Cyber Operations - UBA Analyst

JR-
Join us as a Cyber Operations - UBA Analyst at Barclays, to play a key role in detecting and disrupting cyber threats before they materialise. As a UBA Analyst, you’ll dive deep into behavioural data to uncover anomalies, patterns, and potential risks across our digital estate. If you're driven by curiosity, thrive on solving complex problems, and want to be part of a global team, we want to hear from you.

To be successful as a Cyber Operations - UBA Analyst you should have experience with:

Proficiency in collecting, examining, and analysing data from multiple sources (logs, artifacts, indicators of compromise) as part of security incident investigations
Develop and implement controls and indicators for preventing, detecting, and responding unusual user behaviour
Experience with Security tools such as Microsoft Defender products, Splunk and Tanium, EUBA SIEM

Some other highly valued skills may include:
Familiarity with Financial Services regulatory landscape and related compliance issues
In-depth knowledge of the Insider Threat Kill-Chain, Intelligence Driven Defence and Security frameworks such as NIST and Mitre ATT&CK.
Experience in conducting trend analysis on incidents to assist in reporting to senior stakeholders.

You may be assessed on key critical skills relevant for success in role, such as risk and controls, change and transformation, business acumen, strategic thinking and digital and technology, as well as job-specific technical skills.

The location of this role is based in Knutsford, United Kingdom.

Purpose of the role

To monitor the performance of operational controls, implement and manage security controls and consider lessons learnt in order to protect the bank from potential cyber-attacks and respond to threats.

Accountabilities

Management of security monitoring systems, including intrusive prevention and detection systems, to alert, detect and block potential cyber security incidents, and provide a prompt response to restore normal operations with minimised system damage.
Identification of emerging cyber security threats, attack techniques and technologies to detect/prevent incidents, and collaborate with networks and conferences to gain industry knowledge and expertise.
Management and analysis of security information and event management systems to collect, correlate and analyse security logs, events and alerts/potential threats.
Triage of data loss prevention alerts to identify and prevent sensitive data for being exfiltrated from the banks network.
Management of cyber security incidents including remediation & driving to closure.