SOC Incident Response & Forensics Analyst

Gresearch; Greater London; Presencial; GBP 75.000 - 110.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Lunch provided

35 days annual leave

9% pension contributions

Healthcare and life assurance

Relocation support

Cycle-to-work

Monthly company events

Descripción de la vacante

G-Research is seeking a Security Operations Analyst to join the SOC at our London HQ. The role covers triage, investigation and response to security incidents across HPC, cloud and corporate environments, with collaboration to improve detections and containment strategies.

You will develop expertise in incident response, forensics and detection engineering while working with engineers and other security professionals.

Formación

• Hands-on role in alert handling and investigations in SOC/CSIRT.
• Strong understanding of network security, endpoint artefacts, authentication patterns, malware behaviours and common attack techniques.
• Experience using SIEM, XDR or SOAR tools such as Elastic Security, Sentinel, Azure Defender XDR or AWS Security Hub.
• Ability to analyse logs, correlate events and develop investigative hypotheses.
• Familiarity with forensic concepts, including filesystems, memory artefacts, persistence mechanisms, log sources and cloud control-plane events.
• Strong written and verbal communication skills with a collaborative approach to working with analysts and engineers.

Responsabilidades

• Perform triage, investigation and escalation of security alerts across HPC, cloud and corporate environments
• Supporting incident response activities including containment, remediation and reporting
• Conducting host and log-based forensic analysis across Windows, Linux, cloud, network and application environments
• Executing threat hunting tasks to identify abnormal or suspicious behaviours beyond existing detections
• Developing and refining detection rules, analytics and playbooks alongside senior analysts
• Maintaining accurate investigation records and case documentation
• Contributing to the continuous improvement of workflows, tooling and operational processes
• Collaborating with colleagues, engineers and internal stakeholders to support investigations, knowledge sharing and ongoing improvements

Conocimientos

SOC experience

Incident response

Threat hunting

Forensic analysis

Scripting

Cloud platforms

Educación

GCIA

GCIH

Herramientas

Elastic Security

Sentinel

Azure Defender XDR

AWS Security Hub

Descripción del empleo

G-Research is seeking a Security Operations Analyst to join the SOC at our London HQ. The role covers triage, investigation and response to security incidents across HPC, cloud and corporate environments, with collaboration to improve detections and containment strategies.

You will develop expertise in incident response, forensics and detection engineering while working with engineers and other security professionals.