Senior Information Security Analyst
The Senior information security analyst has a significant role in directing and delivering our information security roadmap through engaging with customers and driving the workflow of our operations team.
You’ll be exposed to a busy change environment with unique challenges every day acting as a security expert providing consultancy, direction and advice for projects and business units. Using proven experience in Information Security, you’ll be seen as a leader in our team and expected to assist less experienced analysts in their development.
The role will encompass several different facets with both an internally team facing aspect as well as a more business and outgoing focus in supporting the groups security posture. This will involve managing initiatives, epics, user stories and tasks in an agile manner with the team and collaborating with them to determine the most appropriate technical means to deliver value.
The Senior Information Security Analyst will also be required to drive operations across both Information Security and the wider organisation. Through collaboration with the rest of the security department, this role will assist and drive the development of security monitoring and incident event management. Finally, the role will be a part of the evolution and management of the Information Security Operations function through delegation on behalf of the Head of Security Operations, supporting the team through mentoring and coaching, and representing the function and wider information security in organisational work and meetings.
Key Responsibilities Include:
- Work closely with the technical and project teams within the organisation to gather operational security requirements.
- Lead, where required, on critical incidents impacting the business.
- Supporting the development and maintenance of our Incident Response function you will be assisting the Head of Information Security Operations and Principal Information Security Analyst in driving the maturity of our capabilities and the overall security posture.
- SME of our alerting and incident configuration, driving constant improvement within our tooling and processes.
- You'll be trusted to be a face of security operations and liaise with both internal and external teams to understand how we can meet the requirements of the further business.
- You’ll be experienced in working with a varied tech stack involving both On-Premise and Cloud environments and relish the opportunity to get stuck in when it comes to investigating and mitigating security incidents.
- You’ll be working with both our Web Application and Corporate Environments and have experience in providing Incident Response in both these areas.
- You'll play a huge part in conducting full incident reviews, understanding root causes and developing solutions that improve our security position going forward.
- On-Call work as part of a wider rota supporting the Information Security Operations Team
- Liaison with infosec leads, product owners and business teams to determine security requirements
- Drive the development of key Security processes across the business
- Assessment of logging, monitoring and alerting standards across the business
- Leading on engagement in Information Security, CIO and wider organisational forums
- Supporting the operation and development of the Security Operations team, including development of career progression, coaching and the wider capabilities of the function
- Working with Security Architecture and Governance, Risk and Compliance functions to develop Information Security and organisation wide security functions and capabilities.
- Improving the maturity of our processes and playbook
More about evoke
We’re a business that embraces change and progress. The power behind big name brands William Hill, 888 and Mr Green, evoke is the new name for 888 Holdings. Marking a new sense of purpose, direction and ambition for the business, there couldn’t be a more exciting time to join us as we accelerate our journey to bring even greater delight to our customers with world-class betting and gaming experiences. That’s the future. That’s evoke.
At evoke, you’ll benefit from flexibility and a culture built on trust. We’ll give you the space to be yourself and the tools you need to protect our customers while they play. We’ll invest in your future to help you develop your unique strengths and build a career that’s right for you.
Apply
At evoke, we prioritize diversity, equity, and inclusion for the benefit of our company, employees, and communities. We foster a welcoming and safe workplace that values all forms of diversity and provides opportunities for growth.
Sound good? Then you belong at our place! The first step in the recruitment process is kickstarting your application, followed by an initial screening call and an interview stage.
Apply today to kickstart your application with the evoke Family!
- Experience of Senior Security Analyst and hands-on technical information security experience
- Experience of designing and implementing incident response practices
- Experience with various SIEM Platforms including (but not limited to) Splunk
- Experience of Cloud tooling such as AWS
- Experience of Security specific tooling such as Microsoft defender
- Deep understanding of technical security principles and technologies.
- A sound understanding of how to model threats & risks as well as the controls necessary to reduce or mitigate them using both process and technology.
- An understanding of how business strategy, risk, regulation and technical constraints influence organisational responses to cyber security.
- To be a self driven individual who looks to take responsibility for improving processes, assisting junior analysts and driving positive change.
- Excellent stakeholder engagement skills. Communicate and promote Information Security at all levels (both technical and non-technical stakeholders).
- An understanding of security methodologies, best practice, and industry standards.
- Experience in risk & regulatory frameworks and standards such as NIST 800, ISO 27001
Privacy Policy
The candidate consent that the information in this Candidate Application and any personal information concerning him/her which is obtained by the Company or from other sources, will be held and managed by the Company or on its behalf, and that the Company shall be entitled to use and transfer such information to third parties, including Company’s affiliates, business partners or contractors/service providers to the extent required while maintaining your right to privacy. The Company undertakes that the information will be used, and transferred for the purposes related to the recruitment process, including assessment of your qualifications against our work opportunities, verification and reference/background checks, communications with you about the recruitment process and/or your application and/or compliance with applicable laws, regulations, legal processes or enforceable governmental requests.
