Total 803 information analyst job vacancies in Legal / Public / Security category in The United States of America

We are looking for a Contract Legal Data Analyst. The role will require some office attendance will be required so easily commutable distance to Manchester is essential. Experience in Legal Services would be beneficial.

This will be a 6 month contract working on a day rate basis via Umbrella company although there are opportunities for this role to lead more permanent opportunities.

Your Role

• As a Contract Legal Data Analyst your day-to-day remit includes:
• Providing legal and business information to our legal teams in support of existing and potential client relationships, working closely with all legal teams at TLT.
• Capturing, analysing and processing management information; reporting to stakeholders on KPIs and performance against SLAs.
• Interpret and define crucial metrics to present data in varying visuals and dashboards.
• Designing and implementing data cleanse/quality processes across multiple legal teams and systems.
• Identifying opportunities, recommending solutions and driving forward process improvement, efficiency and innovation for TLT, TLT’s clients and/or prospective TLT clients.
• Supporting the continued development of case management systems to ensure that they continue to support process improvements and drive efficiencies.
• Owning all aspects of client reporting e.g., the preparation monthly management information reports (including statistical and graphic analysis).
• Assisting and supporting trends analysis, horizon scanning
• Delivering high-quality reports with explanations for your findings, clear evaluations and providing appropriate recommendations to SMEs/relevant stakeholders.
• Identifying, improving, and implementing new processes to help drive internal and client-facing efficiencies. Taking a leading role on key workstreams of these projects with MI and process support.
• Acting as a point of contact between fee earners and support functions on processes and case management systems.
• Supporting Legal Project Managers to ensure risks and issues concerning data quality and assurance are identified and managed in a timely manner.

Your Skills and Experience

Core Skills:

• Strong analytical and problem-solving ability, including a thorough understanding of how to interpret the client's business needs and translate them into business/operational requirements.
• Strong numeracy skills and the ability to interpret complex data and spot trends across a data set.
• Ability to extract and document business processes and identify where improvements can be made.
• Excellent Excel, good vision and Microsoft Office skills.
• Self-starter with good time management skills, ability to prioritise conflicting deadlines and expectations.
• Evaluate information gathered and distinguish user requests from the underlying true business needs. Work with the client to identify required changes.
• Analysing and developing case management requirements and agreeing their priority with stakeholders.
• Identify and track measures needed to realise the benefits from the project.
• Ability to interpret and translate complex data into easily interpretable formats.
• Review and update requirements, specifications, business processes and recommendations related to proposed solution to ensure traceability of decisions and related changes.
• Strong teamworking skills, actively engages in project and team meetings and suggests areas for improvement for internal processes.

Core Experience:

• 2-3 years’ experience working with Data (preferably in the Legal/Financial sector).
• Previously worked with SQL/working knowledge of SQL (preferable, not essential)
• Previous experience in identifying areas for improvement and suitable recommendations for change and transformation.
• Previous volume data analysis and reporting experience.
• Ability to clean, classify, analyse and process large datasets.
• Knowledge and understanding of the use and benefits of case management systems and processes.
• Advanced knowledge of Microsoft: Excel, Word, Outlook and PowerPoint, PowerBI (and preferably knowledge of the Microsoft 365 stack)
• Strong commercial awareness and business acumen.
• Excellent attention to detail and organisational skills.
• Excellent communication skills (both oral and written).
• Ability to be adaptable, work well under pressure and as part of a busy team.

About TLT

Fast paced, fast growing and forward thinking, TLT is the law firm that helps clients stay one step a

Proud member of the Disability Confident employer scheme

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: jobs@recruitpedia.sg

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

The Security Analyst is responsible for monitoring security systems, responding to alerts and incidents, and ensuring the organization’s security controls are effective. This role involves creating and tuning security device metrics, documenting processes, and identifying unusual activities by correlating events. Strong analytical skills, collaborative abilities, and an in-depth understanding of both current and emerging security technologies are essential to succeed in this position.

