Security Analyst

The Digital

XRAID Security Operations Centre provides around the clock protective monitoring solutions to a client base that spans multiple industry verticals. Utilising industry-leading detection technology, our team of experienced SOC team members work to provide assurance detection and incident response capabilities to organisations of all sizes.

Digital

XRAID are looking for a Security Analyst to join their CREST certified Security Operations Centre based in Doncaster, United Kingdom. This role is shift based and will require the successful candidate to operate in line with a shift roster that spans 24x7x365.

The successful candidates will work in the Security Operations Centre on both reactive and proactive security engagements with regards to Security Information & Event Management (SIEM), Intrusion Detection Systems (IDS), Cyber Threat Intelligence (CTI) and Threat Mining (TM).

You will work alongside the SOC team to ensure the effective delivery of the following:

• Provide around the clock protective monitoring through the use of industry leading SIEM, IDS and threat Intelligence Technologies.
• Provide advice and guidance to client targets of cyber attacks and malicious activity to a high standard.
• Provide incident reporting capabilities ensuring that all information is provided in a timely, accurate and effective manner.
• Provide analytical support to other SOC team members during security incidents and Threat Mining engagements. Assistance with onboarding process - deployment of SIEM , EDR and Vulnerability Management tools
• Assistance with active directory administration.
• Assistance with firewall management.

The successful candidate will exhibit the following key skills and/or traits:

• Excellent communication skills and comfortable in a client facing role.
• A keen interest in cyber security and associated industries.
• A heightened awareness of current affairs in the cyber security industry.
• Proven ability to effectively communicate when under pressure (high pressure situations may arise during ongoing incidents or attacks).
• Proven ability to adapt to difficult situations (high pressure situations may arise during ongoing incidents or attacks).
• Ability to commute to the office a few times per month to collaborate with peers.
• Industry certifications would be highly advantageous if the candidate has any of the following (Microsoft SC-200 , AZ-500 , SC-100 )