Principal Attack Monitoring Analyst (GSOC)
Core
Senior technical leader providing hands-on investigation, escalation, and mentorship for cyber security alerts and incidents within a Security Operations Centre.
Role type
Senior IC attack monitoring analyst (technical leadership)
Builds
Enhanced detection capabilities, investigation playbooks, and operational processes for financial markets infrastructure
Domain
Cyber security / Financial services
Required skills
Cyber threat investigation, incident response, team coaching/mentoring, log analysis, adversary TTPs, OS forensics (Windows/Linux/Unix/macOS), cloud security (AWS/Azure/GCP/M365), NIST/SANS frameworks, automation/process optimization
Preferred skills
Financial services experience, industry certifications (GIAC/SANS/CREST), scripting/programming, security automation/orchestration
Technologies
SIEM, EDR, AWS, Azure, GCP, Microsoft 365, NIST, SANS
Responsibilities
Lead complex cyber security investigations, mentor analysts, escalate incidents to IR teams, optimize detection workflows, develop investigation playbooks, partner on process improvements
Seniority
Senior, hands-on IC with leadership duties