As the Operations Security Analyst, you will provide specialist technical support to the business and will support the existing team activities. You will be responsible for enhancing the capabilities of the Operations Security team in managing the risk Metro Bank faces in relation to cyber security.
Depending on the team, most of our roles offer flexible working.
So what would you be doing?...
• Analysing and triaging events from all security tools, ensuring the right actions are taken
• Where necessary, triggering and coordinating the cyber security incident management process, perform further investigations, containment actions, eradication of threats, and recovery of systems
• Managing all other Operational Security incidents and request tickets that have been logged through the support team, escalations from the business and releasing changes and enhancements
• Performing analysis of vulnerability scans, penetration tests, vendor advisory for prioritization and remediation
• Establishing security controls in alignment with appropriate, and accepted, frameworks, e.g. ISO 27001/2 and NIST CSF, while ensuring compliance with the requirements of SWIFT, BACS, LINK, Faster Payments and PCI DSS
• Participating and supporting compliance management, i.e. with external governing bodies, internal audit, IT risk and other stakeholders
• Contributing to the development and maintenance of security policies, standards, processes and procedures including their implementation and assurance
• Consuming threat intelligence and analytics turning them into actionable insights
• Conducting Threat Hunting exercises in conjunction with our Managed Security Services provider
• Continually reviewing, recommending and executing improvement opportunities around processes, technology, tools, and self-development
• Generating metrics, reports and dashboards that are relevant to Security Operations
You need to be this kind of person…
• Passionate about providing unparalleled levels of service and convenience for customers
• Able to work and learn quickly in a fast paced, fun and dynamic environment
• Prepared to stick at something – we get nervous if someone has jumped from job to job as we want people who are prepared to learn and grow
• Care about doing a great job and exceeding expectations with the quality of what you do
And... we are a bank so risk is a part of everything we do. We love people who take responsibility, do the right thing for customers, colleagues and Metro Bank and have the courage to call out any concerns.
We always support colleagues to develop their skills. But to be successful in this job you really do need to already be able to do most of these wonderful things...
• Understand the risks associated with your job and what that means for you, Metro Bank and all our stakeholders
• It is essential you have IT security operations and analysis experience
• You must have familiarity with intrusion detection systems (IDS) and/or network behaviour analysis (NBA), endpoint detection and response (EDR), security information and event management (SIEM), network access control (NAC) and vulnerability management solutions
• Knowledge of OWASP Top 10, SANS Top 20 and industry standard security best practice.
• Experience of industry standard vulnerability scanning tools (Qualys)
• Proven experience in coordinating security and vulnerability Management programs (Regular vulnerability scans)
Share it: