Senior Cyber Operations Analyst

慨正橡扯; London; Hybrid; GBP 55,000 - 85,000; Full time

Job summary

A leading financial services organization in London is seeking a Senior Cyber Operations Analyst to enhance their security monitoring efforts. The analyst will play a crucial role in incident response and threat analysis, utilizing SIEM technologies and incident response skills. This hybrid position requires strong communication skills to articulate risks effectively and offers a shift-based work schedule.

Qualifications

• Proficient in Splunk and behavioral analytics.
• Experience with network analysis and traffic pattern recognition.
• Strong understanding of cloud security principles (AWS, Google, Azure).

Responsibilities

• Handle escalated incidents from Tier 1 analysts and conduct deeper analysis.
• Work closely with senior security teams to mitigate threats.
• Proactively search for potential threats in the system.

Skills

Proficiency in SIEM technologies

Incident response skills

Knowledge of attack techniques

Stakeholder management skills

Proficiency in analyzing network traffic

Job description

Join Barclays as a Senior Cyber Operations Analyst, where you will play a key role as part of a 24/7 security monitoring team. As Tier 2 Analysts you will handle escalated incidents from Tier 1 analysts, conduct deeper analysis, and work closely with senior security teams to contain and mitigate threats.

This role is part of a large global team which operates follow-the-sun. This role requires a 4-on, 4-off shift pattern (08:00 – 20:00, 12-hour shifts) and a hybrid work arrangement—three days on-site and one day remote per week.

To be successful as a Senior Cyber Operations Analyst you will need the following:

• Proficiency in SIEM technologies including Splunk
• Proactively search for potential threats using behavioral analytics, network traffic analysis, and threat intelligence.
• Incident response skills, including proficiency in PCAP capture, network analysis, and traffic pattern recognition.
• Knowledge of attack techniques (MITRE ATT&CK framework, malware analysis, and intrusion detection).
• Proficiency in analyzing network traffic (PCAP), endpoint logs, IDS/IPS alerts, and security telemetry.
• Stakeholder management skills, with the ability to communicate and articulate security risks at both technical and non-technical levels, depending on the audience.

Some other highly valued skills may include:

• A solid technical understanding of threats against the financial industry across physical and cyber threat domains.
• Proficiency in operating system fundamentals and security (Windows & Linux).
• Expertise in networking principles, protocols, and practices.
• Familiarity with traditional ITIL concepts, including incident, change, and problem management.
• Understanding of cloud security principles (AWS, Google, Azure). • Strong working knowledge of Splunk and the Splunk Query Language.
• Experience or knowledge of data loss prevention, which would be advantageous.

You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen strategic thinking and digital and technology, as well as job-specific technical skills

This role will be based in London location.