Information Security Analyst - Operations

About Starling

Role overview

Responsibilities

• Triage, respond to, and investigate alerts from cloud infrastructure and security, endpoint detection and response, and perimeter detection tools.
• Investigate and respond to security alerts raised by users.
• Create and enhance analytic triggers to improve alert efficacy.
• Continuously develop incident handling and readiness processes.
• Conduct proactive threat hunting based on threat intelligence.
• Document incidents and investigations.

Skills and experience

• 3+ years of experience in an in-house SOC role and team.
• Understanding of AWS security solutions or other public cloud solutions; cloud analysis and incident response experience with platforms such as AWS or GCP.
• Experience supporting analytics or SIEM platforms and working in CSIRT or SOC functions.
• Experience supporting or conducting incident response engagements and endpoint- and cloud-based investigations.
• Experience with incident command and tabletop exercises.
• High-level understanding of mobile, network, and operating system security controls.
• Interest in automation, threat intelligence, and analytics tuning.
• Python, Go, or Java programming experience is an advantage.
• A cyber/information security degree or relevant cybersecurity qualification is desirable but not required.

Workplace

• Starling describes its work approach as hybrid and asks Technology employees to attend an office at least one day per week.
• The employer prefers candidates within commuting distance of one of its offices.

Benefits

• Benefits include 25 days of holiday plus public holidays, an additional birthday day, flexible leave options, paid volunteering time, enhanced pension, life insurance, income protection, private medical insurance, family-friendly policies, and Perkbox membership.

Interview process