Senior Security Monitoring and Response Analyst

Mastercard Inc.; Greater London; Presencial; GBP 70.000 - 100.000; Jornada completa

Descripción de la vacante

Mastercard Vocalink in London is seeking a driven Senior Security Operations Analyst with incident response capabilities to help secure critical payments infrastructure in the UK. You will monitor, triage and respond to alerts, and lead incident containment and remediation with playbooks and cross‑functional collaboration.

The role requires hands-on experience in SOC operations, incident response, forensics, and cloud security across Azure, AWS or GCP.

Formación

• Experience in an SOC and incident response role.
• Proficiency with SIEM queries (Splunk SPL).
• Windows/Unix forensics experience.
• Cloud security knowledge (Azure, AWS, GCP) and EDR/NDR tools.

Responsabilidades

• Triage alerts and respond to security incidents.
• Provide monitoring coverage and investigate escalated alerts (T3).
• Respond to incidents via defined playbooks and playbook updates.
• Perform root-cause analysis and apply lessons learned.
• Collaborate with security engineering, threat intel, insider threat and managed SOC.
• Develop knowledge base, playbooks and use cases.
• Support proactive initiatives and project work.
• Work independently and with teams to assess impact and mitigate risk.

Conocimientos

SOC experience

Incident response

Threat hunting

Analytical thinking

Educación

CISSP/GIAC certification

Herramientas

SIEM (Splunk)

EDR/NDR tools

Cloud security tools

Descripción del empleo

• Mastercard Vocalink is looking for a driven and motivated Senior Security Operations Analyst with Incident Response capabilities, to contribute to securing critical payments infrastructure in the UK
• In this role you’ll be responsible for triaging alerts and responding to security incidents. When not actively engaged in ongoing incidents, the team works on the improvement and streamlining of the detection and response function
• Providing monitoring coverage, triage and investigation of escalated alerts (T3) from various sources
• Responding to cybersecurity incidents through critical thinking, defining, and applying playbook responses
• Applying root cause analysis and lessons learned to improve security posture and processes
• Working closely with security engineering, threat intelligence, insider threat and a managed SOC service, providing critical feedback to improve and automate monitoring and response
• Strong collaboration with the team to develop knowledge base, playbook and use cases
• Proactive initiatives and project-related support by providing subject matter expertise
• Ability to work independently as well as collaborate with different teams to assess impact, mitigate risk, and resolve security incidents

• Direct experience in a Security Operations Center (SOC)Experience working in an incident response or digital forensics roleE.g. vulnerability research, network traffic analysis, static and dynamic malware analysis, digital forensics, memory analysis, web-security and threat huntingDemonstrated experience with cybersecurity related disciplines, not limited to:
• The Ideal candidate is a technically inclined and experienced security specialist who enjoys working in a fast-paced collaborative team environmentExperience in creating queries and alerts in a SIEM, preferably in SPLExperience with Windows/Unix OS forensicsExperience with Cloud Security (Azure, AWS, GCP)Experience working with NDR/EDR solutionsFamiliarity with Indicators of Compromise (IoCs), Indicators of Attack (IoAs), ATT&CK Tools, Techniques and Procedures (TTPs)Strong interpersonal skills, including good communication with the ability to articulate ideas in a precise and concise mannerCISSP, GIAC certifications or equivalent