Information Security Analyst - Operations

About Starling

About the role

Responsibilities

• Triage, respond to, and investigate alerts from cloud security, endpoint detection and response, perimeter detection, and users.
• Create and enhance analytic triggers to improve alert efficacy.
• Develop incident-handling and readiness processes, conduct threat hunting, and document incidents and investigations.

Skills and experience

• At least 3 years of experience in an in-house SOC role and team.
• Understand AWS security solutions or other public cloud solutions; have cloud analysis and incident response experience with systems such as AWS or GCP.
• Experience with analytics or SIEM platforms, CSIRT/SOC functions, incident response engagements, endpoint and cloud investigations, incident command, and tabletop exercises.
• High-level understanding of mobile, network, and operating-system security controls.
• Interest in automation, threat intelligence, and analytic tuning; programming experience in Python, Go, and/or Java is welcomed.
• A cyber or information security-related degree or relevant cybersecurity qualification is desired but not required.

Work arrangement

• Starling describes its approach as hybrid and asks Technology employees to attend an office at least one day per week.
• The employer prefers candidates within commuting distance of one of its offices.

Interview process

Benefits

• Benefits include 25 days of holiday plus public holiday allowance, an additional birthday day off, and options to buy or sell up to five days of leave.
• Benefits also include paid volunteering time, pension, life insurance, income protection, private medical insurance, family-friendly policies, and Perkbox membership.