Senior Security Operations Analyst

Welcome to Haleon. We're a purpose-driven, world-class consumer company putting everyday health in the hands of millions. In just three years since our launch, we've grown, evolved and are now entering an exciting new chapter - one filled with bold ambitions and enormous opportunity. Our trusted portfolio of brands - including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum® - lead in resilient and growing categories.

What sets us apart is our unique blend of deep human understanding and trusted science. Now it's time to fully realise the full potential of our business and our people. We do this through our Win as One strategy. It puts our purpose - to deliver better everyday health with humanity - at the heart of everything we do. It unites us, inspires us, and challenges us to be better every day, driven by our agile, performance-focused culture.

• Operate as part of a 24 /7 Cyber Security Operations (Sec Ops) team that continuously monitors the security of the company.
• Undertake the timely triage of security alerts to allow for rapid incident detection and response.
• Perform deep-dive analysis of security events, logs, network traffic and forensic data to determine root cause, identifying suspicious and / or anomalous activities and taking appropriate action based on documented processes and procedures.
• Recommended modifications to internal defences and processes for more effective and efficient security operations.
• Manage security incidents through all phases of the incident response lifecycle from identification through to closure.
• Ensures that delegated response and remediation actions are completed in line with SLAs.
• Provides expert analytic investigative support of complex security incidents.
• Supports the tuning of all security tooling and the development of bespoke correlation rules / use cases aligned to business operations, internal risk profiles and current threat intelligence.
• Ensure that the automation and orchestration of day-to-day operations is maximised, and that analysis / response activities are performed as efficiently as possible.
• Execute L2/L3 event or incident response and investigations into suspicious activity.
• Shape the operations to successfully manage cases, lead the response process, and delegate tasks to junior incident responders and MSSP analysts.
• Generate post-incident reviews to ensure gaps are closed to prevent future events.
• Collaborate with Threat Intelligence to groom threat feeds and help translate findings.
• Help prioritize content, develop, and implement playbooks and runbooks.
• Be a key member of the Cyber Incident Response Team (CIRT) during major cyber incidents.
• Establish and maintain relationships with other investigation and remediation teams within the company, working closely with them to address the full spectrum of security issues.
• Lead efforts in developing security awareness training for the broader organization.

• Bachelor's degree in Computer Science, Cyber Security or related field.
• 5 years' experience in cybersecurity, with some experience of responding to significant cyber incidents involving Organized Crime and Nations State threat actors.

• Master's Degree in Computer Science, Cyber Security or related field.
• 3 years experience working in a Cyber Security Operations Center.
• Experience working across international manufacturing.
• Understanding of security controls and how they are used to detect and respond Knowledge of common network protocols, edge routing technologies, firewall/IDS/IPS, SIEM, EDR/XDR.
• Ability to communicate complex problems succinctly.
• Ability to work within a team environment, sharing workload and responsibility.
• CISSP, GCIA, GCDA, GSOC,…