Description:
As a Security Specialist within our Cyber Operations team, you'll help defend MAB against emerging cyber threats through monitoring, investigation, engineering and response activities.
This is a varied role that combines elements of Security Operations, Cyber Engineering and Threat Detection, making it ideal for someone who enjoys working across multiple cyber disciplines rather than specialising in just one area.
Working closely with the Security Manager, Cyber Operations, you'll support the day-to-day operation of our cyber security controls, investigate security events, maintain and enhance security technologies, and contribute to the continual improvement of our detection and response capabilities.
You'll also work alongside our Managed Security Services Provider (MSSP), helping ensure threats are identified, escalated and remediated effectively while driving improvements across our cyber operations function.
What You'll Be Doing
- Monitoring, investigating and responding to cyber security alerts, events and incidents.
- Conducting proactive threat hunting activities to identify and contain potential threats before they impact the business.
- Maintaining and optimising cyber security technologies and tooling.
- Supporting the continuous improvement of security monitoring, detection and response capabilities.
- Working closely with our MSSP to review performance, detections and operational effectiveness through KPI/KRI reporting and ensuring effective triage and escalation of cyber threats.
- Investigating security events through to remediation within agreed SLAs.
- Helping develop operational processes, procedures, playbooks and detection use cases.
- Supporting incident response activities and remediation efforts to minimise business impact.
- Improving dashboards, alerting and reporting to drive operational efficiency and visibility.
- Providing oversight and support for cloud security controls and configurations.
- Supporting purple team exercises and validating the effectiveness of security controls.
- Working collaboratively with Cyber Threat Management and wider technology teams to strengthen our security posture.
- Supporting the delivery and execution of MAB's cyber security strategy and operational objectives.
- Acting as a deputy for the Security Manager, Cyber Operations when required including escalating and communicating key security issues to senior Information Security stakeholders.
- Participating in an on-call rota to provide support outside normal working hours when required.
What We're Looking For
We're looking for a hands-on cyber security professional who enjoys both the operational and technical aspects of security. You'll be someone who is equally comfortable investigating a security alert, improving a detection rule, maintaining security tooling or contributing ideas that strengthen security operations.
You'll Bring
- Experience working within a SOC, Cyber Operations, Security Engineering or Incident Response environment.
- Strong experience monitoring and investigating cyber security events.
- Experience maintaining and administering security technologies, tooling and controls.
- Knowledge of threat hunting, protective monitoring, detection engineering and incident response.
- Experience working within a regulated environment, with Financial Services experience advantageous.
- A strong understanding of modern cyber threats and defensive security practices.
- Experience working with SIEM platforms and security monitoring tools.
- Strong analytical and problem-solving skills.
- Excellent stakeholder management and communication skills.
- Relevant cyber security certifications and qualifications.
- The ability to communicate technical concepts clearly to technical and non-technical audiences.
- A calm and methodical approach when managing incidents and working under pressure.
- A self-starting approach, with the ability to work independently as well as collaboratively within a highly technical cyber security team.
- A continuous improvement mindset and a passion for cyber security.
You'll Thrive Here If You...
- Enjoy variety and exposure across multiple areas of cyber security.
- Like combining security operations with hands-on engineering activities.
- Enjoy identifying opportunities to improve processes, detections and operational effectiveness.
- Want to influence the direction of a growing Cyber Operations capability.
- Thrive in fast-paced environments where no two days are quite the same.
- Enjoy solving difficult problems and seeing the impact of your work.
- Bring ideas to the table and enjoy helping shape better ways of working.