Cyber Security Analyst (L2) - VOIS

## Who we are VOIS (Vodafone Intelligent Solutions) is a strategic arm of Vodafone Group Plc, creating value for customers by delivering intelligent solutions through Talent, Technology & Transformation. As the largest shared services organisation in the global telco industry with 30,000 FTE, our portfolio of next-generation solutions and services are designed in partnership with customers across Vodafone Group, local markets, and partner markets to simplify and drive growth. With our strategic partner Accenture, we work alongside our Vodafone customers, other Telco and tech companies to drive transformation, meet the challenges of our industry and ensure we stay relevant and resilient. This partnership is a unique, industry-first model which brings together the best of in-house and 3rd party capability. We work with customers across 28 countries from 10 VOIS locations: Albania, Egypt, Hungary, India, Romania, Spain, Turkey, UK, Germany, Ireland, and with a network of teams in Czech Republic, Italy, Greece, and Portugal. #VOIS #BeUnrivalled #CreateTheFuture ## About this Role We are seeking a skilled Cyber Security professional to join the Cyber Security Operations Centre (CSOC), providing 24/7 security monitoring and analysis. This role focuses on investigating and triaging security alerts, supporting business continuity through proactive threat detection, and enhancing platform efficiency through rule tuning and process improvement. The individual will work with modern cloud technologies and collaborate with global teams to ensure seamless and secure business operations. ## What you’ll do Investigate, analyse, and triage security alerts across security platforms. Participate in daily operational stand-ups and incident discussions. Act as a technical subject matter resource within the CSOC. Develop and maintain knowledge base (KB) articles and documentation. Identify opportunities for process optimisation and effort reduction. Support continuous improvement and stabilisation of operational processes. Collaborate with Local Market CSIRT teams on ongoing incident cases. Document SOPs, KEDB, and operational procedures. Deliver knowledge-sharing sessions to support team capability building. Contribute to rule fine-tuning and content ingestion in SIEM platforms. ## Who you are Proven experience (7+ years) in Cyber Security, including SIEM, event analysis, and incident response. Understanding of networking and security fundamentals. Familiarity with SIEM technologies such as ArcSight, ELK, Splunk, QRadar, or LogRhythm. Knowledge of SIEM correlation rules and alerting mechanisms. Experience analysing phishing or spam emails and recommending remediation actions. Proficiency in EDR tools such as Microsoft Defender or CrowdStrike. Strong analytical thinking and clear communication skills. Ability to review cases thoroughly and present findings in operational forums. Experience creating playbooks and documentation. Motivation to stay informed about emerging cyber threats. Ability to mentor and guide colleagues within the team. Relevant certifications (e.g., CCNA CyberOps, CEH); SANS certifications are advantageous. Degree in Computer Science, Information Technology, Engineering, or a related discipline. Experience in cloud technologies and information security environments. Exposure to working with global stakeholders. Demonstrated self-motivation, integrity, cultural awareness, and collaboration skills. Willingness to work in a 24/7 rotational shift environment. ## Not a perfect fit? Concerned you may not meet every requirement? Vodafone is committed to creating an inclusive workplace where everyone can thrive. If you are excited about this role but your experience does not align exactly with every aspect of the job description, you are encouraged to apply. You may be the right candidate for this or another opportunity, and the recruitment team will support you in exploring where your skills fit...