Key Responsibilities:

1. Security Monitoring & Advisory: Continuously monitor and provide guidance on security issues related to systems and workflows, ensuring that internal security controls are appropriate and functioning effectively.
2. Incident Response Coordination: Lead and coordinate responses to information security incidents, minimizing impact and supporting rapid resolution.
3. Policy Development: Create, update, and enforce information security policies, procedures, standards, and guidelines that align with best practices and compliance requirements.
4. Data Classification & Audits: Assist in data classification assessments, conduct security audits, and contribute to remediation plans as necessary.
5. Vulnerability Management: Collaborate with IT management to address security vulnerabilities and coordinate vulnerability assessment efforts.
6. Testing & Assessment: Conduct network penetration testing, vulnerability assessments, and comprehensive risk assessments to identify and mitigate security risks.
7. Server Hardening: Develop, coordinate, and review server hardening procedures for all platforms used within the organization’s environment.
8. Log Review & Analysis: Regularly review security logs from servers, networks, and other platforms to detect any security anomalies.
9. User Security Awareness: Design, conduct, and maintain user security awareness training to strengthen the organization's security culture.
10. Security Research: Stay informed of the latest security policies and conduct research to continually enhance the organization’s security posture.
11. Additional Security Duties: Undertake other security-related tasks as assigned to support organizational needs.

Qualifications & Requirements:

• Education: Bachelor’s degree in Computer Science, Information Technology, or equivalent.
• Experience: Minimum of 3 years in IT, with a background in security monitoring and response.
• Technical Skills:
  • Familiarity with IT network infrastructure, server platforms (Unix, Windows), and desktop systems (OS X, Windows XP and above).
  • Proficiency with security tools such as Security Endpoint solutions, HP ArcSight, QRadar, Rapid7 Nexpose, and Tenable Nessus.
• Certifications: One or more of the following certifications are required: QISP, CISSP, Cybersecurity Nexus, CompTIA Security.

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: jobs@recruitpedia.sg

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

• Degree in Computer Science/Information Technology or equivalent

• At least 3 years’ experience in IT

• Basic technical knowledge in IT network infrastructure, server platforms (Unix, Windows platform) and desktops (OS X and Windows XP and above)

• Experience in using security tools (Security Endpoint solutions, HP ArcSight, QRadar, Rapid7 Nexpose, Tenable Nessus))

• Certified with one or more of the following: QISP, CISSP, Cybersecurity Nexus, CompTIA Security+

Job Summary:

The IT Security Specialist will be responsible for the development, implementation, and ongoing review of a comprehensive security framework. This includes creating and maintaining security policies, performing audits, conducting risk assessments, and managing customer incident response plans. The role involves being the main point of contact for security-related matters and collaborating with customers to ensure the security of their ICT systems. The ideal candidate will have a strong background in IT security, including experience with networks, servers, databases, and security auditing.

Key Responsibilities:

• Review and develop security frameworks, information security policies, and related processes, ensuring they are up to date and aligned with best practices.

• Conduct security reviews and audits, including log analysis and security assessments of customer ICT systems.

• Perform security risk management exercises, identifying vulnerabilities and mitigating risks.

• Organize and conduct table-top security exercises to simulate potential security incidents.

• Conduct vulnerability assessments and coordinate penetration testing activities.

• Provide information security awareness training to project and internal teams.

• Develop and manage customer security incident response plans, leading incident resolution and response efforts.

• Serve as the primary point of contact and advisor for customers on ICT security-related matters.

• Project manage security initiatives during the implementation phase, ensuring timely and quality delivery.

Requirements:

• Minimum of 3 years of experience in IT security.

• Expertise in Networks, Servers (Windows and UNIX), and Database systems.

• Experience with IT security auditing and security assessments.

• Proficient in analysing logs from various sources and understanding protocols and traffic flows.

• Knowledge of security tools such as Active Directory, Endpoint Protection Solutions, Early Detection and Response Solutions, Database Activity Monitoring tools, and SIEM systems.

• Excellent communication and presentation skills.

• Proficiency in Microsoft Excel.

• Flexible, team-oriented approach with a strong focus on problem-solving.

• Strong organizational skills and the ability to work independently in a dynamic environment.

• Ability to multitask effectively between various projects and teams.

Certifications:

• CISSP certification is mandatory.

