The Role
Oversee 24/7 security operations services, maintain Forcepoint DLP and other security toolsets, investigate data loss and security incidents, manage firewall and proxy governance, support certificate provisioning, monitor threats and vulnerabilities, coordinate remediation, and report information security control metrics and risks.
Summary Generated by Built In
Job Description
London/Norwich
Immediate joiners only
Purpose of Role
The Security Operations Analyst is a member of the Security Operations team,
reporting to the Security Operations Lead. The purpose of this role is to
maintain strong oversight of the 24x7 Security Operations Centre, manage a
number of operational security services related to this, review the security
impact of infrastructure changes within the environment monitor & manage
associated toolsets.
Mandatory Skills: Forcepoint DLP
Key Accountabilities/Responsibilities
Cyber Security Operations
• Responsible for overseeing the day-to-day operational delivery of services provided to DLG by its third party 24x7 Security Operations Centre. These services include Denial Of Service Protection (DDoS), Web Application Firewall, Intrusion Prevention & Detection, File Integrity Monitoring, Vulnerability Scanning, Privileged Access Management, SIEM.
• Responsible for operating and maintaining data leakage prevention toolsets, responding to alerts for data loss events including investigation and management of any data loss incidents that breach corporate data handling requirements and/or industry standards (such as PCI DSS).
• Participate in the rotational 24/7 security incident response capability. Must be capable of acting as the single point of contact for all security related response actions and decisions. This includes management of each incident from a security perspective, interaction with IM/MIM teams (where required) and recording of all key security decisions.
• Responsible for maintaining security oversight of the technical infrastructure delivered by third party suppliers and raising concerns/issues that pose a security risk to the organisation accordingly. Must also manage any operational risk remediation to conclusion
• Responsible for operational support of the security certificate provisioning platform, including all operational functions. This includes alerting key stakeholders, scheduled and ad-hoc reporting, renewal and revocation of certificates and updates to procedural documentation
• Responsible for managing the governance of the firewall rule bases and associated change management process.
• Responsible for providing security input and for maintaining relationships with the Service Management function in relation to change management, problem management and incident management.
• Responsible for overseeing the management of web proxy policy configuration provided by third party providers.
• Responsible for monitoring the operational security communication channels responding appropriately to queries/requests from the business.
• Responsible for monitoring and responding to emerging threat patterns, vulnerabilities and anomalies and provide escalations of any unknown threats to relevant areas within the company.
• Responsible for reporting metrics on the status of technical information security controls across the DLG estate, highlighting risk areas and working to develop and manage remediation plans as required.
Cyber Security Operations
• Responsible for overseeing the day-to-day operational delivery of services provided to DLG by its third party 24x7 Security Operations Centre. These services include Denial Of Service Protection (DDoS), Web Application Firewall, Intrusion Prevention & Detection, File Integrity Monitoring, Vulnerability Scanning, Privileged Access Management, SIEM.
• Responsible for operating and maintaining data leakage prevention toolsets, responding to alerts for data loss events including investigation and management of any data loss incidents that breach corporate data handling requirements and/or industry standards (such as PCI DSS).
• Participate in the rotational 24/7 security incident response capability. Must be capable of acting as the single point of contact for all security related response actions and decisions. This includes management of each incident from a security perspective, interaction with IM/MIM teams (where required) and recording of all key security decisions.
• Responsible for maintaining security oversight of the technical infrastructure delivered by third party suppliers and raising concerns/issues that pose a security risk to the organisation accordingly. Must also manage any operational risk remediation to conclusion
• Responsible for operational support of the security certificate provisioning platform, including all operational functions. This includes alerting key stakeholders, scheduled and ad-hoc reporting, renewal and revocation of certificates and updates to procedural documentation
• Responsible for managing the governance of the firewall rule bases and associated change management process.
• Responsible for providing security input and for maintaining relationships with the Service Management function in relation to change management, problem management and incident management.
• Responsible for overseeing the management of web proxy policy configuration provided by third party providers.
• Responsible for monitoring the operational security communication channels responding appropriately to queries/requests from the business.
• Responsible for monitoring and responding to emerging threat patterns, vulnerabilities and anomalies and provide escalations of any unknown threats to relevant areas within the company.
• Responsible for reporting metrics on the status of technical information security controls across the DLG estate, highlighting risk areas and working to develop and manage remediation plans as required.
Skills Required
- Forcepoint DLP experience or expertise
- Immediate availability to join
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Test Triangle is a Dublin-headquartered technology services company founded in 2012. It helps organizations transform operations through IT service management, digital transformation, software testing and quality assurance, cloud solutions, consulting, managed services, and recruitment. The company also provides application testing, DevOps, robotic process automation, software and mobile development, technology training, staffing, and resource augmentation across Ireland, the UK, and international markets.
