Level 1 SOC Analyst

Telefonica Tech

With the technology decisions you make today - Build secure digital resilience. Layer by layer.

Telefónica Tech (part of the Telefónica Group) is a leading NextGen Tech solutions provider with a highly diversified team of over 6,000 exceptionally skilled employees and +60 nationalities.

We serve more than 5.5m customers every day in over 175 countries, with a global ecosystem of market-leading partners. Global strategic hubs: Spain, Brazil, the UK, Germany.

The Telefónica Tech UK&I hub has an end-to-end portfolio of market-leading services and develops integrated technology solutions to accelerate digital transformation through: Cloud, Data & AI, Enterprise Applications, Workplace Services and Cyber Security & Networking.

Values: Open, Trusted and Bold

• HPE: Platinum Partner – FY23 UK&I Solution Provider of the Year
• Palo Alto & Crowdstrike: part of our NextDefense Cyber Security Portfolio
• Fortinet: Elite VIP Program – one of only 2 in the UK
• AWS: Advanced Solution & Managed Service Provider Program

Job Description

Due to expansion, we’re now recruiting for a Cyber Security Analyst – L1.

The Security Operation Centre (SOC) Information Security Analyst is the first level of monitoring in the SOC. The position monitors and responds to security events from managed customer security systems as part of a team on a rotating 24 x 7 x 365 basis.

Your background should include exposure to security technologies including firewalls, IPS/IDS, logging, monitoring and vulnerability management.

You should understand network security practices. Excellent customer service while solving problems should be a top priority for you. Telefonica Tech is a fast-paced, entrepreneurial environment so to be successful you’ll need to be a pro-active individual, take direction well, communicate succinctly and collaborate effectively.

Key Responsibilities

• Manage and configure security tools such as intrusion detection and prevention systems.
• Recommend enhancements to SOC security processes, procedures and policies.
• Communicate effectively with customers, teammates, and management.
• Provide further detail on incidents should they arise, including basic level sandboxing, IP reputation or further detailing of IOC’s.
• Provide base level remediation (blocking user accounts, isolating servers) to then triage for Level 2 for further investigation.
• Analyse and report on anomalous behaviour.
• Determine and direct advanced remediation and recovery efforts (with assistance from tooling and/or Level 2).
• Investigate alerts using SIEM, data visualisation, pattern analysis and automation.

Skills and Experience

• Solid cyber security skills including SIEM.
• Have the drive to dive deep into issues.
• Ability to identify security threats, trends and anomalies.
• Logical thinker and creative problem solver.

Qualifications

CEH, CND, SIEM Certifications (ACSE), OSCP, CCSA.

Additional Information

We don’t believe hiring is a tick box exercise, so if you feel that you don’t match the job description 100%, but would still be a great fit for the role, please get in touch.