Cyber Security Analyst

Viasat; Greater London; Hybrid; GBP 65,000 - 90,000; Full time

Benefits offered by this job

Remote work

Monthly office days

Global team

Job summary

Viasat is seeking a RTO Security Analyst to join the frontline 24x7 team monitoring networks for suspicious activity and triaging security alerts. You will handle incidents across online and on-prem infrastructures, determine attack use cases, and document thorough triage artifacts and IOCS.

The role offers a fully remote schedule with monthly days in the office, a 5-week rotation and a focus on reducing false positives through tool feedback and rigorous analysis. English communication required.

Qualifications

• University degree or equivalent in Information Security, Forensics or Computer Science.
• Experience with SOC analysis, incident identification and reduction of false positives.
• Multiple years in the cybersecurity industry.
• Strong understanding of computing protocols and authentication mechanisms.
• Experience securing Windows, Linux, Oracle and VM platforms.
• Excellent verbal and written English communication.

Responsibilities

• Security monitoring, managing security cases & tickets, security incident analysis.
• Analyzing security logs to identify actionable events (SIEM reports, alerts).
• Determine attack type based on triage of events collected.
• Document triage with artifacts and IOCS captured & documented.
• Provide feedback into design/implementation of security tools to reduce false positives.
• Analyze data sets to identify gaps and inform the lead analyst.

Skills

SIEM analysis

Incident handling

Threat analysis

Security monitoring

Logs analysis

Education

University degree in Information Security/Forensics/CS

Tools

SOC systems

Job description

About us

One team. Global challenges. Infinite opportunities. At Viasat, we’re on a mission to deliver connections with the capacity to change the world. For more than 35 years, Viasat has helped shape how consumers, businesses, governments and militaries around the globe communicate. We’re looking for people who think big, act fearlessly, and create an inclusive environment that drives positive impact to join our team.

What you'll do

The RTO Security Analyst will form part of the frontline 24x7 team that monitors the network for suspicious activity. Analyst will work to protect the organization by detecting and triaging security alerts. The security analyst’s responsibilities include detailed incident handling across online and on-premises infrastructures. They determine attack use cases and follow the process for blocking issues to contain and mitigate security risks. Security analysts will also need to review & address any detected false positives.

5 week Dupont shift rota covering 12-hour shifts. Fully remote with days in the office monthly.

The day-to-day

• Security monitoring, managing security cases & tickets, security incident analysis, and other security tasks.


• Analysing a variety of security logs to identify actionable events (SIEM reports, alerts, tickets, system, network, security monitoring tools)


• Determine the attack type based on the triage of events collected


• Demonstrate analytical & technical thinking when triaging system & network events


• Ensure all incidents are recorded in the corporate case management platform. Cases must contain a detailed triage will all artifacts and IOCS captured & documented


• Participating feedback into the design, implementation, and administration of security tools/ rules to reduce false positives


• Ability to analyse data sets, determine the gaps and understand recommended fixes to RTO lead analyst

What you'll need

• A University degree level education or equivalent in Information Security, Forensics, or Computer Science; related experience and/or training in the field of IT security monitoring and analysis, cyber threat analysis, and vulnerability analysis.


• Understanding of performing technical level analysis and interpretation of information from SOC systems; incident identification/analysis, handling of blocking issues, and reduction of false positives.


• Multiple years of experience within the industry


• Good technical understanding computing protocols, authentication mechanisms & attack TTP’s


• Intermediate knowledge of Information Security fundamentals, technologies, and design principals.


• Understanding or demonstrable experience in securing Windows, Linux, Oracle and VM platforms.


• Excellent verbal and written communication skills in English.

What will help you on the job

• A Global Information Assurance Certification (GIAC) Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA) or GIAC equivalent


• Willingness to learn new skills and be self-motivated


• Work well under pressure and under your own initiative

EEO Statement

Viasat is proud to be an equal opportunity employer, seeking to create a welcoming and diverse environment. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, gender identity or expression, sexual orientation, national origin, ancestry, physical or mental disability, medical condition, marital status, genetics, age, or veteran status or any other applicable legally protected status or characteristic. If you would like to request an accommodation on the basis of disability for completing this on-line application, please click here.