Remote Security Analyst — Incident Response & Forensics

ThreatSpike Ltd.; United Kingdom; Remote; GBP 45,000 - 65,000; Full time

Job summary

ThreatSpike is hiring a Security Analyst to monitor, triage and act on alerts from an in-house SIEM, assisting with incident response and digital forensics. The role involves leading self-directed projects and improving the team’s capabilities from a fully remote position with occasional UK town hall meetings.

The ideal candidate has a STEM degree and at least one year in blue team operations, with strong problem solving, scripting and cloud skills to support clients' investigations.

Qualifications

• Education: a 1st class degree in Computer Science, Cyber Security or another STEM subject.
• Hands-on experience: at least one year of experience in blue team operations or another cyber security focused role.
• Deep technical understanding: operating systems, networking, security protocols, scripting and cloud infrastructure.
• Problem solving: strong analytical and problem-solving ability.
• A self-starter: curiosity, a commitment to self-learning and the initiative to take ownership of work and drive projects forward independently.
• Drive and ambition: passion, determination and a commitment to continuous improvement.
• Flexibility: the ability to manage multiple projects and commitments while delivering consistent results.
• Communication: the confidence to take charge of situations and lead conversations with internal and external stakeholders

Responsibilities

• Email review and initial triage: Review client emails through the ThreatSpike email gateway to identify phishing and scams.
• Act as first responder for incidents, performing initial triage and analysis.
• Advanced analysis, client tickets and DFIR: Conduct in-depth analysis of high severity incidents and respond to client queries and tickets.
• Digital forensics and incident response: support incident response operations, from reviewing SIEM logs to leading client communications.
• Self-directed projects: identify opportunities, take ownership of projects and deliver them.
• Threat intelligence: analyse cyber security news and gather intelligence.
• Security engineering: work with development team to improve heuristics and detections.
• Threat hunting: proactively search client environments for threats using platform data.
• Training: develop learning material and upskill the team.
• R&D: prototype new tools and automations to improve SOC operations.
• Documentation: produce knowledge base articles, playbooks and SOPs for the team.

Skills

Blue team ops

Operating systems

Networking

Security protocols

Scripting

Cloud infrastructure

Analytical skills

Self-starter

Communication

Education

1st class STEM degree

Tools

ThreatSpike Wire platform

Job description

ThreatSpike is hiring a Security Analyst to monitor, triage and act on alerts from an in-house SIEM, assisting with incident response and digital forensics. The role involves leading self-directed projects and improving the team’s capabilities from a fully remote position with occasional UK town hall meetings.

The ideal candidate has a STEM degree and at least one year in blue team operations, with strong problem solving, scripting and cloud skills to support clients' investigations.