Information Security Analyst - SecOps Response

We're seeking a passionate and skilled Incident Responder to join our growing Security Operations team, and proactively defend Starling's customers, assets, and systems against emerging threats.

The successful candidate will be supporting our 24/7 operational capabilities (On-call rota) and reporting to the Information Security Lead - SecOps Response. The analyst's main responsibilities include:

• Conducting incident response activities to investigate and contain cyber security incidents
• Developing and maintaining incident response and readiness processes
• Analysing logs from a variety of sources (e.g. cloud, endpoint, network) to identify root cause and determine next steps for containment, eradication and recovery
• Planning and participating in Tabletop Exercises
• Documenting notes, analysis findings, containment steps, and cause for each security incident
• Working together with other teams in the organisation to analyse, contain, eradicate and recover from cyber security incidents
• Presenting investigation findings to technical and non-technical audiences
• Supporting the wider SecOps team with detection engineering and threat hunting

Requirements:

• 3+ years experience in a cyber incident response and digital forensics function
• Experience in handling incidents
• Experience in cloud forensics (GCP, AWS)
• Experience in endpoint and server forensics (Windows, MacOS, Linux)
• Experience in network forensics
• Experience with forensics data acquisition, disk forensics and memory forensics
• Experience in supporting and planning Tabletop Exercises
• Understanding of network, cloud and operating system security controls
• Excellent communication skills (both verbal and written), ability to communicate technical concepts to both technical and non-technical audiences
• Demonstrated teamwork and collaboration skills as part of a multi-functional team
• Time management, problem-solving and interpersonal skills
• Eagerness to learn and apply knowledge to new security challenges
• Willingness to share knowledge with the team and mentor colleagues

Preferred:

• Experience with at least one programming or scripting languages (e.g. Python, Go, Bash)
• Experience with container security
• Experience conducting proactive threat huntings, defining hypotheses, and developing hunting methodologies
• Understanding of malware analysis techniques
• Qualifications such as GIAC Certified Forensic Analyst (GCFA), GIAC Cloud Forensics Responder (GCFR), GIAC iOS and macOS Examiner (GIME), 13cubed training in Windows, MacOS or Linux DFIR

Benefits:

• 25 days holiday (plus take your public holiday allowance whenever works best for you)
• An extra day's holiday for your birthday
• Annual leave is increased with length of service, and you can choose to buy or sell up to five extra days off
• 16 hours paid volunteering time a year
• Salary sacrifice, company enhanced pension scheme
• Life insurance at 4x your salary & group income protection
• Private Medical Insurance with VitalityHealth including mental health support and cancer care
• Partner benefits include discounts with Waitrose, Mr&Mrs Smith and Peloton
• Generous family-friendly policies
• Perkbox membership giving access to retail discounts, a wellness platform for physical and mental health, and weekly free and boosted perks
• Access to initiatives like Cycle to Work, Salary Sacrificed Gym partnerships and Electric Vehicle (EV) leasing