Principal Attack Monitoring Analyst (GSOC)
Core
Senior technical leader for cyber security investigations, alert analysis, and team mentorship within a Security Operations Centre.
Role type
Principal Attack Monitoring Analyst (Senior IC with leadership)
Builds
Enhanced detection capabilities, investigation playbooks, and automated response workflows
Domain
Cyber Security / Financial Services
Required skills
Cyber threat investigation, SOC operations, incident response methodologies, team coaching, log analysis, cloud security (AWS/Azure/GCP), OS forensics (Windows/Linux/Unix/macOS), TTP analysis, automation design
Preferred skills
Financial services experience, security certifications (GIAC/SANS/CREST), scripting/programming, security automation orchestration
Technologies
AWS, Azure, GCP, Microsoft 365, Windows, Linux, Unix, macOS, SIEM, SOAR
Responsibilities
Lead complex cyber security investigations, mentor and develop analysts, optimize detection processes and reduce false positives, develop investigation playbooks, partner with Incident Response teams, identify automation opportunities
Seniority
Principal, hands-on IC with strategic leadership