Cyber Security Administrator

• At Virgin Active, ensuring the security of our digital realm is not about protection, but also empowerment. As our Security Analyst, you will be on the front lines of the digital battleground, using your extensive skill set to not just thwart threats but to enhance our technological prowess. Working closely with the Head of Cyber Security, your expertise will be crucial in strengthening our vast architecture and ensuring the sanctity of our cloud assets.
• As a Security Administrator at Virgin Active, you will play a key role in safeguarding our digital assets. Reporting directly to the Head of Cyber Security, you will be responsible for the day-to-day security operations, including SIEM and XDR monitoring and analysis, and the security of our cloud, SaaS and productivity platforms. If you’re passionate about cybersecurity, thrive in a fast-paced environment, and are eager to contribute toward delivering a world-class experience for our members, this role is for you.
• Vision meets action: Defend our digital dominion, ensuring each byte and pixel remains under our vigilant guard.
• Unite and conquer: Partner with cross-functional teams, weaving a tapestry of security measures that is both intricate and robust.
  

• SIEM & XDR Analysis: Perform daily monitoring, triage and investigation of alerts and incidents, correlating endpoint, identity, email, cloud and network telemetry to identify threats, and escalate and support containment and response in line with the incident process.
• Responsible for ensuring security tools and technologies (SIEM, XDR, endpoint, email and cloud security) are optimised and functioning correctly, including data connector health, detection and alert tuning, and automation and response workflows.
• Assist in implementing new security technologies and onboarding new log sources and data connectors into the SIEM and XDR platforms.
• SaaS & Productivity Suite Security: Administer, monitor and review security controls across SaaS applications and the productivity suite (email, collaboration and file sharing), including identity and access controls (MFA and conditional access), email protection and anti-phishing, data loss prevention.
• Actively manage vulnerability scans and assessments and assess new vulnerabilities and security advisories for applicability and track remediation.
• Monitor and handle day-to-day security operations, including endpoint security baselines and policy conflicts, and produce reports and operational runbooks for alert investigation and response
• Conduct regular security compliance reviews.
• Collaborate with various departments across the business to assess, record, and manage security risks.
• Assist in maintaining and updating the security risk register.
• Licensing Luminary: Navigate the intricacies of security tooling and SaaS licensing, ensuring we're always in compliance and optimised for our needs.
• Firewall Security Oversight: Provide security oversight and guidance for firewall policies and configurations, working collaboratively with the responsible network and security operations teams to promote secure, consistent and least-privilege configurations across networking platforms.
• Cloud Security Assurance: Support the secure configuration and continuous assessment of cloud environments by reviewing security posture, identifying misconfigurations and control gaps, guiding remediation, and using automation and cloud security posture management capabilities to improve compliance and reduce risk.

We can’t live without…

• 3 - 5 years in cyber security with very strong experience and focus on the tools and platforms mentioned.
• Strong hands-on experience with SIEM and XDR platforms, including alert triage, incident investigation, query-based threat hunting, detection tuning and log source onboarding, alongside endpoint and cloud security tooling.
• Sound knowledge of SaaS and productivity suite security controls, such as identity and access management (MFA, conditional access), email security, data loss prevention, external sharing and guest access, application permissions and configuration baselines.
• A working understanding of security tooling and SaaS licensing.
• Azure Adeptness: Proven ability to cloud compute with a sound grasp of Azure Security services.
• Collaborative Character: Ability to work harmoniously with various teams, especially under the guidance of the Head of Cyber Security.
• Coding Capabilities: proficiency in at least one programming or scripting language like PowerShell. Ability to perform tasks via PowerShell.

We’d like you to have…

• Certification Commitment: Relevant certifications in IT, security and cloud e.g., SIEM/XDR analyst certifications, cloud security, AWS, CompTIA Network+.
• Cyber security certifications such as CompTIA Security+, CEH, or equivalent are strongly desired.
• A bachelor's degree in computer science, Cyber Security, or a related field is desirable.
• Adaptability (must be able to adapt to a fast paced, changing environment)
• Be curious (must be willing to succeed, seek opportunities to learn and grow)
• Have a winning mentality (must be willing to go over and above to achieve success)
• Must be motivated to achieve success.
• A commitment to making a difference in people’s lives.
• A Growth mindset
• The ability to work independently.
• Trustworthiness (must always act in doing the right thing)
• A drive to create moments of magic for our members.
• The ability to make decisions and take ownership and responsibility for the decision.
• Action orientation

 We’d love you to have…

• Firewall Familiarity: Hands-on experience with firewall management tools.
• Wellness knowledge, beyond the health club
• The ability to make quick and bold decisions.
• The ability to be agile.
• The ability to be collaborative.
• High Interpersonal skills (EQ)