Technical Security Analyst

Bristol, Somerset
Zellis

To apply an understanding of cyber security to protect the organisation, systems, information, personal data and people from attacks and unauthorised access. Particular focus will be applied to Security Assessment, analysis, and giving advice on risk mitigations to a broad range of colleagues, internally and externally, including suppliers and customers. The successful candidate will be a hands on technical security resource, configuring, monitoring and assessing security tooling and alerts. Operational support will be provided to technical teams responsible for configuring and operating secure systems to prevent security breaches and monitoring systems to detect and respond to security breaches. The Technical Security Analyst will work closely with Managed Security Services to deliver the planned programme of work.

In this role your key responsibilities will be to:

• Support Security partners delivering our Managed Security Operations Centre Services.
• Provide technical input to Security engagements with internal and external customers.
• Assist in ongoing investigations, with forensic and response activities, information Security Incidents, events, and issues in accordance with relevant procedures and standards.
• Identify cyber threats and vulnerabilities, ensuring that findings are managed appropriately and remediated according to agree timescales.
• Assist in the creation, testing, and implementation of response and recovery plans in support of incident management threat modelling. Research and investigate attack techniques and recommend ways to defend against them.
• Assist in Security Incident investigation with forensic and response activities.
• Support the Security function in all aspects of Security operations and management reporting.
• Perform technical assessments of new and existing processing systems, identifying potential weaknesses and recommending suitable protection measures.
• Provide operational support to technical teams responsible for configuring and operating secure systems and ensure monitoring of systems is established to detect and respond to security breaches.
• Participate in red teaming and simulation exercises (technical & non-technical) to better understand our cyber-attack and defence posture, rehearse responses, and evaluate readiness.
• Assisting with the creation and delivery of security awareness collateral, promoting an effective security culture.
• Provide subject matter expertise as required for key projects, functions, and services as required.
• Practice continuous self-learning to keep up to date with industry trends and developments to enhance relevant skills and take responsibility for own professional development.

Skills & experience

Essential Skills/behaviours:

• Must have a broad understanding of the services that the organisation provides to its customer base and be able to map this to Cyber Security policies and standards.
• Develop a very good working knowledge of the procedures and tools used within the security practice and wider security ecosystem.
• Develop an in-depth knowledge of the platforms, systems, services, and products that the organisation uses and the relationships between them.
• A good general understanding of information and cyber security theory and the way that technical tooling can reduce the threats and risks within an organisation.

Critical competencies:

• Degree holder in relevant information security discipline, or professional qualification; or the equivalent combination of professional qualification, training, and work experience.
• Minimum 1-year practical cyber-security experience.
• Excellent Communicator with the ability to interface at the highest level and exhibit good oral, written, and presentation skills.
• Experience of working within key Cyber Security principles and standards (ISO 27001, NIST, Cyber Essentials, MITRE)
• Experience working in a customer-facing role desirable.
• You should have experience in managing team driven workload.
• Demonstrable experience driving continuous improvement initiatives.
• Provide subject matter expertise as required for key projects, functions, and services as required.Practice continuous self-learning to keep up to date with industry trends and developments to enhance relevant skills and take responsibility for own professional development.

Benefits & culture

At Zellis we create market-leading HR & Payroll products and services, to power exceptional employee experiences so that you and your people do better. Our multi-award-winning products pay over five million employees a year, with almost half (42%) of the FTSE 100, 50% of the top retailers and 30% of the top universities in the UK & Ireland as customers, making us the largest provider of Payroll and HR software and managed services.

Our vision is to be the clear leader in pay, reward, analytics, and people experiences. We’re passionate about creating an environment where people want to join, belong to, and be part of a progressive organisation. Our values, which were defined with input from all of our 2,000 colleagues, we live and breathe every day:

• Unstoppable together.
• Always learning.
• Make it count.
• Think scale.

Our people are critical to our ongoing success; we’re proud of our inclusive culture that gives you the platform to grow, challenge the status quo and play a crucial role in further enhancing our market position as the leading provider of HR & Payroll software and services. With Zellis you’ll have the chance to stretch and challenge yourself in an environment that’s varied, flexible and hugely supportive.

We also love to reward and recognise our brilliant colleagues. As part of your benefits package, you’ll receive:

• A competitive base salary.
• 25 days annual leave, plus your birthday off and the opportunity to buy additional holiday.
• Private medical insurance.
• Life assurance 4x salary.
• Enhanced pension scheme with company contributions up to 8.5%.
• A huge range of additional flexible benefits across financial & personal wellbeing, lifestyle & leisure.