2nd Line Security Analyst

About the role

The 2nd Line Security Analyst will be responsible for performing the day-to-day maintenance of the Security Operations Centre.

These responsibilities will include proactive monitoring of customer’s security posture as well as reactive actions to control a breach should this occur. Typical tasks will include triage and remediation of SIEM (Microsoft Sentinel) incidents and alerts, threat intelligence and research, system hardening, and documenting customer’s infrastructure and assets.

Technical product and process knowledge needs to be accompanied by excellent customer service skills, and meticulous attention to detail.

Main Duties and Responsibilities:

•  Perform forensic analysis, triage security incidents, and apply proactive remediation.
• Proactive monitoring and threat hunting.
• Proactive threat intelligence and research.
• Vulnerability assessment and management.
• Provide technical support and guidance for 1st Line SOC Security Analysts and Security Service Delivery Manager.
• Ownership of security incidents and breaches, as well as escalated issues from 1st Line SOC Analysts through to resolution.
• Documenting and articulating issues ready for escalation to the 3rd Line Security Analysts.
• Ability to work shifts to fulfil 24 x 7 support requirements.
• Work closely with the Service Desk team for security related escalations.
• Provide feedback and be part of the continuous improvement program.
• Ensure excellent customer satisfaction is achieved.
• Manage customer complaints through to resolution.
• Assist the Security Service Delivery Manager with creation and delivery of customer facing reports.
• Assist in maturing SOC processes.
• Be accountable for the timely response and progression of incoming requests.

About you

First and foremost, at Transparity we recruit with our cultural fit in mind. Therefore, you will need to demonstrate a strong work ethic, unwavering dedication to delivering service excellence, the ability to create and maintain exceptional working relationships, creative thinking and problem solving, and high levels of organisation.

We’re also looking for the following attributes:

• Previous SOC experience preferred.
• Knowledge and experience with Microsoft Sentinel, Microsoft Defender for Endpoint, Azure Active Directory, Microsoft Defender for Cloud, Microsoft Defender for Office 365, Microsoft Defender for Cloud Apps, and Intune.
• Knowledge and experience with Microsoft Windows Server and Client operating systems. Linux experience is a bonus.
• Knowledge and experience in networking products and frameworks, such as firewalls, switches, wireless infrastructure, WAF, application gateways and the OSI 7-layer model.
• Knowledge of Kusto Query Language and PowerShell scripting languages required.
• Excellent technical document writing experience (network and traffic flow diagrams, playbook documentation).
• Relevant industry certifications.
• Self-motivated, and organised.
• Ability to cope under pressure and prioritise work accordingly.
• Ability to work to customer and internal deadlines.

About us

Transparity is a fast-growing IT company focusing on Microsoft Cloud based solutions.  Our culture has an enviable reputation in the industry which we work hard to maintain.  We are focused on creating an inclusive environment where our employees thrive based upon integrity, strong work ethic, a one-team ethos, desire to learn and develop and a commitment to deliver unwavering service excellence to our customers, vendors and partners.  Therefore, first and foremost we recruit with our cultural fit in mind.

Sound good? If you’re interested in joining our journey, simply email your CV and covering letter to careers@transparity.com.