senior security operations analyst

EQ is a leading international provider of shareholder, pension, remediation and credit technology. With over 5,000 employees, it supports 37 Million people in 120 countries. EQ’s purpose is to care for every customer and simplify every transaction, delivered with less of an impact on the environment.

EQ’s vision is to be the leading global share registrar, offering complementary services to its client base.

Role Summary

The Senior Security Operations Analyst will play a lead role, assisting the Head of Security Operations, in a team of up to 13 staff delivering these activities. They will report directly to the Head of Security Operations. They will contribute to all aspects of the Company’s operational security strategy and programme, as appropriate to demand, workload, skills and experience.

Core Duties/Responsibilities

• Conduct regular compliance reviews of actual practice in teams across the IT organisation against defined operational IT security processes.

• Ensure that operational security processes are adjusted as security needs or the Company’s business change.

• Identify potential for improvements in cost efficiency in the main operational security activities and provide feedback to the CISO and Head of Security Operations to instigate projects and initiatives that seek to achieve these improvements.

• Monitor quality of service and quality of security control targets and metrics with all non-security teams throughout the Company engaged in operational IT Security activities.

• Participate in requirements definition, acceptance and implementation of projects and initiatives that are developed by GIS for the infrastructure and tools that support the main operational IT Security activities.

• Identify and conduct IT Security Monitoring and Testing activities to the appropriate quality of service and security. In particular this involves working with the Company’s external security monitoring partner (currently Dell Secureworks) to ensure complete, effective and robust levels of protection through monitoring and response.

• Design & oversee the implementation of sound security management practices and controls for day-to-day access security administration and monitoring by other business and IT teams.

• Monitor for, respond to, mitigate impact of, take remedial action during, and define lessons learnt from, information security incidents, gathering input from other information and IT security teams.

• Own and manage vulnerability identification across the EQ estate (currently Qualys).

• Contribute as appropriate to IT operations and infrastructure development initiatives within Group IT from the IT security perspective.

Skills, Knowledge & Experience

The Senior Security Operations Analyst will have held previous positions as an Operational Security team leader, senior SOC analyst, Threat Analyst or Hunter. They should have accumulated extensive relevant experience in a role in industry or an IT or security services provider.

Extensive experience of the following is essential:

• Managed security monitoring services and other relevant security technology vendors and service provider.

• Experience in leading incident response activity either as an individual or as an incident response coordinator.

• Demonstrable practical experience with threat hunting techniques and processes.

• A strong understanding of the Cyber Kill Chain and Mitre Framework and how these can be used to determine threat actors and identify attack mitigations.

• Technical analysis of cyber security threats and threat intelligence.

• Experience of delivering security tooling for cloud based environments - with significant focus on natively available controls such as Sentinel, Defender, AIP etc…

• Familiarity with relevant industry cyber security standards/frameworks such as NIST CSF, ISO 27001 and CIS Critical Security Controls.

• Experience with Vulnerability Management processes and tools (Qualys)

• Development of processes and play books to support Security Operations services.

In addition the following key experience is preferred:

• Experience of delivering against similar accountabilities with global impact in an organisation of similar scale and complexity as EQ.

• Ability and motivation to work with parties inside and outside the security community through a cooperative, interactive, trustful and respectful approach.

• A "doer" with capacity to drive relevant activities personally.

• Broad general knowledge of good information security practice.

EQ Benefits

Being a permanent member of the team at EQ you will be rewarded by our company benefits, these are just a few of what is on offer:

• 28 days + 8 bank holidays. Option to buy more days through salary sacrifice.

• A cash payment annually towards flexible benefits, e.g. dental insurance, gym membership, the above extra holiday etc.

• 4 x Life Assurance.

• Company sick pay (2 months full pay, 2 months half, following probation).

• Matched pension scheme (e.g. you pay in 6%, EQ pay in 6%), up to 10% each side (20% in total).

• Discounts with major retailers (EQ Wins).

• Maternity or adoption leave of 3 months full pay, with return to work bonus / 2 weeks paid paternity leave.

We are committed to equality of opportunity for all staff and applications from individuals are encouraged regardless of age, disability, sex, gender reassignment, sexual orientation, pregnancy and maternity, race, religion or belief and marriage and civil partnerships.

Please note any offer of employment is subject to satisfactory pre-employment screening checks. These consist of 5 year activity & GAP verification, DBS or Access NI, Credit, Sanctions & CIFAS checks.