Senior Security Operations Analyst

About the role

As a Senior Security Operations Analyst, you’ll help protect the technology environments that support AP+ by identifying, investigating and responding to security events and incidents. You’ll play an important role in maintaining the day‑to‑day security of our environment, helping ensure potential threats are detected early, investigated thoroughly and managed through to resolution.

Key responsibilities

• Lead security monitoring across enterprise environments using SIEM, EDR and cloud security platforms.
• Investigate security alerts and indicators of compromise, correlate threat intelligence with internal telemetry and conduct proactive threat hunting.
• Coordinate and lead the response to security incidents, including containment, eradication and recovery activities.
• Perform detailed investigations to determine root cause, impact and remediation actions, and produce incident reports and lessons learned.
• Identify opportunities to improve security operations processes, tooling and automation, and develop and maintain playbooks, runbooks and SOPs.
• Lead vulnerability assessment activities, assess security risk and coordinate remediation efforts across relevant teams.

Required profile

• Security operations professional with experience investigating threats and turning security signals into practical action.
• Strong understanding of security controls, incident and problem management, vulnerability assessment, threat intelligence and operational security tooling.
• Curious, methodical approach to investigations with good judgement on escalation and continuous improvement.

Required skills

• SIEM platforms
• Endpoint Detection and Response (EDR)
• Cloud security platforms
• Threat hunting
• Vulnerability assessment tools
• Security incident response
• Security metrics and reporting