Cyber Security Analyst

Digital Waffle; Greater London; On-site; GBP 63,000 - 77,000; Full time

Benefits offered by this job

On-call allowance

Benefits

London on-site access

Job summary

Digital Waffle in London is seeking an experienced Security Analyst to join a 24/7 Security Operations Centre. You will monitor, detect and respond to cyber threats across enterprise environments using Elastic and Splunk, with SC clearance and British nationality required.

The role is on-site with a rotating 4-on/4-off shift pattern and an attractive salary up to £70,000 plus on-call allowance and benefits.

Qualifications

• Experience in a 24/7 SOC or equivalent cyber security environment.
• Hands-on with Elastic and Splunk for monitoring and investigations.
• Strong knowledge of SIEM, log analysis, threat detections.
• Familiarity with MITRE ATT&CK and Cyber Kill Chain.
• Experience with phishing, malware, and identity/network incidents.

Responsibilities

• Monitor security alerts and events across enterprise environments using Elastic and Splunk.
• Investigate, triage and respond to security incidents in line with playbooks and SLAs.
• Perform threat hunting and proactive analysis to identify malicious activity.
• Analyse logs from endpoints, networks, cloud services and security tools to detect suspicious activity.
• Escalate incidents and coordinate with engineering and incident response teams.
• Develop and tune SIEM detection rules to reduce false positives.
• Produce incident reports and maintain documentation.
• Participate in on-call rota and support major incident response when required.
• Contribute to SOC process improvements and tooling.

Skills

SOC experience

Threat hunting

Incident response

Log analysis

Windows

Linux

Active Directory

AWS/Azure

Communication skills

Tools

Elastic

Splunk

Job description

Location: London (On-site Shift Pattern)

Salary: Up to £70,000 + On-Call Allowance + Benefits

Security Clearance: Active SC Clearance required (Must be a British National and eligible to obtain higher levels of UK security clearance)

We're working with a leading organisation supporting critical national security programmes, who are looking to recruit an experienced Security Analyst to join their 24/7 Security Operations Centre (SOC)

You'll play a key role in monitoring, detecting and responding to cyber security threats across complex enterprise environments, working with industry-leading technologies including Elastic and Splunk. This is an excellent opportunity for someone who thrives in a fast-paced operational environment and enjoys working on high-profile, mission-critical systems.

Key Responsibilities

• Monitor security alerts and events across enterprise environments using Elastic and Splunk
• Investigate, triage and respond to security incidents in line with established playbooks and SLAs
• Perform threat hunting and proactive analysis to identify malicious activity.
• Analyse logs from endpoints, networks, cloud services and security tools to detect suspicious behaviour
• Escalate incidents where appropriate and work closely with engineering and incident response teams
• Develop and improve SIEM detection rules and alert tuning to reduce false positives
• Produce clear incident reports and maintain accurate documentation
• Participate in the on-call rota and support major incident response when required
• Contribute to the continuous improvement of SOC processes, tooling and operational procedures

Skills & Experience

• Experience working within a 24/7 Security Operations Centre (SOC) or equivalent cyber security environment
• Strong hands-on experience using Elastic and/or Splunk for security monitoring and investigations
• Good understanding of SIEM technologies, log analysis and threat detections
• Knowledge of security frameworks such as MITRE ATT&CK and the Cyber Kill Chain
• Experience investigating phishing, malware, endpoint, identity and network security incidents
• Familiarity with Windows, Linux, Active Directory and cloud environments (AWS, Azure or Microsoft 365)
• Strong analytical and problem-solving skills with the ability to make decisions under pressure
• Excellent written and verbal communication skills
• Active SC Clearance
• British National, with eligibility to obtain higher levels of UK security clearance
• Willingness to work a 24/7 rotating shift pattern (4 days on rotation)
• Able to work from the London office as required