SOC Tier 2 Cybersecurity Analyst
18 Months - PAYE Contract until DEC 2025
Must have current UK Security Clearance
Hybrid working 50/50
You will play a critical role in identifying, analysing, and mitigating complex security incidents and breaches within organizations networks and systems.
You will work with a wide range of teams to ensure the overall safety and security of the environment, and work closely with key stakeholders.
Key responsibilities will include:
*Incident Triage: Investigate and triage security alerts escalated from Tier 1 SOC analysts, determine severity and potential impact of the incident, and follow the triage process until closure.
*Threat Analysis: Conduct in-depth analysis of security events to identify malicious activities, tactics, techniques, and procedures used by threat actors.
*Security Incident Handling: Assisting with the containment, eradication, and recovery process in response to security incidents.
*Vulnerability Assessment: Participating in vulnerability assessment and management activities to identify and remediate security weaknesses.
*Security Tool Management: Managing and configuring security tools, specifically Microsoft Sentinel and the Microsoft Defender suite including Defender for Cloud and Microsoft 365 Defender.
*Threat Intelligence: Utilizing threat intelligence feeds and sources to stay up-to-date with the latest threats and vulnerabilities.
*Collaboration: Collaborating with other members of the SOC team, as well as external and internal stakeholders.
*Continuous Improvement: Contributing to the improvement of SOC processes, procedures, and documentation, including the creation and upkeep of Analytics Rules, Playbooks/Notebooks/Workbooks within Microsoft Sentinel.
*Leadership: Mentor SOC Tier 1 Analysts to improve detection/analytical capabilities within the SOC and monitor SOC Tier 1 Analyst performance.
Qualifications:
Skills:
Proficiency in using SIEM tools, especially Microsoft Sentinel and the Microsoft Defender suite.
Proficiency in Kusto Query Language (KQL).
Experience with the creation, configuration and use of Playbooks, Notebooks and Workbooks.
Strong understanding of advanced cybersecurity concepts, threat landscape, and attack methodologies.
Demonstrated experience in conducting in-depth incident analysis, threat hunting, and forensic investigations.
People Source Consulting Ltd is acting as an Employment Business in relation to this vacancy. People Source specialise in technology recruitment across niche markets including Information Technology, Digital TV, Digital Marketing, Project and Programme Management, SAP, Digital and Consumer Electronics, Air Traffic Management, Management Consultancy, Business Intelligence, Manufacturing, Telecoms, Public Sector, Healthcare, Finance and Oil & Gas.
