Attack Monitoring Analyst (GSOC)
On-siteLondon, England, United Kingdom
London, England, United KingdomOn-siteFull TimeFinancial ServicesEnterprise
Full TimeEnterpriseFinancial Services
Job Summary
Triage security events and respond to cyber incidents using established playbooks and SIEM tools like Splunk or QRadar. Operate monitoring dashboards to identify, respond, and remediate cyber events generated through security technologies. Research and collect threat intelligence to enhance the SOC's detection capabilities, while developing or improving run books and use cases based on modern attack knowledge. Stay current with vulnerabilities, attack techniques, and countermeasures to continuously improve defensive capabilities. Follow a 1200hrs to 0000hrs London Time shift rotation on a four days on, four days off basis.
Required Qualifications
- Solid understanding of networks including the TCP/IP stack, typical organisation architectures, and common protocols abused by malware
- Experience in security event analysis & triage, incident handling and root-cause identification
- Understanding of tools, techniques and procedures that attackers use to compromise organisations, ideally from direct experience
- Knowledge of cyber security either academically or within corporate environments
- Ability to work in a fast-paced and demanding environment while remaining calm
- Strong verbal and written communication and collaboration skills
- Security industry specific and core technical accreditations such as OSCP, GIAC, CCNA
- Certification demonstrating SIEM operational competences
- Proficient with one or more programming languages (e.g. Python, PowerShell, Java, C#)
- Shifts are 1200hrs - 0000hrs (midday to midnight) London Time using a 4 days on, 4 days off rotation
Desired Qualifications
- Preferred experience with operating or administrating a SIEM (e.g. Splunk/QRadar/LogRhythm)
- Knowledge of the typical lifecycle of an attack
- Experience developing monitoring dashboards
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.