# Information Security Analyst - SecOps Response

**Company**: Starling
**Location**: Cardiff, Wales
**Work arrangement**: hybrid
**Experience**: senior
**Job type**: Full-time
**Category**: Security
**Industry**: Finance

**Apply**: https://jobs.workable.com/view/dHqSC9o1YkUeJEXWXYtLW4/hybrid-information-security-analyst---secops-response-in-cardiff-at-starling?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_0519bfdc-3ee

## Description

Starling is seeking a skilled Incident Responder to join its growing Security Operations team. The successful candidate will proactively defend Starling's customers, assets, and systems against emerging threats, supporting 24/7 operational capabilities.

### About the Role

As an Information Security Analyst - SecOps Response, you will report to the Information Security Lead - SecOps Response. Your main responsibilities will include:

- Conducting incident response activities to investigate and contain cyber security incidents

- Developing and maintaining incident response and readiness processes

- Analysing logs from various sources to identify root causes and determine next steps for containment, eradication, and recovery

- Planning and participating in Tabletop Exercises

- Documenting notes, analysis findings, containment steps, and causes for each security incident

- Collaborating with other teams to analyse, contain, eradicate, and recover from cyber security incidents

- Presenting investigation findings to technical and non-technical audiences

- Supporting the wider SecOps team with detection engineering and threat hunting

### Requirements

- 3+ years of experience in a cyber incident response and digital forensics function

- Experience in handling incidents

- Experience in cloud forensics (GCP, AWS)

- Experience in endpoint and server forensics (Windows, MacOS, Linux)

- Experience in network forensics

- Experience with forensics data acquisition, disk forensics, and memory forensics

- Experience in supporting and planning Tabletop Exercises

- Understanding of network, cloud, and operating system security controls

- Excellent communication skills (verbal and written)

- Demonstrated teamwork and collaboration skills

- Time management, problem-solving, and interpersonal skills

- Eagerness to learn and apply knowledge to new security challenges

- Willingness to share knowledge with the team and mentor colleagues

### Preferred Skills

- Experience with at least one programming or scripting language (e.g., Python, Go, Bash)

- Experience with container security

- Experience conducting proactive threat hunting, defining hypotheses, and developing hunting methodologies

- Understanding of malware analysis techniques

- Qualifications such as GIAC Certified Forensic Analyst (GCFA), GIAC Cloud Forensics Responder (GCFR), or similar

### Benefits

- 25 days of holiday (plus public holiday allowance)

- An extra day's holiday for your birthday

- Annual leave increases with length of service

- 16 hours of paid volunteering time per year

- Salary sacrifice and company-enhanced pension scheme

- Life insurance and group income protection

- Private Medical Insurance with VitalityHealth

- Perkbox membership and other benefits

### Hybrid Working

Starling operates a hybrid approach to working, requiring a minimum of 1 day per week in the office.

### Interview Process

The interview process includes video interviews and a chat with the Talent Team.

## Skills

### Required
- incident response
- digital forensics
- cloud forensics
- endpoint forensics
- network forensics
- Tabletop Exercises
- communication skills
- teamwork
- problem-solving

### Nice to have
- programming languages
- container security
- threat hunting
- malware analysis
- GIAC certifications

---

Source: [Apply at jobs.workable.com](https://jobs.workable.com/view/dHqSC9o1YkUeJEXWXYtLW4/hybrid-information-security-analyst---secops-response-in-cardiff-at-starling?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)
