1 of 1 Remote/Hybrid Security Operations Jobs in Basingstoke

will work closely with Senior and Lead Analysts for guidance, development and collaborative investigation. You will use platforms such as Microsoft Sentinel, Google SecOps, Defender XDR, CrowdStrike Falcon, SentinelOne and Cortex XSOAR/XSIAM to understand what has happened, how activity progressed and what actions need to be taken. … interpret logs from multiple sources.Awareness of MITRE ATT&CK and differentiating legitimate admin activity vs suspicious behaviour.Desirable skills:Experience with Microsoft Sentinel, Google SecOps or other SIEM platforms.Experience with Defender, CrowdStrike, SentinelOne or other XDR solutions.Ability to query in KQL, CQL, S1QL, XQL or similar languages.Awareness of threat intelligence concepts ...