Description

Key Skills: Cyber Security, SIEM Tools, Splunk, Microsoft Defender, EDR Tools, Network Protocols, Incident Management, Cloud Security, AWS, Azure

Good to Have Skills: Relevant certifications such as GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH), or GIAC Reverse Engineering Malware (GREM) are beneficial. Strong analytical and problem-solving capabilities with ability to learn fast and analyze computer system activity to understand and assess cyber threats. Excellent documentation skills to explain technical details clearly for different audiences.

Roles & Responsibilities:

• Monitor the Group's computer systems for suspicious activity using enterprise-grade cyber tools and critical thought.
• Triage and analyse detection alerts and staff-reported cyber attacks to identify which events require response activities based on Standard Operating Procedures.
• Capture essential details and artefacts for cyber security events and maintain comprehensive documentation.
• Maintain event response documentation, participate in post-mortems, and write detailed event reports.
• Escalate applicable incidents to other accountable functions within the Group such as Cyber Attack Response, Data Breach, Governance.
• Identify potential new detection logic and escalate recommendations to the Detection Engineering team.
• Contribute to the Continual Service Improvement of the team's operations through proactive analysis, engagement, and collaboration.

Experience Required: 5+ years of experience as a Cyber Security Analyst or in a similar role. High level of attention to detail and accuracy with ability to work meticulously under pressure. Experience in incident management with strong emphasis on comprehensive documentation, integrity, and accountability.

Education: Bachelor's degree or Master's degree in Engineering in Computer Science/Information Technology

Key Skills

Education

Any Graduate