Overview
As a Cyber Security Analyst, you will join a leading Microsoft Security Partner to support a global financial services organization in its major cyber security transformation program. You will work in a highly technical team, investigating and responding to complex cyber threats across various environments, bringing your expertise in incident response and digital forensics to manage live security incidents effectively.
Responsibilities
- Investigate and respond to sophisticated cyber security incidents, including compromised accounts and malware infections.
- Conduct digital forensic investigations and analyze evidence from endpoint, identity, cloud, and network sources.
- Utilize SIEM, EDR, and XDR technologies to investigate security alerts and indicators of compromise.
- Perform root cause analysis and determine the full scope and impact of security incidents.
- Coordinate containment, eradication, and recovery activities with engineering teams.
- Engage in proactive threat hunting and map techniques against MITRE ATT&CK.
- Preserve forensic evidence, maintain investigation records, and produce detailed incident reports.
- Collaborate with security engineers to enhance detection and response capabilities.
Requirements
- Proven experience in hands-on cyber security incident response within complex enterprise environments.
- Demonstrable experience in digital forensics and evidence preservation during investigations.
- Direct involvement in managing and containing real security incidents.
- Strong practical knowledge of SIEM and EDR/XDR technologies for threat investigation.
- Experience with investigating compromised endpoints, identities, and suspicious network activities.
- Solid understanding of the incident response lifecycle from investigation to post-incident analysis.
- Ability to analyse security telemetry and reconstruct attack timelines.
- Experience with technical documentation of investigations and supporting remediation activities.