Infrastructure Security

Microsoft stack – AAD / Entra, Intune.Microsoft Defender; Email, EndpointWindows EndpointsService NowExperience of Proxy / Internet Protection technologies, Zscaler.Or indeed a network security analyst who might have interest in cross skilling into other security areas.Job Description SummaryThe Security Operations Analyst is a hands-on role responsible for configuring, maturing, and undertaking operational activities for the AA’s Security services and IT platforms enabling the AA to achieve its business objectives securely. Operations activities will cover Cloud, hybrid, and on-prem infrastructure and will include, but not be limited to, taking ownership of the AA security portfolio of tools through their life cycle thus ensuring the protect, detect and respond capability is appropriate to address the risks to the business.Responsibilities

Undertake operational activities, maintain, and improve the AA’s Security Services to protect, detect and respond to security events across multiple platforms: Microsoft Security Technologies (Cloud / on-prem) AWS Cloud Technologies Micro-segmentation IDS / IPS Firewalls Cloud Internet Protection CASB EDR / Anti-Virus Other technologies where appropriateSupport the SecOps Engineers with the implementation of new security applications and infrastructure.Create and maintain operational documentation.Liaise with rd party vendors where required on support issues, feature requests and licensing.Support, and convey risk, to all IT functions including key Application Teams, Platforms, End-User-Computing, and Networks to ensure well engineered security by default.Market our Security Operations to the wider AA business, embedding the Security Culture in the AA.Take a Threat-led approach to Security Operations detect and response capabilities, contributing to Threat Assessments / Modelling.Drive Automation and Integration across the estate to form a modern and efficient Security Operations capability.Assess the posture of security of platforms and the configuration of security tooling against best-practice and implement changes against a measurable roadmap.Leverage understanding of Operating Systems, infrastructure, and good business practices to enable identifying security incidents.As a part of the wider Security Operations team, you may be requested to work on wider areas outside of this core remit. This is likely to offer development potential and varied / interesting work:

Assist with proactive threat analysis, vulnerability identification and remediation, and network/host vulnerability scanning.Analyse potential cyber threats from a variety of intakes taking appropriate response actions to include threat containment and/or escalationLeverage Network security tools and capabilities to support Cyber Threat Monitoring activitiesOptimise tuning and filtering for AA SecOps toolsProvide Incident Response (IR) support and leadership when analysis confirms actionable high severity incidents, working with the wider AA IT Operations teams.Participate in major incident reviews, post implementation reviews and problem reviews to assist with the identification, review and analysis of security incidents or threats to service.Integrate and share information with other security analysts and other teams.Investigate, document, and report on information security issues and emerging trends.Maintain current situational awareness of trends in cybersecurity threats and specific AA organizational threats.Create and maintain operational reports for Security KRI’s / KPI’s & monthly metrics (taking inputs from existing rd party managed security services)Document results of cyber threat analysis effectively and prepare comprehensive handoff and/or escalation

AA code

Put customers firstOwn it and deliverSafeguard what mattersWork as a teamSpeak up

Conduct yourself, and carry out work, to ensure compliance with the Company’s Health, Safety and Environmental Policies.Conduct RulesUnder the Senior Managers and Certification Regime (SM&CR), the jobholder must abide by the following conduct rules:First Tier – Individual Conduct RulesRule . You must act with integrityRule . You must act with due care, skill, and diligenceRule . You must be open and cooperative with the FCA, the PRA and other regulatorsRule . You must pay due regard to the interests of customers and treat them fairly.Rule . You must observe proper standards of market conductThe IndividualYou will have a technologist mindset, with strong communication skills and business acumen, and a good track record of successfully delivering / supporting business systems and/or infrastructure throughout the entire product life cycle.

A minimum of years’ experience working in a hands-on IT Security role, or hands-on st and nd line IT support within either a Service Desk or Infrastructure functionHands-on capability with technical solutions (covering core infrastructure components end user compute, servers/platforms, networking devices, Active Directory, Azure/AWS or a mixture of these)Understanding of Network Segmentation / Enterprise EDR / Anti-Virus, IDS, Firewalls and Identifying Threats and RisksKnowledge of common Applications.Ability to multi-task, prioritise, and manage time effectively.Ability to work under-pressure.Strong attention to detail.Excellent interpersonal skills & customer service skills.Good verbal and written communication skills.Proven experience in working with rd party vendors.Knowledge of Threat Monitoring Procedures.Knowledge of industry regulationsDemonstrated knowledge and understanding of cyber risks and threats related to cyber attackers.Maintains a good understanding of cyber-security in general.Understanding of information security constraints and best practice.Able to contribute to design conversations on toolings in complex environments.Proven experience working within an IT operational environment.Proven experience contributing to continuous service improvements for the business.

Education and Qualifications:Industry-level operational IT certifications in good standing (, Microsoft / Cisco / Comptia / BCS) or IT focussed academic qualifications are desirable

Personal Characteristics:Self-starter looking to forge a career in a challenging but rewarding industry with a thirst for knowledge and a technology driven mindset.Team player, with drive and determination to make a difference in a challenging environment.Ability to prioritise tasks whilst delivering accurate detail and analyse business activities through a cyber-security lense.The individual must be comfortable with objectively challenging their peers, superiors and reports to ensure adherence to agreed quality standards (this equally applies to vendors).Whilst robustness and integrity are important, the individual must also be pragmatic and able to adapt to the needs of the business.

The duties listed are not exhaustive. Additional hours of work may be required, as determined by the needs of the business. Managers and staff may be required to undertake additional duties, responsibilities and projects as appropriate.We are an equal opportunities employer and welcome applications from all suitably qualified persons regardless of their race, sex, disability, religion/belief, sexual orientation or age.

---