Senior Cyber Security Analyst

Role Summary:

The Senior Cyber Security Analyst leads enhancements to the Security Incident & Event Management (SIEM) platform to ensure the Cyber Security Operations Center (CSOC) is delivering premium services to some of our largest customers across the globe.

Duties and Responsibilities:

• Management of GTT SIEM platform, specializing in Industry Best Practices
• Collaborate with internal teams such as Product Management, Development, and Corporate Security to identify and deliver functionality to continually improve our products using industry best practices and trending customer requirements.
• Act as the escalation point when issues impact a customer, driving problems to resolution and managing the communications internally and with the client.
• Build relationships and become a trusted advisor to customers, especially key or strategic customers.
• Ensure quality of team ticket handling
  • Communications
  • Timely responses
  • Escalations outside of CSOC
• Personalized care for sensitive customers and situations
• Assess and drive metrics for managed support areas, analyzing the data for improvement ideas.
• Develop tools, processes and communication strategies to ensure a timely and responsive approach to both customer reported and internally identified incidents.

• Manage 3rd party vendors escalations. Identify employee training requirements to ensure shift analysts are highly proficient with customer services and internal processes.
• Responsible for the following functions:

• Security Incident and Event Management
• WAN Compliance
• MDR

• Responsible for ensuring efficient, quality, and consistent services across all functions within the CSOC.
• Identify employee training requirements to ensure shift analysts are highly proficient with customer services and internal processes.
• Support for presales, solutions and new product development is also required.

Required Experience/Qualifications:

• 5+ years’ experience with SIEM functionality and topology. 
• 5+ years’ experience of operational delivery in a 24x7 business critical environment (Production). Experience in a customer facing role with proven ability to collaborate and build strong relationships
• Hybrid Analysis

• CISSP preferred.
• Understanding of vulnerability assessment and remediation procedures including risk management.
• Significant understanding of security incidents, including malware, network reconnaissance and emerging threats.  
• Strong problem solving, priority setting, facilitation, multi-tasking, analytical, and collaboration skills.
• Proven ability to mentor and coach junior team members.
• Ability to generate a sense of urgency and rally appropriate resources both internally and with third parties.
• Be a positive, self-motivated proactive individual who is equally comfortable engaging with customer senior management and all levels within the GTT organisation.
• Possess excellent listening, written and verbal communication skills.
• High level of initiative and integrity.
• Deliver the appropriate balance of business need, customer expectation and compliance requirements.
• Strong organizational, presentation and documentation skills.
• Have a can-do attitude and demonstrate a passion for new technology and learning.

Hours/Travel/Shift:

Core hours Monday – Friday, 8a to 5p

Occasional extended hours may be required during management escalation, critical incidents and platform upgrades.

Core Competencies

• Computer Crime: Knowledge of concepts, tools, and practices of dealing with computer crime; ability to detect and prevent business crimes that involve computers/networks as instruments.
• Firewall Management: Knowledge of firewall systems; ability to install, maintain and update firewall systems to control the access of business information, both allowing passage to authorized sources and denying passage to unauthorized sources.
• Information Security Administration: Knowledge of information security administration; ability to develop and apply an organization's information security policies, standards and procedures ensuring the integrity and safety of information.
• Information Security Technologies: Knowledge of technologies and technology-based solutions dealing with information security issues; ability to protect information security across the organization using encryption technologies and appropriate security software.
• Network and Internet Security: Knowledge of the tools and processes