Cyber Defence Analyst – 24/7 CSOC

00139 LEIDOS INNOVATIONS UK LTD.; Farnborough; On-site; GBP 37,000 - 46,000; Full time

Benefits offered by this job

Contributory Pension Scheme

Private Medical Insurance

33 days Annual Leave (including public

Flexi-Time

Job summary

Leidos is seeking a Cyber Defence Analyst in Farnborough to monitor security alerts, investigate incidents and collaborate with customers to restore secure operations. You will use SIEM/EDR/XDR tools, apply CTI, and align findings with MITRE ATT&CK frameworks while working in a 24x7 on-site CSOC setting.

The role requires SC to start, DV for some programmes, and is supported by a comprehensive rewards package including pension, private medical insurance and generous leave.

Qualifications

• Experience investigating security events and incidents in a CSOC or comparable environment, or demonstrable transferable skills and the ability to develop rapidly.
• Working knowledge of Microsoft Sentinel, Microsoft Defender XDR, Microsoft Defender Vulnerability Management, Microsoft Azure and AWS.
• Experience of proactive threat hunting and using validated investigation outcomes to improve detection and response.
• Understanding of CIA triad and its practical application in assessing technical and business impact.
• Current awareness of malware, ransomware and advanced persistent threat activity affecting cloud and on‑prem environments.
• Practical knowledge of MITRE ATT&CK and its use in describing tactics, techniques, sub-techniques and observed adversary behaviour.
• Experience working within change-controlled environments and following authorised operational procedures.

Responsibilities

• Monitor security alerts continuously and act in line with service priorities to protect customer services.
• Analyse alerts and telemetry from SIEM/EDR/XDR to determine context and business impact.
• Distinguish true positives from false positives and document a risk-based rationale.
• Create and maintain incident records with evidence, timestamps, assets, indicators and actions.
• Correlate logs across sources to identify patterns and IOCs for faster investigations.
• Map adversary behaviour to MITRE ATT&CK tactics and techniques for clearer reporting.
• Create, test and tune threat-hunting queries and convert findings into detection rules.
• Apply Cyber Threat Intelligence to investigations and remediation actions.
• Assess vulnerabilities and communicate impact and remediation priorities.

Skills

CSOC experience

MITRE ATT&CK

SIEM/EDR/XDR

Cloud security

Tools

Microsoft Sentinel

Microsoft Defender XDR

Azure

AWS

Job description

Leidos is seeking a Cyber Defence Analyst in Farnborough to monitor security alerts, investigate incidents and collaborate with customers to restore secure operations. You will use SIEM/EDR/XDR tools, apply CTI, and align findings with MITRE ATT&CK frameworks while working in a 24x7 on-site CSOC setting.

The role requires SC to start, DV for some programmes, and is supported by a comprehensive rewards package including pension, private medical insurance and generous leave.