• Additional certifications like CISM, Security+, or certifications in security tools such as Imperva and Carbon Black are a plus

Principal Information Security Domain Architect
£80,000 to £90,000 plus great benefits, including up to 10% employer pension contributions, private healthcare, and a company car or car allowance (Work Level 4)
Manchester City Centre (hybrid working)

We're open to applications from people who may require flexible working arrangements, such as condensed working hours, part-time working, and job sharing. You'll be able to discuss your flexible working requirements during the interview process and at offer stage.

We're looking for a Principal Information Security Domain Architect to join our wider Digital Technology & Data team at Co-op. In this role, you'll work closely with the rest of our Information Security Leadership team to shape our information security strategy and roadmap; making sure these align with our architectural principles and business needs. We'll look to you to play a key role in ensuring that the appropriate security measures and controls are implemented across Co-op; using your knowledge and expertise to help guide colleagues and teams. This is a hybrid role, and you'll divide your time between home and the office (find out more about our hybrid working policy at colleagues.coop.co.uk/hybrid-working-policy).

What you'll do

• Support the development and implementation of our information security strategy and roadmap
• Be part of our Architecture Review Board and Foundation Technical Design Authority
• Offer expertise to colleagues to make sure the appropriate information security measures and controls are in place and prioritised in decision-making
• Collaborate with our Architecture and Information Security Leadership teams to balance their individual needs and priorities
• Be responsible for developing and ensuring adherence to both our information security and architecture principles and guidelines

This role would suit people who have

• A background in Information Security and/or Architecture
• A strong understanding of information security principles, and how security architecture and technologies can help drive process improvement
• Knowledge of business, enterprise, and solution architecture best practices
• Good problem-solving and leadership abilities
• Good relationship-building skills, with the ability to influence and challenge people, including those at executive level, inclusively
• Good communication and collaboration skills, with the ability to translate technical language for a non-technical audience

We know that some people are less likely to apply for a role if they don't meet all the criteria in the job description. At Co-op, we're committed to building a diverse and inclusive working environment, so if you'd like to apply for this role but your experience doesn't quite meet every point, we'd still encourage you to apply. You may be just the right candidate for the job or other roles we have available.

Why Co-op?

If you've got the skills and experience we're looking for, we can offer you a competitive salary and great benefits package which includes 30% off Co-op branded products in our food stores (as well as other discounts on Co-op products and services). You'll also get:

• Private healthcare
• A company car or £6,000 car allowance
• An annual bonus (based on personal and business performance)
• 28 days holiday (rising to 32 with service) plus bank holidays
• A pension with up to 10% employer contribution
• Access to a subsidised onsite gym (at our Manchester HQ)
• Coaching and training to support your career development
• Wagestream - a money management app that gives you access to a percentage of your pay as you earn it
• Grocery Aid - 24/7 access to a range of emotional, financial, and practical support services for you and your family

Building an inclusive work environment

At Co-op, we're proud to do things a different way. As one of the world's largest co-operatives, owned by millions of members, community is at the heart of what we do. Since our Co-op was founded in 1844, we've had a clear social purpose, and everything we do as a business helps to build a fairer world for our members, customers, colleagues, and communities.

We're actively building diverse teams and we welcome applications from everyone. If you have a disability, we can make reasonable adjustments to our recruitment process according to your needs. We're also part of the Disability Confident scheme, meaning we'll always offer an interview to disabled candidates who apply through the scheme if they meet the minimum criteria for a job.

We'll ask whether you'd like to be considered under the Disability Confident scheme when you apply.

If we invite you to take part in the recruitment process for any of our jobs, we'll ask you if you need any reasonable adjustments to enable you to participate.

You can find out more about our recruitment process at jobs.coop.co.uk/apply-process.

You can find out more about the Disability Confident scheme and all our commitments to diversity and inclusion at jobs.coop.co.uk/diversity-inclusion-wellbeing.

As part of your application, you'll need to complete an online assessment. This assessment typically takes between 45-60 minutes. If you're a current Co-op colleague, this does not need to be completed.

Key Responsibilities:

• Conducting security vetting and clearance processes for employees and contractors
• Managing ongoing security clearance reviews for existing employees and contractors
• Analysing security clearance investigation reports and making recommendations to management
• Maintaining accurate and up-to-date security clearance records and documentation
• Collaborating with internal teams and government agencies to ensure compliance with security clearance policies and procedures.
• Staying up to date with relevant laws and regulations related to security vetting and clearance processes.

