SOC Threat Hunter & Incident Response Pro

Evelyn Partners; Glasgow; Hybrid; GBP 40,000 - 65,000; Full time

Benefits offered by this job

Private medical insurance

Life assurance

Pension contribution

Hybrid working model

Generous holiday package

Option to purchase additional holiday

Shared parental leave

Job summary

Evelyn Partners in Glasgow is recruiting a Security Operations Specialist to join the SOC. You will provide second/third line analysis and incident response, supporting external security partners and monitoring rulesets for relevance and effectiveness.

You will build relationships with Technology Services stakeholders, guiding end users on best practice operational security and contributing to security improvements across the business.

Qualifications

• Experience in a Security Operations Centre (SOC)
• 3+ years in security operations or a technical security role
• Strong understanding of SIEM, IAM and DLP technologies
• Experience in Azure/365-centric environments
• Experience analyzing cyber attacks using MITRE ATT&CK and other frameworks
• Ability to stay updated on evolving threat landscape

Responsibilities

• Respond to escalated security incidents within SLAs
• Coordinate with third-party security vendors for monitoring and triage
• Analyze security reports to identify trends and improve secure behaviours
• Be part of Cyber Incident Response team as a technical SME
• Maintain phishing campaigns and remediation management
• Oversee security tooling and conduct security reviews of information systems

Skills

SOC experience

Security operations

Incident response

MITRE ATT&CK framework

Zero Trust

SIEM

IAM

DLP

Azure/365 environment

Education

Bachelor's or Master's in InfoSec/InfoSys/CS

Tools

Azure/365

Job description

Evelyn Partners in Glasgow is recruiting a Security Operations Specialist to join the SOC. You will provide second/third line analysis and incident response, supporting external security partners and monitoring rulesets for relevance and effectiveness.

You will build relationships with Technology Services stakeholders, guiding end users on best practice operational security and contributing to security improvements across the business.