IT Security Analyst

Salary: £47,000 - 87,000 per year

Requirements:

• 3+ years experience in cyber security, security operations, incident response or a related technology role, ideally within a medium to large professional services environment.
• Practical experience of security monitoring, alert triage, threat detection, incident response, business email compromise, suspicious user activity and vulnerability management.
• Hands-on experience with modern security operations tooling, including SIEM/XDR, endpoint protection, cloud security, email security, data loss prevention, information protection, behavioural analytics and vulnerability management platforms.
• Good understanding of identity, access and cloud security, including Entra ID, MFA, Conditional Access, privileged access, SaaS logging, endpoint telemetry, evidence preservation and audit trails.
• Awareness of common attack techniques and frameworks, including MITRE ATT&CK, and relevant security, privacy and assurance frameworks such as ISO 27001, NIST CSF, Cyber Essentials and GDPR.
• Ability to manage security findings through to remediation, including prioritisation, risk acceptance, progress tracking and clear incident, risk and management reporting.
• Strong written and verbal communication skills, including the ability to explain technical security matters clearly to legal, business and IT stakeholders.
• Good judgement, personal organisation, professionalism and the ability to prioritise effectively under pressure.
• A pragmatic, service-focused approach.
• A desire to learn, develop and help keep the firm secure, resilient and trusted by its clients.

Responsibilities:

• Monitor, triage and investigate security alerts across our security monitoring and response platforms, including suspicious activity, root cause analysis and proportionate remediation.
• Support incident response activities, including containment, eradication, recovery, evidence preservation and clear documentation of findings and actions.
• Maintain and improve security monitoring, detection rules, alert workflows, operational playbooks, procedures and management reporting.
• Assist with vulnerability management, supplier and client due diligence returns, audit responses, evidence gathering and compliance monitoring against policies, standards and regulatory or client requirements.
• Provide practical, risk-based security advice for change advisory matters, projects, cloud services, new technologies and internal security queries.
• Support disaster recovery, business continuity and resilience testing.
• Work with colleagues across all offices to support a consistent global approach to security operations, incident response and alignment with our security standards and risk appetite.
• Maintain current knowledge of supported technologies, emerging cyber threats and security best practice.

Technologies:

• Cloud
• Support
• Security

More:

We are Withers, a law firm focused on people, performance and collaboration. For the past 130 years, we have supported some of the worlds most remarkable people and organizations at defining moments in their lives. We operate as one profit-sharing partnership globally, with 40% of our business from Europe, 40% from the US and 20% from Asia. We are united in our commitment to integrity, quality and collaboration, and we deliver tailored solutions built on trust. This is a permanent full-time IT role based in London with hybrid working, requiring a minimum of 2 days per week in the office. We offer a flexible benefits package including pension, private medical, season ticket loan, subsidised gym memberships, a lifestyle discount scheme and an on-site café. Our culture encourages initiative, big ideas and bold moves, and we want people to be themselves while working in a high-performance, globally collaborative environment.

last updated 35 week of 2026