- Support and defend the Clients IT estate by monitoring and responding to cyber threats that could impact ongoing business activities. You will be part of a small team of Security Operations Centre (SOC) analysts
- Monitoring IT systems and networks for potential breaches, and responding to alerts from information security tools.
- Assessing & responding to events of interests within SOC tooling, engaging with relevant teams (technical and business to understand and re-mediate.
- Developing and enhancing SOC incident response processes and capabilities (building playbooks and automating activities)
- Working with customers/projects to identify and ingest key log sources to mitigate protective monitoring risks
- Assessing new and existing log sources to produce monitoring/response content to enhance SOC capabilities (or remove events from log collection if volume greater than value)
- Representing SOC interests and supporting wider incident response activities during major incidents
- Incident reporting and stakeholder management.
This role will require working both independently and as part of a small team, with the chance to take on responsibility for liaison with specific projects, working with many teams within the organisation and liaison with partner organisations.
There will be an occasional requirement for UK travel
Essential |
|
· Keen interest in Cyber Security and understanding of key concepts and protocols · Professional curiosity and willingness to learn · Problem solving, analytical skills and good judgement · Strong communication skills · Ability to work well with and build lasting relationships with numerous teams · Ability to work well with and build lasting relations with numerous teams · Excellent interpersonal skills with the ability to explain technical problems to non-technical business stakeholders at all levels · Strong written and oral communication skills · Persistence and resilience to achieve objectives |
· Familiarity working with security related technologies including host based firewalls · Security qualifications eg GIAC, GCIH, GCIA, GCFA or similar · 2 years minimum experience in technical role(s) · Recent experience as a Cyber Security Analyst or incident responder |
Guidant Global is acting as an Employment Business in relation to this vacancy.
Proud member of the Disability Confident employer scheme