DIG - Level 1 SOC Cyber Analyst

Morson Human Resources Limited; Hereford; On-site; GBP 42,000 - 64,000; Full time

Job summary

Morson Human Resources Limited in Hereford is seeking a SOC Analyst – SC Cleared on a 12-month contract. You will triage alerts, perform first-line investigations, and guide containment steps with the outsourced SOC partner to minimize impact.

As part of the security team you will maintain detailed case notes and timelines, escalate when needed, and stay aware of MITRE ATT&CK techniques and current industry threats in order to strengthen the organisation's threat landscape.

Qualifications

• Experience in a SOC, IT operations, or security support role.
• Understanding of malware, phishing, lateral movement and privilege escalation.
• Knowledge of Windows/Linux logs and authentication systems.
• Familiarity with MITRE ATT&CK and NIST CSF frameworks.

Responsibilities

• Alert triage: Review and assess alerts escalated by the outsourced SOC; validate their accuracy and determine potential impact.
• Initial investigation using available tools (SIEM, device logs, firewall logs, and SIEM alerts).
• Engage with affected users or asset owners to gather information or guide containment steps.
• Escalate confirmed or high severity incidents to Level 2 SOC or internal incident response teams.
• Incident documentation: maintain case notes, timelines, and evidence in the case management system.
• Collaborate as the coordination point between security and the external SOC partner.
• Playbook execution: follow triage/escalation playbooks; suggest improvements.
• Threat awareness: stay updated on threats and MITRE ATT&CK techniques relevant to the threat landscape.

Skills

Alert triage

Initial investigation

Containment guidance

Coordination with SOC partner

Playbook execution

MITRE ATT&CK awareness

Threat awareness

Tools

Microsoft Sentinel

Splunk

Elastic

QRadar

Job description

SOC Analyst – SC Cleared – 12 Month Contract – Hereford

About Your Role:

• Alert Triage: Review and assess alerts escalated by the outsourced SOC; validate their accuracy and determine potential impact.


• Initial Investigation: Perform first-line investigation using available tools (SIEM, Device Logs, firewall logs and SIEM alerts).


• User Interaction: Engage with affected end users or asset owners to collect additional information, verify events, or guide immediate containment steps (e.g. asset isolation, password reset).


• Escalation: Escalate confirmed or high severity incidents to the Level 2 SOC (outsourced) or internal incident response teams, ensuring complete and accurate handoff documentation.


• Incident Documentation: Create and maintain detailed case notes, timelines, and evidence within the case management system to support investigations and compliance requirements.


• Collaboration: Serve as the coordination point between the security team and the external SOC partner, maintaining strong communication and situational awareness.


• Playbook Execution: follow established triage and escalation playbooks; suggest improvements based on recurring issues or inefficiencies.


• Threat Awareness: Maintain awareness of current cyber threats, attacker techniques (MITRE ATT&CK), and industry trends relevant to the organisations threat landscape.

About You:

• Previous experience in a SOC, IT Operations, or security support role.


• Understanding of key security concepts including malware, phishing, lateral movement and privilege escalation.


• Working knowledge of network fundamentals, windows/Linux system logs and authentication systems.


• Working knowledge of SIEM platforms (e.g. Microsoft sentinel, Splunk, Elastic, QRadar).


• Awareness of security frameworks and methodologies (NIST CSF, MITRE ATT&CK, ISO27001).