Cyber Monitoring and Response Analysts

Brightwater Recruitment; Dublin; Hybrid; EUR 65,000 - 90,000; Full time

Job summary

Brightwater Recruitment partners with a major financial services and insurance organisation in Dublin to build a CyberSec Monitoring & Response team. As a Cybersecurity Monitoring & Response Analyst, you will investigate and respond to security incidents, analyze activity across SIEM/EDR, and drive improvements in detection and response.

This is a 24/7, hybrid role with a 4 days onsite pattern. Candidates should have hands-on incident response experience, cloud and threat intel skills, and

Qualifications

• Minimum 2 years in a SOC, security monitoring or incident response.
• Hands-on incident analysis and response leadership.
• Experience with SIEM and EDR/XDR; MITRE ATT&CK knowledge.
• Strong networking, OS, identity and attack techniques understanding.
• Cloud environment experience.
• Threat intelligence driven decision making.
• Analytical, problem-solving and communication skills.
• Certifications such as CySA+, GIAC or Blue Team advantageous.
• Willingness to work a shift pattern providing 24/7 coverage.

Responsibilities

• Monitor, investigate and respond to cybersecurity alerts and events to identify, contain and mitigate threats.
• Perform in-depth triage, analysis and escalation of security incidents.
• Analyse activity across SIEM, EDR/XDR, network, identity and cloud telemetry to establish scope and impact.
• Leverage threat intelligence and analytics to support fast, well-judged decisions.
• Partner with detection engineering and threat-focused teams to improve detection coverage and quality.
• Contribute to playbooks, runbooks and the continuous improvement of security operations.
• Support and coach developing analysts, and help contain and remediate incidents end to end.
• Identify recurring patterns, risks and opportunities to strengthen monitoring and response.

Skills

SOC experience

Incident response

MITRE ATT&CK

Threat intelligence

Analytical thinking

Communication skills

Cloud environments

Networking

Operating systems

Education

Relevant qualification

CySA+ / GIAC / Blue Team (advantageous)

Tools

SIEM

EDR/XDR

Job description

CyberSec Monitoring and Response Analysts

Permanent, Hybrid (4 Days Onsite), Shift Rota

About the Company

Brightwater has been exclusively retained to lead the build-out of a brand new Cyber Security team in Dublin, Ireland, for a large, well-established financial services and insurance organisation. Keeping millions of people and their most important assets safe is central to what the organisation stands for, and cyber security is a vital part of delivering on it.

The CyberSec Team will operate in a 24/7 Cyber Threat Operations Centre, a round-the-clock operation defending the organisation's customers, employees, operations and critical assets from evolving cyber threats.

About the Position

As parting of the team build, my client will have roles available at multiple levels and looking to attract candidates with relevant qualifications and prior professional experience.

As a Cybersecurity Monitoring & Response Analyst, you'll investigate and respond to security incidents, help contain threats and contribute to improving how the CTOC detects and handles them. You will analyse activity across multiple security data sources, apply sound judgement to complex alerts, and partner with engineering and threat-focused teams to strengthen detection and response.

This is an analytical and investigative role that sits at the intersection of security operations, threat intelligence and continuous improvement. You'll work closely with detection engineering, threat teams and developing analysts, handling security information with discretion and professionalism.

Responsibilities

• Monitor, investigate and respond to cybersecurity alerts and events to identify, contain and mitigate threats
• Perform in-depth triage, analysis and escalation of security incidents
• Analyse activity across SIEM, EDR/XDR, network, identity and cloud telemetry to establish scope and impact
• Leverage threat intelligence and analytics to support fast, well-judged decisions
• Partner with detection engineering and threat-focused teams to improve detection coverage and quality
• Contribute to playbooks, runbooks and the continuous improvement of security operations
• Support and coach developing analysts, and help contain and remediate incidents end to end
• Identify recurring patterns, risks and opportunities to strengthen monitoring and response

Experience

• A relevant qualification and prior professional experience in a SOC, security monitoring or incident-response role. (Min experience of 2 years, roles start at Mid-Senior Level).
• Hands-on experience analysing security alerts and leading or supporting incident response
• Working knowledge of SIEM and EDR/XDR tooling and the MITRE ATT&CK framework
• Strong understanding of networking, operating systems, identity and common attack techniques
• Ability to use query and search languages to investigate security data
• Experience working with cloud environments
• Threat-informed decision-making, using threat intelligence and analytics to prioritise and act under pressure
• Strong analytical, problem-solving and communication skills
• Certifications such as CySA+, GIAC (GCIH/GCIA) or Blue Team are advantageous
• Willingness to work a shift pattern providing 24/7 coverage

Remuneration Package

Strong salaries in line with market levels in addition to benefits, shift premium and opportunities for growth.