IT&D Analyst - Security Monitoring & Threat Response

Information Technology & Digital

About the role

As an IT&D Security Analyst, you will be instrumental in detecting and responding to security incidents, conducting in-depth post-incident technical analysis, and managing security alerts across IT and OT environments. You will collaborate closely with the Cyber Security Team to refine requirements, develop advanced threat detection mechanisms, create robust incident response playbooks, and implement automation strategies. Furthermore, you will actively participate in threat hunting exercises and contribute to the enhancement of our SIEM and EDR platforms.

Your responsibilities

Key Responsibilities:

• Respond to, resolve, and escalate security incidents as required.
• Contribute to the development and refinement of the IT security incident response process and supporting materials.
• Conduct threat hunting activities to identify threat actor groups and their tactics, techniques, and procedures (TTPs).
• Capture threat intelligence on actor TTPs and develop appropriate countermeasures.
• Participate in post-incident reviews and deliver presentations to senior management.
• Engage in security incident tabletop exercises.
• Assist in developing processes and procedures to optimize incident response times, incident analysis, and overall, SOC operations.

The experience we're looking for

• Minimum of 3 years of experience in responding to cyber incidents.
• Technical expertise in security-related systems and applications such as EDR, IDS/IPS, Proxy, SIEM, WAF, and SOAR.
• Proven experience in developing, documenting, and maintaining security procedures.
• Strong understanding of network infrastructure, including routers, switches, firewalls, and associated network protocols.
• Proficiency in TCP/IP and network administration/protocols.
• Understanding of how Operating Systems works (Windows, Linux)
• Excellent analytical and problem-solving skills for effective security incident resolution.
• Relevant certifications such as Security+, Network+, GCIA, GCIH, CISP, GMON, etc.
• Ability to work independently with minimal supervision.
• Experience with scripting languages (Bash, PowerShell, Python) is advantageous.
• Solid knowledge of software engineering, information risk, security guidelines, and architecture standards.
• Excellent verbal and written English language skills.
• Innovative and experimental approach to problem-solving.
• Strong communication and interpersonal skills.

The skills for success

SOC operations, Threat response,EDR, TCP/IP

What we offer

Equality