Information Security Analyst

Global Innovation and Technology Centre, Back Lane, Melbourn, Hertfordshire, SG8 6DP
, United Kingdom.

We believe in the power of ingenuity to build a positive human future. As strategies, technologies, and innovation collide, we create opportunity from complexity. Our teams of interdisciplinary experts combine innovative thinking and breakthrough technologies to progress further, faster. Our clients adapt and transform, and together we achieve enduring results.

We are over 4,000 strategists, innovators, designers, consultants, digital experts, scientists, engineers, and technologists. Our deep expertise includes consumer and manufacturing, defence and security, energy and utilities, financial services, government and public services, health and life sciences, and transport. Our teams operate globally from offices across the UK, Ireland, US, Nordics, and the Netherlands.

To be part of the PA Group Systems Security Operations Centre team, providing in-depth analysis of internal security intelligence and external security view.

• Review daily security system logs and alerts – Firewall/Intrusion Detection System/Data Leak Prevention/Endpoint Detection and Response – and identify security issues.
• Provide insight into the countermeasures PA should adopt and generate key performance indicator metrics for the security board.
• Works as a technical resource in security related projects.
• Perform forensic analysis as required.
• Working with operational teams, ensure vulnerabilities are resolved.
• Review security bulletins for threats and liaise with key security firms to review threat reports.
• Provide out of hours On‑Call availability and response to high severity incidents (usually 1 week per month – paid).

50%

Accountability: Review daily security system logs, maintain logging system policies, and resolve incidents.

Measure of Success: Security issues are dealt with quickly and PA’s threats are managed effectively.

25%

Accountability: Input into PA IT security controls/countermeasures and generate key performance indicators.

Measure of Success: Controls are more aligned with PA’s risk and help consultants be more effective.

10%

Accountability: Work as a technical resource within identified security projects.

Measure of Success: Timely recommendation of security technology that works for PA.

10%

Accountability: Review bulletins from key suppliers and take appropriate action. Review leading security company threat reports.

Measure of Success: PA is informed of the latest threats; operational teams are informed of any actions needed, with follow-up to ensure coverage; key stakeholders are aware of relevant security threats and controls are made appropriate.

5%

Accountability: Manage external penetration testing results and, working with operational teams, ensure vulnerabilities are resolved.

Measure of Success:

• Operational teams are informed quickly of vulnerabilities and their resolution priority.
• Senior managers are informed of the status.

• Work closely with the SOC Manager and Director of Cyber Security.
• Work with GS operational staff who require assistance with technical security issues.
• Interface with the rest of Group Systems on new projects/support functions undertaken.
• Liaise with the Head of Security.
• Liaise with consultants and other corporate functions.
• Provide clear messages around security to different levels of stakeholders, from technical staff through to senior managers.
• Apply investigative and intelligence analysis to security information and alerts from different sources, and provide convincing answers to IT security‑related issues.
• Use experience to provide 4th line support with the ability to increase knowledge across GS and PA.

Hybrid working – our approach is to be in the office or on client site a minimum of 2 days per week. However, the actual time you spend and where you spend it will vary by role or assignment, including up to 5 days per week on a client site.

• 2+ years of proven technical experience across multi‑disciplinary IT fields or equivalent relevant education.
• Good…