Information Security Analyst

Join Dotdigital, a leading marketing automation platform, as an Information Security Analyst. In this hands-on role, you will help protect our people, products, platforms, and data. You will work closely with various teams across the business and play a crucial role in maintaining our security posture. Your responsibilities will include monitoring security alerts, managing vulnerabilities, supporting cloud and identity security, assisting with application security, and contributing to governance, risk, and compliance efforts. You will also engage with customers and vendors, produce security metrics, and promote a positive security culture within the organization.

• Monitor and investigate security alerts and events across security tooling, cloud environments, business systems, and applications.
• Own day-to-day vulnerability management activities across infrastructure, cloud platforms, applications, and endpoints.
• Support the security of cloud environments and SaaS platforms through implementation and monitoring of security controls.

• Strong communication skills with the ability to engage technical and non-technical stakeholders
• Experience working within a security or compliance framework such as ISO 27001
• Experience in a Security Analyst, Information Security, Cyber Security, Systems Administration, Infrastructure, Cloud Operations, or DevOps role with demonstrable security responsibilities
• Ability to manage multiple priorities and work independently in a fast-paced environment
• Understanding of cloud security concepts and security controls within major cloud providers
• Knowledge of identity and access management principles
• Understanding of common application security risks and OWASP principles
• Experience with vulnerability management, remediation tracking, and security risk reduction
• Hands-on experience of an array of core security technologies
• A pragmatic and business-focused approach to security
• Understanding of security operations and incident response processes
• Security+
• SC-300
• Security certifications such as:
• Experience working within a SaaS, technology, or cloud-first organisation
• Familiarity with automation or scripting using PowerShell, Python, or similar technologies
• AZ-500
• SC-200
• Experience supporting secure software development practices
• Experience conducting supplier security reviews and risk assessments
• Understanding of data protection and privacy requirements
• GSEC
• SSCP