This is an exciting opportunity for a senior analyst to play a key role in operating an innovative managed detection and response (MDR) service. The individual will be responsible for investigating and remediating detections from our security tooling across a growing global customer base, as well as supporting customers with queries and engaging in proactive threat hunting based on data from our threat intelligence sources.
The role is technically hands-on, requiring established investigation and log analysis skills. The candidate will also support the ongoing improvement of the service across people, process, and technology, and play a role in customer onboarding and management and information sharing with other internal teams.
About the role
You will play a pivotal role in service delivery by managing and responding to security detections and customer requests with urgency and clarity. Your responsibilities include:Triaging alerts from security tools, distinguishing false positives from genuine threats, and executing remediation using built-in capabilities and remote PowerShell commands.
Handling customer queries via the MDR mailbox, assist with user management and investigations, and monitor detection trends to optimise allow/block listing.
+ Additionally, you will support the onboarding of new customers by guiding tool deployment and contributing to ongoing account management. Actively contribute to improving operational processes and technologies by offering feedback and helping assess new tools.
Creating technical resources--such as PowerShell scripts--to automate threat identification and remediation, enhancing overall service efficiency.
Furthermore, you will mentor team members, sharing expertise in detection analysis, customer support, and proactive threat hunting to foster skill development and strengthen team capabilities
About you
The ideal candidate will have solid experience in Security Operations (SecOps), particularly in detection and response, with a proven ability to investigate and remediate incidents using EDR/XDR tools. Other experience that we are looking for includes:A working knowledge of log query languages such as SQL, Splunk, or KQL is essential, alongside a strong grasp of endpoint security, networking protocols, and cloud technologies
Scripting or programming experience for security tooling and SOAR platforms, familiarity with the Mitre ATT&CK framework, and an understanding of Microsoft Windows Active Directory environments.
Core Values
Love what you do:
We show up each day ready to take on the world. Our passion and intensity set us apart and makes the difference to our colleagues, customers, brokers and carriers.
Challenge everything:
We're never afraid to question the way that things are done and we constantly challenge ourselves and others to makes things better.
Have fun, be good:
Insurance is a serious business, but we don't take ourselves too seriously. We make it fun to work at CFC, we welcome all viewpoints, and we treat everyone how we would expect to be treated.
About CFC
CFC is a specialist insurance provider, pioneering emerging risk and market leader in cyber. Our global insurance platform uses cutting-edge technology and data science to deliver smarter, faster underwriting and protect customers from today's most critical business risk.
Headquartered in London with offices in New York, Melbourne, Sydney, Austin, Madrid, Brussels and Brisbane, CFC has over 1100 staff and is trusted by more than 100,000 businesses across 90 countries.
At CFC, insurance isn't just about underwriting. From data science to software development, and digital marketing design, we've got something for everyone. We're passionate about pushing boundaries, thinking differently and building the insurance company of the future.
CFC is committed to the principles of equal opportunities and creating an environment in which all individuals are always treated with dignity and respect. We encourage a diverse corporate culture of openness and appreciation to create an environment in which your talent can be developed in the best possible way. Should you require any reasonable adjustments at any stage of the recruitment process please let us know.
Beware of fraud agents! do not pay money to get a job
MNCJobs.co.uk will not be responsible for any payment made to a third-party. All Terms of Use are applicable.