SOC Analyst

Incident Response AnalystWe are seeking an experienced Incident Response Analyst to support the detection, triage, investigation, containment and resolution of cyber security incidents across a complex enterprise environment.Key ResponsibilitiesMonitor and investigate alerts from SIEM, EDR/XDR, identity, email, cloud and network security technologies.Triage incidents, assess severity and business impact, and coordinate containment, eradication and recovery.Investigate phishing, malware, account compromise, data loss, unauthorised access and suspicious network activity.Collect, preserve and analyse endpoint, server, identity, network, email and cloud artefacts.Analyse logs, packet captures, forensic images and security telemetry to establish scope, root cause and attacker activity.Identify IOCs, attacker behaviours, TTPs and map findings to MITRE ATTandCK where appropriate.Develop and execute threat hunts and contribute to detection rule, monitoring and logging improvements.Maintain incident records, investigation timelines, evidence and post-incident reports.Develop and maintain incident response playbooks, procedures and communication processes.Conduct post-incident reviews, root-cause analysis and lessons-learned activities.Provide clear technical and management updates to senior stakeholders.Essential Skills and ExperiencePractical experience in cyber security incident response, security monitoring or a SOC environment.Hands-on experience with SIEM and EDR/XDR ..... full job details .....