Cyber Security Analyst

Having started in 2006 with just three team members, we've evolved into a multi-brand, ecommerce giant with offices worldwide and a passionate team of over 4,000. In the past year alone, we've achieved remarkable milestones including automating our Sheffield distribution centre and initiating our tech re-platforming.

In Tech, we're proud to support every function. We're a digital-first company that is totally cloud native. We embrace change and future-proof the business, delivering critical customer facing and internal stakeholder facing systems. Everything from colleague tech to frontend websites and apps, buying and merchandising tooling, and all that's in-between, we take care of it. Our ideas support and drive the Group's agenda.

Your Team

At Boohoo, our team is committed to safeguarding the integrity, confidentiality, and availability of our systems and data. We take pride in implementing robust security measures to protect against cyber threats, ensuring secure customer transactions and maintaining trust in our brand. With a diverse and pragmatic approach to problem-solving, we align with Boohoo's family and values to achieve success.

Over the last 12 months, our team has made significant progress in reducing email attacks and preventing data breaches. By implementing an AI-based approach to email security and protection, we have achieved outstanding results. We have also centralised security solutions across our 13 brands, which has improved our organisation's security posture.

As we move forward, our team has a clear roadmap for the future, and we are excited to continue making a difference. We welcome anyone who shares our passion for information security and values to join us on this inspiring journey.

Your Role

As a Cyber Security Analyst, your goal is to minimise cyber-attacks and their impact on Boohoo. You will be evaluated based on metrics such as reduced attacks, shorter response times, and compliance. Your efforts lead to a secure Tech environment with minimal disruptions and a strong defence against cyber threats. This ensures the protection of Boohoo's data, assets, and reputation, which ultimately contributes to the success of the company.

Your Tasks and Responsibilities

• Respond promptly to security incidents, conduct thorough investigations, and implement corrective measures.
• Responsible for monitoring our technology stack, VMDR, XDR, CSPM, MSFT Security.
• Manage security tools and software, ensuring they are up to date and effectively protecting the organisation's assets.
• Conduct regular system and network security assessments to identify vulnerabilities and mitigate them.
• Penetration testing analysis and remediation activities.
• Monitor security access and access control to prevent unauthorised access, data breaches, and cyber-attacks.
• Create technical documentation to assist colleagues in root cause analysis.
• Create and improve incident playbooks and runbooks.
• Stay up to date with the threat landscape.

Requirements

• CompTIA SEC +, CySA, Network+, ISC CC.
• Information Security, Cyber Security or Network Security.
• Experience or demonstrable knowledge in log analysis and PCAP analysis.
• A solid understanding in the approach threat actors take to attacking a network, phishing, port scanning, web application attacks, DDoS, lateral movement.
• Demonstrable knowledge in network fundamentals, for example, OSI Stack, TCP/IP, DNS, HTTP(S), SMTP.

Benefits

• 25 days holiday plus bank holidays
• Discretionary bonus scheme
• Company share scheme
• Life Assurance
• Company Pension Scheme
• Flexible working hours
• Free onsite Gym
• Employee assistance programme including 24-hour confidential helpline
• Our Reward Platform allows you to tailor your benefits to suit your needs - such as Private Healthcare, Dental and Healthcare Cash Plans, a Cycle2work Scheme and plenty of fun anytime benefits such as coffee club or virgin experience days.
• 40% discount across 8 brands, 20% discount on Debenhams
• Discount & Cashback portal
• Season Ticket Loans
• Learning and development support and opportunities both internally and externally
• Our social calendar? Next level!