Experian Ruddington, England, United Kingdom
Cyber Incident Response Lead
Experian Ruddington, England, United Kingdom
Get AI-powered advice on this job and more exclusive features.
Sign in to access AI-powered advices
Continue with Google Continue with Google
Continue with Google Continue with Google
Continue with Google Continue with Google
Continue with Google Continue with Google
Continue with Google Continue with Google
Continue with Google Continue with Google
Company Description
Internal Grade D
Experian is a global data and technology company, powering opportunities for people and businesses around the world. We help to redefine lending practices, uncover and prevent fraud, simplify healthcare, create marketing solutions, and gain deeper insights into the automotive market, all using our unique combination of data, analytics and software. We also assist millions of people to realise their financial goals and help them save time and money.
We invest in people and new advanced technologies to unlock the power of data. As a FTSE 100 Index company listed on the London Stock Exchange (EXPN), we have a team of 22,500 people across 32 countries. Our corporate headquarters are in Dublin, Ireland.
Find out what its like to work for Experian by clicking here
Job Description
As a member of Experian's Global Security Office (EGSO) / Cyber Fusion Center (CFC) you will respond, contain, escalate, investigate, and coordinate mitigation of security events relative to anomalies detected and escalated by the Cyber Fusion Centre (CFC) according to Experian's Incident Response Plan. This team member will join a new, growing team of specialized, advanced responders to support escalations of complex or prioritized matters from Experian's existing 24x7 security monitoring and response functions responsible for responding to and analysing security incidents involving threats targeting Experian information assets.
These threats may include phishing, malware, network attacks, suspicious activity. Also, you will involve working with end-users, partners, technical support teams, and management to ensure remediation and recovery from these threats.Use analytics & data collected from endpoints, environmental logging, and a variety of other sources to maximise containment and eradication of threats, while expediting recovery of the business.
Please note you will have a regular Monday – Friday schedule and expectation to participate in on-call schedule or work outside of normal work hours to manage cybersecurity incidents.
You will report to the CFC Senior Director of Incident Management and Security Operations.
Main Responsibilities include:-
* Conduct advanced incident response activities to investigate and contain complex and larger-scale cybersecurity matters (such as potential major severity incidents)
* In the event of investigative matters requiring additional analytical support from teams such as Forensics and Cyber Threat Hunt workstreams across the teams and hold responsibility for expressing the CFC's overall understanding of the timeline of attacker activity so that appropriate containment and remediation actions can be coordinated
* Respond to Security to cyber security events and alerts associated to threats, intrusions, and compromises per any applicable SLOs.
* Manage multiple cases related to security incidents throughout the incident response lifecycle; including Analysis, Containment, Eradication, Recovery, and Lessons Learned.
* Maintain case documentation, including notes, analysis findings, containment steps, and cause for each assigned security incident.
* Maintain an understanding of common Operating Systems (Windows, Linux, Mac OS), Security Technologies (Anti-Virus, Intrusion Prevention), and Networking (Firewalls, Proxies)
* Interpret device and application logs from a variety of sources (e.g. Firewalls, Proxies, Web Servers, System Logs, Splunk, Packet Captures) to identify cause and determine next steps for containment, eradication, and recovery.
* Provide Advanced Support to analysts (Logs review, IP Block question).Mentor other analysts (process question, tool usage)
Qualifications
* Must have knowledge of network protocols (TCP/IP, UDP, ICMP), standard protocols (HTTP/S, DNS, SSH, SMTP, SMB), wireless networking, networking infrastructure, and network topologies (DMZ, VPN, WAN) and network technologies (WAF, IPS, Routers, Firewalls)
* Experience with commercial & opensource SIEMs, full packet capture tools, and network analysis tools (Splunk, Wireshark, SOF-ELK)
* Have a demonstrated knowledge of common intrusion methods and cyber-attack tactics, techniques, and procedures (TTPs).
* Exhibit skills using common Incident Response and Security Monitoringapplications such as SIEM (Splunk), EDR (FireEye HX, CrowdStrike Falcon, McAfee mVision EDR.), WAF, IPS
Additional Information
Benefits package includes:
* Flexible work environment, working hybrid or in the office if you prefer.
* Great compensation package and discretionary bonus plan
* Core benefits include pension, bupa healthcare, sharesave scheme and more
* 25 days annual leave with 8 bank holidays and 3 volunteering days. You can purchase additional annual leave.
Experian is proud to be an Equal Opportunity and Affirmative Action employer. Innovation is an important part of Experian's DNA and practices, and our diverse workforce drives our success. Everyone can succeed at Experian and bring their whole self to work, irrespective of their gender, ethnicity, religion, colour, sexuality, physical ability or age. If you have a disability or special need that requires accommodation, please let us know at the earliest opportunity.
Find out what its like to work for Experian by clicking here
Experian Careers - Creating a better tomorrow together
Find out what its like to work for Experian by clicking here
Seniority level
* Seniority level
Mid-Senior level
Employment type
* Employment type
Full-time
Job function
* Job function
Information Technology
Referrals increase your chances of interviewing at Experian by 2x
Get notified about new Lead jobs in Ruddington, England, United Kingdom.
Nottingham, England, United Kingdom 1 week ago
Manager, Technical Services, Dairy, Europe
Heanor, England, United Kingdom 5 days ago
Business Development Manager - Remote (Babington)
Derby, England, United Kingdom 1 month ago
Regional Account Manager / Business Development Manager - Ski
Enderby, England, United Kingdom 4 weeks ago
Loughborough, England, United Kingdom 6 days ago
Heanor, England, United Kingdom 1 week ago
Nottingham, England, United Kingdom 1 week ago
Derby, England, United Kingdom 2 days ago
Customer Success Manager, Laser Scanning, EMEA, UK based (F/M/D)
Nottingham, England, United Kingdom 2 weeks ago
Loughborough, England, United Kingdom 3 weeks ago
Loughborough, England, United Kingdom 19 hours ago
Derby, England, United Kingdom 2 weeks ago
Nottingham, England, United Kingdom 3 months ago
Management Systems Auditor - Large Managed Accounts (North)
Nottingham, England, United Kingdom 1 week ago
Leicester, England, United Kingdom 1 day ago
Loughborough, England, United Kingdom 3 weeks ago
Derby, England, United Kingdom 3 months ago
South Witham, England, United Kingdom 1 week ago
Volunteer Become a Trustee with LitdriveUK | LitdriveUK
Loughborough, England, United Kingdom 1 week ago
South Derbyshire, England, United Kingdom 3 hours ago
Volunteer Bid Writer 2025 | The Community Revolution CIC
Nottingham, England, United Kingdom 6 days ago
Volunteer Fundraiser and Trustee for Selective Mutism Charity Needed | SMiRA, Selective Mutism Information and Research Association
Leicester, England, United Kingdom 2 weeks ago
Volunteer Trustee with Fundraising, Legal, 3rd Sector or Education Experience to Join Board | Life Skills Education
Nottingham, England, United Kingdom 2 weeks ago
Nottingham, England, United Kingdom 1 week ago
Nottingham, England, United Kingdom 2 days ago
Nottingham, England, United Kingdom 2 months ago
We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.
#J-18808-Ljbffr