Global Security Operations Centre Analyst

Global Security Operations Centre Analyst

Requirements

• SOC experience and incident response knowledge.
• Familiarity with Microsoft Azure and AWS.
• Relevant certifications (e.g., Microsoft SC-200, AWS Certified Cloud Practitioner).
• Proficiency in network/application protocols and operating systems.
• Experience with security tools (EDR, SOAR, SIEM).
• Preferred scripting/programming experience.
• Knowledge of cyber security legislation and best practices.

Responsibilities

• Monitor alerts, investigate incidents, and follow response processes.
• Develop detection rules and maintain playbooks.
• Automate tasks using tools like Python and PowerShell.
• Identify and mitigate potential threats.
• Work with other cyber defence teams and communicate findings.
• Suggest and document process improvements.
• Provide continuous security console monitoring.
• Analyse incident telemetry and investigation pathways.
• Support investigations with relevant intelligence.
• Record actions and secure data.
• Generate and present technical reports.

Preferred Qualifications

• Preferred experience dealing with incidents in a wide range of environments, including OT and ICS technologies.
• Preferred experience of working with wider Cyber Defence teams, including Intelligence, Vulnerability Management, Threat Hunting and Purple Teams.