SOC Analyst

Location:
Hybrid - Farnborough/Home
Type of Job:
Permanent
: V11565

Cyro Cyber is looking for an Enthusiastic, Proactive, Security Analyst with a good broad IT knowledge who is keen to learn and develop their skills.

Your duties will include monitoring networks, hosts and endpoints for malicious activity using Security Incident and Event Management (SIEM) tools, Endpoint Detection and Response (EDR) tools, Antivirus and Malware detection tools and email security systems. You will also help to extend and enhance this capability under the direction of the CSOC Senior Analyst. Other activities will include, updating policy, including input into wider CSOC Strategy Policy,, procedures and processes etc.

Please note these are illustrative examples. Input to and ownership of the formulation of policy and standards will be expected. Specific security tooling will be under your remit. Understanding of common security ‘controls’ in order that guidance can be proffered in the event that an incident or event would require intervention.

Ideally you will have some of the following qualifications and / or experience

CompTIA Network+, Security+ or CASP, & CYSA

Microsoft Qualifications eg AZ-900, SC-900, SC-200

Security or SOC-related security qualification or apprenticeship such as:

Cisco Certified Cyber Ops Associate, or Cyber Technologist L4 Apprenticeship

Sentinel, Power Shell, M365, InTune, MS Dynamics, Tenable

You will be required to have / go through SC vetting.

Working within CSOC, this key function supports the group in providing a monitoring, detection and incident response capability across the entire Cyro digital estate.

As an Analyst we want you to provide monitoring, detection, and response activities in the Cyro Cyber Security Operations Centre (CSOC). The CSOC work underpins organisational cyber, security and IT Governance policies, plans and standards.

You will be required to go through Security Vetting to at least SC level if you do not already have this.

Your duties will include monitoring networks, hosts and endpoints for malicious activity using Security Incident and Event Management (SIEM) tools, Endpoint Detection and Response (EDR) tools, Antivirus and Malware detection tools and email security systems. You will also help to extend and enhance this capability under the direction of the CSOC Senior Analyst. Other activities will include, updating policy, including input into wider CSOC Strategy Policy,, procedures and processes etc.

Please note these are illustrative examples. Input to and ownership of the formulation of policy and standards will be expected. Specific security tooling will be under your remit. Understanding of common security ‘controls’ in order that guidance can be proffered in the event that an incident or event would require intervention.

You will have relevant work experience in Cyber Security Operations, specifically monitoring, detection and incident response duties, have experience with using at least some of the tools related to EDR, DNS and email security, as well as with IOCs.

The key deliverables of this role are as follows:

Using available tools, timely and accurate monitoring of events within the Cyro estate.

Clear communication of the incident issues in keeping with Cyro processes.

You will be responsible for initial triage, investigation and incident response.

Understanding and making a judgement on how and when to elevate detected incidents.

Responsible for your own professional development.

Ensuring all investigative activity is properly documented in our ticketing systems and followed up with relevant support teams.

Minimum experience 1 – 2 years in a SOC or CSOC environment or using…