Requirements:

• The successful candidate will require to undertake UK Government National Security Vetting at SC level. https://www.gov.uk/government/publications/united-kingdom-security-vetting-clearance-levels/national-security-vetting-clearance-levels. This will require a history of continuous residency in the UK.
• The ability to undertake Police vetting at a minimum of NPPV2/CTC level is desirable.
• Previous experience in a personnel security environment desirable
• Experience in conducting detailed administration processes.
• Strong analytical and problem-solving skills
• Excellent attention to detail, time management and organizational skills are mandatory to manage a large workload with variable priorities, vetting processing timescales can be very demanding
• Ability to navigate Microsoft Office products and other applications with confidence
• Ability to maintain confidentiality and handle sensitive information appropriately.
• Ability to proactively deliver a consistent & high-quality customer focused service to relevant stakeholders.
• Proven track record in strong communication and interpersonal skills
• Strong communication and interpersonal skills
• Interest of relevant laws and regulations related to security clearance processes (full training will be provided)

Benefits:

• Competitive salary
• Paid time off and holidays
• Professional development opportunities
• Friendly and collaborative work environment
• Hybrid & Flexible working policies available

We’re searching for a Senior/Manager, Client Information Security (Infra) to be part of our diverse team of talent here at NCS!

If you believe in going above and beyond, want to exemplify the best, and wish to bring people and technology together like never before, then we would love to have a conversation with you!

What we seek to accomplish together:

• Drive the implementation of NCS cybersecurity, data protection, and privacy policies, standards and processes within the practice. You will work to continually improve the security posture of projects through proactive risk management and the establishment of a broad range of cybersecurity controls
• Provide direct support to colleagues to ensure cybersecurity is addressed throughout the engagement delivery lifecycle, from infrastructure and security tooling choices to the secure storage, processing and deletion of client data.
• Act as a single point of contact and escalation for the SOC, Threat Intel and Crisis Response teams for practice-related cybersecurity incidents, ensuring timely identification, remediation and lessons learned.
• Manage the security SLA governance and provide practice-level cybersecurity reporting, metrics and forecasting to leadership.
• Responsible for information security, data protection, privacy, GRC, and audit requests for the practice, acting as single point of contact on relevant client security assessment and audits execution. Eg. independent third-party attestations of industry cybersecurity standards and certifications, such as ISO 27001, SOC 2 for practice-specific solutions and products
• Contribute to the definition of the client specific security baseline. Consult and advise internal and external clients about security topics and support the opportunity management process by providing subject matter expertise and support
• Help win client business by providing cybersecurity assurance to RFIs, RFPs, proposals, contract drafting, security questionnaires, workshops and other client due diligence processes

TikTok is the leading destination for short-form mobile video. At TikTok, our mission is to inspire creativity and bring joy. TikTok's global headquarters are in Los Angeles and Singapore, and its offices include New York, London, Dublin, Paris, Berlin, Dubai, Jakarta, Seoul, and Tokyo.

Why Join Us

Creation is the core of TikTok's purpose. Our platform is built to help imaginations thrive. This is doubly true of the teams that make TikTok possible.

Together, we inspire creativity and bring joy - a mission we all believe in and aim towards achieving every day.

To us, every challenge, no matter how difficult, is an opportunity; to learn, to innovate, and to grow as one team. Status quo? Never. Courage? Always.

At TikTok, we create together and grow together. That's how we drive impact - for ourselves, our company, and the communities we serve.

Join us.

Team Introduction

The Global Security Organization provides industry-leading cyber-security and business protection services to TikTok globally. Our organization employs four principles that guide our strategic and tactical operations. Firstly, we Champion Transparency & Trust by leading the charge in organizational transparency, prioritizing customer trust, and placing user needs first. Secondly, we aim to maintain Best in Class Global Security by proactively identifying and reducing risks while enabling innovative product development. We constantly work towards a sustainable world-class security capability. Thirdly, we strive to be a Business Catalyst & Enabler by embodying the DNA of technical innovation and ensuring our Global Security operations are fast and agile. Finally, we Drive Empowered & Risk-Informed Decision Making by providing our leaders with the necessary information to make agile decisions based on risk.

