SOC Security Analyst: Cloud & Incident Response

Starling; Cardiff; Hybrid; GBP 50,000 - 70,000; Full time

Benefits offered by this job

25 days holiday

Birthday day off

Buy/sell up to five extra days

Volunteer time 16 hours annually

Pension scheme

Life insurance 4x salary

Private Medical Insurance

Perkbox discounts

Cycle to Work

EV leasing

Job summary

Starling Bank is seeking a SOC Analyst to join our cyber security function in Cardiff. You will help protect customers, assets and systems in a 24/7 security operations environment, with on-call duties and a hybrid working model.

You will triage incidents, investigate alerts from cloud and on-prem sources, and contribute to threat hunting and incident readiness. We value aptitude and collaborative problem solving in a fast-paced fintech setting.

Qualifications

• 3+ years experience in an in-house SOC
• Understanding of AWS Security Solutions (or other Public Cloud Solutions)
• Analysis and Incident Response experience with Cloud systems (AWS/GCP)
• Experience working and supporting analytics/SIEM platforms
• Experience in CSIRT/SOC functions
• Experience supporting and conducting Incident Response engagements
• Experience in endpoint based investigations
• Experience in cloud based investigations
• Experience with Incident Command and Tabletop Exercises
• Interest in Automation
• Interest in Threat Intelligence and Analytic Tuning
• High level understanding of mobile, network and OS security controls
• Any programming in Python/Go/Java
• Cyber/Security degree or qualifications would be desired

Responsibilities

• Incident Triage, Response, and Investigations based on alerts from multiple sources
• Investigate security alerts from Cloud Infrastructure/Security, Endpoints, and Perimeter tooling
• Enhance analytic triggers to improve alert efficacy
• Develop and improve incident handling and readiness processes
• Proactive threat hunting based on threat intelligence
• Document incidents and investigations
• Support and participate in CSIRT/SOC functions

Skills

SOC Experience

AWS Security

Cloud investigations

Endpoint investigations

CSIRT/SOC

Incident Response

Automation interest

Threat Intelligence

Security controls

Programming (Python/Go/Java)

Education

Cyber/Information Security degree

Job description

Starling Bank is seeking a SOC Analyst to join our cyber security function in Cardiff. You will help protect customers, assets and systems in a 24/7 security operations environment, with on-call duties and a hybrid working model.

You will triage incidents, investigate alerts from cloud and on-prem sources, and contribute to threat hunting and incident readiness. We value aptitude and collaborative problem solving in a fast-paced fintech setting.