Senior Operational Security Analyst

The railway has seen nearly 200 years of technology and innovation that has transformed how we provide services to passengers and freight customers. Technology is continuing to transform the railway industry. Imagine an exciting environment where Digital, Data, and Technology (DDaT) are not just buzzwords but the driving force behind every operation, every decision, and every solution. As part of the DDaT directorate, you have a unique opportunity to enable our customers and industry partner with modern and transformative technology. From the day-to-day IT operations that keeps a national railway running, to the extensive delivery programmes that our helping to reshape the railway – we are at the forefront of all of it. We operate with a talented and passionate workforce, fostering empowered individuals and teams who understand that technology is not just a tool – it's the catalyst for progress, especially in an ever-demanding industry where change is a constant.About the role (External) Provide technical leadership and comprehensive security operations support service to Route Services IT and promote best practice across delivery units. Key Accountabilities

• Act as primary interface to delivery units to align and define working practice and workload within security operations.
• Act as primary interface with Network Rail’s suppliers, service providers and partners relating to the provision of operational security services
• Provide a comprehensive security operations support service focussed to the delivery units.
• Monitor and strive to improve the technical competence of IT staff associated with security in specified delivery units.
• Review and make recommendations on derogation and non-compliance to security related standards.
• Review and monitor progression of potential improvements to security related standards from specified delivery units; provide feedback to the originators.
• Provide advice and guidance to delivery units in the production of business focussed changes, renewal or replacement proposals and approve them as appropriate.
• Provide security operations input to IT projects and programmes.
• Monitor and analyse the quality and performance of security controls and instigate corrective action as required.
• Lead response to reported or suspected security incidents including collection and analysis of evidence to enable assessing and managing actions to mitigate future events and incidents.
  
  Significant industry experience specific to Information Security.
• Demonstrable knowledge of Networking, IT Infrastructure, IT Systems, and the Internet to include standard protocols, applications, and tools (TCP/IP, SMTP, Web Services & Applications, Database systems, Security vulnerability identification, Penetration Testing, password cracking, etc…)
• Demonstrable experience of working within a standards and service level driven environment
• Proven experience of administering technical security infrastructures
• Experience in coordinating response to security incidents in large businesses.
• Expert knowledge of Information Security principles, technology and threats
• Experience leading small teams in delivering technical security systems.
• Professional technical security certification or equivalent experience.
Desirable
• Experience administering standard Intrusion Prevention/Detection Systems (QRadar, IBM ISS Site Protector, Cisco/SourceFire IPS, Snort IP(D)S, etc…
• Experience with standard Vulnerability analysis tools (IBM ISS Security Scanner, Nessus, NMAP, OpenVas, Retina, Qualys, etc…)
• Experience administering standard SIEM tools (Arcsight, AlienVault, IBM QRadar, Splunk, Tripwire, Quest, NetIQ, etc…)
• Awareness and understanding of British and international standards for security management and control
• Experience of working in the rail industry
We are committed to a diverse workplace enriched with representation from diverse cultures, backgrounds and skills. We pride ourselves on creating an environment where difference is embraced, and individuals can thrive. We recognise that the success of the team is dependent on a multi-cultural, multi-disciplined group of individuals, aligned to deliver successful solutions.

At Network Rail, we have a number of employee networks to reflect our diverse population and help to raise issues to the wider workforce and support their membership and support our Everybody Matters strategy, led by our central Diversity & Inclusion team. We have Diversity & Inclusion Champions who take part and lead on many activities, to drive through more initiatives to support an inclusive environment for all its people and promote a professional and positive working environment.

Band & Salary: Band 3C We’re an organisation where people matter. We matter to millions. We offer excellent benefits, including: Generous annual leave (28 days plus statutory days), with the option to buy/sell days. Defined benefit pension scheme. 75% subsidy on rail and underground season tickets. Up to 75% off leisure travel for you and your family (subject to terms and conditions) ️ Interest-free travel loan for train and car park season tickets. Discounts at stations with your Network Rail pass. Flexible/hybrid working arrangements. ️ Volunteer leave to make a positive impact. Healthcare Scheme, GymPass discounts, Cycle to work plus more. We offer generous maternity, paternity, and adoption leave to support our employees during significant life moments We are proud to be recognised as a Times Top 50 Employer for Gender Equality for the third year in a row. Our role is to run a safe, reliable and efficient railway, serving customers and communities. We exist to get people and goods where they need to be and to support our country’s economic prosperity. Safety is our number one priority.