Senior Security Analyst

About the role:

As a Senior Security Analyst, you will be a cornerstone of our expanding security function. This role is pivotal in maturing our technical security posture, driving key security projects, and acting as a senior technical authority within the team. You will be responsible for the effective management and optimisation of our security toolsets and for providing expert guidance across the business, ensuring that security controls remain robust, effective, and aligned with our security objectives.

What you'll be doing:

• Lead and mature the firm’s technical security capabilities across key domains, with a particular focus on:
  • Incident Management and Response
  • Intrusion Detection and Prevention (IDS/IPS)
  • Cloud Security (IaaS / PaaS / SaaS environments)
  • Identity and Access Management (IAM) and Privileged Access Management (PAM)
• Act as a senior technical authority within the security team, providing guidance and direction on security tooling, controls, and technical approaches.
• Serve as the primary senior escalation point for technical security queries, incident reports (including phishing analysis), and requests for guidance from general staff and technical teams (e.g. DevOps).
• Oversee the implementation, management, and continuous optimisation of the security technology stack, including but not limited to:
  • IAM / PAM solutions
  • Endpoint / Extended Detection and Response (XDR)
  • Vulnerability Management platforms
  • SIEM / SOAR platform
  • Multi-Factor Authentication (MFA) and authentication mechanisms
  • Application Security (AppSec) tooling
• Ensure security platforms are operating effectively, are well-integrated, and provide appropriate coverage, detection, and response capabilities.
• Drive improvements to tooling, detection logic, and response processes to continuously raise the organisation’s security maturity
• Drive the continuous improvement of security projects, translating strategic security goals into effective technical execution.
• Actively contribute to the development of the security function by training and mentoring junior analysts and other technical staff on security best practices, tools, and procedures.
• Participate in the on-call rota (as agreed with Recruitment/PeopleOps) and support incident response in line with the incident response process and call tree.
• Contribute to the ongoing development and maintenance of the Incident Response call tree, escalation paths, and operational response processes.

Who you are:

• Demonstrable experience across two or more significant security domains (e.g. incident response, cloud security, endpoint security, IAM/PAM, vulnerability management, SIEM/SOAR).
• Proven experience leading or owning technical security capabilities or platforms.
• Strong hands-on experience implementing, operating, and optimising security tooling in a modern environment.
• Experience acting as a senior escalation point for incidents and complex security issues.
• Experience contributing to or leading security improvement initiatives or projects.

Core Skills:

• Strong technical investigation, troubleshooting, and analytical skills.
• Ability to design, improve, and operate security controls and detection/response capabilities.
• Excellent communication skills, with the ability to advise both technical and non-technical stakeholders.
• Strong documentation and process improvement mindset.
• Ability to prioritise, manage workload, and operate effectively during incidents..

Why work with us?

At HeliosX, we want to improve healthcare for everyone, and to do this we need a team of brilliant people who share that ambition. We are currently a diverse team of engineers, scientists, clinical researchers, physicians, pharmacists, marketeers, and customer care specialists committed to our mission - but we need more talented folks to join us, if we want to achieve our global ambitions!

Aside from working with our all-star team, here are the other benefits of coming on board:

• Generous equity allocations with significant upside potential
• 25 Days Holiday (+ all the usual Bank Holidays)
• Private health insurance, along with extra dental and eye care cover
• Employee Pension with Smart Pensions
• Enhanced parental leave
• Cycle-to-work Scheme
• Electric Car Scheme
• Free Dermatica and MedExpress products every month, as well as family discounts
• Home office allowance
• Access to a Headspace subscription, discounted gym memberships, and a learning and development budget (alongside a free Kindle and audible subscription)

#LI-Hybrid #LI-Senior 

#LI-Hybrid