Senior Security Operations Analyst

+

We are one connected team in pursuit of one inspiring purpose - to unite people and technology to power better experiences. Each of us has a part to play in making that happen. You'll be encouraged to bring your big ideas forward and make a difference through your work. Taking steps forward in your career whilst still having room for fun, friendships, and flexibility in your daily life.

We're driven by our core values: lead with heart, learn for tomorrow and live our legacy. A purpose like ours takes the inspired impact of an incredible team. Ready to change the game? We're ready to help you do it.

The Purpose

As a Senior Security Operations Analyst, you'll help protect the technology environments that support AP+ by identifying, investigating and responding to security events and incidents. You'll play an important role in maintaining the day-to-day security of our environment, helping ensure potential threats are detected early, investigated thoroughly and managed through to resolution.

This is a hands-on role across security operations, incident and problem management, vulnerability assessment and threat intelligence. You'll monitor security events and alerts, investigate suspected incidents and security breaches, and use security data to identify patterns, emerging threats and recurring issues. You'll help turn this information into practical actions that strengthen our security controls and reduce the likelihood or impact of future incidents.

You'll also contribute to the continuous improvement of security operations by analysing trends, supporting root cause investigations, improving operational processes and helping implement preventative measures. Working with security and technology teams, you'll help ensure security policies, controls, and operational procedures are working effectively and that security issues are investigated, escalated and resolved in line with agreed processes and service levels.

The role also provides an opportunity to contribute to threat intelligence and vulnerability assessment activities, helping AP+ better understand its threat landscape and identify vulnerabilities across its technology environment.

Key Responsibilities the Role Owns

• Lead security monitoring across enterprise environments using SIEM, EDR and cloud security platforms, including review of alerts across security tools.
• Investigate security alerts and indicators of compromise, correlate threat intelligence with internal telemetry and conduct proactive threat hunting.
• Provide tuning recommendations for detection rules, use cases and alerting mechanisms to improve detection capability and reduce false positives.
• Review MSSP threat hunting reports and provide recommendations to improve the quality and relevance of findings.
• Coordinate and lead the response to security incidents, including containment, eradication and recovery activities.
• Perform detailed investigations to determine root cause, impact and remediation actions, and produce incident reports, lessons learned and post incident reviews.
• Identify opportunities to improve security operations processes, tooling and automation, and develop and maintain playbooks, runbooks and standard operating procedures.
• Work with Security Engineering to develop test cases based on the AP+ threat profile and contribute to the maturity of MSSP capabilities.
• Lead vulnerability assessment activities, assess security risk and coordinate remediation efforts across relevant teams.
• Track remediation activities and work with remediation teams to address SLA breaches and reduce repeat SLA misses.
• Provide risk based recommendations on vulnerabilities, system changes and new technologies.
• Act as a senior escalation point for complex security issues and provide specialist advice to stakeholders.
• Prepare and present security metrics, operational reports and risk summaries.

You'll likely be a strong fit for this role if

You're a security operations professional who enjoys investigating what's happening beneath the surface and turning security signals into practical action. You'll bring experience across security operations, incident management, vulnerability assessment, threat intelligence, data analysis or operational technology support in a complex environment.

You'll have a good understanding of security controls, incident and problem management, vulnerability assessment, threat intelligence, operational security tooling and controls. You'll be comfortable analysing information from multiple sources, identifying patterns and trends, and communicating your findings clearly to both technical and non technical stakeholders.

Most importantly, you'll bring a curious and methodical approach to security investigations, with the judgement to know when to escape an issue and the mindset to look beyond resolving the immediate problem to identify what can be improved for next time. A relevant qualification, certification or equivalent practical experience in cyber security, information technology or security operations will be valuable.

AP+ are not partnering with Recruitment agencies for this role.