3 of 3 Permanent Intrusion Detection Jobs in Milton Keynes

information throughout incident investigations. Contribute to the continual improvement of monitoring capability by identifying opportunities to improve alert quality, investigation processes, monitoring coverage and detection effectiveness. Validate new monitoring content, detection rules and operational procedures before deployment into the live SOC environment. Assist in the onboarding … should demonstrable knowledge and skills in the areas: Cyber security operations, Forensics, Incident management, incident investigation and response, Information risk assessment and risk management, Intrusion detection analysis, Protective security, Secure operations management, Threat intelligence and threat assessment Experience working within a SOC or comparable cyber security operations environment. ...

incidents to the Lead SOC Analyst or Incident Response team. Provide Incident Responders with accurate findings, evidence, timelines and technical information. Validate monitoring content, detection rules and operational procedures before live deployment. Support the onboarding of new systems, applications and cloud services into SOC monitoring. Maintain accurate and fully … documented investigation records. Mentor and provide technical guidance to developing SOC Analysts. Contribute to detection tuning, monitoring improvements and post-incident reviews. Essential skills and experience Experience working within a SOC or comparable cybersecurity operations environment. Strong experience investigating cybersecurity alerts using enterprise monitoring technologies. Good knowledge of SIEM ...

events and determining appropriate escalation routes. Knowledge of cyberattack techniques, indicators of compromise, threat intelligence and defensive monitoring. Experience in incident investigation and response, intrusion detection, forensics, protective security and secure operations. Ability to make timely decisions within a fast-paced 24/7 environment. Strong analytical, problem … Relevant certification such as Microsoft SC-200, GIAC GCIH, GCIA, CompTIA CySA+ or equivalent. Experience of Microsoft Sentinel, LogRhythm, MITRE ATT&CK, NCSC guidance, detection tuning or working within Government, Defence, Critical National Infrastructure or another regulated environment would be highly beneficial. Working arrangementsThis is a site-based position ...