SOC Analyst L3 Role

Forming part of the SOC within the Global Information Security team, reporting to the SOC Manager based in the United Kingdom. The successful candidate will be responsible for responding to global cyber security related incidents ensuring the ongoing protection of the organization’s data, people and systems. There is no shift work associated with this position.

 Key Responsibilities:

·       Lead security detection and response activities with your knowledge and expertise.

·       Analyse multiple security data sources to determine where malicious activities are occurring and respond accordingly.

·       Identify missing controls and adjust security tooling to provide compensation or remediation.

·       Work with IT technical teams to deliver Information Security services and improvements.

·       Mentor Security analysts though security events and incidents and help shape their development to become the next generation of cyber security professionals - Assist with management information creation to provide context to several oversight boards

·       Proactively perform threat hunting activities

·       Support an On-Call rota, which is currently once every 3 weeks.

The knowledge, experience, and qualifications you need

·       Familiar with SIEM tools and able to effectively analyse and investigate s

·       Experience performing security assessments and using penetration testing tools

·       Experience of working with incidents either within a Security Operations Centre or Incident Response capacity

·       Excellent communication skills, both written and spoken English; with the confidence to brief management

·       Experience undertaking incident response and investigations within a Cloud environment

·       Proven experience in Computer Forensics, Malware Analysis or Network Investigations

·       Knowledge of incident management / ticketing platforms and maintaining a detailed incident timeline

·       Experience with EDR or forensic tools

·       Experience using a scripting language preferred

·       CCP, CISSP, OSCP or SANS/GIAC strongly preferred