Incident Response Analyst - 24/7 Security Ops

Starling Bank; London; Hybrid; NOK 887,000 - 1,331,000; Full time

Benefits offered by this job

25 days holiday

Birthday leave

Volunteer time

Pension

Life insurance

Private Medical Insurance

Perkbox

Job summary

Starling Bank is seeking a passionate Incident Responder to join the Security Operations team. You will defend customers, assets and systems 24/7, with on-call duties. You will investigate, contain and recover from cyber security incidents, while developing readiness processes and collaborating across teams.

You will analyse logs from cloud and on-premise sources, participate in tabletop exercises, and communicate findings to both technical and non-technical audiences. Hybrid work model.

Qualifications

• Minimum 3+ years in cyber incident response and digital forensics.
• Experience handling incidents and coordinating response actions.
• Experience in cloud forensics and endpoint/server forensics.
• Experience with forensics data acquisition, disk and memory forensics.
• Ability to plan tabletop exercises and communicate findings clearly.
• Understanding of network, cloud and OS security controls.
• Strong written and verbal communication; able to explain tech to non-tech audiences.
• Team player with good time management and problem-solving skills.
• Willing to share knowledge and mentor colleagues.

Responsibilities

• Lead incident response investigations and containment.
• Develop and maintain incident response readiness processes.
• Analytics of logs from cloud, endpoint, and network sources.
• Plan and participate in tabletop exercises.
• Document investigation steps, findings, and containment actions.
• Collaborate with cross-functional teams to contain and recover from incidents.
• Present findings to technical and non-technical audiences.
• Assist in detection engineering and threat hunting activities.

Skills

Incident response

Digital forensics

Tabletop Exercises

Threat hunting

Communication skills

Teamwork

Time management

Problem solving

Mentoring

Education

GCFA

GCFR

GIME

DFIR training (13cubed)

Tools

GCP

AWS

Windows

MacOS

Linux

Job description

Starling Bank is seeking a passionate Incident Responder to join the Security Operations team. You will defend customers, assets and systems 24/7, with on-call duties. You will investigate, contain and recover from cyber security incidents, while developing readiness processes and collaborating across teams.

You will analyse logs from cloud and on-premise sources, participate in tabletop exercises, and communicate findings to both technical and non-technical audiences. Hybrid work model.