Operational Security Analyst

The Role

Are you passionate about cyber security and eager to work in a collaborative and inclusive environment, where every member's contribution is valued? Do you enjoy working closely with diverse technical teams to protect and secure digital assets? Then working in the Operational Security team at Trayport is likely to be a great place for you!

If you're interested in all-things cyber security and have a passion for technology, then we have a great opportunity to join

a close-knit team, focused on defending the organisation from cyber-attacks, breaches and security incidents. You will work alongside an experienced team of security professionals and help secure and monitor an array of exciting technologies across the business (both on-prem and cloud), in a role which offers great opportunities for career development.

Your primary areas of operation will be:

1. Event management
2. Incident response and management
3. Endpoint security
4. Network security
5. Vulnerability management

Responsibilities

As an Operational Security Analyst, you will:

1. Investigate security events arising from our SIEM, security tooling and vendors/partners
2. Actively contribute to improving the capabilities to detect, investigate and resolve anomalies and threats in our network, as well as developing and improving response plans and playbooks.
3. Maintain and configure endpoint and network security tools, ensuring an appropriate balance of user experience and level of protection that aligns with the organisation's risk appetite.
4. Improve hardening of systems in line with current best practices. Work with key stakeholders to ensure recommendations are implemented in a timely fashion.
5. Maintain awareness of emerging threats and vulnerabilities and make recommendations to mitigate the associated risks.
6. Assess security vulnerabilities of Trayport's infrastructure and systems and ensure they are raised.
7. Discuss challenges with technical users and prioritise requests for the security team's input or support
8. Work with the broader security team, as well as stakeholders from around the business, to maintain and improve our security posture or contribute to other ongoing initiatives.

Skills and Experience

Essential:

1. Ability to understand key concepts and communicate with team members and other stakeholders.
2. Passion for security and associated technology - keeps up to date with technical developments in the industry.
3. Eye for detail, conscientious, diligent, reliable, self-motivated and a natural problem-solver
4. Knowledge of some of the following technical skills and a general awareness of the rest:
   
   1. Cloud Security (Azure/AWS)
   2. Windows Security
   3. Linux Security
   4. Active Directory/LDAP
   5. Authentication Mechanisms (Kerberos, NTLM, etc)
   6. Basic programming/scripting (e.g. PowerShell, Bash)
   7. Vulnerability management and associated tools (Rapid7)
   8. SIEM and associated tools (Splunk)
   9. Endpoint security controls (EDR/Anti-virus)
   10. General Networking (OSI model, TCP/IP, DNS, ICMP, routing)
   11. Network security controls (Firewalls, packet capture devices, TLS inspection, IDS/IPS)
   12. Common application protocols (SSH, RDP, SMB etc)
   13. Cryptography/PKI
   14. MFA solutions (Okta, Vasco etc)

Desired:

One or more of the following:

1. Prior experience working in an information security discipline or systems admin/engineering role
2. Discipline specific qualification (SANS, CEH, OSCP, CRT, ISO27001 LA, CISMP)
3. Bachelor's degree in a related discipline (computer science/computer security)
4. Knowledge of the ISO/IEC 27000 Information Security standards and previous experience working within a compliant ISMS.
5. Knowledge of IT end-to-end problem management and root cause analysis.

Trayport is committed to creating and sustaining a collegial work environment in which all individuals are treated with dignity and respect and one which reflects the diversity of the community in which we operate. We provide accommodations for applicants and employees who require it.