Job Description
The Security Operations Centre (SOC) is part of the Admiral Group’s Security Operations function. The SOC is looking for an experienced analyst. As a Senior Security Analyst, you will be responsible for responding to and investigating security events within Admiral’s environment and proactive threat hunting when not on monitoring duty. Responsibilities will also include the creation of new detection logic when needed, as well as the review and improvement of existing logic. The security analyst team is a key part of the SOC (along with the Threat Hunting function, which is also part of the SOC). It works closely with other security operations functions, such as Incident Response and Threat Intelligence, as well as various technology and business units.
Responsibilities:
- Triage cyber security alerts/alarms escalated from MSSP.
- Investigate incidents and work with the other teams to contain and remediate cyber security incidents.
- Develop new detection rules for deployment to the security tooling to increase detection coverage and effectiveness.
- Contribute to the security monitoring, response and threat hunting strategy.
- Work with the managed security services provider (MSSP) to review and maintain efficiency.
- Perform threat hunting tasks to detect threats within our environment proactively.
- Assist the incident response team with technical analysis and provide timely updates during an incident response investigation when needed. Ensure all security events are investigated and documented to completion.
- Contribute to process creation, maintenance, documentation and automation as needed.
- Analyse and suggest improvements on rules and playbooks on SIEM/SOAR and EDR platforms.
- Stay up to date on the changing threat landscape.
- Support and mentor junior members of the team.
Key Interactions:
- Engage with the overall SOC team.
- Engage with the Cyber Threat Intelligence (CTI) team.
- Engage with the Incident Response team when needed.
- Engage with various stakeholders within Security Operations as and when needed.
Knowledge and Experience Required:
- 5 years of experience in any of the following: security operations, incident response, and digital forensics.
- Understanding frameworks such as Cyber Kill Chain, MITRE ATT&CK. Understanding of enterprise-grade technical security controls and in-depth defence practices.
Desirable Skills:
- Proficiency with any SIEM (Security Information and Event Management) platforms.
- Experience with a SOAR (Security Orchestration, Automation & Response) platform would be highly advantageous but not mandatory.
- Familiarity with public cloud platforms such as Azure, GCP and AWS and security practices on those platforms.
- Working proficiency in a programming or scripting language such as Python / PowerShell / Go / C# would be beneficial but not essential.
- GIAC Certifications such as the following would be desirable but not mandatory: GCIH, GCFE, GCIA, GDAT, GCDA, GISP.
Our Commitment to You
At Admiral, we are committed to being a diverse and inclusive workplace. Admiral is proud to be an equal opportunities employer and does not discriminate on the basis of race, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), national origin, gender, gender identity, sexual orientation, disability, age, or any other legally protected status.
All qualified applicants will receive equal consideration for employment.
Salary, Benefits and Work-Life Balance
We do not have a set salary for this position, as it will be dependent on the successful candidate’s experience. We are happy to see CVs from all candidates who meet the requirements and will be happy to discuss the remuneration package.
At Admiral, we are proud to be a diverse business where we put our people and customers first. We have great benefits to ensure employees have a great work-life balance; it's one of the reasons we’re consistently voted one of the Sunday Times Best Big Companies to Work For in the UK. We want you to have an element of freedom to define a working lifestyle that supports this, so accommodate flexible hours wherever possible.
All colleagues will receive 33 days holiday (including banks holidays) when they join us, and this will increase with length of service, up to a maximum of 38 days (including banks holidays). You also have the option to buy or sell up to five days of annual leave in addition to your allocation.
You can also view some of our other key benefits here.
#LI-NT1
