Senior SOC Analyst

Key Skills

Analytical and Problem solving, JavaScript, Linux Operating system, NumPy, Python Programming, SaaS, SLA

Job Description

We strongly encourage people of colour, lesbian, gay, bisexual, transgender, queer and non-binary people, veterans, parents, and individuals with disabilities to apply. Bumble is an equal opportunity employer and welcomes everyone to our team. If you need reasonable adjustments at any point in the application or interview process, please let us know.

In your application, please feel free to note which pronouns you use (For example - she/her/hers, he/him/his, they/them/theirs, etc).

We’re looking for an experienced Senior SOC Analyst to join our Security team. At Bumble the security of our customers is a top priority.

As a Senior SOC analyst, you’ll be the first to respond to security incidents, typically occurring in three stages: threat detection, threat investigation, and timely response. You will also ensure that the correct training is in place for staff and that staff can implement procedures and policies. You will work together with internal IT staff and business administrators to communicate information about security limitations and also produce documentation where necessary.

Key Accountabilities

• Primarily responsible for security event monitoring, detection and response

• Eagerness to contribute across all stages of a security incident, from initial detection, triage and remediation

• Contribute to the organisation's vulnerability management program; including detection, analysis and supporting remediation.

• Support the organisation's 3rd party risk management objectives.

• Operate with compliance to SLA, process adherence and process improvisation to achieve operational objectives

• Ensure incident identification, assessment, quantification, reporting, communication, mitigation and monitoring

• Contribute to establishing, developing, and revising processes to build and strengthen the SOC

• Contribute to threat management, and threat modelling, identify threat vectors and develop use cases for security monitoring

• Contribute to the integration of standard and non-standard logs in the SIEM

• Co-ordination with stakeholders, build and maintain positive working relationships with them

• Participation in 24/7 on-call rota

Experience we're looking for

• Familiar with threats including DDOS, web and mobile application security risks

• Ability to perform threat detection and enrichment through the use of data science tooling and techniques

• Proficient in security incident management and response

• Experience in security device output, event and alert consumption

• Experience in threat identification and response

• In-depth security knowledge of various operating systems, especially Linux, but ideally you’re familiar with macOS and Windows also

• Knowledge of key log sources of OS, applications, databases and middleware to address security threats

• Demonstrable practical experience responding to common threats such as malware, and social engineering - Experience must include effective use of threat artefacts, IOCs, and behavioural factors.

• Experience using security tooling within a corporate environment including, commercial sandboxes, proxies, DLP, OSINT, vulnerability management, cyber and vendor risk management

About you

• Excellent communication and teamworking skills

• Ability to multi-task and handle high-pressure situations with key stakeholders

• Excellent analytical, problem solving and interpersonal skills

• Readiness to expand technical skill set, both through self-study and formal training