Cyber Security Analyst - T2 - Enterprise Markets

We are seeking a proficient and motivated Cyber Security Analyst - Tier 2 to join our Security Operations Centre (SOC) team. You will monitor and respond to cybersecurity incidents for one of our large enterprise customers, detecting, investigating, and resolving security incidents while leveraging advanced technical skills. As a Tier 2 analyst, you will conduct regular threat hunting investigations and stay updated on the latest cyber security trends. You will support proactive detection of new vulnerabilities disclosures and contribute to SOC efficiency.

You will report to the Security Operations Manager and support MDR technologies and security incident handling. The ideal candidate will have a strong understanding of security principles, networking, threat actors, and threat vectors, with exceptional problem-solving and communication skills to identify areas for customer security improvements. Experience with Rapid7 IDM, IVM, and Cortex XDR is preferred.

Day-to-day responsibilities

• Analysis: Use SIEM and other security tools to monitor alerts, triage incidents, and investigate breaches and vulnerabilities.
• Threat Hunts: Conduct proactive investigations beyond tool alerts, identify anomalous behavior, and derive patterns in log data to detect new TTPs.
• Vulnerability disclosures: Document new vulnerability disclosures and communicate findings to stakeholders at all levels.
• Documentation: Record incidents, actions taken, and resolutions in accordance with company procedures.
• Customer support: Address security and technical queries from customers and escalate issues as necessary.
• Training: Continuously update knowledge on cyber security trends through ongoing training.
• Collaboration: Work with team members to enhance security protocols and incident response strategies.
• Incident handling: Triage security alerts, escalate incidents to customers and senior management when applicable, and ensure timely resolution.
• Security measures: Identify and support the management of security measures, such as tuning and use case development.
• Communication: Collaborate with cross-functional teams and ensure successful handovers to support teams.
• Research: Stay informed and lead internal and external customer communications about emerging threats, technologies, and regulatory changes to maintain cutting-edge security practices.

• Experience in a SOC using SIEM and EDR technologies, including Rapid7, Microsoft Defender, Cortex XDR
• Experience conducting deep-dive investigations and compiling post-analysis reports
• Understanding of regulatory standards and compliance (e.g., GDPR, ISO 27001, PCI DSS)
• Knowledge of Sentinel, Rapid7 IDR, IVM, Cortex EDR, or similar
• Strong understanding of network security, endpoint protection, IAM, and data protection concepts
• Ability to communicate complex technical concepts to technical and non-technical stakeholders
• Knowledge of Cloud concepts and Windows and Linux operating systems
• Active interest in staying up to date with industry trends and solutions, * Bachelor’s degree in Cyber Security, Computer Science, Information Security, or related field preferred
• Relevant certifications such as CompTIA CySA+, CEH, Microsoft SC-200, or similar
• Security clearance or ability to obtain Security Clearance

Gamma delivers Unified Communications as a Service (UCaaS). We provide voice, data, and mobile solutions to businesses across the UK, Germany, Spain, and the Benelux region, and we are expanding to bring digital automation and Gamma-powered services to SMEs through a growing network of channel partners.