Senior Cyber Operations Analyst

Barclays UK; London; Hybrid; GBP 50,000 - 75,000; Full time

Job summary

Join a leading financial institution as a Senior Cyber Operations Analyst, where you will play a pivotal role in security monitoring. You will conduct deep analyses on threats, manage security incidents, and collaborate with senior security teams in a hybrid work environment, ensuring the bank's cybersecurity posture remains robust.

Qualifications

• Proficiency in SIEM technologies including Splunk is essential.
• Skills in incident response, including proficiency in PCAP capture and network analysis.
• Knowledge of attack techniques such as malware analysis and intrusion detection.

Responsibilities

• Management of security monitoring systems to detect and block potential incidents.
• Identification of emerging cyber security threats.
• Management and analysis of security information and event management systems.

Skills

SIEM technologies

Incident response

Stakeholder management

Behavioral analytics

Network traffic analysis

Tools

Splunk

PCAP

Windows & Linux security

Cloud security principles

Job description

Join Barclays as a Senior Cyber Operations Analyst, where you will play a key role as part of a 24/7 security monitoring team. As Tier 2 Analysts you will handle escalated incidents from Tier 1 analysts, conduct deeper analysis, and work closely with senior security teams to contain and mitigate threats.

This role is part of a large global team which operates follow-the-sun. This role requires a 4-on, 4-off shift pattern (08:00 – 20:00, 12-hour shifts) and a hybrid work arrangement—three days on-site and one day remote per week.

To be successful as a Senior Cyber Operations Analyst you will need the following:

• Proficiency in SIEM technologies including Splunk
• Proactively search for potential threats using behavioral analytics, network traffic analysis, and threat intelligence.
• Incident response skills, including proficiency in PCAP capture, network analysis, and traffic pattern recognition.
• Knowledge of attack techniques (MITRE ATT&CK framework, malware analysis, and intrusion detection).
• Proficiency in analyzing network traffic (PCAP), endpoint logs, IDS/IPS alerts, and security telemetry.
• Stakeholder management skills, with the ability to communicate and articulate security risks at both technical and non-technical levels, depending on the audience.

Some other highly valued skills may include:

• A solid technical understanding of threats against the financial industry across physical and cyber threat domains.
• Proficiency in operating system fundamentals and security (Windows & Linux).
• Expertise in networking principles, protocols, and practices.
• Familiarity with traditional ITIL concepts, including incident, change, and problem management.
• Understanding of cloud security principles (AWS, Google, Azure). • Strong working knowledge of Splunk and the Splunk Query Language.
• Experience or knowledge of data loss prevention, which would be advantageous.

You may be assessed on the key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen strategic thinking and digital and technology, as well as job-specific technical skills

This role will be based in London location.

Purpose of the role

To monitor the performance of operational controls, implement and manage security controls and consider lessons learnt in order to protect the bank from potential cyber-attacks and respond to threats.

Accountabilities

• Management of security monitoring systems, including intrusive prevention and detection systems, to alert, detect and block potential cyber security incidents, and provide a prompt response to restore normal operations with minimised system damage.
• Identification of emerging cyber security threats, attack techniques and technologies to detect/prevent incidents, and collaborate with networks and conferences to gain industry knowledge and expertise.
• Management and analysis of security information and event management systems to collect, correlate and analyse security logs, events and alerts/potential threats.
• Triage of data loss prevention alerts to identify and prevent sensitive data for being exfiltrated from the banks network.
• Management of cyber security incidents including remediation & driving to closure.

Assistant Vice President Expectations

• To advise and influence decision making, contribute to policy development and take responsibility for operational effectiveness. Collaborate closely with other functions/ business divisions.
• Lead a team performing complex tasks, using well developed professional knowledge and skills to deliver on work that impacts the whole business function. Set objectives and coach employees in pursuit of those objectives, appraisal of performance relative to objectives and determination of reward outcomes
• If the position has leadership responsibilities, People Leaders are expected to demonstrate a clear set of leadership behaviours to create an environment for colleagues to thrive and deliver to a consistently excellent standard. The four LEAD behaviours are: L – Listen and be authentic, E – Energise and inspire, A – Align across the enterprise, D – Develop others.
• OR for an individual contributor, they will lead collaborative assignments and guide team members through structured assignments, identify the need for the inclusion of other areas of specialisation to complete assignments. They will identify new directions for assignments and/ or projects, identifying a combination of cross functional methodologies or practices to meet required outcomes.
• Consult on complex issues; providing advice to People Leaders to support the resolution of escalated issues.
• Identify ways to mitigate risk and developing new policies/procedures in support of the control and governance agenda.
• Take ownership for managing risk and strengthening controls in relation to the work done.
• Perform work that is closely related to that of other areas, which requires understanding of how areas coordinate and contribute to the achievement of the objectives of the organisation sub-function.
• Collaborate with other areas of work, for business aligned support areas to keep up to speed with business activity and the business strategy.
• Engage in complex analysis of data from multiple sources of information, internal and external sources such as procedures and practises (in other areas, teams, companies, etc).to solve problems creatively and effectively.
• Communicate complex information. 'Complex' information could include sensitive information or information that is difficult to communicate because of its content or its audience.
• Influence or convince stakeholders to achieve outcomes.

All colleagues will be expected to demonstrate the Barclays Values of Respect, Integrity, Service, Excellence and Stewardship – our moral compass, helping us do what we believe is right. They will also be expected to demonstrate the Barclays Mindset – to Empower, Challenge and Drive – the operating manual for how we behave.