SOC Lead (Senior Cyber Security Analyst) - London - £50-70k
You will be working for an IT Services firm in the heart of London that is looking to bring on a SOC Lead to expand on a growing team at an exciting phase in the company's growth with yourself being part of the leadership for a massively important transformation project. Sitting as the head of their Security Operations Centre there will be three main facets to your role: technical, client-facing and strategic (no man-management with this role!).
There'll be a heavy focus on the technical side of SOC activities with yourself being the highest point of escalation, dealing with the most complex investigations from their Junior/Mid/Senior Analysts. You will have previous experience complex SOC-related activities investigating complex cyber-attacks (as such a 2+ year background in such an environment is of advantage). Due to the seniority of the role you will need to be able to lead the incident handling process when needed and call in other team members when appropriate (e.g. malware analysis, Full Packet Capture / Intrusion Analysis, network forensics). Being able to think like an attacker is useful for any defensive security professional so any offensive security experience would be beneficial as well as a good understanding of Threat Intelligence consumption for the improval of the SOC's performance.
Supplementary to these, there will be a strategic element with respect to bringing new products/services to market or implementing particular process or tooling improvements, being involved in bringing on new analysts to fill particular gaps in knowledge or with skills that suit a particular client. You might also be involved in helping Senior SOC Analysts in training the more junior ones calling upon your background in SOC/Network Monitoring and Incident Response in order to impart wisdom on the next generation of Cyber Security professionals.
There will also be a client-facing aspect to this role with yourself occasionally being involved in going down to the client's helping their Service Delivery team on-board new clients, or consult on their internal security posture advising on how company services may help secure their networks, to simply just providing them updates on recent ongoings.
Having attended any SANS courses (e.g. SEC503, SEC504, SEC511, FOR508, FOR578, FOR610) or sat any defensive GIAC / CREST exams (e.g. GCIA, GCIH, GMON, GCFA, GNFA, GREM, CCIM, CCNIA, CCHIA, CCTIM) will be of significant benefit.
If you feel this role would be of interest to you, do feel free to give me an email on 'a.fernandes[att]computerfutures[dot]com' with an up-to-date version of your CV and a good time that we may speak. Alternatively, I am available by phone on 0-2-0-7-9-0-7-3-8-3-8 or on LinkedIn (Andrew Fernandes, Computer Futures).
If you know anyone that might be interested in the role, don't be afraid to point them in my direction; we're currently offering £200 of John Lewis vouchers to anyone who refers someone that later gets a job through us!