onsite
Cyber Security Analyst - NATIONAL HEAVY VEHICLE REGULATOR
Security Engineer
Cyber Security Analyst driving incident triage and response across endpoints, networks, and cloud environments using Python, SIEM tools, and threat hunting techniques to safeguard critical infrastructure.
About the role
Key Responsibilities
- Manage escalations from the Security Operations Centre (SOC), validating, analysing, and responding to security alerts and threats.
- Examine and correlate activity across endpoints, networks, and cloud environments to identify patterns indicative of breaches or vulnerabilities.
- Document findings, create detailed incident reports, and recommend remediation actions.
- Collaborate with cross‑functional teams to implement pre‑defined response measures and improve detection capabilities.
- Maintain and enhance security tooling, including SIEM dashboards and automated playbooks.
Requirements
- Proven experience in incident response and threat hunting within a SOC environment.
- Strong scripting skills in Python for automation and data analysis.
- Hands‑on knowledge of SIEM platforms (e.g., Splunk, QRadar) and endpoint detection & response solutions.
- Familiarity with cloud security concepts, especially AWS security services.
- Excellent analytical, communication, and documentation abilities.