Cyber Security Analyst - XDR

Job Description Job Title: XDR Security Analyst Summary Today, it is an unavoidable fact that your business critical infrastructure and systems are at risk of attack. The key to good security is a clear understanding of what is most critical to the business. Where you do not have enough internal resources, time or skills to monitor and manage your IT environment 24/7, NCC Group can help, freeing up your skilled employees to focus on value-add activity. NCC Group provide a range of managed and hosted services delivered from our UK based Security Operations Centre SOC which operates 24/7, 365 days a year. Our team of over 30 accredited security experts are available 24/7, dealing daily with over 200 million log events and providing support for over 5,000 network devices. NCC Group’s Cloud XDR Team provide a world class Extended Detection and Response (XDR) services; detecting, responding and mitigating cyber-attacks on our customers networks in our Security Operations Centres using the Microsoft Sentinel ecosystem. The Cloud XDR Team are looking for XDR Security Analysts with a passion for security to join the team to help the customers get the most out of our services and to protect their networks. This is an opportunity to join a technically advanced and talented team and help NCC Group build and deliver world class services to our customers. This role is ideal for a seasoned SOC Analyst with experience in cyber security looking to broaden their scope of cyber skills with a strong focus on detection and response to cyber incidents. Primary Responsibilities

• Monitor global systems looking for potential threats, vulnerabilities and indicators of compromise.
• Perform in-depth analysis of security alerts utilizing Microsoft XDR suite (Sentinel/Defender etc)
• Provide Incident remediation and prevention documentation and recommendations to customers based on defined procedures and analyst experience.
• Document and conform to processes related to security monitoring procedures.
• Provide customer service that exceeds our customers’ expectations at all times.
• Initiate escalation procedure to counteract potential threats, vulnerabilities and threat actors.
• Compilation and review of service focused reporting.
• Act as an escalation point for more junior members of the team, providing assistance and mentoring where necessary.
• Providing assistance to Senior Cyber Security Analysts on Threat Hunting engagements.
• Contributing to the continuous improvement of SOC procedures and documentation.
• Perform other duties as assigned. Experience / Skills
• Practical knowledge of security and networking toolsets such including Microsofts XDR suite (Sentinel/Defender)
• Pre-existing, in-depth knowledge of common network protocols and endpoint detection/forensics
• Pre-existing, in-depth knowledge of Windows and Linux based operating systems.
• Experience in the extensive analysis of common security incidents.
• Experience in endpoint
• Ability to stay calm in highly sensitive and high pressure incidents.

Certification The following certifications are desirable, but not a requirement. Successful candidates that do not possess these Certifications may be tasked with working towards them at the beginning of their employment:

• Azure based certifications (SC-200,AZ-500,MS-500)

• CREST CPSA / CRIA / CMRE / CNIA / CHIA
• CompTIA Security+
• CompTIA Network+
• Other relevant certifications.

Other Information Please be aware that this position is based on a 24 x 7 x 365 shift roster.