Assurance Operations - Security Analyst

Do you have a passion for high-scale services and working with some of Oracle's most critical customers? We are looking for a technical analyst who has a critical eye for detail and enjoys collaborating within a global organization with a diverse set of technical disciplined teams such as site reliability engineering, development, security analysis and security research. You are someone who enjoys learning diverse technologies and keeping current with evolving best practices. You foster and contribute to a creative and collaborative culture which embraces ambiguity to deliver results. 

Who are we?

We are a world class team of high calibre technical analysts operating critical security support operations. We are an inclusive and diverse team with a full spectrum of experience distributed globally. We have the resources of a large enterprise and the energy of a start-up, working on a critical greenfield software assurance project collaboratively with our cloud and mobile engineering teams. The Software Assurance organisation has the mission to make application security and software assurance, at scale, a reality. We are a dedicated team, leveraging each other’s insights and abilities to produce cutting edge solutions to difficult problems through cutting-edge technology. Join us to grow your career and create the future of software assurance at scale together.

Work You’ll Do:

• Monitor incoming event queues using security management tools.
• Identify, categorize, prioritize, and investigate correlated events.
• Perform investigation and triage of events and incidents and escalate according to SOPs.
• Communicate and coordinate with multiple teams on security and operational incidents within a globally distributed team.
• Develop reports, dashboards, real-time rules, and filters on a large scale system.
• Develop/iterate on event/incident procedures, long-term analysis, investigation processes and reporting.
• Document investigation results and provide relevant details for final analysis
• Identify improvements in event generation and monitoring platforms and work with engineering teams to have these implemented.
• Pursue events and incidents investigation and response automation opportunities.

What You’ll Bring:

• BS degree in Computer Science, Cybersecurity, related technical education or equivalent practical experience.
• 3 or more years of experience in Cybersecurity Operations. 
• SIEM experience.
• Experience working on a cloud-based environment, preferably OCI.
• Experience with Linux operating systems.
• Strong written and verbal communication (English).
• A keen interest in learning and practicing cybersecurity. 
• A critical and considerate eye for detail with the ability to proactively identifying effective and efficient solutions to real problems.
• Ability to learn new technologies quickly.
• Knowledge of network security fundamentals.
• Knowledge of cloud security fundamentals.
• Eligibility to work in UK without sponsorship is essential.

Nice to Have:

• Have experience with reporting tools such as Grafana and/or OCI analytics.
• Experience scripting in regular expression for SIEM signatures.
• Experience in SOAR / XSOAR automation.
• Network monitoring or detection experience.
• Knowledge or experience of mobile apps design, architecture and networking would be a big advantage.
• Ability to drive, follow, and evangelize cross-team processes.

What We'll Give You:

• Exposure to mind blowing large-scale cutting-edge systems.
• The resources of a large, global operation while still having the small, start-up feel of a smaller team day to day.
• Exposure to multiple disciplines and teams through close collaboration, ongoing encouragement to development skills to further your career aspirations.
• Multiple pathways into exciting careers. 
• An organisation filled with smart, enthusiastic, and motivated colleagues.
• The opportunity to impact and improve our systems and delight our customers.
• Incredible benefits and company perks.

Career Level - IC3