Information Security Analyst

Careers

This website uses cookies – small text files stored on your device, when you visit a website – including third party cookies to collect information about your browsing activities and improve the content, functionality and performance of our website. Out of these cookies, the cookies that are categorized as Necessary Cookies are stored on your browser as they are essential for the operation of the website. You may accept all cookies, or reject all cookies other than Necessary Cookies. If you visit us from a different device or browser, or clear cookies, then you may need to return to this screen to re-select your preferences. Note that rejecting some of these cookies may have an effect on your browsing experience. Please note that if you do not make a selection below, only necessary cookies will be set. You can learn more about the use of cookies on our website as set out in our Cookie Notice. You can learn more about our processing of your personal data by visiting our Privacy Statement.

NecessaryAlways Active

Necessary cookies are required to enable the basic features of this site, such as providing secure log-in or adjusting your consent preferences. These cookies do not store any personally identifiable data.

Functional

Functional cookies help perform certain functionalities like sharing the content of the website on social media platforms, collecting feedback, and other third-party features.

Analytics

Analytical cookies are used to understand how visitors interact with the website. These cookies help provide information on metrics such as the number of visitors, bounce rate, traffic source, etc.

Performance

Performance cookies are used to understand and analyze the key performance indexes of the website which helps in delivering a better user experience for the visitors.

Advertisement

Advertisement cookies are used to provide visitors with customized advertisements based on the pages you visited previously and to analyze the effectiveness of the ad campaigns.

Others

Other cookies are those that are being identified and have not been classified into any category as yet.

Reject All Save & Accept Accept All

Powered by

Skip to content

Careers

Information Security Analyst

London

Apply Directly

Job Summary

Gibson Dunn is a leading global law firm, advising clients on significant transactions and disputes. Our exceptional teams craft and deploy creative legal strategies that are meticulously tailored to every matter, however complex or high stakes. The firm’s work is distinguished by a unique combination of precision and vision.

Based in London, the Information Security Analyst is responsible for responding to events and alerts generated by information security technologies, user reported events and any activity, which is suggestive of a potential information security event/incident.

The Information Security Analyst is a hands-on technologist who has a high degree of expertise in the use of technologies used in the investigation of information security events and has a high level of expertise in performing security event analysis and incident response. The Information Security Analyst is a subject matter expert (SME) for all security event detection and response technologies. The scope of this position is firm wide and requires an understanding of all IT systems the firm uses and how they provide value to the business.

The Information Security Analyst works closely with other members of the Information Security Team in ensuring that the information security posture of the firm is maintained and takes a proactive approach in continually assessing the security of firm systems throughout their lifecycle, providing recommendations for enhancing security and adapting to new threats and vulnerabilities.

This role reports to the Director of Security Operations.

Responsibilities include:

• Serve as a primary escalation point for security events
• Serve as an SME for event/incident detection and response
• Analyze and respond to security events found internally or via the firm’s Managed Security Service Providers
• Review security context alerts and logs using the firm’s security information event management platform (SIEM) or other tools
• Build dashboards and custom SIEM queries as need to facilitate detection, response and other use-cases.
• Serve as an initial point of contact for help desk tickets assigned to the Information Security Team
• Promptly respond to requests for assistance from end-users and others regarding incidents or security concerns at the firm
• Escalate security events/incidents according to defined workflow and in accordance with any relevant SLAs
• Thoroughly document the results of security event/incident investigations
• Adhere to relevant policies, procedures, standards and security good/accepted practices
• Resolve problems independently and understand escalation procedure
• Respond in a timely manner to all requests for access or other security exceptions requiring approval or involvement from the information security team
• Maintain current security certifications and attend industry seminars and relevant continuing education events
• Monitor and investigate security events involving artificial intelligence, machine learning, generative AI, and large language model technologies.
• Identify and investigate potential misuse of AI technologies, including unauthorized AI services, sensitive data exposure, prompt injection, malicious content generation, and AI-assisted social engineering.
• Develop and maintain detection queries, correlation rules, dashboards, and response procedures for AI-related threats and anomalous activity.

Qualifications

• Ability to relate to non-technical users in user-friendly language
• Ability to understand or learn the technical implications of security threats
• Ability to manage multiple concurrent objectives or activities, and effectively make judgments in prioritizing and time allocation in a high-pressure environment
• Ability to gauge one’s strengths and limitations
• Ability to deal with changes and adapt to a changing environment
• Must demonstrate the ability to maintain strict confidentiality of the firm’s internal and personnel affairs
• Ability to work well with others, harness different skills and experience, and build a strong sense of team spirit
• Highly self-motivated and directed
• Ability to work in a multi-office environment and willingness to travel to other offices as required
• Ability to work effectively in a culturally and educationally diverse environment
• Possess excellent troubleshooting, problem solving, and verbal/written communication skills
• Ability to manage critical situations, and maintain solid relationships with colleagues and firm staff and attorneys
• Ability to anticipate problems, communicate them, and resolve if appropriate
• Ability to work independently and as part of a team
• Must have strong written/verbal communication skills
• Must be detail oriented with strong customer service skills
• Requires strong interpersonal and organization skills
• Take ownership of issues and responsibility for customer satisfaction and overall success of services provided
• Interface with a variety of customers in a polite, positive, and professional manner
• Familiarity with AI security concepts such as prompt injection, data leakage, model manipulation, insecure integrations, excessive agency, and adversarial use of AI.
• Ability to communicate AI-related security risks and technical findings clearly to both technical and non-technical audiences.

Experience

• University degree in a technology related discipline or 3 years of relevant experience
• 5-7 years of experience in a dedicated information security analysis role
• 3-5 years of experience in information technology in an area such as; networking, desktop engineering, programming, systems administration, help desk
• Strong critical thinking and problem-solving skills
• Practical experience with TCP/IP networking
• Significant experience with the Windows operating system and event logs
• Significant experience with and expertise in security event detection, analysis and incident response tools
• Significant experience with and expertise in conducting security event analysis and incident response.
• Significant experience and expertise in using security information event management platforms (SIEM) for searching and correlating events including; building complex searches and correlation rules
• Strong knowledge of networking concepts including; DNS, switching, routing and firewalls
• Experience investigating security events involving cloud applications, APIs, automation platforms, or AI-enabled technologies.
• Experience developing or tuning detections for emerging threats, including AI-assisted phishing, impersonation, malware, credential attacks, and social engineering.
• Experience using AI-assisted capabilities within security technologi