Cloud Security SOC Analyst – Incident Response

Starling Bank; Cardiff; Hybrid; GBP 60,000 - 85,000; Full time

Benefits offered by this job

25 days holiday

Birthday day off

Private Medical Insurance

Pension scheme

Cycle to Work

Job summary

Starling Bank is seeking a SOC Analyst to join our cyber security team, supporting our 24/7 operations across cloud, endpoints and perimeters. You will triage incidents, investigate alerts, and help refine analytics to protect customers and assets.

You should have 3+ years in SOC, experience with AWS/GCP, SIEMs and incident response. We value collaboration, initiative and a proactive mindset, with hybrid working across UK offices.

Qualifications

• 3+ years in-house SOC experience.
• Understanding of AWS Security Solutions (or other public cloud).
• Experience with analytics/SIEM platforms.
• Experience in CSIRT/SOC functions and Incident Response.

Responsibilities

• Incident triage, response and investigations from multiple sources.
• Proactive threat hunting based on threat intelligence.
• Document incidents and investigations.
• Develop analytic triggers to improve alert efficacy.
• Support 24/7 operational capabilities and on-call rotation.

Skills

SOC experience

AWS security

Cloud investigations

SIEM platforms

CSIRT/SOC functions

Incident response

Python/Go/Java

Threat intelligence

Automation interest

Mobile/network security

Education

Cyber/Information Security degree

Tools

AWS

GCP

SIEM tools

Endpoint protection

Job description

Starling Bank is seeking a SOC Analyst to join our cyber security team, supporting our 24/7 operations across cloud, endpoints and perimeters. You will triage incidents, investigate alerts, and help refine analytics to protect customers and assets.

You should have 3+ years in SOC, experience with AWS/GCP, SIEMs and incident response. We value collaboration, initiative and a proactive mindset, with hybrid working across UK offices.