Information Security Analyst - SecOps Response

About the role

Working arrangement

• Starling uses a hybrid working approach, with a preference for employees located within commuting distance of an office.
• Technology employees are expected to attend the office at least one day per week.

Responsibilities

• Investigate and contain cybersecurity incidents and maintain incident response readiness processes.
• Analyse cloud, endpoint, and network logs to determine root cause and containment, eradication, and recovery actions.
• Plan tabletop exercises and document incident analysis, containment steps, and causes.
• Collaborate across teams, present findings to technical and non-technical audiences, and support detection engineering and threat hunting.

Requirements

• At least 3 years of experience in cyber incident response and digital forensics.
• Experience handling incidents, cloud forensics, endpoint and server forensics, network forensics, and forensic data acquisition.
• Understanding of network, cloud, and operating system security controls.
• Strong communication, teamwork, time management, problem-solving, interpersonal, learning, and knowledge-sharing skills.

Preferred skills and qualifications

• Programming or scripting experience with Python, Go, or Bash is preferred.
• Container security, proactive threat hunting, hunting methodology development, and malware analysis experience are preferred.
• GCFA, GCFR, GIME, 13cubed DFIR training, or similar qualifications are advantageous but not essential.

Benefits

• Benefits include holiday allowance, enhanced pension, life insurance, income protection, private medical insurance, family-friendly policies, and retail and wellness perks.
• Employees can access volunteering time, Cycle to Work, gym partnerships, and electric vehicle leasing initiatives.