Description

Monitor systems, triage alerts, and manage incident response for cyber security events.

This role is on-site.

Responsibilities

• Monitor computer systems for suspicious activity using enterprise-grade cyber tools and critical analysis.
• Triage and analyse detection alerts and staff-reported attacks to identify events requiring response based on Standard Operating Procedures.
• Capture essential details and artefacts for security events, maintaining comprehensive documentation and event reports.
• Participate in post-mortems, escalate applicable incidents to accountable functions, and identify potential new detection logic for the Detection Engineering team.

Required Skills

• 5+ years of experience as a Cyber Security Analyst or in a similar role.
• Hands-on experience with SIEM tools, specifically Splunk and Microsoft Defender.
• Proficiency in EDR tools and understanding of network protocols.
• Experience in incident management with strong emphasis on documentation and accountability.
• Knowledge of cloud security principles in AWS and Azure.
• Strong analytical and problem-solving capabilities with the ability to assess cyber threats.
• Excellent documentation skills to explain technical details clearly for different audiences.

Preferred Skills

• Relevant certifications such as GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Incident Handler (GCIH), or GIAC Reverse Engineering Malware (GREM).

Key Skills

Education

Any Graduate