Security Operations Analyst, TUI

TUI

Location:

Portugal, Lisbon

Category:

IT - Software Development

Contract Type:

Employment contract

Salary:

Not provided

Save Job

Apply Position

Job Description:

As a Security Operations Analyst within our Information Security Team you will perform a crucial role in designing, building, and maintaining our detection and response capabilities. TUI is focused on accelerating the development of digital capabilities across the entire holiday lifecycle to delight our customers. At the same time, everyone working on behalf of TUI protects information in all its forms so that we avoid harm; meet our customers’, colleagues’ and shareholders’ expectations and comply with national and international legislation. At TUI, information security is part of everyone’s job.

Job Responsibility:

Promote a security first culture at TUI
work with resolver teams to ensure that information security events and incidents are automatically generated, appropriately addressed and closed in local ticketing systems and ensure reporting on key performance indicators and service levels
adopt a pragmatic and ‘can-do’ attitude in everything you do, partnering with your colleagues across the TUI businesses and IT functions worldwide
build strong working relationships and influence others to do the right thing to Protect our Smile
monitor for alerts from security tools, including, but not limited to, security analytics platforms, automation tools, ticket management systems, user-reported alerts, and others
triage security alerts, including initial analysis to determine the validity of alerts and gather additional context
use network and host security tooling to perform additional investigation
work the full incident lifecycle from detection, investigation, response, to remediation for security alerts
contribute to the further development, maintenance, and standardization of SOC processes, policies, and procedures
work with other IT/security teams to identify areas for improvement around detection, investigation, and response
research common and topical commodity and APT-based malware tactics and techniques in preparation for future attacks
provide feedback on detection rules to help tune security tools and minimize false positives
participate in SOC working groups and sub-teams to help generate and execute on new ideas for content, technology advancements, and proactive defence improvement projects.

Requirements:

Demonstrable deep experience of design and build of systems integration, ideally in a security operations environment
strong technical and IT operations background, with strong experience
experience of working with Splunk or similar SIEM platforms, Service Desk systems and security monitoring tools desirable with experience in designing and developing these platforms
familiarity and experience with Windows, macOS, Linux, and Unix operating systems
computer networking and cloud technology fundamentals
understanding of Active Directory, LDAP, IDaaS (AAD)
rudimentary security knowledge and awareness of firewalls, proxies, antivirus, and IPS/IDS concepts
experience scripting in Python or PowerShell
experience using Microsoft Excel and Word
excellent written and verbal communication skills
good interpersonal skills so that you can work well with and influence your information security, and IT operations colleagues from around the world
empathy to respond with understanding and care in the event of a security incident
a process-oriented mindset, with the ability to follow standard operating procedures and alter such plans as the occasion arises
creativity to think outside the box and develop new solutions to complex problems, especially in the event of new, unexpected security incidents
communication skills to clearly relay technical information to individuals with different levels of technical competence
adaptability and flexibility to react quickly and respond completely to security incidents
attention to detail to ensure complete response and remediation in the event of an incident.

What we offer:

Attractive remuneration, bonus opportunity, exclusive travel perks & discounts, extensive health & wellbeing support, and more
flexible working: Work is something you do, not somewhere you go. We encourage a healthy work-life balance and offer hybrid or remote working models
opportunities to upskill, reskill and grow your career
access the TUI Tech Learning Hub to level-up and reach your ambitions
participate in our tech communities and collaborate on global projects and teams
get involved with incredible local charity and sustainability initiatives like the TUI Care Foundation and the Sustainable Tech Community.

Additional Information:

Job Posted:

March 24, 2025

Employment Type:

Fulltime

Work Type:

On-site work

View All Jobs In This Company

Job Link Share:

Security Operations Analyst

TUI

Location: Portugal, Lisbon

Category: IT - Software Development

Contract Type: Employment contract