This job is no longer available.
You can view related vacancies or set-up an email alert notification when similar jobs are added to the website using the buttons below.

SOC Analyst

18/09/18_1537280340
Up to £40000 per annum

Managing this Role

image

Charlee Ryman

Associate Consultant - Cyber Specialist 0207 759 7878

Spending seven years in the Royal Navy as a warfare technician, Charlee uses his comprehensive military network and his deep technical expertise to quickly pinpoint the best cyber security professionals for leading employers of all shapes and sizes.

 

Roles recruited: CISOs, SOCs managers/analysts and cyber security analysts/consultants

Seniority: Mid-senior

Job Type: Permanent

Geographical coverage: London

Market: Cyber security operations within MSSPs

Do you want to work with a team of experienced Network and Information Security Engineers? Are you ready to put your skills to the test whilst working for an incredibly successful MSSP who advise clients on Cyber Security on a Global scale?

You will be comfortable with working within a SOC and carrying out your normal routine of providing security analysis of customer security events using SIEM tools to monitor and manage systems, whilst assisting in vulnerability management for a portfolio of blue-chip and mid-market customers. You will also have a great work ethic and be willing to go the extra mile.

Whilst working in a 24/7 shift rotation pattern you will be interfacing with a varied array of personnel from infrastructure teams to Heads of operations. Travel to Client sites may also be required depending on work undertaken.


This role requires the following operational skills:

  • Good understanding of Network Security.
  • Ability to provide relevant and timely analysis and recommendations to customers based on analysis of events from a SIEM platform.
  • Customer-facing, with good report-writing skills and strong communication skills at all levels.
  • Ability to provide technical and service leadership to L1 and other L2 analysts. Be a thought leader in the SOC.
  • Ability to consistently deliver to deadlines while prioritising competing demands for time, without sacrificing quality.
  • Professional, hard-working and have the ability to pay attention to detail.
  • Good understanding of ITIL processes, including Change Management, Incident Management and Problem Management.
  • Willingness to share information, improve documentation, and train other analysts.
  • Ability to work on shift rotation

Additional Skill set:

  • Analysis of alerts arising from Security Event and Information Management tools, ideally based on HP ArcSight.
  • Vulnerability Scanning and reporting ideally based on Qualys. Prioritising and tracking remediation of vulnerabilities.
  • Experience of network-based User Behaviour Analytics (DarkTrace, ArcSight User Behaviour Analytics etc) advantageous but not essential.
  • Experience of packet-capture tools and analysis of packet flows advantageous but not essential.
  • Experience of security assessment and penetration testing tools advantageous but not essential.
  • Knowledge of Threat Intelligence Services advantageous but not essential.
  • Experience working with service providers and network management platforms (SolarWinds).
  • Microsoft data manipulation.

If you feel you are the right person for this role and you are ready to engage with a varied array of clients and test your skill set whilst working for this MSSP then get in touch now.

Huntress Search Ltd does not discriminate on the grounds of 'protected characteristics' as defined under the Equality Act and other relevant UK legislation.

Huntress Search Ltd acts as a Recruitment Agency in relation to all Permanent roles and as a Recruitment Business in relation to all Temporary roles.

PLEASE NOTE: We can only consider applications from candidates who have the right to work in the UK.


This job has now been filled but you may be interested in:

 

SOC Analyst - Insurance- London

We are working with a leading Insurance group who are looking to add to their Cyber Security capability in London. The SOC Analyst will work closely with the Information Security Officer, Infrastructure team and outsourced MSSP. You will have autonomy and be looked towards to help build the Cyber capability for the UK, with a look forward to building a team in the future.

Key Responsibilities

  • Monitor Security Operations Centre (SOC) generated security events and alerts
  • Perform initial analysis to determine security events and alerts requiring immediate response and escalation
  • Triage confirmed security events and alerts, in coordination with Tier 2 and Tier 3 network and infrastructure engineers, following documented procedures
  • Develop processes and response procedures to improve overall SOC functions
  • Develop, refine, maintain, and regularly test the Incident Response Plan
  • Monitor external data sources to maintain currency of information security threat condition and determine which security issues may have an impact on the enterprise
  • Maintain both internal and external vulnerability scanning tools and report on their findings

Technical Skills

  • Strong understanding of security and network incident response protocols
  • Good understanding of malware, including APT and other emerging threats
  • Strong understanding of information security principles as it relates to system, network, internet security (i.e. ports, protocols, system hardening and system functions analysis)
  • Indicators of Compromise, understanding malware analysis, VA scanners, SIEM tools
  • Sound understanding of networking administration and troubleshooting (e.g. TCP/IP, WAN/LAN and WiFi)
  • Good understanding of firewalls and IDS/IPS systems
  • Good understanding Citrix platform
  • Good understanding of Active Directory
  • Intermediate understanding of virtualization
  • Intermediate understanding of databases (SQL in particular)

Qualifications

  • Desirable qualifications for the role include CompTIA A , CompTIA A , Network , Security , Certified Ethical Hacker (CEH), GIAC, GCIH, CISSP)

Huntress Search Ltd does not discriminate on the grounds of 'protected characteristics' as defined under the Equality Act and other relevant UK legislation.

