SOC Analysts - L2 and L3 (SC and DV-Cleared)

Pigment Consulting
Manchester, UK
4 days ago
Apply on www.careerboard.com
Prepare application

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Compensation
£14,560.0 - £49,920.0
Working hours
Regular working hours

Tech stack

Cyber Security Phishing Security Information and Event Management Mitre Att&ck Malware Cybercrime 3-tier Architectures

Job description

Tier 2 SOC Analyst

You will be responsible for investigating and responding to security incidents escalated from Tier 1, including:

  • Detailed investigation of SIEM, EDR, network and authentication alerts.
  • Threat hunting and identification of indicators of compromise.
  • Investigation of phishing, malware, credential compromise and suspicious activity.
  • Supporting containment, eradication and recovery.
  • Developing and improving detection rules and playbooks.
  • Producing high-quality incident documentation and reports.
  • Supporting and mentoring Tier 1 analysts.

Tier 3 SOC Analyst

As a Tier 3 Analyst, you’ll provide advanced technical investigation and act as a senior escalation point for complex incidents.

Responsibilities include:

  • Leading complex and high-severity security investigations.
  • Advanced threat hunting and incident response.
  • Malware, endpoint, network and forensic investigation.
  • Developing advanced detections and response capabilities.
  • Root-cause analysis and post-incident investigation.
  • Supporting major incident response.
  • Working closely with security engineering and infrastructure teams.
  • Providing technical guidance and mentoring to Tier 1 and Tier 2 SOC analysts.

Requirements

  • Proven experience within a SOC, security monitoring or incident response environment.
  • Strong SIEM and security event investigation experience.
  • Experience with EDR/XDR technologies.
  • Good understanding of cyber attack techniques and MITRE ATT&CK.
  • Experience investigating common security incidents and threats.
  • For Tier 3, the ability to lead complex investigations and provide technical direction

Due to the sensitive nature of our work, our consultants must have an active SC or DV Clearance, and be able to work fully on-site in Manchester when on shift.

At Pigment, working together collaboratively to form a cohesive and blended team is at the heart of what we do. We therefore are seeking consultants who natural embody this, who are naturally cooperative and happy to work closely with others, empowering the wider team through knowledge transfer and teamwork.

If you are passionate about making a difference to the public sector while leveraging your SOC expertise, then we would love to hear from you! Please apply promptly and one of our team will be in touch to discuss.

Benefits & conditions

This program is 24/7/365 on-site support, meaning a hybrid of 12-hour shifts including both days and nights, on a 4-on-4-off basis.

This rota will include weekends, public holidays such as Christmas and Easter, Bank Holidays, and other religious holidays.

About the company

Pigment Consulting is an IT-enabled change consultancy. We work in partnership with other consultancies, government departments, and private sector organisations to deliver programmes across sectors such as Central Government, Defence & National Security, and Policing.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on www.careerboard.com
Prepare application

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

6:01 min

Handling container constraints and fileless malware

Dimitrij Klesev +1 · LIVE

1:29 min

Evaluating phishing emails that leverage artificial time constraints

Mauro Verderosa · LIVE

4:34 min

Motivational categories behind modern cybercriminal activities

Mauro Verderosa · LIVE

5:13 min

Audience Q&A on maturity assessments and external consultants

Mathias Tausig · LIVE

6:18 min

Architecting asynchronous malware scanning for uploaded file contents

Austin Gil · LIVE

1:45 min

Transitioning from software development to security roles

Stefania Chaplin · World Congress 2022

Videos

See all

Related articles

See all