We are seeking a Digital Forensics Analyst to join our Forensics & Litigation Support team. The analyst will partner with internal stakeholders, such as Legal, HR, Ethics, Investigations, and Insider Threat, to support investigations and provide technical expertise. The role will perform forensic preservation of relevant devices and data, respond to incidents, and perform detailed analysis of systems and data. The role will require an individual able to apply forensics concepts and industry best-practice in the preservation and analysis of newly developed technologies engineered internally at the company.

Responsibilities

- Preserve network and host-based digital evidence in an industry accepted and forensically sound manner that would be admissible in court proceedings.

- Coordinate digital forensics analysis on large scale matters.

- Communicate technical events and analysis to both technical and non-technical audiences.

- Perform Apple macOS host-based forensics, including the analysis of user events, the APFS/HFS+ file system, internal services, default applications, and relevant logs.

- Perform Microsoft Windows host-based analysis using both Windows and Linux based forensic tools.

- Perform analysis of Linux servers, including user events, daemons, security logs, and cron jobs.

- Perform acquisitions and analysis of Apple iOS and Android mobile devices.

- Perform acquisitions and analysis of cloud platforms, such as Microsoft Azure, Amazon Web Services, Google Cloud Computing and/or others.

- Write detailed forensic reports for investigations.

Minimum Qualifications

- A bachelor’s degree in a computing field.

- 3-5 years in digital forensics analysis experience.

- Holds an industry accepted certification validating digital forensics capiblities: GCIH, GCFA, GCFE, CFCE, GREM, X-PERT, EnCE, CCE, etc.

- In-depth understanding of computer forensic principles, including digital and mobile forensics, log analysis, cloud-based systems, database structures, querying languages and common digital forensics tools.

- Knowledge and experience of Windows, Unix and Mac host-based forensics, Mobile OS’s and command line.

- Working knowledge of hardware configuration and network/data communications, software development and scripting, database technology and database exploitation/forensics.

- Experience with seizure of evidence, chain of custody and conducting analysis.

- Knowledge of data loss prevention systems and how they detect potential host and network-based data loss technologies or other insider threat risks.

Preferred Qualifications

- Completed the SANS course FOR518: Mac and iOS Forensic Analysis and Incident Response

- Experience in writing affidavits, depositions and serving as an expert witness in court proceedings.

TikTok is committed to creating an inclusive space where employees are valued for their skills, experiences, and unique perspectives. Our platform connects people from across the globe and so does our workplace. At TikTok, our mission is to inspire creativity and bring joy. To achieve that goal, we are committed to celebrating our diverse voices and to creating an environment that reflects the many communities we reach. We are passionate about this and hope you are too.

Our client is a well-established MNC, market leader in the IT industry. Due to their current expansion plan, they are looking for an Information Security Engineer to join their team, in hopes of developing the current high performing team. They are located in the West.

Responsibilities:

• Handle post-sales activities of related products and solutions.
• Engage in the implementation of large-scale projects.
• Offer on-site services, including deployment, testing and preparation of documentation.
• Provide technical assistance to maintain high levels of customer satisfaction.
• Troubleshoot customer inquiries by leveraging existing knowledgebase resources and resolving known issues.
• Be available for standby support to manage 24/7 maintenance calls.
• All other adhoc duties as assigned.

Requirements:

• Minimum diploma in IT / Cybersecurity or other related field of studies.
• Minimum 2 years’ IT support experience.
• Certified CCNA or CCSA is a bonus.

Interested candidates who wish to apply for the advertised position, please click APPLY NOW or email an updated copy of your resume/cv.

We regret that only shortlisted candidate will be notified.

Email: jobs@recruitpedia.sg

Recruitpedia Pte. Ltd.

EA License No. 19C9682

EA Reg. No. R23115553 (Lai Hor Yan)

Position Type :

Type Of Hire :

Education Desired :

Travel Percentage :

Job Posting Description

As the world works and lives faster, FIS is leading the way. Our fintech solutions touch nearly every market, company and person on the planet. Our teams are inclusive and diverse. Our colleagues work together and celebrate together. If you want to advance the world of fintech, we’d like to ask you: Are you FIS?

