Cyber Defence Analyst

About the role

The team serves as the Tier 1 function and is responsible for detecting, triaging and analysing cyber security events of interest. As a Cyber Security Analyst, you will monitor the Group’s computer systems for suspicious activity using enterprise-grade cyber tools and critical thought. You will triage and manage various incidents, events, and queries from the business to the relevant resolver group.

What you'll do

• Monitor the Group’s computer systems for suspicious activity using enterprise-grade cyber tools and critical thought
• Triage and analyse detection alerts and staff-reported cyber attacks to identify which events require response activities based on Standard Operating Procedures
• Capture essential details and artefacts for cyber security events
• Maintain event response documentation, participate in post-mortems, and write event reports
• Identify potential new detection logic and escalate to the Detection Engineering team

What you need

• 5–9 yrs of experience
• SIEM
• EDR
• Cloud security
• Splunk
• Networking
• AWS
• B.Tech or B.E. or B.Sc or BCA or M.Tech or MCA or M.Sc

Good to have

• Azure
• SOP writing