Cyber Security Operations Analyst L1

Roles and Responsibilities :

• Monitor and analyze security event logs from SIEM tools such as Splunk to identify potential threats and anomalies.
• Conduct thorough investigations into detected incidents, including gathering evidence, interviewing witnesses, and developing reports on findings.
• Collaborate with other teams to develop incident response plans and procedures for handling sensitive data breaches or system failures.
• Stay up-to-date with industry trends and best practices in cybersecurity to improve detection capabilities.

Job Requirements :

• Endpoint Security Solutions: Familiarity with platforms such as SentinelOne, CrowdStrike, Microsoft Defender for Endpoint, Sophos, or Trend Micro Vision One.

• Email Security Technologies: Exposure to solutions including Mimecast, Proofpoint, and Exchange Online Protection (EOP).

• Identity & Access Management (IAM): Basic understanding of Microsoft Entra ID (Azure AD), Multi-Factor Authentication (MFA), Conditional Access Policies, and identity security concepts.

• SIEM & SOAR Platforms: Knowledge of security monitoring and automation tools such as Microsoft Sentinel, USM Anywhere, Securonix or similar security operations platforms.

• Incident Response & Threat Frameworks: Familiarity with cybersecurity frameworks and methodologies, including NIST Incident Response (NIST IR) and the MITRE ATT&CK framework.

• Security Monitoring & Analysis: Understanding of security alerts, threat detection, event investigation, and incident triage processes.

• Cybersecurity Best Practices: Awareness of industry standards and frameworks such as NIST, ISO 27001, and the Essential Eight.

• 1-3 years of experience in a similar role within the financial services industry.

• Strong understanding of EDR (Endpoint Detection & Response) solutions like Sentinel.

• Proficiency in analyzing log data using various tools like Splunk.