Senior SOC Analyst

at  Khipu Networks

DEMONSTRABLE EXPERIENCED REQUIRED

• Experience of working in a SOC / CSIRT or equivalent
• Thorough OS knowledge across Windows and Linux
• Advanced networking experience
• Dealing with third parties and instructing them on findings
• Incident Management and escalation process
• Excellent written and verbal communication skills
• Experience implementing leading best practice procedures
• Experience of working as part of a global team, both internally and via 3rd parties
• Understanding of malware capabilities, attack vectors, propagation and impact.
• Preferred technology experience: XDR/EDR, Automation, SIEM, IDS/IPS
• Good understanding of the NIST Cybersecurity Framework and ISO 27001
• Knowledge of system administration, scripting and operating system hardening techniques
• Strong analytical skills with the ability to assess cyber risks and develop effective mitigation plans

THE ROLE

Are you interested in furthering your career in the cybersecurity industry? If so, we want to hear from you! We are currently seeking a motivated, innovative and dedicated Senior SOC Analyst to join our 24x7 SOC team in Fleet, Hampshire to ensure the growth and development of our Cybersecurity Services Team.
You will be part of a Global SOC team, working with both mainstream manufacturers and niche players. Each day offers a new challenge, and learning opportunity. In return we offer, development, training all within a modern technical working environment. This is an exciting opportunity to further develop your cybersecurity career. It could be required from the position to join a 24x7 shift pattern, working shifts and/or be on standby when required.

KEY RESPONSIBILITIES

The key responsibilities of a Senior SOC Analyst include, but are not limited to:

• Acting as 2IC for the SOC Team Lead and being an escalation point.
• Mentoring and coaching of junior analysts.
• Developing new services and service improvements via project work.
• Develop Standard Operating Procedures (SOPs) for the SOC team and use cases for monitoring and handling different types of security events
• Threat intelligence gathering to ensure detection methods are effective against current threats
• Monitoring alert queues, responding to security alerts and incidents
• Managing vulnerability management process and ensure vulnerabilities are remediated within SLA
• Ensure that vulnerability management tools are deployed appropriately, that results are accurate and remediation activities appropriately prioritised
• Manage and configure security toolsets to ensure optimal use and coverage
• Manage cybersecurity incidents through to resolution
• Work with both internal and external partners to investigate, remediate, and clean up after security incidents
• Prepare detailed intelligence reports, providing information on findings, status and progress of investigations, as well as vulnerability and risk factors
• Help drive forward good conduct for the business to deliver the best outcomes for customers / policyholders.