About the team:

It’s an amazing opportunity to join a Talented team of innovative and committed folks doing interesting work at the world’s largest global provider dedicated to financial technology solutions!

What you will be doing:

• Develop policy and standards for API security.
• Collaborate with internal development teams to build/advocate security controls in Application Programming Interface (API), performing Threat Modeling, Static Application Security Testing (SAST), Software Composition Analysis(SCA).
• Assist in the strategy, standards, and architecture for the security aspects of the SDLC including application, APIs, DevSecOps, and CICD.
• Identify the gaps in SAST/SCA tool rule/configuration and work with vendor to engineer them to provide the maximum scanning coverage to applications.
• Experience and knowledge in Burp Suite tool for dynamic testing (DAST).
• Primarily responsible for API application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management)

What you bring:

• At least 5 years of working experience in application security that includes API, SAST and DAST along with Checkmarx, Veracode
• Knowledge of security technologies (encryption, data protection, design, privilege access, etc.)
• Proficiency in time management, communications, decision making, presentation and organizational skills
• Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules
• Excellent decision-making, analytical and problem solving skills
• Excellent verbal and written communication skills to technical and non-technical audiences of various levels in the organization
• Experience establishing and maintaining effective working relationships with employees and/or clients
• Strong knowledge of development and application security
• Hands-on experience performing application API security assessment, static and dynamic security assessments with tools such as: Burpsuite, OWASP ZAP, AppScan, WebInspect, Fortify, Veracode, Checkmarx, etc.
• Knowledge of OWASP Top 10/ SANS Top 25, identify vulnerabilities via manual and automated testing methods and how to effectively remediate vulnerabilities associated with each
• Expert knowledge of information security principles, web applications, and intermediate familiarity with malicious code and common hacking techniques used by malicious actors
• Experience conducting risk assessments and performing threat modeling of applications
• Ability to collaborate with teams remotely

What we offer you:

A career at FIS is more than just a job. It’s the change to shape the future of fintech. At FIS, we offer you:

• A voice in the future of fintech
• Always-on learning and development
• Collaborative work environment
• Opportunities to give back
• Competitive salary and benefits

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

Sourcing Model

Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass

Position Type :

Type Of Hire :

Education Desired :

Travel Percentage :

Job Posting Description

As the world works and lives faster, FIS is leading the way. Our fintech solutions touch nearly every market, company and person on the planet. Our teams are inclusive and diverse. Our colleagues work together and celebrate together. If you want to advance the world of fintech, we’d like to ask you: Are you FIS?

About the team:

It’s an amazing opportunity to join a Talented team of innovative and committed folks doing interesting work at the world’s largest global provider dedicated to financial technology solutions!

What you will be doing:

• Develop policy and standards for API security.
• Collaborate with internal development teams to build/advocate security controls in Application Programming Interface (API), performing Threat Modeling, Static Application Security Testing (SAST), Software Composition Analysis(SCA).
• Assist in the strategy, standards, and architecture for the security aspects of the SDLC including application, APIs, DevSecOps, and CICD.
• Identify the gaps in SAST/SCA tool rule/configuration and work with vendor to engineer them to provide the maximum scanning coverage to applications.
• Experience and knowledge in Burp Suite tool for dynamic testing (DAST).
• Primarily responsible for API application security but with a good working knowledge of other security domains (Cryptography, Identity and Access Management, Threat and Vulnerability Management)

What you bring:

• At least 5 years of working experience in application security that includes API, SAST and DAST along with Checkmarx, Veracode
• Knowledge of security technologies (encryption, data protection, design, privilege access, etc.)
• Proficiency in time management, communications, decision making, presentation and organizational skills
• Proficiency in planning, reporting, establishing goals and objectives, standards, priorities and schedules
• Excellent decision-making, analytical and problem solving skills
• Excellent verbal and written communication skills to technical and non-technical audiences of various levels in the organization
• Experience establishing and maintaining effective working relationships with employees and/or clients
• Strong knowledge of development and application security
• Hands-on experience performing application API security assessment, static and dynamic security assessments with tools such as: Burpsuite, OWASP ZAP, AppScan, WebInspect, Fortify, Veracode, Checkmarx, etc.
• Knowledge of OWASP Top 10/ SANS Top 25, identify vulnerabilities via manual and automated testing methods and how to effectively remediate vulnerabilities associated with each
• Expert knowledge of information security principles, web applications, and intermediate familiarity with malicious code and common hacking techniques used by malicious actors
• Experience conducting risk assessments and performing threat modeling of applications
• Ability to collaborate with teams remotely

