Senior Information Security Specialist

About the role

We are looking for a hands‑on Senior Information Security Specialist to serve as the primary internal liaison with our Managed Security Service Provider (MSSP) and Security Operations Centre (SOC). You will drive cybersecurity incidents from detection through resolution, working closely with Group IT, regional IT teams and external security providers.

Key responsibilities

• Act as the main point of contact for MSSP/SOC escalations and validate security alerts.
• Coordinate response to phishing, malware, ransomware, account compromise, data leakage, insider risk and third‑party events.
• Execute containment actions such as endpoint isolation, account disablement, MFA review, email purge and access revocation.
• Use LogRhythm SIEM for alarm review, log searches, evidence validation, case support, correlation rule tuning and reporting.
• Work with EDR, Microsoft 365/Entra ID, email security, identity, endpoint and network security tools.
• Maintain audit‑ready incident records in 4me/Xurrent, including timelines, evidence and post‑incident reviews.
• Support continuous improvement of SOC performance, detection use cases and incident‑response processes.
• Lead or participate in incident calls across multiple regions and time zones.

Required profile

• Minimum 5 years of experience in Security Operations, SOC or Incident Response.
• At least 3 years of hands‑on incident investigation and response.
• Direct experience working with an MSSP/SOC environment.
• Relevant certification (e.g., GCIH, CompTIA CySA+, Microsoft SC‑200, AZ‑500, CISSP, CISM).

Required skills

• LogRhythm SIEM.
• EDR tools such as SentinelOne, Microsoft Defender for Endpoint, CrowdStrike.
• Microsoft 365 security, Entra ID, MFA, conditional access, sign‑in log analysis.
• Email security platforms (Proofpoint, Defender for Office 365, Mimecast).
• Windows endpoints, Active Directory, PowerShell basics.
• Firewall, VPN, DNS and proxy log analysis.
• Network security fundamentals.
• ITSM tools (4me/Xurrent, ServiceNow, Jira Service Management).