The Burberry Cyber Security Operations team is globally responsible for Security Monitoring, Incident Response, Vulnerability Management and Attack Surface Management. The Senior Cyber Security Analyst, reporting to Cyber Security Operations Manager, will be responsible for providing security monitoring, threat hunting, security automation and incident response services.
Responsibilities
* Identifying and developing security monitoring and automation use cases.
* Performing security alert analysis, threat hunting and investigation activities across multiple technologies to ensure that security incidents are identified in a timely manner.
* Carrying out assessment of security incidents.
* Supporting security incident response activities.
* Identification and research of external security threats.
* Providing continuous service improvement and development.
* Supporting and developing automated security reporting.
* Providing assurance of changes to security systems.
* Identification of security system status or security changes that are not in line with process.
* Working on projects focused on improving security improvements.
* Participation in a 24x7 security incident response on‑call rotation.
Qualifications
* Bachelors or Masters Degree in relevant Technology/IT Security subject.
* Relevant academic or industry certification such as CISSP, CEH, GIAC-GCIA.
* Passionate about security – keeps up to date with the latest news, trends and threats.
* Experience with the use of EDR, SIEM, SOAR tools to monitor and investigate attacks and other security events.
* Experience with security monitoring and incident response within a Cloud environment.
* Experience with Malware Analysis and Virtualized Malware Environments.
* Scripting knowledge (PowerShell, Python, VB, YARA, etc.).
* Excellent analytical and problem‑solving capabilities.
* High attention to detail.
* Strong verbal & written communication skills.
* Uses discretion in identifying and resolving complex problems and assignments.
* Determines when issues should be escalated to a higher level.
Desirable
* Experience with Google SecOps, Tanium, Defender.
* Incident Management (CSIRT) Experience.
* SOC (Security Operations Centre) Experience.
* Security knowledge in one or more of the following areas: Windows (server and desktop), Unix (multiple flavours), macOS, Office 365, Azure, AWS.
* Security Automation Experience along with Python and YARA.
* Web Application Security knowledge (web-based attacks).
* Malware analysis.
* Retail sector experience.
J-18808-Ljbffr