What we offer you:

A career at FIS is more than just a job. It’s the change to shape the future of fintech. At FIS, we offer you:

• A voice in the future of fintech
• Always-on learning and development
• Collaborative work environment
• Opportunities to give back
• Competitive salary and benefits

Privacy Statement

FIS is committed to protecting the privacy and security of all personal information that we process in order to provide services to our clients. For specific information on how FIS protects personal information online, please see the Online Privacy Notice.

Sourcing Model

Recruitment at FIS works primarily on a direct sourcing model; a relatively small portion of our hiring is through recruitment agencies. FIS does not accept resumes from recruitment agencies which are not on the preferred supplier list and is not responsible for any related fees for resumes submitted to job postings, our employees, or any other part of our company.

#pridepass

SSE has big ambitions to be a leading energy company in a low carbon world. Following our commitment to invest £20.5 billion in low carbon projects to 2027, we have significant growth plans and are well on our way to achieving our ambition to build a world that's more sustainable and inclusive for you, your family, the community you live in and for generations to come.

Join us on our journey to net zero and help us power change.

About the Role

Base Location: Havant and Reading

Salary: £58,630 - £68,098 and a range of benefits to support your finances, wellbeing and family.

Working Pattern: Permanent | Full Time | Flexible First options available

If you don't have the level of skills or experience required, we may be able to offer a lower grade role.

Candidates for this role will be required to obtain vetting to SC level through UK Government. The criteria normally includes 5 years UK residency, further information can be found here: United Kingdom Security Vetting: Applicant - GOV.UK (www.gov.uk)

As the SSE Cyber Incident Response Analyst, you'll be responsible for managing Cyber Security incidents and threats to much of the UK's Critical National Energy Infrastructure. We also have increasing global investments which need to be protected to the same levels.

You'll actively be looking for vulnerabilities and identifying potential threats; both within the corporate environment and externally.

- Leading Cyber Security investigations to provide post-mortem analysis to illuminate issues and possible solutions.

- Development and optimisation of the security tooling to ensure effective discovery of suspicious activity.

- Leading security incident management and participating in problem and change management forums where required.

- In conjunction with the inhouse Threat Intelligence team and external agencies, research and investigate attack techniques to develop detection analytics to defend against them.

- Discover and identify misconfigurations or coverage gaps in existing controls.

What do I need?

To be considered for this role, we would love you to have:

- Significant work experience in managing security incidents end to end.

- Previously worked in an SOC environment with knowledge of automation and scripting.

- Deep understanding of log data analysis, intrusion detection systems, and networking principles.

- Serve as the technical escalation point and mentor for Level 1 / 2 analysts.

- You'll need a high level of technical skills and your day-to-day workload will typically include the management and analysis of Cyber Security events, escalation and remediation as required.

About our Business

SSE IT underpins the technology needs of all the different businesses that make up the SSE group. From emerging technologies to data and analytics to cyber security - we power SSE's growth and enable it to generate value, while keeping it secure. As a trusted business partner that helps SSE lead in a low carbon world, we are proud of our service. Working for SSE IT is all about equipping SSE for now and the future.

What's in it for you?

We offer an excellent package with 34 days annual leave entitlement. Enhanced maternity/paternity leave, discounted healthcare, salary sacrifice car leasing and much more, view our full benefits package on our careers site.

As an equal opportunity employer we encourage diversity and are committed to creating an inclusive environment for all employees. We encourage applicants from all protected characteristics and commit to providing any reasonable adjustments you need during the application, assessment and upon joining SSE. Search for 'Inclusion & Diversity at SSE' to find out more.

Further actions

All applications should be made online, and I'll be back in touch after the vacancy closing date to let you know the outcome.

If you would like to discuss any working flexibly requirements or adjustments you may require throughout the recruitment and selection process, please contact David on 01738 275846.

Before commencing your role with SSE, you'll need to complete our pre-employment screening process. This will consist of a criminality and credit check.