Remote Security Operations Analyst - SIEM/IR

Viasat; Greater London; Híbrido; GBP 65 000 - 90 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Remote work

Monthly office days

Global team

Resumo da oferta

Viasat is seeking a RTO Security Analyst to join the frontline 24x7 team monitoring networks for suspicious activity and triaging security alerts. You will handle incidents across online and on-prem infrastructures, determine attack use cases, and document thorough triage artifacts and IOCS.

The role offers a fully remote schedule with monthly days in the office, a 5-week rotation and a focus on reducing false positives through tool feedback and rigorous analysis. English communication required.

Qualificações

• University degree or equivalent in Information Security, Forensics or Computer Science.
• Experience with SOC analysis, incident identification and reduction of false positives.
• Multiple years in the cybersecurity industry.
• Strong understanding of computing protocols and authentication mechanisms.
• Experience securing Windows, Linux, Oracle and VM platforms.
• Excellent verbal and written English communication.

Responsabilidades

• Security monitoring, managing security cases & tickets, security incident analysis.
• Analyzing security logs to identify actionable events (SIEM reports, alerts).
• Determine attack type based on triage of events collected.
• Document triage with artifacts and IOCS captured & documented.
• Provide feedback into design/implementation of security tools to reduce false positives.
• Analyze data sets to identify gaps and inform the lead analyst.

Conhecimentos

SIEM analysis

Incident handling

Threat analysis

Security monitoring

Logs analysis

Formação académica

University degree in Information Security/Forensics/CS

Ferramentas

SOC systems

Descrição da oferta de emprego

Viasat is seeking a RTO Security Analyst to join the frontline 24x7 team monitoring networks for suspicious activity and triaging security alerts. You will handle incidents across online and on-prem infrastructures, determine attack use cases, and document thorough triage artifacts and IOCS.

The role offers a fully remote schedule with monthly days in the office, a 5-week rotation and a focus on reducing false positives through tool feedback and rigorous analysis. English communication required.