Responsibilities
- Monitor and triage security alerts across multiple platforms and technologies (SIEM, EDR, XDR, etc.)
- Investigate potential security incidents and escalate according to established protocols
- Collaborate with higher-tier analysts and threat response teams to resolve incidents
- Maintain detailed documentation of investigations, incidents, and actions taken
- Provide basic guidance and support to clients regarding incident handling and threat mitigation
Requirements
- Foundational Knowledge of Cybersecurity Principles: A solid grasp of network security, threat detection, risk management, and incident response is essential. This includes an understanding of MITRE ATT&CK, the cyber kill chain, and common attack vectors
- Embrace Technical Continuous Learning: Thriving in Cybersecurity demands a dedication to ongoing learning. Staying up to date with emerging threats, tools, and evolving techniques is fundamental in this role
- Foster Team Collaboration: Success is cultivated through seamless collaboration with team members, fostering an environment where knowledge sharing and collective problem-solving to help overcome security challenges effectively
- Exemplify Adherence to Security Policies and Procedures: Adherence to established security protocols and standards, ensuring consistency and regulatory compliance, safeguarding organisational assets and maintaining trustworthiness within the industry
- Passion for Cybersecurity & Continuous Learning: Cyber threats evolve daily, so the ability to adapt, learn new techniques, and stay ahead of attackers is crucial. Continuous upskilling through research, certifications, and hands-on practice is essential
- Strong Attention to Detail: Cyber threats often hide in the smallest anomalies. A keen eye for unusual behaviour in logs, alerts, and user activity is a valuable asset
- Curiosity & Proactive Research: The best analysts don’t just wait for alerts; they investigate, ask questions, and explore new threats. A natural curiosity about how systems work (and how they can be exploited) is essential
- Resilience Under Pressure: Security incidents can be high-stakes and fast-moving. A successful candidate remains calm, methodical, and focused when responding to threats
- Ethical & Security-First Mindset: Security professionals hold significant trust and responsibility. Integrity, confidentiality, and adherence to cybersecurity best practices are essential
