Cyber Security SOC Analyst (L1)

Wavenet; Batley; On-site; GBP 28,000 - 36,000; Full time

Benefits offered by this job

Annual Leave 25 days

Private medical coverage

Wellbeing program

Eye care scheme

Job summary

Wavenet in the United Kingdom is seeking a driven Level 1 SOC Analyst to join our Security Operations Center. You will monitor real-time alerts, investigate potential incidents, and respond using leading security tools in a hands-on, client-facing environment.

Under mentorship, you will develop skills in threat detection, incident handling, and rule tuning across Microsoft Sentinel, Defender for Endpoint, CrowdStrike, and Rapid7, while collaborating with experienced analysts and client teams

Qualifications

• Bachelor's degree or equivalent hands‑on experience in cybersecurity or IT.
• Strong attention to detail and adherence to structured incident response processes.
• Familiarity with threat detection, alert tuning, and documentation best practices.

Responsibilities

• Monitor security alerts across SIEM/EDR and triage incidents.
• Investigate incidents and escalate per protocols.
• Collaborate with senior analysts and threat response teams.
• Maintain documentation of investigations and actions taken.
• Provide guidance to clients on incident handling and threat mitigation.
• Contribute to tuning detection rules and building analytics.
• Stay updated on emerging threats and security technologies.

Skills

SIEM & log analysis

KQL / log querying

Threat hunting

EDR tools

Network security concepts

Cloud security (Azure)

Communication skills

Documentation & process

Education

Bachelor's degree in Cybersecurity or IT

Tools

Microsoft Sentinel

Microsoft Defender for Endpoint

CrowdStrike Falcon

Rapid7

Azure Security Center

Job description

Join the Front Line of Cyber Defence

We're seeking a driven and detail-oriented Level 1 SOC Analyst to become part of our expanding Security Operations Center. This is a fantastic opportunity for individuals with foundational knowledge in cybersecurity or IT support who are eager to advance their careers in threat detection, incident response, and real-time security monitoring.

In this dynamic, client-facing role, you'll monitor, investigate, and respond to security alerts using cutting-edge tools such as Microsoft Sentinel, Microsoft Defender for Endpoint, Microsoft Defender XDR, CrowdStrike Falcon, and Rapid7. You'll collaborate closely with experienced analysts, benefit from mentorship, and gain valuable exposure to a wide range of cyber threats and diverse client environments.

Key Responsibilities

• Monitor and triage security alerts across multiple platforms and technologies (SIEM, EDR, XDR, etc.).
• Investigate potential security incidents and escalate according to established protocols.
• Collaborate with senior analysts and threat response teams to resolve incidents effectively.
• Maintain comprehensive documentation of investigations, incidents, and actions taken.
• Provide essential guidance and support to clients regarding incident handling and threat mitigation.
• Assist in the development and fine-tuning of detection rules, threat-hunting queries, and analytics.
• Stay informed about emerging threats, tactics, and technologies to enhance your expertise continually.

Qualifications

Technical Skills

SIEM & Log Analysis

• Experience with SIEM platforms, such as Microsoft Sentinel or Rapid7.
• Proficient in querying and analyzing log data; familiarity with Kusto Query Language (KQL) is a plus.
• Knowledge of alert tuning, correlation rules, and threat hunting methodologies.

Endpoint Security (EDR)

• Hands‑on experience with EDR tools, such as CrowdStrike Falcon, Microsoft Defender for Endpoint, or Carbon Black.
• Ability to interpret endpoint logs and identify signs of compromise.

Malware Analysis (Basic)

• Understanding of malware behaviour, Indicators of Compromise (IoCs), and basic sandboxing or analysis techniques.

Network Security

• Knowledge of key protocols (TCP/IP, HTTP/S, DNS, SMB, RDP) and concepts such as IDS/IPS, VPNs, firewalls, and network‑based threat detection.

Cloud Security

• Familiarity with security monitoring in cloud environments, especially Microsoft Azure.
• Basic understanding of cloud‑native security tools and logging (e.g., Azure Security Center).

Other Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, or a related field – or equivalent hands‑on experience.
• Strong attention to detail and ability to follow structured processes and documentation.
• Excellent communication skills – both written and verbal – for effective client interaction and team collaboration.
• A security‑focused, ethical mindset with a passion for continuous learning.
• Comfortable working in a collaborative, 24/7 shift‑based SOC environment.

Desirable Certifications (Not Mandatory)

• CompTIA Security+ – A foundational certification in cybersecurity.
• Microsoft SC‑200 – Security Operations Analyst (focused on Microsoft Defender and Sentinel).
• BTL1 – Blue Team Level 1, offered by Security Blue Team.

Benefits

• Annual Leave: 25 days per year, increasing by one day per year up to 28 days.
• Health & Wellbeing: Private medical coverage, discounted health plans, virtual GP access, eye care scheme, and employee assistance programme supported by an in‑house Wellbeing Team.