Incident Response (Cyber)

Incident Response (Cyber) Glasgow, Scotland

Morgan Stanley
Full Time Glasgow, Scotland 88000 - 89590 GBP ANNUAL Today
Job description

Incident Response (Cyber)

Job Number:

3239413

POSTING DATE: Aug 14, 2023
PRIMARY LOCATION: Europe, Middle East, Africa-United Kingdom-United Kingdom-Glasgow
EDUCATION LEVEL: Bachelor's Degree
JOB: Threat Management
EMPLOYMENT TYPE: Full Time
JOB LEVEL: Associate

DESCRIPTION

Incident Response (Cyber)
Glasgow
3239413

Morgan Stanley is looking for a Security Analyst to join the firm's Cyber Incident Response Team (CIRT). The global CIRT is a 24/7 operation with members in key geographical locations; performing incident response and remediation, campaign assessments, network and host-based forensics. Security Analysts work core hours in their region with an on-call rotation for critical incidents.

Candidates should have a genuine interest in cyber security and a good understanding of the tactics, techniques, and procedures of attackers. This role requires a detail oriented, critical thinker who can anticipate issues, and solve problems. Candidates should be able to analyze large datasets to detect underlying patterns and drive to a root cause analysis.

About Morgan Stanley

Morgan Stanley is a leading global financial services firm providing a wide range of investment banking, securities, investment management and wealth management services. The Firm's employees serve clients worldwide including corporations, governments, and individuals from more than 1,200 offices in 43 countries.

As a market leader, the talent and passion of our people is critical to our success. Together, we share a common set of values rooted in integrity, excellence, and strong team ethic. Morgan Stanley can provide a superior foundation for building a professional career – a place for people to learn, to achieve and grow. A philosophy that balances personal lifestyles, perspectives and needs is an important part of our culture.

What will you be doing?

  • Investigate cyber security incidents and threats.
  • Interact with stakeholders and leadership teams as part of the response and remediation efforts.
  • Improve the detection, escalation, containment, and resolution of incidents.
  • Enhance existing incident response methods, tools, and processes.
  • Maintain knowledge of technologies and the threat landscape.
  • Assist during non-core business hours during an emergency, critical, or large-scale incidents.

QUALIFICATIONS

  • What we’re looking for:
  • 2+ years experiences (or equivalent) with Security Analysis and Incident Response (i.e., working in SOC/CIRT/CSIRT/CERT).
  • Subject matter expert in one or multiple areas such as Windows, Unix, firewalls, intrusion detection, network- and host-based forensics.
  • Understand the totality of a threat across multiple technologies and think like an adversary.
  • Sound understanding of TCP/IP and networking concepts, security alerts, and incidents.
  • Excellent writing and presentation skills are required to communicate findings, recommendations, and status of investigations.
  • Experience with investigating common types of attacks, network packet analysis, log analysis, and reviewing security events.
  • Ability to build mitigations to defend against network-based threats.
  • Knowledge on Windows processes and Active Directory.
  • Able to work on extended working hours during incidents.
  • Experience with developing response workflow for security event.

Skills that will help you in the role:

  • Security product assessments.
  • Scripting (Python, BASH, Perl, or PowerShell), coding, or other development experience.
  • In-depth knowledge of security event management, network security monitoring, log collection, and correlation.
  • Experience in Splunk usage or administration.
  • Experience of tearing apart a piece of malware to understand attack vector and purpose.
  • Experience in Security Orchestration and Automated Response (SOAR) usage.
  • Industry certifications: GCIH, GNFA, GREM, or other related certifications.
  • Experience in the financial industry.
  • Understanding of Cloud Security.
  • Knowledge on OWASP Top 10.

Where will you be working?

This role is based at our Glasgow office on Waterloo Street in the city centre. On call requirement, approx. one weekend per quarter.

Flexible work statement:

Interested in flexible working opportunities? Morgan Stanley empowers employees to have greater freedom of choice through flexible working arrangements. Speak to our recruitment team to find out more.

Equal opportunities statement:

Morgan Stanley is an equal opportunities employer. We work to provide a supportive and inclusive environment where all individuals can maximize their full potential. Our skilled and creative workforce is comprised of individuals drawn from a broad cross section of the global communities in which we operate and who reflect a variety of backgrounds, talents, perspectives, and experiences. Our strong commitment to a culture of inclusion is evident through our constant focus on recruiting, developing, and advancing individuals based on their skills and talents.

Incident Response (Cyber)
Morgan Stanley

www.morganstanley.com
New York, United States
James P. Gorman
$10+ billion (USD)
10000+ Employees
Company - Public
Investment & Asset Management
Finance
1935
Related Jobs

All Related Listed jobs

Project Manager
Marks & Spencer London, England 39281 - 54750 GBP ANNUAL Today

Owns, drives and executes a clear project plan that delivers on time, to scope and within budget. Owns and drives the Project change plan to minimise change

teacher
Vision West Nottinghamshire College Chesterfield, England 39520 - GBP HOURLY Today

Job reference
REQ0000297
Date posted
14/07/2023
Application closing...

Graduate Scientific Data Associate - 8 month fixed term contract
Abcam Trumpington, England Today

You will have the ability to prioritise and process large amounts of data in a logical and efficient manner, ensuring our customers receive accurate, up-to-date

Medical Administrator/Receptionist
Elliott Street Surgery Manchester, England 10.45 GBP HOURLY Today

We are also a training practice for GP trainees and medical students. Working hours will be 8.00am starts or 6.30pm finish daily, working as part of a team,

Customer Team Member
Coop Liverpool, England 10.9 GBP HOURLY Today

Make sure the store is safe, legal and operational youll complete daily checks to make sure the store is safe for our customers, and replenish products while