Senior SecOps Analyst (Cyber Defence)

Haleon is a purpose-driven consumer health company with a portfolio including Sensodyne®, Panadol®, Advil®, Voltaren®, Theraflu®, Otrivin®, and Centrum®. The company focuses on combining human understanding and trusted science to deliver better everyday health globally.

• 5+ years of experience in cyber security including monitoring, incident response, and threat investigation.
• 3+ years of experience in a Cyber Security Operations Centre (SOC).
• Hands-on experience managing complex cyber incidents such as advanced attacks and ransomware.
• Understanding of security controls for detection and response.
• Ability to communicate complex problems succinctly.
• Ability to work effectively in a team environment.

Preferred:

• Master’s Degree in Computer Science, Cyber Security or related field (or equivalent experience).
• Experience with international manufacturing environments.
• Knowledge of network protocols, edge routing technologies, firewall/IDS/IPS, SIEM, EDR, XDR.
• Certifications such as CISSP, GCIA, GCDA, GSOC, GCIH.

• Operate as part of a 24/7 Cyber Security Operations (SecOps) team monitoring company security.
• Triage security alerts for rapid incident detection and response.
• Perform deep analysis of security events, logs, network traffic, and forensic data to identify suspicious activities.
• Recommend modifications to defenses and security operation processes.
• Manage security incidents from identification to closure.
• Ensure response and remediation actions meet SLAs.
• Provide expert analytic support for complex security incidents.
• Support tuning of security tools and develop correlation rules/use cases.
• Maximise automation and orchestration of operations.
• Execute L2/L3 event and incident investigations.
• Lead response processes and delegate tasks to junior responders and MSSP analysts.
• Generate post-incident reviews to close gaps.
• Collaborate with Threat Intelligence to manage threat feeds.
• Help prioritize content and implement playbooks and runbooks.
• Participate as a key Cyber Incident Response Team (CIRT) member during major incidents.
• Establish relationships with other investigation and remediation teams.
• Lead development of security awareness training for the organization.

Equal opportunities employer committed to diversity and inclusion. Applicants may be asked to provide voluntary personal information for regulatory and inclusion programs. Reasonable adjustments and accommodations during the recruitment process are provided upon request. Official communication from the recruitment team will be via Haleon email accounts only.