3 of 3 Permanent Incident Response Jobs in Harlow

Requirements: 2-3+ years' SOC experience Strong hands-on experience with IBM QRadar SIEM Experience monitoring, triaging, and investigating security incidents Knowledge of incident response lifecycle and root cause analysis Experience with Microsoft Defender (essential) KQL knowledge desirable Ability to work independently and manage complex cyber investigations … Technical Exposure: IBM QRadar Microsoft Defender/EDR Microsoft Sentinel (desirable) Microsoft Entra ID/Azure AD Email threat response Incident Experience: Phishing & Business Email Compromise Malware & Ransomware Account Compromise Privilege Escalation Insider Threats DLP & Data Exfiltration Alerts Suspicious Authentication Activity Knowledge of: MITRE ATT&CK, Cyber Kill ...

environment. Use IBM QRadar SIEM to identify, investigate and respond to security incidents. Analyse security events and escalate potential threats appropriately. Support incident response and threat detection activities. Monitor and respond to alerts across Microsoft security technologies. Contribute to the ongoing improvement of SOC processes and security monitoring … capabilities. Essential Experience Experience working within a SOC/Security Operations environment. Proven hands-on experience using IBM QRadar SIEM for monitoring and incident response. Experience with Microsoft Defender/Microsoft Defender for Endpoint. Strong understanding of security monitoring, incident detection and response. Active SC Clearance. Sole ...

duties include monitoring, triaging and investigating security incidents using IBM QRadar SIEM and Microsoft Defender, with knowledge of MITRE ATT&CK, NIST CSF and incident response lifecycle. #J-18808-Ljbffr ...