SOC Cyber Security Analyst

• Monitor, investigate, and triage security events and alerts within a live SOC environment.
• Analyse security incidents to determine scope, impact, and priority, ensuring appropriate escalation and response.
• Manage end-to-end incident response activities from detection through to resolution.
• Support the development and enhancement of SIEM use cases, detection rules, analytics, and playbooks.
• Conduct real-time analysis of logs and security data to identify malicious activity or policy violations.
• Work closely with technical teams to support containment and remediation of security incidents.
• Support continuous improvement of SOC processes, tooling, and detection capability.
• Contribute to security reporting, documentation, and operational procedures.

• Proven experience working as a SOC Analyst (Tier 2/3) within enterprise or critical environments.
• Strong experience with SIEM technologies (e.g. ArcSight or similar), including configuration and engineering support.
• Ability to triage security alerts and accurately assess risk, impact, and priority.
• Experience managing security incidents in real time within a SOC environment.
• Strong understanding of networking, cloud environments, and enterprise IT infrastructure.
• Experience creating and tuning detection use cases, analytics, and playbooks.
• Knowledge of Information Security principles, threat detection, and incident response practices.
• Familiarity with Microsoft technologies, Linux systems, and security tooling.
• Understanding of security frameworks and data protection principles including GDPR and the Data Protection Act 2018.
• Experience working within an ITIL-based service environment.

Desirable:

• Industry-recognised cyber security certifications (e.g. SANS, ISC2).
• Experience within Defence, Government, or high-security environments.
• Degree in Cyber Security, Computing, Engineering, or related discipline.
• Experience in a senior SOC or lead analyst capacity.