Information Security Analyst

Participate in security incident response activities, including investigation, containment, eradication, recovery, and post-incident analysis.

Monitor security alerts from different sources (SIEM, EDR, cloud logs) and respond to security incidents promptly.

Develop and maintain security documentation, including procedures, runbooks, and incident response plans.

Conduct vulnerability assessments and support penetration testing remediation efforts.

Contribute to the development and delivery of security awareness training for employees, being a domain authority for security best practices.

Work with all IT teams to ensure security is integrated into all aspects of our infrastructure and applications at the design and requirements stage.

Find opportunities for automation and improvement of Rainforest Alliance security posture, including exception handling of threat alerts, patches, system and software vulnerabilities.

Create weekly and monthly reporting packs, demonstrating rolling position on vulnerabilities, threats, progress against plan on important security initiatives.

Conduct risk assessments and participate in security design reviews.

Administer and configure Azure security services (e.g., Azure Security Centre/Defender for Cloud, Defender for Endpoint, Azure Network Security Groups, Azure Key Vault, Azure Firewall).

Monitor Azure environments for security threats, vulnerabilities, and misconfigurations.

Make sure security best practices within Azure IaaS and PaaS deployments, audit Azure resources for compliance.

Lead and secure Entra ID (Azure Active Directory) including Conditional Access Policies, Multi-Factor Authentication (MFA), Identity Governance, and Privileged Identity Management (PIM).

Monitor Entra ID for suspicious activity and unauthorised access attempts.

Secure Microsoft 365 services (Exchange Online, SharePoint Online, OneDrive, Teams), looking after user access, data governance, and threat protection within the Microsoft 365 ecosystem.

Configure and improve Microsoft 365 security features (e.g., Defender for Office365, Data Loss Prevention (DLP), Microsoft Purview + compliance policies).

Develop, implement, and maintain security baselines and hardening standards for endpoints (Windows, macOS, Linux).

Configure and handle Microsoft Entra Domain Services based Group Policies (GPOs) and equivalent Mobile Device Management (MDM) solutions for security settings.

Ensure secure configuration and patch management across all endpoints.

Administer, configure, and optimise our XDR service, currently Crowdstrike Falcon but planned for migration to Microsoft Defender XDR.

Monitor alerts and dashboards for endpoint security incidents and threats, perform threat hunting and incident response activities using CrowdStrike data.

Develop and refine custom detections and response playbooks within CrowdStrike.

Minimum of 3 years of hands-on experience in an information security role.

Experience with Azure security services and best practices.

Experience with Entra ID (Azure Active Directory) and Microsoft 365 security administration.

Experience with endpoint hardening methodologies and implementation.

Hands-on administration and operational experience with CrowdStrike Falcon platform.

Experience with security incident response and threat hunting.

Experience with networking concepts.

Familiarity with security frameworks (e.g., Cyber Essentials, NIST, ISO 27001).