Job Description

Information Security Analyst | London, UK
Location: London
Employment Type: Full-time
PCD290117

Role Overview
Information Security Analyst
The organisation is seeking an Information Security Analyst to join the Security Operations team. The Information security Analyst provides first line of support for security inquires, manages vulnerability assessments, assesses third-party vendors and software requests, and investigates and responds to security alerts. The ideal candidate has a strong technical foundation, problem-solving skills and a passion for cybersecurity.
• Serve as the first point of.
• Identify, track, and coordinate remediation of security vulnerabilities.
• Assess third-party vendors and software for security risks before approval.
• Investigate and respond to security alerts.
• Collaborate with other security sub-teams on projects to enhance security capabilities, gaining exposure and growth opportunities.
Required Qualifications:
• No prior work experience required, but a strong interest in information security and relevant technical skills are required.
• Degree in Engineering, Computer Science, or STEM related field.
• Strong analytical skills and attention to detail.
• Effective communication skills to work with technical and non-technical teams.
• Familiarity with common attacks techniques and emerging security trends.
• Exposure to security frameworks and industry best practices (such as NIST CSF, CIS Critical Security Controls).
• Awareness of common cryptographic principles and algorithms, including encryption, hashing, and key exchange methods.
• Understanding of key network protocols, including DNS, HTTP, TLS, SSH, TCP, UDP, ARP, IP, and IPSec.
• Understanding of stateful and stateless firewalls and how they control network traffic.
• Basic scripting skills in languages like Python or scripting language for automating security tasks and analysis.
Nice to have:
• 1-2 years of exposure to security operations or a relevant IT role.
• Experience with security tools such as EDR, SIEM, firewalls, and vulnerability scanning tools.
• Knowledge of cloud security concepts and practices.
• Solid understanding of desktop operating system and open-source operating system systems security.
• Exposure to penetration testing techniques, tools, and methodologies.
• Relevant security certifications (e.g., Security+, CEH, OSCP).