Senior Security Operations Analyst – SIEM & Threat Hunting

Interactive Investor; United States; Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Group Life Insurance

Private Medical Insurance

Pension Plan

25 Days Annual Leave

Staff Discounts

Well-being Fund

Retail Discounts

Job summary

interactive investor is seeking a Senior Security Operations Analyst to join the Information Security Team, monitoring, detecting, analysing and responding to security incidents, with oversight of the SIEM (Chronicle) and our outsourced SOC. You will tune rules, investigate alerts, and coordinate incident response across infrastructure, networks and DevOps.

You will gather threat intel, perform threat hunting, assess risks, and help design security policies and testing methods while staying

Qualifications

• Experience with SIEMs (Splunk/Chronicle) and incident response.
• Ability to tune alert rules and respond to security incidents end-to-end.
• Knowledge of threat intelligence and threat hunting processes.
• Familiarity with endpoint security (EDR) and network security controls.

Responsibilities

• Define and facilitate creation or tuning of SIEM rules.
• Investigate SIEM alerts and security incidents through to completion.
• Provide dynamic monitoring and incident response within the team.
• Monitor security events for trends and potential threats.
• Identify problems and coordinate remediation through proper channels.
• Coordinate threat intelligence gathering and threat hunting.
• Assess threats from multiple sources and plan mitigations.
• Gather data, analyze, and respond to cyber incidents.
• Research trends and best practices in cybersecurity.

Skills

SIEM

Incident response

Threat hunting

Threat intelligence

EDR

Firewalls

IDS/IPS

Windows logs

Cloud security

Network security

Security operations

Education

Degree in IT / Cyber

Tools

Splunk

Chronicle

Microsoft Sentinel

Job description

interactive investor is seeking a Senior Security Operations Analyst to join the Information Security Team, monitoring, detecting, analysing and responding to security incidents, with oversight of the SIEM (Chronicle) and our outsourced SOC. You will tune rules, investigate alerts, and coordinate incident response across infrastructure, networks and DevOps.

You will gather threat intel, perform threat hunting, assess risks, and help design security policies and testing methods while staying