Quality Analyst I

Cyber Defence ·​​ Global Security Operations Centre (GSOC) Level 3 Analyst Contract of employment (Full-time) ​ ​As part of the Cyber Defence team in the Global Security Operations Centre, you will provide oversight of triage, investigation of security alerts and potential security incidents. After a threat or incident is identified, L3 analyst will be responsible in determination of response that should be put into action to mitigate its damage and prevent its spread. Fast and effective identification and triage of potential incidents is essential for us to protect our critical data and assets, and you will be at the forefront of this exciting area of Cyber Security, protecting the business and our interests daily. You will need to have a good technical aptitude, a calm approach under pressure, excellent communicative skills to technical and nontechnical audiences, and have a genuine passion for security. You will be working as part of a 24/7 SOC across different locations and therefore you must be a true team player, with the ability and desire to engage with different internal stakeholders and colleagues to deliver the very highest standards of service and support. ▪ 6+ Years’ Experience working as part of a mature cyber defence centre or security operations centre. ▪ Hands on experience of using a SIEM, UEBA, and EDR as a Level 3 security analyst. ▪ Leading Investigations and comfortable talking to stakeholders and colleagues on both a technical and non-technical level. ▪ Great verbal and written communication skills, and the ability to write reports in a structured methodology. ▪ Working knowledge of networking protocols/technologies (e.g. Working knowledge of Unix, Linux, and Windows operating systems. ▪ Working knowledge or ability to build scripts, tools, or methodologies to enhance our incident investigation and processes (such as Python, PowerShell, Wireshark, etc.). ▪ Network forensic acquisition and analysis (using tools such as Deep Packet Analysis, Wireshark, NetWitness) Any relevant security certifications (CISSP, CISM, SSCP, OCSP, Security+, CySA+, CASP+, GREM, GCIA, etc.). ▪ Any relevant network certifications (Network +, CCNA, etc.). ▪ Knowledge of other key IT fields (such as Web Applications, databases, Active Directory, network security systems such as web proxies, firewalls & data loss protection). Technical: ▪ Oversee the monitoring, investigation, containment, and eradication to cyber security threats against our business. ▪ Ensure that there is a timely response to any cyber incidents to minimise the impact to the business, including interacting with different technical teams and business areas where needed. ▪ Review and provide technical advice on tuning recommendations submitted by Level 1s and Level 2s. Escalation point to provide process and/or technical advice for Level 1 and Level 2 analysts. ▪ Perform quality audit for tickets that were handled by Level 2s ensure incidents were handled according to prescribed processes. ▪ Attend handover calls to support Level 1s and Level 2s, provide advice (process/technical aspect) on alerts/incidents for consultation. ▪ Provide on-call support (in rotation with other L3 Analysts). Non-Technical: ▪ Ensures there is a balanced capacity and workforce to maintain delivery of a 24 x 7 SOC service. ▪ Create and produce required regular report for leadership team and meaningful reports to articulate security posture, trends, and patterns. ▪ Assist L3 Manager to generate raw data for KPIs, submit calculations, record results, and recommend measures to maintain quality performance. ▪ Help Level 2 analysts to deliver training to mature skills of new joiners or colleagues. ▪ You can work remotely or from the office – choose the model that best supports your comfort and efficiency. A flexible working model is our standard, not an exception. ▪​ Stability and security – an employment contract with a global organization that has a strong market position and a modern approach to business. ▪​ Opportunities for growth – we support obtaining a brokerage license, offer training, and create space for professional development. ▪​ Holiday vouchers – we support your rest and travel plans. ▪​ Emergency financial support – we’re here when life brings the unexpected. ▪​ Holiday gift packages – we celebrate together. Prywatna opieka medyczna Hybrydowy model pracy