Commercial SOC Analyst

Cyberfort Group; United Kingdom; Remote; GBP 40,000 - 70,000; Full time

Benefits offered by this job

25 days annual leave

Hybrid working

Private medical insurance

Pension scheme

Job summary

Cyberfort Group is seeking a Commercial SOC Analyst to join our Remote Security Operations Centre. You will triage, investigate and manage cyber security incidents, collecting log data from customer sources and using threat intelligence to detect and prevent threats.

The role covers 12‑hour shifts (day and night), including weekends and public holidays, with an on‑call rota in the future. You’ll work across multiple customers with a supportive team and opportunities to learn and grow in cyber

Qualifications

• Hands-on experience in a commercial Security Operations Centre (SOC) environment.
• Solid understanding of cyber security principles, threat detection and incident response.
• Willingness to join on-call rota and work 12-hour shifts including weekends/holidays.

Responsibilities

• Triage, investigate, classify and manage cyber security incidents.
• Collect logs from customer sources for reactive and proactive monitoring.
• Raise alerts to customers following defined incident processes.
• Provide customers with guidance to prevent recurrence.
• Utilize threat intelligence feeds to hunt threats and update detections.
• Oversee Vulnerability Management and asset discovery activities.

Skills

Incident response

Threat detection

Log analysis

Cyber security fundamentals

Proactive mindset

Tools

Threat intelligence feeds

Job description

Job Title: Commercial SOC Analyst

Reporting to: Head of SOC

Location: Remote

Hours of Work: 12 Hour shift pattern, day and night shifts including working weekends and public holidays

Future requirement to join on-call rota

We are looking for a Cyber Security Analyst to join our Remote Security Operations Centre (SOC). You will ideally have some hands‑on experience within a commercial SOC environment and a solid understanding of cyber security principles, threat detection, and incident response. We would also welcome applications from individuals who can demonstrate a genuine passion for cyber security, a proactive mindset, and a strong desire to help protect both our customers and our internal environments from evolving cyber threats.

The Role:

You are going to be responsible for triaging, investigating, classifying, and managing cyber security incidents. We collect log data from any sources our customers require reactive monitoring of, along with deploying agents to provide proactive protection.

You will need to be comfortable with managing multiple simultaneous tasks, at different stages, each with their own priorities across different customers. You’ll have a team to support you along with time to develop yourself.

Once you’ve identified an event which requires our customer to be alerted, you’ll follow defined processes to raise this. You will also need to provide our customers with support to help prevent any damage to them and ensure that it doesn’t happen again.

We have Threat Intelligence feeds which will aide you in keeping up to date with the latest tools, techniques, and procedures. You will also use this intelligence to proactively hunt for threats and create or update existing detection rules.

This role, in addition to protective monitoring, will involve Vulnerability Management and asset discovery, including configuring custom scans and dashboards. You will be required to ensure that our vulnerability scanning service remains a valuable asset to our customers by providing contextualised information and analysis. You will have team support to achieve this.

As a team we’re always lookingtoraise the bar, learn new thingsand incorporate new technologiesandyou willtoo!You’llshareyour knowledge with the team and the widerCyberfortcommunity,contributing to Group blogs andundertaking research related to technology enhancements.

Responsibilities:

• Perform event triage and incident analysis

• Provide advice and guidance in the event of a cyber security breach

• Help maintain documentation owned by the CSOC team including but not limited to Standard Operating Procedures (SOPs)

• Assist with/own ad-hoc requests (within reason)

• Remain current on cyber security trends and intelligence

• Identify opportunities to automate processes within the CSOC

• Stakeholder and Client Reporting (incident reports and vulnerability management)

Nice to have (any of these):

• Programming/scripting skills

• Experience in operational security

• Experience in Systems administration (Linux/Windows)

• Experience in open-source threat intelligence

• General IT practices

• General security practices and knowledge

• IT Service Management basics (ITIL)

• Knowledge of:

  • Cyber threats and vulnerabilities

  • Adversarial tactics, techniques, and procedures

  • Incident response and handling methodologies

  • Risk management processes

  • IT architecture and operations (computing, network, storage & cloud)

  • Computer networking concepts and protocols, and network security methodologies

  • Responding to audit and regulatory requirements

  • Familiarization of the MITRE ATT&CK Framework.

• Ability to work nights, weekends, and/or holidays in the event of an incident response emergency

Why Join Cyberfort

At Cyberfort, we’re committed to creating an environment where our people can do their best work, develop their careers and feel part of something meaningful. Alongside a supportive culture and opportunities to grow, we've offer a package that supports your health, wellbeing, finances, development and work‑life balance, helping you feel your best both inside and outside of work. Our benefits include:

• 25 days annual leave, plus bank holidays, and your birthday day off

• The option to buy and sell annual leave

• Hybrid and flexible working opportunities (where applicable)

• Enhanced family‑friendly policies

• Company pension scheme

• Life assurance

• Private Medical Insurance and wellbeing support

• Professional training, certifications and learning opportunities

• Employee referral bonus scheme

• Recognition and reward programmes

• Electric Car & Cycle to Work scheme

• Discounts and savings through our employee benefits platform

A place where you can be yourself

At Cyberfort, we believe that diverse perspectives make us stronger. We're committed to creating an environment where everyone feels respected, supported and able to be themselves at work.

We know that talent comes in many forms, and we're dedicated to ensuring our recruitment process is accessible and inclusive for all. If there's anything we can do to support you during your application or interview experience, we'd encourage you to let us know.

We're proud to champion inclusion through our partnerships and commitments, including:

• Signatories of the Armed Forces Covenant

• Corporate Members of Neurodiversity in Business

• A Disability Confident Employer

• Supporters of the CyberFirst initiative

We're continually learning, listening and evolving to build a workplace where everyone has the opportunity to thrive, grow and make a meaningful impact.

About Cyberfort

Cyberfort helps organisations stay ahead of cyber threats. We work alongside businesses and public sector organisations to strengthen their security, identify vulnerabilities and respond to threats before they become incidents.

Our expertise spans cyber security consultancy, penetration testing and managed detection and response (MDR). From helping customers understand their cyber risks and improve their security posture, to testing critical systems and providing 24/7 threat monitoring, we deliver practical solutions that help organisations operate with confidence.

What makes Cyberfort different is our people. We combine deep technical expertise with a collaborative, customer‑first approach, building trusted partnerships and helping our customers navigate an ever‑changing threat landscape.

Our Values

At Cyberfort, how we work is just as important as what we do. Our culture is built around five core values: being curious, working as a team, staying agile, taking ownership, and thinking innovatively.

We're looking for individuals who are naturally inquisitive, collaborative, and adaptable people who take pride in their work, are open to learning, and are always looking for ways to improve both themselves and the way we deliver for our customers.