> Markdown version of [/jobs/ext/1961595-it-security-analyst](https://www.wearedevelopers.com/jobs/ext/1961595-it-security-analyst). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IT Security Analyst - **Company:** Withersworldwide - **Location:** London, UK - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Audit Trail, Software as a Service, Cloud Computing Security, Cyber Security, Information Leak Prevention, Data Security, Disaster Recovery, Intrusion Detection and Prevention, Cloud Services, Security Information and Event Management, Software Vulnerability Management, Data Logging, Mitre Att&ck, Cyber Threat Analysis, Information Technology - **Published:** August 7, 2026 - **Apply:** https://candidate.witherscareers.com/320440WTHS ## About the Role We are looking for an experienced IT Security Analyst to support security operations across the firm's global technology estate. The successful candidate should have practical experience working with modern enterprise security platforms covering endpoint detection and response, extended detection and response, cloud security, threat monitoring, behavioural analytics and vulnerability management, and be comfortable engaging with IT teams, senior stakeholders and third-party vendors. Experience in a medium to large, multi-site professional services environment is desirable. Strong written and verbal communication skills are essential, including the ability to explain technical security matters clearly to legal, business and IT stakeholders. The role requires good judgement, personal organisation, professionalism and the ability to prioritise effectively under pressure. A pragmatic, service-focused approach is essential., * 3+ years' experience in cyber security, security operations, incident response or a related technology role, ideally within a medium to large professional services environment. * Practical experience of security monitoring, alert triage, threat detection, incident response, business email compromise, suspicious user activity and vulnerability management. * Hands-on experience with modern security operations tooling, including SIEM/XDR, endpoint protection, cloud security, email security, data loss prevention, information protection, behavioural analytics and vulnerability management platforms * Good understanding of identity, access and cloud security, including Entra ID, MFA, Conditional Access, privileged access, SaaS logging, endpoint telemetry, evidence preservation and audit trails. * Awareness of common attack techniques and frameworks, including MITRE ATT&CK, and relevant security, privacy and assurance frameworks such as ISO 27001, NIST CSF, Cyber Essentials and GDPR. * Ability to manage security findings through to remediation, including prioritisation, risk acceptance, progress tracking and clear incident, risk and management reporting. * Most important is a desire to learn, develop and help keep the firm secure, resilient and trusted by its clients. ## Description * Monitor, triage and investigate security alerts across the firm's security monitoring and response platforms, including suspicious activity, root cause analysis and proportionate remediation. * Support incident response activities, including containment, eradication, recovery, evidence preservation and clear documentation of findings and actions. * Maintain and improve security monitoring, detection rules, alert workflows, operational playbooks, procedures and management reporting. * Assist with vulnerability management, supplier and client due diligence returns, audit responses, evidence gathering and compliance monitoring against policies, standards and regulatory or client requirements. * Provide practical, risk-based security advice for change advisory matters, projects, cloud services, new technologies and internal security queries. * Support disaster recovery, business continuity and resilience testing * Work with colleagues across all offices to support a consistent global approach to security operations, incident response and alignment with the firm's security standards and risk appetite. * Maintain current knowledge of supported technologies, emerging cyber threats and security best practice. This list of duties and responsibilities is not exhaustive. It is intended to describe the general content of, and requirements for the performance of this job, and as such, the role may also include the undertaking of additional tasks as required. ## Related Videos - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Resilient by Design: Building Robust Architectures in High-Stakes Financial Systems](https://www.wearedevelopers.com/videos/2106-resilient-by-design-building-robust-architectures-in-high-stakes-financial-systems) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) - [Build Delightful Mobile Experiences with Kotlin, Realm, and Atlas Device Sync](https://www.wearedevelopers.com/videos/694-build-delightful-mobile-experiences-with-kotlin-realm-and-atlas-device-sync) - [No Keys for the Robot: GitOps as the Control Plane for Autonomous Agents](https://www.wearedevelopers.com/videos/100095-no-keys-for-the-robot-gitops-as-the-control-plane-for-autonomous-agents) ## Related Articles - [Data Analyst Salary in the UK](https://www.wearedevelopers.com/magazine/278-data-analyst-salary-in-the-uk) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023) - [IT Salaries in UK](https://www.wearedevelopers.com/magazine/288-it-salaries-in-uk) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)