We are a leading international law and professional services firm providing legal, corporate and fiduciary services to global corporations, financial institutions, capital market participants and investment fund managers. With a global presence spanning the Americas, Europe, the Middle East and Asia, we advise on the laws of Bermuda, the British Virgin Islands, the Cayman Islands, Guernsey, Ireland and Jersey.
We treat everyone as the intelligent professional they are. Our approach is to trust and empower our people to deliver consistently, and enable them to succeed. Diversity is our secret weapon – it’s the sheer breadth of Walkers people that makes us who we are – gathered from across the globe and fluent in languages, jurisdictions and cultures that help us to mirror our clients and keep our own thinking in tune with the world in which we operate.
Office: London (50% hybrid required)
Reporting to the Information Security Operations Manager, the Information Security Analyst undertakes the day-to-day operations of the existing security solutions, and uses these tools to identify, investigate and resolve security events detected by those systems. Additional responsibilities involve supporting the implementation of new security solutions, participation in the creation / maintenance of policies, standards, baselines, guidelines and procedures. In addition, you will organise and conduct vulnerability audits and assessments.
The Information Security Analyst will be fully aware of Walkers’ security objectives, have a thorough understanding of the threat landscape, and will work with a global team to mitigate threats and maintain best-in-class security.
- Assist with the management and operation of Walkers' security controls.
- Help in streamlining and automating of security controls in order to improve overall security posture of the organisation.
- To take the lead on security incidents, identification, and remediation.
- Support operational transition for the deployment, integration and configuration of new security solutions and of any enhancements to existing security solutions.
- Monitor all in-place security solutions for efficient and appropriate operations.
- Conduct security focused reviews and analysis of log files and reports of devices, systems and network traffic (i.e., workstations, servers, network devices). Interpret results and resolve issues identified.
- Investigate security alerts and provide incident response if and when required, working with global team to help mitigate and resolve incidents.
- Support and contribute to red/blue team testing and cyber threat based table top exercises.
- Develop maintain and implement system hardening procedures.
- Maintain up-to-date detailed knowledge of the IT Security industry, including the development of new attacks and threat vectors.
- Provide a point of escalation for the Service Desk, IT and Business support teams with respect to security-related events.
- Relevant experience operating in a hands-on IT Security capacity.
- Strong IT Security Analytic skills with Cyber Threat awareness and experience.
- Good working knowledge of adversary tactics and techniques. E.g. MITRE ATT&CK.
- Proven experience working with Security Operations (SIEM) and responding to security alerts. Developing and refining use cases.
- Excellent understanding of implementing, managing, interrogating and reporting of security controls.
- Strong knowledge of vulnerability management and scanning tools.
- Good networking knowledge, firewalls, routing & switch, OSI model and associated protocols (TCPIP).
- Good operating system knowledge (Windows, Linux and Unix)
- Scripting and programming experience most beneficial.
- Knowledge and experience of M365 and Azure (Defender) cloud security.
- Proven knowledge of technologies such as EDR, NDR, IDS and IPS tools, WAF, Web Proxies, Email Security, Deception, SIEM and SOAR solutions.
- Knowledge of implementation and maintenance of PKI and HSM infrastructure very beneficial.
- Desirable experience of designing and implementing security solutions/controls for on-premises and cloud environments.
- Knowledge of security best practices and frameworks ISO27001, Cyber Essentials+, CIS CSC20, NIST, ISF, OWASP etc.
- Security-focused industry certifications or third level degree is desirable such as CISSP, CISM, CompTIA, CCSP, CEH, SANS (GNFA / GCIH / GMON / GCCC / GCSA), SC-200, AZ-500 etc.
#LI-LQ1
#LI-Hybrid
Walkers global is an equal opportunity employer. Equality and diversity are key to our global identity and an integral part of our goal to continue being an employer of choice. We are committed to a work environment that supports all individuals irrespective of gender, ethnicity, nationality, race, religion, marital status, age, disability, pregnancy, sexual orientation, gender identity or any other applicable legally protected characteristics. We make every effort to ensure that employment opportunities are open and accessible to all purely on the basis of personal ability.
