Cyber Security Operations Analyst (L1)

Why we're hiring:

This is an excellent opportunity for an experienced Security Analyst to join our Growing Cyber Security team. The Security Operations Analyst will work within a multi-national team comprised of both internal and external analysts. They will play a key role in ensuring the effectiveness of WPPs cyber security detection, analysis, and response capabilities. They will work with multiple stakeholders including engineers and incident responders to ensure that security events are appropriately triaged and effectively resolved.

The role holder will help to ensure that the security operations function continually improves, remains tuned to specific organisational threats, and operates an effective security toolset. They will be help review, improve, maintain and operate a suite of security incident response procedures and playbooks and contribute to  management reporting artefacts.

What you'll be doing:

• Monitor and support the Security Incident and Event Monitoring (SIEM) solution for the detection of Alerts - SOC Level 1 Analysis
• 24*7*365 Shifts on a rotational basis - Performing the Monitoring, Alert Detection and Alert Response
• Adherence to Shift Schedules, shift hand-over and completion of activities designated for the shift within the designated SLAs and KPIs
• Familiarity with SIEM Platforms such as splunk, Sentinel, QRadar etc
• Perform Alert Triage, Investigation, Alert context enrichment and opening of Incident, as per the documented playbooks.
• Ability to learn additional security tools and platforms depending on the situational needs and ability to operate on those tools in optimum levels End-point security tools, MDR tools,  Email gateway, Phishing investigation tools etc.
• Ability to engage with customer and internal teams for providing technical insights and analysis.
• Contribute to regular management reporting artefacts.
• Follow the escalation matrix as per defined process.

What you'll need:

Qualification Requirements (Desirable)

• Computer Science Degree or equivalent
• Certifications such as CEH, CCNA and other SOC tools/platforms

Skills / Experience Requirements

• Monitoring and Alert investigation experience on 1 or more SIEM tools and/or SOAR Platforms
• Minimum of 1 year of experience in Information Security
• In depth operational experience with SIEM technologies.
• Demonstrated process orientation and ability to manage out of the ordinary cyber threat detection and investigation steps
• Strong communicator and fluent in English and ability to work smoothly with multinational clients
• Good understanding on networking concepts
• Be alert and reliable for rotating shift work
• Good Coordination skills with various other teams for faster resolution/completion

Who you are:

You're open: We are inclusive and collaborative; we encourage the free exchange of ideas; we respect and celebrate diverse views. We are accepting: of new ideas, new partnerships, new ways of working.

You're optimistic: We believe in the power of creativity, technology and talent to create brighter futures or our people, our clients and our communities. We approach all that we do with conviction: to try the new and to seek the unexpected.

You're extraordinary: we are stronger together: through collaboration we achieve the amazing. We are creative leaders and pioneers of our industry; we provide extraordinary every day.

What we'll give you:

Passionate, inspired people – We promote a culture of people that do extraordinary work.

Scale and opportunity – We offer the opportunity to create, influence and complete projects at a scale that is unparalleled in the industry.

Challenging and stimulating work – Unique work and the opportunity to join a group of creative problem solvers. Are you up for the challenge?