Hybrid Incident Response Analyst: Forensics & Threat Intel

AXA UK; Leeds; Hybrid; GBP 60,000 - 85,000; Full time

Job summary

AXA UK is seeking an Incident Response Analyst to join our Security and Resilience function. You’ll respond to cyber security incidents, perform forensic investigations and provide cyber threat intelligence to support detection and response.

You’ll also collaborate with Security and Risk colleagues to improve processes and threat analysis. The role offers a flexible hybrid working pattern with days in the office and from home.

Qualifications

• Hands on experience of security incident handling.
• Knowledge of computer forensics, incident response and e-discovery tools, EDR, NDR, UEBA, honeypots, data loss prevention, SIEM, and Log Managers.
• Excellent time management skills, including the ability to manage a demanding and variable workload with tight deadlines.
• Understanding of common protocol behaviours and comfortable with packet analysis is desirable.
• Ability to negotiate and resolve conflict.
• Good analytical skills and the ability to clearly identify key issues.
• Relevant professional qualifications (e.g. GIAC CGIH and SSCP) are desirable.

Responsibilities

• Acting as an escalation point for all UK security incidents, ensuring incidents are managed in accordance with UK and Group incident management requirements.
• Performing in-depth analysis of security events utilising a range of security tools.
• Supporting the wider team in process improvement, detection content tuning, and threat analysis.
• Working with a range of Security and Risk colleagues to ensure all identified risks are identified and managed appropriately.

Skills

Security incident handling

Incident response

Time management

Packet analysis

Negotiation

Analytical skills

Education

GIAC CGIH

SSCP

Tools

EDR

NDR

UEBA

Honeypots

DLP

SIEM

Log Managers

Job description

AXA UK is seeking an Incident Response Analyst to join our Security and Resilience function. You’ll respond to cyber security incidents, perform forensic investigations and provide cyber threat intelligence to support detection and response.

You’ll also collaborate with Security and Risk colleagues to improve processes and threat analysis. The role offers a flexible hybrid working pattern with days in the office and from home.