Senior Cyber Security Incident Response Analyst

Job Description:

Role purpose

This is a critical role providing Cyber Security Incident Response capability for AMERICAs business hours and call out out of hours. This role will assist in responding and protecting the business from cyber security attack.

Key accountabilities

• Lead investigations of complex security incidents, including malware outbreaks, phishing campaigns, insider threats, and advanced persistent threats (APTs).
• Engage with other teams to mitigate cyber security threats, improve processes, and improve security posture
• Analysing threat intelligence for relevancy, impact, and exposure.
• Perform root cause analysis and develop containment and eradication strategies.
• Conduct log analysis utilising SIEM, IPS, Firewall, Proxy, AV and other to determine the extent of a compromise and for investigation purposes.
• Trawl vulnerability intelligence datasets to provide early warning of threats to the business.
• Utilise threat intelligence to identify indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs)
• Maintain current knowledge of tools, techniques, and procedures of attackers
• Keep up to date on current Advanced Persistent Threats and mitigation techniques.
• Conduct research pertaining into cyber threats, campaigns, vulnerabilities, and technological advances in combating unauthorised access.
• Threat Hunting - Investigate alerts, anomalies, errors, intrusions, and malware for evidence of compromise.
• Take ownership of managing cyber security call queues ensuring tickets are closed based on defined SLOs
• Will be required to work night and swing shifts to cover US business hours
• Assist Head of Cyber Security with daily, weekly, monthly management tasks
• Assist Head of Cyber Security with reporting tasks
• Required to act as on call analyst for one week every 6 weeks

Professional skills

• Must possess excellent analytical, troubleshooting, and problem-solving skills.
• Possess a high level of capabilities in research, data collation and data analysis
• Excellent organisation and time management skills.
• Able to handle and manage multiple deadlines, and to effectively perform during high pressure or stressful situations.
• Good presentation skills both verbal and written on both technical and non-technical information. With strong attention to detail.
• Very good organisational and communication skills, with the ability to build relationships with peers.
• Experience producing security documentation and other technical analysis reports
• Experience working in a team-oriented, collaborative environment.
• Experience managing and mentoring junior analysts

Key Experiences

• Demonstrates a good knowledge and understanding of cyber security attack techniques and threats, with a strong technical background.
• Ability to quickly identify indication of compromise and take appropriate action to contain, mitigate or eradicate. 

Location:

Brand:

Time Type:

Contract Type: