Information Security Analyst - Operations

About Starling

About the role

Responsibilities

• Triage, respond to, and investigate alerts from cloud infrastructure and security, endpoint detection and response, and perimeter detection tools.
• Investigate and respond to security alerts raised by users.
• Create and improve analytic triggers to enhance alert efficacy.
• Develop incident-handling and readiness processes.
• Conduct proactive threat hunting based on threat intelligence.
• Document incidents and investigations.

Skills and experience

• At least 3 years of experience in an in-house SOC role and team.
• Understanding of AWS security solutions or other public cloud solutions; experience with cloud analysis and incident response, such as AWS or GCP.
• Experience supporting analytics or SIEM platforms and working in CSIRT or SOC functions.
• Experience supporting or conducting incident response engagements and endpoint-based and cloud-based investigations.
• Experience with incident command and conducting tabletop exercises.
• Interest in automation, threat intelligence, and analytic tuning.
• High-level understanding of mobile, network, and operating system security controls.
• Programming experience in Python, Go, or Java is listed as a possibility.
• A cybersecurity or information security degree or relevant cybersecurity qualifications are desirable, not required.

Workplace

• Starling describes its working approach as hybrid, with a preference for being within commuting distance of an office.
• Technology employees are asked to attend an office at least one day per week.

Interview process

Benefits

• Benefits include 25 days of holiday plus public holiday allowance, an extra birthday day, and options to buy or sell up to five days of leave.
• Other listed benefits include paid volunteering time, pension, life insurance, income protection, private medical insurance, family-friendly policies, and Perkbox membership.