SPG Resourcing
Job Overview
, including log review, management report scheduling & running, alert analysis, and escalation follow up• Remain current on cyber security trends and intelligence (open source and commercial) in order to guide the security analysis & identification capabilities of the CSOC team• Provide oversight, guidance and mentoring to L2 & L3 analysts, and fulfil SOC Manager responsibilities in the absence of the SOC Manager• Manage a number of analysts as part of a virtual team of L1 and L2 analysts, including objectives setting, performance management / reviews, training & development, and BAU activities including shift cover etc.• Perform advanced event and incident analysis, including baseline establishment and trend analysis.• Support on-call arrangements as part of a Rota, to support L1 Analysts working out of hours• Support Major Incident Response activity, from a Protective Monitoring perspective, including supporting teams in identification, containment, and remediation of security related threat.• Provide timely advice and guidance on the response action plans for events and incidents based on incident type and severity.• Identify, create and implement improvements to procedures and processes, with the SOC Manager's approval.• Identify opportunities for SOC and client SIEM platform configuration improvements, use case development, monitoring rule creation, tuning & optimisation• Assist in architectural design to facilitate the onboarding of new information systems, including the assessment, parsing, onboarding of log sources, and use case and rule development.
Required skills
Senior level Cyber Security and security operations experience. Expert-level knowledge of Microsoft Sentinel, including Lighthouse, and experience in managing SIEM solutions. Strong experience in onboarding, tuning, reporting, and configuring SIEM solutions. Strong familiarity with cloud security concepts and technologies (AWS, Azure, GCP).I In-depth understanding of threat intelligence and its application in security engineering. Excellent leadership and mentoring skills, with the ability to develop and motivate a team of security professionals. Deep understanding of low-level concepts including operating systems and networking. Proven experience of cybersecurity principles, threat landscapes, and attack methodologies. Commercial experience in Penetration Testing and/or Security Monitoring. Comprehensive understanding of networking and infrastructure design. Knowledge and experience of DevOps practices and principles. Strong analytical and problem-solving skills, with the ability to think critically under pressure. Excellent communication skills, both written and verbal, with the ability to translate technical concepts for non-technical audiences.
</p>
</div>
</div>
<div class=){kind=logo}
Job Detail
Related Jobs (2416)
-
AI & Data Scientist Intern – REMOTE on December 22, 2024
-
Machine Learning Engineer – REMOTE on December 21, 2024
-
Blockchain Engineer – REMOTE on December 19, 2024
-
Research and Development Engineer (DeFi, Distributed Systems) – REMOTE on December 16, 2024
-
Senior Compiler Engineer – REMOTE on December 13, 2024
-
Senior Cryptography Engineer – REMOTE on December 12, 2024
-
Survey Methodologist on December 6, 2024
-
Business Intelligence und Data Analytics Consultant (m/w/d) on December 6, 2024
-
Data Analyst on December 6, 2024
-
Data Analyst Intern 4 Months – Winter 2025 on December 6, 2024