Main Duties and Responsibilities:

Security Monitoring: & Investigation:

• Monitoring multiple SIEM tools to assure high a level of security on solutions Becrypt deliver
• Oversee and enhance security monitoring systems to detect and analyse potential security incidents.
• Conduct real-time analysis of security events and incident and escalate as necessary
• Support other teams on investigations into incidents, determining the root cause and impact.
• Document findings and lessons learned to improve incident response procedures.
• Ensure runbooks are followed and are fit for purpose

Incident Response:

• Lead and coordinate incident response activities to effectively contain, eradicate, and recover from security incidents.
• Develop and maintain incident response plans, ensuring they align with industry best practices.
• Escalation management in the event of a security incident
• Follow major incident process

Threat Intelligence:

• Stay abreast of the latest cybersecurity threats and vulnerabilities, integrating threat intelligence into security monitoring processes.
• Contribute to the development of threat intelligence feeds to enhance proactive threat detection.

Security Tool Management:

• Manage and optimise SIEM tools, ensuring they are properly configured and updated to maximize effectiveness.
• Evaluate new security technologies and recommend enhancements to the security infrastructure.

Collaboration:

• Collaborate with cross-functional teams, including IT, legal, and management, to address security incidents and implement preventive measures.
• Provide expertise and guidance to other analysts.
• Woking with the Technical Delivery Team to ensure all new and changed services are monitored accordingly

Documentation:

• Maintain accurate and up-to-date documentation of security procedures, incident response plans, and analysis reports.
• Create post-incident reports for management and stakeholders.
• Create monthly reporting packs as per contractual requirements.
• Create and document robust event and incident management processes
• Runbooks & Playbooks

Other responsibilities:

• Involvement in scoping and standing up new solutions for new opportunities
• Assisting Pre-Sales team with requirements on new opportunities
• Demonstrations of SOC tools to clients
• Continual Service Improvement – Recommendations for change to address incidents or persistent events.