Level 3 SOC Analyst

Telefónica Tech (part of the Telefónica Group) is a leading NextGen Tech solutions provider with a highly diversified team of over 6,000 exceptionally skilled employees and +60 nationalities.

We serve more than 5.5m customers everyday in over 175 countries, with a global ecosystem of market-leading partners. Global strategic hubs: Spain, Brazil, the UK, Germany.

The Telefónica Tech UK&I hub has an end- to-end portfolio of market leading services and develops integrated technology solutions to accelerate digital transformation through: Cloud, Data & AI, Enterprise Applications, Digital Workplace and Cyber Security & Networking.

Values: Open, Bold, Trusted

Trusted Partners:

• Microsoft: Top 3 Service Providers, Azure Expert Status, Fastrack & Inner Circle Partner
• HPE: Platinum Partner – FY23 UK&I Solution Provider of the Year
• Fortinet: Elite VIP Program – one of only 2 in the UK
• Palo Alto & Crowdstrike: part of our NextDefense Cyber Security Portfolio

Level 3 SOC Analyst - Remote, UK

As a Level 3 SOC Analyst, your role will be to provide expert-level analysis and response to security incidents and threats within the organization. You will work closely with Level 1 and Level 2 analysts to investigate and remediate security incidents, and will provide guidance and support to junior team members as needed. 

Your expertise will be critical in ensuring the security of the organization's networks, systems, and data, and you will be expected to stay up-to-date on the latest threats and trends in the cybersecurity landscape. You will be responsible for using a variety of tools and technologies to identify, investigate, and respond to security incidents, including Cortex, Falcon, Microsoft Sentinel, Defender for Endpoint, Tenable IO, Defender Threat Hunting, and OpenCTI. 

Key Responsibilities: 

• Perform advanced analysis of security events and alerts, using a combination of manual techniques and automated tools to identify potential security incidents. 
• Provide expert guidance and support to Level 1 and Level 2 analysts in the investigation and remediation of security incidents. 
• Use Cortex, Falcon, Microsoft Sentinel, Defender for Endpoint, Tenable IO, Defender Threat Hunting, and OpenCTI to perform threat hunting and identify potential security risks. 
• Work closely with other members of the SOC team to develop and implement new security policies and procedures, as needed. 
• Stay up-to-date on the latest cybersecurity threats and trends, and provide regular updates and recommendations to senior management. 
• Participate in incident response activities, including on-call rotations, and provide expert-level support during major security incidents. 

Qualifications/Certifications 

• At least experience working in a security operations centre or similar environment. 
• Strong knowledge of cybersecurity principles and best practices. 
• Deep practical knowledge of Palo Alto Cortex and/or XSIAM.
• Some experience working with Microsoft Sentinel and/or CrowdStrike Falcon 
• Ability to work independently and as part of a team. 
• Excellent communication skills, with the ability to explain complex technical issues to non-technical stakeholders. 

Key Words:

Cyber - Cyber Analyst - Cyber Security Analyst - SOC Analyst - Cyber Engineer - Cyber Security Engineer - SOC - Cortex - Palo Alto - Sentinel - XSIAM - Endpoint

We don’t believe hiring is a tick box exercise, so if you feel that you don’t match the job description 100%, but would still be a great fit for role, please get in touch.