Attack Monitoring Analyst (GSOC)
Core
Monitor and respond to cyber security incidents to improve the defensive capabilities of the Global Security Operations Centre (GSOC).
Role type
Associate-level Attack Monitoring Analyst
Builds
Incident response playbooks, monitoring dashboards, and threat intelligence capabilities
Domain
Cybersecurity / Financial Markets Infrastructure
Required skills
SIEM operation (Splunk/QRadar/LogRhythm), security event triage, incident handling, root-cause identification, network protocol analysis (TCP/IP), threat intelligence research, vulnerability management, Python/PowerShell/Java/C# scripting
Preferred skills
OSCP, GIAC, CCNA certifications, experience with attacker TTPs
Technologies
Splunk, QRadar, LogRhythm, Python, PowerShell, Java, C#
Responsibilities
Triage security events and respond to incidents using playbooks; Operate SIEM tools for investigations and dashboard development; Research and collect threat intelligence; Develop and improve run books and use cases; Identify, respond, and remediate cyber events
Seniority
Associate, hands-on IC
