SOC Analyst L1

This is a fantastic opportunity for security professionals with some existing SOC experience who want to develop their technical skills, work with modern security technologies and be part of a growing cybersecurity operation.

You’ll gain exposure to a diverse enterprise environment, with opportunities for ongoing technical development and career progression.

The Role

Working as part of a 24/7 SOC team, you’ll be responsible for identifying, investigating and escalating potential security threats across the organisation.

Your responsibilities will include:

• Monitoring and triaging security alerts and events using SIEM and EDR/XDR technologies.
• Investigating suspicious activity, potential cyber threats and indicators of compromise.
• Analysing phishing attempts, malware alerts, suspicious logins and endpoint security incidents.
• Performing initial security investigations and escalating incidents where required.
• Following incident response playbooks and maintaining accurate investigation records.
• Working with Microsoft security technologies and enterprise monitoring platforms.
• Supporting threat detection improvements, threat hunting and automation initiatives.
• Collaborating with wider cybersecurity, infrastructure and IT teams.
• Working a 24/7 rotational shift pattern, including nights and weekends.

• 1-3 years’ experience within a SOC, cybersecurity operations or security monitoring environment.
• Hands-on exposure to SIEM and endpoint security technologies.
• An understanding of cybersecurity threats, incident response and common attack techniques.
• Knowledge of Windows environments, networking, DNS and authentication.
• Familiarity with Microsoft 365 environments.
• Good analytical and problem-solving skills, with the ability to identify genuine threats.
• Strong communication skills and attention to detail.
• Willingness to work within a 24/7 shift environment.

Nice to Have (Not Essential):

• Microsoft Sentinel, Microsoft Defender XDR or Entra ID.
• Knowledge of KQL, MITRE ATT&CK or threat intelligence.
• Exposure to SOAR or security automation.
• Certifications such as CompTIA Security+, SC-200 or CySA+.
• Basic PowerShell or Python scripting experience., Whether you’re already working as a Tier 1 SOC Analyst or have gained relevant experience within security monitoring and incident response, we’d be keen to hear from you!

Why Join?

• Be part of something new - join a newly established in-house SOC with the opportunity to help shape its development.
• Career progression - develop your skills and grow your cybersecurity career.
• Modern technologies - gain exposure to a range of enterprise security platforms and tools.
• Global environment - work across international business operations and complex IT environments.
• Training and development - benefit from professional development opportunities and support from experienced cybersecurity professionals.