DV-Cleared Senior SOC Analyst – Critical Infrastructure

Salt Search; Greater London; On-site; GBP 70,000 - 100,000; Full time

Job summary

Salt Search is seeking an experienced SOC Analyst with active DV clearance to join a high-security cyber defence team supporting critical national infrastructure in the UK. This 100% onsite role is based in London, Manchester, Cheltenham or Ipswich and offers a salary between £70,000 and £100,000 per annum.

You will monitor SIEM alerts, perform triage and incident investigations, conduct threat hunting, and coordinate response alongside threat intelligence and incident response teams to

Qualifications

• Active DV clearance is required.
• Experience in a SOC environment (Level 2/3 preferred).
• Proficient with top SIEM platforms and security tooling.
• Experience investigating incidents across Windows and Linux environments.

Responsibilities

• Monitor and analyse security alerts from SIEM and tooling.
• Triage and investigate security events and incidents.
• Conduct threat hunting and identify indicators of compromise.
• Escalate and coordinate incident response activities.
• Analyse endpoint, network and cloud telemetry to improve detections.
• Develop and refine detection rules and use cases.
• Produce detailed investigation and incident reports.
• Collaborate with threat intelligence and IR teams.
• Contribute to SOC process improvement.

Skills

SOC operations

SIEM monitoring

Incident triage

Threat hunting

Windows/Linux security

Network security concepts

MITRE ATT&CK

Tools

Microsoft Sentinel

Splunk

QRadar

ArcSight

Job description

Salt Search is seeking an experienced SOC Analyst with active DV clearance to join a high-security cyber defence team supporting critical national infrastructure in the UK. This 100% onsite role is based in London, Manchester, Cheltenham or Ipswich and offers a salary between £70,000 and £100,000 per annum.

You will monitor SIEM alerts, perform triage and incident investigations, conduct threat hunting, and coordinate response alongside threat intelligence and incident response teams to