Lead Cyber Operations Analyst

Job Description

As a Lead Cyber Operations Analyst, you will be a part of a team that develops and operates tools that are used by internal groups for protecting information, understanding internal systems and networks in order to prevent attacks. You will be responsiblefor the management of security events, including triaging, escalation, response and post incident review. You will also mature incident triaging methods and develop controls to detect and prevent attackers from executing their objectives. Barclays is one of the worlds largest and most respected financial institutions, with 329 years of success, quality, and innovation behind us. We offer careers that provide endless opportunity - helping millions of individuals and businesses thrive and creatingfinancial and digital solutions that the world now takes for granted. Working FlexiblyWere committed to providing a supportive and inclusive culture and environment for you to work in. This environment recognizes and supports ways to balance your personal needs, alongside the professional needs of our business. Providing the opportunity forall our employees, globally to work flexibly empowers each of us to work in a way that suits our lives as well as enabling us to better service our customers and clients needs. Whether you have family commitments or youre a carer, or whether you need studytime or wish to pursue personal interests, our approach to working flexibly is designed to help you balance your life. If you would like some flexibility, then please discuss this with the hiring manager, and your request will be reviewed subject to businessneeds. We are currently in the early stages of implementing a hybrid working environment, which means that many colleagues spend part of their working hours at home and part in the office, depending on the nature of the role they are in. Were flexible on how thisworks and it may continue to change and evolve. Depending on your team, typically this means that colleagues spend a minimum of between 20% to 60% of their time in the office, which could be over a week, a month, or a quarter. However, some colleagues maychoose to spend more time in the office over a typical period than their role type requires. We also have a flexible working process where, subject to business needs, all colleagues globally can request work patterns to reflect their personal circumstances.Please discuss the detail of the working pattern options for the role with the hiring manager. What will you be doing Maintaining a good understanding of the regulatory requirements of performing monitoring and incident response functions globally Acting as an authority in analysis approaches and techniques used in Malware analysis, Digital forensics and Countermeasure development Authorising control deployment or containment and eradication actions or strategies Maintaining a functional understanding of the latest approaches used in detecting attacker techniques Understanding and acting on intelligence provided by other teams and external sources Providing support to other security investigational functions as required Offering out of hours support and investigation for security incident escalation Providing general advice and guidance on Information Security related matters What were looking for: Experience and detailed technical knowledge within all the phases of incident response Experience in presenting to executive and technical audiences both internally and at industry events Experience working with Cyber Kill Chain, Intelligence Driven Defence and Security Architectures Experience with Red, Blue and Purple team operations and management Skills that will help you in the role: Knowledge of Incident Response procedures, with technical ability to take control and co-ordinate major security incidents Comprehensive knowledge and application of attack detection development and tuning, Cyber threat hunting, anomaly detection and control deployment automation Experience in security monitoring, incident response and mitigation, web application security, threat research or intelligence analysis Ability to identify operational risks and issues in a real time environment, and take proportionate and appropriate actions Where will you be workingYou will be based in Radbroke, Knutsford. The Barclays Technology Campus just outside Manchester is our tech command centre and a vital strategic powerhouse behind our global operations. The campus is set in a 64 acre self-contained site, in a beautiful greenenvironment and it offers unrivalled facilities for work and for play. We have an onsite gym, as well as outdoor tennis, football and cricket areas, as well as onsite restaurant and coffee shops. #CyberSecurity