Information Security Analyst - Operations

About Starling

Role overview

Responsibilities

• Triage, respond to and investigate alerts from cloud infrastructure and security, endpoint detection and response, perimeter tools and users.
• Create and improve analytic triggers to increase alert effectiveness.
• Develop incident handling and readiness processes, and conduct proactive threat hunting based on threat intelligence.
• Document security incidents and investigations.

Skills and experience

• At least 3 years' experience in an in-house SOC role and team.
• Understanding of AWS Security Solutions or other public cloud solutions; cloud analysis and incident response experience with platforms such as AWS or GCP.
• Experience supporting analytics or SIEM platforms, working in CSIRT/SOC functions and supporting incident response engagements.
• Experience in endpoint and cloud investigations, incident command and tabletop exercises.
• Interest in automation, threat intelligence and analytic tuning; high-level understanding of mobile, network and operating system security controls.
• Programming experience in Python, Go or Java is listed as an alternative; a relevant degree or cybersecurity qualification is desirable, not required.

Working arrangements

• Hybrid working is offered; Technology employees are asked to attend an office at least one day per week.
• The employer prefers candidates within commuting distance of an office for in-person collaboration.

Benefits

• Benefits include annual leave, volunteering time, pension, life insurance, income protection, private medical insurance, family-friendly policies and employee discounts.