Cyber Defence Analyst
Core
Monitor computer systems for suspicious activity, triage and analyze cyber security events, and manage incidents to protect core business platforms and data.
Role type
Tier 1 Cyber Security Analyst
Builds
Incident response workflows and detection logic improvements
Domain
Financial Services / Cyber Security
Required skills
SIEM tools (Splunk), Endpoint Detection and Response (MDE), networking principles, incident management, cloud security (AWS/Azure), documentation, threat analysis
Preferred skills
GIAC certifications (GCIA, GCIH, GREM), cloud platform experience
Technologies
Splunk, Microsoft Defender for Endpoints, AWS, Azure
Responsibilities
Monitor systems for suspicious activity, triage detection alerts and staff-reported attacks, capture event details and artefacts, maintain response documentation and post-mortems, escalate incidents to specialized teams, identify new detection logic, contribute to team operations improvement
Seniority
Mid-Senior, hands-on IC
