Cyber Defence Analyst: Incident Response, SIEM & SOAR Expert

Plannedlink; West Midlands; On-site; GBP 55,000 - 76,000; Full time

Job summary

Plannedlink in the West Midlands region is seeking a Cyber Defence Analyst to join a growing security team. You will design, deliver and maintain operational cybersecurity capabilities, performing proactive, risk-based monitoring of priority networks to identify threats and respond to incidents.

The role involves mentoring Level 2 analysts, developing dashboards, and coordinating with Level 3 engineers to keep security alerts current and actionable.

Qualifications

• Previous experience with Enterprise ICS/network architectures.
• Experience with SIEM solutions and tuning.
• Mentoring or coaching junior analysts.
• Familiarity with MITRE ATT&CK and Cyber Kill Chain.
• Experience maintaining directory services and virtualization tools.
• Knowledge of security frameworks (ISO, NIST 800-53).
• Experience writing Defence/Government documentation.
• Broad cyber course background (SANS SEC401/501 or equivalent).
• Experience managing cyber incidents and investigations.

Responsibilities

• Develop and integrate security event monitoring and incident management services.
• Respond to security incidents as part of an incident response team.
• Implement metrics and dashboards for visibility of the Enterprise infra.
• Lead a composite cyber response team during incidents and investigations.
• Utilise the SOAR platform for playbook automation and case management.
• Document standard operating procedures and repeatable processes.
• Develop investigative methods using the Authority's tooling to enhance detections.
• Maintain baseline security aligned with threat intelligence and trends.
• Participate in root cause analyses with analysts and engineers.
• Provide SME guidance on information security standards and practices.

Skills

Cyber incident response

Security monitoring

Threat detection

Mentoring junior analysts

Dashboards & metrics

SOAR playbooks

Documentation

Root cause analysis

SME on security standards

Strategic/tactical security guidance

Stakeholder liaison

Incident response leadership

CRM process involvement

Team leadership

Incident investigations

Security governance

Tools

SOAR platform

Virtualisation software

Microsoft directory services

Job description

Plannedlink in the West Midlands region is seeking a Cyber Defence Analyst to join a growing security team. You will design, deliver and maintain operational cybersecurity capabilities, performing proactive, risk-based monitoring of priority networks to identify threats and respond to incidents.

The role involves mentoring Level 2 analysts, developing dashboards, and coordinating with Level 3 engineers to keep security alerts current and actionable.