Starling is seeking a skilled Incident Responder to join its growing Security Operations team. The successful candidate will proactively defend Starling's customers, assets, and systems against emerging threats, supporting 24/7 operational capabilities.

About the Role

As an Information Security Analyst - SecOps Response, you will report to the Information Security Lead - SecOps Response. Your main responsibilities will include:

Conducting incident response activities to investigate and contain cyber security incidents
Developing and maintaining incident response and readiness processes
Analysing logs from various sources to identify root causes and determine next steps for containment, eradication, and recovery
Planning and participating in Tabletop Exercises
Documenting notes, analysis findings, containment steps, and causes for each security incident
Collaborating with other teams to analyse, contain, eradicate, and recover from cyber security incidents
Presenting investigation findings to technical and non-technical audiences
Supporting the wider SecOps team with detection engineering and threat hunting

Requirements

3+ years of experience in a cyber incident response and digital forensics function
Experience in handling incidents
Experience in cloud forensics (GCP, AWS)
Experience in endpoint and server forensics (Windows, MacOS, Linux)
Experience in network forensics
Experience with forensics data acquisition, disk forensics, and memory forensics
Experience in supporting and planning Tabletop Exercises
Understanding of network, cloud, and operating system security controls
Excellent communication skills (verbal and written)
Demonstrated teamwork and collaboration skills
Time management, problem-solving, and interpersonal skills
Eagerness to learn and apply knowledge to new security challenges
Willingness to share knowledge with the team and mentor colleagues

Preferred Skills

Experience with at least one programming or scripting language (e.g., Python, Go, Bash)
Experience with container security
Experience conducting proactive threat hunting, defining hypotheses, and developing hunting methodologies
Understanding of malware analysis techniques
Qualifications such as GIAC Certified Forensic Analyst (GCFA), GIAC Cloud Forensics Responder (GCFR), or similar

Benefits

25 days of holiday (plus public holiday allowance)
An extra day's holiday for your birthday
Annual leave increases with length of service
16 hours of paid volunteering time per year
Salary sacrifice and company-enhanced pension scheme
Life insurance and group income protection
Private Medical Insurance with VitalityHealth
Perkbox membership and other benefits

Hybrid Working

Starling operates a hybrid approach to working, requiring a minimum of 1 day per week in the office.

Interview Process

The interview process includes video interviews and a chat with the Talent Team.

Description