Security Operations Analyst — HPC/Cloud Incident Response

Alastair LLP; Greater London; On-site; GBP 55,000 - 75,000; Full time

Benefits offered by this job

Competitive pay

Annual bonus

Lunch provided

Barista bar

30 days leave

Pension 9%

Healthcare

Cycle-to-work

Company events

Job summary

G-Research in London is seeking a Security Operations Analyst to join the Security Operations Centre. You will monitor, investigate and respond to security incidents across HPC, hybrid cloud and corporate estate, performing triage, containment and reporting.

Collaborating with engineers and the wider security function, you will develop detection rules, analytics and playbooks, enhance forensic capabilities, and build experience in incident response and threat hunting, with opportunities for

Qualifications

• Experience in a SOC, CSIRT or security operations role with hands-on alert handling and investigations.
• Strong understanding of security fundamentals, including network security, endpoint artefacts, authentication patterns, malware behaviours and common attack techniques.
• Experience with SIEM, XDR or SOAR tools such as Elastic Security, Sentinel, Azure Defender XDR or AWS Security Hub.
• Ability to analyse logs, correlate events and develop investigative hypotheses.
• Familiarity with forensic concepts, including filesystems, memory artefacts, persistence mechanisms, log sources and cloud control-plane events.
• Strong written and verbal communication skills with a collaborative approach to working with analysts and engineers.
• Experience with scripting or automation using Python or PowerShell is desirable.
• Exposure to cloud platforms, HPC environments or relevant certifications such as GCIH or GCIA is beneficial.

Responsibilities

• Performing triage, investigation and escalation of security alerts across HPC, cloud and corporate environments
• Supporting incident response activities including containment, remediation and reporting
• Conducting host and log-based forensic analysis across Windows, Linux, cloud, network and application environments
• Executing threat hunting tasks to identify abnormal or suspicious behaviours beyond existing detections
• Developing and refining detection rules, analytics and playbooks alongside senior analysts
• Maintaining accurate investigation records and case documentation
• Contributing to the continuous improvement of workflows, tooling and operational processes
• Collaborating with colleagues, engineers and internal stakeholders to support investigations, knowledge sharing and ongoing improvements

Skills

SOC operations

Incident response

Threat hunting

Forensic analysis

Scripting (Python or PowerShell)

Tools

Elastic Security

Microsoft Sentinel

Azure Defender XDR

AWS Security Hub

SIEM / SOAR platforms

Job description

G-Research in London is seeking a Security Operations Analyst to join the Security Operations Centre. You will monitor, investigate and respond to security incidents across HPC, hybrid cloud and corporate estate, performing triage, containment and reporting.

Collaborating with engineers and the wider security function, you will develop detection rules, analytics and playbooks, enhance forensic capabilities, and build experience in incident response and threat hunting, with opportunities for