Cyber Defence Analyst, Experian
+ Discretionary bonus plan & sharesave scheme
Free credit check, score, and report
Posted today
Free credit check, score, and report
1001+ employees
Posted today
+ Discretionary bonus plan & sharesave scheme
1001+ employees
Company mission
We’re focused on a clear purpose — to create a better tomorrow for consumers, for businesses, for our communities and for our people. It's our mission to improve financial inclusion. By improving access to financial services, we empower people to unlock opportunities and transform their lives.
Role
Who you are
- Some information security experience working within a Security Operations Center or Cyber Security Incident Response Teams
- Bachelor's Degree in Computer Science, Computer Engineering, Information Systems, Information Security or professional certification related to Digital Forensics, Incident Response, or Ethical Hacking (e.g., GCIH, CEH, GCFE, GCFA, and CFCE)
- Knowledge of main concepts related to the Incident Response Life Cycle, MITRE ATT&CK Framework, Cyber Kill Chain, and other cybersecurity frameworks
- High-level understanding of common intrusion methods and cyber-attack tactics, techniques, and procedures (TTPs), and common industry recommendations to prevent and respond to threats such as phishing, malware, network attacks, suspicious activity, data security incidents
- Exposure to technical elements of common Operating Systems (Windows, Linux, Mac OS), Networking (Firewalls, Proxies, NetFlow), Cloud Infrastructure (AWS, Azure, GCP), and Security Technologies (Anti-Virus, Intrusion Prevention, Web Application Firewalls)
- Interest in developing knowledge across common Incident Response and Security Monitoring applications such as SIEM (e.g., Qradar, Splunk), EDR (e.g., FireEye HX, CrowdStrike Falcon, Microsoft Defender), and SOAR (Palo Alto XSOAR, Google Secops / Chronicle)
- Desire to build technical skills and hands-on knowledge in the following areas of security operations and incident response
- In-depth packet analysis skills, core forensic familiarity, incident response skills, public could security practices, and data fusion skills based on multiple security data sources
- Security analysis and architecture of Azure and AWS cloud environment using security tools including Defender for Cloud, GuardDuty, CloudTrail, or CloudWatch
- System administration on Unix, Linux, or Windows
- Network forensics, logging, and event management
- Defensive network infrastructure (operations or engineering)
- Vulnerability assessment and penetration testing concepts
- Malware analysis concepts, techniques, and reverse engineering
- In-depth knowledge of network and host security technologies and products (such as firewalls, network IDS, scanners) and improve these skills
- Security monitoring technologies, such as SIEM, IPS/IDS, UEBA, DLP, among others
- Scripting and automation
What the job involves
- As a Cyber Defence Analyst, you will join the Cyber Fusion Center, performing in-depth analysis, assessment, and response to security threats by following documented policies to meet Service Level Goals. The team provides global 24x7 security operations and monitoring for cybersecurity events affecting Experian
- You will be a part of the first line of defence in Experian's broader incident response and incident management departments, responsible for receiving and prioritizing cybersecurity alerts, including being the dedicated contact for potential security incidents reported by users (e.g., Experian employees)
- Depending on the results of assessment, this team is then responsible for investigating, containing, eradicating, and recovering from events falling in its scope or escalating higher-risk events to dedicated incident response and management teams in the CFC
- This role is critical in ensuring the handling of potential threats and plays a part in improving security operations
- This is a home based role reporting to the Director of Security Operations for SecOps & Threat Detection
- Please note that in this role, you will have an 8x5 Monday-Friday schedule, with flexibility to respond to after-hours pages for potentially major security incidents to support incident response efforts and may include assignment to an on-call rotation for evenings, weekends, holidays
- Contribute to daily security operations by overseeing response activities for security events and alerts associated with cyber threats, intrusions, and compromises alongside a team of global security analysts following documented SLOs and processes
- Analyze events using security tooling and logging (e.g., SIEM, EDR) and assess potential risk / severity level of cyber threats; escalate higher-risk events to dedicated incident response and management teams in the CFC according to established processes
- Collaborate with external teams for incident resolution and escalations, driving incident handling
- Notify team Lead(s) of concerns related to operations, such as anomalous changes in metrics, notable open incidents, quality concerns, or observed risks; support with resolution if appropriate
- Manage and complete assigned caseload throughout the incident response lifecycle, including analysis, containment, eradication, recovery, and lessons learned
- Maintain all case documentation, including notes, analysis findings, containment steps, and cause for each assigned security incident. Ensure incident updates or contact with end-users are performed promptly and documented
- Help improve relevant strategies, Standard Operating Procedures (SOPs), and training materials
- Support management's overall strategy for CFC by participating in execution of improvement programs together with management's plans
- Assist the team Leads and management on use case development by suggesting enhancement or tuning of use cases to improve the security posture of Experian
Our take
Experian is one of the world's leading data and technology companies, best known for helping people and businesses understand and improve their credit. With free credit reports and tools that let users boost their score using everyday bills, Experian is making managing money a whole lot easier.
It's a powerhouse of a company too, operating in 32 countries and boasting an employee count of over 24,000. And its reach stretches across industries, helping lenders make fairer decisions, supporting healthcare teams in preventing fraud, and guiding businesses to use data more intelligently. It's a trusted name at the very heart of how the world uses data to make smarter financial decisions.
It's also investing in new technologies and ideas to make finance even fairer and faster. As data becomes more important in our digital lives, Experian's focus on innovation and transparency will surely keep helping people take control of their financial stories.
Steph
Company Specialist at Welcome to the Jungle
Insights
Company
Company benefits
- Hybrid working
- Flexible working
- Discretionary bonus
- Pension
- Bupa Healthcare
- Sharesave Scheme
- 25 days annual leave with 8 bank holidays and 3 volunteering days. You can purchase additional annual leave
- Discounted gym membership
- Discounted dental cover
Company values
- Working with integrity - We know that trust isn’t given, it’s earned. We’re committed to working with integrity and operating responsibly in every facet of our business. At Experian, that means treating our data, our people and our environment with respect.
- Treating data with respect - We handle the data of 1.3 billion people and 166 million businesses worldwide, so it’s essential to our business that we maintain their trust. Ensuring that we collect, store and manage data safely and responsibly is fundamental to our success.
- Investing in our community - We’re committed to investing our time, resources and partnerships to create a better tomorrow for our community.
- Unlocking the power of data - Data has the power to transform lives for the better, so we're leveraging new technologies and innovative products to do just that.
Company HQ
Nottingham, UK
Articles
Leadership
Brian Cassin
(CEO)Previously the Chief Financial Officer of Experian and, before that, Managing Director at Greenhill & Co., Brian served for nine years as a non-executive director of J Sainsbury plc. He has also held various senior roles at Baring Brothers International and the London Stock Exchange.
Salary benchmarks
We don't have enough data yet to provide salary benchmarks for this role.
Submit your salary to help other candidates with crowdsourced salary estimates.
Share this job
View 29 more jobs at Experian