About the Role
The Security Operations Specialist provides Second and Third Line review, analysis, and incident response for security events and incidents reported to the SOC, responding in line with agreed SLAs. This role directly supports external security partners and assists the Security Operations Centre Manager in planning and implementing security measures. You will build relationships with stakeholders to drive operational security improvements and provide guidance on best practices to end users.
Responsibilities
- Responding to escalated security incidents in line with timescales and highlighting events requiring further investigation
- Coordinating and supporting third-party security service vendors to ensure appropriate monitoring and triage on alerts, events, or incidents
- Analysing security reports to identify trends and working with teams to develop strategies to drive secure behaviours throughout the business
- Forming part of the Cyber Incident Response team as a technical SME
- Maintaining and delivery of Phishing campaigns, reporting and remediation management
- Operational and Security maintenance of Security tooling stack across multiple technology vendors
- Performing security reviews across information systems and key infrastructure
- Maintaining an awareness of security policies and regulatory requirements pertaining to information security
Requirements
- Previous experience of working in a Security Operations Centre (SOC)
- Minimum 3 years experience in security operations or a technical security role, with a focus on understanding attack paths and mitigations
- Strong understanding of security operations, incident response, and detection engineering
- Excellent understanding of SIEM, IAM and DLP programmes and technologies
- Expertise in applying operational security requirements in Zero Trust networks
- Knowledge and experience of managing operational security in an Azure/365-centric environment
- Experience in analysis of cyber attacks using methodologies such as MITRE ATT&CK and other relevant frameworks
- Demonstrable ability to keep updated on the subject matter as part of an ever-changing threat landscape
Skills
- SIEM
- IAM
- DLP
- Zero Trust networks
- Azure/365
- MITRE ATT&CK
Location
- London
- Liverpool (Royal Liver Building)
Work Type
- Hybrid working model (role dependant)
Experience Level
- Minimum 3 years experience
Education Level
- Bachelors or Masters degree in InfoSec/InfoSys/Computer Science or equivalent degree or work exp
- Relevant industry certifications desirable
Salary/Compensations
- Competitive salary
Benefits
- Private medical insurance
- Life assurance
- Pension contribution
- Generous holiday package
- Option to purchase additional holiday
- Shared parental leave
About the Company
- Evelyn Partners is a UK leader in wealth management, providing personalised, expert investment management and financial planning advice to support clients in embracing what’s next.
- Our success hinges on our people and that's our secret for longevity.
- We are a team of passionate professionals and everything we do is guided by our purpose – placing the power of good advice into more hands, we go further to understand the needs of our clients and what matters most to them.
- We're here to help them make significant decisions with confidence, provide strong foundations for the future and guide them towards their goals.
Equal Opportunity
- We are proud to value the differences that a diverse workforce brings, representative of society and our clients.
- At Evelyn Partners we have a wide range of highly active employee resource groups and we're delivering multiple diversity, equity and inclusion initiatives across the organisation.
- It is our commitment to provide a workspace where all colleagues, regardless of identity, background, or circumstance, feel respected as individuals and feel that they can achieve their full potential and work in a safe, supportive, and inclusive environment.
- We are happy to make any reasonable adjustments to accommodate for your needs throughout the application process. Please let your Recruiter know.
