Lead Cyber Security Analyst Job at e2e-assure (Oxfordshire)

Job Description

e2e-assure is recruiting a Lead Cyber Security Analyst to work in our lively Oxfordshire SOC. You will manage major cyber incidents and ensure the SOC team delivers high-quality analysis and investigations for customers. You will play a crucial role in enhancing the team’s skills, challenging individuals to improve their day job through automation and tuning.

Job Responsibility

Improving the quality of detections and response/analysis routines and playbooks
Improving the quality of our threat intelligence platform, threat indicators and assist in optimisation of threat data
Supporting the SOC with wider cyber security expertise – advising, mentoring and coaching. Focusing on improving SOC efficiency by working across the business to bring down alert volume and collaborate on improvements, train SOC staff on investigations and rule tuning
Supporting the SOC team to achieve agreed SLAs and deliver high quality alerts, tickets, and incidents
Collating incident statistics and driving quality improvements
Lead and train the SOC on threat hunting, using this to drive improvements to detection capability
Lead the SOC to produce threat briefs for significant cyber events where customers need to take action
Proactively share knowledge within the team and the wider company, through training and mentoring sessions
Escalation point for the SOC for technical analysis
Incident Management Lead for the SOC
Lead incident exercises
Support to forensic investigations / IR Companies

Requirements

Prior experience working in a cyber security-focused role, ideally SOC or Incident Response experience
Significant experience with log monitoring tools and SIEM platforms such as Splunk or Microsoft Sentinel
Experience with leading major incident investigations
Ability to train, coach, and mentor technical teams to help them achieve their potential
Advanced knowledge of cybersecurity and insight into recent and trends
Familiar with host and network based forensics and concepts
Experience of vulnerability management process
Experience with Log analysis / Log forensics (including PCAP analysis)
Endpoint artifact analysis (investigation packages etc)
Relevant computing or cyber university degree or Security certifications such as CompTIA Advanced Security Practitioner (CASP+), GIAC Certified Forensic Analyst, GIAC Cyber Threat Intelligence (GCTI), GIAC Open Source Intelligence (GOSI), GIAC Defending Advanced Threats (GDAT), GIAC Security Expert (GSE)
Individuals in this role must be eligible for SC and NPPV3 clearance. This requires residency in UK for the last 5 years

Nice to have

Experience with investigating closely targeted, significant data breach cyber incident investigations
Considerable experience with tuning complex alerting rules (e.g. use of regex or sub searches)
Experience with APT Incident Investigations
Experience of Malware analysis (static or dynamic)
Experienced operating system or network administration including system hardening, Windows domain setup and maintenance (e.g. WSUS, SCCM, Group Policy, DCE) or previous experience working in an enterprise administration role
Experience with Cloud Hosting Platforms such as Microsoft Azure, AWS or Google Cloud Workspace

What we offer

Contributory pension scheme
25 days annual leave + Bank holidays (with additional for continued service)
private health insurance
enhanced maternity/ paternity/ sick pay
Cycle to Work scheme
Home and Tech purchase scheme
Employee assistance program

e2e-assure - All Job Offers

Select Country

Lead Cyber Security Analyst

Job Description

Job Responsibility

Requirements

Nice to have

What we offer

Looking for more opportunities?

Lead Cyber Security Analyst

Lead Cyber Security Analyst

Lead Cyber Security Analyst

Lead Cyber Security Analyst

Cyber Security Analyst

Senior Cyber Security Analyst – Incident Response & SOC

SOC Lead - Cyber Security Operations

Information Security Lead Analyst

Senior Cyber Security Analyst

Our AI answers in your language