NCC Group

Security Operations

• Monitor global IDS, Network Intruder, Firewall, DDoS detection and mitigation, availability and SIEM platforms looking for potential threats, vulnerabilities and indicators of compromise.
• Provide Incident remediation and prevention documentation and recommendations to customers based on defined procedures and analyst experience.
• Document and conform to processes related to security monitoring procedures.
• Provide customer service that exceeds our customers’ expectations at all times.
• Initiate escalation procedure to counteract potential threats, vulnerabilities and threat actors.
• Compilation and review of service focused reporting.
• Act as an escalation point for more junior members of the team, providing assistance and mentoring where necessary.
• Providing assistance to Senior SOC Analysts on Threat Hunting engagements.
• Contributing to the continuous improvement of SOC procedures and documentation.
• Perform other duties as assigned.

SOC Analyst

• Monitor health and security alerts and events from various sources including SIEM systems, IDS/IPS, and other monitoring tools
• Conduct initial triage of security incidents to assess their severity and potential impact on the organization
• Document and maintain incident details, including initial findings, actions taken, and any relevant evidence
• Communicate findings and recommendations clearly and concisely to technical and non-technical audiences
• Initiate escalation procedure to counteract potential threats, vulnerabilities and threat actors both internally and externally
• Collaborate with other SOC team members, IT staff, and relevant stakeholders to effectively respond to security incidents
• Provide customer service that always exceeds our customers’ expectations
• Contribute to the creation and maintenance of security documentation, including incident response playbooks, standard operating procedures, and knowledge base articles
• Document and conform to processes related to security monitoring procedures
• Compilation and review of service focused reporting
• Perform other duties as assigned

Associate SOC Analyst

Account Manager

• Manage renewals, upsells, expansions, and net new logo acquisition to drive account growth
• Build strong, multi-threaded relationships with executive, business, and technical stakeholders
• Lead strategic account planning and develop multi-quarter growth strategies
• Collaborate cross-functionally with Product, Pre-Sales, Delivery, and Operations teams
• Act as a customer advocate; resolve issues with urgency and accountability
• Identify and execute cross-sell and upsell opportunities aligned with client goals
• Leverage sales methodologies such as MEDDPICC, Challenger, and Value Selling
• Maintain accurate forecasts, pipelines, and customer health metrics in CRM
• Educate clients on industry trends, risk frameworks, and emerging cybersecurity threats

Senior Account Manager

Analyst

• Conduct in-depth static and dynamic analysis of new and emerging malware threats, identifying potential risks and novel attack vectors.
• Provide detailed analysis of malware samples as part of Digital Forensics and Incident Response (DFIR) investigations.
• Respond to Requests for Information (RFIs) related to malware and binary analysis from internal and external teams.
• Stay up-to-date with ongoing malware campaigns and techniques, providing insight into emerging or high-impact threats.
• Document and report on malware behaviour, techniques, tactics, and procedures (TTPs).
• Generate and share IoCs from malware analyses, leveraging the internal TIP tooling.
• Contribute to external communications through blog posts highlighting unique or significant malware findings.
• Develop and maintain tools and scripts for malware analysis, including custom configuration extractors and unpackers in the malware lab.
• Create and refine detection signatures such as YARA rules and identify network and host-based detection opportunities.
• Support the GTI team and collaborate with DFIR, detection engineering, and external partners to share intelligence and ensure detections are in place for latest threats.

SOC Analyst

Associate SOC Analyst

Senior Account Manager

Malware Analyst