PRIMARY REQUIREMENTS

• Excellent spoken and written English
• Experience of Incident Response (triage, classification, investigation, escalation)
• Knowledge of networking protocols and investigation (capture, Wireshark)
• Knowledge of Operating Systems, Databases and Applications (Windows, Linux, SQL, F5)
• Knowledge of SIEM tools (Splunk, Sentinel)
• Knowledge of EDR tools (Defender, Crowdstrike)
• Knowledge of security concepts (MITRE, Kill-Chain)
• Willing to work in shift patterns

ROLE DESCRIPTION

At FNZ, our purpose is to make wealth management more accessible, bringing easier, fairer and more inclusive solutions to people worldwide. Here in the Global Information Security team, we work to protect the platforms that support investment solutions for over 20 million people.
We are looking for a Security Operations Lead Analyst to join the Security Operations team. You will have knowledge of Information Technology concepts and have experience in Security Operations in a commercial environment. You will be excited to develop your knowledge and abilities in a global, complex organisation. You will be able to learn quickly and must be able to show how you develop yourself and your career. You will be joining an experienced team and working to support some of the biggest financial services clients in the world.
Reporting directly to the Cyber Security Incident Response and Operations Manager, you will join a team of analysts responsible for monitoring and responding to security incidents, implementing proactive measures, and ensuring the overall safety and integrity of our systems, networks, and data.

SPECIFIC ROLE RESPONSIBILITIES

• Incident Management: Promptly detect, investigate, and respond to security incidents. Ensure the appropriate escalation procedures are followed when necessary and coordinate incident resolution efforts effectively.
• Team Be part of a SOC on shift rotation for coverage 24/7x365 working as pairs to review potential security incidents across the internal network.
• Security Incident Remediation: Coordinate with IT and infrastructure teams to implement necessary remediation actions following security incidents.
• Triage of alerts from FNZ Group systems
• Analysis of alerts and escalation where required
• Following Standard Operating Procedures and playbooks to respond to incidents
• Supporting development and enhancement of SIEM detection and playbooks