Defence SOC Analyst – Incident Response & Monitoring

Identifi Global Resources; Rishton; On-site; GBP 65,000 - 101,000; Full time

Job summary

Identifi Global Resources is seeking an experienced SOC Analyst to support a MOD programme in Preston. This 6‑month role is onsite daily and involves vulnerability management, incident handling, and continuous improvement of SOC services in a highly regulated environment.

You will work with SIEM tools, contribute to incident workflows, generate metrics for leadership, and ensure robust, auditable procedures in line with security governance and UK defence standards.

Qualifications

• Experience in SOC operations within government, defence, or critical infrastructure.
• Hands-on experience in Vulnerability management and incident response.
• Understanding of SIEM platforms and detection engineering.
• Familiarity with ITSM tooling, ideally ServiceNow.
• Strong stakeholder management and reporting capability.
• Understanding of regulated environments (MOD, HMG, Defence primes, or similar).
• Exposure to large-scale programmes (e.g. GCAP, major defence or aerospace programmes).

Responsibilities

• Act as the escalation point for all security incidents.
• Conduct Vulnerability Management and incident response activities.
• Prepare report incidents and SOC performance metrics to SOC Leadership.
• Work hands on with SIEM detection tooling and prepare reporting used for the use-case development.
• Contribute to reporting and configuration changes, enhancements, and operational alignment.
• Ensure incident workflows, escalation paths, and operational procedures are robust and auditable.

Skills

SOC operations

Vulnerability management

Incident response

Reporting & metrics

Stakeholder management

Regulated environments

Tools

SIEM platforms

ServiceNow

Job description

Identifi Global Resources is seeking an experienced SOC Analyst to support a MOD programme in Preston. This 6‑month role is onsite daily and involves vulnerability management, incident handling, and continuous improvement of SOC services in a highly regulated environment.

You will work with SIEM tools, contribute to incident workflows, generate metrics for leadership, and ensure robust, auditable procedures in line with security governance and UK defence standards.