Senior Information Security Analyst, UK

About Realty Income 

Realty Income (NYSE: O), an S&P 500 company, is a real estate partner to the world's leading companies. Founded in 1969, we invest in diversified commercial real estate and have a portfolio of over 15,450 properties in all 50 U.S. states and in seven countries in Europe. 

The European portfolio including the UK has grown significantly since our first international acquisition, a £429m 12-property portfolio from Sainsbury’s in 2019. In just five years the portfolio now includes investments of over €11bn, and 483 distinct properties.

Be a part of this growth story for a world leading Real Estate Investment Trust! As a trailblazer for the Info Sec team in Europe, this opportunity will empower your career, allowing you to take on additional responsibility and challenges, whilst you broaden your experience and skillsets.

Position Overview:

The Senior Information Security Analyst is responsible for enhancing our security posture, developing security processes and procedures, and responding to security incidents. This role will work with other teams across the organization to ensure that vulnerabilities are discovered and remediated in a timely manner to ensure the security of IT and development systems.

Key Responsibilities:

Security Operations and Monitoring

• Monitor security alerts, investigate incidents, and respond to threats in a timely manner.
• Collaborate with the Security Operations Center to respond to critical incidents and enhance the tools for better detection and alerting.
• Complete assigned ServiceNow incidents and tasks within the defined SLAs.
• Implement, manage, and optimize new and existing security tools, including but not limited to Microsoft Defender, Zscaler, and Okta.
• Work with IT and development team members to ensure essential security and operational logging is being collected and analyzed and relevant security alerts are being generated.
• Automate processes to reduce manual task delivery and enhance process delivery.

Vulnerability Management

• Collaborate with IT and development teams to detect and remediate vulnerabilities across the enterprise in alignment with defined SLAs.
• Understand current and emerging security threats and assist in the design of security tools to mitigate threats across the enterprise.
• Conduct regular threat hunt activities and report findings to leadership.

Security Governance and Compliance

• Ensure all work follows relevant security standards and regulations, including SOX, NIST, GDPR, CPRA, and other industry-specific requirements.
• Participate in annual security assessments and audit activities.
• Develop and implement Standard Operating Procedures and other documentation as it relates to Information Security processes and best practices.
• Participate in the Security Awareness program to promote a culture of security throughout the organization.

REQUIRED QUALIFICATIONS:

Knowledge, Skills, and Abilities:

• Suitable experience in an Information Security role.
• Some relevant experience in a technical IT role (System Administration/Network Administration/DevOps).
• Knowledge of security frameworks and regulatory compliance standards (NIST CSF, SOX ITGC, GDPR, MITRE ATT&CK, etc.)
• Experience with common industry SIEM and vulnerability management platforms.
• Experience maintaining the Microsoft Defender platform and other Microsoft security products.
• Ability to rank and prioritize vulnerabilities and security recommendations appropriately within the context of the infrastructure and business processes.
• Experience maintaining identity and access management systems including PAM technology and other authentication and authorization control platforms.
• Experience with Incident Response best practices. 
• Knowledge of cloud security best practices related to AWS and Azure cloud services.
• Knowledge of DevOps practices and secure software deployment frameworks.
• Knowledgeable of Data Loss Prevention (DLP) concepts and techniques as well as other data protection practices.
• Working technical knowledge of IT systems, including Active Directory, Microsoft 365, and Windows OS.
• Excellent written and verbal communication skills including the ability to present findings and risks to senior leadership.
• Strong analytical and problem-solving skills.
• Ability to work independently, take initiative, and manage workload with minimal supervision.
• Hybrid working arrangements, in the office Tuesday / Wednesday / Thursday
• Make yourself available outside of normal working hours for security incidents

Education:

• Bachelor’s degree in information security or related field or equivalent; combination of education and experience.
• Must have Cybersecurity certification(s) (CISSP, Sec+, CCSP, CEH) or equivalent

Our Mission & Values

For more than 50 years, Realty Income has been guided by our mission to invest in people and places to deliver dependable monthly dividends that increase over time. We do this by nurturing long-term, meaningful relationships that enable people to achieve a better financial outlook. We understand that when individuals succeed financially, they are able to provide for their families, support local businesses and pursue their greatest ambitions—creating a lasting positive impact on communities.

Realty Income is committed to diversity and inclusion and welcomes all applicants regardless of age, disability, gender reassignment, marriage and civil partnership, pregnancy and maternity, race, religion or belief, sex, sexual orientation or educational background.