Security Analyst, Incident Response; GSOC

What is the opportunity?

We are looking for an experienced Security Analyst to join the RBC Global Security Incident Response team within the Global Security Operations Centre (GSOC).

Global accountability to respond to critical security incidents/events, providing accurate and timely reporting to Global Cyber Security Leadership;

• Provide 7/24/365 support for security incidents impacting mission‑critical business and IT infrastructure, including global incident management, response, remediation and reporting.
• Support and maintain communication with the CSIRT extended team, ensuring timely communication to all stakeholders regarding incident response activities.
• Provide post‑mortem reporting for leadership detailing security vulnerabilities, technology gaps, shortcomings or miscellaneous security issues.
• Work with threat intelligence, Security Operations Centre and extended teams to ensure global compliance with RBC standards for security incidents and findings.
• Drive resolution of security incidents in a timely and effective manner.
• Collaborate with Cybersecurity Command Centre technical analysts, specialists and management to detail and report on the status and resolution of critical incidents.
• Execute incident response actions and engage with business/technical stakeholders.

• Bachelor’s degree in computer science and/or IT related disciplines and certifications in information security (CISSP, GCIA, GCIH, GREM, CEH).
• Demonstrated experience performing investigation activities for security‑related events in a complex Incident Management or Security Operations Center environment.
• Thorough understanding of Security Information and Incident Management methodologies.
• Proven experience in a SOC environment.
• Exposure to malware and sandbox analysis.
• Robust computer networking and operating‑system knowledge.

• Experience with SOAR platforms.
• Familiarity with threat hunting techniques and scenarios.
• Knowledge in detection engineering.
• Understanding of current threat landscape and threat actor TTPs.
• Experience with scripting languages (Power Shell, Python, regex, bash, etc.).
• Industry‑recognized certifications from ISC‑2, SANS, ISACA, etc.

• Help to develop the ethos and environment of a new team.
• Leadership support for development through coaching and management opportunities.
• Opportunities to work with the best in the field.
• Ability to make a difference and lasting impact.
• Dynamic, collaborative, progressive, and high‑performing team environment.

Location:

10 Fenchurch Avenue, London, United Kingdom.

Employment type:

Full time |

Work hours:

35 per week | Headquarters:
London office (requires 4 days onsite).