Huntress Search Ltd acts as a Recruitment Agency in relation to all Permanent roles and as a Recruitment Business in relation to all Temporary roles.

PLEASE NOTE: We can only consider applications from candidates who have the right to work in the UK.

SOC Analyst

This is your chance to take the next step into a more senior position. Working as an Integral member in my clients SOC you will be able to use SIEM tools to monitor and investigate client's security environments. You will place an emphasis on vulnerability assessments and remediation.

The role

  • Analysis and investigation of alerts from SIEM and AI tools
  • Vulnerability Scanning, reporting and prioritising
  • Utilise Intrusion Prevention solutions to monitor and alert on potential breaches.
  • Creation of custom IPS signature on occasion.
  • Use packet-capture tools
  • Use Threat Intelligence Services to identify potential new threats and develop new mitigation's.
  • Working with customer security teams to detect, contain and eradicate threats.
  • An understanding of Penetration Testing.

  • You will be Analytical, Inquisitive and have a strong passion for Cyber Security.
  • You will have the ability to lead.
  • Have a passion for self development and development of your team.

This is a good opportunity to be involved in one of the fastest growing MSSP's in Central London.

You will have the chance to test and develop your skills whilst mentoring the junior members of the team.

If this role sounds like you then go ahead and apply now.

Huntress Search Ltd does not discriminate on the grounds of 'protected characteristics' as defined under the Equality Act and other relevant UK legislation.

Huntress Search Ltd acts as a Recruitment Agency in relation to all Permanent roles and as a Recruitment Business in relation to all Temporary roles.

PLEASE NOTE: We can only consider applications from candidates who have the right to work in the UK.

Cyber Security Analyst - London

Due to a record breaking 2018, our client, a global telecommunications organisation based in London are growing their Security Operations team.

As part of this network expansion they are looking for a Cyber Security Analysts to act as Incident Handlers and will conduct vulnerability assessments and monitor systems, networks, databases and web hosted services for potential system breaches. Report, investigate and resolve security incidents. Educate and communicate security requirements and procedures to all users and new employees.

Responsibilities:

  • The post will require rotating 24X7 shift work to include daytime, night time, and weekend work
  • Act as a first line security event analyst monitoring the SIEM tools. Monitor the alarm console; provide initial analysis of logs and network traffic.
  • Provide first line telephone, e-mail and ticket routing services for security event notifications and incident response processes.
  • Deliver first level investigation and remediation activities as a member of the Security Incident Response Team. Participate in SIRT events
  • Participate in a Compliance/Vulnerability Assessment Scanning Capability.
  • Develop mitigation and remediation plans as a result of the vulnerability assessment findings.
  • Monitor threat and vulnerability news services for any relevant information that may impact installed infrastructure. Analyze reports to understand threat campaign techniques, lateral movements and extract indicators of compromise.
  • Create and update security event investigation notes, conduct shift change reports on open cases, and maintain case data in the Incident Response Management platform.

Essential & Desirable Skills:

  • Understanding of performing 1st line analysis and interpretation of information from SOC systems; incident identification/analysis, escalation procedures, and reduction of false-positives.
  • GIAC, GCIH, GIAC , GCIA
  • Intermediate knowledge of Information Security fundamentals, technologies, and design principals.
  • Understanding or proven experience in securing Windows, Linux, Oracle and VM platforms.
  • Understanding or proven experience of SIEM tools for analysing network and security incidents.
  • Experience in Tenable Network Security Nessus, BeyondTrust Retina or similar Vulnerability Assessment scanner operations for identifying network and platform risks and mis-configurations.

Huntress Search Ltd does not discriminate on the grounds of 'protected characteristics' as defined under the Equality Act and other relevant UK legislation.

Huntress Search Ltd acts as a Recruitment Agency in relation to all Permanent roles and as a Recruitment Business in relation to all Temporary roles.

PLEASE NOTE: We can only consider applications from candidates who have the right to work in the UK.