Security Operations Analyst

As our Security Operations Analyst you will be responsible for the day-to-day operation of the in-place security solutions designed to protect our networks, computers, programs and data from compromise, damage and unauthorised access. As well as for the identification, investigation and resolution of security exceptions detected by those solutions.

This is a hybrid role based in our Cambridge office, so you will ideally be comfortable coming into the office at least twice a week. If you’re interested in the role but require more flexibility, please speak to us! 

• Monitor and respond to:
  • Security alerts and provide incident response
  • Monitor identity and access management, including monitoring for abuse of permissions by authorised system users
  • Intrusions and unusual, unauthorised or illegal activity
  • ‘Phishing’ attempts and activity
• Use analytic tools to determine emerging threat patterns and vulnerabilities
• Generate reports for both technical and non-technical staff and stakeholders
• Keep up to date with the latest security and technology developments
• Research/evaluate emerging security threats and ways to mitigate them
• Maintain an information security risk register and assist with internal and external audits relating to information security
• Conduct security risk assessments, business impact analysis and recommend appropriate control improvements
• Ensure all processes and controls that fall within your area of responsibility are operating effectively and are correctly evidenced as working
• Assist with the creation, maintenance and delivery of cyber security awareness training for colleagues
• Contribute to development of information security policy, standards and guidelines

Must haves:

• Experience in analysing and identifying security weaknesses across a heterogeneous IT environment
• Experience using analytic systems based on tools such as Elastic stack, Splunk, GrayLog or LogRythm
• Operational experience of some of the following technology:
  • SIEM – Security information and event management
  • IAM – Identity and access management
  • DLP – Data loss prevention
  • VA – Vulnerability assessment and mitigation
• High level understanding of a broad technology areas, including SaaS, IaaS, networks, firewalls, storage and virtualisation
• Understanding of common security methodologies

Great to haves

• Experience and/or understanding of AWS security
• Experience of Windows and Linux systems administration
• Knowledge of OWASP (Open Web Application Security Project) Top Ten Risk Factors
• Good awareness of ITIL standards and best practice within an operational environment
• Experience working in an ISO27001/2, PC-DSS or SOC 2 environment

Here at Featurespace we are committed to being a place of equality, inclusion and respect to provide a safe environment for you to bring your authentic self to work. We know that we gain as much strength from our differences as we do our similarities. We value diversity and are dedicated to listening and learning from each other to build and maintain a positive and productive culture. We appreciate this will be an ever-evolving focus for the business to ensure everyone feels supported and has a sense of belonging.