base ensuring these critical infrastructures are security managed and reported upon.  

This is a technical, hands-on role giving the successful candidate the opportunity to work on enterprise managed services and technical solutions including SaaS AV, SIEM, Network Flow, Penetration and PAM services. 

The successful candidate will be responsible for managing technical security services as part of a team, they will respond to incidents and requests, establish appropriate standards and controls, manage, patch, upgrade security technologies, and direct the establishment and implementation of policies and procedures. 

Skills & Experience: 

• Experience of working in a managed service environment (ITIL process driven); 
• Experience of managing Enterprise AV solutions (>3000 endpoints); 
• SIEM (QRADAR); 
• Vulnerability Management; 
• Network Flow Management and Reporting; 
• Report collation; 
• Good awareness of computing technologies and security concepts; 
• Knowledge of cyber security controls and best practice; 
• Good understanding of risk management principles and management fundamentals; 
• Ability to prioritise, be proactive and manage own workload; 
• Have excellent troubleshooting and problem resolution skills; 
• Maintain an awareness of vulnerability management and Risk Assessments; 
• Understand up-to-date security threats and common exploits; 
• Good communication skills, with the ability to convey security issues to audiences of non-technical people; 
• Have an open attitude to sharing knowledge and information; 
• Excellent analytical and problem-solving skills; 
• Desire to learn new technologies; 
• A motivated attitude to learn and challenge comfort zone; 
• To keep up to date with the latest security and technology developments; 
• Research/evaluate emerging cyber security threats and ways to manage them; 
• Generate reports for both technical and non-technical staff and stakeholder; 
• Proficient in presenting to local team members and wider senior management team 

Desirable 

• Cyber security certification (e.g. CISSP, Security+, GIAC, CISM, CRISC etc); 
• Scripting Experience. 
• Experience with Cyber Security Frameworks (NIST, COBIT, ISO, Cyber Essentials etc); 
• Experience with audit programs either external or internal.