Risk Management jobs in United Kingdom

Vorboss is building London’s next-generation, business fibre network. This is a responsibility that we take seriously; we understand that for most businesses, reliable fibre internet is as important as heat, electricity, and water. We want to completely change the fibre network in London (and beyond) and we’re on the hunt for smart, talented people to join us. At Vorboss, we do the right thing - no matter what. Our unwavering focus on engineering excellence and unrivalled commitment to customer service is trusted by the most important organisations across the UK and Europe in the technology, pharmaceutical, financial, and e-commerce industries.

We’re proud to have earned one of the best reputations in the industry and it is essential to us that we maintain that reputation as we grow. Our team is tight knit and highly talented. We trust each other to do the right thing, take responsibility, and be a champion for our collective success.

We’re looking for talented, smart people to join us as we embark on this exciting period of growth. Our vision for Vorboss is to be ‘the best job that someone ever had’, regardless of how long they stay with us and promise to provide a supportive workplace based on respect and trust.

Reporting to the SOC Team Leader, the Junior SOC Analyst will play a pivotal role in safeguarding an organization’s information systems and assets. The analyst investigates and classifies security incidents, collaborating with senior SOC members and incident response teams to escalate and address potential threats. The role extends to maintaining detailed incident records, participating in continuous learning to stay abreast of evolving threats, and ensuring compliance with security policies.

(Please note that this list is not exhaustive)

• Actively monitor security alerts and events generated by various security tools, such as intrusion detection/prevention systems, firewalls, and security information and event management (SIEM) systems.
• Investigate and analyse security incidents to determine their nature and extent. This involves identifying and understanding potential security threats and vulnerabilities.
• Prioritise and triage security alerts based on their severity and potential impact on the organization. Classify incidents for further investigation.
• Installing, managing, and updating software on all systems and networks, ensuring adequate security measures are in place.
• Undertaking ad-hoc projects & other activities as required.

Day to Day:

• Alert Triage and Prioritisation: Evaluate incoming security alerts, prioritise them based on severity and potential impact, and conduct initial triage. Quick and accurate decision-making ensures that critical incidents are addressed promptly, reducing the risk of security breaches.
• Incident Investigation and Analysis: Dive into security incidents to understand their nature, scope, and potential implications. Conduct thorough analysis using available tools and resources to determine the appropriate response and containment measures. Document findings and recommendations for further action.
• Timely Incident Response: Execute incident response procedures promptly and effectively. Collaborate with senior analysts or incident response teams to implement containment strategies and remediation plans. The ability to respond rapidly is crucial in minimising the impact of security incidents.
• Documentation and Reporting: Maintain detailed and accurate documentation of all activities, including incident details, actions taken, and outcomes. Prepare monthly reports summarizing the status of ongoing incidents, key metrics, and any emerging trends. Clear documentation aids in knowledge transfer and contributes to continuous improvement.
• Security Tool Management and Optimisation: Assist in the management and optimisation of security tools, such as SIEM systems and intrusion detection/prevention systems. This includes monitoring the performance of these tools, fine‑tuning configurations to enhance detection capabilities, and staying informed about updates or new features.

• Proven 1+ years’ experience in a live security monitoring environment (on-premises or cloud).
• Proven ability to work independently & collaboratively as part of a bigger team.
• Exposure to tools such as Wazuh, Kibana or Microsoft Sennitel.
• Exposure to vulnerability assessments, penetration testing & generating reports.
• Experience with Linux & Windows operating environments.
• Proven experience with National Institute of Standards & Technology (NIST) security controls, governance, incident & risk management processes.
• Demonstrated proficiency in preparing high quality documentation and presentation skills.

• Bachelor's degree in a relevant field such as Computer Science, Information Technology, Cybersecurity, or a related discipline. We may consider candidates with equivalent work experience or certifications in lieu of a degree.
• Proficiency in security tools and technologies, including SIEM solutions, intrusion detection/prevention systems, firewalls, antivirus software, and endpoint detection and response (EDR) tools.
• Entry-level certifications such as CompTIA Security+, Cisco's CCNA CyberOps, or EC-Council's Certified Ethical Hacker (CEH).

We believe in taking care of our staff both mentally and physically and in order to support this we offer a range of benefits that you can access.

• Employee Share Plan – Once an employee at Vorboss, we offer the opportunity to become a shareholder in the company.
• Company pension scheme.
• 25 days of annual leave allowance that increases with years served (excluding bank holidays).
• Access to Spill, our mental health support partner.
• Cycle to work scheme.
• Half price gym memberships through the healthcare provider.
• Free eye test.
• Hastee app, to help manage your salary and finances.

(*Terms & conditions apply - amount possible to buy is capped and contingent on pre-existing variables.)

We aim to be an equal opportunities employer and we are determined to ensure that no applicant or employee receives less favourable treatment on the grounds of gender, age, disability, religion, belief, sexual orientation, marital status, or race, or is disadvantaged by conditions or requirements which cannot be shown to be justifiable.

We aim to create a working environment free of bullying, harassment, victimisation, and unlawful discrimination, promoting dignity and respect for all, and where individual differences and the contributions of all staff are recognised and valued.

This commitment includes training managers and all other employees about their rights and responsibilities under the equality, diversity, and inclusion policy. Responsibilities include staff conducting themselves to help the organisation provide equal opportunities in employment, and prevent bullying, harassment, victimisation, and unlawful discrimination.

Vorboss promotes step‑free access at our main headquarters, whilst taking into consideration physical barriers employees might face across all other sites.