This list contains only the countries for which job offers have been published in the selected language (e.g., in the French version, only job offers written in French are displayed, and in the English version, only those in English).
e2e-assure is recruiting a Lead Cyber Security Analyst to work in our lively Oxfordshire SOC. You will manage major cyber incidents and ensure the SOC team delivers high-quality analysis and investigations for customers. You will play a crucial role in enhancing the team’s skills, challenging individuals to improve their day job through automation and tuning.
Job Responsibility:
Improving the quality of detections and response/analysis routines and playbooks
Improving the quality of our threat intelligence platform, threat indicators and assist in optimisation of threat data
Supporting the SOC with wider cyber security expertise – advising, mentoring and coaching. Focusing on improving SOC efficiency by working across the business to bring down alert volume and collaborate on improvements, train SOC staff on investigations and rule tuning
Supporting the SOC team to achieve agreed SLAs and deliver high quality alerts, tickets, and incidents
Collating incident statistics and driving quality improvements
Lead and train the SOC on threat hunting, using this to drive improvements to detection capability
Lead the SOC to produce threat briefs for significant cyber events where customers need to take action
Proactively share knowledge within the team and the wider company, through training and mentoring sessions
Escalation point for the SOC for technical analysis
Incident Management Lead for the SOC
Lead incident exercises
Support to forensic investigations / IR Companies
Requirements:
Prior experience working in a cyber security-focused role, ideally SOC or Incident Response experience
Significant experience with log monitoring tools and SIEM platforms such as Splunk or Microsoft Sentinel
Experience with leading major incident investigations
Ability to train, coach, and mentor technical teams to help them achieve their potential
Advanced knowledge of cybersecurity and insight into recent and trends
Familiar with host and network based forensics and concepts
Experience of vulnerability management process
Experience with Log analysis / Log forensics (including PCAP analysis)
Relevant computing or cyber university degree or Security certifications such as CompTIA Advanced Security Practitioner (CASP+), GIAC Certified Forensic Analyst, GIAC Cyber Threat Intelligence (GCTI), GIAC Open Source Intelligence (GOSI), GIAC Defending Advanced Threats (GDAT), GIAC Security Expert (GSE)
Individuals in this role must be eligible for SC and NPPV3 clearance. This requires residency in UK for the last 5 years
Nice to have:
Experience with investigating closely targeted, significant data breach cyber incident investigations
Considerable experience with tuning complex alerting rules (e.g. use of regex or sub searches)
Experience with APT Incident Investigations
Experience of Malware analysis (static or dynamic)
Experienced operating system or network administration including system hardening, Windows domain setup and maintenance (e.g. WSUS, SCCM, Group Policy, DCE) or previous experience working in an enterprise administration role
Experience with Cloud Hosting Platforms such as Microsoft Azure, AWS or Google Cloud Workspace
What we offer:
Contributory pension scheme
25 days annual leave + Bank holidays (with additional for continued service)