IT Security Analyst

Leigh Day And Co; Manchester; Hybrid; GBP 40,000 - 60,000; Full time

Job summary

A leading law firm in the UK is seeking an experienced IT Security Analyst to enhance security controls and manage incidents. Responsibilities include maintaining email security, overseeing vulnerability management, and promoting information security awareness. Ideal candidates will have strong IT security experience, relevant certifications, and excellent analytical skills. The position offers hybrid working, generous leave, enhanced pension contributions, and health benefits, fostering a diverse and inclusive environment.

Benefits

Hybrid working model

29 days annual leave

Enhanced pension contributions

Life assurance

Cycle to Work scheme

Discounted gym membership

Enhanced maternity & paternity pay

Electric car scheme

BUPA private health insurance

Qualifications

• Proven experience in IT security across various domains.
• Strong ability to triage alerts and provide recommendations.
• Solid understanding of firewalls and endpoint protection.

Responsibilities

• Maintain email security against phishing and malware.
• Lead incident response for security breaches.
• Monitor network traffic and identify vulnerabilities.

Skills

IT security

Incident response

Network security

Vulnerability management

Email security

Mobile device management

Analytical skills

Communication skills

Education

Relevant IT security certifications (CompTIA Security+, GCIH, CEH, CISSP)

Tools

Mimecast

CrowdStrike

Rapid7

Job description

We are seeking an experienced and detail-oriented IT Security Analyst to join our team. In this role, you will play a vital part in safeguarding the organisation's information assets and infrastructure. You will be responsible for managing and enhancing security controls, responding to incidents, and ensuring compliance with regulatory requirements. Key areas include email security, incident response, threat analysis, network security, vulnerability management, auditing, mobile device management, and handling security tickets. You will also proactively monitor systems, drive security awareness initiatives, and contribute to maintaining and improving the Firm's overall security posture.

Key responsibilities

• Maintain robust email security solutions to protect against phishing, malware, and other threats.
• Lead incident response activities, including identification, investigation, containment, and remediation of security incidents.
• Analyse and triage security alerts from multiple sources, assess impact, and take decisive action.
• Monitor network traffic, identify vulnerabilities, and apply appropriate security measures.
• Oversee vulnerability management processes, including scanning, risk assessment, and patch management.
• Conduct comprehensive audits of security controls, policies, and procedures; recommend and implement improvements.
• Manage mobile device security policies and configurations, ensuring compliance and protection of endpoints.
• Administer and optimise the security ticketing system to resolve issues efficiently and maintain accurate records.
• Continuously monitor security systems, logs, and events to detect and mitigate potential threats.
• Promote information security awareness through training, communication, and stakeholder engagement.

What you'll bring

• Proven experience in IT security, including email security, incident response, network security, vulnerability management, and mobile device management.
• Strong ability to triage alerts, conduct investigations, and provide actionable recommendations.
• Hands‑on experience with security tools such as Mimecast, Egress, CrowdStrike, and Rapid7 (preferred).
• Solid understanding of firewalls, Active Directory, TCP/IP, and endpoint protection technologies.
• Familiarity with patch management and system hardening practices.
• Ability to work under pressure, prioritise tasks, and adapt to a dynamic environment.
• Excellent analytical and problem‑solving skills with a proactive approach to threat mitigation.
• Strong communication and interpersonal skills for effective collaboration with stakeholders.
• Knowledge of security frameworks, best practices, and compliance requirements (e.g., GDPR, DPA, SRA).
• Relevant certifications such as CompTIA Security+, GCIH, CEH, or CISSP are highly desirable.

If you are proactive, driven, and passionate about IT security, we invite you to apply for this exciting opportunity. Join our team and help us strengthen and maintain a secure environment for the firm.

About Leigh Day

We are a top 100 law firmcommitted to claimant‑only cases, ensuring that individuals have the same access to justice as the UK Government and large corporations. We're not afraid to take on difficult and challenging cases involving medical negligence, serious personal injuries, discrimination in the workplace, defective products and human rights abuses in this country and overseas.

• Hybrid working (typically 2 days from home for a full time worker)
• 29 days annual leave (excluding public holidays)
• Enhanced pension contributions
• Life assurance 4 x salary
• Cycle to Work scheme
• Discounted gym membership
• Enhanced maternity & paternity pay
• Electric car scheme
• BUPA private health insurance

Commitment to equality, diversity, and inclusion

Leigh Day is committed to the principles of equality, diversity, and inclusion. We value the diversity of our colleagues, our clients and the third parties with whom we work. We seek to create an environment where everyone feels included and valued for their unique characteristics, skills and abilities and supported in their needs and responsibilities.

We welcome applicants from all sections of the community regardless of age, sex, gender (or gender identity), ethnicity, disability, sexual orientation and transgender status. Please let us know if you would like to discuss any reasonable adjustments at any stage of the application or recruitment process. There is an option to detail this on your application form, however, please just get in touch should you wish to discuss this prior to formally submitting an application. Please note all conversations or disclosures are treated in the strictest confidence.