Threat Specialist in Vauxhall

DRW is a diversified trading firm with over 3 decades of experience bringing sophisticated technology and exceptional people together to operate in markets around the world.

Candidates should take the time to read all the elements of this job advert carefully Please make your application promptly.

We value autonomy and the ability to quickly pivot to capture opportunities, so we operate using our own capital and trading at our own risk. Headquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia, we trade a variety of asset classes including Fixed Income, ETFs, Equities, FX, Commodities and Energy across all major global markets.

We have also leveraged our expertise and technology to expand into three non-traditional strategies: real estate, venture capital and cryptoassets. We operate with respect, curiosity and open minds.

The people who thrive here share our belief that it's not just what we do that matters–it's how we do it.

DRW is a place of high expectations, integrity, innovation and a willingness to challenge consensus. Our global Security Operations team is looking for a talented Threat Specialist to join the team in our London office.

To flourish in this role, you will need a strong drive to learn and improve.

When it comes to new technology, you'll enjoy researching and evaluating new solutions using custom and commercial testing tools.

You will be given the freedom and resources while being mentored by industry-leading engineers, all to provide you with the best possible environment to succeed at DRW.How you will make an impact: Perform triage of global security alerts generated from various sources (including IPS, Web Security, Event Logs, Endpoint Protection, Brand Protection, Phishing)Respond to any incidents identified from analysis of security alertsTriage & route internal support tickets sent to the Security teamCreation & revision of threat detectionsPerform SIEM product administration for event correlation and threat detectionPerform SOAR playbook/dashboard management and product administrationProvide insider threat investigation assistance to teams of internal stakeholdersDrive automated detection, response, and configuration through various scripting and programming languagesEvaluate commercial and open-source tools as neededCollaborate with internal Infosec peers to continuously improve security postureContribute to internal documentation of standard processes & proceduresEducate users on security best practicesAssess security risks as they relate to new projects and initiativesAttend security conferences, seminars, and regular training to stay ahead of the ever-changing security landscapeWhat you bring to the team: A bachelor's degree, or equivalent experience for 1-3 years in industryInterest in digital forensics and physical securityA passion for security and problem solvingHeightened attention to detail and forward thinkingStrong knowledge xohmjla of either Windows, MacOS, or Linux with an interest in learning the details of platforms that you might not have experience withKnowledge of the Incident Response CycleKnowledge of static & dynamic malware analysis, including network packet capturesKnowledge of core networking & cloud security conceptsExperience with Security Information and Event Management (SIEM) productsExperience with Endpoint Detection & Response (EDR) productsExperience with SOAR (Security Orchestration, Automation, and Response) productsExperience with data analysis of events in security related sources such as IPS, Web Security, Endpoint Protection, Event LogsExperience working with GitHubExperience with PowerShell, Bash, Python, Ruby, or PerlExceptional time management skillsExcellent verbal and written communication skillsFor more information about DRW's processing activities and our use of job applicants' data, please view our Privacy Notice at .#LI-SH1