Senior Internal SOC Analyst leading security triage and investigations for Darktrace, utilizing AI - driven cybersecurity technology. Collaborating on incident response and mentorship within a hybrid work environment.
About the role
- Intermediate Security Operations Centre Analyst involved in IT security operations for a dynamic IT provider. Collaborating with internal teams for incident detection and response across various platforms.
Responsibilities
- Actively participate in 24x7 operations of the Long View Security Operations Centre
- Monitor, identify and validate security events generated from Security Information Event Management (SIEM) tools
- Actively work in monitoring, event and incident management tools like Sentinel and ServiceNow
- Respond to critical business impacting situations and coordinate the efforts required to engage the proper resources to remediate the issue
- Coordinate major security incident situations and provide internal communications via email in a timely manor
- Provide general support for Security Information Event Management (SIEM) tool changes, tweaks, additions and updates within Sentinel and any additional tools leveraged by Long View
- Provide security guidance to team members across the organization how to best identify, contain and remediate security related incidents
- Understand complex issues across on-premise, public and private cloud solutions and articulate the impact to higher tier team members
- Follow and establish process documentation for receipt of security alerts for monitored devices, acknowledge the receipt of the event, opening and/or updating service desk tickets to track the handling of events to resolution and closure, assignment of the ticket to the appropriate owner
- Work with cloud technologies like Azure, AWS and Google Cloud Platform
- Fulfill reporting requests that can be pulled from Long View tools
Requirements
- 3+ years of professional experience in incident detection and response, malware analysis, or cyber forensics
- SC-200 Certification
- Experience working with MS Defender
- Extensive experience evaluating, interpreting, and integrating relevant data sources for the purpose of merging network attack analyses with counterintelligence and law enforcement investigations
- Experience with various IT service management tools including performance monitoring and ITSM solutions
- Experience with Security Information Event Management platforms like Sentinel, Splunk and Sumo Logic
- Experience working with incident, problem, change and service requests that follow ITIL framework standards
- Experience provisioning new client services and working through customer onboarding tasks
- Proven ability to troubleshoot and resolve technical and procedural issues
- Strong verbal and written communication which will allow you to communicate effectively to customers in non-technical terms
- Ability to react quickly and professionally with a sense of urgency
- Ability and desire to work on an on-call rotation for 24-hour support
Benefits
- Interesting work – Be part of exciting projects while accessing all the latest technologies
- Career growth – Permanent staff positions, paid training, career life planning, and relocation and travel opportunities
- RSP plan
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Security Operations Intern responsible for security monitoring at Paddy Power Betfair. Involves data loss prevention investigations and content filtering analysis with a commitment to improving security posture.
SOC Analyst L2 responsible for managing and analyzing security incidents in digital transformation. Contributing directly to the protection of companies and infrastructures.
SOC Analyst L3 managing and analyzing security events and incidents for Var Group. Responsible for incident management and proactive threat analysis.
Senior Manager leading global IT security operations to protect company data and assets at Keenova. Overseeing incident response, monitoring, and cybersecurity capabilities with strategic oversight.
Security Operations Center leader at Woven by Toyota, managing triage and response to security alerts in Japan. Collaborating with global SOCs to ensure 24/7 operations.
GSOC Analyst responsible for security operations at Paramount Studios. Developing workflows, incident response, and risk monitoring in a dynamic team environment.
Senior Cybersecurity Analyst enhancing detection and response capabilities at Insulet, focusing on threat detection and incident response.
Supervisor for Global Security Operations Center at Enbridge. Leading a dedicated 24/7 team to monitor and protect global facilities and assets.
Security Operations Analyst at Orion Health focusing on monitoring and maintaining security tools while collaborating with teams. Engaging with real - world threats and enhancing operational security processes.