Security Operations

• Maintain up-to-date knowledge of the threat landscape: Stay informed about new security solutions and emerging cyber-attacks.
• Review and analyse logs: Interpret problem activity and prepare detailed analysis and management reports with improvement recommendations.
• Identify, investigate, and resolve security alerts: Use SIEM tools and other security technologies to detect, analyse, and respond to security incidents.
• Provide regular statistics and information for service and management reviews: Generate and present periodic reports on security metrics, incident trends, and overall security posture.
• Raise awareness of security operations services: Educate peers and business stakeholders about security operations services and provide training as needed.
• Conduct hypothesis-based threat hunting: Utilise up-to-date threat landscape research to proactively search for indicators of compromise (IoCs) and potential threats within the network.
• Offer security advisory and situational awareness briefings: Provide stakeholders with timely and relevant security advisories, situational awareness briefings, and threat intelligence updates.
• Ensure processes align company policy, and regulatory requirements: Regularly review and update security processes and procedures to ensure compliance.
• Build high-trust relationships: Foster strong relationships with internal teams, external partners, and stakeholders to facilitate effective communication and collaboration on security matters.
• Monitor Threat Intelligence Platforms: Ensure threat intelligence data is current and actionable. Respond to alerts and integrate threat intelligence into security operations.
• Use SIEM and security tools: Continuously monitor GBG’s security posture using SIEM and other security tools. Identify and investigate anomalous activities and behaviours and take appropriate actions to mitigate risks

SOC Analyst

Security Operations Specialist