L1 Cyber Defence Analyst

Role Overview

• Investigate, analyse, and triage security alerts using CSOC tools.
• Document event and case analysis in the incident management system and manage cases through closure.
• Perform historical analysis of detected events and support incident managers.
• Participate in daily stand-up calls and contribute to knowledge base development.
• Collaborate with local market CSIRT teams and ensure effective communication across global teams.
• Proactively reduce alert volumes through fine-tuning and process stabilisation.
• Communicate emerging threats and malware behaviours clearly to stakeholders.
• Ensure mitigation measures are in place to reduce spam and phishing alerts.
• Maintain composure under pressure and respond effectively during emergencies.

Requirements

• Minimum 3 years of experience in Cyber Security, SOC operations, SIEM, and incident management.
• Strong understanding of network and security concepts and SIEM technologies (e.g., ArcSight, Splunk, QRadar, LogRhythm).
• Holds industry-recognised certifications such as CEH, CCNA Cyber Ops, Security+.
• Excellent analytical and communication skills.
• Degree in Computer Science, Information Technology, Engineering, or a related field.
• Experience in global customer handling and event analysis.
• Demonstrates integrity, self-motivation, and cultural sensitivity.

Tech Stack

• Cyber Security
• Splunk

Benefits

• Opportunity to work in a global 24/7 cyber defence environment.
• Exposure to advanced security tools and technologies.
• Collaboration with international teams and senior security experts.
• Contribution to Vodafone’s mission to protect digital assets and infrastructure.
• A dynamic and inclusive workplace that values continuous learning and innovation.