Senior Information Security Analyst, UK

Realty Income (NYSE: O), an S&P 500 company, is a real estate partner to the world's leading companies. Founded in 1969, we invest in diversified commercial real estate and have a portfolio of over 15,450 properties in all 50 U.S. states and in seven countries in Europe.

Be a part of this growth story for a world leading Real Estate Investment Trust! As a trailblazer for the Info Sec team in Europe, this opportunity will empower your career, allowing you to take on additional responsibility and challenges, whilst you broaden your experience and skillsets.

Position Overview:

The Senior Information Security Analyst is responsible for enhancing our security posture, developing security processes and procedures, and responding to security incidents. This role will work with other teams across the organization to ensure that vulnerabilities are discovered and remediated in a timely manner to ensure the security of IT and development systems.

Key Responsibilities:

Security Operations and Monitoring

1. Monitor security alerts, investigate incidents, and respond to threats in a timely manner.
2. Collaborate with the Security Operations Center to respond to critical incidents and enhance the tools for better detection and alerting.
3. Complete assigned ServiceNow incidents and tasks within the defined SLAs.
4. Implement, manage, and optimize new and existing security tools, including but not limited to Microsoft Defender, Zscaler, and Okta.
5. Work with IT and development team members to ensure essential security and operational logging is being collected and analyzed and relevant security alerts are being generated.
6. Automate processes to reduce manual task delivery and enhance process delivery.
7. Collaborate with IT and development teams to detect and remediate vulnerabilities across the enterprise in alignment with defined SLAs.
8. Understand current and emerging security threats and assist in the design of security tools to mitigate threats across the enterprise.
9. Conduct regular threat hunt activities and report findings to leadership.

Security Governance and Compliance

1. Ensure all work follows relevant security standards and regulations, including SOX, NIST, GDPR, CPRA, and other industry-specific requirements.
2. Participate in annual security assessments and audit activities.
3. Develop and implement Standard Operating Procedures and other documentation as it relates to Information Security processes and best practices.
4. Participate in the Security Awareness program to promote a culture of security throughout the organization.

REQUIRED QUALIFICATIONS:

Knowledge, Skills, and Abilities:

1. Suitable experience in an Information Security role.
2. Some relevant experience in a technical IT role (System Administration/Network Administration/DevOps).
3. Knowledge of security frameworks and regulatory compliance standards (NIST CSF, SOX ITGC, GDPR, MITRE ATT&CK, etc.)
4. Experience with common industry SIEM and vulnerability management platforms.
5. Experience maintaining the Microsoft Defender platform and other Microsoft security products.
6. Ability to rank and prioritize vulnerabilities and security recommendations appropriately within the context of the infrastructure and business processes.
7. Experience maintaining identity and access management systems including PAM technology and other authentication and authorization control platforms.
8. Knowledge of cloud security best practices related to AWS and Azure cloud services.
9. Knowledge of DevOps practices and secure software deployment frameworks.
10. Knowledgeable of Data Loss Prevention (DLP) concepts and techniques as well as other data protection practices.
11. Working technical knowledge of IT systems, including Active Directory, Microsoft 365, and Windows OS.
12. Excellent written and verbal communication skills including the ability to present findings and risks to senior leadership.
13. Strong analytical and problem-solving skills.
14. Ability to work independently, take initiative, and manage workload with minimal supervision.

Education:

1. Bachelor’s degree in information security or related field or equivalent; combination of education and experience.
2. Must have Cybersecurity certification(s) (CISSP, Sec+, CCSP, CEH) or equivalent.