Security Operations and Incident Response Specialist

ASOS is recruiting for a Security Operations and Incident Response Specialist.  This role will report in to the SOC and IR Manager and be core to reactively protecting ASOS from threat actors, whilst proactively improving the security posture of the organisation.  This is a skilled role, requiring an excellent grasp of cloud native technologies with essential skills in at least one of the following areas: Network monitoring, Bot Protection technologies, O365 security, Microsoft Security Technologies and Tooling.

 The role will involve the following:

• Endpoint monitoring and detailed alert triaging/response, following an incident through to resolution and root cause analysis,
• Malware Analysis and investigation,
• Alert fatigue initiatives and tuning,
• Act as a security SME for essential skills in one or more of the following areas: Network monitoring, Bot Protection technologies , O365 security, Microsoft Security Technologies and Tooling.
• Security Threat hunting across all of the department's technology estate to seek out areas of weakness, potential problems, and active threats,
• Contribute to processes and SOPS,
• Act as a point of escalation in the event of an incident, contributing to Major incident Management,
• Liaising with other teams to promote best practice and foster a shared culture of Security responsibility,
• Developing and mentoring junior team members to improve their skills and capabilities, along with wider knowledge transfer to other security and non-security teams to help build a culture of cyber security in departments.
• Maintain awareness of real-world cyber security threats and engage in the innovation of new analytic methods for detecting threats.

About You: 

• Extensive experience in Incident Response in a Security Operations Team
• Experienced in mentoring/task managing team members in a Security Environment,
• Working knowledge of creating and tuning detection signatures, Indicators of Compromise (IOCs), and other content to detect malicious activity,
• Experience with Microsoft’s security stack and conducting investigations in-to possible threats, documenting all discovered IOCs.
• Experience in developing process based on previous investigations to help operations run more efficiently.
• Building automation playbooks to help build efficiency within the SOC.
• Committed to continuous learning and professional development, and passionate about developing others.