Cyber Security jobs in United Kingdom

The Level 2 (L2) SOC Analyst is a core resource on the security monitoring and response team within the Global Security Operations Center (GSOC). As a member of the Security Operations Team, the L2 Analyst is responsible for monitoring, triage, and response to security alerts from SIEM and other security controls.

• Perform real-time monitoring of security alerts from various security controls.
• Investigate escalated alerts from L1 Analysts within SLA guidelines.
• Triage indicators and document findings in the threat knowledgebase.
• Conduct in-depth analysis of alerts using endpoint and network analysis techniques.
• Create security incidents from true-positive alerts and close false positives.
• Escalate undetermined alerts to L3 Analysts.
• Support Incident Handling and Incident Management teams.
• Stay updated on industry trends, threats, and security standards.
• Collaborate with GSOC and internal teams during investigations.
• Recommend technical and procedural improvements to enhance SOC capabilities.
• Report vulnerabilities and suggest mitigation strategies.
• Review and update SOP documentation.
• Contribute to internal threat intelligence efforts.
• Perform shift handovers and review alert patterns for broader security issues.
• Apply critical thinking and networking knowledge during investigations.
• Utilize knowledge of Windows Event IDs, Linux commands, and vulnerability management.
• Analyze logs and understand network security monitoring techniques.
• Maintain awareness of threats, vulnerabilities, and attack methodologies.
• Apply knowledge of ITSM, open source intelligence, and foundational malware analysis techniques.
• Mentor junior analysts as needed.

• 2+ year diploma or degree in Information Security or Cybersecurity is preferred but not required.
• Certifications such as Security+, CySA+, SSCP, CISSP, etc., are desirable.
• Minimum 2 years experience in a SOC or similar environment.
• Experience with SIEM, IPS/IDS, Endpoint Security, Firewall, and Cloud security.
• Proficiency with security intelligence tools like VirusTotal.
• Experience with digital forensics and security reporting.

• Incident Management
• IT Security
• Security Operations Center
• Security Certification

• Linux
• Scripting
• Vulnerability Management
• Windows

Calgary, Alberta, Canada

• Cyber Security Specialist
• Pentester
• Security Analyst

• English