Senior Threat Detection Analyst Full Time

Preston, Lancashire
CBS butler

Senior Threat Detection Analyst

• UK wide – multiple locations available (Hybrid also available)
• £45,000 – £55,000 + bonus

Our team is responsible for protection from Cyber Attack by various threat actors. Across Threat Intelligence, Detection, Incident Response and now Active Defence we work to evolve cyber operations as a world class capability.

What you’ll be doing – Senior Threat Detection Analyst

• Triage, analyse and investigate alerts, log data and network traffic using the monitoring platforms and Internet resources to identify cyber-attacks/security incidents
• Proactive threat hunting across adversary behaviours for those threats not easily detected by existing use cases
• Act as a mentor and as an escalation point within the team for technical queries
• Ensure timely and accurate communication of incidents to IT, network or security teams
• Escalate suspected major security incidents/investigations where support is required
• Define monitoring use cases and develop prototype rules with minimal supervision eg In response to intelligence or gaps in defences
• Build, test and deploy new detection capabilities across the environment
• Contribute to the development of the services through people, process and technology where appropriate

Your skills and experiences – Senior Threat Detection Analyst

• Broad and detailed experience of technologies including but not limited to Firewalls, IDS/IPS, Active Directory, endpoint protection, Windows Server, Linux, TCP/IP, Networks, Cloud, CDN’s and Vulnerability Management
• A strong technical background with a detailed knowledge of cyber security, computer networks and operating systems
• Analytical background and comfortable analysing and interpreting large and complex data sets and articulating the story behind any observations along with providing conclusions and recommendations
• Knowledge and experience of using tools to dissect common threats to produce useable IOCs. eg Malicious document analysis
• Detailed knowledge of the current threat landscape, the TTPs frequently employed in those attacks and how we can investigate and mitigate these
• Relevant Vendor and GIAC Qualifications or equivalent proven industry experience
• Previous Security Operations, investigative or other relevant experience