Defence Analyst

We have an exciting opportunity for Cyber Defence Analysts to join our growing Information Security team, based in the A&O Shearman's Belfast office.
The in-house Information Security team is a core part of our technology services structure with mature or evolving capability across all areas of digital security and cyber defence. This Cyber Defence Analyst will perform a critical role in solidifying the firm's security posture to ensure the confidentiality, integrity, and availability of the firm's systems and data. They play a key role in investigating any security related alerts and escalations from Level 1 monitoring carried out by the Managed Security Service Provider (MSSP).
Please note that weekend working is a requirement for this role, with exact shift patterns to be discussed at interview. All weekend hours are eligible for a premium payment, in addition to your base salary.
Investigate and prioritise Level 2 escalated events and alerts which have been detected through Level 1 monitoring activities by the firm's MSSP to identify potential incidents. Investigate potential cyber security and data loss incidents raised by firm employees and third parties, following the defined playbooks for the Cyber Defence team.
Respond to inbound queries to the information security mailbox, consulting with more senior colleagues for advice where required.
Participate in incident response activities, including CSIRT activities, for confirmed incidents in local time-zone:
Be part of the Cyber Defence on-call rota, which may require out-of-hours work.
Pick-up and hand-off incident response activities with the rest of the Belfast Cyber Defence team to other teams in different time-zones across the globe, as per our 24-7 follow-the-sun global model.
Maintain awareness of current and emerging cyber threats, techniques, and procedures (TTPs) using threat intelligence insights from the Threat and Vulnerability Management team, applying this knowledge in daily operations.
Assist with the implementation and enhancement of new and existing cyber defence tools and processes to maximise the effectiveness of the Cyber Defence function.
Contribute to the maintenance and improvement of playbook and process documentation for Cyber Defence.
Collaborate with other areas of the firm (e.g. wider information security and IT teams) to improve the firm's security posture by implementing controls and fostering awareness.
Advise business stakeholders on Cyber Defence, translating complex technical concepts into business-friendly language.

Security engineering, Alert triaging, Rule writing, Incident response, Digital Forensics and Incident Response (DFIR), Threat intelligence and management, Vulnerability management, or Security control testing.
In-depth understanding of Networking and routing protocols (e.g. Cyber defence technologies and tooling, including:
Ability to interpret data flows, assess security events, and draw logical conclusions.
A genuine passion for continuous learning and development in cybersecurity, staying up-to-date with the latest developments, trends, and technologies in the field.
Bachelor's degree in Information Security, Computer Science, Engineering, Technology, or a related field.
CISSP (Certified Information Systems Security Professional)
CISM (Certified Information Security Manager)
Python
A&O Shearman recognises the value of flexible working and embraces hybrid working, allowing our people to work from home up to 40% of their working time. Should you require additional support at any stage of the recruitment process due to a disability or a health condition, please do not hesitate to contact a member of our recruitment team who will work with you to provide any adjustments as required.
We are an equal opportunities recruiter and do not discriminate on the basis of race, colour, sex, religion, sexual orientation, national origin, disability, or any other protected characteristic.