Senior Cyber Incident Management, Operations & Response Specialist - VOIS

• Investigate, analyse and accurately triage security alerts and incidents across CSOC platforms
• Perform deep-dive incident analysis, identify root causes and assess business risk
• Lead daily stand-ups and act as an escalation point for functional and technical queries from Cyber Defence Analysts
• Produce clear, high-quality technical and operational reports for stakeholders
• Maintain and continuously enhance alert triage quality and operational deliverables
• Develop, document and maintain playbooks, runbooks, SOPs, KEDB articles and knowledge base content
• Proactively fine-tune detection rules and identify opportunities for alert reduction and effort optimisation
• Monitor and protect digital systems against unauthorised access, modification or data loss
• Analyse security breaches and recommend appropriate tools, controls and countermeasures
• Collaborate closely with Local Market CSIRT teams to manage ongoing cases and reduce backlog
• Conduct brown bag sessions and provide structured mentoring for team members and new joiners
• Act as technical subject matter expert for alerting, detection and triage playbooks
• Identify volumetric alerts and drive mitigation strategies across people, process and technology
• Participate in defining and improving detection and alerting capabilities
• Create detailed threat and alert analysis reports and share findings with resolver, content creation, threat intelligence and incident management teams

• 7+ years of experience in a Security Operations Centre, operating at senior analyst level
• Strong expertise in SIEM platforms (such as ArcSight, Splunk, QRadar or LogRhythm)
• Proven experience in security incident investigation, response and management
• Understanding of malware behaviour, advanced persistent threats and complex attack techniques
• Skilled in SIEM correlation logic, rule tuning and detection optimisation
• Ability to create structured workflows, playbooks and triage processes
• Confident mentoring, coaching and motivating analysts within the team
• Strong written and verbal communication skills, including the ability to present technical findings to senior stakeholders
• Degree in Computer Science, Information Technology, Engineering or a related field
• Prior experience in cloud technologies and the information security domain

Industry-recognised certifications such as SANS, CCNA CyberOps or Security+

• Opportunity to work at the forefront of cyber defence within a global telecommunications organisation
• Exposure to complex threat landscapes and enterprise-scale security environments
• A role that combines technical depth with leadership, mentoring and operational ownership
• The ability to influence detection strategy, incident response quality and process maturity