Senior Security Operations Analyst to join a global security operations and incident response team based in London. In this highly critical role, the Senior Security Operations Analyst will be responsible for monitoring and analysing security incidents, responding to threats in real-time, and ensuring the integrity of all systems and platforms. Your expertise will help identify vulnerabilities and enhance the company’s security posture through proactive measures and collaboration with cross-functional teams. This position requires experience in Linux, a keen analytical mindset, a strong understanding of security technologies, and the ability to thrive in a fast-paced environment.
What's on offer to you?
* Working with a Global organisation
* Cutting edge financial technology
* Flexible working
What You Will Be Doing
* Working closely with the SOC Manager across daily activities of the Security Operations Center (SOC) to ensure Service Level Objectives are achieved.
* Continuously monitoring security alerts and incidents using SIEM tools and other security technologies.
* Creating detection use cases in the SIEM, analysing security event data for proactive threat hunting, and conducting research on the latest threats and vulnerabilities to enhance incident response readiness and capabilities.
* Responding to security incidents, performing initial analysis and escalation as necessary.
* Participating in incident response planning and execution, ensuring timely containment and remediation of security breaches.
* Researching and analysing emerging threats and vulnerabilities to adapt security measures accordingly.
* Documenting security incidents, identifying gaps from incidents and recommending improvements, developing and maintaining incident response plans and SOPs.
* Preparing detailed reports for stakeholders on security incidents and trends.
* Working closely with cross functional technical teams to ensure the security of systems and data.
* Participating in the on-call rotation for after-hours coverage, which include responding to security incidents, performing containment and forensic investigations.
What You Will Need to Succeed in This Role
* BS/BA degree in Cyber Security/Computer Science or equivalent combination of related work experience desired.
* Must have a good Linux background, ideally Linux Sys Admin
* CISSP, CISM, GCIA, GCIH, GCFE, GCFA, GREM, Splunk Power User and/or similar certifications is preferred.
* Verifiable experience in Security Operations and Incident Response.
* Experience in performing analysis with SIEM technologies such as Splunk and/or Google Chronicle.
* Experience in performing proactive and reactive threat hunting using MITRE ATT&CK or similar frameworks.
* In-depth understanding and working knowledge of security appliances/tools such as host-based and network-based IDS/IPS, WAF, EDR, etc.
* Very strong understanding of networking protocols, operating systems and cyber security concepts and technologies.
* Experience in forensic tools and malware analysis is a plus.
* Experience with Cloud environments such as AWS/GCP/Azure is a plus.
* Ability to work across different regions in a process/procedure driven organisation.
* Excellent verbal and written communication and presentation skills.
Senior Security Operations Analyst | SOC | Cyber | Linux | CISSP | Hybrid