Next Plc
Senior Security Analyst - InfoSec
How your CV stacks up
Upload your CV to see how well it fits this job role
?%
The Role
Working within the Information Security team, you will be a technical linchpin for Incident Response across the global estate. While you will respond to and investigate high-priority events, your primary focus will be the evolution of our defensive capabilities. You will bridge the gap between pure analysis and engineering.
You will drive growth and improvement in incident response automation, identifying opportunities to replace manual processes with high-fidelity SOAR playbooks and automated workflows. Furthermore, you will lead our detection creation efforts, identifying monitoring gaps and developing custom rules within our SIEM and EDR platforms to ensure we stay ahead of sophisticated adversaries.
As a Senior Security Analyst, you will act as a technical escalation point for the team, mentoring junior analysts in complex investigations and forensic collection. You will collaborate with Vulnerability Management and Engineering to ensure that "lessons learned" are not just documented, but are actively coded into our security controls through improved detection logic and automated response.
What You’ll Take On
- Detection Engineering: Proactively develop, test, and deploy custom detection rules and logic (SIEM, EDR, IDS) to identify emerging threats and TTPs specific to the retail and warehouse environment.
- SOAR Orchestration: Design and implement automated playbooks to streamline repetitive response tasks, reducing Mean Time to Respond (MTTR) and analyst fatigue.
- Advanced Incident Response: Lead the investigation of high-complexity security incidents, ensuring prompt containment, eradication, and recovery.
- Control Tuning: Systematically identify and eliminate false positives through rigorous rule tuning and correlation logic improvements.
- Forensic & Root Cause Analysis: Conduct deep-dive forensic investigations and use the findings to develop new preventative controls and detection signatures.
- Strategic Reporting: Maintain and evolve security metrics that demonstrate the effectiveness of our automation and the maturity of our detection coverage.
- Collaboration: Liaise with Security Engineering and 3rd-party partners to integrate diverse data sources into our monitoring pipeline.
- Operational Excellence: Maintain an awareness of the global threat landscape, translating threat intelligence into actionable detection content.
- Mentorship: Support the Team Leader in upskilling the analyst cohort, specifically in areas of scripting, regex, and logic-based investigation.
Reasons to use Rodeo
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
It searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
What You’ll Bring
Essential
- Experience: Proven Information Security experience in a SOC or IR environment, with a demonstrable shift toward security development or engineering.
- Technical Proficiency: Strong analytical skills within Windows and Linux environments, with the ability to parse complex logs and identify anomalous behaviour.
- Tooling: Experience configuring and maintaining SIEM, SOAR, and EDR platforms (e.g., creating custom dashboards, alerts, and automated workflows).
- Communication: Ability to remain calm under pressure and translate technical automation concepts into clear updates for management.
- Mindset: A "dev-first" approach to security—constantly seeking to automate manual tasks and improve detection fidelity.
Desirable
- Qualifications: Relevant industry-recognised security certifications (e.g., SANS GIAC, GCIA, GCIH, or CySA+).
- Scripting & Logic: Proficiency in at least one scripting language (e.g., Python, PowerShell, or Bash) and experience with Regex for log parsing and rule creation.
- Automation: Experience building API integrations between security tools to facilitate automated data enrichment.
- Cloud: Experience with detection and response within Cloud-based infrastructure (AWS or Azure).
- Frameworks: Familiarity with the MITRE ATT&CK framework and its practical application in rule development.
Get help with your application
Your very own career expert that helps elevate your application to the next level.
#LI-LE1 #LI-Hybrid
You know Next, but did you know we’re a FTSE-100 retail company employing over 44,000 people across the Next group. We’re the UK’s 2nd largest fashion retailer and for Kidswear we’re the market leader. At the last count we have over 450 stores, plus the Next Online and it’s now possible to buy on-line from over 80 countries around the world! So we’ve gone global!
- 25% off most NEXT, MADE*, Lipsy*, Gap* and Victoria's Secret* products (*when purchased through NEXT)
- Company performance based bonus
- Sharesave scheme
- On-site Nursery available; OFSTED outstanding in all areas
- 10% off most partner brands & up to 15% off Branded Beauty
- Early VIP access to sale stock
- Access to fantastic discounts at our Staff Shops
- Restaurants with great food at amazing prices
- Access a digital GP and other free health and wellbeing services
- Free on-site parking
- Financial Wellbeing - Save, track and enhance your financial wellbeing
- Apprenticeship - Grow and develop on the job whilst gaining a qualification
- Direct to Work - Discount online and instore, collect your items the next day for free from your place of work or local store
- Support Networks - Access to Network Groups to empower and celebrate each other
- Wellhub - Discounted flexible monthly gym memberships, with apps, PT sessions and more
Conditions apply to all benefits. These benefits are discretionary and subject to change.
We aim to support all candidates during the application process and are happy to provide workplace adjustments when necessary. Should you need support with your application due to a disability or long-term condition, feel free to get in touch with us by email headoffice_careers@next.co.uk (please include 'Workplace Adjustments' in the subject line), or call us on 0116 284 2486 and leave a voicemail.
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location