Security Operations Analyst

Gresearch; Greater London; Presencial; GBP 75 000 - 110 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Lunch provided

35 days annual leave

9% pension contributions

Healthcare and life assurance

Relocation support

Cycle-to-work

Monthly company events

Resumo da oferta

G-Research is seeking a Security Operations Analyst to join the SOC at our London HQ. The role covers triage, investigation and response to security incidents across HPC, cloud and corporate environments, with collaboration to improve detections and containment strategies.

You will develop expertise in incident response, forensics and detection engineering while working with engineers and other security professionals.

Qualificações

• Hands-on role in alert handling and investigations in SOC/CSIRT.
• Strong understanding of network security, endpoint artefacts, authentication patterns, malware behaviours and common attack techniques.
• Experience using SIEM, XDR or SOAR tools such as Elastic Security, Sentinel, Azure Defender XDR or AWS Security Hub.
• Ability to analyse logs, correlate events and develop investigative hypotheses.
• Familiarity with forensic concepts, including filesystems, memory artefacts, persistence mechanisms, log sources and cloud control-plane events.
• Strong written and verbal communication skills with a collaborative approach to working with analysts and engineers.

Responsabilidades

• Perform triage, investigation and escalation of security alerts across HPC, cloud and corporate environments
• Supporting incident response activities including containment, remediation and reporting
• Conducting host and log-based forensic analysis across Windows, Linux, cloud, network and application environments
• Executing threat hunting tasks to identify abnormal or suspicious behaviours beyond existing detections
• Developing and refining detection rules, analytics and playbooks alongside senior analysts
• Maintaining accurate investigation records and case documentation
• Contributing to the continuous improvement of workflows, tooling and operational processes
• Collaborating with colleagues, engineers and internal stakeholders to support investigations, knowledge sharing and ongoing improvements

Conhecimentos

SOC experience

Incident response

Threat hunting

Forensic analysis

Scripting

Cloud platforms

Formação académica

GCIA

GCIH

Ferramentas

Elastic Security

Sentinel

Azure Defender XDR

AWS Security Hub

Descrição da oferta de emprego

Описание

We tackle the most complex problems in quantitative finance, by bringing scientific clarity to financial complexity. From our London HQ, we unite world-class researchers and engineers in an environment that values deep exploration and methodical execution - because the best ideas take time to evolve. Together we’re building a world-class platform to amplify our teams’ most powerful ideas. Security is foundational to this mission and must be delivered in a way that supports how our engineering teams build and operate complex systems at scale. Take the next step in your career. We’re looking for a Security Operations Analyst to join our Security Operations Centre (SOC). This team monitors, investigates and responds to security incidents across G-Research’s high-performance compute environments, hybrid cloud platforms and corporate estate. Operating on the front line of our defensive capability, the SOC analyses alerts, investigates threats and supports their detection, containment and eradication. As a Security Operations Analyst, you will work across a broad range of technologies and investigative disciplines, developing your skills in triage, incident response, detection engineering, and forensic analysis. You will collaborate closely with the wider security function and engineering teams to continuously improve our detection and response capabilities. This role is ideal for someone with experience in a SOC or incident response team who wants to deepen their technical skills, contribute directly to meaningful defensive work and progress towards senior responsibilities.

Задачи

• Performing triage, investigation and escalation of security alerts across HPC, cloud and corporate environments
• Supporting incident response activities including containment, remediation and reporting
• Conducting host and log-based forensic analysis across Windows, Linux, cloud, network and application environments
• Executing threat hunting tasks to identify abnormal or suspicious behaviours beyond existing detections
• Developing and refining detection rules, analytics and playbooks alongside senior analysts
• Maintaining accurate investigation records and case documentation
• Contributing to the continuous improvement of workflows, tooling and operational processes
• Collaborating with colleagues, engineers and internal stakeholders to support investigations, knowledge sharing and ongoing improvements

Требования

• Experience in a SOC, CSIRT or security operations role with hands-on involvement in alert handling and investigations
• Strong understanding of security fundamentals, including network security, endpoint artefacts, authentication patterns, malware behaviours and common attack techniques
• Experience using SIEM, XDR or SOAR tools such as Elastic Security, Sentinel, Azure Defender XDR or AWS Security Hub
• Ability to analyse logs, correlate events and develop investigative hypotheses
• Familiarity with forensic concepts, including filesystems, memory artefacts, persistence mechanisms, log sources and cloud control-plane events
• Strong technical curiosity and desire to develop expertise in incident response, forensics and detection engineering
• Strong written and verbal communication skills with a collaborative approach to working with analysts and engineers
• Experience with scripting or automation using Python or PowerShell is desirable
• Exposure to cloud platforms, HPC environments or relevant certifications such as GCIH or GCIA is beneficial

Условия

• Highly competitive compensation plus annual discretionary bonus
• Lunch provided via Just Eat for Business and dedicated barista bar
• 35 days’ annual leave
• 9% company pension contributions
• Informal dress code and excellent work-life balance
• Comprehensive healthcare and life assurance
• Cycle-to-work scheme
• Monthly company events
• Relocation Support – If you're relocating internationally to join us in London, we offer a comprehensive range of support services to assist you all the way. All costs associated with your relocation and immigration are covered by G-Research. Concierge service: Your personal consultant will arrange travel, help find your new home and manage your move. They're also on hand to help with more bespoke requests too. Immigration support: We'll partner you with an expert consultant who will guide you through the full immigration process.

G-Research is committed to cultivating and preserving an inclusive work environment. We are an ideas-driven business and we place great value on diversity of experience and opinions. We want to ensure that applicants receive a recruitment experience that enables them to perform at their best. If you have a disability or special need that requires accommodation please let us know in the relevant section