The primary responsibility of the Security Operations Analyst is to assist in managing Security Operations, Security Incidents and Infrastructure Security for Legal & General. 

• Provide technical security expertise in response to security incidents occurring within L&G on a 24x7 basis. Work in conjunction with the SOC service provider to provide Level 3 security event monitoring across Legal & General (e.g. collating security events gathered across sources, triaging events and managing security events as required to help ensure these are managed in a timely and effective manner).
• Configure, design and implement use cases to ensure L&G has a mature level of detection and response
• Provide a Level 3 response (inputting technical and business expertise) for various security events and incidents such as intrusion, malware infections, network breaches and denial of service attacks to help ensure these are managed in a timely and effective manner.
• Manage SOC service provider and any third party specialists to support the investigation, documentation and reporting of information security incidents in a timely manner and lead the Root Cause Analysis activities.
• Provide technical expertise to the SOC service provider and all business areas to ensure an effective threat-led detection capability is maintained.  Drive continuous improvement of the service (e.g. via ongoing use case development) to ensure security operations addresses the evolving threat and business landscapes.
• Support the Infrastructure Security Manager in executing and managing key infrastructure security activities (e.g. infrastructure vulnerability assessment, network security and malware protection) and technology products (e.g. malware prevention, NAC, DLP), to help ensure a coordinated approach across all security areas.
• Assist in any required management information creation and collation such as dashboards for leadership and application owners to help ensure that risk events and changes in trends are easily detected and reported on.
• Ensure alignment to L&G’s Customer Experience and Treating Customers Fairly (TCF) policy.

Qualifications:

Education:

• Bachelor’s degree or equivalent experience in cyber security, computer science, IT engineering, or related field

Certification:

• Any certifications in infrastructure, networking or malware analysis would be beneficial.

Knowledge:

• Working knowledge of tools used in detection and response such as EDR, Network Monitoring, IDS/IPS, Firewalls and DLP.
• An understanding of threat intelligence and how it can be used within Security Operations to build mature detection and response.
• An awareness of new and emerging threats with an ability to build in detection capability around this knowledge.
• Basic understanding of crisis management planning methodologies
• Ability to work independently and manage incidents with the minimum of guidance
• Understanding of event management solutions, automation and orchestration platforms
• Strong analytical and problem-solving skills with ability to exercise mature judgement
• Organised with a proven ability to remain calm under pressure, prioritise workload, meet deadlines, and utilise time effectively
• Strong interpersonal and communication skills

Experience:

• Experience of working in a Security Operations Centre or Incident Response is essential.
• Experience of working with and detecting and responding to threats within Cloud environments.
• Experience of mentoring and guiding junior members of staff.
• Proven experience in building new use cases based on threat intelligence, emerging threats or TTP’s.

Whatever your role, we reward ability, performance and attitude with a package that looks after all the things that are important to you. Our employees have a wide range of benefits including a generous pension scheme, life assurance, 27 days' holiday,private medical insurance, performance related bonuses, a variety of share schemes, discounts at both a huge range of high street stores and our own great products, your hard work will be rewarded when you join us.