Endava is hiring a Lead Cyber Security Analyst

The Senior SOC Analyst is a Tier 2 cybersecurity specialist responsible for advanced incident investigation, threat hunting, and guiding SOC operations to protect enterprise systems and networks. This role involves acting as the escalation point for L1 analysts, leading complex investigations, and driving improvements in security detection, response, and prevention strategies. The Senior SOC Analyst also mentors junior staff and collaborates with cross-functional teams to strengthen the organization's security posture. Responsibilities: - Lead triage, investigation, and containment of complex security incidents escalated from L1. - Lead Security Incidents and coordinate Incident Response - Coordinate with stakeholders to contain, eradicate, and recover from security incidents. - Conduct root cause analysis, malware analysis, and advanced forensics (network, endpoint, and cloud). - Develop and refine incident response playbooks. - Proactively hunt for threats using SIEM, EDR, and threat intelligence feeds. - Support the creation and optimization of detection rules, correlation logic, and automation scripts. - Perform gap analysis to improve detection capabilities. - Monitor and analyze security alerts from SIEM, IDS/IPS, EDR, DLP, and other security platforms. - Correlate events across multiple data sources for accurate threat assessment. - Support audits, compliance checks, and risk assessments. - Mentor and train SOC L1 analysts on investigation techniques and tools.