Senior Technical Operations Analyst

- I am looking for a strong technical background with detailed knowledge of cyber security, computer networks, and operating systems. - I prefer candidates with broad and detailed experience of technologies including, but not limited to, firewalls, IDS/IPS, Active Directory, endpoint protection, Windows Server, Linux, TCP/IP, Networks, Cloud, CDNs, and Vulnerability Management. - I value an analytical background, where candidates are comfortable analyzing and interpreting large, complex data sets while articulating the story behind observations, and providing conclusions and recommendations. - I require detailed knowledge of the current threat landscape, including the TTPs frequently employed in attacks and methods for investigation and mitigation. - Experience and knowledge of the MITRE ATT&CK framework are essential. - A good understanding of enterprise computing technologies is necessary. - Skills in Python 3 programming language are expected. - Candidates should demonstrate experience in using SOAR tooling and its application. - Knowledge of applying data science against large datasets involving unstructured data and designing data models is important. - Proficiency in using SIEM platforms to identify suspected security events and create content to enhance these platforms is required. - Familiarity with custom APIs to leverage SOAR functionality is a plus. - I look for the ability to communicate effectively with other stakeholders across the business. - Experience in creating technical documentation is needed. - The ability to mentor junior team members is advantageous. - Candidates must have the ability to obtain UK Government security clearance to SC. - Relevant industry and vendor qualifications, such as CISSP, CISM, CompTIA Security, are preferred. - Understanding cyber security frameworks, particularly the MITRE ATT&CK framework, is essential.