Security Operations Analyst

How You’ll Support Our Mission 

ESO’s teams are growing, and our software is in demand globally by firefighters, paramedics, hospitals and governments. To meet this demand, we are building an industry-leading cyber security team in Belfast to protect our customers and data from a variety of fast moving and constantly evolving threats. 

We are looking for a Security Operations Analyst to join our Belfast team. This role will work alongside our security, IT, development, platform and business teams. 

You will be helping to review and respond to incidents and alerts, assisting users in how to operate securely and ensuring that our controls cover the entire technology estate. 

We want our colleagues throughout ESO to operate securely, but with a high degree of autonomy and minimal security constraints, so we will be implementing automated controls, approvals and governance to enable this.  You will be part of a high functioning, motivated and forward-thinking team.  You have the chance to join a growing and passionate team, working on critical products, whilst being supported with training opportunities and mentoring. 
 

What You’ll Be Doing – the day to day 

• Ensuring controls are successfully deployed throughout the technology estate 

• Reviewing the alerts generated by the security tools and controls 

• Helping to create policies and procedures for responding to alerts, events and incidents 

• Monitoring the security compliance of systems 

• Maintain security policies and procedures for IAM  

• Helping ESO colleagues get answers to security questions 

• Be a key part of our cyber security team, with tangible impact on the security of our systems.  

• Respond to security and compliance issues generated via analysis or automated tools 

• Work collaboratively cross-team, to impart your expertise across the organisation. 

• Be in the detail, working shoulder-to-shoulder with our technology teams. 

Who You Are - some of the essential things required to be successful in the role 

• At least 3 years’ experience in a technology or security role, including Microsoft technologies 

• Your experience should include; 

• Securing systems by deploying patches and antivirus products 

• Working with network switches, firewalls and wireless access points 

• Working with toolsets such as vulnerability management, SIEM, PAM, IDS/IPS, EDR or DLP platforms 

• Familiarity with IAM best practices, including Multi-Factor Authentication (MFA), Conditional Access, and Identity Governance. 
• RBAC configurations and understanding of how RBAC integrates with various services

 You should also: 

• Be well versed in Microsoft and Mac Operating systems 

• Have a passion for what you do and understanding how your work impacts ESO’s success 

• Be self-motivated to get answers and understand root causes 

Who You Are – it’s desirable if you have any of the following 

• Experience with Microsoft Defender Endpoint, SIEM (Securonix, Sentinel), Tenable or Azure Defender for Cloud 

• AZ-900/SC-900 

• SC-200 
• SC-300