Interval Group

Security Operations

• Continuously monitor SIEM, SOAR, EDR and network security data
• Analyse, qualify and prioritise incoming security alerts
• Distinguish between false positives and genuine security incidents
• Carry out initial incident response and containment measures in accordance with established playbooks
• Analyse firewall, DNS, proxy, authentication and endpoint logs
• Proactively conduct threat hunting based on Indicators of Compromise (IoCs) and Tactics, Techniques and Procedures (TTPs)
• Investigate attack patterns using the MITRE ATT&CK Framework
• Optimise SIEM/EDR detection rules and security playbooks
• Document security incidents and prepare incident reports
• Ensure structured escalation processes and shift handovers
• Support compliance with defined security SLAs

Explore Cyber Defence Analyst – SOC – Freelance at Interval Group. Review requirements and application details.